diff options
186 files changed, 33897 insertions, 14250 deletions
diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md index 2c8a9873..c1eaa038 100644 --- a/.github/PULL_REQUEST_TEMPLATE.md +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -19,4 +19,4 @@ ## Checklist: <!--- Go over all the following points, and put an `x` in all the boxes that apply. --> <!--- If you're unsure about any of these, don't hesitate to ask. We're here to help! --> -- [ ] I have read the [**CONTRIBUTING**](https://github.com/vyos/vyos-documentation/blob/master/CONTRIBUTING.md) document
\ No newline at end of file +- [ ] I have read the [**CONTRIBUTING**](https://github.com/vyos/vyos-documentation/blob/current/CONTRIBUTING.md) document
\ No newline at end of file diff --git a/.github/workflows/submodules.yml b/.github/workflows/submodules.yml index 4387d7fe..24b6c505 100644 --- a/.github/workflows/submodules.yml +++ b/.github/workflows/submodules.yml @@ -5,7 +5,7 @@ on: # 06:00 UTC on Monday - cron: '0 6 * * 1' jobs: - update_master: + update_current: runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 @@ -36,7 +36,7 @@ jobs: body: | Autoupdate vyos-1x submodule update releasenotes - branch: update-dependencies-master + branch: update-dependencies-current delete-branch: true update_sagitta: diff --git a/.github/workflows/update-translations.yml b/.github/workflows/update-translations.yml index f1ff4ba1..6ab53323 100644 --- a/.github/workflows/update-translations.yml +++ b/.github/workflows/update-translations.yml @@ -48,17 +48,15 @@ jobs: - name: set file ownership run: | sudo chown -R 1001 docs/_locale - + - name: Create Pull Request - uses: peter-evans/create-pull-request@v3 + uses: peter-evans/create-pull-request@v6 with: - token: ${{secrets.GITHUB_TOKEN}} - add-paths: docs/_locale/* + token: ${{ secrets.PR_ACTION_DOCUMENTATION_SUBMODULE_UPDATE }} commit-message: "Github: update translations" - committer: GitHub <noreply@github.com> - author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com> title: "Github: update translations" body: | Generate, upload new and download translation files - branch: update-translations-master + branch: update-translations-current delete-branch: true + diff --git a/.readthedocs.yml b/.readthedocs.yml index 3d791ad1..f0ea8c49 100644 --- a/.readthedocs.yml +++ b/.readthedocs.yml @@ -18,8 +18,8 @@ sphinx: # configuration: mkdocs.yml # Optionally build your docs in additional formats such as PDF -#formats: -# - pdf +formats: + - pdf # Optionally set the version of Python and requirements required to build your docs python: @@ -11,10 +11,10 @@ Our old wiki with documentation from the VyOS 1.1.x and early 1.2.0 era can stil Our version follows the very same branching scheme as the VyOS source modules itself. We maintain one documentation branch per VyOS release. The default -branch that contains the most recent VyOS documentation is called `master` +branch that contains the most recent VyOS documentation is called `current` and matches the latest VyOS release which is 1.4 at the time. -All new documentation enhancements go to the `master` branch. If those changes +All new documentation enhancements go to the `current` branch. If those changes are beneficial for previous VyOS documentation versions they will be cherry-picked to the appropriate branch(es). diff --git a/docs/_include/vyos-1x b/docs/_include/vyos-1x -Subproject f1fe8df14abef2add43d8422160322d31d7e286 +Subproject f980f8b8010a9681c387d47c476254c89b0c4a2 diff --git a/docs/_locale/de/LC_MESSAGES/automation.mo b/docs/_locale/de/LC_MESSAGES/automation.mo Binary files differindex cb431fe9..d215e597 100644 --- a/docs/_locale/de/LC_MESSAGES/automation.mo +++ b/docs/_locale/de/LC_MESSAGES/automation.mo diff --git a/docs/_locale/de/LC_MESSAGES/cli.mo b/docs/_locale/de/LC_MESSAGES/cli.mo Binary files differindex 1722898e..02f6fdee 100644 --- a/docs/_locale/de/LC_MESSAGES/cli.mo +++ b/docs/_locale/de/LC_MESSAGES/cli.mo diff --git a/docs/_locale/de/LC_MESSAGES/configexamples.mo b/docs/_locale/de/LC_MESSAGES/configexamples.mo Binary files differindex 4c237a80..a4fde59a 100644 --- a/docs/_locale/de/LC_MESSAGES/configexamples.mo +++ b/docs/_locale/de/LC_MESSAGES/configexamples.mo diff --git a/docs/_locale/de/LC_MESSAGES/configuration.mo b/docs/_locale/de/LC_MESSAGES/configuration.mo Binary files differindex 5d09f4b5..7318a633 100644 --- a/docs/_locale/de/LC_MESSAGES/configuration.mo +++ b/docs/_locale/de/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/de/LC_MESSAGES/contributing.mo b/docs/_locale/de/LC_MESSAGES/contributing.mo Binary files differindex affcbb27..13fb0c19 100644 --- a/docs/_locale/de/LC_MESSAGES/contributing.mo +++ b/docs/_locale/de/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/de/LC_MESSAGES/copyright.mo b/docs/_locale/de/LC_MESSAGES/copyright.mo Binary files differindex 23772d99..b0418135 100644 --- a/docs/_locale/de/LC_MESSAGES/copyright.mo +++ b/docs/_locale/de/LC_MESSAGES/copyright.mo diff --git a/docs/_locale/de/LC_MESSAGES/documentation.mo b/docs/_locale/de/LC_MESSAGES/documentation.mo Binary files differindex bd88ebc5..e078ffb1 100644 --- a/docs/_locale/de/LC_MESSAGES/documentation.mo +++ b/docs/_locale/de/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/de/LC_MESSAGES/installation.mo b/docs/_locale/de/LC_MESSAGES/installation.mo Binary files differindex d04f2532..427f08fd 100644 --- a/docs/_locale/de/LC_MESSAGES/installation.mo +++ b/docs/_locale/de/LC_MESSAGES/installation.mo diff --git a/docs/_locale/de/LC_MESSAGES/quick-start.mo b/docs/_locale/de/LC_MESSAGES/quick-start.mo Binary files differindex c14e354d..bd8c13a0 100644 --- a/docs/_locale/de/LC_MESSAGES/quick-start.mo +++ b/docs/_locale/de/LC_MESSAGES/quick-start.mo diff --git a/docs/_locale/de/automation.pot b/docs/_locale/de/automation.pot index efd67b47..acd55638 100644 --- a/docs/_locale/de/automation.pot +++ b/docs/_locale/de/automation.pot @@ -8,55 +8,100 @@ msgstr "" "Language: de\n" "Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" +#: ../../automation/terraform/index.rst:15 +msgid "# terraformAZ # terraformvSphere # terraformGoogle" +msgstr "# terraformAZ # terraformvSphere # terraformGoogle" + +#: ../../automation/vyos-terraform.rst:707 +msgid "#az login" +msgstr "#az login" + +#: ../../automation/vyos-terraform.rst:261 +#: ../../automation/vyos-terraform.rst:283 +#: ../../automation/vyos-terraform.rst:711 +#: ../../automation/vyos-terraform.rst:731 +#: ../../automation/vyos-terraform.rst:1008 +#: ../../automation/vyos-terraform.rst:1029 +msgid "#cd /your folder" +msgstr "#cd /your folder" + +#: ../../automation/vyos-terraform.rst:287 +#: ../../automation/vyos-terraform.rst:735 +#: ../../automation/vyos-terraform.rst:1033 +msgid "#terraform apply" +msgstr "#terraform apply" + +#: ../../automation/vyos-terraform.rst:263 +#: ../../automation/vyos-terraform.rst:713 +#: ../../automation/vyos-terraform.rst:1010 +msgid "#terraform init" +msgstr "#terraform init" + +#: ../../automation/vyos-terraform.rst:285 +#: ../../automation/vyos-terraform.rst:733 +#: ../../automation/vyos-terraform.rst:1031 +msgid "#terraform plan" +msgstr "#terraform plan" + +#: ../../automation/vyos-terraform.rst:289 +#: ../../automation/vyos-terraform.rst:737 +#: ../../automation/vyos-terraform.rst:1035 +msgid "#yes" +msgstr "#yes" + +#: ../../automation/cloud-init.rst:366 +msgid "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." +msgstr "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." + #: ../../automation/cloud-init.rst:363 msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." msgstr "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." -#: ../../automation/cloud-init.rst:305 +#: ../../automation/cloud-init.rst:308 msgid "**meta-data**: empty file (required)." msgstr "**meta-data**: empty file (required)." -#: ../../automation/cloud-init.rst:300 +#: ../../automation/cloud-init.rst:303 msgid "**network-config**: file that will indicate to avoid dhcp client on first interface." msgstr "**network-config**: file that will indicate to avoid dhcp client on first interface." -#: ../../automation/cloud-init.rst:333 +#: ../../automation/cloud-init.rst:336 msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface." msgstr "**network-config** file only has configuration that disables the automatic dhcp client on first interface." -#: ../../automation/cloud-init.rst:303 +#: ../../automation/cloud-init.rst:306 msgid "**user-data**: includes vyos-commands." msgstr "**user-data**: includes vyos-commands." -#: ../../automation/cloud-init.rst:314 +#: ../../automation/cloud-init.rst:317 msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" msgstr "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" -#: ../../automation/vyos-api.rst:322 +#: ../../automation/vyos-api.rst:355 msgid "/config-file" msgstr "/config-file" -#: ../../automation/vyos-api.rst:265 +#: ../../automation/vyos-api.rst:298 msgid "/configure" msgstr "/configure" -#: ../../automation/vyos-api.rst:246 +#: ../../automation/vyos-api.rst:278 msgid "/generate" msgstr "/generate" -#: ../../automation/vyos-api.rst:184 +#: ../../automation/vyos-api.rst:216 msgid "/image" msgstr "/image" -#: ../../automation/vyos-api.rst:165 +#: ../../automation/vyos-api.rst:197 msgid "/poweroff" msgstr "/poweroff" -#: ../../automation/vyos-api.rst:147 +#: ../../automation/vyos-api.rst:179 msgid "/reboot" msgstr "/reboot" -#: ../../automation/vyos-api.rst:129 +#: ../../automation/vyos-api.rst:161 msgid "/reset" msgstr "/reset" @@ -64,19 +109,276 @@ msgstr "/reset" msgid "/retrieve" msgstr "/retrieve" -#: ../../automation/vyos-api.rst:222 +#: ../../automation/vyos-api.rst:254 msgid "/show" msgstr "/show" +#: ../../automation/vyos-terraform.rst:993 +msgid "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" +msgstr "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:61 +msgid "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/vyos-terraform.rst:692 +msgid "1.1 Create an account with Azure" +msgstr "1.1 Create an account with Azure" + +#: ../../automation/vyos-terraform.rst:243 +msgid "1.2 Create a key pair and download your .pem key" +msgstr "1.2 Create a key pair and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:63 +msgid "1.2 Create a key pair_ and download your .pem key" +msgstr "1.2 Create a key pair_ and download your .pem key" + +#: ../../automation/vyos-terraform.rst:245 +msgid "1.3 Create a security group for the new VyOS instance" +msgstr "1.3 Create a security group for the new VyOS instance" + +#: ../../automation/terraform/terraformAWS.rst:70 +msgid "1.3 Create a security group_ for the new VyOS instance and open all traffic" +msgstr "1.3 Create a security group_ for the new VyOS instance and open all traffic" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/terraform/terraformAWS.rst:266 +msgid "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." +msgstr "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." + +#: ../../automation/terraform/terraformvSphere.rst:23 +msgid "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" +msgstr "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:77 +#: ../../automation/terraform/terraformAZ.rst:54 +#: ../../automation/terraform/terraformGoogle.rst:76 +#: ../../automation/terraform/terraformvSphere.rst:53 +msgid "1 Create an UNIX instance whenever you want (local, cloud, and so on)" +msgstr "1 Create an UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:54 +#: ../../automation/terraform/terraformAZ.rst:26 +#: ../../automation/terraform/terraformGoogle.rst:52 +#: ../../automation/terraform/terraformvSphere.rst:29 +msgid "1 Create an UNIX or Windows instance" +msgstr "1 Create an UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:29 +msgid "1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/terraform/terraformAZ.rst:21 +msgid "1 Create an account with Azure" +msgstr "1 Create an account with Azure" + +#: ../../automation/terraform/terraformGoogle.rst:22 +msgid "1 Create an account with google cloud and a new project" +msgstr "1 Create an account with google cloud and a new project" + +#: ../../automation/terraform/terraformGoogle.rst:344 +msgid "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." +msgstr "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." + +#: ../../automation/terraform/terraformAWS.rst:86 +msgid "2.1 Create a0 UNIX or Windows instance" +msgstr "2.1 Create a0 UNIX or Windows instance" + +#: ../../automation/vyos-terraform.rst:250 +#: ../../automation/vyos-terraform.rst:697 +#: ../../automation/vyos-terraform.rst:998 +msgid "2.1 Create a UNIX or Windows instance" +msgstr "2.1 Create a UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:88 +msgid "2.2 Download and install Terraform" +msgstr "2.2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:90 +msgid "2.3 Create the folder for example /root/awsterraform" +msgstr "2.3 Create the folder for example /root/awsterraform" + +#: ../../automation/vyos-terraform.rst:254 +msgid "2.3 Create the folder for example ../awsvyos/" +msgstr "2.3 Create the folder for example ../awsvyos/" + +#: ../../automation/vyos-terraform.rst:701 +msgid "2.3 Create the folder for example ../azvyos/" +msgstr "2.3 Create the folder for example ../azvyos/" + +#: ../../automation/vyos-terraform.rst:1002 +msgid "2.3 Create the folder for example ../vsphere/" +msgstr "2.3 Create the folder for example ../vsphere/" + +#: ../../automation/vyos-terraform.rst:1004 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project" + +#: ../../automation/vyos-terraform.rst:703 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" + +#: ../../automation/terraform/terraformAWS.rst:96 +msgid "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" +msgstr "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" + +#: ../../automation/vyos-terraform.rst:256 +msgid "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" +msgstr "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" + +#: ../../automation/vyos-terraform.rst:705 +msgid "2.5 Login with Azure using the command" +msgstr "2.5 Login with Azure using the command" + +#: ../../automation/terraform/terraformAWS.rst:98 +msgid "2.5 Type the commands :" +msgstr "2.5 Type the commands :" + +#: ../../automation/terraform/terraformAZ.rst:44 +msgid "2.6 Type the commands :" +msgstr "2.6 Type the commands :" + +#: ../../automation/terraform/terraformAWS.rst:31 +msgid "2 Create a key pair_ and download your .pem key" +msgstr "2 Create a key pair_ and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:79 +#: ../../automation/terraform/terraformAZ.rst:56 +#: ../../automation/terraform/terraformGoogle.rst:78 +#: ../../automation/terraform/terraformvSphere.rst:55 +msgid "2 Download and install Ansible" +msgstr "2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:56 +#: ../../automation/terraform/terraformAZ.rst:28 +#: ../../automation/terraform/terraformGoogle.rst:54 +#: ../../automation/terraform/terraformvSphere.rst:31 +msgid "2 Download and install Terraform" +msgstr "2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:270 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" + +#: ../../automation/terraform/terraformGoogle.rst:347 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" + +#: ../../automation/vyos-terraform.rst:268 +#: ../../automation/vyos-terraform.rst:718 +#: ../../automation/vyos-terraform.rst:1016 +msgid "3.1 Create a UNIX instance" +msgstr "3.1 Create a UNIX instance" + +#: ../../automation/terraform/terraformAWS.rst:109 +msgid "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" +msgstr "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:111 +msgid "3.2 Download and install Ansible" +msgstr "3.2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:113 +msgid "3.3 Create the folder for example /root/aws/" +msgstr "3.3 Create the folder for example /root/aws/" + +#: ../../automation/vyos-terraform.rst:722 +msgid "3.3 Create the folder for example /root/az/" +msgstr "3.3 Create the folder for example /root/az/" + +#: ../../automation/vyos-terraform.rst:1020 +msgid "3.3 Create the folder for example /root/vsphere/" +msgstr "3.3 Create the folder for example /root/vsphere/" + +#: ../../automation/vyos-terraform.rst:274 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" + +#: ../../automation/vyos-terraform.rst:724 +#: ../../automation/vyos-terraform.rst:1022 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" + +#: ../../automation/terraform/terraformAWS.rst:115 +msgid "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAWS.rst:81 +msgid "3 Create the folder for example /root/aws/" +msgstr "3 Create the folder for example /root/aws/" + +#: ../../automation/terraform/terraformAWS.rst:58 +msgid "3 Create the folder for example /root/awsterraform" +msgstr "3 Create the folder for example /root/awsterraform" + +#: ../../automation/terraform/terraformAZ.rst:58 +msgid "3 Create the folder for example /root/az/" +msgstr "3 Create the folder for example /root/az/" + +#: ../../automation/terraform/terraformAZ.rst:30 +msgid "3 Create the folder for example /root/azvyos/" +msgstr "3 Create the folder for example /root/azvyos/" + +#: ../../automation/terraform/terraformGoogle.rst:56 +msgid "3 Create the folder for example /root/google" +msgstr "3 Create the folder for example /root/google" + +#: ../../automation/terraform/terraformGoogle.rst:80 +msgid "3 Create the folder for example /root/google/" +msgstr "3 Create the folder for example /root/google/" + +#: ../../automation/terraform/terraformvSphere.rst:33 +msgid "3 Create the folder for example /root/vsphereterraform" +msgstr "3 Create the folder for example /root/vsphereterraform" + +#: ../../automation/terraform/terraformvSphere.rst:57 +msgid "3 Create the folder for example /root/vsphereterraform/" +msgstr "3 Create the folder for example /root/vsphereterraform/" + +#: ../../automation/terraform/terraformAWS.rst:123 +msgid "4.1 Type the commands on your Terrafom instance:" +msgstr "4.1 Type the commands on your Terrafom instance:" + +#: ../../automation/terraform/terraformAWS.rst:83 +msgid "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAZ.rst:60 +msgid "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" +msgstr "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" + +#: ../../automation/terraform/terraformGoogle.rst:82 +msgid "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" +msgstr "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" + +#: ../../automation/terraform/terraformvSphere.rst:59 +msgid "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" +msgstr "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" + #: ../../automation/vyos-api.rst:41 msgid "API Endpoints" msgstr "API Endpoints" +#: ../../automation/terraform/terraformAWS.rst:26 +msgid "AWS" +msgstr "AWS" + +#: ../../automation/vyos-terraform.rst:233 +msgid "AWS_terraform_ansible_single_vyos_instance" +msgstr "AWS_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:273 +msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." + #: ../../automation/cloud-init.rst:270 msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." -#: ../../automation/cloud-init.rst:63 +#: ../../automation/cloud-init.rst:64 msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." msgstr "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." @@ -84,7 +386,7 @@ msgstr "A cloud-config document is written in YAML. The file must begin with ``# msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." msgstr "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." -#: ../../automation/cloud-init.rst:82 +#: ../../automation/cloud-init.rst:83 msgid "A single-quote symbol is not allowed inside command or value." msgstr "A single-quote symbol is not allowed inside command or value." @@ -92,18 +394,53 @@ msgstr "A single-quote symbol is not allowed inside command or value." msgid "Accept minion key" msgstr "Accept minion key" +#: ../../automation/terraform/terraformAWS.rst:255 +msgid "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformAZ.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformGoogle.rst:333 +msgid "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformvSphere.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/cloud-init.rst:92 +msgid "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." +msgstr "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." + #: ../../automation/vyos-api.rst:15 msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." msgstr "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." -#: ../../automation/cloud-init.rst:115 +#: ../../automation/terraform/terraformAWS.rst:539 +#: ../../automation/terraform/terraformAZ.rst:484 +#: ../../automation/terraform/terraformGoogle.rst:705 +#: ../../automation/terraform/terraformvSphere.rst:397 +msgid "All files about the article can be found here_" +msgstr "All files about the article can be found here_" + +#: ../../automation/cloud-init.rst:119 msgid "All of these can be overridden using the configuration in user-data." msgstr "All of these can be overridden using the configuration in user-data." -#: ../../automation/cloud-init.rst:256 +#: ../../automation/terraform/terraformAWS.rst:267 +msgid "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/cloud-init.rst:259 msgid "Also, this lab considers:" msgstr "Also, this lab considers:" +#: ../../automation/terraform/terraformAWS.rst:74 +#: ../../automation/terraform/terraformAZ.rst:51 +#: ../../automation/terraform/terraformGoogle.rst:73 +#: ../../automation/terraform/terraformvSphere.rst:50 #: ../../automation/vyos-ansible.rst:6 msgid "Ansible" msgstr "Ansible" @@ -121,7 +458,16 @@ msgstr "At this step we can get some op-mode information from VyOS nodes:" msgid "Authentication" msgstr "Authentication" -#: ../../automation/cloud-init.rst:241 +#: ../../automation/terraform/terraformAZ.rst:19 +msgid "Azure" +msgstr "Azure" + +#: ../../automation/vyos-terraform.rst:684 +#: ../../automation/vyos-terraform.rst:985 +msgid "Azure_terraform_ansible_single_vyos_instance" +msgstr "Azure_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:244 msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." msgstr "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." @@ -145,11 +491,11 @@ msgstr "Check that salt master can communicate with minions" msgid "Cloud-config modules" msgstr "Cloud-config modules" -#: ../../automation/cloud-init.rst:420 +#: ../../automation/cloud-init.rst:423 msgid "Cloud-init `network-config-docs`_." msgstr "Cloud-init `network-config-docs`_." -#: ../../automation/cloud-init.rst:239 +#: ../../automation/cloud-init.rst:242 msgid "Cloud-init on Proxmox" msgstr "Cloud-init on Proxmox" @@ -157,7 +503,7 @@ msgstr "Cloud-init on Proxmox" msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." msgstr "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." -#: ../../automation/cloud-init.rst:120 +#: ../../automation/cloud-init.rst:124 msgid "Command Execution at Initial Boot" msgstr "Command Execution at Initial Boot" @@ -165,11 +511,11 @@ msgstr "Command Execution at Initial Boot" msgid "Command Scripting" msgstr "Command Scripting" -#: ../../automation/cloud-init.rst:356 +#: ../../automation/cloud-init.rst:359 msgid "Command for generating ``seed.iso``" msgstr "Command for generating ``seed.iso``" -#: ../../automation/cloud-init.rst:78 +#: ../../automation/cloud-init.rst:79 msgid "Commands requirements:" msgstr "Commands requirements:" @@ -186,51 +532,55 @@ msgstr "Configuration" msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" msgstr "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" -#: ../../automation/vyos-pyvyos.rst:94 +#: ../../automation/vyos-pyvyos.rst:102 msgid "Configure, then Delete Object" msgstr "Configure, then Delete Object" -#: ../../automation/vyos-pyvyos.rst:141 +#: ../../automation/vyos-pyvyos.rst:149 msgid "Configure, then Load File" msgstr "Configure, then Load File" -#: ../../automation/vyos-pyvyos.rst:101 +#: ../../automation/vyos-pyvyos.rst:109 msgid "Configure, then Save" msgstr "Configure, then Save" -#: ../../automation/vyos-pyvyos.rst:108 +#: ../../automation/vyos-pyvyos.rst:116 msgid "Configure, then Save File" msgstr "Configure, then Save File" -#: ../../automation/vyos-pyvyos.rst:68 +#: ../../automation/vyos-pyvyos.rst:76 msgid "Configure, then Set" msgstr "Configure, then Set" -#: ../../automation/vyos-pyvyos.rst:85 +#: ../../automation/vyos-pyvyos.rst:93 msgid "Configure, then Show Object" msgstr "Configure, then Show Object" -#: ../../automation/vyos-pyvyos.rst:77 +#: ../../automation/vyos-pyvyos.rst:85 msgid "Configure, then Show a Single Object Value" msgstr "Configure, then Show a Single Object Value" +#: ../../automation/terraform/index.rst:5 +msgid "Content" +msgstr "Content" + #: ../../automation/vyos-napalm.rst:89 msgid "Content of commands.conf" msgstr "Content of commands.conf" -#: ../../automation/cloud-init.rst:337 +#: ../../automation/cloud-init.rst:340 msgid "Content of network-config file:" msgstr "Content of network-config file:" -#: ../../automation/cloud-init.rst:351 +#: ../../automation/cloud-init.rst:354 msgid "Create seed.iso" msgstr "Create seed.iso" -#: ../../automation/cloud-init.rst:189 +#: ../../automation/cloud-init.rst:193 msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." msgstr "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." -#: ../../automation/cloud-init.rst:368 +#: ../../automation/cloud-init.rst:371 msgid "Creating the VM" msgstr "Creating the VM" @@ -238,10 +588,38 @@ msgstr "Creating the VM" msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." msgstr "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." -#: ../../automation/cloud-init.rst:113 +#: ../../automation/cloud-init.rst:117 msgid "DHCP on first Ethernet interface if no network configuration is provided." msgstr "DHCP on first Ethernet interface if no network configuration is provided." +#: ../../automation/terraform/terraformAWS.rst:6 +msgid "Deploying VyOS in the AWS cloud" +msgstr "Deploying VyOS in the AWS cloud" + +#: ../../automation/terraform/terraformAZ.rst:6 +msgid "Deploying VyOS in the Azure cloud" +msgstr "Deploying VyOS in the Azure cloud" + +#: ../../automation/terraform/terraformGoogle.rst:6 +msgid "Deploying VyOS in the google cloud" +msgstr "Deploying VyOS in the google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:6 +msgid "Deploying VyOS in the vSphere infrastructure" +msgstr "Deploying VyOS in the vSphere infrastructure" + +#: ../../automation/terraform/terraformAWS.rst:39 +msgid "Deploying vyos in the AWS cloud" +msgstr "Deploying vyos in the AWS cloud" + +#: ../../automation/vyos-terraform.rst:299 +msgid "Deploying vyos in the Azure cloud" +msgstr "Deploying vyos in the Azure cloud" + +#: ../../automation/vyos-terraform.rst:742 +msgid "Deploying vyos in the Vsphere infrastructia" +msgstr "Deploying vyos in the Vsphere infrastructia" + #: ../../automation/vyos-netmiko.rst:12 msgid "Example" msgstr "Example" @@ -274,10 +652,46 @@ msgstr "Executing pre-hooks/post-hooks Scripts" msgid "File contents" msgstr "File contents" -#: ../../automation/cloud-init.rst:284 +#: ../../automation/terraform/terraformAWS.rst:476 +msgid "File contents of Ansible for AWS" +msgstr "File contents of Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:426 +msgid "File contents of Ansible for Azure" +msgstr "File contents of Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:651 +msgid "File contents of Ansible for google cloud" +msgstr "File contents of Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:338 +msgid "File contents of Ansible for vSphere" +msgstr "File contents of Ansible for vSphere" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "File contents of Terrafom for AWS" +msgstr "File contents of Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:93 +msgid "File contents of Terrafom for Azure" +msgstr "File contents of Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:375 +msgid "File contents of Terrafom for google cloud" +msgstr "File contents of Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:96 +msgid "File contents of Terrafom for vSphere" +msgstr "File contents of Terrafom for vSphere" + +#: ../../automation/cloud-init.rst:287 msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" msgstr "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" +#: ../../automation/cloud-init.rst:350 +msgid "Finally, file **meta-data** has no content, but it's required." +msgstr "Finally, file **meta-data** has no content, but it's required." + #: ../../automation/cloud-init.rst:347 msgid "Finaly, file **meta-data** has no content, but it's required." msgstr "Finaly, file **meta-data** has no content, but it's required." @@ -290,11 +704,15 @@ msgstr "For configuration/upgrade management issues, modification of this script msgid "For configuration and enabling the API see :ref:`http-api`" msgstr "For configuration and enabling the API see :ref:`http-api`" +#: ../../automation/vyos-api.rst:130 +msgid "For example, check an existing path:" +msgstr "For example, check an existing path:" + #: ../../automation/vyos-api.rst:109 msgid "For example, get the addresses of a ``dum0`` interface." msgstr "For example, get the addresses of a ``dum0`` interface." -#: ../../automation/vyos-api.rst:226 +#: ../../automation/vyos-api.rst:258 msgid "For example, show which images are installed." msgstr "For example, show which images are installed." @@ -302,19 +720,27 @@ msgstr "For example, show which images are installed." msgid "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." msgstr "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." -#: ../../automation/cloud-init.rst:411 +#: ../../automation/cloud-init.rst:221 +msgid "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." +msgstr "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." + +#: ../../automation/cloud-init.rst:414 msgid "From cli or GUI, power on VM, and after it boots, verify configuration" msgstr "From cli or GUI, power on VM, and after it boots, verify configuration" -#: ../../automation/vyos-pyvyos.rst:123 +#: ../../automation/terraform/terraformvyos.rst:26 +msgid "General commands that we will use for running Terraform scripts" +msgstr "General commands that we will use for running Terraform scripts" + +#: ../../automation/vyos-pyvyos.rst:131 msgid "Generate Object" msgstr "Generate Object" -#: ../../automation/cloud-init.rst:268 +#: ../../automation/cloud-init.rst:271 msgid "Generate qcow image" msgstr "Generate qcow image" -#: ../../automation/vyos-pyvyos.rst:24 +#: ../../automation/vyos-pyvyos.rst:32 msgid "Getting Started" msgstr "Getting Started" @@ -322,27 +748,47 @@ msgstr "Getting Started" msgid "Here is a simple example:" msgstr "Here is a simple example:" -#: ../../automation/cloud-init.rst:91 +#: ../../automation/cloud-init.rst:95 msgid "Here is an example cloud-config that appends configuration at the time of first boot." msgstr "Here is an example cloud-config that appends configuration at the time of first boot." -#: ../../automation/cloud-init.rst:377 +#: ../../automation/terraform/terraformAWS.rst:23 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" + +#: ../../automation/terraform/terraformAZ.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" + +#: ../../automation/vyos-terraform.rst:987 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" + +#: ../../automation/terraform/terraformGoogle.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" + +#: ../../automation/terraform/terraformvSphere.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" + +#: ../../automation/cloud-init.rst:380 msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." msgstr "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." -#: ../../automation/cloud-init.rst:81 +#: ../../automation/cloud-init.rst:82 msgid "If command ends in a value, it must be inside single quotes." msgstr "If command ends in a value, it must be inside single quotes." -#: ../../automation/cloud-init.rst:250 +#: ../../automation/cloud-init.rst:253 msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." msgstr "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." -#: ../../automation/cloud-init.rst:225 +#: ../../automation/cloud-init.rst:228 msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." msgstr "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." -#: ../../automation/cloud-init.rst:153 +#: ../../automation/cloud-init.rst:157 msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." msgstr "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." @@ -350,11 +796,11 @@ msgstr "If you need to gather information from linux commands to configure VyOS, msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." msgstr "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." -#: ../../automation/vyos-pyvyos.rst:27 +#: ../../automation/vyos-pyvyos.rst:35 msgid "Importing and Disabling Warnings for verify=False" msgstr "Importing and Disabling Warnings for verify=False" -#: ../../automation/cloud-init.rst:298 +#: ../../automation/cloud-init.rst:301 msgid "In Proxmox server three files are going to be used for this setup:" msgstr "In Proxmox server three files are going to be used for this setup:" @@ -362,23 +808,39 @@ msgstr "In Proxmox server three files are going to be used for this setup:" msgid "In VyOS, by default, enables only two modules:" msgstr "In VyOS, by default, enables only two modules:" -#: ../../automation/cloud-init.rst:307 +#: ../../automation/terraform/terraformAWS.rst:17 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." + +#: ../../automation/cloud-init.rst:310 msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" msgstr "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" -#: ../../automation/cloud-init.rst:274 +#: ../../automation/cloud-init.rst:277 msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" msgstr "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" -#: ../../automation/cloud-init.rst:71 +#: ../../automation/cloud-init.rst:72 msgid "Initial Configuration" msgstr "Initial Configuration" -#: ../../automation/vyos-pyvyos.rst:47 +#: ../../automation/vyos-pyvyos.rst:55 msgid "Initializing a VyDevice Object" msgstr "Initializing a VyDevice Object" -#: ../../automation/cloud-init.rst:180 +#: ../../automation/cloud-init.rst:184 msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." msgstr "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." @@ -386,7 +848,7 @@ msgstr "Injecting configuration data is not limited to cloud platforms. Users ca msgid "Install ``napalm-vyos`` module" msgstr "Install ``napalm-vyos`` module" -#: ../../automation/vyos-pyvyos.rst:15 +#: ../../automation/vyos-pyvyos.rst:23 msgid "Installation" msgstr "Installation" @@ -398,11 +860,20 @@ msgstr "It is possible to configure VyOS via netmiko_ proxy module. It requires msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." msgstr "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." +#: ../../automation/terraform/terraformAWS.rst:282 +#: ../../automation/terraform/terraformGoogle.rst:359 +msgid "Make sure that Ansible is pinging from Terrafom." +msgstr "Make sure that Ansible is pinging from Terrafom." + +#: ../../automation/terraform/terraformGoogle.rst:345 +msgid "Make sure that you have opened access to the instance in the security group." +msgstr "Make sure that you have opened access to the instance in the security group." + #: ../../automation/cloud-init.rst:20 msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." msgstr "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." -#: ../../automation/cloud-init.rst:244 +#: ../../automation/cloud-init.rst:247 msgid "Most important keys that needs to be considered:" msgstr "Most important keys that needs to be considered:" @@ -410,6 +881,10 @@ msgstr "Most important keys that needs to be considered:" msgid "Napalm" msgstr "Napalm" +#: ../../automation/terraform/terraformvyos.rst:13 +msgid "Need to install_ Terraform" +msgstr "Need to install_ Terraform" + #: ../../automation/vyos-netmiko.rst:6 msgid "Netmiko" msgstr "Netmiko" @@ -418,31 +893,37 @@ msgstr "Netmiko" msgid "Netmiko-proxy" msgstr "Netmiko-proxy" +#: ../../automation/terraform/terraformAWS.rst:-1 +#: ../../automation/terraform/terraformGoogle.rst:-1 +msgid "Network Topology Diagram" +msgstr "Network Topology Diagram" + #: ../../automation/cloud-init.rst:24 msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." msgstr "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." -#: ../../automation/cloud-init.rst:248 +#: ../../automation/cloud-init.rst:251 msgid "Networking configurations shouldn't be passed in user-data file." msgstr "Networking configurations shouldn't be passed in user-data file." -#: ../../automation/cloud-init.rst:178 +#: ../../automation/cloud-init.rst:182 msgid "NoCloud" msgstr "NoCloud" #: ../../automation/index.rst:6 +#: ../../automation/terraform/index.rst:6 msgid "Nornir" msgstr "Nornir" -#: ../../automation/cloud-init.rst:131 +#: ../../automation/cloud-init.rst:135 msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." msgstr "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." -#: ../../automation/cloud-init.rst:370 +#: ../../automation/cloud-init.rst:373 msgid "Notes for this particular example, that may need to be modified in other setups:" msgstr "Notes for this particular example, that may need to be modified in other setups:" -#: ../../automation/cloud-init.rst:287 +#: ../../automation/cloud-init.rst:290 msgid "Now, that file needs to be copied to proxmox server:" msgstr "Now, that file needs to be copied to proxmox server:" @@ -450,15 +931,15 @@ msgstr "Now, that file needs to be copied to proxmox server:" msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" msgstr "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" -#: ../../automation/cloud-init.rst:390 +#: ../../automation/cloud-init.rst:393 msgid "On proxmox server:" msgstr "On proxmox server:" -#: ../../automation/cloud-init.rst:353 +#: ../../automation/cloud-init.rst:356 msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." msgstr "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." -#: ../../automation/cloud-init.rst:80 +#: ../../automation/cloud-init.rst:81 msgid "One command per line." msgstr "One command per line." @@ -487,7 +968,7 @@ msgstr "Please take a look at the Contributing Guide for our :ref:`documentation msgid "Postconfig on boot" msgstr "Postconfig on boot" -#: ../../automation/cloud-init.rst:409 +#: ../../automation/cloud-init.rst:412 msgid "Power on VM and verifications" msgstr "Power on VM and verifications" @@ -495,15 +976,31 @@ msgstr "Power on VM and verifications" msgid "Preconfig on boot" msgstr "Preconfig on boot" -#: ../../automation/cloud-init.rst:296 +#: ../../automation/terraform/terraformAWS.rst:21 +msgid "Preparation steps for deploying VyOS on AWS" +msgstr "Preparation steps for deploying VyOS on AWS" + +#: ../../automation/terraform/terraformAZ.rst:14 +msgid "Preparation steps for deploying VyOS on Azure" +msgstr "Preparation steps for deploying VyOS on Azure" + +#: ../../automation/terraform/terraformGoogle.rst:14 +msgid "Preparation steps for deploying VyOS on google" +msgstr "Preparation steps for deploying VyOS on google" + +#: ../../automation/terraform/terraformvSphere.rst:14 +msgid "Preparation steps for deploying VyOS on vSphere" +msgstr "Preparation steps for deploying VyOS on vSphere" + +#: ../../automation/cloud-init.rst:299 msgid "Prepare cloud-init files" msgstr "Prepare cloud-init files" -#: ../../automation/cloud-init.rst:258 +#: ../../automation/cloud-init.rst:261 msgid "Proxmox IP address: **192.168.0.253/24**" msgstr "Proxmox IP address: **192.168.0.253/24**" -#: ../../automation/cloud-init.rst:422 +#: ../../automation/cloud-init.rst:425 msgid "Proxmox `Cloud-init-Support`_." msgstr "Proxmox `Cloud-init-Support`_." @@ -515,18 +1012,22 @@ msgstr "PyVyOS" msgid "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." msgstr "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." -#: ../../automation/cloud-init.rst:416 +#: ../../automation/cloud-init.rst:419 msgid "References" msgstr "References" -#: ../../automation/cloud-init.rst:263 +#: ../../automation/cloud-init.rst:266 msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." msgstr "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." -#: ../../automation/vyos-pyvyos.rst:132 +#: ../../automation/vyos-pyvyos.rst:140 msgid "Reset Object" msgstr "Reset Object" +#: ../../automation/vyos-terraform.rst:22 +msgid "Run Terraform" +msgstr "Run Terraform" + #: ../../automation/vyos-ansible.rst:80 msgid "Run ansible" msgstr "Run ansible" @@ -543,7 +1044,7 @@ msgstr "Run configuration commands" msgid "Run operational commands" msgstr "Run operational commands" -#: ../../automation/cloud-init.rst:111 +#: ../../automation/cloud-init.rst:115 msgid "SSH is configured on port 22." msgstr "SSH is configured on port 22." @@ -555,11 +1056,11 @@ msgstr "Salt" msgid "Salt master configuration:" msgstr "Salt master configuration:" -#: ../../automation/vyos-api.rst:344 +#: ../../automation/vyos-api.rst:377 msgid "Save a running configuration to a file." msgstr "Save a running configuration to a file." -#: ../../automation/vyos-api.rst:326 +#: ../../automation/vyos-api.rst:359 msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." msgstr "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." @@ -571,7 +1072,7 @@ msgstr "Script vyos-napalm.py" msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." msgstr "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." -#: ../../automation/vyos-pyvyos.rst:115 +#: ../../automation/vyos-pyvyos.rst:123 msgid "Show Object" msgstr "Show Object" @@ -579,7 +1080,42 @@ msgstr "Show Object" msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." msgstr "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." -#: ../../automation/cloud-init.rst:260 +#: ../../automation/command-scripting.rst:52 +msgid "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." + +#: ../../automation/terraform/terraformAWS.rst:537 +msgid "Sourse files for AWS from GIT" +msgstr "Sourse files for AWS from GIT" + +#: ../../automation/terraform/terraformAZ.rst:482 +msgid "Sourse files for Azure from GIT" +msgstr "Sourse files for Azure from GIT" + +#: ../../automation/terraform/terraformGoogle.rst:703 +msgid "Sourse files for google cloud from GIT" +msgstr "Sourse files for google cloud from GIT" + +#: ../../automation/terraform/terraformvSphere.rst:395 +msgid "Sourse files for vSphere from GIT" +msgstr "Sourse files for vSphere from GIT" + +#: ../../automation/terraform/terraformAWS.rst:88 +#: ../../automation/terraform/terraformAZ.rst:63 +#: ../../automation/terraform/terraformGoogle.rst:87 +#: ../../automation/terraform/terraformvSphere.rst:62 +msgid "Start" +msgstr "Start" + +#: ../../automation/terraform/terraformGoogle.rst:101 +msgid "Start creating a google cloud instance and check the result" +msgstr "Start creating a google cloud instance and check the result" + +#: ../../automation/terraform/terraformAWS.rst:102 +msgid "Start creating an AWS instance and check the result" +msgstr "Start creating an AWS instance and check the result" + +#: ../../automation/cloud-init.rst:263 msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." msgstr "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." @@ -591,14 +1127,80 @@ msgstr "Structure of /srv/salt:" msgid "Structure of files" msgstr "Structure of files" -#: ../../automation/cloud-init.rst:107 +#: ../../automation/vyos-terraform.rst:166 +#: ../../automation/vyos-terraform.rst:624 +msgid "Structure of files Ansible" +msgstr "Structure of files Ansible" + +#: ../../automation/terraform/terraformAWS.rst:463 +msgid "Structure of files Ansible for AWS" +msgstr "Structure of files Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:414 +msgid "Structure of files Ansible for Azure" +msgstr "Structure of files Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:639 +msgid "Structure of files Ansible for google cloud" +msgstr "Structure of files Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:326 +msgid "Structure of files Ansible for vSphere" +msgstr "Structure of files Ansible for vSphere" + +#: ../../automation/vyos-terraform.rst:38 +#: ../../automation/vyos-terraform.rst:302 +#: ../../automation/vyos-terraform.rst:745 +msgid "Structure of files Terrafom" +msgstr "Structure of files Terrafom" + +#: ../../automation/terraform/terraformAWS.rst:285 +msgid "Structure of files Terrafom for AWS" +msgstr "Structure of files Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:83 +msgid "Structure of files Terrafom for Azure" +msgstr "Structure of files Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:362 +msgid "Structure of files Terrafom for google cloud" +msgstr "Structure of files Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:84 +msgid "Structure of files Terrafom for vSphere" +msgstr "Structure of files Terrafom for vSphere" + +#: ../../automation/terraform/terraformvyos.rst:15 +msgid "Structure of files in the standard Terraform project:" +msgstr "Structure of files in the standard Terraform project:" + +#: ../../automation/cloud-init.rst:111 msgid "System Defaults/Fallbacks" msgstr "System Defaults/Fallbacks" -#: ../../automation/vyos-api.rst:301 +#: ../../automation/terraform/terraformAWS.rst:51 +#: ../../automation/terraform/terraformAZ.rst:23 +#: ../../automation/terraform/terraformGoogle.rst:49 +#: ../../automation/terraform/terraformvSphere.rst:26 +msgid "Terraform" +msgstr "Terraform" + +#: ../../automation/terraform/terraformAWS.rst:302 +msgid "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" +msgstr "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" + +#: ../../automation/terraform/terraformvyos.rst:6 +msgid "Terraform for VyOS" +msgstr "Terraform for VyOS" + +#: ../../automation/vyos-api.rst:334 msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." msgstr "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." +#: ../../automation/terraform/terraformGoogle.rst:41 +msgid "The .JSON file download automaticly after creating and will look like:" +msgstr "The .JSON file download automaticly after creating and will look like:" + #: ../../automation/command-scripting.rst:197 msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." @@ -607,23 +1209,23 @@ msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called o msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." msgstr "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." -#: ../../automation/vyos-api.rst:224 +#: ../../automation/vyos-api.rst:256 msgid "The ``/show`` endpoint is to show everything in the operational mode." msgstr "The ``/show`` endpoint is to show everything in the operational mode." -#: ../../automation/vyos-api.rst:248 +#: ../../automation/vyos-api.rst:280 msgid "The ``generate`` endpoint run a ``generate`` command." msgstr "The ``generate`` endpoint run a ``generate`` command." -#: ../../automation/vyos-api.rst:131 +#: ../../automation/vyos-api.rst:163 msgid "The ``reset`` endpoint run a ``reset`` command." msgstr "The ``reset`` endpoint run a ``reset`` command." -#: ../../automation/cloud-init.rst:84 +#: ../../automation/cloud-init.rst:85 msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." msgstr "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." -#: ../../automation/cloud-init.rst:88 +#: ../../automation/cloud-init.rst:89 msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." msgstr "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." @@ -640,23 +1242,23 @@ msgstr "The default file looks like this:" msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below." msgstr "The easiest way to configure the system via user-data is the Cloud-config syntax described below." -#: ../../automation/vyos-api.rst:324 +#: ../../automation/vyos-api.rst:357 msgid "The endpoint ``/config-file`` is to save or load a configuration." msgstr "The endpoint ``/config-file`` is to save or load a configuration." -#: ../../automation/cloud-init.rst:156 +#: ../../automation/cloud-init.rst:160 msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." msgstr "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." -#: ../../automation/cloud-init.rst:136 +#: ../../automation/cloud-init.rst:140 msgid "The following example shows how to execute commands after the initial configuration." msgstr "The following example shows how to execute commands after the initial configuration." -#: ../../automation/cloud-init.rst:74 +#: ../../automation/cloud-init.rst:75 msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." msgstr "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." -#: ../../automation/cloud-init.rst:197 +#: ../../automation/cloud-init.rst:201 msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." msgstr "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." @@ -664,7 +1266,7 @@ msgstr "The seed.iso file can be attached to the virtual machine. As an example, msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." msgstr "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." -#: ../../automation/cloud-init.rst:109 +#: ../../automation/cloud-init.rst:113 msgid "These are the VyOS defaults and fallbacks." msgstr "These are the VyOS defaults and fallbacks." @@ -676,11 +1278,11 @@ msgstr "This section needs improvements, examples and explanations." msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." msgstr "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." -#: ../../automation/vyos-api.rst:360 +#: ../../automation/vyos-api.rst:393 msgid "To Load a configuration file." msgstr "To Load a configuration file." -#: ../../automation/vyos-api.rst:186 +#: ../../automation/vyos-api.rst:218 msgid "To add or delete an image, use the ``/image`` endpoint." msgstr "To add or delete an image, use the ``/image`` endpoint." @@ -688,6 +1290,10 @@ msgstr "To add or delete an image, use the ``/image`` endpoint." msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" msgstr "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" +#: ../../automation/vyos-api.rst:128 +msgid "To check existence of a configuration path, use the ``exists`` operation." +msgstr "To check existence of a configuration path, use the ``exists`` operation." + #: ../../automation/vyos-api.rst:48 msgid "To get the whole configuration, pass an empty list to the ``path`` field" msgstr "To get the whole configuration, pass an empty list to the ``path`` field" @@ -696,7 +1302,7 @@ msgstr "To get the whole configuration, pass an empty list to the ``path`` field msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." msgstr "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." -#: ../../automation/vyos-api.rst:149 +#: ../../automation/vyos-api.rst:181 msgid "To initiate a reboot use the ``reboot`` endpoint." msgstr "To initiate a reboot use the ``reboot`` endpoint." @@ -708,14 +1314,23 @@ msgstr "To make sure that a script is not accidentally called without the ``vyat msgid "To only get a part of the configuration, for example ``system syslog``." msgstr "To only get a part of the configuration, for example ``system syslog``." -#: ../../automation/vyos-api.rst:167 +#: ../../automation/vyos-api.rst:199 msgid "To power off the system use the ``poweroff`` endpoint." msgstr "To power off the system use the ``poweroff`` endpoint." -#: ../../automation/cloud-init.rst:223 +#: ../../automation/cloud-init.rst:226 +#: ../../automation/terraform/terraformAWS.rst:264 +#: ../../automation/terraform/terraformGoogle.rst:342 msgid "Troubleshooting" msgstr "Troubleshooting" +#: ../../automation/terraform/terraformAWS.rst:91 +#: ../../automation/terraform/terraformAZ.rst:66 +#: ../../automation/terraform/terraformGoogle.rst:90 +#: ../../automation/terraform/terraformvSphere.rst:65 +msgid "Type the commands on your Terrafom instance:" +msgstr "Type the commands on your Terrafom instance:" + #: ../../automation/command-scripting.rst:39 msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." msgstr "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." @@ -725,10 +1340,14 @@ msgid "User-data" msgstr "User-data" #: ../../automation/cloud-init.rst:28 +msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." + +#: ../../automation/cloud-init.rst:28 msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." -#: ../../automation/vyos-pyvyos.rst:35 +#: ../../automation/vyos-pyvyos.rst:43 msgid "Using API Response Class" msgstr "Using API Response Class" @@ -736,18 +1355,26 @@ msgstr "Using API Response Class" msgid "Using PyVyOS" msgstr "Using PyVyOS" -#: ../../automation/cloud-init.rst:373 +#: ../../automation/vyos-pyvyos.rst:73 +msgid "Using pyvyos" +msgstr "Using pyvyos" + +#: ../../automation/cloud-init.rst:376 msgid "VM ID: in this example, VM ID used is 555." msgstr "VM ID: in this example, VM ID used is 555." -#: ../../automation/cloud-init.rst:381 +#: ../../automation/cloud-init.rst:384 msgid "VM Resources: these parameters can be modified as needed." msgstr "VM Resources: these parameters can be modified as needed." -#: ../../automation/cloud-init.rst:375 +#: ../../automation/cloud-init.rst:378 msgid "VM Storage: ``local`` volume is used." msgstr "VM Storage: ``local`` volume is used." +#: ../../automation/vyos-terraform.rst:991 +msgid "Vsphere" +msgstr "Vsphere" + #: ../../automation/vyos-api.rst:7 msgid "VyOS API" msgstr "VyOS API" @@ -756,7 +1383,11 @@ msgstr "VyOS API" msgid "VyOS Automation" msgstr "VyOS Automation" -#: ../../automation/cloud-init.rst:418 +#: ../../automation/terraform/index.rst:3 +msgid "VyOS Terraform" +msgstr "VyOS Terraform" + +#: ../../automation/cloud-init.rst:421 msgid "VyOS `cloud-init-docs`_." msgstr "VyOS `cloud-init-docs`_." @@ -764,7 +1395,7 @@ msgstr "VyOS `cloud-init-docs`_." msgid "VyOS cloud-init" msgstr "VyOS cloud-init" -#: ../../automation/cloud-init.rst:246 +#: ../../automation/cloud-init.rst:249 msgid "VyOS configuration commands are defined in user-data file." msgstr "VyOS configuration commands are defined in user-data file." @@ -784,6 +1415,18 @@ msgstr "VyOS supports configuration via ansible. Need to install ``ansible`` and msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." msgstr "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." +#: ../../automation/vyos-terraform.rst:8 +msgid "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" +msgstr "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" + +#: ../../automation/terraform/terraformvyos.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." + +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." + #: ../../automation/command-scripting.rst:8 msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts." msgstr "VyOS supports executing configuration and operational commands non-interactively from shell scripts." @@ -796,7 +1439,7 @@ msgstr "VyOS supports op-mode and configuration via salt_." msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." msgstr "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." -#: ../../automation/cloud-init.rst:122 +#: ../../automation/cloud-init.rst:126 msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." msgstr "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." @@ -804,7 +1447,7 @@ msgstr "VyOS supports the execution of operational commands and linux commands a msgid "We need 2 files, commands.conf and script itself." msgstr "We need 2 files, commands.conf and script itself." -#: ../../automation/cloud-init.rst:184 +#: ../../automation/cloud-init.rst:188 msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." msgstr "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." @@ -816,6 +1459,34 @@ msgstr "Will return:" msgid "With the ``retrieve`` endpoint you get parts or the whole configuration." msgstr "With the ``retrieve`` endpoint you get parts or the whole configuration." +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAWS.rst:40 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/vyos-terraform.rst:300 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." + +#: ../../automation/vyos-terraform.rst:743 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." + #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and support op-mode data:" msgstr "Without proxy it requires VyOS minion configuration and support op-mode data:" @@ -828,27 +1499,31 @@ msgstr "Without proxy it requires VyOS minion configuration and supports op-mode msgid "You can install PyVyOS using pip:" msgstr "You can install PyVyOS using pip:" -#: ../../automation/vyos-api.rst:267 +#: ../../automation/vyos-pyvyos.rst:25 +msgid "You can install pyvyos using pip:" +msgstr "You can install pyvyos using pip:" + +#: ../../automation/vyos-api.rst:300 msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." msgstr "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." -#: ../../automation/vyos-api.rst:286 +#: ../../automation/vyos-api.rst:319 msgid "``delete`` a single command" msgstr "``delete`` a single command" -#: ../../automation/cloud-init.rst:383 +#: ../../automation/cloud-init.rst:386 msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" msgstr "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" -#: ../../automation/vyos-api.rst:270 +#: ../../automation/vyos-api.rst:303 msgid "``set`` a single command" msgstr "``set`` a single command" -#: ../../automation/cloud-init.rst:55 +#: ../../automation/cloud-init.rst:56 msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." msgstr "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." -#: ../../automation/cloud-init.rst:112 +#: ../../automation/cloud-init.rst:116 msgid "``vyos``/``vyos`` credentials if no others specified by data source." msgstr "``vyos``/``vyos`` credentials if no others specified by data source." @@ -856,19 +1531,39 @@ msgstr "``vyos``/``vyos`` credentials if no others specified by data source." msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." msgstr "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." -#: ../../automation/vyos-api.rst:188 +#: ../../automation/vyos-pyvyos.rst:12 +msgid "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." +msgstr "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." + +#: ../../automation/vyos-pyvyos.rst:15 +msgid "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." +msgstr "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." + +#: ../../automation/vyos-pyvyos.rst:17 +msgid "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." +msgstr "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." + +#: ../../automation/vyos-api.rst:220 msgid "add an image" msgstr "add an image" +#: ../../automation/terraform/terraformAWS.rst:560 +msgid "all" +msgstr "all" + +#: ../../automation/terraform/terraformAWS.rst:478 +#: ../../automation/terraform/terraformAZ.rst:428 +#: ../../automation/terraform/terraformGoogle.rst:653 +#: ../../automation/terraform/terraformvSphere.rst:340 #: ../../automation/vyos-ansible.rst:26 msgid "ansible.cfg" msgstr "ansible.cfg" -#: ../../automation/cloud-init.rst:61 +#: ../../automation/cloud-init.rst:62 msgid "cloud-config file format" msgstr "cloud-config file format" -#: ../../automation/cloud-init.rst:229 +#: ../../automation/cloud-init.rst:232 msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" @@ -876,10 +1571,21 @@ msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in msgid "commands.txt" msgstr "commands.txt" -#: ../../automation/vyos-api.rst:205 +#: ../../automation/vyos-api.rst:237 msgid "delete an image, for example ``1.3-rolling-202006070117``" msgstr "delete an image, for example ``1.3-rolling-202006070117``" +#: ../../automation/terraform/terraformGoogle.rst:19 +msgid "google cloud" +msgstr "google cloud" + +#: ../../automation/terraform/terraformAWS.rst:528 +#: ../../automation/terraform/terraformAZ.rst:470 +#: ../../automation/terraform/terraformGoogle.rst:693 +#: ../../automation/terraform/terraformvSphere.rst:381 +msgid "group_vars/all" +msgstr "group_vars/all" + #: ../../automation/vyos-ansible.rst:42 msgid "hosts" msgstr "hosts" @@ -892,18 +1598,90 @@ msgstr "id_rsa_docker.pub. Needs to declare only public key exactly." msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." msgstr "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." +#: ../../automation/terraform/terraformAWS.rst:495 +#: ../../automation/terraform/terraformAZ.rst:438 +#: ../../automation/terraform/terraformGoogle.rst:662 +#: ../../automation/terraform/terraformvSphere.rst:350 +msgid "instance.yml" +msgstr "instance.yml" + +#: ../../automation/vyos-terraform.rst:313 +#: ../../automation/vyos-terraform.rst:758 +msgid "main.tf" +msgstr "main.tf" + #: ../../automation/vyos-ansible.rst:56 msgid "main.yml" msgstr "main.yml" +#: ../../automation/terraform/terraformGoogle.rst:84 +msgid "mykey.json you have to get using step 2 of the google cloud" +msgstr "mykey.json you have to get using step 2 of the google cloud" + +#: ../../automation/terraform/terraformAWS.rst:488 +msgid "mykey.pem" +msgstr "mykey.pem" + +#: ../../automation/terraform/terraformAWS.rst:85 +msgid "mykey.pem you have to get using step 1.2" +msgstr "mykey.pem you have to get using step 1.2" + +#: ../../automation/vyos-pyvyos.rst:6 +msgid "pyvyos" +msgstr "pyvyos" + +#: ../../automation/vyos-pyvyos.rst:8 +msgid "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." +msgstr "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." + #: ../../automation/vyos-salt.rst:141 msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" msgstr "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" #: ../../automation/index.rst:7 +#: ../../automation/terraform/index.rst:7 msgid "startup scripts" msgstr "startup scripts" +#: ../../automation/terraform/terraformAWS.rst:452 +#: ../../automation/terraform/terraformAZ.rst:405 +#: ../../automation/terraform/terraformGoogle.rst:623 +#: ../../automation/terraform/terraformvSphere.rst:307 +msgid "terraform.tfvars" +msgstr "terraform.tfvars" + #: ../../automation/vyos-salt.rst:131 msgid "top.sls" msgstr "top.sls" + +#: ../../automation/terraform/terraformvSphere.rst:20 +msgid "vSphere" +msgstr "vSphere" + +#: ../../automation/terraform/terraformAWS.rst:415 +#: ../../automation/terraform/terraformAZ.rst:298 +#: ../../automation/terraform/terraformGoogle.rst:538 +#: ../../automation/terraform/terraformvSphere.rst:239 +msgid "var.tf" +msgstr "var.tf" + +#: ../../automation/vyos-terraform.rst:516 +#: ../../automation/vyos-terraform.rst:899 +msgid "variables.tf" +msgstr "variables.tf" + +#: ../../automation/terraform/terraformAWS.rst:439 +#: ../../automation/terraform/terraformvSphere.rst:223 +msgid "versions.tf" +msgstr "versions.tf" + +#: ../../automation/vyos-api.rst:145 +msgid "versus a non-existent path:" +msgstr "versus a non-existent path:" + +#: ../../automation/terraform/terraformAWS.rst:300 +#: ../../automation/terraform/terraformAZ.rst:95 +#: ../../automation/terraform/terraformGoogle.rst:377 +#: ../../automation/terraform/terraformvSphere.rst:98 +msgid "vyos.tf" +msgstr "vyos.tf" diff --git a/docs/_locale/de/cli.pot b/docs/_locale/de/cli.pot index 8f272347..70bb4156 100644 --- a/docs/_locale/de/cli.pot +++ b/docs/_locale/de/cli.pot @@ -28,23 +28,23 @@ msgstr "**Working configuration** is the one that is currently being modified in msgid "A VyOS system has three major types of configurations:" msgstr "A VyOS system has three major types of configurations:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Access opmode from config mode" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Add comment as an annotation to a configuration node." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "All changes in the working config will thus be lost." @@ -52,7 +52,7 @@ msgstr "All changes in the working config will thus be lost." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." @@ -72,11 +72,11 @@ msgstr "By default, the configuration is displayed in a hierarchy like the above msgid "Command Line Interface" msgstr "Command Line Interface" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Compare configurations" @@ -92,11 +92,11 @@ msgstr "Configuration Overview" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copy a configuration element." @@ -104,7 +104,7 @@ msgstr "Copy a configuration element." msgid "Editing the configuration" msgstr "Editing the configuration" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Example:" @@ -124,11 +124,11 @@ msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ` msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Get a collection of all the set commands required which led to the running configuration." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Local Archive" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Managing configurations" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." @@ -164,31 +164,31 @@ msgstr "Operational mode allows for commands to perform operational system tasks msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Remote Archive" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Rename a configuration element." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restore Default" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Rollback Changes" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Rollback to revision N (currently requires reboot)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Saving and loading manually" @@ -200,11 +200,11 @@ msgstr "See the configuration section of this document for more information on c msgid "Seeing and navigating the configuration" msgstr "Seeing and navigating the configuration" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Show commit revision difference." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" @@ -228,11 +228,15 @@ msgstr "The :cfgcmd:`show` command within configuration mode will show the worki msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:656 +msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." +msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." + +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." @@ -248,11 +252,11 @@ msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd: msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "The number of revisions don't affect the commit-archive." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." @@ -264,7 +268,7 @@ msgstr "These commands are also relative to the level you are inside and only re msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``." @@ -276,7 +280,7 @@ msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this a msgid "To enter configuration mode use the ``configure`` command:" msgstr "To enter configuration mode use the ``configure`` command:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." @@ -284,11 +288,11 @@ msgstr "To remove an existing comment from your current configuration, specify a msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." @@ -296,15 +300,15 @@ msgstr "Use this command to preserve configuration changes upon reboot. By defau msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Use this command to set the value of a parameter or to create a new element." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use this command to spot what the differences are between different configurations." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "View all existing revisions on the local system." @@ -320,15 +324,19 @@ msgstr "View the current active configuration in JSON format." msgid "View the current active configuration in readable JSON format." msgstr "View the current active configuration in readable JSON format." +#: ../../cli.rst:855 +msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." +msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." + #: ../../cli.rst:852 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS lets you compare different configurations." @@ -340,6 +348,10 @@ msgstr "VyOS makes use of a unified configuration file for the entire system's c msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +#: ../../cli.rst:561 +msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." + #: ../../cli.rst:340 msgid "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." msgstr "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." @@ -348,7 +360,7 @@ msgstr "When entering the configuration mode you are navigating inside a tree st msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "When inside configuration mode you are not directly able to execute operational commands." @@ -356,7 +368,7 @@ msgstr "When inside configuration mode you are not directly able to execute oper msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" @@ -372,15 +384,15 @@ msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "You can also rename config subtrees:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." @@ -388,19 +400,23 @@ msgstr "You can rollback configuration changes using the rollback command. This msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." @@ -408,19 +424,19 @@ msgstr "You will be asked if you want to continue. If you accept, you will have msgid "``b`` will scroll back one page" msgstr "``b`` will scroll back one page" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user>:<passwd>@<host>/<dir>``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -436,11 +452,11 @@ msgstr "``q`` key can be used to cancel output" msgid "``return`` will scroll down one line" msgstr "``return`` will scroll down one line" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" @@ -448,7 +464,7 @@ msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" msgid "``space`` will scroll down one page" msgstr "``space`` will scroll down one page" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host>/<dir>``" diff --git a/docs/_locale/de/configexamples.pot b/docs/_locale/de/configexamples.pot index d7dd346f..94068912 100644 --- a/docs/_locale/de/configexamples.pot +++ b/docs/_locale/de/configexamples.pot @@ -272,7 +272,7 @@ msgstr "A brief excursion into VRFs: This has been one of the longest-standing f msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." msgstr "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." -#: ../../configexamples/index.rst:37 +#: ../../configexamples/index.rst:38 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." msgstr "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." @@ -318,6 +318,14 @@ msgstr "Active Directory on Windows server" msgid "Add (temporary) default route" msgstr "Add (temporary) default route" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -351,6 +359,10 @@ msgid "After configured all the VRFs involved in this topology we take a deeper msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on msgid "Allow DHCPv6 packets for router" msgstr "Allow DHCPv6 packets for router" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -572,6 +592,10 @@ msgid "Basic Setup (via console)" msgstr "Basic Setup (via console)" #: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + +#: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -656,11 +680,19 @@ msgstr "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." msgstr "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." +#: ../../configexamples/lac-lns.rst:96 +msgid "Client" +msgstr "Client" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:94 msgid "Client configuration" msgstr "Client configuration" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -704,7 +736,7 @@ msgstr "Configuration 'dcsp' and shaper using QoS" msgid "Configuration Blueprints" msgstr "Configuration Blueprints" -#: ../../configexamples/index.rst:30 +#: ../../configexamples/index.rst:31 msgid "Configuration Blueprints (autotest)" msgstr "Configuration Blueprints (autotest)" @@ -717,6 +749,7 @@ msgid "Configuration of basic firewall in one site, in order to:" msgstr "Configuration of basic firewall in one site, in order to:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113 +#: ../../configexamples/lac-lns.rst:29 #: ../../configexamples/pppoe-ipv6-basic.rst:26 msgid "Configurations" msgstr "Configurations" @@ -885,7 +918,7 @@ msgstr "Dynamic routing used between CE and PE nodes and eBGP peering establishe msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." msgstr "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." -#: ../../configexamples/index.rst:34 +#: ../../configexamples/index.rst:35 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." msgstr "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." @@ -1008,6 +1041,10 @@ msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1213,6 +1250,10 @@ msgid "In the end, you will end up with something like this config. I took out e msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." #: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + +#: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1252,6 +1293,14 @@ msgstr "In this example two LAN interfaces exist in different subnets instead of msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." msgstr "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." +#: ../../configexamples/lac-lns.rst:17 +msgid "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." +msgstr "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." + +#: ../../configexamples/lac-lns.rst:98 +msgid "In this lab we use Windows PPPoE client." +msgstr "In this lab we use Windows PPPoE client." + #: ../../configexamples/zone-policy.rst:50 msgid "Inbound WAN connect to DMZ host." msgstr "Inbound WAN connect to DMZ host." @@ -1265,6 +1314,14 @@ msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Information about prefix-sid and label-operation from VyOS" #: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + +#: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1345,6 +1402,10 @@ msgstr "L3VPN configuration parameters table:" msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" msgstr "L3VPN for Hub-and-Spoke connectivity with VyOS" +#: ../../configexamples/lac-lns.rst:32 +msgid "LAC" +msgstr "LAC" + #: ../../configexamples/zone-policy.rst:392 msgid "LAN, WAN, DMZ, local and TUN (tunnel)" msgstr "LAN, WAN, DMZ, local and TUN (tunnel)" @@ -1389,6 +1450,10 @@ msgstr "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." msgid "LAN can access DMZ resources." msgstr "LAN can access DMZ resources." +#: ../../configexamples/lac-lns.rst:72 +msgid "LNS" +msgstr "LNS" + #: ../../configexamples/l3vpn-hub-and-spoke.rst:551 msgid "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" @@ -1398,6 +1463,10 @@ msgid "Let’s say we have a requirement to have multiple networks." msgstr "Let’s say we have a requirement to have multiple networks." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1433,9 +1502,22 @@ msgid "Masquerade Traffic originating from 10.200.201.0/24 that is heading out t msgstr "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:254 +#: ../../configexamples/lac-lns.rst:106 msgid "Monitoring" msgstr "Monitoring" +#: ../../configexamples/lac-lns.rst:117 +msgid "Monitoring on LAC side" +msgstr "Monitoring on LAC side" + +#: ../../configexamples/lac-lns.rst:108 +msgid "Monitoring on LNS side" +msgstr "Monitoring on LNS side" + +#: ../../configexamples/lac-lns.rst:140 +msgid "Monitoring on RADIUS Server side" +msgstr "Monitoring on RADIUS Server side" + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162 msgid "Multiple LAN/DMZ Setup" msgstr "Multiple LAN/DMZ Setup" @@ -1456,6 +1538,7 @@ msgstr "Native IPv4 and IPv6" msgid "Network Cabling" msgstr "Network Cabling" +#: ../../configexamples/lac-lns.rst:21 #: ../../configexamples/pppoe-ipv6-basic.rst:18 msgid "Network Topology" msgstr "Network Topology" @@ -1463,6 +1546,7 @@ msgstr "Network Topology" #: ../../configexamples/ansible.rst:-1 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:-1 #: ../../configexamples/l3vpn-hub-and-spoke.rst:-1 +#: ../../configexamples/lac-lns.rst:-1 #: ../../configexamples/nmp.rst:-1 #: ../../configexamples/pppoe-ipv6-basic.rst:-1 #: ../../configexamples/qos.rst:-1 @@ -1655,6 +1739,10 @@ msgstr "PPPoE IPv6 Basic Setup for Home Network" msgid "PPPoE Setup" msgstr "PPPoE Setup" +#: ../../configexamples/lac-lns.rst:7 +msgid "PPPoE over L2TP" +msgstr "PPPoE over L2TP" + #: ../../configexamples/segment-routing-isis.rst:255 msgid "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" msgstr "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" @@ -1692,6 +1780,10 @@ msgid "Priorities" msgstr "Priorities" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2046,7 +2138,7 @@ msgstr "The lab I built is using a VRF (called **mgmt**) to provide out-of-band msgid "The lab was built using EVE-NG." msgstr "The lab was built using EVE-NG." -#: ../../configexamples/index.rst:32 +#: ../../configexamples/index.rst:33 msgid "The next pages contains automatic full tested configuration examples." msgstr "The next pages contains automatic full tested configuration examples." @@ -2054,7 +2146,7 @@ msgstr "The next pages contains automatic full tested configuration examples." msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." msgstr "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." -#: ../../configexamples/index.rst:40 +#: ../../configexamples/index.rst:41 msgid "The process will do the following steps:" msgstr "The process will do the following steps:" @@ -2123,6 +2215,10 @@ msgid "This chapter contains various configuration examples:" msgstr "This chapter contains various configuration examples:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2130,6 +2226,10 @@ msgstr "This configuration example and the requirments consists on:" msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." msgstr "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." +#: ../../configexamples/lac-lns.rst:9 +msgid "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." +msgstr "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." + #: ../../configexamples/pppoe-ipv6-basic.rst:9 msgid "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." msgstr "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." @@ -2166,6 +2266,10 @@ msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to A msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." @@ -2210,6 +2314,10 @@ msgstr "This section describes verification commands for MPLS/BGP/LDP protocols msgid "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." msgstr "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." +#: ../../configexamples/lac-lns.rst:91 +msgid "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." +msgstr "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." + #: ../../configexamples/autotest/Wireguard/Wireguard.rst:10 msgid "This simple structure show how to connect two offices. One remote branch and the central office." msgstr "This simple structure show how to connect two offices. One remote branch and the central office." @@ -2580,6 +2688,10 @@ msgstr "When you have both routers up, you should be able to establish a connect msgid "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" msgstr "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" +#: ../../configexamples/lac-lns.rst:-1 +msgid "Window PPPoE Client Configuration" +msgstr "Window PPPoE Client Configuration" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:13 msgid "Windows Server 2019 with a running Active Directory" msgstr "Windows Server 2019 with a running Active Directory" @@ -2713,15 +2825,15 @@ msgstr "compute3 - Port 11 of each switch" msgid "compute3 (VMware ESXi 6.5)" msgstr "compute3 (VMware ESXi 6.5)" -#: ../../configexamples/index.rst:43 +#: ../../configexamples/index.rst:44 msgid "configure each host in the lab" msgstr "configure each host in the lab" -#: ../../configexamples/index.rst:42 +#: ../../configexamples/index.rst:43 msgid "create the lab on a eve-ng server" msgstr "create the lab on a eve-ng server" -#: ../../configexamples/index.rst:44 +#: ../../configexamples/index.rst:45 msgid "do some defined tests" msgstr "do some defined tests" @@ -2742,7 +2854,7 @@ msgstr "extended community and remote label of specific destination" msgid "first the PCA" msgstr "first the PCA" -#: ../../configexamples/index.rst:46 +#: ../../configexamples/index.rst:47 msgid "generate the documentation and include files" msgstr "generate the documentation and include files" @@ -2754,7 +2866,7 @@ msgstr "green uses local routing table id and VNI 4000" msgid "information between PE and CE:" msgstr "information between PE and CE:" -#: ../../configexamples/index.rst:45 +#: ../../configexamples/index.rst:46 msgid "optional do an upgrade to a higher version and do step 3 again." msgstr "optional do an upgrade to a higher version and do step 3 again." @@ -2770,7 +2882,7 @@ msgstr "router2 (Random 1RU machine with 4 NICs)" msgid "save the output to a file and import it in nearly all openvpn clients." msgstr "save the output to a file and import it in nearly all openvpn clients." -#: ../../configexamples/index.rst:47 +#: ../../configexamples/index.rst:48 msgid "shutdown and destroy the lab, if there is no error" msgstr "shutdown and destroy the lab, if there is no error" diff --git a/docs/_locale/de/configuration.pot b/docs/_locale/de/configuration.pot index cc30affb..f0ae9a1d 100644 --- a/docs/_locale/de/configuration.pot +++ b/docs/_locale/de/configuration.pot @@ -76,12 +76,20 @@ msgstr "**9** - NetFlow version 9 (default)" msgid "**AS path length check**" msgstr "**AS path length check**" +#: ../../configuration/service/dhcp-server.rst:175 +msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." +msgstr "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." + +#: ../../configuration/service/dhcp-server.rst:178 +msgid "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." +msgstr "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." + #: ../../configuration/protocols/bgp.rst:106 msgid "**Already-selected external check**" msgstr "**Already-selected external check**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Applies to:** Inbound traffic." @@ -97,6 +105,7 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Applies to:** Outbound traffic." @@ -168,9 +177,11 @@ msgstr "**Documentation under development**" msgid "**Ethernet (protocol, destination address or source address)**" msgstr "**Ethernet (protocol, destination address or source address)**" -#: ../../configuration/service/dhcp-server.rst:200 -#: ../../configuration/service/dhcp-server.rst:587 -#: ../../configuration/service/dhcp-server.rst:626 +#: ../../configuration/service/dhcp-server.rst:63 +#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:646 +#: ../../configuration/service/dhcp-server.rst:687 msgid "**Example:**" msgstr "**Example:**" @@ -269,11 +280,11 @@ msgstr "**Input**: stage where traffic destined for the router itself can be fil msgid "**Interface name**" msgstr "**Interface name**" -#: ../../configuration/vpn/site2site_ipsec.rst:303 +#: ../../configuration/vpn/site2site_ipsec.rst:306 msgid "**LEFT**" msgstr "**LEFT**" -#: ../../configuration/vpn/site2site_ipsec.rst:287 +#: ../../configuration/vpn/site2site_ipsec.rst:290 msgid "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" msgstr "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" @@ -309,11 +320,11 @@ msgstr "**MED check**" msgid "**Multi-path check**" msgstr "**Multi-path check**" -#: ../../configuration/protocols/bgp.rst:1193 +#: ../../configuration/protocols/bgp.rst:1215 msgid "**Node1:**" msgstr "**Node1:**" -#: ../../configuration/protocols/bgp.rst:1221 +#: ../../configuration/protocols/bgp.rst:1243 msgid "**Node2:**" msgstr "**Node2:**" @@ -326,10 +337,10 @@ msgid "**Node 1**" msgstr "**Node 1**" #: ../../configuration/protocols/babel.rst:192 -#: ../../configuration/protocols/bgp.rst:1103 -#: ../../configuration/protocols/bgp.rst:1130 -#: ../../configuration/protocols/bgp.rst:1148 -#: ../../configuration/protocols/bgp.rst:1176 +#: ../../configuration/protocols/bgp.rst:1125 +#: ../../configuration/protocols/bgp.rst:1152 +#: ../../configuration/protocols/bgp.rst:1170 +#: ../../configuration/protocols/bgp.rst:1198 #: ../../configuration/protocols/isis.rst:341 #: ../../configuration/protocols/isis.rst:416 #: ../../configuration/protocols/isis.rst:457 @@ -350,10 +361,10 @@ msgid "**Node 2**" msgstr "**Node 2**" #: ../../configuration/protocols/babel.rst:202 -#: ../../configuration/protocols/bgp.rst:1114 #: ../../configuration/protocols/bgp.rst:1136 -#: ../../configuration/protocols/bgp.rst:1160 +#: ../../configuration/protocols/bgp.rst:1158 #: ../../configuration/protocols/bgp.rst:1182 +#: ../../configuration/protocols/bgp.rst:1204 #: ../../configuration/protocols/isis.rst:352 #: ../../configuration/protocols/isis.rst:432 #: ../../configuration/protocols/isis.rst:511 @@ -384,6 +395,10 @@ msgid "**Output**: stage where traffic that is originated by the router itself c msgstr "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:65 +msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" @@ -411,7 +426,7 @@ msgstr "**Prerouting**: several actions can be done in this stage, and currently msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" -#: ../../configuration/service/dhcp-server.rst:391 +#: ../../configuration/service/dhcp-server.rst:448 msgid "**Primary**" msgstr "**Primary**" @@ -423,6 +438,10 @@ msgstr "**Queueing discipline** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Queueing discipline:** Deficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Queueing discipline:** Generalized Random Early Drop." @@ -481,11 +500,11 @@ msgstr "**RADIUS based IP pools (Framed-IP-Address)**" msgid "**RADIUS sessions management DM/CoA**" msgstr "**RADIUS sessions management DM/CoA**" -#: ../../configuration/vpn/site2site_ipsec.rst:343 +#: ../../configuration/vpn/site2site_ipsec.rst:346 msgid "**RIGHT**" msgstr "**RIGHT**" -#: ../../configuration/vpn/site2site_ipsec.rst:293 +#: ../../configuration/vpn/site2site_ipsec.rst:296 msgid "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" @@ -521,15 +540,15 @@ msgstr "**SW1**" msgid "**SW2**" msgstr "**SW2**" -#: ../../configuration/service/dhcp-server.rst:400 +#: ../../configuration/service/dhcp-server.rst:458 msgid "**Secondary**" msgstr "**Secondary**" -#: ../../configuration/vpn/ipsec.rst:261 +#: ../../configuration/vpn/ipsec.rst:265 msgid "**Setting up IPSec**" msgstr "**Setting up IPSec**" -#: ../../configuration/vpn/ipsec.rst:237 +#: ../../configuration/vpn/ipsec.rst:241 msgid "**Setting up the GRE tunnel**" msgstr "**Setting up the GRE tunnel**" @@ -566,6 +585,10 @@ msgstr "**VyOS Router:**" msgid "**Weight check**" msgstr "**Weight check**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" @@ -575,11 +598,25 @@ msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 1 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" msgstr "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" +#: ../../configuration/service/pppoe-server.rst:474 +#: ../../configuration/vpn/l2tp.rst:428 +#: ../../configuration/vpn/pptp.rst:352 +#: ../../configuration/vpn/sstp.rst:386 +msgid "**allow** - Negotiate IPv4 only if client requests (Default value)" +msgstr "**allow** - Negotiate IPv4 only if client requests (Default value)" + +#: ../../configuration/service/pppoe-server.rst:349 +#: ../../configuration/vpn/l2tp.rst:293 +#: ../../configuration/vpn/pptp.rst:217 +#: ../../configuration/vpn/sstp.rst:251 +msgid "**allow** - Negotiate IPv6 only if client requests" +msgstr "**allow** - Negotiate IPv6 only if client requests" + #: ../../configuration/container/index.rst:38 msgid "**allow-host-networks** cannot be used with **network**" msgstr "**allow-host-networks** cannot be used with **network**" -#: ../../configuration/container/index.rst:102 +#: ../../configuration/container/index.rst:107 msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" msgstr "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" @@ -595,6 +632,10 @@ msgstr "**application**: analyzes received flow data in the context of intrusion msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." msgstr "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." +#: ../../configuration/service/ids.rst:90 +msgid "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." +msgstr "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." + #: ../../configuration/protocols/ospf.rst:435 msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." @@ -603,6 +644,13 @@ msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." +#: ../../configuration/service/pppoe-server.rst:401 +#: ../../configuration/vpn/l2tp.rst:345 +#: ../../configuration/vpn/pptp.rst:269 +#: ../../configuration/vpn/sstp.rst:303 +msgid "**calling-sid** - Calculate interface identifier from calling-station-id." +msgstr "**calling-sid** - Calculate interface identifier from calling-station-id." + #: ../../configuration/protocols/ospf.rst:121 msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." msgstr "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." @@ -619,7 +667,28 @@ msgstr "**default** – this area will be used for shortcutting only if ABR doe msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." msgstr "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." -#: ../../configuration/vpn/sstp.rst:199 +#: ../../configuration/service/pppoe-server.rst:566 +msgid "**deny**: Deny second session authorization." +msgstr "**deny**: Deny second session authorization." + +#: ../../configuration/service/pppoe-server.rst:475 +#: ../../configuration/vpn/l2tp.rst:429 +#: ../../configuration/vpn/pptp.rst:353 +#: ../../configuration/vpn/sstp.rst:387 +msgid "**deny** - Do not negotiate IPv4" +msgstr "**deny** - Do not negotiate IPv4" + +#: ../../configuration/service/pppoe-server.rst:350 +#: ../../configuration/vpn/l2tp.rst:294 +#: ../../configuration/vpn/pptp.rst:218 +#: ../../configuration/vpn/sstp.rst:252 +msgid "**deny** - Do not negotiate IPv6 (default value)" +msgstr "**deny** - Do not negotiate IPv6 (default value)" + +#: ../../configuration/service/pppoe-server.rst:507 +#: ../../configuration/vpn/l2tp.rst:461 +#: ../../configuration/vpn/pptp.rst:385 +#: ../../configuration/vpn/sstp.rst:419 msgid "**deny** - deny mppe" msgstr "**deny** - deny mppe" @@ -635,6 +704,10 @@ msgstr "**dhcp** interface address is received by DHCP from a DHCP server on thi msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." +#: ../../configuration/service/pppoe-server.rst:565 +msgid "**disable**: Disables session control." +msgstr "**disable**: Disables session control." + #: ../../configuration/service/dhcp-relay.rst:75 msgid "**discard:** Received packets which already contain relay information will be discarded." msgstr "**discard:** Received packets which already contain relay information will be discarded." @@ -667,6 +740,17 @@ msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It co msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." +#: ../../configuration/service/pppoe-server.rst:400 +#: ../../configuration/vpn/l2tp.rst:344 +#: ../../configuration/vpn/pptp.rst:268 +#: ../../configuration/vpn/sstp.rst:302 +msgid "**ipv4-addr** - Calculate interface identifier from IPv4 address." +msgstr "**ipv4-addr** - Calculate interface identifier from IPv4 address." + +#: ../../configuration/service/ipoe-server.rst:91 +msgid "**l2**: It means that clients are on same network where interface is.**(default)**" +msgstr "**l2**: It means that clients are on same network where interface is.**(default)**" + #: ../../configuration/interfaces/bonding.rst:161 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" msgstr "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" @@ -707,10 +791,18 @@ msgstr "**level-2-only** - Act as an area (Level 2) router only." msgid "**level-2-only** - Level-2 only adjacencies are formed" msgstr "**level-2-only** - Level-2 only adjacencies are formed" -#: ../../configuration/vpn/sstp.rst:105 +#: ../../configuration/service/ipoe-server.rst:65 +#: ../../configuration/service/pppoe-server.rst:43 +#: ../../configuration/vpn/l2tp.rst:31 +#: ../../configuration/vpn/pptp.rst:32 +#: ../../configuration/vpn/sstp.rst:58 msgid "**local**: All authentication queries are handled locally." msgstr "**local**: All authentication queries are handled locally." +#: ../../configuration/service/ipoe-server.rst:93 +msgid "**local**: It means that client are behind some router." +msgstr "**local**: It means that client are behind some router." + #: ../../configuration/interfaces/wireguard.rst:140 msgid "**local side - commands**" msgstr "**local side - commands**" @@ -719,34 +811,55 @@ msgstr "**local side - commands**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**narrow** - Use old style of TLVs with narrow metric." -#: ../../configuration/container/index.rst:119 +#: ../../configuration/container/index.rst:124 msgid "**net-admin**: Network operations (interface, firewall, routing tables)" msgstr "**net-admin**: Network operations (interface, firewall, routing tables)" -#: ../../configuration/container/index.rst:120 +#: ../../configuration/container/index.rst:125 msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" msgstr "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" -#: ../../configuration/container/index.rst:121 +#: ../../configuration/container/index.rst:126 msgid "**net-raw**: Permission to create raw network sockets" msgstr "**net-raw**: Permission to create raw network sockets" -#: ../../configuration/container/index.rst:100 +#: ../../configuration/container/index.rst:105 msgid "**no**: Do not restart containers on exit" msgstr "**no**: Do not restart containers on exit" +#: ../../configuration/service/ipoe-server.rst:66 +msgid "**noauth**: Authentication disabled" +msgstr "**noauth**: Authentication disabled" + +#: ../../configuration/service/pppoe-server.rst:44 +#: ../../configuration/vpn/pptp.rst:33 +msgid "**noauth**: Authentication disabled." +msgstr "**noauth**: Authentication disabled." + #: ../../configuration/service/dns.rst:66 msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." -#: ../../configuration/container/index.rst:101 +#: ../../configuration/container/index.rst:106 msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires `<value>`." +msgstr "**order** Rule order. Requires `<value>`." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." @@ -755,10 +868,35 @@ msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It config msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." -#: ../../configuration/vpn/sstp.rst:198 +#: ../../configuration/service/pppoe-server.rst:473 +#: ../../configuration/vpn/l2tp.rst:427 +#: ../../configuration/vpn/pptp.rst:351 +#: ../../configuration/vpn/sstp.rst:385 +msgid "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" + +#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/vpn/l2tp.rst:292 +#: ../../configuration/vpn/pptp.rst:216 +#: ../../configuration/vpn/sstp.rst:250 +msgid "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" + +#: ../../configuration/vpn/sstp.rst:204 msgid "**prefer** - ask client for mppe, if it rejects don't fail" msgstr "**prefer** - ask client for mppe, if it rejects don't fail" +#: ../../configuration/service/pppoe-server.rst:506 +#: ../../configuration/vpn/l2tp.rst:460 +#: ../../configuration/vpn/pptp.rst:384 +#: ../../configuration/vpn/sstp.rst:418 +msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" + +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." @@ -771,39 +909,99 @@ msgstr "**process-no-validate** In this mode the recursor acts as a \"security a msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." -#: ../../configuration/vpn/sstp.rst:103 +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + +#: ../../configuration/service/ipoe-server.rst:63 +#: ../../configuration/service/pppoe-server.rst:41 +#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/vpn/pptp.rst:30 +#: ../../configuration/vpn/sstp.rst:56 msgid "**radius**: All authentication queries are handled by a configured RADIUS server." msgstr "**radius**: All authentication queries are handled by a configured RADIUS server." +#: ../../configuration/service/pppoe-server.rst:391 +#: ../../configuration/service/pppoe-server.rst:398 +#: ../../configuration/vpn/l2tp.rst:335 +#: ../../configuration/vpn/l2tp.rst:342 +#: ../../configuration/vpn/pptp.rst:259 +#: ../../configuration/vpn/pptp.rst:266 +#: ../../configuration/vpn/sstp.rst:293 +#: ../../configuration/vpn/sstp.rst:300 +msgid "**random** - Random interface identifier for IPv6" +msgstr "**random** - Random interface identifier for IPv6" + +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires `<value>`." +msgstr "**regexp** Regular expression. Requires `<value>`." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**remote side - commands**" +#: ../../configuration/service/pppoe-server.rst:567 +msgid "**replace**: Terminate first session when second is authorized **(default)**" +msgstr "**replace**: Terminate first session when second is authorized **(default)**" + #: ../../configuration/service/dhcp-relay.rst:81 msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." -#: ../../configuration/vpn/sstp.rst:197 +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + +#: ../../configuration/service/pppoe-server.rst:472 +#: ../../configuration/vpn/l2tp.rst:426 +#: ../../configuration/vpn/pptp.rst:350 +#: ../../configuration/vpn/sstp.rst:384 +msgid "**require** - Require IPv4 negotiation" +msgstr "**require** - Require IPv4 negotiation" + +#: ../../configuration/service/pppoe-server.rst:347 +#: ../../configuration/vpn/l2tp.rst:291 +#: ../../configuration/vpn/pptp.rst:215 +#: ../../configuration/vpn/sstp.rst:249 +msgid "**require** - Require IPv6 negotiation" +msgstr "**require** - Require IPv6 negotiation" + +#: ../../configuration/service/pppoe-server.rst:505 +#: ../../configuration/vpn/l2tp.rst:459 +#: ../../configuration/vpn/pptp.rst:383 +#: ../../configuration/vpn/sstp.rst:417 msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**right**" -#: ../../configuration/container/index.rst:122 +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires `<value>`." +msgstr "**service** Service type. Requires `<value>`." + +#: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" +#: ../../configuration/service/ipoe-server.rst:99 +msgid "**shared**: Multiple clients share the same network. **(default)**" +msgstr "**shared**: Multiple clients share the same network. **(default)**" + #: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." msgstr "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." -#: ../../configuration/container/index.rst:123 +#: ../../configuration/container/index.rst:128 msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" msgstr "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" -#: ../../configuration/container/index.rst:124 +#: ../../configuration/container/index.rst:129 msgid "**sys-time**: Permission to set system clock" msgstr "**sys-time**: Permission to set system clock" @@ -819,10 +1017,25 @@ msgstr "**upstream:** The upstream network interface is the outgoing interface w msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." msgstr "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." +#: ../../configuration/service/ipoe-server.rst:100 +msgid "**vlan**: One VLAN per client." +msgstr "**vlan**: One VLAN per client." + #: ../../configuration/protocols/isis.rst:102 msgid "**wide** - Use new style of TLVs to carry wider metric." msgstr "**wide** - Use new style of TLVs to carry wider metric." +#: ../../configuration/service/pppoe-server.rst:392 +#: ../../configuration/service/pppoe-server.rst:399 +#: ../../configuration/vpn/l2tp.rst:336 +#: ../../configuration/vpn/l2tp.rst:343 +#: ../../configuration/vpn/pptp.rst:260 +#: ../../configuration/vpn/pptp.rst:267 +#: ../../configuration/vpn/sstp.rst:294 +#: ../../configuration/vpn/sstp.rst:301 +msgid "**x:x:x:x** - Specify interface identifier for IPv6" +msgstr "**x:x:x:x** - Specify interface identifier for IPv6" + #: ../../configuration/protocols/bgp.rst:143 msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." msgstr "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." @@ -887,7 +1100,7 @@ msgstr "0 if not defined, which means no refreshing." msgid "0 if not defined." msgstr "0 if not defined." -#: ../../configuration/service/dhcp-server.rst:237 +#: ../../configuration/service/dhcp-server.rst:293 #: ../../configuration/system/syslog.rst:114 #: ../../configuration/system/syslog.rst:173 #: ../../configuration/trafficpolicy/index.rst:801 @@ -950,7 +1163,7 @@ msgstr "10 - 10 MBit/s" msgid "11" msgstr "11" -#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:375 msgid "119" msgstr "119" @@ -960,11 +1173,11 @@ msgstr "119" msgid "12" msgstr "12" -#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:380 msgid "121, 249" msgstr "121, 249" -#: ../../configuration/service/dhcp-server.rst:304 +#: ../../configuration/service/dhcp-server.rst:360 #: ../../configuration/system/syslog.rst:138 #: ../../configuration/trafficpolicy/index.rst:870 msgid "13" @@ -976,7 +1189,7 @@ msgstr "13" msgid "14" msgstr "14" -#: ../../configuration/service/dhcp-server.rst:264 +#: ../../configuration/service/dhcp-server.rst:320 #: ../../configuration/system/syslog.rst:142 #: ../../configuration/trafficpolicy/index.rst:866 msgid "15" @@ -1000,7 +1213,7 @@ msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" msgid "18" msgstr "18" -#: ../../configuration/service/dhcp-server.rst:269 +#: ../../configuration/service/dhcp-server.rst:325 #: ../../configuration/system/syslog.rst:150 msgid "19" msgstr "19" @@ -1025,7 +1238,7 @@ msgstr "1: Enable DAD (default)" msgid "1 if not defined." msgstr "1 if not defined." -#: ../../configuration/service/dhcp-server.rst:243 +#: ../../configuration/service/dhcp-server.rst:299 #: ../../configuration/system/syslog.rst:116 #: ../../configuration/system/syslog.rst:178 #: ../../configuration/trafficpolicy/index.rst:799 @@ -1059,7 +1272,7 @@ msgstr "25000 - 25 GBit/s" msgid "2500 - 2.5 GBit/s" msgstr "2500 - 2.5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:329 +#: ../../configuration/service/dhcp-server.rst:385 msgid "252" msgstr "252" @@ -1087,7 +1300,7 @@ msgstr "2. Since this is the first packet, connection status of this connection, msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." -#: ../../configuration/service/dhcp-server.rst:249 +#: ../../configuration/service/dhcp-server.rst:305 #: ../../configuration/system/syslog.rst:118 #: ../../configuration/system/syslog.rst:181 #: ../../configuration/trafficpolicy/index.rst:797 @@ -1115,7 +1328,7 @@ msgstr "38" msgid "3. Add a full path to the script" msgstr "3. Add a full path to the script" -#: ../../configuration/service/dhcp-server.rst:254 +#: ../../configuration/service/dhcp-server.rst:310 #: ../../configuration/system/syslog.rst:120 #: ../../configuration/system/syslog.rst:183 #: ../../configuration/trafficpolicy/index.rst:795 @@ -1131,11 +1344,11 @@ msgstr "40000 - 40 GBit/s" msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." -#: ../../configuration/service/dhcp-server.rst:274 +#: ../../configuration/service/dhcp-server.rst:330 msgid "42" msgstr "42" -#: ../../configuration/service/dhcp-server.rst:279 +#: ../../configuration/service/dhcp-server.rst:335 msgid "44" msgstr "44" @@ -1166,7 +1379,7 @@ msgstr "50000 - 50 GBit/s" msgid "5000 - 5 GBit/s" msgstr "5000 - 5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:284 +#: ../../configuration/service/dhcp-server.rst:340 msgid "54" msgstr "54" @@ -1179,7 +1392,7 @@ msgstr "5. Second packet for this connection is received by the router. Since co msgid "5 if not defined." msgstr "5 if not defined." -#: ../../configuration/service/dhcp-server.rst:259 +#: ../../configuration/service/dhcp-server.rst:315 #: ../../configuration/system/syslog.rst:124 #: ../../configuration/system/syslog.rst:189 #: ../../configuration/trafficpolicy/index.rst:791 @@ -1187,7 +1400,7 @@ msgstr "5 if not defined." msgid "6" msgstr "6" -#: ../../configuration/service/dhcp-server.rst:294 +#: ../../configuration/service/dhcp-server.rst:350 msgid "66" msgstr "66" @@ -1195,11 +1408,11 @@ msgstr "66" msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic." -#: ../../configuration/service/dhcp-server.rst:299 +#: ../../configuration/service/dhcp-server.rst:355 msgid "67" msgstr "67" -#: ../../configuration/service/dhcp-server.rst:309 +#: ../../configuration/service/dhcp-server.rst:365 msgid "69" msgstr "69" @@ -1222,7 +1435,7 @@ msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defin msgid "7" msgstr "7" -#: ../../configuration/service/dhcp-server.rst:314 +#: ../../configuration/service/dhcp-server.rst:370 msgid "70" msgstr "70" @@ -1299,19 +1512,19 @@ msgstr "<x.x.x.x>-<x.x.x.x>: IP range to match." msgid "<x.x.x.x>: IP address to match." msgstr "<x.x.x.x>: IP address to match." -#: ../../configuration/pki/index.rst:252 +#: ../../configuration/pki/index.rst:283 msgid "ACME" msgstr "ACME" -#: ../../configuration/pki/index.rst:281 +#: ../../configuration/pki/index.rst:312 msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" -#: ../../configuration/protocols/static.rst:150 +#: ../../configuration/protocols/static.rst:183 msgid "ARP" msgstr "ARP" @@ -1335,7 +1548,11 @@ msgstr "A *bit* is written as **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." -#: ../../configuration/protocols/bgp.rst:929 +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + +#: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" @@ -1351,7 +1568,7 @@ msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by msgid "A Rule-Set can be applied to every interface:" msgstr "A Rule-Set can be applied to every interface:" -#: ../../configuration/service/dhcp-server.rst:561 +#: ../../configuration/service/dhcp-server.rst:620 msgid "A SNTP server address can be specified for DHCPv6 clients." msgstr "A SNTP server address can be specified for DHCPv6 clients." @@ -1363,11 +1580,11 @@ msgstr "A VRF device is created with an associated route table. Network interfac msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." -#: ../../configuration/service/dhcp-server.rst:533 +#: ../../configuration/service/dhcp-server.rst:592 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." @@ -1379,11 +1596,15 @@ msgstr "A basic configuration requires a tunnel source (source-address), a tunne msgid "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." -#: ../../configuration/interfaces/bridge.rst:195 -#: ../../configuration/interfaces/bridge.rst:229 +#: ../../configuration/interfaces/bridge.rst:204 +#: ../../configuration/interfaces/bridge.rst:238 msgid "A bridge named `br100`" msgstr "A bridge named `br100`" +#: ../../configuration/container/index.rst:144 +msgid "A brief description what this network is all about." +msgstr "A brief description what this network is all about." + #: ../../configuration/trafficpolicy/index.rst:147 msgid "A class can have multiple match filters:" msgstr "A class can have multiple match filters:" @@ -1396,7 +1617,11 @@ msgstr "A common example is the case of some policies which, in order to be effe msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" msgstr "A complete LDAP auth OpenVPN configuration could look like the following example:" -#: ../../configuration/vpn/sstp.rst:335 +#: ../../configuration/service/ids.rst:84 +msgid "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" +msgstr "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" + +#: ../../configuration/vpn/sstp.rst:508 msgid "A connection attempt will be shown as:" msgstr "A connection attempt will be shown as:" @@ -1420,7 +1645,7 @@ msgstr "A domain name is the label (name) assigned to a computer network and is msgid "A dummy interface for the provider-assigned IP;" msgstr "A dummy interface for the provider-assigned IP;" -#: ../../configuration/highavailability/index.rst:426 +#: ../../configuration/highavailability/index.rst:436 msgid "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." @@ -1428,7 +1653,7 @@ msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availabi msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." -#: ../../configuration/service/dhcp-server.rst:152 +#: ../../configuration/service/dhcp-server.rst:201 msgid "A generic `<name>` referencing this sync service." msgstr "A generic `<name>` referencing this sync service." @@ -1436,11 +1661,11 @@ msgstr "A generic `<name>` referencing this sync service." msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." msgstr "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." -#: ../../configuration/pki/index.rst:189 +#: ../../configuration/pki/index.rst:191 msgid "A human readable description what this CA is about." msgstr "A human readable description what this CA is about." -#: ../../configuration/pki/index.rst:228 +#: ../../configuration/pki/index.rst:230 msgid "A human readable description what this certificate is about." msgstr "A human readable description what this certificate is about." @@ -1448,6 +1673,10 @@ msgstr "A human readable description what this certificate is about." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." @@ -1456,7 +1685,7 @@ msgstr "A managed device is a network node that implements an SNMP interface tha msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." msgstr "A match filter can contain multiple criteria and will match traffic if all those criteria are true." -#: ../../configuration/protocols/bfd.rst:138 +#: ../../configuration/protocols/bfd.rst:145 msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." msgstr "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." @@ -1476,7 +1705,7 @@ msgstr "A packet rate limit can be set for a rule to apply the rule to traffic a msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." -#: ../../configuration/protocols/bgp.rst:698 +#: ../../configuration/protocols/bgp.rst:720 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." msgstr "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." @@ -1488,7 +1717,7 @@ msgstr "A physical interface is required to connect this MACsec instance to. Tra msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" -#: ../../configuration/firewall/ipv4.rst:485 +#: ../../configuration/firewall/ipv4.rst:508 #: ../../configuration/firewall/ipv6.rst:491 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." @@ -1526,11 +1755,11 @@ msgstr "A segment ID that contains an IP address prefix calculated by an IGP in msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." -#: ../../configuration/service/dhcp-server.rst:589 +#: ../../configuration/service/dhcp-server.rst:648 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" -#: ../../configuration/protocols/bgp.rst:1146 +#: ../../configuration/protocols/bgp.rst:1168 msgid "A simple BGP configuration via IPv6." msgstr "A simple BGP configuration via IPv6." @@ -1538,7 +1767,7 @@ msgstr "A simple BGP configuration via IPv6." msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." msgstr "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." -#: ../../configuration/protocols/bgp.rst:1101 +#: ../../configuration/protocols/bgp.rst:1123 msgid "A simple eBGP configuration:" msgstr "A simple eBGP configuration:" @@ -1602,7 +1831,7 @@ msgstr "A very small buffer will soon start dropping packets." msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." -#: ../../configuration/service/dns.rst:397 +#: ../../configuration/service/dns.rst:411 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." msgstr "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." @@ -1622,6 +1851,21 @@ msgstr "Accept SSH connections for the given `<device>` on TCP port `<port>`. Af msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." msgstr "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." +#: ../../configuration/service/pppoe-server.rst:384 +#: ../../configuration/vpn/l2tp.rst:328 +#: ../../configuration/vpn/pptp.rst:252 +#: ../../configuration/vpn/sstp.rst:286 +msgid "Accept peer interface identifier. By default is not defined." +msgstr "Accept peer interface identifier. By default is not defined." + +#: ../../configuration/service/ipoe-server.rst:364 +#: ../../configuration/service/pppoe-server.rst:530 +#: ../../configuration/vpn/l2tp.rst:484 +#: ../../configuration/vpn/pptp.rst:408 +#: ../../configuration/vpn/sstp.rst:442 +msgid "Acceptable rate of connections (e.g. 1/min, 60/sec)" +msgstr "Acceptable rate of connections (e.g. 1/min, 60/sec)" + #: ../../configuration/policy/access-list.rst:3 msgid "Access List Policy" msgstr "Access List Policy" @@ -1665,7 +1909,7 @@ msgstr "Add Power Constraint element to Beacon and Probe Response frames." msgid "Add a forwarding rule matching UDP port on your internet router." msgstr "Add a forwarding rule matching UDP port on your internet router." -#: ../../configuration/container/index.rst:113 +#: ../../configuration/container/index.rst:118 msgid "Add a host device to the container." msgstr "Add a host device to the container." @@ -1693,11 +1937,11 @@ msgstr "Add new port to SSL-ports acl. Ports included by default in SSL-ports ac msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" msgstr "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" -#: ../../configuration/policy/route-map.rst:221 +#: ../../configuration/policy/route-map.rst:224 msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" msgstr "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" -#: ../../configuration/policy/route-map.rst:236 +#: ../../configuration/policy/route-map.rst:239 msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" @@ -1705,11 +1949,11 @@ msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0 msgid "Add policy route matching VLAN source addresses" msgstr "Add policy route matching VLAN source addresses" -#: ../../configuration/pki/index.rst:217 +#: ../../configuration/pki/index.rst:219 msgid "Add public key portion for the certificate named `name` to the VyOS CLI." msgstr "Add public key portion for the certificate named `name` to the VyOS CLI." -#: ../../configuration/pki/index.rst:193 +#: ../../configuration/pki/index.rst:195 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." msgstr "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." @@ -1717,11 +1961,11 @@ msgstr "Add the CAs private key to the VyOS CLI. This should never leave the sys msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." -#: ../../configuration/pki/index.rst:232 +#: ../../configuration/pki/index.rst:234 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." msgstr "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." -#: ../../configuration/pki/index.rst:174 +#: ../../configuration/pki/index.rst:176 msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." @@ -1729,7 +1973,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -1765,11 +2009,11 @@ msgstr "Address Families" msgid "Address Groups" msgstr "Address Groups" -#: ../../configuration/service/dhcp-server.rst:592 +#: ../../configuration/service/dhcp-server.rst:651 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." -#: ../../configuration/service/dhcp-server.rst:582 +#: ../../configuration/service/dhcp-server.rst:641 msgid "Address pools" msgstr "Address pools" @@ -1777,14 +2021,30 @@ msgstr "Address pools" msgid "Address to listen for HTTPS requests" msgstr "Address to listen for HTTPS requests" -#: ../../configuration/container/index.rst:136 +#: ../../configuration/container/index.rst:160 +msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." +msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." + +#: ../../configuration/container/index.rst:141 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." -#: ../../configuration/protocols/bgp.rst:647 +#: ../../configuration/protocols/bgp.rst:669 msgid "Administrative Distance" msgstr "Administrative Distance" +#: ../../configuration/service/ipoe-server.rst:335 +msgid "Advanced Interface Options" +msgstr "Advanced Interface Options" + +#: ../../configuration/service/ipoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:425 +#: ../../configuration/vpn/l2tp.rst:369 +#: ../../configuration/vpn/pptp.rst:293 +#: ../../configuration/vpn/sstp.rst:327 +msgid "Advanced Options" +msgstr "Advanced Options" + #: ../../configuration/nat/nat44.rst:301 msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." msgstr "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." @@ -1797,7 +2057,11 @@ msgstr "Advantages of OpenVPN are:" msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" msgstr "Advertise DNS server per https://tools.ietf.org/html/rfc6106" -#: ../../configuration/service/router-advert.rst:53 +#: ../../configuration/service/router-advert.rst:78 +msgid "Advertising a NAT64 Prefix" +msgstr "Advertising a NAT64 Prefix" + +#: ../../configuration/service/router-advert.rst:54 msgid "Advertising a Prefix" msgstr "Advertising a Prefix" @@ -1805,7 +2069,7 @@ msgstr "Advertising a Prefix" msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" -#: ../../configuration/vrf/index.rst:325 +#: ../../configuration/vrf/index.rst:344 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." @@ -1813,10 +2077,18 @@ msgstr "After committing the configuration we can verify all leaked routes are i msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." -#: ../../configuration/pki/index.rst:212 +#: ../../configuration/vpn/ipsec.rst:418 +msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." +msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." + +#: ../../configuration/pki/index.rst:214 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." msgstr "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." +#: ../../configuration/vpn/ipsec.rst:399 +msgid "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." +msgstr "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." + #: ../../configuration/service/snmp.rst:39 msgid "Agent - software which runs on managed devices" msgstr "Agent - software which runs on managed devices" @@ -1825,7 +2097,7 @@ msgstr "Agent - software which runs on managed devices" msgid "Alert" msgstr "Alert" -#: ../../configuration/highavailability/index.rst:346 +#: ../../configuration/highavailability/index.rst:356 msgid "Algorithm" msgstr "Algorithm" @@ -1833,7 +2105,7 @@ msgstr "Algorithm" msgid "Aliases" msgstr "Aliases" -#: ../../configuration/service/dns.rst:167 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" @@ -1861,7 +2133,7 @@ msgstr "All interfaces used for the DHCP relay must be configured. This includes msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -#: ../../configuration/service/dns.rst:169 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" @@ -1897,7 +2169,11 @@ msgstr "All traffic to and from an interface within a zone is permitted." msgid "All tunnel sessions can be checked via:" msgstr "All tunnel sessions can be checked via:" -#: ../../configuration/vpn/l2tp.rst:209 +#: ../../configuration/service/ipoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:193 +#: ../../configuration/vpn/l2tp.rst:236 +#: ../../configuration/vpn/pptp.rst:176 +#: ../../configuration/vpn/sstp.rst:209 msgid "Allocation clients ip addresses by RADIUS" msgstr "Allocation clients ip addresses by RADIUS" @@ -1913,7 +2189,11 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -#: ../../configuration/service/dns.rst:359 +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -1933,13 +2213,13 @@ msgstr "Allow this BFD peer to not be directly connected" msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." -#: ../../configuration/firewall/ipv4.rst:812 +#: ../../configuration/firewall/ipv4.rst:835 #: ../../configuration/firewall/ipv6.rst:821 #: ../../configuration/system/conntrack.rst:199 msgid "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." -#: ../../configuration/interfaces/bridge.rst:162 +#: ../../configuration/interfaces/bridge.rst:171 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." msgstr "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." @@ -1947,11 +2227,11 @@ msgstr "Allows specific VLAN IDs to pass through the bridge member interface. Th msgid "Allows to define URL path matching rules for a specific service." msgstr "Allows to define URL path matching rules for a specific service." -#: ../../configuration/protocols/static.rst:69 +#: ../../configuration/protocols/static.rst:92 msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." -#: ../../configuration/protocols/static.rst:89 +#: ../../configuration/protocols/static.rst:112 msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." @@ -1977,11 +2257,11 @@ msgstr "Also, for those who haven't updated to newer version, legacy documentati msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." msgstr "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." -#: ../../configuration/protocols/static.rst:138 +#: ../../configuration/protocols/static.rst:171 msgid "Alternate Routing Tables" msgstr "Alternate Routing Tables" -#: ../../configuration/protocols/static.rst:142 +#: ../../configuration/protocols/static.rst:175 msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." msgstr "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." @@ -1989,7 +2269,7 @@ msgstr "Alternate routing tables are used with policy based routing by utilizing msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" -#: ../../configuration/service/dhcp-server.rst:116 +#: ../../configuration/service/dhcp-server.rst:132 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." @@ -2037,7 +2317,7 @@ msgstr "An agent is a network-management software module that resides on a manag msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" -#: ../../configuration/firewall/ipv4.rst:373 +#: ../../configuration/firewall/ipv4.rst:396 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." @@ -2062,7 +2342,7 @@ msgstr "An basic introduction to zone-based firewalls can be found `here <https: #: ../../configuration/interfaces/tunnel.rst:71 #: ../../configuration/interfaces/tunnel.rst:93 #: ../../configuration/interfaces/tunnel.rst:194 -#: ../../configuration/system/login.rst:195 +#: ../../configuration/system/login.rst:199 msgid "An example:" msgstr "An example:" @@ -2070,11 +2350,11 @@ msgstr "An example:" msgid "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" msgstr "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" -#: ../../configuration/interfaces/bridge.rst:227 +#: ../../configuration/interfaces/bridge.rst:236 msgid "An example of creating a VLAN-aware bridge is as follows:" msgstr "An example of creating a VLAN-aware bridge is as follows:" -#: ../../configuration/system/login.rst:149 +#: ../../configuration/system/login.rst:153 msgid "An example of key generation:" msgstr "An example of key generation:" @@ -2102,6 +2382,10 @@ msgstr "And base chain for traffic generated by the router is ``set firewall ipv msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" +#: ../../configuration/service/ids.rst:138 +msgid "And content of the script:" +msgstr "And content of the script:" + #: ../../configuration/policy/route.rst:76 msgid "And for ipv6:" msgstr "And for ipv6:" @@ -2114,7 +2398,7 @@ msgstr "And next, some configuration example where groups are used:" msgid "And op-mode commands:" msgstr "And op-mode commands:" -#: ../../configuration/system/ip.rst:84 +#: ../../configuration/system/ip.rst:97 msgid "And the different IPv4 **reset** commands available:" msgstr "And the different IPv4 **reset** commands available:" @@ -2131,6 +2415,10 @@ msgstr "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT con msgid "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." msgstr "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." +#: ../../configuration/vpn/ipsec.rst:549 +msgid "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/vrf/index.rst:52 #: ../../configuration/vrf/index.rst:62 msgid "Apply a route-map filter to routes for the specified protocol." @@ -2156,7 +2444,7 @@ msgstr "Applying a Rule-Set to a Zone" msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Applying a traffic policy" @@ -2221,11 +2509,15 @@ msgstr "As a result, the processing of each packet becomes more efficient, poten msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." msgstr "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." +#: ../../configuration/vpn/ipsec.rst:523 +msgid "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." +msgstr "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." + #: ../../configuration/firewall/flowtables.rst:109 msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." -#: ../../configuration/system/option.rst:80 +#: ../../configuration/system/option.rst:110 msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." msgstr "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." @@ -2265,7 +2557,7 @@ msgstr "As the example image below shows, the device was configured with rules b msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." msgstr "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." -#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/l2tp.rst:86 msgid "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" msgstr "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" @@ -2301,7 +2593,7 @@ msgstr "Assign `<member>` interface to bridge `<interface>`. A completion helper msgid "Assign a specific backend to a rule" msgstr "Assign a specific backend to a rule" -#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:98 msgid "Assign interface identified by `<interface>` to VRF named `<name>`." msgstr "Assign interface identified by `<interface>` to VRF named `<name>`." @@ -2309,15 +2601,18 @@ msgstr "Assign interface identified by `<interface>` to VRF named `<name>`." msgid "Assign member interfaces to PortChannel" msgstr "Assign member interfaces to PortChannel" -#: ../../configuration/vpn/sstp.rst:80 +#: ../../configuration/service/pppoe-server.rst:437 +#: ../../configuration/vpn/l2tp.rst:381 +#: ../../configuration/vpn/pptp.rst:305 +#: ../../configuration/vpn/sstp.rst:339 msgid "Assign static IP address to `<user>` account." msgstr "Assign static IP address to `<user>` account." -#: ../../configuration/service/dhcp-server.rst:97 +#: ../../configuration/service/dhcp-server.rst:113 msgid "Assign the IP address to this machine for `<time>` seconds." msgstr "Assign the IP address to this machine for `<time>` seconds." -#: ../../configuration/system/login.rst:62 +#: ../../configuration/system/login.rst:66 msgid "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." msgstr "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." @@ -2401,7 +2696,15 @@ msgstr "Attaches user-defined network to a container. Only one network must be s msgid "Authentication" msgstr "Authentication" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/service/ipoe-server.rst:310 +#: ../../configuration/service/pppoe-server.rst:428 +#: ../../configuration/vpn/l2tp.rst:372 +#: ../../configuration/vpn/pptp.rst:296 +#: ../../configuration/vpn/sstp.rst:330 +msgid "Authentication Advanced Options" +msgstr "Authentication Advanced Options" + +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Authentication (EAPoL)" @@ -2433,15 +2736,19 @@ msgstr "Authentication token" msgid "Authentication – to verify that the message is from a valid source." msgstr "Authentication – to verify that the message is from a valid source." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "Authorization token" -#: ../../configuration/service/pppoe-server.rst:159 +#: ../../configuration/service/pppoe-server.rst:228 msgid "Automatic VLAN Creation" msgstr "Automatic VLAN Creation" -#: ../../configuration/service/ipoe-server.rst:96 +#: ../../configuration/service/ipoe-server.rst:97 msgid "Automatic VLAN creation" msgstr "Automatic VLAN creation" @@ -2469,7 +2776,7 @@ msgstr "Azure-data-explorer" msgid "BFD" msgstr "BFD" -#: ../../configuration/protocols/bfd.rst:136 +#: ../../configuration/protocols/bfd.rst:143 msgid "BFD Static Route Monitoring" msgstr "BFD Static Route Monitoring" @@ -2505,7 +2812,7 @@ msgstr "BGP Example" msgid "BGP Router Configuration" msgstr "BGP Router Configuration" -#: ../../configuration/protocols/bgp.rst:888 +#: ../../configuration/protocols/bgp.rst:910 msgid "BGP Scaling Configuration" msgstr "BGP Scaling Configuration" @@ -2517,7 +2824,7 @@ msgstr "BGP aggregator attribute: AS number or IP address of an aggregation." msgid "BGP as-path list to match." msgstr "BGP as-path list to match." -#: ../../configuration/policy/route-map.rst:216 +#: ../../configuration/policy/route-map.rst:219 msgid "BGP atomic aggregate attribute." msgstr "BGP atomic aggregate attribute." @@ -2533,11 +2840,11 @@ msgstr "BGP extended community to match." msgid "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" msgstr "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" -#: ../../configuration/protocols/bgp.rst:890 +#: ../../configuration/protocols/bgp.rst:912 msgid "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." msgstr "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." -#: ../../configuration/vrf/index.rst:413 +#: ../../configuration/vrf/index.rst:432 msgid "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." msgstr "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." @@ -2557,6 +2864,10 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Balance algorithms:" @@ -2565,22 +2876,24 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" -#: ../../configuration/service/ipoe-server.rst:122 -#: ../../configuration/service/pppoe-server.rst:182 -#: ../../configuration/vpn/l2tp.rst:113 +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + +#: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "Bandwidth Shaping" -#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/ipoe-server.rst:129 #: ../../configuration/vpn/l2tp.rst:118 msgid "Bandwidth Shaping for local users" msgstr "Bandwidth Shaping for local users" -#: ../../configuration/service/pppoe-server.rst:184 +#: ../../configuration/service/pppoe-server.rst:253 msgid "Bandwidth rate limits can be set for local users or RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users or RADIUS based attributes." @@ -2588,7 +2901,7 @@ msgstr "Bandwidth rate limits can be set for local users or RADIUS based attribu msgid "Bandwidth rate limits can be set for local users or via RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users or via RADIUS based attributes." -#: ../../configuration/service/ipoe-server.rst:124 +#: ../../configuration/service/ipoe-server.rst:125 msgid "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." @@ -2640,7 +2953,7 @@ msgstr "Because an aggregator cannot be active without at least one available li msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." @@ -2648,7 +2961,11 @@ msgstr "Before enabling any hardware segmentation offload a corresponding softwa msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." -#: ../../configuration/vpn/site2site_ipsec.rst:422 +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" + +#: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." @@ -2672,6 +2989,10 @@ msgstr "Bidirectional NAT" msgid "Binary value" msgstr "Binary value" +#: ../../configuration/container/index.rst:153 +msgid "Bind container network to a given VRF instance." +msgstr "Bind container network to a given VRF instance." + #: ../../configuration/protocols/bfd.rst:39 msgid "Bind listener to specific interface/address, mandatory for IPv6" msgstr "Bind listener to specific interface/address, mandatory for IPv6" @@ -2680,7 +3001,7 @@ msgstr "Bind listener to specific interface/address, mandatory for IPv6" msgid "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." msgstr "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." -#: ../../configuration/protocols/static.rst:108 +#: ../../configuration/protocols/static.rst:142 msgid "Blackhole" msgstr "Blackhole" @@ -2708,11 +3029,11 @@ msgstr "Bond / Link Aggregation" msgid "Bond options" msgstr "Bond options" -#: ../../configuration/service/dhcp-server.rst:306 +#: ../../configuration/service/dhcp-server.rst:362 msgid "Boot image length in 512-octet blocks" msgstr "Boot image length in 512-octet blocks" -#: ../../configuration/service/dhcp-server.rst:301 +#: ../../configuration/service/dhcp-server.rst:357 msgid "Bootstrap file name" msgstr "Bootstrap file name" @@ -2752,8 +3073,8 @@ msgstr "Bridge Options" msgid "Bridge Rules" msgstr "Bridge Rules" -#: ../../configuration/interfaces/bridge.rst:198 -#: ../../configuration/interfaces/bridge.rst:233 +#: ../../configuration/interfaces/bridge.rst:207 +#: ../../configuration/interfaces/bridge.rst:242 msgid "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" msgstr "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" @@ -2761,6 +3082,14 @@ msgstr "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" msgid "Bridge maximum aging `<time>` in seconds (default: 20)." msgstr "Bridge maximum aging `<time>` in seconds (default: 20)." +#: ../../configuration/service/ipoe-server.rst:360 +#: ../../configuration/service/pppoe-server.rst:526 +#: ../../configuration/vpn/l2tp.rst:480 +#: ../../configuration/vpn/pptp.rst:404 +#: ../../configuration/vpn/sstp.rst:438 +msgid "Burst count" +msgstr "Burst count" + #: ../../configuration/interfaces/pppoe.rst:41 msgid "Business Users" msgstr "Business Users" @@ -2777,15 +3106,15 @@ msgstr "By default, FRR will bring up peering with minimal common capability for msgid "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." msgstr "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." -#: ../../configuration/system/login.rst:126 +#: ../../configuration/system/login.rst:130 msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." -#: ../../configuration/service/dns.rst:393 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." @@ -2794,6 +3123,10 @@ msgstr "By default, enabling RPKI does not change best path selection. In partic msgid "By default, it supports both planned and unplanned outages." msgstr "By default, it supports both planned and unplanned outages." +#: ../../configuration/protocols/bgp.rst:661 +msgid "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." +msgstr "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." + #: ../../configuration/service/https.rst:45 msgid "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." msgstr "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." @@ -2839,7 +3172,11 @@ msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead c msgid "Bypassing the webproxy" msgstr "Bypassing the webproxy" -#: ../../configuration/pki/index.rst:170 +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + +#: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (Certificate Authority)" @@ -2860,20 +3197,20 @@ msgstr "Capability Negotiation" msgid "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." msgstr "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." -#: ../../configuration/pki/index.rst:33 +#: ../../configuration/pki/index.rst:35 msgid "Certificate Authority (CA)" msgstr "Certificate Authority (CA)" -#: ../../configuration/pki/index.rst:185 +#: ../../configuration/pki/index.rst:187 msgid "Certificate revocation list in PEM format." msgstr "Certificate revocation list in PEM format." -#: ../../configuration/pki/index.rst:63 +#: ../../configuration/pki/index.rst:65 #: ../../configuration/vpn/sstp.rst:27 msgid "Certificates" msgstr "Certificates" -#: ../../configuration/system/option.rst:66 +#: ../../configuration/system/option.rst:96 msgid "Change system keyboard layout to given language." msgstr "Change system keyboard layout to given language." @@ -2889,7 +3226,7 @@ msgstr "Changes in BGP policies require the BGP session to be cleared. Clearing msgid "Changes to the NAT system only affect newly established connections. Already established connections are not affected." msgstr "Changes to the NAT system only affect newly established connections. Already established connections are not affected." -#: ../../configuration/system/option.rst:70 +#: ../../configuration/system/option.rst:100 msgid "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." msgstr "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." @@ -2909,11 +3246,11 @@ msgstr "Check if the Intel® QAT device is up and ready to do the job." msgid "Check status" msgstr "Check status" -#: ../../configuration/system/ipv6.rst:64 +#: ../../configuration/system/ipv6.rst:77 msgid "Check the many parameters available for the `show ipv6 route` command:" msgstr "Check the many parameters available for the `show ipv6 route` command:" -#: ../../configuration/service/pppoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:315 msgid "Checking connections" msgstr "Checking connections" @@ -2945,11 +3282,11 @@ msgstr "Class treatment" msgid "Classes" msgstr "Classes" -#: ../../configuration/service/dhcp-server.rst:326 +#: ../../configuration/service/dhcp-server.rst:382 msgid "Classless static route" msgstr "Classless static route" -#: ../../configuration/policy/route-map.rst:269 +#: ../../configuration/policy/route-map.rst:272 msgid "Clear all BGP extcommunities." msgstr "Clear all BGP extcommunities." @@ -2973,7 +3310,15 @@ msgstr "Client Authentication" msgid "Client Configuration" msgstr "Client Configuration" -#: ../../configuration/vpn/sstp.rst:289 +#: ../../configuration/service/ipoe-server.rst:328 +#: ../../configuration/service/pppoe-server.rst:446 +#: ../../configuration/vpn/l2tp.rst:400 +#: ../../configuration/vpn/pptp.rst:324 +#: ../../configuration/vpn/sstp.rst:358 +msgid "Client IP Pool Advanced Options" +msgstr "Client IP Pool Advanced Options" + +#: ../../configuration/vpn/sstp.rst:358 msgid "Client IP addresses will be provided from pool `192.0.2.0/25`" msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" @@ -2981,15 +3326,15 @@ msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" msgid "Client Side" msgstr "Client Side" -#: ../../configuration/service/ipoe-server.rst:184 +#: ../../configuration/service/ipoe-server.rst:186 msgid "Client configuration" msgstr "Client configuration" -#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:322 msgid "Client domain name" msgstr "Client domain name" -#: ../../configuration/service/dhcp-server.rst:321 +#: ../../configuration/service/dhcp-server.rst:377 msgid "Client domain search" msgstr "Client domain search" @@ -3001,7 +3346,7 @@ msgstr "Client isolation can be used to prevent low-level bridging of frames bet msgid "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" msgstr "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" -#: ../../configuration/service/dhcp-server.rst:514 +#: ../../configuration/service/dhcp-server.rst:573 msgid "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." msgstr "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." @@ -3019,11 +3364,11 @@ msgstr "Command completion can be used to list available time zones. The adjustm msgid "Command for disabling a rule but keep it in the configuration." msgstr "Command for disabling a rule but keep it in the configuration." -#: ../../configuration/vrf/index.rst:128 +#: ../../configuration/vrf/index.rst:147 msgid "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." msgstr "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." -#: ../../configuration/firewall/ipv4.rst:1179 +#: ../../configuration/firewall/ipv4.rst:1202 #: ../../configuration/firewall/ipv6.rst:1195 msgid "Command used to update GeoIP database and firewall sets." msgstr "Command used to update GeoIP database and firewall sets." @@ -3032,7 +3377,7 @@ msgstr "Command used to update GeoIP database and firewall sets." msgid "Commands" msgstr "Commands" -#: ../../configuration/service/dhcp-server.rst:379 +#: ../../configuration/service/dhcp-server.rst:436 msgid "Common configuration, valid for both primary and secondary node." msgstr "Common configuration, valid for both primary and secondary node." @@ -3059,7 +3404,7 @@ msgstr "Common interface configuration" msgid "Common parameters" msgstr "Common parameters" -#: ../../configuration/protocols/bgp.rst:927 +#: ../../configuration/protocols/bgp.rst:949 msgid "Confederation Configuration" msgstr "Confederation Configuration" @@ -3098,28 +3443,28 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/policy/local-route.rst:9 #: ../../configuration/policy/prefix-list.rst:16 #: ../../configuration/policy/route-map.rst:10 -#: ../../configuration/protocols/bfd.rst:143 +#: ../../configuration/protocols/bfd.rst:150 #: ../../configuration/protocols/bgp.rst:164 #: ../../configuration/protocols/igmp-proxy.rst:14 #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 #: ../../configuration/service/dhcp-relay.rst:19 #: ../../configuration/service/dhcp-relay.rst:137 #: ../../configuration/service/dhcp-server.rst:22 -#: ../../configuration/service/dhcp-server.rst:510 +#: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:227 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 -#: ../../configuration/service/ipoe-server.rst:28 +#: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 #: ../../configuration/service/mdns.rst:19 #: ../../configuration/service/ntp.rst:40 -#: ../../configuration/service/pppoe-server.rst:17 +#: ../../configuration/service/router-advert.rst:28 #: ../../configuration/service/salt-minion.rst:25 #: ../../configuration/service/ssh.rst:36 #: ../../configuration/service/tftp-server.rst:14 @@ -3127,18 +3472,18 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/system/default-route.rst:12 #: ../../configuration/system/flow-accounting.rst:43 #: ../../configuration/system/lcd.rst:17 -#: ../../configuration/system/login.rst:241 -#: ../../configuration/system/login.rst:310 +#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:314 #: ../../configuration/system/sflow.rst:12 #: ../../configuration/system/updates.rst:8 #: ../../configuration/vpn/dmvpn.rst:38 #: ../../configuration/vpn/dmvpn.rst:182 #: ../../configuration/vpn/openconnect.rst:21 -#: ../../configuration/vpn/sstp.rst:65 +#: ../../configuration/vpn/sstp.rst:40 #: ../../configuration/vrf/index.rst:16 -#: ../../configuration/vrf/index.rst:253 -#: ../../configuration/vrf/index.rst:288 -#: ../../configuration/vrf/index.rst:436 +#: ../../configuration/vrf/index.rst:272 +#: ../../configuration/vrf/index.rst:307 +#: ../../configuration/vrf/index.rst:455 msgid "Configuration" msgstr "Configuration" @@ -3148,8 +3493,8 @@ msgstr "Configuration" #: ../../configuration/protocols/pim6.rst:78 #: ../../configuration/protocols/rip.rst:239 #: ../../configuration/protocols/segment-routing.rst:187 -#: ../../configuration/system/login.rst:279 -#: ../../configuration/system/login.rst:350 +#: ../../configuration/system/login.rst:283 +#: ../../configuration/system/login.rst:354 msgid "Configuration Example" msgstr "Configuration Example" @@ -3171,7 +3516,7 @@ msgstr "Configuration Options" msgid "Configuration commands covered in this section:" msgstr "Configuration commands covered in this section:" -#: ../../configuration/vpn/ipsec.rst:284 +#: ../../configuration/vpn/ipsec.rst:288 msgid "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" msgstr "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" @@ -3183,7 +3528,7 @@ msgstr "Configuration commands will display. Note the command with the public ke msgid "Configuration example:" msgstr "Configuration example:" -#: ../../configuration/vrf/index.rst:430 +#: ../../configuration/vrf/index.rst:449 msgid "Configuration for these exported routes must, at a minimum, specify these two parameters." msgstr "Configuration for these exported routes must, at a minimum, specify these two parameters." @@ -3191,15 +3536,19 @@ msgstr "Configuration for these exported routes must, at a minimum, specify thes msgid "Configuration of :ref:`routing-static`" msgstr "Configuration of :ref:`routing-static`" -#: ../../configuration/service/dhcp-server.rst:371 +#: ../../configuration/service/dhcp-server.rst:427 +msgid "Configuration of a DHCP HA pair:" +msgstr "Configuration of a DHCP HA pair:" + +#: ../../configuration/service/dhcp-server.rst:411 msgid "Configuration of a DHCP failover pair" msgstr "Configuration of a DHCP failover pair" -#: ../../configuration/vrf/index.rst:438 +#: ../../configuration/vrf/index.rst:457 msgid "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." msgstr "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." -#: ../../configuration/protocols/static.rst:166 +#: ../../configuration/protocols/static.rst:199 #: ../../configuration/system/conntrack.rst:12 msgid "Configure" msgstr "Configure" @@ -3208,11 +3557,11 @@ msgstr "Configure" msgid "Configure BFD" msgstr "Configure BFD" -#: ../../configuration/service/dns.rst:258 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `<record>` which should be updated. This can be set multiple times." msgstr "Configure DNS `<record>` which should be updated. This can be set multiple times." -#: ../../configuration/service/dns.rst:253 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `<zone>` to be updated." msgstr "Configure DNS `<zone>` to be updated." @@ -3230,15 +3579,27 @@ msgstr "Configure Graceful Restart :rfc:`3623` helper support. By default, helpe msgid "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." msgstr "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." +#: ../../configuration/service/ids.rst:69 +msgid "Configure ICMP threshold parameters." +msgstr "Configure ICMP threshold parameters." + #: ../../configuration/service/dhcp-relay.rst:40 msgid "Configure IP address of the DHCP `<server>` which will handle the relayed packets." msgstr "Configure IP address of the DHCP `<server>` which will handle the relayed packets." -#: ../../configuration/vpn/sstp.rst:214 +#: ../../configuration/service/ipoe-server.rst:162 +#: ../../configuration/service/pppoe-server.rst:124 +#: ../../configuration/vpn/l2tp.rst:167 +#: ../../configuration/vpn/pptp.rst:107 +#: ../../configuration/vpn/sstp.rst:140 msgid "Configure RADIUS `<server>` and its required port for authentication requests." msgstr "Configure RADIUS `<server>` and its required port for authentication requests." -#: ../../configuration/vpn/sstp.rst:218 +#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/pppoe-server.rst:90 +#: ../../configuration/vpn/l2tp.rst:133 +#: ../../configuration/vpn/pptp.rst:73 +#: ../../configuration/vpn/sstp.rst:106 msgid "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." msgstr "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." @@ -3246,23 +3607,39 @@ msgstr "Configure RADIUS `<server>` and its required shared `<secret>` for commu msgid "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." msgstr "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." +#: ../../configuration/service/ids.rst:74 +msgid "Configure TCP threshold parameters" +msgstr "Configure TCP threshold parameters" + +#: ../../configuration/service/ids.rst:79 +msgid "Configure UDP threshold parameters" +msgstr "Configure UDP threshold parameters" + #: ../../_include/interface-mtu.txt:4 msgid "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." msgstr "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." -#: ../../configuration/system/login.rst:375 +#: ../../configuration/system/login.rst:379 msgid "Configure `<message>` which is shown after user has logged in to the system." msgstr "Configure `<message>` which is shown after user has logged in to the system." -#: ../../configuration/system/login.rst:370 +#: ../../configuration/system/login.rst:374 msgid "Configure `<message>` which is shown during SSH connect and before a user is logged in." msgstr "Configure `<message>` which is shown during SSH connect and before a user is logged in." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:440 +msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:355 msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." -#: ../../configuration/service/dns.rst:334 +#: ../../configuration/service/dns.rst:435 +msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:348 msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." @@ -3274,13 +3651,13 @@ msgstr "Configure a URL that contains information about images." msgid "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." msgstr "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." -#: ../../configuration/protocols/bfd.rst:154 -#: ../../configuration/protocols/bfd.rst:167 +#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:174 msgid "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." msgstr "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." -#: ../../configuration/protocols/bfd.rst:148 -#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:155 +#: ../../configuration/protocols/bfd.rst:168 msgid "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." msgstr "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." @@ -3304,6 +3681,10 @@ msgstr "Configure agent IP address associated with this interface." msgid "Configure aggregation delay timer interval." msgstr "Configure aggregation delay timer interval." +#: ../../configuration/service/ids.rst:24 +msgid "Configure alert script that will be executed when an attack is detected." +msgstr "Configure alert script that will be executed when an attack is detected." + #: ../../configuration/vpn/openconnect.rst:285 msgid "Configure an accounting server and enable accounting with:" msgstr "Configure an accounting server and enable accounting with:" @@ -3328,6 +3709,10 @@ msgstr "Configure backend `<name>` mode TCP or HTTP" msgid "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" msgstr "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" +#: ../../configuration/service/ids.rst:33 +msgid "Configure direction for processing traffic." +msgstr "Configure direction for processing traffic." + #: ../../configuration/service/console-server.rst:49 msgid "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." msgstr "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." @@ -3336,6 +3721,14 @@ msgstr "Configure either one or two stop bits. This defaults to one stop bits if msgid "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." msgstr "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." +#: ../../configuration/service/ids.rst:64 +msgid "Configure general threshold parameters." +msgstr "Configure general threshold parameters." + +#: ../../configuration/service/ids.rst:28 +msgid "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." +msgstr "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." + #: ../../configuration/interfaces/bridge.rst:46 msgid "Configure individual bridge port `<priority>`." msgstr "Configure individual bridge port `<priority>`." @@ -3353,6 +3746,14 @@ msgstr "Configure interface-specific Host/Router behaviour. If set, the interfac msgid "Configure interface `<interface>` with one or more interface addresses." msgstr "Configure interface `<interface>` with one or more interface addresses." +#: ../../configuration/service/ids.rst:42 +msgid "Configure listen interface for mirroring traffic." +msgstr "Configure listen interface for mirroring traffic." + +#: ../../configuration/service/ids.rst:55 +msgid "Configure local IPv4 address to listen for sflow." +msgstr "Configure local IPv4 address to listen for sflow." + #: ../../configuration/service/snmp.rst:148 msgid "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" msgstr "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" @@ -3369,7 +3770,7 @@ msgstr "Configure next-hop `<address>` for an IPv4 static route. Multiple static msgid "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." msgstr "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." -#: ../../configuration/system/option.rst:95 +#: ../../configuration/system/option.rst:125 msgid "Configure one of the predefined system performance profiles." msgstr "Configure one of the predefined system performance profiles." @@ -3381,7 +3782,7 @@ msgstr "Configure one or more attributes to the given NTP server." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure optional TTL value on the given resource record. This defaults to 600 seconds." @@ -3405,6 +3806,10 @@ msgstr "Configure port mirroring for `interface` outbound traffic and copy the t msgid "Configure port number of remote VXLAN endpoint." msgstr "Configure port number of remote VXLAN endpoint." +#: ../../configuration/service/ids.rst:59 +msgid "Configure port number to be used for sflow conection. Default port is 6343." +msgstr "Configure port number to be used for sflow conection. Default port is 6343." + #: ../../configuration/system/syslog.rst:73 msgid "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." msgstr "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." @@ -3413,6 +3818,14 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3429,7 +3842,7 @@ msgstr "Configure service `<name>` mode TCP or HTTP" msgid "Configure service `<name>` to use the backend <name>" msgstr "Configure service `<name>` to use the backend <name>" -#: ../../configuration/system/login.rst:394 +#: ../../configuration/system/login.rst:398 msgid "Configure session timeout after which the user will be logged out." msgstr "Configure session timeout after which the user will be logged out." @@ -3445,7 +3858,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:247 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." msgstr "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." @@ -3457,18 +3870,22 @@ msgstr "Configure the IPv4 or IPv6 listen address of the TFTP server. Multiple I msgid "Configure the connection tracking protocol helper modules. All modules are enable by default." msgstr "Configure the connection tracking protocol helper modules. All modules are enable by default." -#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:256 msgid "Configure the discrete port under which the RADIUS server can be reached." msgstr "Configure the discrete port under which the RADIUS server can be reached." -#: ../../configuration/system/login.rst:321 +#: ../../configuration/system/login.rst:325 msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." +#: ../../configuration/service/ids.rst:46 +msgid "Configure traffic capture mode." +msgstr "Configure traffic capture mode." + #: ../../_include/interface-mac.txt:4 msgid "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." msgstr "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." @@ -3489,10 +3906,54 @@ msgstr "Configured value" msgid "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." msgstr "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." +#: ../../configuration/service/ipoe-server.rst:27 +msgid "Configuring IPoE Server" +msgstr "Configuring IPoE Server" + +#: ../../configuration/vpn/l2tp.rst:57 +msgid "Configuring IPsec" +msgstr "Configuring IPsec" + +#: ../../configuration/vpn/l2tp.rst:12 +msgid "Configuring L2TP Server" +msgstr "Configuring L2TP Server" + +#: ../../configuration/vpn/l2tp.rst:270 +msgid "Configuring LNS (L2TP Network Server)" +msgstr "Configuring LNS (L2TP Network Server)" + +#: ../../configuration/service/pppoe-server.rst:18 +msgid "Configuring PPPoE Server" +msgstr "Configuring PPPoE Server" + +#: ../../configuration/vpn/pptp.rst:13 +msgid "Configuring PPTP Server" +msgstr "Configuring PPTP Server" + #: ../../configuration/vpn/openconnect.rst:279 msgid "Configuring RADIUS accounting" msgstr "Configuring RADIUS accounting" +#: ../../configuration/service/ipoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:76 +#: ../../configuration/vpn/l2tp.rst:119 +#: ../../configuration/vpn/pptp.rst:59 +#: ../../configuration/vpn/sstp.rst:92 +msgid "Configuring RADIUS authentication" +msgstr "Configuring RADIUS authentication" + +#: ../../configuration/vpn/sstp.rst:24 +msgid "Configuring SSTP Server" +msgstr "Configuring SSTP Server" + +#: ../../configuration/vpn/sstp.rst:476 +msgid "Configuring SSTP client" +msgstr "Configuring SSTP client" + +#: ../../configuration/vpn/ipsec.rst:494 +msgid "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." +msgstr "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." + #: ../../configuration/service/tftp-server.rst:39 msgid "Configuring a listen-address is essential for the service to work." msgstr "Configuring a listen-address is essential for the service to work." @@ -3502,11 +3963,15 @@ msgstr "Configuring a listen-address is essential for the service to work." msgid "Connect/Disconnect" msgstr "Connect/Disconnect" -#: ../../configuration/vpn/sstp.rst:155 +#: ../../configuration/service/ipoe-server.rst:376 +#: ../../configuration/service/pppoe-server.rst:546 +#: ../../configuration/vpn/l2tp.rst:500 +#: ../../configuration/vpn/pptp.rst:424 +#: ../../configuration/vpn/sstp.rst:458 msgid "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." msgstr "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." -#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:143 msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -3514,6 +3979,10 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +#: ../../configuration/protocols/rpki.rst:141 +msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." + #: ../../configuration/system/conntrack.rst:4 msgid "Conntrack" msgstr "Conntrack" @@ -3542,7 +4011,7 @@ msgstr "Console" msgid "Console Server" msgstr "Console Server" -#: ../../configuration/container/index.rst:106 +#: ../../configuration/container/index.rst:111 msgid "Constrain the memory available to the container." msgstr "Constrain the memory available to the container." @@ -3550,6 +4019,14 @@ msgstr "Constrain the memory available to the container." msgid "Container" msgstr "Container" +#: ../../configuration/container/index.rst:136 +msgid "Container Networks" +msgstr "Container Networks" + +#: ../../configuration/container/index.rst:156 +msgid "Container Registry" +msgstr "Container Registry" + #: ../../configuration/system/conntrack.rst:65 msgid "Contrack Timeouts" msgstr "Contrack Timeouts" @@ -3578,11 +4055,11 @@ msgstr "Creat community-list policy identified by name <text>." msgid "Creat extcommunity-list policy identified by name <text>." msgstr "Creat extcommunity-list policy identified by name <text>." -#: ../../configuration/service/dhcp-server.rst:104 +#: ../../configuration/service/dhcp-server.rst:120 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." -#: ../../configuration/service/dhcp-server.rst:110 +#: ../../configuration/service/dhcp-server.rst:126 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." @@ -3590,11 +4067,22 @@ msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are take msgid "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" msgstr "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" -#: ../../configuration/vpn/sstp.rst:70 +#: ../../configuration/service/pppoe-server.rst:49 +#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/pptp.rst:38 +#: ../../configuration/vpn/sstp.rst:63 msgid "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." msgstr "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." -#: ../../configuration/interfaces/bridge.rst:190 +#: ../../configuration/service/dhcp-server.rst:160 +msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." + +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + +#: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Create a basic bridge" @@ -3606,7 +4094,11 @@ msgstr "Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using msgid "Create a load balancing rule, it can be a number between 1 and 9999:" msgstr "Create a load balancing rule, it can be a number between 1 and 9999:" -#: ../../configuration/service/dhcp-server.rst:183 +#: ../../configuration/service/dhcp-server.rst:239 +msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." +msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." + +#: ../../configuration/service/dhcp-server.rst:233 msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." @@ -3614,31 +4106,31 @@ msgstr "Create a new DHCP static mapping named `<description>` which is valid fo msgid "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." msgstr "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." -#: ../../configuration/pki/index.rst:40 -#: ../../configuration/pki/index.rst:45 +#: ../../configuration/pki/index.rst:42 +#: ../../configuration/pki/index.rst:47 msgid "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." msgstr "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." -#: ../../configuration/pki/index.rst:67 -#: ../../configuration/pki/index.rst:71 +#: ../../configuration/pki/index.rst:69 +#: ../../configuration/pki/index.rst:73 msgid "Create a new public/private keypair and output the certificate on the console." msgstr "Create a new public/private keypair and output the certificate on the console." -#: ../../configuration/pki/index.rst:89 -#: ../../configuration/pki/index.rst:94 +#: ../../configuration/pki/index.rst:91 +#: ../../configuration/pki/index.rst:96 msgid "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." msgstr "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." -#: ../../configuration/pki/index.rst:77 -#: ../../configuration/pki/index.rst:82 +#: ../../configuration/pki/index.rst:79 +#: ../../configuration/pki/index.rst:84 msgid "Create a new self-signed certificate. The public/private is then shown on the console." msgstr "Create a new self-signed certificate. The public/private is then shown on the console." -#: ../../configuration/pki/index.rst:52 +#: ../../configuration/pki/index.rst:54 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." -#: ../../configuration/pki/index.rst:57 +#: ../../configuration/pki/index.rst:59 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." @@ -3686,10 +4178,15 @@ msgstr "Create named `<alias>` for the configured static mapping for `<hostname> msgid "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." msgstr "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." -#: ../../configuration/service/dns.rst:234 +#: ../../configuration/service/dns.rst:248 msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." msgstr "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 +msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." + #: ../../configuration/system/login.rst:21 msgid "Create new system user with username `<name>` and real-name specified by `<string>`." msgstr "Create new system user with username `<name>` and real-name specified by `<string>`." @@ -3698,15 +4195,19 @@ msgstr "Create new system user with username `<name>` and real-name specified by msgid "Create service `<name>` to listen on <port>" msgstr "Create service `<name>` to listen on <port>" -#: ../../configuration/container/index.rst:132 +#: ../../configuration/container/index.rst:140 msgid "Creates a named container network" msgstr "Creates a named container network" +#: ../../configuration/service/ipoe-server.rst:55 +msgid "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" +msgstr "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" + #: ../../configuration/vpn/dmvpn.rst:83 msgid "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." msgstr "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." -#: ../../configuration/interfaces/bridge.rst:192 +#: ../../configuration/interfaces/bridge.rst:201 msgid "Creating a bridge interface is very simple. In this example, we will have:" msgstr "Creating a bridge interface is very simple. In this example, we will have:" @@ -3722,6 +4223,10 @@ msgstr "Creating a traffic policy" msgid "Creating rules for using flow tables:" msgstr "Creating rules for using flow tables:" +#: ../../configuration/container/index.rst:173 +msgid "Credentials can be defined here and will only be used when adding a container image to the system." +msgstr "Credentials can be defined here and will only be used when adding a container image to the system." + #: ../../configuration/system/syslog.rst:178 msgid "Critical" msgstr "Critical" @@ -3754,7 +4259,7 @@ msgstr "Cur Hop Limit" msgid "Currently does not do much as caching is not implemented." msgstr "Currently does not do much as caching is not implemented." -#: ../../configuration/vrf/index.rst:86 +#: ../../configuration/vrf/index.rst:105 msgid "Currently dynamic routing is supported for the following protocols:" msgstr "Currently dynamic routing is supported for the following protocols:" @@ -3778,7 +4283,7 @@ msgstr "Custom firewall chains can be created, with commands ``set firewall ipv4 msgid "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." msgstr "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." -#: ../../configuration/highavailability/index.rst:373 +#: ../../configuration/highavailability/index.rst:383 msgid "Custom health-check script allows checking real-server availability" msgstr "Custom health-check script allows checking real-server availability" @@ -3794,6 +4299,14 @@ msgstr "DCO can be enabled for both new and existing tunnels,VyOS adds an option msgid "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." msgstr "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." +#: ../../configuration/service/ids.rst:5 +msgid "DDoS Protection" +msgstr "DDoS Protection" + +#: ../../configuration/service/dhcp-server.rst:181 +msgid "DHCP High Availability must be configured explicitly by the following statements on both servers:" +msgstr "DHCP High Availability must be configured explicitly by the following statements on both servers:" + #: ../../configuration/service/dhcp-relay.rst:5 msgid "DHCP Relay" msgstr "DHCP Relay" @@ -3802,15 +4315,15 @@ msgstr "DHCP Relay" msgid "DHCP Server" msgstr "DHCP Server" -#: ../../configuration/service/dhcp-server.rst:351 +#: ../../configuration/service/dhcp-server.rst:407 msgid "DHCP failover parameters" msgstr "DHCP failover parameters" -#: ../../configuration/service/dhcp-server.rst:341 +#: ../../configuration/service/dhcp-server.rst:397 msgid "DHCP lease range" msgstr "DHCP lease range" -#: ../../configuration/service/dhcp-server.rst:377 +#: ../../configuration/service/dhcp-server.rst:434 msgid "DHCP range spans from `192.168.189.10` - `192.168.189.250`" msgstr "DHCP range spans from `192.168.189.10` - `192.168.189.250`" @@ -3822,7 +4335,7 @@ msgstr "DHCP relay example" msgid "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." msgstr "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." -#: ../../configuration/service/dhcp-server.rst:584 +#: ../../configuration/service/dhcp-server.rst:643 msgid "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." msgstr "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." @@ -3887,11 +4400,11 @@ msgstr "DNS name servers" msgid "DNS search list to advertise" msgstr "DNS search list to advertise" -#: ../../configuration/service/dhcp-server.rst:261 +#: ../../configuration/service/dhcp-server.rst:317 msgid "DNS server IPv4 address" msgstr "DNS server IPv4 address" -#: ../../configuration/service/dhcp-server.rst:591 +#: ../../configuration/service/dhcp-server.rst:650 msgid "DNS server is located at ``2001:db8::ffff``" msgstr "DNS server is located at ``2001:db8::ffff``" @@ -3903,7 +4416,7 @@ msgstr "DSCP values as per :rfc:`2474` and :rfc:`4595`:" msgid "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" msgstr "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" -#: ../../configuration/firewall/ipv4.rst:444 +#: ../../configuration/firewall/ipv4.rst:467 #: ../../configuration/firewall/ipv6.rst:451 msgid "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." msgstr "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." @@ -3940,15 +4453,18 @@ msgstr "Default Gateway/Route" msgid "Default Router Preference" msgstr "Default Router Preference" -#: ../../configuration/vpn/sstp.rst:201 +#: ../../configuration/service/pppoe-server.rst:509 +#: ../../configuration/vpn/l2tp.rst:463 +#: ../../configuration/vpn/pptp.rst:387 +#: ../../configuration/vpn/sstp.rst:421 msgid "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." msgstr "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." -#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:431 msgid "Default gateway and DNS server is at `192.0.2.254`" msgstr "Default gateway and DNS server is at `192.0.2.254`" -#: ../../configuration/container/index.rst:108 +#: ../../configuration/container/index.rst:113 msgid "Default is 512 MB. Use 0 MB for unlimited memory." msgstr "Default is 512 MB. Use 0 MB for unlimited memory." @@ -3976,7 +4492,7 @@ msgstr "Defaults to 'uid'" msgid "Defaults to 225.0.0.50." msgstr "Defaults to 225.0.0.50." -#: ../../configuration/system/option.rst:68 +#: ../../configuration/system/option.rst:98 msgid "Defaults to ``us``." msgstr "Defaults to ``us``." @@ -3988,6 +4504,10 @@ msgstr "Define Conection Timeouts" msgid "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." msgstr "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." +#: ../../configuration/container/index.rst:148 +msgid "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." +msgstr "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." + #: ../../configuration/firewall/groups.rst:52 msgid "Define a IPv4 or IPv6 Network group." msgstr "Define a IPv4 or IPv6 Network group." @@ -4040,6 +4560,10 @@ msgstr "Define different modes for sending replies in response to received ARP r msgid "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." msgstr "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." +#: ../../configuration/service/ntp.rst:88 +msgid "Define how to handle leaf-seonds." +msgstr "Define how to handle leaf-seonds." + #: ../../configuration/firewall/flowtables.rst:71 msgid "Define interfaces to be used in the flowtable." msgstr "Define interfaces to be used in the flowtable." @@ -4068,7 +4592,11 @@ msgstr "Define log group to send message to. Only applicable if rule log is enab msgid "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." msgstr "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/service/dhcp-server.rst:187 +msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" +msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" + +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Define the time interval to update the local cache" @@ -4080,7 +4608,11 @@ msgstr "Define the zone as a local zone. A local zone has no interfaces and will msgid "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/interfaces/bridge.rst:135 +msgid "Define used ethertype of bridge interface." +msgstr "Define used ethertype of bridge interface." + +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." @@ -4092,26 +4624,51 @@ msgstr "Defines alternate sources for multicasting and IGMP data. The network ad msgid "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." msgstr "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." -#: ../../configuration/protocols/static.rst:120 -#: ../../configuration/protocols/static.rst:133 +#: ../../configuration/protocols/static.rst:154 +#: ../../configuration/protocols/static.rst:167 msgid "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +#: ../../configuration/service/pppoe-server.rst:496 +#: ../../configuration/vpn/l2tp.rst:450 +#: ../../configuration/vpn/pptp.rst:374 +#: ../../configuration/vpn/sstp.rst:408 +msgid "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." +msgstr "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." + #: ../../configuration/protocols/static.rst:34 #: ../../configuration/protocols/static.rst:54 -#: ../../configuration/protocols/static.rst:81 -#: ../../configuration/protocols/static.rst:101 +#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:124 msgid "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +#: ../../configuration/service/pppoe-server.rst:515 +#: ../../configuration/vpn/l2tp.rst:469 +#: ../../configuration/vpn/pptp.rst:393 +#: ../../configuration/vpn/sstp.rst:427 +msgid "Defines preferred MRU. By default is not defined." +msgstr "Defines preferred MRU. By default is not defined." + #: ../../configuration/protocols/failover.rst:31 msgid "Defines protocols for checking ARP, ICMP, TCP" msgstr "Defines protocols for checking ARP, ICMP, TCP" -#: ../../configuration/vpn/sstp.rst:178 +#: ../../configuration/vpn/sstp.rst:184 msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." +#: ../../configuration/service/pppoe-server.rst:479 +#: ../../configuration/vpn/l2tp.rst:433 +#: ../../configuration/vpn/pptp.rst:357 +#: ../../configuration/vpn/sstp.rst:391 +msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." + +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):" @@ -4120,15 +4677,15 @@ msgstr "Defines the specified device as a system console. Available console devi msgid "Defining Peers" msgstr "Defining Peers" -#: ../../configuration/service/dhcp-server.rst:579 +#: ../../configuration/service/dhcp-server.rst:638 msgid "Delegate prefixes from the range indicated by the start and stop qualifier." msgstr "Delegate prefixes from the range indicated by the start and stop qualifier." -#: ../../configuration/policy/route-map.rst:231 +#: ../../configuration/policy/route-map.rst:234 msgid "Delete BGP communities matching the community-list." msgstr "Delete BGP communities matching the community-list." -#: ../../configuration/policy/route-map.rst:246 +#: ../../configuration/policy/route-map.rst:249 msgid "Delete BGP communities matching the large-community-list." msgstr "Delete BGP communities matching the large-community-list." @@ -4136,11 +4693,15 @@ msgstr "Delete BGP communities matching the large-community-list." msgid "Delete Logs" msgstr "Delete Logs" -#: ../../configuration/policy/route-map.rst:226 +#: ../../configuration/container/index.rst:211 +msgid "Delete a particular container image based on it's image ID. You can also delete all container images at once." +msgstr "Delete a particular container image based on it's image ID. You can also delete all container images at once." + +#: ../../configuration/policy/route-map.rst:229 msgid "Delete all BGP communities" msgstr "Delete all BGP communities" -#: ../../configuration/policy/route-map.rst:241 +#: ../../configuration/policy/route-map.rst:244 msgid "Delete all BGP large-communities" msgstr "Delete all BGP large-communities" @@ -4205,15 +4766,37 @@ msgstr "Devices evaluating whether an IPv4 address is public must be updated to msgid "Different NAT Types" msgstr "Different NAT Types" -#: ../../configuration/pki/index.rst:100 +#: ../../configuration/pki/index.rst:102 msgid "Diffie-Hellman parameters" msgstr "Diffie-Hellman parameters" +#: ../../configuration/service/ids.rst:93 +msgid "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." +msgstr "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." + +#: ../../configuration/system/option.rst:46 +msgid "Disable CPU power saving mechanisms also known as C states." +msgstr "Disable CPU power saving mechanisms also known as C states." + +#: ../../configuration/service/pppoe-server.rst:457 +#: ../../configuration/vpn/l2tp.rst:411 +#: ../../configuration/vpn/pptp.rst:335 +#: ../../configuration/vpn/sstp.rst:369 +msgid "Disable Compression Control Protocol (CCP). CCP is enabled by default." +msgstr "Disable Compression Control Protocol (CCP). CCP is enabled by default." + #: ../../configuration/protocols/pim6.rst:37 msgid "Disable MLD reports and query on the interface." msgstr "Disable MLD reports and query on the interface." -#: ../../configuration/vpn/sstp.rst:75 +#: ../../configuration/system/login.rst:39 +msgid "Disable (lock) account. User will not be able to log in." +msgstr "Disable (lock) account. User will not be able to log in." + +#: ../../configuration/service/pppoe-server.rst:432 +#: ../../configuration/vpn/l2tp.rst:376 +#: ../../configuration/vpn/pptp.rst:300 +#: ../../configuration/vpn/sstp.rst:334 msgid "Disable `<user>` account." msgstr "Disable `<user>` account." @@ -4221,11 +4804,23 @@ msgstr "Disable `<user>` account." msgid "Disable a BFD peer" msgstr "Disable a BFD peer" -#: ../../configuration/container/index.rst:128 +#: ../../configuration/container/index.rst:133 msgid "Disable a container." msgstr "Disable a container." -#: ../../configuration/firewall/ipv4.rst:930 +#: ../../configuration/container/index.rst:166 +msgid "Disable a given container registry" +msgstr "Disable a given container registry" + +#: ../../configuration/system/option.rst:35 +msgid "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." +msgstr "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." + +#: ../../configuration/service/conntrack-sync.rst:103 +msgid "Disable connection logging via Syslog." +msgstr "Disable connection logging via Syslog." + +#: ../../configuration/firewall/ipv4.rst:953 #: ../../configuration/firewall/ipv6.rst:939 msgid "Disable conntrack loose track option" msgstr "Disable conntrack loose track option" @@ -4242,7 +4837,11 @@ msgstr "Disable dhcpv6-relay service." msgid "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." msgstr "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." -#: ../../configuration/protocols/bgp.rst:616 +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." + +#: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Disable immediate session reset if peer's connected link goes down." @@ -4254,6 +4853,10 @@ msgstr "Disable password based authentication. Login via SSH keys only. This har msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." @@ -4286,11 +4889,15 @@ msgstr "Disabled by default - no kernel module loaded." msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." -#: ../../configuration/protocols/static.rst:76 +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + +#: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Disables interface-based IPv4 static route." -#: ../../configuration/protocols/static.rst:96 +#: ../../configuration/protocols/static.rst:119 msgid "Disables interface-based IPv6 static route." msgstr "Disables interface-based IPv6 static route." @@ -4306,7 +4913,7 @@ msgstr "Disables web filtering without discarding configuration." msgid "Disables web proxy transparent mode at a listening address." msgstr "Disables web proxy transparent mode at a listening address." -#: ../../configuration/service/router-advert.rst:73 +#: ../../configuration/service/router-advert.rst:99 msgid "Disabling Advertisements" msgstr "Disabling Advertisements" @@ -4326,11 +4933,11 @@ msgstr "Disadvantages are:" msgid "Disassociate stations based on excessive transmission failures or other indications of connection loss." msgstr "Disassociate stations based on excessive transmission failures or other indications of connection loss." -#: ../../configuration/vrf/index.rst:142 +#: ../../configuration/vrf/index.rst:161 msgid "Display IPv4 routing table for VRF identified by `<name>`." msgstr "Display IPv4 routing table for VRF identified by `<name>`." -#: ../../configuration/vrf/index.rst:161 +#: ../../configuration/vrf/index.rst:180 msgid "Display IPv6 routing table for VRF identified by `<name>`." msgstr "Display IPv6 routing table for VRF identified by `<name>`." @@ -4338,7 +4945,7 @@ msgstr "Display IPv6 routing table for VRF identified by `<name>`." msgid "Display Logs" msgstr "Display Logs" -#: ../../configuration/system/login.rst:188 +#: ../../configuration/system/login.rst:192 msgid "Display OTP key for user" msgstr "Display OTP key for user" @@ -4346,11 +4953,11 @@ msgstr "Display OTP key for user" msgid "Display all authorization attempts of the specified image" msgstr "Display all authorization attempts of the specified image" -#: ../../configuration/protocols/static.rst:200 +#: ../../configuration/protocols/static.rst:233 msgid "Display all known ARP table entries on a given interface only (`eth1`):" msgstr "Display all known ARP table entries on a given interface only (`eth1`):" -#: ../../configuration/protocols/static.rst:188 +#: ../../configuration/protocols/static.rst:221 msgid "Display all known ARP table entries spanning across all interfaces" msgstr "Display all known ARP table entries spanning across all interfaces" @@ -4382,7 +4989,7 @@ msgstr "Displays information about all neighbors discovered via LLDP." msgid "Displays queue information for a PPPoE interface." msgstr "Displays queue information for a PPPoE interface." -#: ../../configuration/vrf/index.rst:213 +#: ../../configuration/vrf/index.rst:232 msgid "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." msgstr "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." @@ -4390,14 +4997,32 @@ msgstr "Displays the route packets taken to a network host utilizing VRF instanc msgid "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." msgstr "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." +#: ../../configuration/system/ip.rst:55 +#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:85 +msgid "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + +#: ../../configuration/system/ipv6.rst:51 +msgid "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + #: ../../_include/interface-ipv6.txt:37 msgid "Do not assign a link-local IPv6 address to this interface." msgstr "Do not assign a link-local IPv6 address to this interface." -#: ../../configuration/trafficpolicy/index.rst:1208 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + +#: ../../configuration/protocols/bgp.rst:609 +msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." +msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." + #: ../../configuration/service/dns.rst:103 msgid "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." msgstr "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." @@ -4426,7 +5051,7 @@ msgstr "Domain name(s) for which to obtain certificate" msgid "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." msgstr "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." -#: ../../configuration/pki/index.rst:259 +#: ../../configuration/pki/index.rst:290 msgid "Domain names to apply, multiple domain-names can be specified." msgstr "Domain names to apply, multiple domain-names can be specified." @@ -4435,19 +5060,19 @@ msgstr "Domain names to apply, multiple domain-names can be specified." msgid "Domain search order" msgstr "Domain search order" -#: ../../configuration/pki/index.rst:25 +#: ../../configuration/pki/index.rst:27 msgid "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" msgstr "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" -#: ../../configuration/protocols/bgp.rst:1172 +#: ../../configuration/protocols/bgp.rst:1194 msgid "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -#: ../../configuration/protocols/bgp.rst:1126 +#: ../../configuration/protocols/bgp.rst:1148 msgid "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -#: ../../configuration/vpn/site2site_ipsec.rst:299 +#: ../../configuration/vpn/site2site_ipsec.rst:302 msgid "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." msgstr "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." @@ -4459,10 +5084,17 @@ msgstr "Download/Update complete blacklist" msgid "Download/Update partial blacklist." msgstr "Download/Update partial blacklist." -#: ../../configuration/vpn/sstp.rst:85 +#: ../../configuration/service/pppoe-server.rst:262 +#: ../../configuration/vpn/l2tp.rst:386 +#: ../../configuration/vpn/pptp.rst:310 +#: ../../configuration/vpn/sstp.rst:344 msgid "Download bandwidth limit in kbit/s for `<user>`." msgstr "Download bandwidth limit in kbit/s for `<user>`." +#: ../../configuration/service/ipoe-server.rst:320 +msgid "Download bandwidth limit in kbit/s for user on interface `<interface>`." +msgstr "Download bandwidth limit in kbit/s for user on interface `<interface>`." + #: ../../configuration/policy/route-map.rst:202 msgid "Drop AS-NUMBER from the BGP AS path." msgstr "Drop AS-NUMBER from the BGP AS path." @@ -4479,7 +5111,7 @@ msgstr "Drop rate" msgid "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" msgstr "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" -#: ../../configuration/service/pppoe-server.rst:367 +#: ../../configuration/service/pppoe-server.rst:625 msgid "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" msgstr "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" @@ -4495,19 +5127,23 @@ msgstr "Dummy interface" msgid "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." msgstr "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." -#: ../../configuration/vrf/index.rst:193 +#: ../../configuration/vrf/index.rst:212 msgid "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." msgstr "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." -#: ../../configuration/pki/index.rst:285 +#: ../../configuration/pki/index.rst:316 msgid "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" msgstr "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" +#: ../../configuration/vpn/ipsec.rst:568 +msgid "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." +msgstr "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." + #: ../../configuration/service/ssh.rst:113 msgid "Dynamic-protection" msgstr "Dynamic-protection" -#: ../../configuration/service/dns.rst:212 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "Dynamic DNS" @@ -4519,11 +5155,11 @@ msgstr "EAPoL comes with an identify option. We automatically use the interface msgid "ESP Phase:" msgstr "ESP Phase:" -#: ../../configuration/vpn/ipsec.rst:111 +#: ../../configuration/vpn/ipsec.rst:113 msgid "ESP (Encapsulating Security Payload) Attributes" msgstr "ESP (Encapsulating Security Payload) Attributes" -#: ../../configuration/vpn/ipsec.rst:112 +#: ../../configuration/vpn/ipsec.rst:115 msgid "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" msgstr "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" @@ -4587,7 +5223,7 @@ msgstr "Eenables the Generic Protocol extension (VXLAN-GPE). Currently, this is msgid "Email address to associate with certificate" msgstr "Email address to associate with certificate" -#: ../../configuration/pki/index.rst:265 +#: ../../configuration/pki/index.rst:296 msgid "Email used for registration and recovery contact." msgstr "Email used for registration and recovery contact." @@ -4599,35 +5235,35 @@ msgstr "Embedding one policy into another one" msgid "Emergency" msgstr "Emergency" -#: ../../configuration/protocols/bfd.rst:89 +#: ../../configuration/protocols/bfd.rst:96 msgid "Enable BFD for ISIS on an interface" msgstr "Enable BFD for ISIS on an interface" -#: ../../configuration/protocols/bfd.rst:77 +#: ../../configuration/protocols/bfd.rst:84 msgid "Enable BFD for OSPF on an interface" msgstr "Enable BFD for OSPF on an interface" -#: ../../configuration/protocols/bfd.rst:81 +#: ../../configuration/protocols/bfd.rst:88 msgid "Enable BFD for OSPFv3 on an interface" msgstr "Enable BFD for OSPFv3 on an interface" -#: ../../configuration/protocols/bfd.rst:61 +#: ../../configuration/protocols/bfd.rst:68 msgid "Enable BFD in BGP" msgstr "Enable BFD in BGP" -#: ../../configuration/protocols/bfd.rst:85 +#: ../../configuration/protocols/bfd.rst:92 msgid "Enable BFD in ISIS" msgstr "Enable BFD in ISIS" -#: ../../configuration/protocols/bfd.rst:73 +#: ../../configuration/protocols/bfd.rst:80 msgid "Enable BFD in OSPF" msgstr "Enable BFD in OSPF" -#: ../../configuration/protocols/bfd.rst:69 +#: ../../configuration/protocols/bfd.rst:76 msgid "Enable BFD on a BGP peer group" msgstr "Enable BFD on a BGP peer group" -#: ../../configuration/protocols/bfd.rst:65 +#: ../../configuration/protocols/bfd.rst:72 msgid "Enable BFD on a single BGP neighbor" msgstr "Enable BFD on a single BGP neighbor" @@ -4635,6 +5271,10 @@ msgstr "Enable BFD on a single BGP neighbor" msgid "Enable DHCP failover configuration for this address pool." msgstr "Enable DHCP failover configuration for this address pool." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``" @@ -4651,7 +5291,7 @@ msgstr "Enable IGMP and MLD querier." msgid "Enable IGMP and MLD snooping." msgstr "Enable IGMP and MLD snooping." -#: ../../configuration/service/dhcp-server.rst:271 +#: ../../configuration/service/dhcp-server.rst:327 msgid "Enable IP forwarding on client" msgstr "Enable IP forwarding on client" @@ -4705,7 +5345,7 @@ msgstr "Enable OSPF with Segment Routing (Experimental):" msgid "Enable OSPF with route redistribution of the loopback and default originate:" msgstr "Enable OSPF with route redistribution of the loopback and default originate:" -#: ../../configuration/system/login.rst:103 +#: ../../configuration/system/login.rst:107 msgid "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." @@ -4713,6 +5353,18 @@ msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE msgid "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." msgstr "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." +#: ../../configuration/service/router-advert.rst:82 +msgid "Enable PREF64 option as outlined in :rfc:`8781`." +msgstr "Enable PREF64 option as outlined in :rfc:`8781`." + +#: ../../configuration/service/ipoe-server.rst:386 +#: ../../configuration/service/pppoe-server.rst:575 +#: ../../configuration/vpn/l2tp.rst:510 +#: ../../configuration/vpn/pptp.rst:434 +#: ../../configuration/vpn/sstp.rst:468 +msgid "Enable SNMP" +msgstr "Enable SNMP" + #: ../../configuration/service/lldp.rst:59 msgid "Enable SNMP queries of the LLDP database" msgstr "Enable SNMP queries of the LLDP database" @@ -4721,8 +5373,8 @@ msgstr "Enable SNMP queries of the LLDP database" msgid "Enable SNMP support for an individual routing daemon." msgstr "Enable SNMP support for an individual routing daemon." -#: ../../configuration/interfaces/bridge.rst:197 -#: ../../configuration/interfaces/bridge.rst:232 +#: ../../configuration/interfaces/bridge.rst:206 +#: ../../configuration/interfaces/bridge.rst:241 msgid "Enable STP" msgstr "Enable STP" @@ -4833,15 +5485,23 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." -#: ../../configuration/vrf/index.rst:461 +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + +#: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." -#: ../../configuration/vpn/sstp.rst:277 +#: ../../configuration/service/ipoe-server.rst:220 +#: ../../configuration/service/pppoe-server.rst:182 +#: ../../configuration/vpn/l2tp.rst:225 +#: ../../configuration/vpn/pptp.rst:165 +#: ../../configuration/vpn/sstp.rst:198 msgid "Enables bandwidth shaping via RADIUS." msgstr "Enables bandwidth shaping via RADIUS." -#: ../../configuration/vrf/index.rst:483 +#: ../../configuration/vrf/index.rst:502 msgid "Enables import or export of routes between the current unicast VRF and VPN." msgstr "Enables import or export of routes between the current unicast VRF and VPN." @@ -4853,6 +5513,10 @@ msgstr "Enables the Generic Protocol extension (VXLAN-GPE). Currently, this is o msgid "Enables the echo transmission mode" msgstr "Enables the echo transmission mode" +#: ../../configuration/system/option.rst:27 +msgid "Enables the root partition auto-extension and resizes to the maximum available space on system boot." +msgstr "Enables the root partition auto-extension and resizes to the maximum available space on system boot." + #: ../../configuration/service/router-advert.rst:27 msgid "Enabling Advertisments" msgstr "Enabling Advertisments" @@ -4873,11 +5537,15 @@ msgstr "Enabling this function increases the risk of bandwidth saturation." msgid "Enforce strict path checking" msgstr "Enforce strict path checking" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Enslave `<member>` interface to bond `<interface>`." -#: ../../configuration/protocols/bgp.rst:764 +#: ../../configuration/protocols/bgp.rst:786 msgid "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." msgstr "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." @@ -4913,6 +5581,10 @@ msgstr "Ethernet flow control is a mechanism for temporarily stopping the transm msgid "Ethernet options" msgstr "Ethernet options" +#: ../../configuration/interfaces/bridge.rst:137 +msgid "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." +msgstr "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." + #: ../../configuration/service/eventhandler.rst:5 msgid "Event Handler" msgstr "Event Handler" @@ -4945,11 +5617,11 @@ msgstr "Every NAT rule has a translation command defined. The address defined fo msgid "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" msgstr "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" -#: ../../configuration/system/login.rst:47 +#: ../../configuration/system/login.rst:51 msgid "Every SSH key comes in three parts:" msgstr "Every SSH key comes in three parts:" -#: ../../configuration/system/login.rst:68 +#: ../../configuration/system/login.rst:72 msgid "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" msgstr "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" @@ -4965,12 +5637,16 @@ msgstr "Every Virtual Ethernet interfaces behaves like a real Ethernet interface msgid "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." msgstr "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." +#: ../../configuration/vpn/ipsec.rst:439 +msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." +msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:98 msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." #: ../../configuration/firewall/bridge.rst:321 -#: ../../configuration/highavailability/index.rst:397 +#: ../../configuration/highavailability/index.rst:407 #: ../../configuration/interfaces/bonding.rst:291 #: ../../configuration/interfaces/l2tpv3.rst:86 #: ../../configuration/interfaces/pppoe.rst:323 @@ -4980,23 +5656,24 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:156 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 -#: ../../configuration/service/conntrack-sync.rst:186 +#: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 -#: ../../configuration/service/dhcp-server.rst:362 -#: ../../configuration/service/dns.rst:160 -#: ../../configuration/service/dns.rst:276 +#: ../../configuration/service/dhcp-server.rst:418 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 -#: ../../configuration/service/ipoe-server.rst:150 +#: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 #: ../../configuration/service/monitoring.rst:134 +#: ../../configuration/service/router-advert.rst:108 #: ../../configuration/service/snmp.rst:94 #: ../../configuration/service/snmp.rst:145 #: ../../configuration/service/tftp-server.rst:47 #: ../../configuration/system/acceleration.rst:58 -#: ../../configuration/system/login.rst:397 +#: ../../configuration/system/login.rst:401 #: ../../configuration/system/name-server.rst:28 #: ../../configuration/system/name-server.rst:63 #: ../../configuration/system/sflow.rst:49 @@ -5005,9 +5682,8 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/trafficpolicy/index.rst:1122 #: ../../configuration/vpn/dmvpn.rst:161 #: ../../configuration/vpn/openconnect.rst:97 -#: ../../configuration/vpn/sstp.rst:286 -#: ../../configuration/vrf/index.rst:99 -#: ../../configuration/vrf/index.rst:232 +#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:251 msgid "Example" msgstr "Example" @@ -5028,16 +5704,18 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../configuration/nat/nat44.rst:425 #: ../../configuration/nat/nat66.rst:78 #: ../../configuration/nat/nat66.rst:96 -#: ../../configuration/protocols/static.rst:174 -#: ../../configuration/service/dns.rst:363 +#: ../../configuration/protocols/static.rst:67 +#: ../../configuration/protocols/static.rst:135 +#: ../../configuration/protocols/static.rst:207 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 #: ../../configuration/service/ssh.rst:200 #: ../../configuration/system/flow-accounting.rst:164 -#: ../../configuration/vpn/l2tp.rst:41 -#: ../../configuration/vpn/site2site_ipsec.rst:162 -#: ../../configuration/vpn/site2site_ipsec.rst:273 +#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:276 #: ../../_include/interface-address-with-dhcp.txt:22 #: ../../_include/interface-address.txt:9 #: ../../_include/interface-description.txt:7 @@ -5105,15 +5783,15 @@ msgstr "Example: Mirror the outbound traffic of `br1` port to `eth3`" msgid "Example: Mirror the outbound traffic of `eth1` port to `eth3`" msgstr "Example: Mirror the outbound traffic of `eth1` port to `eth3`" -#: ../../configuration/interfaces/bridge.rst:166 +#: ../../configuration/interfaces/bridge.rst:175 msgid "Example: Set `eth0` member port to be allowed VLAN 4" msgstr "Example: Set `eth0` member port to be allowed VLAN 4" -#: ../../configuration/interfaces/bridge.rst:172 +#: ../../configuration/interfaces/bridge.rst:181 msgid "Example: Set `eth0` member port to be allowed VLAN 6-8" msgstr "Example: Set `eth0` member port to be allowed VLAN 6-8" -#: ../../configuration/interfaces/bridge.rst:153 +#: ../../configuration/interfaces/bridge.rst:162 msgid "Example: Set `eth0` member port to be native VLAN 2" msgstr "Example: Set `eth0` member port to be native VLAN 2" @@ -5121,13 +5799,12 @@ msgstr "Example: Set `eth0` member port to be native VLAN 2" msgid "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." -#: ../../configuration/container/index.rst:177 -#: ../../configuration/service/https.rst:77 -#: ../../configuration/service/router-advert.rst:80 +#: ../../configuration/container/index.rst:216 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Example Configuration" -#: ../../configuration/service/dns.rst:378 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Example IPv6 only:" @@ -5135,7 +5812,7 @@ msgstr "Example IPv6 only:" msgid "Example Network" msgstr "Example Network" -#: ../../configuration/firewall/ipv4.rst:1130 +#: ../../configuration/firewall/ipv4.rst:1153 #: ../../configuration/firewall/ipv6.rst:1153 msgid "Example Partial Config" msgstr "Example Partial Config" @@ -5156,27 +5833,28 @@ msgstr "Example for configuring a simple L2TP over IPsec VPN for remote access ( msgid "Example of redirection:" msgstr "Example of redirection:" -#: ../../configuration/firewall/ipv4.rst:925 +#: ../../configuration/firewall/ipv4.rst:948 #: ../../configuration/firewall/ipv6.rst:934 msgid "Example synproxy" msgstr "Example synproxy" #: ../../configuration/firewall/groups.rst:145 -#: ../../configuration/interfaces/bridge.rst:187 +#: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 -#: ../../configuration/protocols/bgp.rst:1096 +#: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 #: ../../configuration/protocols/ospf.rst:834 -#: ../../configuration/service/pppoe-server.rst:343 +#: ../../configuration/service/pppoe-server.rst:601 #: ../../configuration/service/webproxy.rst:419 msgid "Examples" msgstr "Examples" #: ../../configuration/nat/nat44.rst:154 -#: ../../configuration/vpn/site2site_ipsec.rst:157 +#: ../../configuration/vpn/site2site_ipsec.rst:160 msgid "Examples:" msgstr "Examples:" @@ -5224,6 +5902,10 @@ msgstr "External DHCPv6 server is at 2001:db8::4" msgid "External Route Summarisation" msgstr "External Route Summarisation" +#: ../../configuration/service/ids.rst:101 +msgid "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" +msgstr "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" + #: ../../configuration/trafficpolicy/index.rst:441 msgid "FQ-CoDel" msgstr "FQ-CoDel" @@ -5274,8 +5956,6 @@ msgstr "Facility Code" #: ../../configuration/loadbalancing/wan.rst:218 #: ../../configuration/protocols/failover.rst:3 -#: ../../configuration/service/dhcp-server.rst:136 -#: ../../configuration/service/dhcp-server.rst:369 msgid "Failover" msgstr "Failover" @@ -5291,6 +5971,10 @@ msgstr "Failover mechanism to use for conntrack-sync." msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Fair Queue" @@ -5303,7 +5987,15 @@ msgstr "Fair Queue is a non-shaping (work-conserving) policy, so it will only be msgid "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." msgstr "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/service/ids.rst:9 +msgid "FastNetMon" +msgstr "FastNetMon" + +#: ../../configuration/service/ids.rst:11 +msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." +msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." + +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Features of the Current Implementation" @@ -5311,11 +6003,15 @@ msgstr "Features of the Current Implementation" msgid "Field" msgstr "Field" -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:325 +msgid "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." +msgstr "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." + +#: ../../configuration/service/dns.rst:255 msgid "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." msgstr "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." -#: ../../configuration/service/pppoe-server.rst:228 +#: ../../configuration/service/pppoe-server.rst:302 msgid "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" msgstr "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" @@ -5404,7 +6100,7 @@ msgstr "Firewall groups represent collections of IP addresses, networks, ports, msgid "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." msgstr "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." -#: ../../configuration/highavailability/index.rst:381 +#: ../../configuration/highavailability/index.rst:391 msgid "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" msgstr "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" @@ -5428,7 +6124,7 @@ msgstr "Firmware Update" msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." -#: ../../configuration/vpn/ipsec.rst:267 +#: ../../configuration/vpn/ipsec.rst:271 msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." @@ -5436,6 +6132,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -5468,6 +6168,10 @@ msgstr "First the OTP keys must be generated and sent to the user and to the con msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." @@ -5492,6 +6196,30 @@ msgstr "Flow Export" msgid "Flow and packet-based balancing" msgstr "Flow and packet-based balancing" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." @@ -5544,15 +6272,15 @@ msgstr "For Hashing:" msgid "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." msgstr "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." -#: ../../configuration/policy/route-map.rst:311 +#: ../../configuration/policy/route-map.rst:314 msgid "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." msgstr "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." -#: ../../configuration/service/pppoe-server.rst:188 +#: ../../configuration/service/pppoe-server.rst:257 msgid "For Local Users" msgstr "For Local Users" -#: ../../configuration/service/pppoe-server.rst:223 +#: ../../configuration/service/pppoe-server.rst:297 msgid "For RADIUS users" msgstr "For RADIUS users" @@ -5592,7 +6320,7 @@ msgstr "For a simple home network using just the ISP's equipment, this is usuall msgid "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." msgstr "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." -#: ../../configuration/system/login.rst:132 +#: ../../configuration/system/login.rst:136 msgid "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." msgstr "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." @@ -5618,7 +6346,7 @@ msgstr "For fragmented TCP or UDP packets and all other IPv4 and IPv6 protocol t msgid "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" msgstr "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" -#: ../../configuration/protocols/bgp.rst:823 +#: ../../configuration/protocols/bgp.rst:845 msgid "For inbound updates the order of preference is:" msgstr "For inbound updates the order of preference is:" @@ -5642,7 +6370,11 @@ msgstr "For latest releases, refer the `firewall (interface-groups) <https://doc msgid "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." msgstr "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." -#: ../../configuration/service/pppoe-server.rst:299 +#: ../../configuration/protocols/bfd.rst:61 +msgid "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." +msgstr "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." + +#: ../../configuration/service/pppoe-server.rst:307 msgid "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." msgstr "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." @@ -5650,7 +6382,7 @@ msgstr "For network maintenance, it's a good idea to direct users to a backup se msgid "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." msgstr "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." -#: ../../configuration/protocols/bgp.rst:829 +#: ../../configuration/protocols/bgp.rst:851 msgid "For outbound updates the order of preference is:" msgstr "For outbound updates the order of preference is:" @@ -5691,11 +6423,11 @@ msgstr "For the :ref:`destination-nat66` rule, the destination address of the pa msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." -#: ../../configuration/container/index.rst:179 +#: ../../configuration/container/index.rst:218 msgid "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." msgstr "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." @@ -5729,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." @@ -5737,7 +6473,7 @@ msgstr "Formally, a virtual link looks like a point-to-point network connecting msgid "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." msgstr "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." -#: ../../configuration/highavailability/index.rst:362 +#: ../../configuration/highavailability/index.rst:372 msgid "Forward method" msgstr "Forward method" @@ -5765,7 +6501,7 @@ msgstr "From a security perspective, it is not recommended to let a third party msgid "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" msgstr "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" -#: ../../configuration/highavailability/index.rst:380 +#: ../../configuration/highavailability/index.rst:390 msgid "Fwmark" msgstr "Fwmark" @@ -5806,6 +6542,11 @@ msgstr "GRE is often seen as a one size fits all solution when it comes to class msgid "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." msgstr "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." +#: ../../configuration/pki/index.rst:123 +#: ../../configuration/pki/index.rst:128 +msgid "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." +msgstr "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." + #: ../../configuration/protocols/isis.rst:25 #: ../../configuration/protocols/ospf.rst:25 #: ../../configuration/protocols/ospf.rst:1081 @@ -5835,18 +6576,18 @@ msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key." msgid "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." -#: ../../configuration/pki/index.rst:153 -#: ../../configuration/pki/index.rst:157 +#: ../../configuration/pki/index.rst:155 +#: ../../configuration/pki/index.rst:159 msgid "Generate a WireGuard pre-shared secret used for peers to communicate." msgstr "Generate a WireGuard pre-shared secret used for peers to communicate." -#: ../../configuration/pki/index.rst:136 -#: ../../configuration/pki/index.rst:141 +#: ../../configuration/pki/index.rst:138 +#: ../../configuration/pki/index.rst:143 msgid "Generate a new WireGuard public/private key portion and output the result to the console." msgstr "Generate a new WireGuard public/private key portion and output the result to the console." -#: ../../configuration/pki/index.rst:104 -#: ../../configuration/pki/index.rst:111 +#: ../../configuration/pki/index.rst:106 +#: ../../configuration/pki/index.rst:113 msgid "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." msgstr "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." @@ -5882,7 +6623,7 @@ msgstr "Get detailed information about LLDP neighbors." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Getting started" @@ -5898,6 +6639,18 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +msgid "Global" +msgstr "Global" + +#: ../../configuration/service/ipoe-server.rst:352 +#: ../../configuration/service/pppoe-server.rst:518 +#: ../../configuration/vpn/l2tp.rst:472 +#: ../../configuration/vpn/pptp.rst:396 +#: ../../configuration/vpn/sstp.rst:430 +msgid "Global Advanced options" +msgstr "Global Advanced options" + #: ../../configuration/firewall/general.rst:84 msgid "Global Options" msgstr "Global Options" @@ -5910,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Global parameters" @@ -5923,6 +6676,10 @@ msgstr "Global settings" msgid "Graceful Restart" msgstr "Graceful Restart" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "Gratuitous ARP" @@ -5947,7 +6704,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "HTTP based services" @@ -5956,10 +6713,14 @@ msgstr "HTTP based services" msgid "HTTP basic authentication username" msgstr "HTTP basic authentication username" -#: ../../configuration/system/option.rst:27 +#: ../../configuration/system/option.rst:57 msgid "HTTP client" msgstr "HTTP client" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "HT (High Throughput) capabilities (802.11n)" @@ -5968,7 +6729,7 @@ msgstr "HT (High Throughput) capabilities (802.11n)" msgid "Hairpin NAT/NAT Reflection" msgstr "Hairpin NAT/NAT Reflection" -#: ../../configuration/service/dhcp-server.rst:573 +#: ../../configuration/service/dhcp-server.rst:632 msgid "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." msgstr "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." @@ -5980,7 +6741,7 @@ msgstr "Handling and monitoring" msgid "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." msgstr "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." -#: ../../configuration/highavailability/index.rst:372 +#: ../../configuration/highavailability/index.rst:382 msgid "Health-check" msgstr "Health-check" @@ -6024,7 +6785,7 @@ msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:" -#: ../../configuration/protocols/rpki.rst:167 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." @@ -6054,6 +6815,11 @@ msgstr "Hewlett-Packard call it Source-Port filtering or port-isolation" msgid "High" msgstr "High" +#: ../../configuration/service/dhcp-server.rst:170 +#: ../../configuration/service/dhcp-server.rst:425 +msgid "High Availability" +msgstr "High Availability" + #: ../../configuration/highavailability/index.rst:6 msgid "High availability" msgstr "High availability" @@ -6074,7 +6840,7 @@ msgstr "Host Information" msgid "Host name" msgstr "Host name" -#: ../../configuration/service/dhcp-server.rst:630 +#: ../../configuration/service/dhcp-server.rst:691 msgid "Host specific mapping shall be named ``client1``" msgstr "Host specific mapping shall be named ``client1``" @@ -6094,7 +6860,7 @@ msgstr "How to configure Event Handler" msgid "How to make it work" msgstr "How to make it work" -#: ../../configuration/vpn/ipsec.rst:263 +#: ../../configuration/vpn/ipsec.rst:267 msgid "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." msgstr "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." @@ -6158,14 +6924,18 @@ msgstr "IKE (Internet Key Exchange) Attributes" msgid "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" msgstr "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" -#: ../../configuration/vpn/site2site_ipsec.rst:160 +#: ../../configuration/vpn/site2site_ipsec.rst:163 msgid "IKEv1" msgstr "IKEv1" -#: ../../configuration/vpn/site2site_ipsec.rst:271 +#: ../../configuration/vpn/site2site_ipsec.rst:274 msgid "IKEv2" msgstr "IKEv2" +#: ../../configuration/vpn/ipsec.rst:372 +msgid "IKEv2 IPSec road-warriors remote-access VPN" +msgstr "IKEv2 IPSec road-warriors remote-access VPN" + #: ../../configuration/system/ip.rst:3 msgid "IP" msgstr "IP" @@ -6198,11 +6968,11 @@ msgstr "IPSec IKE and ESP Groups;" msgid "IPSec IKEv2 Remote Access VPN" msgstr "IPSec IKEv2 Remote Access VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN" msgstr "IPSec IKEv2 site2site VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" msgstr "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" @@ -6218,7 +6988,7 @@ msgstr "IPSec VPN tunnels." msgid "IP address" msgstr "IP address" -#: ../../configuration/service/dhcp-server.rst:202 +#: ../../configuration/service/dhcp-server.rst:258 msgid "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" @@ -6227,19 +6997,19 @@ msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named msgid "IP address ``192.168.2.1/24``" msgstr "IP address ``192.168.2.1/24``" -#: ../../configuration/service/dhcp-server.rst:286 +#: ../../configuration/service/dhcp-server.rst:342 msgid "IP address for DHCP server identifier" msgstr "IP address for DHCP server identifier" -#: ../../configuration/service/dhcp-server.rst:276 +#: ../../configuration/service/dhcp-server.rst:332 msgid "IP address of NTP server" msgstr "IP address of NTP server" -#: ../../configuration/service/dhcp-server.rst:316 +#: ../../configuration/service/dhcp-server.rst:372 msgid "IP address of POP3 server" msgstr "IP address of POP3 server" -#: ../../configuration/service/dhcp-server.rst:311 +#: ../../configuration/service/dhcp-server.rst:367 msgid "IP address of SMTP server" msgstr "IP address of SMTP server" @@ -6255,7 +7025,7 @@ msgstr "IP address of route to match, based on prefix-list." msgid "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." msgstr "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." -#: ../../configuration/service/dhcp-server.rst:346 +#: ../../configuration/service/dhcp-server.rst:402 msgid "IP address to exclude from DHCP lease range" msgstr "IP address to exclude from DHCP lease range" @@ -6295,7 +7065,7 @@ msgstr "IP next-hop of route to match, based on type." msgid "IP precedence as defined in :rfc:`791`:" msgstr "IP precedence as defined in :rfc:`791`:" -#: ../../configuration/vpn/l2tp.rst:33 +#: ../../configuration/vpn/l2tp.rst:83 msgid "IP protocol number 50 (ESP)" msgstr "IP protocol number 50 (ESP)" @@ -6307,19 +7077,19 @@ msgstr "IP route source of route to match, based on access-list." msgid "IP route source of route to match, based on prefix-list." msgstr "IP route source of route to match, based on prefix-list." -#: ../../configuration/service/ipoe-server.rst:7 +#: ../../configuration/service/ipoe-server.rst:5 msgid "IPoE Server" msgstr "IPoE Server" -#: ../../configuration/service/ipoe-server.rst:30 +#: ../../configuration/service/ipoe-server.rst:29 msgid "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." msgstr "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." -#: ../../configuration/service/ipoe-server.rst:13 +#: ../../configuration/service/ipoe-server.rst:11 msgid "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." msgstr "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." -#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:153 msgid "IPoE server will listen on interfaces eth1.50 and eth1.51" msgstr "IPoE server will listen on interfaces eth1.50 and eth1.51" @@ -6327,11 +7097,11 @@ msgstr "IPoE server will listen on interfaces eth1.50 and eth1.51" msgid "IPsec" msgstr "IPsec" -#: ../../configuration/vpn/ipsec.rst:172 +#: ../../configuration/vpn/ipsec.rst:176 msgid "IPsec policy matching GRE" msgstr "IPsec policy matching GRE" -#: ../../configuration/service/pppoe-server.rst:346 +#: ../../configuration/service/pppoe-server.rst:604 msgid "IPv4" msgstr "IPv4" @@ -6343,11 +7113,11 @@ msgstr "IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, msgid "IPv4 Firewall Configuration" msgstr "IPv4 Firewall Configuration" -#: ../../configuration/service/dhcp-server.rst:291 +#: ../../configuration/service/dhcp-server.rst:347 msgid "IPv4 address of next bootstrap server" msgstr "IPv4 address of next bootstrap server" -#: ../../configuration/service/dhcp-server.rst:251 +#: ../../configuration/service/dhcp-server.rst:307 msgid "IPv4 address of router on the client's subnet" msgstr "IPv4 address of router on the client's subnet" @@ -6355,7 +7125,7 @@ msgstr "IPv4 address of router on the client's subnet" msgid "IPv4 or IPv6 source address of NetFlow packets" msgstr "IPv4 or IPv6 source address of NetFlow packets" -#: ../../configuration/protocols/bgp.rst:1099 +#: ../../configuration/protocols/bgp.rst:1121 msgid "IPv4 peering" msgstr "IPv4 peering" @@ -6376,8 +7146,12 @@ msgid "IPv4 server" msgstr "IPv4 server" #: ../../configuration/interfaces/pppoe.rst:244 -#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/service/ipoe-server.rst:256 +#: ../../configuration/service/pppoe-server.rst:341 #: ../../configuration/system/ipv6.rst:3 +#: ../../configuration/vpn/l2tp.rst:286 +#: ../../configuration/vpn/pptp.rst:210 +#: ../../configuration/vpn/sstp.rst:244 msgid "IPv6" msgstr "IPv6" @@ -6385,6 +7159,13 @@ msgstr "IPv6" msgid "IPv6 Access List" msgstr "IPv6 Access List" +#: ../../configuration/service/pppoe-server.rst:381 +#: ../../configuration/vpn/l2tp.rst:325 +#: ../../configuration/vpn/pptp.rst:249 +#: ../../configuration/vpn/sstp.rst:283 +msgid "IPv6 Advanced Options" +msgstr "IPv6 Advanced Options" + #: ../../configuration/interfaces/pppoe.rst:379 msgid "IPv6 DHCPv6-PD Example" msgstr "IPv6 DHCPv6-PD Example" @@ -6417,7 +7198,7 @@ msgstr "IPv6 SLAAC and IA-PD" msgid "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" msgstr "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" -#: ../../configuration/service/dhcp-server.rst:628 +#: ../../configuration/service/dhcp-server.rst:689 msgid "IPv6 address ``2001:db8::101`` shall be statically mapped" msgstr "IPv6 address ``2001:db8::101`` shall be statically mapped" @@ -6434,10 +7215,18 @@ msgid "IPv6 address of route to match, based on specified prefix-length. Note th msgstr "IPv6 address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." #: ../../configuration/service/pppoe-server.rst:270 +msgid "IPv6 client's prefix" +msgstr "IPv6 client's prefix" + +#: ../../configuration/service/pppoe-server.rst:270 msgid "IPv6 client's prefix assignment" msgstr "IPv6 client's prefix assignment" -#: ../../configuration/protocols/bgp.rst:1144 +#: ../../configuration/service/pppoe-server.rst:295 +msgid "IPv6 default client's pool assignment" +msgstr "IPv6 default client's pool assignment" + +#: ../../configuration/protocols/bgp.rst:1166 msgid "IPv6 peering" msgstr "IPv6 peering" @@ -6445,7 +7234,7 @@ msgstr "IPv6 peering" msgid "IPv6 prefix." msgstr "IPv6 prefix." -#: ../../configuration/service/dhcp-server.rst:629 +#: ../../configuration/service/dhcp-server.rst:690 msgid "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" msgstr "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" @@ -6457,7 +7246,7 @@ msgstr "IPv6 relay" msgid "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." msgstr "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." -#: ../../configuration/service/dhcp-server.rst:502 +#: ../../configuration/service/dhcp-server.rst:561 msgid "IPv6 server" msgstr "IPv6 server" @@ -6477,7 +7266,7 @@ msgstr "IS-IS Global Configuration" msgid "IS-IS SR Configuration" msgstr "IS-IS SR Configuration" -#: ../../configuration/service/dhcp-server.rst:233 +#: ../../configuration/service/dhcp-server.rst:289 msgid "ISC-DHCP Option name" msgstr "ISC-DHCP Option name" @@ -6493,7 +7282,7 @@ msgstr "If **max-threshold** is set but **min-threshold is not, then **min-thres msgid "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." msgstr "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." -#: ../../configuration/pki/index.rst:249 +#: ../../configuration/pki/index.rst:251 msgid "If CA is present, this certificate will be included in generated CRLs" msgstr "If CA is present, this certificate will be included in generated CRLs" @@ -6517,7 +7306,11 @@ msgstr "If :cfgcmd:`strict` is set the BGP session won’t become established un msgid "If ``alias`` is set, it can be used instead of the device when connecting." msgstr "If ``alias`` is set, it can be used instead of the device when connecting." -#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/policy/route-map.rst:204 +msgid "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." +msgstr "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." + +#: ../../configuration/vpn/l2tp.rst:79 msgid "If a local firewall policy is in place on your external interface you will need to allow the ports below:" msgstr "If a local firewall policy is in place on your external interface you will need to allow the ports below:" @@ -6530,7 +7323,7 @@ msgstr "If a registry is not specified, Docker.io will be used as the container msgid "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." msgstr "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." -#: ../../configuration/protocols/bgp.rst:771 +#: ../../configuration/protocols/bgp.rst:793 msgid "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." msgstr "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." @@ -6608,7 +7401,7 @@ msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguis msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." @@ -6660,11 +7453,46 @@ msgstr "If the AS-Path for the route has only private ASNs, the private ASNs are msgid "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." msgstr "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." +#: ../../configuration/service/ipoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:205 +#: ../../configuration/vpn/l2tp.rst:248 +#: ../../configuration/vpn/pptp.rst:188 +#: ../../configuration/vpn/sstp.rst:221 +msgid "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:233 +#: ../../configuration/service/pppoe-server.rst:195 +#: ../../configuration/vpn/l2tp.rst:238 +#: ../../configuration/vpn/pptp.rst:178 +#: ../../configuration/vpn/sstp.rst:211 +msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." +msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." + #: ../../configuration/vpn/l2tp.rst:211 msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." -#: ../../configuration/vpn/l2tp.rst:218 +#: ../../configuration/service/ipoe-server.rst:237 +#: ../../configuration/service/pppoe-server.rst:199 +#: ../../configuration/vpn/l2tp.rst:242 +#: ../../configuration/vpn/pptp.rst:182 +#: ../../configuration/vpn/sstp.rst:215 +msgid "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:240 +#: ../../configuration/service/pppoe-server.rst:202 +#: ../../configuration/vpn/l2tp.rst:245 +#: ../../configuration/vpn/pptp.rst:185 +#: ../../configuration/vpn/sstp.rst:218 +msgid "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." + +#: ../../configuration/service/pppoe-server.rst:219 +#: ../../configuration/vpn/l2tp.rst:262 +#: ../../configuration/vpn/pptp.rst:202 +#: ../../configuration/vpn/sstp.rst:235 msgid "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." msgstr "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." @@ -6688,6 +7516,10 @@ msgstr "If the current queue size is larger than **queue-limit**, then packets w msgid "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" msgstr "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +#: ../../configuration/firewall/index.rst:83 +msgid "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +msgstr "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" + #: ../../configuration/firewall/index.rst:26 msgid "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" msgstr "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" @@ -6705,7 +7537,7 @@ msgstr "If the statically mapped peer is running Cisco IOS, specify the cisco ke msgid "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." msgstr "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." -#: ../../configuration/service/conntrack-sync.rst:126 +#: ../../configuration/service/conntrack-sync.rst:135 msgid "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" msgstr "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" @@ -6713,7 +7545,7 @@ msgstr "If the table is empty and you have a warning message, it means conntrack msgid "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." msgstr "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." -#: ../../configuration/vpn/site2site_ipsec.rst:241 +#: ../../configuration/vpn/site2site_ipsec.rst:244 msgid "If there is SNAT rules on eth1, need to add exclude rule" msgstr "If there is SNAT rules on eth1, need to add exclude rule" @@ -6726,14 +7558,21 @@ msgstr "If this command is invoked from configure mode with the ``run`` prefix t msgid "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." msgstr "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." -#: ../../configuration/protocols/bgp.rst:768 +#: ../../configuration/protocols/bgp.rst:790 msgid "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." msgstr "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." -#: ../../configuration/vpn/sstp.rst:183 +#: ../../configuration/vpn/sstp.rst:189 msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." +#: ../../configuration/service/pppoe-server.rst:484 +#: ../../configuration/vpn/l2tp.rst:438 +#: ../../configuration/vpn/pptp.rst:362 +#: ../../configuration/vpn/sstp.rst:396 +msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." +msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." + #: ../../_include/interface-ip.txt:75 msgid "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." msgstr "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." @@ -6750,11 +7589,11 @@ msgstr "If this parameter is not set, the default holdoff time is 30 seconds." msgid "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." msgstr "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." -#: ../../configuration/system/login.rst:270 +#: ../../configuration/system/login.rst:274 msgid "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." -#: ../../configuration/system/login.rst:339 +#: ../../configuration/system/login.rst:343 msgid "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." @@ -6774,10 +7613,14 @@ msgstr "If you are a hacker or want to try on your own we support passing raw Op msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." @@ -6786,10 +7629,17 @@ msgstr "If you are responsible for the global addresses assigned to your network msgid "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." msgstr "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." -#: ../../configuration/vpn/l2tp.rst:165 +#: ../../configuration/service/ipoe-server.rst:146 +#: ../../configuration/service/pppoe-server.rst:108 +#: ../../configuration/vpn/l2tp.rst:151 msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +#: ../../configuration/vpn/pptp.rst:91 +#: ../../configuration/vpn/sstp.rst:124 +msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." + #: ../../configuration/interfaces/openvpn.rst:306 msgid "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." msgstr "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." @@ -6813,6 +7663,10 @@ msgstr "If you enable this, you will probably want to set diversity-factor and c msgid "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." msgstr "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." +#: ../../configuration/vpn/ipsec.rst:483 +msgid "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." +msgstr "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." + #: ../../configuration/interfaces/bonding.rst:312 msgid "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." msgstr "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." @@ -6849,10 +7703,26 @@ msgstr "If you only want to check if the user account is enabled and can authent msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." +#: ../../configuration/service/ipoe-server.rst:215 +#: ../../configuration/service/pppoe-server.rst:177 +#: ../../configuration/vpn/l2tp.rst:220 +#: ../../configuration/vpn/pptp.rst:160 +#: ../../configuration/vpn/sstp.rst:193 +msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." +msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." + #: ../../configuration/system/console.rst:41 msgid "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." msgstr "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." +#: ../../configuration/vpn/sstp.rst:482 +msgid "If you use a self-signed certificate, do not forget to install CA on the client side." +msgstr "If you use a self-signed certificate, do not forget to install CA on the client side." + +#: ../../configuration/vpn/ipsec.rst:538 +msgid "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." +msgstr "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." + #: ../../configuration/system/flow-accounting.rst:140 msgid "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." msgstr "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." @@ -6861,7 +7731,7 @@ msgstr "If you want to change the maximum number of flows, which are tracking si msgid "If you want to disable a rule but let it in the configuration." msgstr "If you want to disable a rule but let it in the configuration." -#: ../../configuration/system/login.rst:294 +#: ../../configuration/system/login.rst:298 msgid "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." msgstr "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." @@ -6873,7 +7743,7 @@ msgstr "If you want to use existing blacklists you have to create/download a dat msgid "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." msgstr "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." -#: ../../configuration/protocols/bgp.rst:760 +#: ../../configuration/protocols/bgp.rst:782 msgid "Ignore AS_PATH length when selecting a route" msgstr "Ignore AS_PATH length when selecting a route" @@ -6885,7 +7755,7 @@ msgstr "Ignore VRRP main interface faults" msgid "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" msgstr "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" -#: ../../configuration/vpn/site2site_ipsec.rst:279 +#: ../../configuration/vpn/site2site_ipsec.rst:282 msgid "Imagine the following topology" msgstr "Imagine the following topology" @@ -6893,11 +7763,35 @@ msgstr "Imagine the following topology" msgid "Immediate" msgstr "Immediate" -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/pki/index.rst:254 +msgid "Import files to PKI format" +msgstr "Import files to PKI format" + +#: ../../configuration/pki/index.rst:265 +msgid "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." +msgstr "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." + +#: ../../configuration/pki/index.rst:280 +msgid "Import the OpenVPN shared secret stored in file to the VyOS CLI." +msgstr "Import the OpenVPN shared secret stored in file to the VyOS CLI." + +#: ../../configuration/pki/index.rst:271 +msgid "Import the certificate from the file to VyOS CLI." +msgstr "Import the certificate from the file to VyOS CLI." + +#: ../../configuration/pki/index.rst:275 +msgid "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." + +#: ../../configuration/pki/index.rst:261 +msgid "Import the public CA certificate from the defined file to VyOS CLI." +msgstr "Import the public CA certificate from the defined file to VyOS CLI." + +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Imported prefixes during the validation may have values:" -#: ../../configuration/protocols/static.rst:158 +#: ../../configuration/protocols/static.rst:191 msgid "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." msgstr "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." @@ -6905,7 +7799,7 @@ msgstr "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP msgid "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." msgstr "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." -#: ../../configuration/vpn/ipsec.rst:117 +#: ../../configuration/vpn/ipsec.rst:120 msgid "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." msgstr "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." @@ -6937,7 +7831,7 @@ msgstr "In a minimal configuration, the following must be provided:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "In a nutshell, the current implementation provides the following features:" @@ -6945,7 +7839,7 @@ msgstr "In a nutshell, the current implementation provides the following feature msgid "In addition, you can specify many other parameters to get BGP information:" msgstr "In addition, you can specify many other parameters to get BGP information:" -#: ../../configuration/system/login.rst:301 +#: ../../configuration/system/login.rst:305 msgid "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." @@ -6953,12 +7847,16 @@ msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service msgid "In addition to displaying flow accounting information locally, one can also exported them to a collection server." msgstr "In addition to displaying flow accounting information locally, one can also exported them to a collection server." -#: ../../configuration/pki/index.rst:144 -#: ../../configuration/pki/index.rst:159 +#: ../../configuration/pki/index.rst:146 +#: ../../configuration/pki/index.rst:161 #: ../../configuration/pki/pki_cli_import_help.txt:1 msgid "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." msgstr "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." +#: ../../configuration/interfaces/pppoe.rst:388 +msgid "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." +msgstr "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." + #: ../../configuration/service/broadcast-relay.rst:48 msgid "In addition you can also disable the whole service without the need to remove it from the current configuration." msgstr "In addition you can also disable the whole service without the need to remove it from the current configuration." @@ -7003,7 +7901,7 @@ msgstr "In firewall bridge rules, the action can be:" msgid "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." msgstr "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." -#: ../../configuration/system/login.rst:236 +#: ../../configuration/system/login.rst:240 msgid "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." msgstr "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." @@ -7011,7 +7909,7 @@ msgstr "In large deployments it is not reasonable to configure each user individ msgid "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." msgstr "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." -#: ../../configuration/service/dhcp-server.rst:161 +#: ../../configuration/service/dhcp-server.rst:211 msgid "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." msgstr "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." @@ -7023,7 +7921,7 @@ msgstr "In order for the system to use and complete unqualified host names, a li msgid "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." msgstr "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." -#: ../../configuration/protocols/bgp.rst:820 +#: ../../configuration/protocols/bgp.rst:842 msgid "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." msgstr "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." @@ -7039,7 +7937,7 @@ msgstr "In order to have VyOS Traffic Control working you need to follow 2 steps msgid "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." msgstr "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." -#: ../../configuration/service/dhcp-server.rst:623 +#: ../../configuration/service/dhcp-server.rst:684 msgid "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." msgstr "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." @@ -7055,6 +7953,10 @@ msgstr "In order to separate traffic, Fair Queue uses a classifier based on sour msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." @@ -7079,6 +7981,10 @@ msgstr "In our example, we used the key name ``openvpn-1`` which we will referen msgid "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" msgstr "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" +#: ../../configuration/vpn/ipsec.rst:411 +msgid "In our example the certificate name is called vyos:" +msgstr "In our example the certificate name is called vyos:" + #: ../../configuration/trafficpolicy/index.rst:906 msgid "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." msgstr "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." @@ -7123,7 +8029,11 @@ msgstr "In the case you want to apply some kind of **shaping** to your **inbound msgid "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." msgstr "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." -#: ../../configuration/service/pppoe-server.rst:259 +#: ../../configuration/vpn/ipsec.rst:564 +msgid "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." +msgstr "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." + +#: ../../configuration/service/pppoe-server.rst:333 msgid "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." msgstr "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." @@ -7131,7 +8041,7 @@ msgstr "In the example above, the first 499 sessions connect without delay. PADO msgid "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" msgstr "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" -#: ../../configuration/system/login.rst:399 +#: ../../configuration/system/login.rst:403 msgid "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." msgstr "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." @@ -7151,7 +8061,7 @@ msgstr "In the following example we can see a basic multicast setup:" msgid "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." msgstr "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." -#: ../../configuration/highavailability/index.rst:400 +#: ../../configuration/highavailability/index.rst:410 msgid "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" msgstr "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" @@ -7175,7 +8085,7 @@ msgstr "In this example, we use **masquerade** as the translation address instea msgid "In this example, we will be using the example Quick Start configuration above as a starting point." msgstr "In this example, we will be using the example Quick Start configuration above as a starting point." -#: ../../configuration/highavailability/index.rst:430 +#: ../../configuration/highavailability/index.rst:440 msgid "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." msgstr "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." @@ -7191,7 +8101,7 @@ msgstr "In this example we will use the most complicated case: a setup where eac msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." -#: ../../configuration/service/dns.rst:165 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "In this scenario:" @@ -7255,7 +8165,7 @@ msgstr "Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octet msgid "Indication" msgstr "Indication" -#: ../../configuration/service/dhcp-server.rst:64 +#: ../../configuration/service/dhcp-server.rst:80 msgid "Individual Client Subnet" msgstr "Individual Client Subnet" @@ -7319,6 +8229,10 @@ msgstr "Intel® QAT" msgid "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" msgstr "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" +#: ../../configuration/service/ids.rst:96 +msgid "Interface **eth0** used to connect to upstream." +msgstr "Interface **eth0** used to connect to upstream." + #: ../../configuration/protocols/isis.rst:146 #: ../../configuration/protocols/ospf.rst:356 #: ../../configuration/protocols/ospf.rst:1139 @@ -7329,7 +8243,7 @@ msgstr "Interface Configuration" msgid "Interface Groups" msgstr "Interface Groups" -#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:87 msgid "Interface Routes" msgstr "Interface Routes" @@ -7367,7 +8281,7 @@ msgid "Interface weight" msgstr "Interface weight" #: ../../configuration/interfaces/index.rst:3 -#: ../../configuration/vrf/index.rst:71 +#: ../../configuration/vrf/index.rst:90 msgid "Interfaces" msgstr "Interfaces" @@ -7388,10 +8302,18 @@ msgstr "Interfaces that participate in the DHCP relay process. If this command i msgid "Interfaces whose DHCP client nameservers to forward requests to." msgstr "Interfaces whose DHCP client nameservers to forward requests to." +#: ../../configuration/service/ids.rst:105 +msgid "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." +msgstr "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." + #: ../../configuration/system/flow-accounting.rst:70 msgid "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" msgstr "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" +#: ../../configuration/vpn/ipsec.rst:374 +msgid "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." +msgstr "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:6 msgid "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." msgstr "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." @@ -7412,7 +8334,7 @@ msgstr "Interval in milliseconds" msgid "Interval in minutes between updates (default: 60)" msgstr "Interval in minutes between updates (default: 60)" -#: ../../configuration/protocols/bgp.rst:906 +#: ../../configuration/protocols/bgp.rst:928 msgid "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." msgstr "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." @@ -7432,11 +8354,11 @@ msgstr "It's slower than IPsec due to higher protocol overhead and the fact it r msgid "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" msgstr "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" -#: ../../configuration/system/option.rst:111 +#: ../../configuration/system/option.rst:141 msgid "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." msgstr "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." -#: ../../configuration/system/option.rst:102 +#: ../../configuration/system/option.rst:132 msgid "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." msgstr "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." @@ -7457,11 +8379,11 @@ msgstr "It helps to think of the syntax as: (see below). The 'rule-set' should b msgid "It is compatible with Cisco (R) AnyConnect (R) clients." msgstr "It is compatible with Cisco (R) AnyConnect (R) clients." -#: ../../configuration/service/dhcp-server.rst:590 +#: ../../configuration/service/dhcp-server.rst:649 msgid "It is connected to ``eth1``" msgstr "It is connected to ``eth1``" -#: ../../configuration/system/login.rst:42 +#: ../../configuration/system/login.rst:46 msgid "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." msgstr "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." @@ -7477,26 +8399,31 @@ msgstr "It is important to note that when creating firewall rules, the DNAT tran msgid "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." msgstr "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." -#: ../../configuration/vrf/index.rst:505 +#: ../../configuration/vrf/index.rst:524 msgid "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." msgstr "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." -#: ../../configuration/vrf/index.rst:113 +#: ../../configuration/vrf/index.rst:132 msgid "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." msgstr "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." -#: ../../configuration/interfaces/bridge.rst:136 +#: ../../configuration/interfaces/bridge.rst:145 msgid "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" msgstr "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" -#: ../../configuration/system/login.rst:93 +#: ../../configuration/system/login.rst:97 msgid "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." msgstr "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." -#: ../../configuration/vrf/index.rst:496 +#: ../../configuration/vrf/index.rst:515 msgid "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." msgstr "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." +#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:132 +msgid "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." +msgstr "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." + #: ../../configuration/service/conntrack-sync.rst:30 msgid "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" msgstr "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" @@ -7517,7 +8444,7 @@ msgstr "It uses a stochastic model to classify incoming packets into different f msgid "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." msgstr "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." -#: ../../configuration/vrf/index.rst:220 +#: ../../configuration/vrf/index.rst:239 msgid "Join a given VRF. This will open a new subshell within the specified VRF." msgstr "Join a given VRF. This will open a new subshell within the specified VRF." @@ -7529,15 +8456,19 @@ msgstr "Jump to a different rule in this route-map on a match." msgid "Juniper EX Switch" msgstr "Juniper EX Switch" +#: ../../configuration/system/option.rst:31 +msgid "Kernel" +msgstr "Kernel" + #: ../../configuration/system/syslog.rst:112 msgid "Kernel messages" msgstr "Kernel messages" -#: ../../configuration/system/login.rst:40 +#: ../../configuration/system/login.rst:44 msgid "Key Based Authentication" msgstr "Key Based Authentication" -#: ../../configuration/pki/index.rst:30 +#: ../../configuration/pki/index.rst:32 msgid "Key Generation" msgstr "Key Generation" @@ -7545,7 +8476,7 @@ msgstr "Key Generation" msgid "Key Management" msgstr "Key Management" -#: ../../configuration/vpn/site2site_ipsec.rst:383 +#: ../../configuration/vpn/site2site_ipsec.rst:386 msgid "Key Parameters:" msgstr "Key Parameters:" @@ -7557,11 +8488,15 @@ msgstr "Key Points:" msgid "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." msgstr "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." -#: ../../configuration/pki/index.rst:167 +#: ../../configuration/vpn/ipsec.rst:381 +msgid "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." +msgstr "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." + +#: ../../configuration/pki/index.rst:169 msgid "Key usage (CLI)" msgstr "Key usage (CLI)" -#: ../../configuration/system/option.rst:58 +#: ../../configuration/system/option.rst:88 msgid "Keyboard Layout" msgstr "Keyboard Layout" @@ -7574,7 +8509,7 @@ msgstr "Keypairs" msgid "Keyword" msgstr "Keyword" -#: ../../configuration/vpn/l2tp.rst:4 +#: ../../configuration/vpn/l2tp.rst:5 msgid "L2TP" msgstr "L2TP" @@ -7606,7 +8541,7 @@ msgstr "L2TPv3 is described in :rfc:`3931`." msgid "L2TPv3 options" msgstr "L2TPv3 options" -#: ../../configuration/vrf/index.rst:399 +#: ../../configuration/vrf/index.rst:418 msgid "L3VPN VRFs" msgstr "L3VPN VRFs" @@ -7635,7 +8570,7 @@ msgstr "LLDP performs functions similar to several proprietary protocols, such a msgid "LNS (L2TP Network Server)" msgstr "LNS (L2TP Network Server)" -#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/l2tp.rst:272 msgid "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." @@ -7643,15 +8578,19 @@ msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgid "Label Distribution Protocol" msgstr "Label Distribution Protocol" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." -#: ../../configuration/service/dhcp-server.rst:593 +#: ../../configuration/service/dhcp-server.rst:652 msgid "Lease time will be left at the default value which is 24 hours" msgstr "Lease time will be left at the default value which is 24 hours" -#: ../../configuration/service/dhcp-server.rst:336 +#: ../../configuration/service/dhcp-server.rst:392 msgid "Lease timeout in seconds (default: 86400)" msgstr "Lease timeout in seconds (default: 86400)" @@ -7683,7 +8622,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -7699,19 +8638,23 @@ msgstr "Lifetime in days; default is 365" msgid "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" msgstr "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/vpn/ipsec.rst:535 +msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." +msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" -#: ../../configuration/system/login.rst:112 +#: ../../configuration/system/login.rst:116 msgid "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." -#: ../../configuration/system/login.rst:118 +#: ../../configuration/system/login.rst:122 msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -7723,7 +8666,7 @@ msgstr "Limiter" msgid "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." msgstr "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." -#: ../../configuration/system/login.rst:381 +#: ../../configuration/system/login.rst:385 msgid "Limits" msgstr "Limits" @@ -7767,7 +8710,7 @@ msgstr "List of supported algorithms: ``diffie-hellman-group1-sha1``, ``diffie-h msgid "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" msgstr "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" -#: ../../configuration/policy/route-map.rst:362 +#: ../../configuration/policy/route-map.rst:365 msgid "List of well-known communities" msgstr "List of well-known communities" @@ -7775,7 +8718,7 @@ msgstr "List of well-known communities" msgid "Listen for DHCP requests on interface ``eth1``." msgstr "Listen for DHCP requests on interface ``eth1``." -#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:137 msgid "Lists VRFs that have been created" msgstr "Lists VRFs that have been created" @@ -7784,10 +8727,14 @@ msgid "Load-balancing" msgstr "Load-balancing" #: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Load-balancing algorithms to be used for distributind requests among the vailable servers" -#: ../../configuration/highavailability/index.rst:347 +#: ../../configuration/highavailability/index.rst:357 msgid "Load-balancing schedule algorithm:" msgstr "Load-balancing schedule algorithm:" @@ -7795,11 +8742,11 @@ msgstr "Load-balancing schedule algorithm:" msgid "Load Balance" msgstr "Load Balance" -#: ../../configuration/service/pppoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:317 msgid "Load Balancing" msgstr "Load Balancing" -#: ../../configuration/system/login.rst:422 +#: ../../configuration/system/login.rst:426 msgid "Load the container image in op-mode." msgstr "Load the container image in op-mode." @@ -7816,7 +8763,11 @@ msgstr "Local Configuration:" msgid "Local Configuration - Annotated:" msgstr "Local Configuration - Annotated:" -#: ../../configuration/service/dhcp-server.rst:143 +#: ../../configuration/service/dhcp-server.rst:192 +msgid "Local IP `<address>` used when communicating to the HA peer." +msgstr "Local IP `<address>` used when communicating to the HA peer." + +#: ../../configuration/service/dhcp-server.rst:177 msgid "Local IP `<address>` used when communicating to the failover peer." msgstr "Local IP `<address>` used when communicating to the failover peer." @@ -7848,11 +8799,11 @@ msgstr "Local User Account" msgid "Local path that includes the known hosts file." msgstr "Local path that includes the known hosts file." -#: ../../configuration/protocols/rpki.rst:145 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Local path that includes the private key file of the router." -#: ../../configuration/protocols/rpki.rst:149 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Local path that includes the public key file of the router." @@ -7864,7 +8815,7 @@ msgstr "Local route" msgid "Locally connect to serial port identified by `<device>`." msgstr "Locally connect to serial port identified by `<device>`." -#: ../../configuration/policy/route-map.rst:273 +#: ../../configuration/policy/route-map.rst:276 msgid "Locally significant administrative distance." msgstr "Locally significant administrative distance." @@ -7918,11 +8869,11 @@ msgstr "Logging to a remote host leaves the local logging configuration intact, msgid "Login/User Management" msgstr "Login/User Management" -#: ../../configuration/system/login.rst:363 +#: ../../configuration/system/login.rst:367 msgid "Login Banner" msgstr "Login Banner" -#: ../../configuration/system/login.rst:383 +#: ../../configuration/system/login.rst:387 msgid "Login limits" msgstr "Login limits" @@ -7981,7 +8932,7 @@ msgstr "MACsec options" msgid "MDI power" msgstr "MDI power" -#: ../../configuration/system/login.rst:91 +#: ../../configuration/system/login.rst:95 msgid "MFA/2FA authentication using OTP (one time passwords)" msgstr "MFA/2FA authentication using OTP (one time passwords)" @@ -8024,11 +8975,11 @@ msgstr "Main structure VyOS firewall cli is shown next:" msgid "Main structure is shown next:" msgstr "Main structure is shown next:" -#: ../../configuration/service/pppoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:303 msgid "Maintenance mode" msgstr "Maintenance mode" -#: ../../configuration/service/conntrack-sync.rst:107 +#: ../../configuration/service/conntrack-sync.rst:116 msgid "Make sure conntrack is enabled by running and show connection tracking table." msgstr "Make sure conntrack is enabled by running and show connection tracking table." @@ -8048,7 +8999,7 @@ msgstr "Mandatory Settings" msgid "Manual Neighbor Configuration" msgstr "Manual Neighbor Configuration" -#: ../../configuration/pki/index.rst:336 +#: ../../configuration/pki/index.rst:367 msgid "Manually trigger certificate renewal. This will be done twice a day." msgstr "Manually trigger certificate renewal. This will be done twice a day." @@ -8056,15 +9007,19 @@ msgstr "Manually trigger certificate renewal. This will be done twice a day." msgid "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." msgstr "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." -#: ../../configuration/vpn/sstp.rst:223 +#: ../../configuration/service/ipoe-server.rst:166 +#: ../../configuration/service/pppoe-server.rst:128 +#: ../../configuration/vpn/l2tp.rst:171 +#: ../../configuration/vpn/pptp.rst:111 +#: ../../configuration/vpn/sstp.rst:144 msgid "Mark RADIUS server as offline for this given `<time>` in seconds." msgstr "Mark RADIUS server as offline for this given `<time>` in seconds." -#: ../../configuration/pki/index.rst:206 +#: ../../configuration/pki/index.rst:208 msgid "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." msgstr "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." -#: ../../configuration/pki/index.rst:244 +#: ../../configuration/pki/index.rst:246 msgid "Mark the private key as password protected. User is asked for the password when the key is referenced." msgstr "Mark the private key as password protected. User is asked for the password when the key is referenced." @@ -8076,7 +9031,7 @@ msgstr "Match BGP large communities." msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." -#: ../../configuration/firewall/ipv4.rst:440 +#: ../../configuration/firewall/ipv4.rst:463 #: ../../configuration/firewall/ipv6.rst:447 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." @@ -8089,17 +9044,21 @@ msgstr "Match RPKI validation result." msgid "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." msgstr "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." -#: ../../configuration/firewall/ipv4.rst:773 +#: ../../configuration/firewall/ipv4.rst:796 #: ../../configuration/firewall/ipv6.rst:783 msgid "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." msgstr "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." -#: ../../configuration/firewall/ipv4.rst:831 +#: ../../configuration/firewall/ipv4.rst:854 #: ../../configuration/firewall/ipv6.rst:840 msgid "Match against the state of a packet." msgstr "Match against the state of a packet." -#: ../../configuration/firewall/ipv4.rst:620 +#: ../../configuration/firewall/ipv4.rst:336 +msgid "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." +msgstr "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." + +#: ../../configuration/firewall/ipv4.rst:643 #: ../../configuration/firewall/ipv6.rst:630 msgid "Match based on dscp value." msgstr "Match based on dscp value." @@ -8108,16 +9067,16 @@ msgstr "Match based on dscp value." msgid "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." msgstr "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." -#: ../../configuration/firewall/ipv4.rst:631 +#: ../../configuration/firewall/ipv4.rst:654 #: ../../configuration/firewall/ipv6.rst:641 msgid "Match based on fragment criteria." msgstr "Match based on fragment criteria." -#: ../../configuration/firewall/ipv4.rst:642 +#: ../../configuration/firewall/ipv4.rst:665 msgid "Match based on icmp code and type." msgstr "Match based on icmp code and type." -#: ../../configuration/firewall/ipv4.rst:653 +#: ../../configuration/firewall/ipv4.rst:676 msgid "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." msgstr "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." @@ -8147,18 +9106,18 @@ msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:239 -#: ../../configuration/firewall/ipv4.rst:663 +#: ../../configuration/firewall/ipv4.rst:686 #: ../../configuration/firewall/ipv6.rst:673 msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:248 -#: ../../configuration/firewall/ipv4.rst:674 +#: ../../configuration/firewall/ipv4.rst:697 #: ../../configuration/firewall/ipv6.rst:684 msgid "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:707 +#: ../../configuration/firewall/ipv4.rst:730 #: ../../configuration/firewall/ipv6.rst:717 msgid "Match based on ipsec criteria." msgstr "Match based on ipsec criteria." @@ -8168,35 +9127,35 @@ msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:256 -#: ../../configuration/firewall/ipv4.rst:684 +#: ../../configuration/firewall/ipv4.rst:707 #: ../../configuration/firewall/ipv6.rst:694 msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:265 -#: ../../configuration/firewall/ipv4.rst:695 +#: ../../configuration/firewall/ipv4.rst:718 #: ../../configuration/firewall/ipv6.rst:705 msgid "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:750 +#: ../../configuration/firewall/ipv4.rst:773 #: ../../configuration/firewall/ipv6.rst:760 #: ../../configuration/policy/route.rst:176 msgid "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." msgstr "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." -#: ../../configuration/firewall/ipv4.rst:762 +#: ../../configuration/firewall/ipv4.rst:785 #: ../../configuration/firewall/ipv6.rst:772 #: ../../configuration/policy/route.rst:184 msgid "Match based on packet type criteria." msgstr "Match based on packet type criteria." -#: ../../configuration/firewall/ipv4.rst:729 +#: ../../configuration/firewall/ipv4.rst:752 #: ../../configuration/firewall/ipv6.rst:739 msgid "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" msgstr "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" -#: ../../configuration/firewall/ipv4.rst:718 +#: ../../configuration/firewall/ipv4.rst:741 #: ../../configuration/firewall/ipv6.rst:728 msgid "Match based on the maximum number of packets to allow in excess of rate." msgstr "Match based on the maximum number of packets to allow in excess of rate." @@ -8209,7 +9168,7 @@ msgstr "Match based on vlan ID. Range is also supported." msgid "Match based on vlan priority(pcp). Range is also supported." msgstr "Match based on vlan priority(pcp). Range is also supported." -#: ../../configuration/firewall/ipv4.rst:801 +#: ../../configuration/firewall/ipv4.rst:824 #: ../../configuration/firewall/ipv6.rst:810 msgid "Match bases on recently seen sources." msgstr "Match bases on recently seen sources." @@ -8224,7 +9183,7 @@ msgstr "Match criteria based on connection mark." msgid "Match criteria based on nat connection status." msgstr "Match criteria based on nat connection status." -#: ../../configuration/firewall/ipv4.rst:345 +#: ../../configuration/firewall/ipv4.rst:368 #: ../../configuration/firewall/ipv6.rst:345 msgid "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." msgstr "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." @@ -8237,6 +9196,14 @@ msgstr "Match criteria based on source and/or destination mac-address." msgid "Match domain name" msgstr "Match domain name" +#: ../../configuration/service/ipoe-server.rst:382 +#: ../../configuration/service/pppoe-server.rst:571 +#: ../../configuration/vpn/l2tp.rst:506 +#: ../../configuration/vpn/pptp.rst:430 +#: ../../configuration/vpn/sstp.rst:464 +msgid "Match firewall mark value" +msgstr "Match firewall mark value" + #: ../../configuration/firewall/ipv6.rst:894 #: ../../configuration/policy/route.rst:234 msgid "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." @@ -8250,12 +9217,12 @@ msgstr "Match local preference." msgid "Match route metric." msgstr "Match route metric." -#: ../../configuration/firewall/ipv4.rst:885 +#: ../../configuration/firewall/ipv4.rst:908 #: ../../configuration/policy/route.rst:229 msgid "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." msgstr "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." -#: ../../configuration/firewall/ipv4.rst:906 +#: ../../configuration/firewall/ipv4.rst:929 #: ../../configuration/firewall/ipv6.rst:915 msgid "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." msgstr "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." @@ -8275,11 +9242,24 @@ msgstr "Matching traffic" msgid "Maximum A-MSDU length 3839 (default) or 7935 octets" msgstr "Maximum A-MSDU length 3839 (default) or 7935 octets" +#: ../../configuration/vpn/l2tp.rst:492 +#: ../../configuration/vpn/pptp.rst:416 +msgid "Maximum Transmission Unit (MTU) (default: **1436**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1436**)" + +#: ../../configuration/service/pppoe-server.rst:538 +msgid "Maximum Transmission Unit (MTU) (default: **1492**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1492**)" + +#: ../../configuration/vpn/sstp.rst:450 +msgid "Maximum Transmission Unit (MTU) (default: **1500**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1500**)" + #: ../../configuration/service/dns.rst:108 msgid "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." msgstr "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." -#: ../../configuration/vpn/sstp.rst:159 +#: ../../configuration/vpn/sstp.rst:165 msgid "Maximum number of IPv4 nameservers" msgstr "Maximum number of IPv4 nameservers" @@ -8287,6 +9267,14 @@ msgstr "Maximum number of IPv4 nameservers" msgid "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." msgstr "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." +#: ../../configuration/service/ipoe-server.rst:372 +#: ../../configuration/service/pppoe-server.rst:542 +#: ../../configuration/vpn/l2tp.rst:496 +#: ../../configuration/vpn/pptp.rst:420 +#: ../../configuration/vpn/sstp.rst:454 +msgid "Maximum number of concurrent session start attempts" +msgstr "Maximum number of concurrent session start attempts" + #: ../../configuration/interfaces/wireless.rst:77 msgid "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." msgstr "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." @@ -8295,7 +9283,11 @@ msgstr "Maximum number of stations allowed in station table. New stations will b msgid "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." msgstr "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." -#: ../../configuration/vpn/sstp.rst:250 +#: ../../configuration/service/ipoe-server.rst:190 +#: ../../configuration/service/pppoe-server.rst:152 +#: ../../configuration/vpn/l2tp.rst:195 +#: ../../configuration/vpn/pptp.rst:135 +#: ../../configuration/vpn/sstp.rst:168 msgid "Maximum number of tries to send Access-Request/Accounting-Request queries" msgstr "Maximum number of tries to send Access-Request/Accounting-Request queries" @@ -8311,7 +9303,7 @@ msgstr "Medium" msgid "Member Interfaces" msgstr "Member Interfaces" -#: ../../configuration/interfaces/bridge.rst:196 +#: ../../configuration/interfaces/bridge.rst:205 msgid "Member interfaces `eth1` and VLAN 10 on interface `eth2`" msgstr "Member interfaces `eth1` and VLAN 10 on interface `eth2`" @@ -8323,6 +9315,10 @@ msgstr "Messages generated internally by syslogd" msgid "Metris version, the default is ``2``" msgstr "Metris version, the default is ``2``" +#: ../../configuration/vpn/ipsec.rst:510 +msgid "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/service/router-advert.rst:1 msgid "Min and max intervals between unsolicited multicast RAs" msgstr "Min and max intervals between unsolicited multicast RAs" @@ -8351,7 +9347,12 @@ msgstr "Modify the time that pim will register suppress a FHR will send register msgid "Monitor, the system passively monitors any kind of wireless traffic" msgstr "Monitor, the system passively monitors any kind of wireless traffic" +#: ../../configuration/service/ipoe-server.rst:390 #: ../../configuration/service/monitoring.rst:2 +#: ../../configuration/service/pppoe-server.rst:583 +#: ../../configuration/vpn/l2tp.rst:518 +#: ../../configuration/vpn/pptp.rst:442 +#: ../../configuration/vpn/sstp.rst:538 msgid "Monitoring" msgstr "Monitoring" @@ -8371,7 +9372,7 @@ msgstr "Most operating systems include native client support for IPsec IKEv2 VPN msgid "Mount a volume into the container" msgstr "Mount a volume into the container" -#: ../../configuration/service/dhcp-server.rst:235 +#: ../../configuration/service/dhcp-server.rst:291 msgid "Multi" msgstr "Multi" @@ -8383,7 +9384,7 @@ msgstr "Multi-client server is the most popular OpenVPN mode on routers. It alwa msgid "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." msgstr "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." -#: ../../configuration/service/dhcp-server.rst:359 +#: ../../configuration/service/dhcp-server.rst:415 msgid "Multi: can be specified multiple times." msgstr "Multi: can be specified multiple times." @@ -8423,12 +9424,11 @@ msgstr "Multicast receivers will talk IGMP to their local router, so, besides ha msgid "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." msgstr "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." -#: ../../configuration/service/dhcp-server.rst:54 -#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:108 msgid "Multiple DNS servers can be defined." msgstr "Multiple DNS servers can be defined." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." @@ -8441,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Multiple aliases can pe specified per host-name." @@ -8460,16 +9464,16 @@ msgstr "Multiple interfaces may be specified." msgid "Multiple networks/client IP addresses can be configured." msgstr "Multiple networks/client IP addresses can be configured." -#: ../../configuration/system/login.rst:248 -#: ../../configuration/system/login.rst:317 +#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:321 msgid "Multiple servers can be specified." msgstr "Multiple servers can be specified." -#: ../../configuration/service/dns.rst:374 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" -#: ../../configuration/firewall/ipv4.rst:494 +#: ../../configuration/firewall/ipv4.rst:517 #: ../../configuration/firewall/ipv6.rst:500 msgid "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" msgstr "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" @@ -8487,22 +9491,22 @@ msgstr "Multiple users can connect to the same serial device but only one is all msgid "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." msgstr "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." -#: ../../configuration/service/dhcp-server.rst:241 -#: ../../configuration/service/dhcp-server.rst:247 -#: ../../configuration/service/dhcp-server.rst:252 -#: ../../configuration/service/dhcp-server.rst:272 -#: ../../configuration/service/dhcp-server.rst:287 -#: ../../configuration/service/dhcp-server.rst:292 #: ../../configuration/service/dhcp-server.rst:297 -#: ../../configuration/service/dhcp-server.rst:302 -#: ../../configuration/service/dhcp-server.rst:307 -#: ../../configuration/service/dhcp-server.rst:327 -#: ../../configuration/service/dhcp-server.rst:332 -#: ../../configuration/service/dhcp-server.rst:337 +#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:308 +#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:358 +#: ../../configuration/service/dhcp-server.rst:363 +#: ../../configuration/service/dhcp-server.rst:383 +#: ../../configuration/service/dhcp-server.rst:388 +#: ../../configuration/service/dhcp-server.rst:393 msgid "N" msgstr "N" -#: ../../configuration/highavailability/index.rst:363 +#: ../../configuration/highavailability/index.rst:373 #: ../../configuration/nat/index.rst:5 msgid "NAT" msgstr "NAT" @@ -8523,6 +9527,10 @@ msgstr "NAT64" msgid "NAT64 client configuration:" msgstr "NAT64 client configuration:" +#: ../../configuration/service/router-advert.rst:84 +msgid "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." +msgstr "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." + #: ../../configuration/nat/nat64.rst:44 msgid "NAT64 server configuration:" msgstr "NAT64 server configuration:" @@ -8587,7 +9595,15 @@ msgstr "NTP supplies a warning of any impending leap second adjustment, but no i msgid "Name Server" msgstr "Name Server" -#: ../../configuration/service/dhcp-server.rst:356 +#: ../../configuration/vpn/sstp.rst:84 +msgid "Name of installed certificate authority certificate." +msgstr "Name of installed certificate authority certificate." + +#: ../../configuration/vpn/sstp.rst:88 +msgid "Name of installed server certificate." +msgstr "Name of installed server certificate." + +#: ../../configuration/service/dhcp-server.rst:412 msgid "Name of static mapping" msgstr "Name of static mapping" @@ -8595,11 +9611,11 @@ msgstr "Name of static mapping" msgid "Name of the single table Only if set group-metrics single-table." msgstr "Name of the single table Only if set group-metrics single-table." -#: ../../configuration/service/dhcp-server.rst:296 +#: ../../configuration/service/dhcp-server.rst:352 msgid "Name or IPv4 address of TFTP server" msgstr "Name or IPv4 address of TFTP server" -#: ../../configuration/service/dhcp-server.rst:281 +#: ../../configuration/service/dhcp-server.rst:337 msgid "NetBIOS over TCP/IP name server" msgstr "NetBIOS over TCP/IP name server" @@ -8677,6 +9693,10 @@ msgstr "Network management station (NMS) - software which runs on the manager" msgid "Network news subsystem" msgstr "Network news subsystem" +#: ../../configuration/service/ids.rst:87 +msgid "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" +msgstr "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" + #: ../../configuration/service/monitoring.rst:47 msgid "Networks allowed to query this server" msgstr "Networks allowed to query this server" @@ -8693,11 +9713,11 @@ msgstr "Next-hop interface for the route" msgid "Next it is necessary to configure 2FA for OpenConnect:" msgstr "Next it is necessary to configure 2FA for OpenConnect:" -#: ../../configuration/policy/route-map.rst:279 +#: ../../configuration/policy/route-map.rst:282 msgid "Nexthop IP address." msgstr "Nexthop IP address." -#: ../../configuration/policy/route-map.rst:298 +#: ../../configuration/policy/route-map.rst:301 msgid "Nexthop IPv6 address." msgstr "Nexthop IPv6 address." @@ -8705,6 +9725,22 @@ msgstr "Nexthop IPv6 address." msgid "Nexthop IPv6 address to match." msgstr "Nexthop IPv6 address to match." +#: ../../configuration/system/ip.rst:47 +#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/vrf/index.rst:71 +msgid "Nexthop Tracking" +msgstr "Nexthop Tracking" + +#: ../../configuration/system/ip.rst:49 +#: ../../configuration/system/ipv6.rst:45 +#: ../../configuration/vrf/index.rst:73 +msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." + +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" @@ -8713,7 +9749,7 @@ msgstr "No ROA exists which covers that prefix. Unfortunately this is the case f msgid "No VLAN tagging required by your ISP." msgstr "No VLAN tagging required by your ISP." -#: ../../configuration/protocols/bgp.rst:707 +#: ../../configuration/protocols/bgp.rst:729 msgid "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." msgstr "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." @@ -8753,7 +9789,7 @@ msgstr "Note: certificate names don't matter, we use 'openvpn-local' and 'openvp msgid "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." msgstr "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." -#: ../../configuration/vpn/ipsec.rst:294 +#: ../../configuration/vpn/ipsec.rst:298 #: ../../configuration/vpn/rsa-keys.rst:35 msgid "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." @@ -8762,11 +9798,11 @@ msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT publi msgid "Notice" msgstr "Notice" -#: ../../configuration/service/conntrack-sync.rst:194 +#: ../../configuration/service/conntrack-sync.rst:203 msgid "Now configure conntrack-sync service on ``router1`` **and** ``router2``" msgstr "Now configure conntrack-sync service on ``router1`` **and** ``router2``" -#: ../../configuration/vpn/ipsec.rst:297 +#: ../../configuration/vpn/ipsec.rst:301 msgid "Now the noted public keys should be entered on the opposite routers." msgstr "Now the noted public keys should be entered on the opposite routers." @@ -8786,7 +9822,7 @@ msgstr "Now when connecting the user will first be asked for the password and th msgid "Now you are ready to setup IPsec. The key points:" msgstr "Now you are ready to setup IPsec. The key points:" -#: ../../configuration/vpn/ipsec.rst:311 +#: ../../configuration/vpn/ipsec.rst:315 msgid "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." msgstr "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." @@ -8794,6 +9830,10 @@ msgstr "Now you are ready to setup IPsec. You'll need to use an ID instead of ad msgid "Number of antennas on this card" msgstr "Number of antennas on this card" +#: ../../configuration/service/dns.rst:166 +msgid "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." +msgstr "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." + #: ../../configuration/system/syslog.rst:231 msgid "Number of lines to be displayed, default 10" msgstr "Number of lines to be displayed, default 10" @@ -8822,7 +9862,7 @@ msgstr "OSPFv2 (IPv4)" msgid "OSPFv3 (IPv6)" msgstr "OSPFv3 (IPv6)" -#: ../../configuration/system/login.rst:141 +#: ../../configuration/system/login.rst:145 msgid "OTP-key generation" msgstr "OTP-key generation" @@ -8830,7 +9870,7 @@ msgstr "OTP-key generation" msgid "Offloading" msgstr "Offloading" -#: ../../configuration/service/dhcp-server.rst:245 +#: ../../configuration/service/dhcp-server.rst:301 msgid "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" msgstr "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" @@ -8842,7 +9882,7 @@ msgstr "Often we need to embed one policy into another one. It is possible to do msgid "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." msgstr "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." -#: ../../configuration/service/conntrack-sync.rst:211 +#: ../../configuration/service/conntrack-sync.rst:220 msgid "On active router run:" msgstr "On active router run:" @@ -8858,7 +9898,7 @@ msgstr "On low rates (below 40Mbit) you may want to tune `quantum` down to somet msgid "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." msgstr "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." -#: ../../configuration/service/conntrack-sync.rst:242 +#: ../../configuration/service/conntrack-sync.rst:251 msgid "On standby router run:" msgstr "On standby router run:" @@ -8866,34 +9906,34 @@ msgstr "On standby router run:" msgid "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." msgstr "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." -#: ../../configuration/vpn/ipsec.rst:181 -#: ../../configuration/vpn/ipsec.rst:239 -#: ../../configuration/vpn/ipsec.rst:299 +#: ../../configuration/vpn/ipsec.rst:185 +#: ../../configuration/vpn/ipsec.rst:243 +#: ../../configuration/vpn/ipsec.rst:303 #: ../../configuration/vpn/rsa-keys.rst:40 msgid "On the LEFT:" msgstr "On the LEFT:" -#: ../../configuration/vpn/ipsec.rst:314 +#: ../../configuration/vpn/ipsec.rst:318 #: ../../configuration/vpn/rsa-keys.rst:59 msgid "On the LEFT (static address):" msgstr "On the LEFT (static address):" -#: ../../configuration/vpn/ipsec.rst:221 +#: ../../configuration/vpn/ipsec.rst:225 msgid "On the RIGHT, setup by analogy and swap local and remote addresses." msgstr "On the RIGHT, setup by analogy and swap local and remote addresses." -#: ../../configuration/vpn/ipsec.rst:250 -#: ../../configuration/vpn/ipsec.rst:305 +#: ../../configuration/vpn/ipsec.rst:254 +#: ../../configuration/vpn/ipsec.rst:309 #: ../../configuration/vpn/rsa-keys.rst:46 msgid "On the RIGHT:" msgstr "On the RIGHT:" -#: ../../configuration/vpn/ipsec.rst:339 +#: ../../configuration/vpn/ipsec.rst:343 #: ../../configuration/vpn/rsa-keys.rst:84 msgid "On the RIGHT (dynamic address):" msgstr "On the RIGHT (dynamic address):" -#: ../../configuration/service/conntrack-sync.rst:207 +#: ../../configuration/service/conntrack-sync.rst:216 msgid "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" msgstr "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" @@ -8921,11 +9961,11 @@ msgstr "Once a class has a filter configured, you will also have to define what msgid "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." msgstr "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." -#: ../../configuration/protocols/bgp.rst:702 +#: ../../configuration/protocols/bgp.rst:724 msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Once a traffic-policy is created, you can apply it to an interface:" @@ -8957,6 +9997,10 @@ msgstr "Once the matching rules are set for a class, you can start configuring h msgid "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." msgstr "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." +#: ../../configuration/service/pppoe-server.rst:285 +msgid "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." +msgstr "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." + #: ../../configuration/vpn/openconnect.rst:257 msgid "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." msgstr "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." @@ -8965,11 +10009,15 @@ msgstr "Once you commit the above changes you can create a config file in the /c msgid "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." -#: ../../configuration/vpn/sstp.rst:307 +#: ../../configuration/vpn/sstp.rst:478 msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." -#: ../../configuration/protocols/rpki.rst:183 +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + +#: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." @@ -9001,7 +10049,7 @@ msgstr "Only VRRP is supported. Required option." msgid "Only allow certain IP addresses or prefixes to access the https webserver." msgstr "Only allow certain IP addresses or prefixes to access the https webserver." -#: ../../configuration/firewall/ipv4.rst:459 +#: ../../configuration/firewall/ipv4.rst:482 #: ../../configuration/firewall/ipv6.rst:466 msgid "Only in the source criteria, you can specify a mac-address." msgstr "Only in the source criteria, you can specify a mac-address." @@ -9022,7 +10070,7 @@ msgstr "Only request an address from the PPPoE server but do not install any def msgid "Only request an address from the SSTP server but do not install any default route." msgstr "Only request an address from the SSTP server but do not install any default route." -#: ../../configuration/system/login.rst:51 +#: ../../configuration/system/login.rst:55 msgid "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." msgstr "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." @@ -9030,7 +10078,7 @@ msgstr "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note t msgid "Only works with a VXLAN device with external flag set." msgstr "Only works with a VXLAN device with external flag set." -#: ../../configuration/highavailability/index.rst:457 +#: ../../configuration/highavailability/index.rst:467 msgid "Op-mode check virtual-server status" msgstr "Op-mode check virtual-server status" @@ -9055,7 +10103,7 @@ msgid "OpenConnect supports a subset of it's configuration options to be applied msgstr "OpenConnect supports a subset of it's configuration options to be applied on a per user/group basis, for configuration purposes we refer to this functionality as \"Identity based config\". The following `OpenConnect Server Manual <https://ocserv.gitlab.io/www/manual.html#:~:text=Configuration%20files%20that% 20will%20be%20applied%20per%20user%20connection%20or%0A%23%20per%20group>`_ outlines the set of configuration options that are allowed. This can be leveraged to apply different sets of configs to different users or groups of users." #: ../../configuration/interfaces/openvpn.rst:7 -#: ../../configuration/pki/index.rst:117 +#: ../../configuration/pki/index.rst:119 msgid "OpenVPN" msgstr "OpenVPN" @@ -9097,7 +10145,7 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -9105,23 +10153,23 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/virtual-ethernet.rst:55 #: ../../configuration/interfaces/wireless.rst:416 #: ../../configuration/interfaces/wwan.rst:79 -#: ../../configuration/pki/index.rst:290 +#: ../../configuration/pki/index.rst:321 #: ../../configuration/protocols/igmp-proxy.rst:73 -#: ../../configuration/protocols/static.rst:183 -#: ../../configuration/service/conntrack-sync.rst:103 +#: ../../configuration/protocols/static.rst:216 +#: ../../configuration/service/conntrack-sync.rst:112 #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:195 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 #: ../../configuration/service/webproxy.rst:330 #: ../../configuration/system/default-route.rst:25 #: ../../configuration/system/flow-accounting.rst:175 -#: ../../configuration/vrf/index.rst:111 -#: ../../configuration/vrf/index.rst:323 -#: ../../configuration/vrf/index.rst:503 +#: ../../configuration/vrf/index.rst:130 +#: ../../configuration/vrf/index.rst:342 +#: ../../configuration/vrf/index.rst:522 msgid "Operation" msgstr "Operation" @@ -9131,17 +10179,17 @@ msgid "Operation-mode" msgstr "Operation-mode" #: ../../configuration/firewall/bridge.rst:284 -#: ../../configuration/firewall/ipv4.rst:954 +#: ../../configuration/firewall/ipv4.rst:977 #: ../../configuration/firewall/ipv6.rst:962 msgid "Operation-mode Firewall" msgstr "Operation-mode Firewall" -#: ../../configuration/container/index.rst:143 +#: ../../configuration/container/index.rst:179 msgid "Operation Commands" msgstr "Operation Commands" -#: ../../configuration/service/dhcp-server.rst:412 -#: ../../configuration/service/dhcp-server.rst:664 +#: ../../configuration/service/dhcp-server.rst:471 +#: ../../configuration/service/dhcp-server.rst:725 #: ../../configuration/system/acceleration.rst:42 msgid "Operation Mode" msgstr "Operation Mode" @@ -9151,12 +10199,12 @@ msgid "Operation mode of wireless radio." msgstr "Operation mode of wireless radio." #: ../../configuration/interfaces/wireguard.rst:338 -#: ../../configuration/protocols/bfd.rst:94 -#: ../../configuration/protocols/bfd.rst:175 +#: ../../configuration/protocols/bfd.rst:101 +#: ../../configuration/protocols/bfd.rst:182 msgid "Operational Commands" msgstr "Operational Commands" -#: ../../configuration/protocols/bgp.rst:950 +#: ../../configuration/protocols/bgp.rst:972 #: ../../configuration/protocols/mpls.rst:218 #: ../../configuration/protocols/ospf.rst:609 #: ../../configuration/protocols/ospf.rst:1268 @@ -9164,8 +10212,8 @@ msgstr "Operational Commands" msgid "Operational Mode Commands" msgstr "Operational Mode Commands" -#: ../../configuration/system/ip.rst:47 -#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/system/ip.rst:60 +#: ../../configuration/system/ipv6.rst:56 msgid "Operational commands" msgstr "Operational commands" @@ -9177,11 +10225,11 @@ msgstr "Option" msgid "Option 43 for UniFI" msgstr "Option 43 for UniFI" -#: ../../configuration/service/dhcp-server.rst:234 +#: ../../configuration/service/dhcp-server.rst:290 msgid "Option description" msgstr "Option description" -#: ../../configuration/service/dhcp-server.rst:232 +#: ../../configuration/service/dhcp-server.rst:288 msgid "Option number" msgstr "Option number" @@ -9211,7 +10259,7 @@ msgstr "Optional" msgid "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." msgstr "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." -#: ../../configuration/system/login.rst:107 +#: ../../configuration/system/login.rst:111 msgid "Optional/default settings" msgstr "Optional/default settings" @@ -9231,12 +10279,11 @@ msgstr "Optionally set a specific static IPv4 or IPv6 address for the container. #: ../../configuration/interfaces/openvpn.rst:631 #: ../../configuration/service/dhcp-relay.rst:53 #: ../../configuration/service/dhcp-relay.rst:160 -#: ../../configuration/service/dhcp-server.rst:224 -#: ../../configuration/vpn/sstp.rst:230 +#: ../../configuration/service/dhcp-server.rst:280 msgid "Options" msgstr "Options" -#: ../../configuration/vpn/ipsec.rst:159 +#: ../../configuration/vpn/ipsec.rst:162 msgid "Options (Global IPsec settings) Attributes" msgstr "Options (Global IPsec settings) Attributes" @@ -9252,11 +10299,15 @@ msgstr "Or, for example ftp, `delete system conntrack modules ftp`." msgid "Or **binary** prefixes." msgstr "Or **binary** prefixes." +#: ../../configuration/service/conntrack-sync.rst:107 +msgid "Order conntrackd to request a complete conntrack table resync against the other node at startup." +msgstr "Order conntrackd to request a complete conntrack table resync against the other node at startup." + #: ../../configuration/protocols/ospf.rst:73 msgid "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." msgstr "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." -#: ../../configuration/service/pppoe-server.rst:238 +#: ../../configuration/service/pppoe-server.rst:312 msgid "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." msgstr "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." @@ -9325,15 +10376,15 @@ msgstr "Overview of defined groups. You see the type, the members, and where the msgid "PBR multiple uplinks" msgstr "PBR multiple uplinks" -#: ../../configuration/vrf/index.rst:244 +#: ../../configuration/vrf/index.rst:263 msgid "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" msgstr "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" -#: ../../configuration/vrf/index.rst:245 +#: ../../configuration/vrf/index.rst:264 msgid "PC2 is in VRF ``blue`` which is the development department" msgstr "PC2 is in VRF ``blue`` which is the development department" -#: ../../configuration/vrf/index.rst:246 +#: ../../configuration/vrf/index.rst:265 msgid "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." msgstr "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." @@ -9369,7 +10420,7 @@ msgstr "PIM – Protocol Independent Multicast" msgid "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." msgstr "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." -#: ../../configuration/pki/index.rst:7 +#: ../../configuration/pki/index.rst:9 msgid "PKI" msgstr "PKI" @@ -9377,7 +10428,14 @@ msgstr "PKI" msgid "PPDU" msgstr "PPDU" -#: ../../configuration/vpn/sstp.rst:174 +#: ../../configuration/service/pppoe-server.rst:453 +#: ../../configuration/vpn/l2tp.rst:407 +#: ../../configuration/vpn/pptp.rst:331 +#: ../../configuration/vpn/sstp.rst:365 +msgid "PPP Advanced Options" +msgstr "PPP Advanced Options" + +#: ../../configuration/vpn/sstp.rst:180 msgid "PPP Settings" msgstr "PPP Settings" @@ -9393,7 +10451,7 @@ msgstr "PPPoE Server" msgid "PPPoE options" msgstr "PPPoE options" -#: ../../configuration/vpn/pptp.rst:4 +#: ../../configuration/vpn/pptp.rst:5 msgid "PPTP-Server" msgstr "PPTP-Server" @@ -9401,19 +10459,23 @@ msgstr "PPTP-Server" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." +#: ../../configuration/service/dhcp-server.rst:65 +msgid "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" +msgstr "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" + #: ../../configuration/interfaces/bridge.rst:60 msgid "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." msgstr "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." -#: ../../configuration/vpn/sstp.rst:166 +#: ../../configuration/vpn/sstp.rst:172 msgid "Path to `<file>` pointing to the certificate authority certificate." msgstr "Path to `<file>` pointing to the certificate authority certificate." -#: ../../configuration/vpn/sstp.rst:170 +#: ../../configuration/vpn/sstp.rst:176 msgid "Path to `<file>` pointing to the servers certificate (public portion)." msgstr "Path to `<file>` pointing to the servers certificate (public portion)." @@ -9457,11 +10519,15 @@ msgstr "Per default VyOSs has minimal syslog logging enabled which is stored and msgid "Per default every packet is sampled (that is, the sampling rate is 1)." msgstr "Per default every packet is sampled (that is, the sampling rate is 1)." -#: ../../configuration/service/pppoe-server.rst:323 +#: ../../configuration/service/pppoe-server.rst:556 msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." -#: ../../configuration/system/option.rst:78 +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + +#: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Performance" @@ -9469,11 +10535,11 @@ msgstr "Performance" msgid "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." msgstr "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." -#: ../../configuration/vrf/index.rst:197 +#: ../../configuration/vrf/index.rst:216 msgid "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." msgstr "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." -#: ../../configuration/vrf/index.rst:183 +#: ../../configuration/vrf/index.rst:202 msgid "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." msgstr "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." @@ -9497,7 +10563,7 @@ msgstr "Please, refer to appropiate section for more information about firewall msgid "Please, refer to appropriate section for more information about firewall configuration:" msgstr "Please, refer to appropriate section for more information about firewall configuration:" -#: ../../configuration/service/ipoe-server.rst:23 +#: ../../configuration/service/ipoe-server.rst:21 msgid "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." msgstr "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." @@ -9513,7 +10579,7 @@ msgstr "Please refer to the :ref:`ipsec` documentation for the individual IPSec msgid "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." msgstr "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." -#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:420 msgid "Please see the :ref:`dhcp-dns-quick-start` configuration." msgstr "Please see the :ref:`dhcp-dns-quick-start` configuration." @@ -9566,12 +10632,16 @@ msgid "Port Groups" msgstr "Port Groups" #: ../../configuration/interfaces/bonding.rst:282 -#: ../../configuration/interfaces/bridge.rst:179 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/bridge.rst:188 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Port Mirror (SPAN)" -#: ../../configuration/vpn/sstp.rst:242 +#: ../../configuration/service/ipoe-server.rst:182 +#: ../../configuration/service/pppoe-server.rst:144 +#: ../../configuration/vpn/l2tp.rst:187 +#: ../../configuration/vpn/pptp.rst:127 +#: ../../configuration/vpn/sstp.rst:160 msgid "Port for Dynamic Authorization Extension server (DM/CoA)" msgstr "Port for Dynamic Authorization Extension server (DM/CoA)" @@ -9656,7 +10726,7 @@ msgstr "Preference associated with the default router" msgid "Prefix Conversion" msgstr "Prefix Conversion" -#: ../../configuration/service/dhcp-server.rst:564 +#: ../../configuration/service/dhcp-server.rst:623 msgid "Prefix Delegation" msgstr "Prefix Delegation" @@ -9696,11 +10766,11 @@ msgstr "Prefix to match against." msgid "Prefixes" msgstr "Prefixes" -#: ../../configuration/policy/route-map.rst:212 +#: ../../configuration/policy/route-map.rst:215 msgid "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." msgstr "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." -#: ../../configuration/policy/route-map.rst:207 +#: ../../configuration/policy/route-map.rst:210 msgid "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." @@ -9708,11 +10778,11 @@ msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's msgid "Principle of SNMP Communication" msgstr "Principle of SNMP Communication" -#: ../../configuration/vrf/index.rst:532 +#: ../../configuration/vrf/index.rst:551 msgid "Print a summary of neighbor connections for the specified AFI/SAFI combination." msgstr "Print a summary of neighbor connections for the specified AFI/SAFI combination." -#: ../../configuration/vrf/index.rst:511 +#: ../../configuration/vrf/index.rst:530 msgid "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." msgstr "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." @@ -9733,6 +10803,10 @@ msgstr "Priority Queue, as other non-shaping policies, is only useful if your ou msgid "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." msgstr "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." +#: ../../configuration/vpn/ipsec.rst:544 +msgid "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." +msgstr "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." + #: ../../configuration/service/monitoring.rst:38 msgid "Prometheus-client" msgstr "Prometheus-client" @@ -9841,11 +10915,11 @@ msgstr "Pseudo Ethernet/MACVLAN options" msgid "Publish a port for the container." msgstr "Publish a port for the container." -#: ../../configuration/container/index.rst:147 +#: ../../configuration/container/index.rst:183 msgid "Pull a new image for container" msgstr "Pull a new image for container" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -9875,7 +10949,7 @@ msgstr "R1:" msgid "R1 has 192.0.2.1/24 & 2001:db8::1/64" msgstr "R1 has 192.0.2.1/24 & 2001:db8::1/64" -#: ../../configuration/vrf/index.rst:248 +#: ../../configuration/vrf/index.rst:267 msgid "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" msgstr "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" @@ -9887,12 +10961,11 @@ msgstr "R2:" msgid "R2 has 192.0.2.2/24 & 2001:db8::2/64" msgstr "R2 has 192.0.2.2/24 & 2001:db8::2/64" -#: ../../configuration/system/login.rst:234 -#: ../../configuration/vpn/sstp.rst:207 +#: ../../configuration/system/login.rst:238 msgid "RADIUS" msgstr "RADIUS" -#: ../../configuration/service/ipoe-server.rst:111 +#: ../../configuration/service/ipoe-server.rst:112 msgid "RADIUS Setup" msgstr "RADIUS Setup" @@ -9900,6 +10973,14 @@ msgstr "RADIUS Setup" msgid "RADIUS advanced features" msgstr "RADIUS advanced features" +#: ../../configuration/service/ipoe-server.rst:158 +#: ../../configuration/service/pppoe-server.rst:120 +#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/vpn/pptp.rst:103 +#: ../../configuration/vpn/sstp.rst:136 +msgid "RADIUS advanced options" +msgstr "RADIUS advanced options" + #: ../../configuration/vpn/l2tp.rst:139 msgid "RADIUS authentication" msgstr "RADIUS authentication" @@ -9916,11 +10997,15 @@ msgstr "RADIUS provides the IP addresses in the example above via Framed-IP-Addr msgid "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" msgstr "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" -#: ../../configuration/system/login.rst:266 +#: ../../configuration/system/login.rst:270 msgid "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." msgstr "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." -#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/service/ipoe-server.rst:144 +#: ../../configuration/service/pppoe-server.rst:106 +#: ../../configuration/vpn/l2tp.rst:149 +#: ../../configuration/vpn/pptp.rst:89 +#: ../../configuration/vpn/sstp.rst:122 msgid "RADIUS source address" msgstr "RADIUS source address" @@ -9928,7 +11013,7 @@ msgstr "RADIUS source address" msgid "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." msgstr "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." -#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:312 msgid "RFC 868 time server IPv4 address" msgstr "RFC 868 time server IPv4 address" @@ -9970,8 +11055,8 @@ msgstr "Random-Detect could be useful for heavy traffic. One use of this algorit #: ../../configuration/protocols/static.rst:37 #: ../../configuration/protocols/static.rst:57 -#: ../../configuration/protocols/static.rst:84 -#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:107 +#: ../../configuration/protocols/static.rst:127 msgid "Range is 1 to 255, default is 1." msgstr "Range is 1 to 255, default is 1." @@ -10016,15 +11101,15 @@ msgstr "Re-generated the public/private keyportion which SSH uses to secure conn msgid "Reachable Time" msgstr "Reachable Time" -#: ../../configuration/highavailability/index.rst:388 +#: ../../configuration/highavailability/index.rst:398 msgid "Real server" msgstr "Real server" -#: ../../configuration/highavailability/index.rst:389 +#: ../../configuration/highavailability/index.rst:399 msgid "Real server IP address and port" msgstr "Real server IP address and port" -#: ../../configuration/highavailability/index.rst:404 +#: ../../configuration/highavailability/index.rst:414 msgid "Real server is auto-excluded if port check with this server fail." msgstr "Real server is auto-excluded if port check with this server fail." @@ -10032,7 +11117,11 @@ msgstr "Real server is auto-excluded if port check with this server fail." msgid "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." msgstr "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." -#: ../../configuration/vpn/l2tp.rst:205 +#: ../../configuration/service/ipoe-server.rst:227 +#: ../../configuration/service/pppoe-server.rst:189 +#: ../../configuration/vpn/l2tp.rst:232 +#: ../../configuration/vpn/pptp.rst:172 +#: ../../configuration/vpn/sstp.rst:205 msgid "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." msgstr "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." @@ -10040,7 +11129,11 @@ msgstr "Received RADIUS attributes have a higher priority than parameters define msgid "Recommended for larger installations." msgstr "Recommended for larger installations." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -10068,11 +11161,11 @@ msgstr "Redistribution Configuration" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." -#: ../../configuration/service/dns.rst:278 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -10147,7 +11240,11 @@ msgstr "Remote ``InfluxDB`` bucket name" msgid "Remote database name." msgstr "Remote database name." -#: ../../configuration/service/dhcp-server.rst:147 +#: ../../configuration/service/dhcp-server.rst:196 +msgid "Remote peer IP `<address>` of the second DHCP server in this HA cluster." +msgstr "Remote peer IP `<address>` of the second DHCP server in this HA cluster." + +#: ../../configuration/service/dhcp-server.rst:181 msgid "Remote peer IP `<address>` of the second DHCP server in this failover cluster." msgstr "Remote peer IP `<address>` of the second DHCP server in this failover cluster." @@ -10159,7 +11256,10 @@ msgstr "Remote port" msgid "Remote transmission interval will be multiplied by this value" msgstr "Remote transmission interval will be multiplied by this value" -#: ../../configuration/vpn/l2tp.rst:216 +#: ../../configuration/service/pppoe-server.rst:217 +#: ../../configuration/vpn/l2tp.rst:260 +#: ../../configuration/vpn/pptp.rst:200 +#: ../../configuration/vpn/sstp.rst:233 msgid "Renaming clients interfaces by RADIUS" msgstr "Renaming clients interfaces by RADIUS" @@ -10179,7 +11279,10 @@ msgstr "Request only a temporary address and not form an IA_NA (Identity Associa msgid "Requests are forwarded through ``eth2`` as the `upstream interface`" msgstr "Requests are forwarded through ``eth2`` as the `upstream interface`" -#: ../../configuration/vpn/sstp.rst:95 +#: ../../configuration/service/pppoe-server.rst:442 +#: ../../configuration/vpn/l2tp.rst:396 +#: ../../configuration/vpn/pptp.rst:320 +#: ../../configuration/vpn/sstp.rst:354 msgid "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." msgstr "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." @@ -10191,12 +11294,12 @@ msgstr "Requirements" msgid "Requirements:" msgstr "Requirements:" -#: ../../configuration/firewall/ipv4.rst:926 +#: ../../configuration/firewall/ipv4.rst:949 #: ../../configuration/firewall/ipv6.rst:935 msgid "Requirements to enable synproxy:" msgstr "Requirements to enable synproxy:" -#: ../../configuration/protocols/bgp.rst:1064 +#: ../../configuration/protocols/bgp.rst:1086 #: ../../configuration/protocols/mpls.rst:248 msgid "Reset" msgstr "Reset" @@ -10205,11 +11308,11 @@ msgstr "Reset" msgid "Reset OpenVPN" msgstr "Reset OpenVPN" -#: ../../configuration/system/ipv6.rst:150 +#: ../../configuration/system/ipv6.rst:163 msgid "Reset commands" msgstr "Reset commands" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." @@ -10225,7 +11328,7 @@ msgstr "Restart DHCP relay service" msgid "Restart DHCPv6 relay agent immediately." msgstr "Restart DHCPv6 relay agent immediately." -#: ../../configuration/container/index.rst:167 +#: ../../configuration/container/index.rst:203 msgid "Restart a given container" msgstr "Restart a given container" @@ -10233,7 +11336,7 @@ msgstr "Restart a given container" msgid "Restart mDNS repeater service." msgstr "Restart mDNS repeater service." -#: ../../configuration/service/dhcp-server.rst:428 +#: ../../configuration/service/dhcp-server.rst:487 msgid "Restart the DHCP server" msgstr "Restart the DHCP server" @@ -10245,7 +11348,7 @@ msgstr "Restart the IGMP proxy process." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." -#: ../../configuration/service/dns.rst:204 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." @@ -10263,11 +11366,11 @@ msgstr "Results in:" msgid "Retransmit Timer" msgstr "Retransmit Timer" -#: ../../configuration/service/conntrack-sync.rst:140 +#: ../../configuration/service/conntrack-sync.rst:149 msgid "Retrieve current statistics of connection tracking subsystem." msgstr "Retrieve current statistics of connection tracking subsystem." -#: ../../configuration/service/conntrack-sync.rst:173 +#: ../../configuration/service/conntrack-sync.rst:182 msgid "Retrieve current status of connection tracking subsystem." msgstr "Retrieve current status of connection tracking subsystem." @@ -10287,15 +11390,15 @@ msgstr "Round Robin" msgid "Route Aggregation Configuration" msgstr "Route Aggregation Configuration" -#: ../../configuration/protocols/bgp.rst:682 +#: ../../configuration/protocols/bgp.rst:704 msgid "Route Dampening" msgstr "Route Dampening" -#: ../../configuration/protocols/bgp.rst:1189 +#: ../../configuration/protocols/bgp.rst:1211 msgid "Route Filtering" msgstr "Route Filtering" -#: ../../configuration/protocols/bgp.rst:818 +#: ../../configuration/protocols/bgp.rst:840 msgid "Route Filtering Configuration" msgstr "Route Filtering Configuration" @@ -10311,7 +11414,7 @@ msgstr "Route Map Policy" msgid "Route Redistribution" msgstr "Route Redistribution" -#: ../../configuration/protocols/bgp.rst:904 +#: ../../configuration/protocols/bgp.rst:926 msgid "Route Reflector Configuration" msgstr "Route Reflector Configuration" @@ -10319,7 +11422,7 @@ msgstr "Route Reflector Configuration" msgid "Route Selection" msgstr "Route Selection" -#: ../../configuration/protocols/bgp.rst:737 +#: ../../configuration/protocols/bgp.rst:759 msgid "Route Selection Configuration" msgstr "Route Selection Configuration" @@ -10327,11 +11430,11 @@ msgstr "Route Selection Configuration" msgid "Route and Route6 Policy" msgstr "Route and Route6 Policy" -#: ../../configuration/protocols/bgp.rst:690 +#: ../../configuration/protocols/bgp.rst:712 msgid "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." msgstr "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." -#: ../../configuration/protocols/bgp.rst:1191 +#: ../../configuration/protocols/bgp.rst:1213 msgid "Route filter can be applied using a route-map:" msgstr "Route filter can be applied using a route-map:" @@ -10339,7 +11442,7 @@ msgstr "Route filter can be applied using a route-map:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." @@ -10363,7 +11466,7 @@ msgstr "Router Lifetime" msgid "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." msgstr "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." -#: ../../configuration/vrf/index.rst:425 +#: ../../configuration/vrf/index.rst:444 msgid "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" msgstr "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" @@ -10375,7 +11478,7 @@ msgstr "Routes on Node 2:" msgid "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." msgstr "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." -#: ../../configuration/protocols/bgp.rst:662 +#: ../../configuration/protocols/bgp.rst:684 #: ../../configuration/protocols/ospf.rst:92 #: ../../configuration/protocols/rip.rst:64 #: ../../configuration/protocols/static.rst:39 @@ -10391,7 +11494,7 @@ msgstr "Routes with this attribute can only be sent to your neighbor if your loc msgid "Routine" msgstr "Routine" -#: ../../configuration/vrf/index.rst:82 +#: ../../configuration/vrf/index.rst:101 msgid "Routing" msgstr "Routing" @@ -10404,16 +11507,16 @@ msgid "Rule-Sets" msgstr "Rule-Sets" #: ../../configuration/firewall/bridge.rst:287 -#: ../../configuration/firewall/ipv4.rst:957 +#: ../../configuration/firewall/ipv4.rst:980 #: ../../configuration/firewall/ipv6.rst:965 msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -10421,11 +11524,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -10447,7 +11550,7 @@ msgstr "Rules allow to control and route incoming traffic to specific backend ba msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:391 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Running Behind NAT" @@ -10511,7 +11614,7 @@ msgstr "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new s msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." -#: ../../configuration/protocols/rpki.rst:127 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -10520,11 +11623,11 @@ msgstr "SSH" msgid "SSH :ref:`ssh_key_based_authentication`" msgstr "SSH :ref:`ssh_key_based_authentication`" -#: ../../configuration/system/login.rst:57 +#: ../../configuration/system/login.rst:61 msgid "SSH :ref:`ssh_operation`" msgstr "SSH :ref:`ssh_operation`" -#: ../../configuration/system/option.rst:44 +#: ../../configuration/system/option.rst:74 msgid "SSH client" msgstr "SSH client" @@ -10532,7 +11635,7 @@ msgstr "SSH client" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." -#: ../../configuration/protocols/rpki.rst:137 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "SSH username to establish an SSH connection to the cache server." @@ -10544,8 +11647,11 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 -#: ../../configuration/vpn/sstp.rst:162 msgid "SSL Certificates" msgstr "SSL Certificates" @@ -10609,7 +11715,44 @@ msgstr "Scanning is not supported on all wireless drivers and wireless hardware. msgid "Script execution" msgstr "Script execution" +#: ../../configuration/service/ipoe-server.rst:299 +#: ../../configuration/service/pppoe-server.rst:417 +#: ../../configuration/vpn/l2tp.rst:361 +#: ../../configuration/vpn/pptp.rst:285 +#: ../../configuration/vpn/sstp.rst:319 +msgid "Script to run before session interface comes up" +msgstr "Script to run before session interface comes up" + +#: ../../configuration/service/ipoe-server.rst:291 +#: ../../configuration/service/pppoe-server.rst:409 +#: ../../configuration/vpn/l2tp.rst:353 +#: ../../configuration/vpn/pptp.rst:277 +#: ../../configuration/vpn/sstp.rst:311 +msgid "Script to run when session interface changed by RADIUS CoA handling" +msgstr "Script to run when session interface changed by RADIUS CoA handling" + +#: ../../configuration/service/ipoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:413 +#: ../../configuration/vpn/l2tp.rst:357 +#: ../../configuration/vpn/pptp.rst:281 +#: ../../configuration/vpn/sstp.rst:315 +msgid "Script to run when session interface going to terminate" +msgstr "Script to run when session interface going to terminate" + +#: ../../configuration/service/ipoe-server.rst:303 +#: ../../configuration/service/pppoe-server.rst:421 +#: ../../configuration/vpn/l2tp.rst:365 +#: ../../configuration/vpn/pptp.rst:289 +#: ../../configuration/vpn/sstp.rst:323 +msgid "Script to run when session interface is completely configured and started" +msgstr "Script to run when session interface is completely configured and started" + #: ../../configuration/highavailability/index.rst:299 +#: ../../configuration/service/ipoe-server.rst:287 +#: ../../configuration/service/pppoe-server.rst:405 +#: ../../configuration/vpn/l2tp.rst:349 +#: ../../configuration/vpn/pptp.rst:273 +#: ../../configuration/vpn/sstp.rst:307 msgid "Scripting" msgstr "Scripting" @@ -10617,7 +11760,15 @@ msgstr "Scripting" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." -#: ../../configuration/vpn/sstp.rst:246 +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + +#: ../../configuration/service/ipoe-server.rst:186 +#: ../../configuration/service/pppoe-server.rst:148 +#: ../../configuration/vpn/l2tp.rst:191 +#: ../../configuration/vpn/pptp.rst:131 +#: ../../configuration/vpn/sstp.rst:164 msgid "Secret for Dynamic Authorization Extension server (DM/CoA)" msgstr "Secret for Dynamic Authorization Extension server (DM/CoA)" @@ -10634,7 +11785,7 @@ msgstr "Security/authentication messages" msgid "See :rfc:`7761#section-4.1` for details." msgstr "See :rfc:`7761#section-4.1` for details." -#: ../../configuration/system/ip.rst:52 +#: ../../configuration/system/ip.rst:65 msgid "See below the different parameters available for the IPv4 **show** command:" msgstr "See below the different parameters available for the IPv4 **show** command:" @@ -10670,7 +11821,7 @@ msgstr "Select TLS version used." msgid "Select cipher suite used for cryptographic operations. This setting is mandatory." msgstr "Select cipher suite used for cryptographic operations. This setting is mandatory." -#: ../../configuration/vrf/index.rst:468 +#: ../../configuration/vrf/index.rst:487 msgid "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." msgstr "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." @@ -10694,6 +11845,10 @@ msgstr "Send all DNS queries to the IPv4/IPv6 DNS server specified under `<addre msgid "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." msgstr "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." +#: ../../configuration/vpn/l2tp.rst:276 +msgid "Sent to the client (LAC) in the Host-Name attribute" +msgstr "Sent to the client (LAC) in the Host-Name attribute" + #: ../../configuration/system/console.rst:5 msgid "Serial Console" msgstr "Serial Console" @@ -10703,7 +11858,6 @@ msgid "Serial interfaces can be any interface which is directly connected to the msgstr "Serial interfaces can be any interface which is directly connected to the CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)." #: ../../configuration/interfaces/openvpn.rst:325 -#: ../../configuration/vpn/sstp.rst:210 msgid "Server" msgstr "Server" @@ -10711,7 +11865,7 @@ msgstr "Server" msgid "Server:" msgstr "Server:" -#: ../../configuration/pki/index.rst:210 +#: ../../configuration/pki/index.rst:212 msgid "Server Certificate" msgstr "Server Certificate" @@ -10723,7 +11877,7 @@ msgstr "Server Configuration" msgid "Server Side" msgstr "Server Side" -#: ../../configuration/service/ipoe-server.rst:156 +#: ../../configuration/service/ipoe-server.rst:157 msgid "Server configuration" msgstr "Server configuration" @@ -10748,19 +11902,19 @@ msgstr "Set BFD peer IPv4 address or IPv6 address" msgid "Set BGP community-list to exactly match." msgstr "Set BGP community-list to exactly match." -#: ../../configuration/policy/route-map.rst:318 +#: ../../configuration/policy/route-map.rst:321 msgid "Set BGP local preference attribute." msgstr "Set BGP local preference attribute." -#: ../../configuration/policy/route-map.rst:336 +#: ../../configuration/policy/route-map.rst:339 msgid "Set BGP origin code." msgstr "Set BGP origin code." -#: ../../configuration/policy/route-map.rst:341 +#: ../../configuration/policy/route-map.rst:344 msgid "Set BGP originator ID attribute." msgstr "Set BGP originator ID attribute." -#: ../../configuration/policy/route-map.rst:359 +#: ../../configuration/policy/route-map.rst:362 msgid "Set BGP weight attribute" msgstr "Set BGP weight attribute" @@ -10776,7 +11930,7 @@ msgstr "Set IPSec inbound match criterias, where:" msgid "Set IP fragment match, where:" msgstr "Set IP fragment match, where:" -#: ../../configuration/policy/route-map.rst:331 +#: ../../configuration/policy/route-map.rst:334 msgid "Set OSPF external metric-type." msgstr "Set OSPF external metric-type." @@ -10796,12 +11950,16 @@ msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 ne msgid "Set SSL certeficate <name> for service <name>" msgstr "Set SSL certeficate <name> for service <name>" -#: ../../configuration/firewall/ipv4.rst:918 +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate <name> for service <name>" +msgstr "Set SSL certificate <name> for service <name>" + +#: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:280 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Set TTL to 300 seconds" @@ -10813,6 +11971,10 @@ msgstr "Set Virtual Tunnel Interface" msgid "Set a container description" msgstr "Set a container description" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -10825,7 +11987,7 @@ msgstr "Set a destination and/or source port. Accepted input:" msgid "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." msgstr "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." -#: ../../configuration/system/login.rst:387 +#: ../../configuration/system/login.rst:391 msgid "Set a limit on the maximum number of concurrent logged-in users on the system." msgstr "Set a limit on the maximum number of concurrent logged-in users on the system." @@ -10833,7 +11995,7 @@ msgstr "Set a limit on the maximum number of concurrent logged-in users on the s msgid "Set a meaningful description." msgstr "Set a meaningful description." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Set a named api key. Every key has the same, full permissions on the system." @@ -10860,15 +12022,56 @@ msgstr "Set action for the route-map policy." msgid "Set action to take on entries matching this rule." msgstr "Set action to take on entries matching this rule." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." -#: ../../configuration/vpn/sstp.rst:100 +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + +#: ../../configuration/service/ipoe-server.rst:60 +#: ../../configuration/service/ipoe-server.rst:88 +#: ../../configuration/service/pppoe-server.rst:38 +#: ../../configuration/vpn/l2tp.rst:26 +#: ../../configuration/vpn/pptp.rst:27 +#: ../../configuration/vpn/sstp.rst:53 msgid "Set authentication backend. The configured authentication backend is used for all queries." msgstr "Set authentication backend. The configured authentication backend is used for all queries." -#: ../../configuration/container/index.rst:117 +#: ../../configuration/container/index.rst:122 msgid "Set container capabilities or permissions." msgstr "Set container capabilities or permissions." @@ -10880,6 +12083,19 @@ msgstr "Set delay between gratuitous ARP messages sent on an interface." msgid "Set delay for second set of gratuitous ARPs after transition to MASTER." msgstr "Set delay for second set of gratuitous ARPs after transition to MASTER." +#: ../../configuration/service/ipoe-server.rst:356 +#: ../../configuration/service/pppoe-server.rst:522 +#: ../../configuration/vpn/l2tp.rst:476 +#: ../../configuration/vpn/pptp.rst:400 +#: ../../configuration/vpn/sstp.rst:434 +msgid "Set description." +msgstr "Set description." + +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 +msgid "Set description `<text>` for dynamic DNS service being configured." +msgstr "Set description `<text>` for dynamic DNS service being configured." + #: ../../configuration/policy/as-path-list.rst:21 msgid "Set description for as-path-list policy." msgstr "Set description for as-path-list policy." @@ -10956,7 +12172,7 @@ msgstr "Set eth1 to be the listening interface for the DHCPv6 relay." msgid "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." msgstr "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." -#: ../../configuration/policy/route-map.rst:251 +#: ../../configuration/policy/route-map.rst:254 msgid "Set extcommunity bandwidth" msgstr "Set extcommunity bandwidth" @@ -11025,6 +12241,10 @@ msgstr "Set maximum number of packets to alow in excess of rate." msgid "Set minimum time interval for refreshing gratuitous ARPs while MASTER." msgstr "Set minimum time interval for refreshing gratuitous ARPs while MASTER." +#: ../../configuration/vpn/l2tp.rst:72 +msgid "Set mode for IPsec authentication between VyOS and L2TP clients." +msgstr "Set mode for IPsec authentication between VyOS and L2TP clients." + #: ../../configuration/highavailability/index.rst:285 msgid "Set number of gratuitous ARP messages to send at a time after transition to MASTER." msgstr "Set number of gratuitous ARP messages to send at a time after transition to MASTER." @@ -11055,7 +12275,11 @@ msgstr "Set packet modifications: Packet Differentiated Services Codepoint (DSCP msgid "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." msgstr "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." -#: ../../configuration/policy/route-map.rst:350 +#: ../../configuration/vpn/l2tp.rst:76 +msgid "Set predefined shared secret phrase." +msgstr "Set predefined shared secret phrase." + +#: ../../configuration/policy/route-map.rst:353 msgid "Set prefixes to table." msgstr "Set prefixes to table." @@ -11063,7 +12287,7 @@ msgstr "Set prefixes to table." msgid "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." msgstr "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." -#: ../../configuration/policy/route-map.rst:260 +#: ../../configuration/policy/route-map.rst:263 msgid "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." @@ -11080,7 +12304,7 @@ msgstr "Set rule action to drop." msgid "Set service to bind on IP address, by default listen on any IPv4 and IPv6" msgstr "Set service to bind on IP address, by default listen on any IPv4 and IPv6" -#: ../../configuration/policy/route-map.rst:265 +#: ../../configuration/policy/route-map.rst:268 msgid "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." @@ -11096,7 +12320,7 @@ msgstr "Set some metric to routes learned from a particular neighbor." msgid "Set source-address to your local IP (LAN)." msgstr "Set source-address to your local IP (LAN)." -#: ../../configuration/policy/route-map.rst:346 +#: ../../configuration/policy/route-map.rst:349 msgid "Set source IP/IPv6 address for route." msgstr "Set source IP/IPv6 address for route." @@ -11105,7 +12329,7 @@ msgstr "Set source IP/IPv6 address for route." msgid "Set source address or prefix to match." msgstr "Set source address or prefix to match." -#: ../../configuration/policy/route-map.rst:354 +#: ../../configuration/policy/route-map.rst:357 msgid "Set tag value for routing protocol." msgstr "Set tag value for routing protocol." @@ -11113,8 +12337,8 @@ msgstr "Set tag value for routing protocol." msgid "Set the \"recursion desired\" bit in requests to the upstream nameserver." msgstr "Set the \"recursion desired\" bit in requests to the upstream nameserver." -#: ../../configuration/policy/route-map.rst:290 -#: ../../configuration/policy/route-map.rst:303 +#: ../../configuration/policy/route-map.rst:293 +#: ../../configuration/policy/route-map.rst:306 msgid "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." msgstr "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." @@ -11175,6 +12399,10 @@ msgstr "Set the Segment Routing Local Block i.e. the label range used by MPLS to msgid "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." msgstr "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." +#: ../../configuration/container/index.rst:99 +msgid "Set the User ID or Group ID of the container" +msgstr "Set the User ID or Group ID of the container" + #: ../../configuration/protocols/pim.rst:147 msgid "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." @@ -11183,6 +12411,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Set the ``sshd`` log level. The default is ``info``." @@ -11195,6 +12427,14 @@ msgstr "Set the address of the backend port" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Set the address of the backend server to which the incoming traffic will be forwarded" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." @@ -11231,6 +12471,10 @@ msgstr "Set the global setting for invalid packets." msgid "Set the global setting for related connections." msgstr "Set the global setting for related connections." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" @@ -11247,6 +12491,10 @@ msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can re msgid "Set the maximum number of TCP half-open connections." msgstr "Set the maximum number of TCP half-open connections." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." @@ -11255,11 +12503,11 @@ msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry use msgid "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." msgstr "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." -#: ../../configuration/interfaces/bridge.rst:148 +#: ../../configuration/interfaces/bridge.rst:157 msgid "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" msgstr "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" -#: ../../configuration/policy/route-map.rst:284 +#: ../../configuration/policy/route-map.rst:287 msgid "Set the next-hop as unchanged. Pass through the route-map without changing its value" msgstr "Set the next-hop as unchanged. Pass through the route-map without changing its value" @@ -11271,7 +12519,15 @@ msgstr "Set the number of TCP maximum retransmit attempts." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." -#: ../../configuration/system/login.rst:84 +#: ../../configuration/protocols/rpki.rst:119 +msgid "Set the number of seconds the router waits until retrying to connect to the cache server." +msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." + +#: ../../configuration/protocols/rpki.rst:112 +msgid "Set the number of seconds the router waits until the router expires the cache." +msgstr "Set the number of seconds the router waits until the router expires the cache." + +#: ../../configuration/system/login.rst:88 msgid "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." msgstr "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." @@ -11291,11 +12547,11 @@ msgstr "Set the peer's key used to receive (RX) traffic" msgid "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." msgstr "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." -#: ../../configuration/container/index.rst:98 +#: ../../configuration/container/index.rst:103 msgid "Set the restart behavior of the container." msgstr "Set the restart behavior of the container." -#: ../../configuration/policy/route-map.rst:323 +#: ../../configuration/policy/route-map.rst:326 msgid "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." msgstr "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." @@ -11307,6 +12563,10 @@ msgstr "Set the routing table to forward packet with." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." @@ -11328,15 +12588,27 @@ msgstr "Set the timeout in secounds for a protocol or state in a custom rule." msgid "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." msgstr "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." -#: ../../configuration/firewall/ipv4.rst:922 +#: ../../configuration/firewall/ipv4.rst:945 #: ../../configuration/firewall/ipv6.rst:931 msgid "Set the window scale factor for TCP window scaling" msgstr "Set the window scale factor for TCP window scaling" -#: ../../configuration/system/login.rst:124 +#: ../../configuration/system/login.rst:128 msgid "Set window of concurrently valid codes." msgstr "Set window of concurrently valid codes." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Sets the image name in the hub registry" @@ -11357,7 +12629,7 @@ msgstr "Sets the unique id for this vxlan-interface. Not sure how it correlates msgid "Setting VRRP group priority" msgstr "Setting VRRP group priority" -#: ../../configuration/service/dhcp-server.rst:231 +#: ../../configuration/service/dhcp-server.rst:287 msgid "Setting name" msgstr "Setting name" @@ -11389,7 +12661,16 @@ msgstr "Setting up certificates:" msgid "Setting up tunnel:" msgstr "Setting up tunnel:" -#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/system/option.rst:42 +#: ../../configuration/system/option.rst:53 +msgid "Setting will only become active with the next reboot!" +msgstr "Setting will only become active with the next reboot!" + +#: ../../configuration/service/dhcp-server.rst:429 +msgid "Setup DHCP HA for network 192.0.2.0/24" +msgstr "Setup DHCP HA for network 192.0.2.0/24" + +#: ../../configuration/service/dhcp-server.rst:413 msgid "Setup DHCP failover for network 192.0.2.0/24" msgstr "Setup DHCP failover for network 192.0.2.0/24" @@ -11397,15 +12678,19 @@ msgstr "Setup DHCP failover for network 192.0.2.0/24" msgid "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." msgstr "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." -#: ../../configuration/system/login.rst:262 +#: ../../configuration/system/login.rst:266 msgid "Setup the `<timeout>` in seconds when querying the RADIUS server." msgstr "Setup the `<timeout>` in seconds when querying the RADIUS server." -#: ../../configuration/system/login.rst:331 +#: ../../configuration/system/login.rst:335 msgid "Setup the `<timeout>` in seconds when querying the TACACS server." msgstr "Setup the `<timeout>` in seconds when querying the TACACS server." -#: ../../configuration/service/dns.rst:327 +#: ../../configuration/service/dns.rst:430 +msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." +msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:341 msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." @@ -11413,11 +12698,11 @@ msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS p msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." -#: ../../configuration/system/option.rst:31 +#: ../../configuration/system/option.rst:61 msgid "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." msgstr "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." -#: ../../configuration/system/option.rst:36 +#: ../../configuration/system/option.rst:66 msgid "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." msgstr "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." @@ -11445,25 +12730,25 @@ msgstr "Short GI capabilities for 20 and 40 MHz" msgid "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." msgstr "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." -#: ../../configuration/vrf/index.rst:488 +#: ../../configuration/vrf/index.rst:507 msgid "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." msgstr "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." -#: ../../configuration/protocols/bgp.rst:953 +#: ../../configuration/protocols/bgp.rst:975 #: ../../configuration/protocols/mpls.rst:225 msgid "Show" msgstr "Show" -#: ../../configuration/service/dhcp-server.rst:416 +#: ../../configuration/service/dhcp-server.rst:475 msgid "Show DHCP server daemon log file" msgstr "Show DHCP server daemon log file" -#: ../../configuration/service/dhcp-server.rst:668 +#: ../../configuration/service/dhcp-server.rst:729 msgid "Show DHCPv6 server daemon log file" msgstr "Show DHCPv6 server daemon log file" #: ../../configuration/firewall/bridge.rst:306 -#: ../../configuration/firewall/ipv4.rst:1115 +#: ../../configuration/firewall/ipv4.rst:1138 #: ../../configuration/firewall/ipv6.rst:1138 msgid "Show Firewall log" msgstr "Show Firewall log" @@ -11528,27 +12813,27 @@ msgstr "Show WWAN module model." msgid "Show WWAN module signal strength." msgstr "Show WWAN module signal strength." -#: ../../configuration/container/index.rst:163 +#: ../../configuration/container/index.rst:199 msgid "Show a list available container networks" msgstr "Show a list available container networks" -#: ../../configuration/pki/index.rst:297 +#: ../../configuration/pki/index.rst:328 msgid "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." msgstr "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." -#: ../../configuration/pki/index.rst:332 +#: ../../configuration/pki/index.rst:363 msgid "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." msgstr "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." -#: ../../configuration/pki/index.rst:315 +#: ../../configuration/pki/index.rst:346 msgid "Show a list of installed certificates" msgstr "Show a list of installed certificates" -#: ../../configuration/protocols/bfd.rst:98 +#: ../../configuration/protocols/bfd.rst:105 msgid "Show all BFD peers" msgstr "Show all BFD peers" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Show available offloading functions on given `<interface>`" @@ -11556,23 +12841,23 @@ msgstr "Show available offloading functions on given `<interface>`" msgid "Show binded qat device interrupts to certain core." msgstr "Show binded qat device interrupts to certain core." -#: ../../configuration/interfaces/bridge.rst:283 +#: ../../configuration/interfaces/bridge.rst:292 msgid "Show bridge `<name>` fdb displays the current forwarding table:" msgstr "Show bridge `<name>` fdb displays the current forwarding table:" -#: ../../configuration/interfaces/bridge.rst:310 +#: ../../configuration/interfaces/bridge.rst:319 msgid "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." msgstr "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." msgstr "Show brief interface information." -#: ../../configuration/system/ipv6.rst:46 +#: ../../configuration/system/ipv6.rst:59 msgid "Show commands" msgstr "Show commands" @@ -11584,11 +12869,11 @@ msgstr "Show configured serial ports and their respective interface configuratio msgid "Show connection data of load balanced traffic:" msgstr "Show connection data of load balanced traffic:" -#: ../../configuration/service/conntrack-sync.rst:132 +#: ../../configuration/service/conntrack-sync.rst:141 msgid "Show connection syncing external cache entries" msgstr "Show connection syncing external cache entries" -#: ../../configuration/service/conntrack-sync.rst:136 +#: ../../configuration/service/conntrack-sync.rst:145 msgid "Show connection syncing internal cache entries" msgstr "Show connection syncing internal cache entries" @@ -11610,7 +12895,7 @@ msgstr "Show detailed information about the underlaying physical links on given #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -11642,7 +12927,7 @@ msgstr "Show general information about specific WireGuard interface" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Show info about the Wireguard service. It also shows the latest handshake." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Show information about physical `<interface>`" @@ -11654,44 +12939,44 @@ msgstr "Show list of IPs currently blocked by SSH dynamic-protection." msgid "Show logs for mDNS repeater service." msgstr "Show logs for mDNS repeater service." -#: ../../configuration/container/index.rst:159 +#: ../../configuration/container/index.rst:195 msgid "Show logs from a given container" msgstr "Show logs from a given container" -#: ../../configuration/service/dhcp-server.rst:420 +#: ../../configuration/service/dhcp-server.rst:479 msgid "Show logs from all DHCP client processes." msgstr "Show logs from all DHCP client processes." -#: ../../configuration/service/dhcp-server.rst:672 +#: ../../configuration/service/dhcp-server.rst:733 msgid "Show logs from all DHCPv6 client processes." msgstr "Show logs from all DHCPv6 client processes." -#: ../../configuration/service/dhcp-server.rst:424 +#: ../../configuration/service/dhcp-server.rst:483 msgid "Show logs from specific `interface` DHCP client process." msgstr "Show logs from specific `interface` DHCP client process." -#: ../../configuration/service/dhcp-server.rst:676 +#: ../../configuration/service/dhcp-server.rst:737 msgid "Show logs from specific `interface` DHCPv6 client process." msgstr "Show logs from specific `interface` DHCPv6 client process." -#: ../../configuration/pki/index.rst:311 +#: ../../configuration/pki/index.rst:342 msgid "Show only information for specified Certificate Authority." msgstr "Show only information for specified Certificate Authority." -#: ../../configuration/pki/index.rst:328 +#: ../../configuration/pki/index.rst:359 msgid "Show only information for specified certificate." msgstr "Show only information for specified certificate." -#: ../../configuration/service/dhcp-server.rst:478 -#: ../../configuration/service/dhcp-server.rst:699 +#: ../../configuration/service/dhcp-server.rst:537 +#: ../../configuration/service/dhcp-server.rst:760 msgid "Show only leases in the specified pool." msgstr "Show only leases in the specified pool." -#: ../../configuration/service/dhcp-server.rst:708 +#: ../../configuration/service/dhcp-server.rst:769 msgid "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" msgstr "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" -#: ../../configuration/service/dhcp-server.rst:496 +#: ../../configuration/service/dhcp-server.rst:555 msgid "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" msgstr "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" @@ -11703,23 +12988,23 @@ msgstr "Show routing table entry for the default route." msgid "Show specific MACsec interface information" msgstr "Show specific MACsec interface information" -#: ../../configuration/vpn/site2site_ipsec.rst:221 +#: ../../configuration/vpn/site2site_ipsec.rst:224 msgid "Show status of new setup:" msgstr "Show status of new setup:" -#: ../../configuration/service/dhcp-server.rst:447 +#: ../../configuration/service/dhcp-server.rst:506 msgid "Show statuses of all active leases:" msgstr "Show statuses of all active leases:" -#: ../../configuration/service/dhcp-server.rst:465 +#: ../../configuration/service/dhcp-server.rst:524 msgid "Show statuses of all active leases granted by local (this server) or remote (failover server):" msgstr "Show statuses of all active leases granted by local (this server) or remote (failover server):" -#: ../../configuration/service/dhcp-server.rst:432 +#: ../../configuration/service/dhcp-server.rst:491 msgid "Show the DHCP server statistics:" msgstr "Show the DHCP server statistics:" -#: ../../configuration/service/dhcp-server.rst:443 +#: ../../configuration/service/dhcp-server.rst:502 msgid "Show the DHCP server statistics for the specified pool." msgstr "Show the DHCP server statistics for the specified pool." @@ -11731,11 +13016,11 @@ msgstr "Show the console server log." msgid "Show the full config uploaded to the QAT device." msgstr "Show the full config uploaded to the QAT device." -#: ../../configuration/container/index.rst:151 +#: ../../configuration/container/index.rst:187 msgid "Show the list of all active containers." msgstr "Show the list of all active containers." -#: ../../configuration/container/index.rst:155 +#: ../../configuration/container/index.rst:191 msgid "Show the local container images." msgstr "Show the local container images." @@ -11747,7 +13032,7 @@ msgstr "Show the logs of a specific Rule-Set." msgid "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." -#: ../../configuration/firewall/ipv4.rst:1125 +#: ../../configuration/firewall/ipv4.rst:1148 msgid "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." @@ -11760,15 +13045,15 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "Show the route" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP" -#: ../../configuration/protocols/bfd.rst:179 +#: ../../configuration/protocols/bfd.rst:186 msgid "Showing BFD monitored static routes" msgstr "Showing BFD monitored static routes" -#: ../../configuration/service/dhcp-server.rst:684 +#: ../../configuration/service/dhcp-server.rst:745 msgid "Shows status of all assigned leases:" msgstr "Shows status of all assigned leases:" @@ -11796,7 +13081,7 @@ msgstr "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)" msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" msgstr "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" -#: ../../configuration/vpn/site2site_ipsec.rst:427 +#: ../../configuration/vpn/site2site_ipsec.rst:430 msgid "Similar combinations are applicable for the dead-peer-detection." msgstr "Similar combinations are applicable for the dead-peer-detection." @@ -11828,6 +13113,14 @@ msgstr "Since it's a HQ and branch offices setup, we will want all clients to ha msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." +#: ../../configuration/service/ipoe-server.rst:131 +#: ../../configuration/service/pppoe-server.rst:93 +#: ../../configuration/vpn/l2tp.rst:136 +#: ../../configuration/vpn/pptp.rst:76 +#: ../../configuration/vpn/sstp.rst:109 +msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" +msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" + #: ../../configuration/service/mdns.rst:13 msgid "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." @@ -11836,6 +13129,10 @@ msgstr "Since the mDNS protocol sends the AA records in the packet itself, the r msgid "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." +#: ../../configuration/service/ids.rst:98 +msgid "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" +msgstr "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" + #: ../../configuration/interfaces/vxlan.rst:157 msgid "Single VXLAN device (SVD)" msgstr "Single VXLAN device (SVD)" @@ -11857,7 +13154,7 @@ msgstr "Site-to-site mode supports x.509 but doesn't require it and can also wor msgid "Site to Site VPN" msgstr "Site to Site VPN" -#: ../../configuration/pki/index.rst:275 +#: ../../configuration/pki/index.rst:306 msgid "Size of the RSA key." msgstr "Size of the RSA key." @@ -11865,6 +13162,10 @@ msgstr "Size of the RSA key." msgid "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." msgstr "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." +#: ../../configuration/service/ids.rst:110 +msgid "So, firewall configuration needed for this setup:" +msgstr "So, firewall configuration needed for this setup:" + #: ../../configuration/nat/nat44.rst:554 msgid "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." msgstr "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." @@ -11885,7 +13186,14 @@ msgstr "Some ISPs by default only delegate a /64 prefix. To request for a specif msgid "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." msgstr "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." -#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/service/ipoe-server.rst:140 +#: ../../configuration/service/pppoe-server.rst:102 +#: ../../configuration/vpn/pptp.rst:85 +#: ../../configuration/vpn/sstp.rst:118 +msgid "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." +msgstr "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." + +#: ../../configuration/vpn/l2tp.rst:145 msgid "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." msgstr "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." @@ -11893,6 +13201,10 @@ msgstr "Some RADIUS_ severs use an access control list which allows or denies qu msgid "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." msgstr "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." +#: ../../configuration/container/index.rst:171 +msgid "Some container registries require credentials to be used." +msgstr "Some container registries require credentials to be used." + #: ../../configuration/firewall/general-legacy.rst:38 msgid "Some firewall settings are global and have an affect on the whole system." msgstr "Some firewall settings are global and have an affect on the whole system." @@ -11933,11 +13245,11 @@ msgstr "Some users tend to connect their mobile devices using WireGuard to their msgid "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." msgstr "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." -#: ../../configuration/service/dhcp-server.rst:703 +#: ../../configuration/service/dhcp-server.rst:764 msgid "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" msgstr "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" -#: ../../configuration/service/dhcp-server.rst:491 +#: ../../configuration/service/dhcp-server.rst:550 msgid "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" msgstr "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" @@ -11949,7 +13261,16 @@ msgstr "Source Address" msgid "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." msgstr "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." -#: ../../configuration/vpn/sstp.rst:268 +#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:208 +#: ../../configuration/service/pppoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:170 +#: ../../configuration/vpn/l2tp.rst:157 +#: ../../configuration/vpn/l2tp.rst:213 +#: ../../configuration/vpn/pptp.rst:97 +#: ../../configuration/vpn/pptp.rst:153 +#: ../../configuration/vpn/sstp.rst:130 +#: ../../configuration/vpn/sstp.rst:186 msgid "Source IPv4 address used in all RADIUS server queires." msgstr "Source IPv4 address used in all RADIUS server queires." @@ -11961,11 +13282,11 @@ msgstr "Source NAT rules" msgid "Source Prefix" msgstr "Source Prefix" -#: ../../configuration/system/login.rst:276 +#: ../../configuration/system/login.rst:280 msgid "Source all connections to the RADIUS servers from given VRF `<name>`." msgstr "Source all connections to the RADIUS servers from given VRF `<name>`." -#: ../../configuration/system/login.rst:345 +#: ../../configuration/system/login.rst:349 msgid "Source all connections to the TACACS servers from given VRF `<name>`." msgstr "Source all connections to the TACACS servers from given VRF `<name>`." @@ -11973,7 +13294,7 @@ msgstr "Source all connections to the TACACS servers from given VRF `<name>`." msgid "Source protocol to match." msgstr "Source protocol to match." -#: ../../configuration/vpn/ipsec.rst:225 +#: ../../configuration/vpn/ipsec.rst:229 msgid "Source tunnel from dummy interface" msgstr "Source tunnel from dummy interface" @@ -12001,15 +13322,48 @@ msgstr "Spatial Multiplexing Power Save (SMPS) settings" msgid "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." msgstr "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." -#: ../../configuration/vpn/sstp.rst:238 +#: ../../configuration/service/ipoe-server.rst:178 +#: ../../configuration/service/pppoe-server.rst:140 +#: ../../configuration/vpn/l2tp.rst:183 +#: ../../configuration/vpn/pptp.rst:123 +#: ../../configuration/vpn/sstp.rst:156 msgid "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" msgstr "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" -#: ../../configuration/vpn/sstp.rst:194 +#: ../../configuration/service/pppoe-server.rst:470 +#: ../../configuration/vpn/l2tp.rst:424 +#: ../../configuration/vpn/pptp.rst:348 +#: ../../configuration/vpn/sstp.rst:382 +msgid "Specifies IPv4 negotiation preference." +msgstr "Specifies IPv4 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:345 +#: ../../configuration/vpn/l2tp.rst:289 +#: ../../configuration/vpn/pptp.rst:213 +#: ../../configuration/vpn/sstp.rst:247 +msgid "Specifies IPv6 negotiation preference." +msgstr "Specifies IPv6 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:552 +msgid "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" +msgstr "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" + +#: ../../configuration/service/pppoe-server.rst:502 +#: ../../configuration/vpn/l2tp.rst:456 +#: ../../configuration/vpn/pptp.rst:380 +#: ../../configuration/vpn/sstp.rst:414 +msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." +msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." + +#: ../../configuration/vpn/sstp.rst:200 msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." -#: ../../configuration/vrf/index.rst:477 +#: ../../configuration/service/ipoe-server.rst:81 +msgid "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." +msgstr "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." + +#: ../../configuration/vrf/index.rst:496 msgid "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." msgstr "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." @@ -12017,6 +13371,13 @@ msgstr "Specifies an optional route-map to be applied to routes imported or expo msgid "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." msgstr "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." +#: ../../configuration/service/pppoe-server.rst:388 +#: ../../configuration/vpn/l2tp.rst:332 +#: ../../configuration/vpn/pptp.rst:256 +#: ../../configuration/vpn/sstp.rst:290 +msgid "Specifies fixed or random interface identifier for IPv6. By default is fixed." +msgstr "Specifies fixed or random interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:173 msgid "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." msgstr "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." @@ -12025,15 +13386,36 @@ msgstr "Specifies how long squid assumes an externally validated username:passwo msgid "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." msgstr "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." +#: ../../configuration/service/pppoe-server.rst:462 +#: ../../configuration/vpn/l2tp.rst:416 +#: ../../configuration/vpn/pptp.rst:340 +#: ../../configuration/vpn/sstp.rst:374 +msgid "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." +msgstr "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." + #: ../../configuration/interfaces/bonding.rst:40 msgid "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" msgstr "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" +#: ../../configuration/service/pppoe-server.rst:396 +#: ../../configuration/vpn/l2tp.rst:340 +#: ../../configuration/vpn/pptp.rst:264 +#: ../../configuration/vpn/sstp.rst:298 +msgid "Specifies peer interface identifier for IPv6. By default is fixed." +msgstr "Specifies peer interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:81 msgid "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." msgstr "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." -#: ../../configuration/vpn/sstp.rst:110 +#: ../../configuration/service/ipoe-server.rst:348 +msgid "Specifies relay agent IP addre" +msgstr "Specifies relay agent IP addre" + +#: ../../configuration/service/pppoe-server.rst:70 +#: ../../configuration/vpn/l2tp.rst:52 +#: ../../configuration/vpn/pptp.rst:54 +#: ../../configuration/vpn/sstp.rst:79 msgid "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." msgstr "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." @@ -12057,7 +13439,7 @@ msgstr "Specifies the available :abbr:`MAC (Message Authentication Code)` algori msgid "Specifies the base DN under which the users are located." msgstr "Specifies the base DN under which the users are located." -#: ../../configuration/service/dhcp-server.rst:239 +#: ../../configuration/service/dhcp-server.rst:295 msgid "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." msgstr "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." @@ -12094,22 +13476,33 @@ msgstr "Specifies the port `<port>` that the SSTP port will listen on (default 4 msgid "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." msgstr "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." -#: ../../configuration/vrf/index.rst:452 +#: ../../configuration/vrf/index.rst:471 msgid "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." msgstr "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." -#: ../../configuration/vrf/index.rst:445 +#: ../../configuration/vrf/index.rst:464 msgid "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." msgstr "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." -#: ../../configuration/vpn/sstp.rst:281 +#: ../../configuration/service/ipoe-server.rst:224 +#: ../../configuration/service/pppoe-server.rst:186 +#: ../../configuration/vpn/l2tp.rst:229 +#: ../../configuration/vpn/pptp.rst:169 +#: ../../configuration/vpn/sstp.rst:202 msgid "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." msgstr "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." -#: ../../configuration/vpn/sstp.rst:188 +#: ../../configuration/vpn/sstp.rst:194 msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." +#: ../../configuration/service/pppoe-server.rst:490 +#: ../../configuration/vpn/l2tp.rst:444 +#: ../../configuration/vpn/pptp.rst:368 +#: ../../configuration/vpn/sstp.rst:402 +msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." +msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." + #: ../../configuration/interfaces/vxlan.rst:77 msgid "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." msgstr "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." @@ -12122,28 +13515,47 @@ msgstr "Specifies whether the VXLAN device is capable of vni filtering." msgid "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." msgstr "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." -#: ../../configuration/vpn/sstp.rst:272 +#: ../../configuration/service/ipoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:217 +#: ../../configuration/vpn/pptp.rst:157 +#: ../../configuration/vpn/sstp.rst:190 msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." +#: ../../configuration/service/pppoe-server.rst:174 +msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." +msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." + +#: ../../configuration/service/ipoe-server.rst:344 +msgid "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." +msgstr "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." + #: ../../configuration/service/ssh.rst:45 msgid "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." msgstr "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." -#: ../../configuration/firewall/ipv4.rst:401 +#: ../../configuration/service/ids.rst:51 +msgid "Specify IPv4 and/or IPv6 networks that should be protected/monitored." +msgstr "Specify IPv4 and/or IPv6 networks that should be protected/monitored." + +#: ../../configuration/service/ids.rst:38 +msgid "Specify IPv4 and/or IPv6 networks which are going to be excluded." +msgstr "Specify IPv4 and/or IPv6 networks which are going to be excluded." + +#: ../../configuration/firewall/ipv4.rst:424 #: ../../configuration/firewall/ipv6.rst:408 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." msgstr "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." -#: ../../configuration/service/dhcp-server.rst:550 +#: ../../configuration/service/dhcp-server.rst:609 msgid "Specify a NIS+ server address for DHCPv6 clients." msgstr "Specify a NIS+ server address for DHCPv6 clients." -#: ../../configuration/service/dhcp-server.rst:545 +#: ../../configuration/service/dhcp-server.rst:604 msgid "Specify a NIS server address for DHCPv6 clients." msgstr "Specify a NIS server address for DHCPv6 clients." -#: ../../configuration/service/dhcp-server.rst:555 +#: ../../configuration/service/dhcp-server.rst:614 msgid "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." msgstr "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." @@ -12167,6 +13579,14 @@ msgstr "Specify an alternate AS for this BGP process when interacting with the s msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." +#: ../../configuration/service/dns.rst:348 +msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." +msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." + +#: ../../configuration/service/ipoe-server.rst:339 +msgid "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" +msgstr "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" + #: ../../configuration/service/ntp.rst:84 #: ../../configuration/service/ssh.rst:110 #: ../../configuration/system/syslog.rst:79 @@ -12181,11 +13601,11 @@ msgstr "Specify nexthop on the path to the destination, ``ipv4-address`` can be msgid "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." msgstr "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." -#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:249 msgid "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." msgstr "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." -#: ../../configuration/system/login.rst:314 +#: ../../configuration/system/login.rst:318 msgid "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." msgstr "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." @@ -12205,7 +13625,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -12225,7 +13645,7 @@ msgstr "Specify the systems `<timezone>` as the Region/Location that best define msgid "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" msgstr "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" -#: ../../configuration/service/dns.rst:269 +#: ../../configuration/service/dns.rst:283 msgid "Specify timeout / update interval to check if IP address changed." msgstr "Specify timeout / update interval to check if IP address changed." @@ -12233,6 +13653,10 @@ msgstr "Specify timeout / update interval to check if IP address changed." msgid "Specify timeout interval for keepalive message in seconds." msgstr "Specify timeout interval for keepalive message in seconds." +#: ../../configuration/service/ipoe-server.rst:97 +msgid "Specify where interface is shared by multiple users or it is vlan-per-user." +msgstr "Specify where interface is shared by multiple users or it is vlan-per-user." + #: ../../configuration/interfaces/vxlan.rst:191 msgid "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." msgstr "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." @@ -12250,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -12285,7 +13713,7 @@ msgstr "Starting with VyOS 1.2 a :abbr:`mDNS (Multicast DNS)` repeater functiona msgid "Static" msgstr "Static" -#: ../../configuration/service/dhcp-server.rst:189 +#: ../../configuration/service/dhcp-server.rst:245 msgid "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." msgstr "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." @@ -12313,13 +13741,13 @@ msgstr "Static Routing or other dynamic routing protocols can be used over the v msgid "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." msgstr "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." -#: ../../configuration/service/dhcp-server.rst:174 -#: ../../configuration/service/dhcp-server.rst:621 +#: ../../configuration/service/dhcp-server.rst:224 +#: ../../configuration/service/dhcp-server.rst:682 msgid "Static mappings" msgstr "Static mappings" -#: ../../configuration/service/dhcp-server.rst:460 -#: ../../configuration/service/dhcp-server.rst:694 +#: ../../configuration/service/dhcp-server.rst:519 +#: ../../configuration/service/dhcp-server.rst:755 msgid "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." msgstr "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." @@ -12384,7 +13812,7 @@ msgstr "Supported versions of RIP are:" msgid "Supports as HELPER for configured grace period." msgstr "Supports as HELPER for configured grace period." -#: ../../configuration/vpn/ipsec.rst:178 +#: ../../configuration/vpn/ipsec.rst:182 msgid "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" msgstr "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" @@ -12404,17 +13832,17 @@ msgstr "Synamic instructs to forward to all peers which we have a direct connect msgid "Sync groups" msgstr "Sync groups" -#: ../../configuration/firewall/ipv4.rst:911 +#: ../../configuration/firewall/ipv4.rst:934 #: ../../configuration/firewall/ipv6.rst:920 msgid "Synproxy" msgstr "Synproxy" -#: ../../configuration/firewall/ipv4.rst:912 +#: ../../configuration/firewall/ipv4.rst:935 #: ../../configuration/firewall/ipv6.rst:921 msgid "Synproxy connections" msgstr "Synproxy connections" -#: ../../configuration/firewall/ipv4.rst:929 +#: ../../configuration/firewall/ipv4.rst:952 #: ../../configuration/firewall/ipv6.rst:938 msgid "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" msgstr "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" @@ -12484,23 +13912,23 @@ msgstr "System identifier: ``1921.6800.1002`` - for system idetifiers we recomme msgid "System is unusable - a panic condition" msgstr "System is unusable - a panic condition" -#: ../../configuration/system/login.rst:299 +#: ../../configuration/system/login.rst:303 msgid "TACACS+" msgstr "TACACS+" -#: ../../configuration/system/login.rst:418 +#: ../../configuration/system/login.rst:422 msgid "TACACS Example" msgstr "TACACS Example" -#: ../../configuration/system/login.rst:305 +#: ../../configuration/system/login.rst:309 msgid "TACACS is defined in :rfc:`8907`." msgstr "TACACS is defined in :rfc:`8907`." -#: ../../configuration/system/login.rst:335 +#: ../../configuration/system/login.rst:339 msgid "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." msgstr "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." -#: ../../configuration/protocols/static.rst:140 +#: ../../configuration/protocols/static.rst:173 #: ../../configuration/system/flow-accounting.rst:83 msgid "TBD" msgstr "TBD" @@ -12553,19 +13981,23 @@ msgstr "Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for a msgid "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" msgstr "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" -#: ../../configuration/vpn/sstp.rst:227 +#: ../../configuration/service/ipoe-server.rst:170 +#: ../../configuration/service/pppoe-server.rst:132 +#: ../../configuration/vpn/l2tp.rst:175 +#: ../../configuration/vpn/pptp.rst:115 +#: ../../configuration/vpn/sstp.rst:148 msgid "Temporary disable this RADIUS server." msgstr "Temporary disable this RADIUS server." -#: ../../configuration/system/login.rst:258 +#: ../../configuration/system/login.rst:262 msgid "Temporary disable this RADIUS server. It won't be queried." msgstr "Temporary disable this RADIUS server. It won't be queried." -#: ../../configuration/system/login.rst:327 +#: ../../configuration/system/login.rst:331 msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -12589,7 +14021,7 @@ msgstr "Test disconnecting given connection-oriented interface. `<interface>` ca msgid "Test from the IPv6 only client:" msgstr "Test from the IPv6 only client:" -#: ../../configuration/vpn/sstp.rst:305 +#: ../../configuration/vpn/sstp.rst:374 msgid "Testing SSTP" msgstr "Testing SSTP" @@ -12601,7 +14033,7 @@ msgstr "Testing and Validation" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "That is how it is possible to do the so-called \"ingress shaping\"." @@ -12617,11 +14049,11 @@ msgstr "The ARP monitor works by periodically checking the slave devices to dete msgid "The ASP has documented their IPSec requirements:" msgstr "The ASP has documented their IPSec requirements:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." -#: ../../configuration/vrf/index.rst:94 +#: ../../configuration/vrf/index.rst:113 msgid "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." msgstr "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." @@ -12645,7 +14077,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -12661,7 +14093,7 @@ msgstr "The Intel AX200 card does not work out of the box in AP mode, see https: msgid "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." msgstr "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." -#: ../../configuration/vpn/pptp.rst:6 +#: ../../configuration/vpn/pptp.rst:7 msgid "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." msgstr "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." @@ -12697,23 +14129,27 @@ msgstr "The UDP port number used by your apllication. It is mandatory for this k msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." -#: ../../configuration/service/dns.rst:173 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" -#: ../../configuration/service/dns.rst:171 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" -#: ../../configuration/service/dns.rst:175 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." -#: ../../configuration/pki/index.rst:254 +#: ../../configuration/pki/index.rst:285 msgid "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." msgstr "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." @@ -12758,10 +14194,26 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -12770,11 +14222,15 @@ msgstr "The ``https`` service listens on port 443 with backend `bk-default` to h msgid "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." msgstr "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." -#: ../../configuration/vpn/l2tp.rst:176 +#: ../../configuration/service/ipoe-server.rst:154 +#: ../../configuration/service/pppoe-server.rst:116 +#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/vpn/pptp.rst:99 +#: ../../configuration/vpn/sstp.rst:132 msgid "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." msgstr "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." -#: ../../configuration/interfaces/bridge.rst:270 +#: ../../configuration/interfaces/bridge.rst:279 msgid "The `show bridge` operational command can be used to display configured bridges:" msgstr "The `show bridge` operational command can be used to display configured bridges:" @@ -12787,11 +14243,11 @@ msgstr "The above directory and default-config must be a child directory of /con msgid "The action can be :" msgstr "The action can be :" -#: ../../configuration/pki/index.rst:271 +#: ../../configuration/pki/index.rst:302 msgid "The address the server listens to during http-01 challenge" msgstr "The address the server listens to during http-01 challenge" -#: ../../configuration/protocols/bgp.rst:775 +#: ../../configuration/protocols/bgp.rst:797 msgid "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." msgstr "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." @@ -12803,7 +14259,7 @@ msgstr "The allocated address block is 100.64.0.0/10." msgid "The amount of Duplicate Address Detection probes to send." msgstr "The amount of Duplicate Address Detection probes to send." -#: ../../configuration/protocols/bgp.rst:835 +#: ../../configuration/protocols/bgp.rst:857 msgid "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." msgstr "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." @@ -12819,15 +14275,19 @@ msgstr "The below referenced IP address `192.0.2.1` is used as example address r msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "The case of ingress shaping" -#: ../../configuration/service/pppoe-server.rst:385 +#: ../../configuration/service/pppoe-server.rst:644 +msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." +msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." + +#: ../../configuration/service/pppoe-server.rst:644 msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." -#: ../../configuration/service/ipoe-server.rst:90 +#: ../../configuration/service/ipoe-server.rst:91 msgid "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." msgstr "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." @@ -12839,7 +14299,7 @@ msgstr "The command :opcmd:`show interfaces wireguard wg01 public-key` will then msgid "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." msgstr "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." -#: ../../configuration/service/pppoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:305 msgid "The command below enables it, assuming the RADIUS connection has been setup and is working." msgstr "The command below enables it, assuming the RADIUS connection has been setup and is working." @@ -12855,9 +14315,9 @@ msgstr "The command pon TESTUNNEL establishes the PPTP tunnel to the remote syst msgid "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" msgstr "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" -#: ../../configuration/service/dhcp-server.rst:210 -#: ../../configuration/service/dhcp-server.rst:601 -#: ../../configuration/service/dhcp-server.rst:644 +#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:661 +#: ../../configuration/service/dhcp-server.rst:705 msgid "The configuration will look as follows:" msgstr "The configuration will look as follows:" @@ -12881,6 +14341,10 @@ msgstr "The connection tracking table contains one entry for each connection bei msgid "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" msgstr "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" +#: ../../configuration/service/pppoe-server.rst:299 +msgid "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" +msgstr "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" + #: ../../configuration/service/ntp.rst:29 msgid "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." msgstr "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." @@ -12905,7 +14369,11 @@ msgstr "The default hostname used is `vyos`." msgid "The default is 1492." msgstr "The default is 1492." -#: ../../configuration/service/dhcp-server.rst:526 +#: ../../configuration/interfaces/bridge.rst:140 +msgid "The default is ``802.1q``." +msgstr "The default is ``802.1q``." + +#: ../../configuration/service/dhcp-server.rst:585 msgid "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." msgstr "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." @@ -12925,7 +14393,7 @@ msgstr "The default value corresponds to 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "The default value is 300 seconds." @@ -12937,7 +14405,15 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/service/dhcp-server.rst:99 +#: ../../configuration/protocols/rpki.rst:122 +msgid "The default value is 600 seconds." +msgstr "The default value is 600 seconds." + +#: ../../configuration/protocols/rpki.rst:115 +msgid "The default value is 7200 seconds." +msgstr "The default value is 7200 seconds." + +#: ../../configuration/service/dhcp-server.rst:115 msgid "The default value is 86400 seconds which corresponds to one day." msgstr "The default value is 86400 seconds which corresponds to one day." @@ -12957,17 +14433,21 @@ msgstr "The destination port used for creating a VXLAN interface in Linux defaul msgid "The device can only receive packets with VNIs configured in the VNI filtering table." msgstr "The device can only receive packets with VNIs configured in the VNI filtering table." -#: ../../configuration/service/dhcp-server.rst:165 +#: ../../configuration/service/dhcp-server.rst:215 +msgid "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." +msgstr "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." + +#: ../../configuration/service/dhcp-server.rst:199 msgid "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." msgstr "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." #: ../../configuration/service/dhcp-server.rst:31 -#: ../../configuration/service/dhcp-server.rst:124 +#: ../../configuration/service/dhcp-server.rst:140 msgid "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." msgstr "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." #: ../../configuration/service/dhcp-server.rst:40 -#: ../../configuration/service/dhcp-server.rst:131 +#: ../../configuration/service/dhcp-server.rst:147 msgid "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." msgstr "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." @@ -12987,15 +14467,19 @@ msgstr "The embedded Squid proxy can use LDAP to authenticate users against a co msgid "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." msgstr "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." -#: ../../configuration/service/pppoe-server.rst:369 +#: ../../configuration/service/pppoe-server.rst:627 +msgid "The example below covers a dual-stack configuration." +msgstr "The example below covers a dual-stack configuration." + +#: ../../configuration/service/pppoe-server.rst:627 msgid "The example below covers a dual-stack configuration via pppoe-server." msgstr "The example below covers a dual-stack configuration via pppoe-server." -#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/service/pppoe-server.rst:606 msgid "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." msgstr "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." -#: ../../configuration/service/ipoe-server.rst:35 +#: ../../configuration/service/ipoe-server.rst:34 msgid "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." msgstr "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." @@ -13023,7 +14507,7 @@ msgstr "The first IP in the container network is reserved by the engine and cann msgid "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." msgstr "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." -#: ../../configuration/vpn/ipsec.rst:174 +#: ../../configuration/vpn/ipsec.rst:178 msgid "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." msgstr "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." @@ -13039,14 +14523,18 @@ msgstr "The first ip address is the RP's address and the second value is the mat msgid "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." msgstr "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." -#: ../../configuration/vpn/sstp.rst:311 +#: ../../configuration/vpn/sstp.rst:484 msgid "The following PPP configuration tests MSCHAP-v2:" msgstr "The following PPP configuration tests MSCHAP-v2:" -#: ../../configuration/system/login.rst:143 +#: ../../configuration/system/login.rst:147 msgid "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" msgstr "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" +#: ../../configuration/protocols/bgp.rst:664 +msgid "The following command uses the explicit-null label value for all the BGP instances." +msgstr "The following command uses the explicit-null label value for all the BGP instances." + #: ../../configuration/interfaces/openvpn.rst:708 msgid "The following commands let you check tunnel status." msgstr "The following commands let you check tunnel status." @@ -13059,11 +14547,11 @@ msgstr "The following commands let you reset OpenVPN." msgid "The following commands translate to \"--net host\" when the container is created" msgstr "The following commands translate to \"--net host\" when the container is created" -#: ../../configuration/vrf/index.rst:101 +#: ../../configuration/vrf/index.rst:120 msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -13079,10 +14567,22 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." +#: ../../configuration/interfaces/pppoe.rst:383 +msgid "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." +msgstr "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." + #: ../../configuration/policy/examples.rst:155 msgid "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." msgstr "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." @@ -13095,7 +14595,7 @@ msgstr "The following example creates a WAP. When configuring multiple WAP inter msgid "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." msgstr "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." -#: ../../configuration/vrf/index.rst:237 +#: ../../configuration/vrf/index.rst:256 msgid "The following example topology was built using EVE-NG." msgstr "The following example topology was built using EVE-NG." @@ -13140,7 +14640,7 @@ msgstr "The forwarding delay time is the time spent in each of the listening and msgid "The generated configuration will look like:" msgstr "The generated configuration will look like:" -#: ../../configuration/pki/index.rst:107 +#: ../../configuration/pki/index.rst:109 msgid "The generated parameters are then output to the console." msgstr "The generated parameters are then output to the console." @@ -13168,7 +14668,7 @@ msgstr "The hostname can be up to 63 characters. A hostname must start and end w msgid "The hostname or IP address of the master" msgstr "The hostname or IP address of the master" -#: ../../configuration/service/dhcp-server.rst:632 +#: ../../configuration/service/dhcp-server.rst:693 msgid "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." msgstr "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." @@ -13212,7 +14712,7 @@ msgstr "The legacy and zone-based firewall configuration options is not longer s msgid "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." msgstr "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." -#: ../../configuration/policy/route-map.rst:255 +#: ../../configuration/policy/route-map.rst:258 msgid "The link bandwidth extended community is encoded as non-transitive" msgstr "The link bandwidth extended community is encoded as non-transitive" @@ -13240,6 +14740,10 @@ msgstr "The main points regarding this packet flow and terminology used in VyOS msgid "The main structure VyOS firewall cli is shown next:" msgstr "The main structure VyOS firewall cli is shown next:" +#: ../../configuration/firewall/index.rst:92 +msgid "The main structure of the VyOS firewall CLI is shown next:" +msgstr "The main structure of the VyOS firewall CLI is shown next:" + #: ../../configuration/interfaces/bonding.rst:271 msgid "The maximum number of targets that can be specified is 16. The default value is no IP address." msgstr "The maximum number of targets that can be specified is 16. The default value is no IP address." @@ -13248,7 +14752,7 @@ msgstr "The maximum number of targets that can be specified is 16. The default v msgid "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." msgstr "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." -#: ../../configuration/interfaces/bridge.rst:230 +#: ../../configuration/interfaces/bridge.rst:239 msgid "The member interface `eth1` is a trunk that allows VLAN 10 to pass" msgstr "The member interface `eth1` is a trunk that allows VLAN 10 to pass" @@ -13268,15 +14772,19 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." +#: ../../configuration/service/dns.rst:171 +msgid "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." +msgstr "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." + #: ../../configuration/service/dhcp-server.rst:13 msgid "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." msgstr "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." -#: ../../configuration/service/conntrack-sync.rst:188 +#: ../../configuration/service/conntrack-sync.rst:197 msgid "The next example is a simple configuration of conntrack-sync." msgstr "The next example is a simple configuration of conntrack-sync." @@ -13324,7 +14832,7 @@ msgstr "The outgoing interface to perform the translation on" msgid "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." msgstr "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." -#: ../../configuration/vpn/ipsec.rst:235 +#: ../../configuration/vpn/ipsec.rst:239 msgid "The peer names RIGHT and LEFT are used as informational text." msgstr "The peer names RIGHT and LEFT are used as informational text." @@ -13332,7 +14840,7 @@ msgstr "The peer names RIGHT and LEFT are used as informational text." msgid "The peer with lower priority will become the key server and start distributing SAKs." msgstr "The peer with lower priority will become the key server and start distributing SAKs." -#: ../../configuration/vrf/index.rst:181 +#: ../../configuration/vrf/index.rst:200 msgid "The ping command is used to test whether a network host is reachable or not." msgstr "The ping command is used to test whether a network host is reachable or not." @@ -13344,19 +14852,19 @@ msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This m msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." -#: ../../configuration/service/dhcp-server.rst:375 +#: ../../configuration/service/dhcp-server.rst:432 msgid "The primary DHCP server uses address `192.168.189.252`" msgstr "The primary DHCP server uses address `192.168.189.252`" -#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:208 msgid "The primary and secondary statements determines whether the server is primary or secondary." msgstr "The primary and secondary statements determines whether the server is primary or secondary." @@ -13368,11 +14876,11 @@ msgstr "The primary option is only valid for active-backup, transmit-load-balanc msgid "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." msgstr "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." -#: ../../configuration/service/dhcp-server.rst:539 +#: ../../configuration/service/dhcp-server.rst:598 msgid "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" msgstr "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" -#: ../../configuration/vrf/index.rst:222 +#: ../../configuration/vrf/index.rst:241 msgid "The prompt is adjusted to reflect this change in both config and op-mode." msgstr "The prompt is adjusted to reflect this change in both config and op-mode." @@ -13400,7 +14908,7 @@ msgstr "The public IP address of the local side of the VPN will be 198.51.100.10 msgid "The public IP address of the remote side of the VPN will be 203.0.113.11." msgstr "The public IP address of the remote side of the VPN will be 203.0.113.11." -#: ../../configuration/service/ipoe-server.rst:130 +#: ../../configuration/service/ipoe-server.rst:131 #: ../../configuration/vpn/l2tp.rst:120 msgid "The rate-limit is set in kbit/sec." msgstr "The rate-limit is set in kbit/sec." @@ -13421,6 +14929,10 @@ msgstr "The remote site will have a subnet of 10.1.0.0/16." msgid "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." msgstr "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." +#: ../../configuration/service/dns.rst:161 +msgid "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." +msgstr "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." + #: ../../configuration/interfaces/openvpn.rst:458 msgid "The required config file may look like this:" msgstr "The required config file may look like this:" @@ -13465,7 +14977,7 @@ msgstr "The sFlow accounting based on hsflowd https://sflow.net/" msgid "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." msgstr "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." -#: ../../configuration/vpn/ipsec.rst:227 +#: ../../configuration/vpn/ipsec.rst:231 msgid "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." msgstr "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." @@ -13473,7 +14985,7 @@ msgstr "The scheme above doesn't work when one of the routers has a dynamic exte msgid "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." msgstr "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." -#: ../../configuration/service/dhcp-server.rst:376 +#: ../../configuration/service/dhcp-server.rst:433 msgid "The secondary DHCP server uses address `192.168.189.253`" msgstr "The secondary DHCP server uses address `192.168.189.253`" @@ -13533,11 +15045,14 @@ msgstr "The type can be the following: asbr-summary, external, network, nssa-ext msgid "The ultimate goal of classifying traffic is to give each class a different treatment." msgstr "The ultimate goal of classifying traffic is to give each class a different treatment." -#: ../../configuration/service/ipoe-server.rst:18 +#: ../../configuration/service/ipoe-server.rst:16 msgid "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." msgstr "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." -#: ../../configuration/vpn/l2tp.rst:221 +#: ../../configuration/service/pppoe-server.rst:222 +#: ../../configuration/vpn/l2tp.rst:265 +#: ../../configuration/vpn/pptp.rst:205 +#: ../../configuration/vpn/sstp.rst:238 msgid "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." msgstr "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." @@ -13549,7 +15064,11 @@ msgstr "The vendor-class-id option can be used to request a specific class of ve msgid "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." msgstr "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." -#: ../../configuration/system/login.rst:138 +#: ../../configuration/service/router-advert.rst:86 +msgid "The well known NAT64 prefix is ``64:ff9b::/96``" +msgstr "The well known NAT64 prefix is ``64:ff9b::/96``" + +#: ../../configuration/system/login.rst:142 msgid "The window size must be between 1 and 21." msgstr "The window size must be between 1 and 21." @@ -13557,6 +15076,10 @@ msgstr "The window size must be between 1 and 21." msgid "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." msgstr "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." +#: ../../configuration/service/ids.rst:125 +msgid "Then, FastNetMon configuration:" +msgstr "Then, FastNetMon configuration:" + #: ../../configuration/nat/nat44.rst:621 msgid "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." msgstr "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." @@ -13596,7 +15119,7 @@ msgstr "There are a lot of matching criteria against which the packet can be tes msgid "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." msgstr "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." -#: ../../configuration/system/ipv6.rst:92 +#: ../../configuration/system/ipv6.rst:105 msgid "There are different parameters for getting prefix-list information:" msgstr "There are different parameters for getting prefix-list information:" @@ -13612,7 +15135,7 @@ msgstr "There are many parameters you will be able to use in order to match the msgid "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" msgstr "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" -#: ../../configuration/service/ipoe-server.rst:153 +#: ../../configuration/service/ipoe-server.rst:154 msgid "There are rate-limited and non rate-limited users (MACs)" msgstr "There are rate-limited and non rate-limited users (MACs)" @@ -13628,7 +15151,7 @@ msgstr "There are three modes of operation for a wireless interface:" msgid "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" msgstr "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" -#: ../../configuration/protocols/bgp.rst:896 +#: ../../configuration/protocols/bgp.rst:918 msgid "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" msgstr "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" @@ -13757,7 +15280,7 @@ msgstr "This command allows peerings between directly connected eBGP peers using msgid "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." msgstr "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." -#: ../../configuration/protocols/bgp.rst:812 +#: ../../configuration/protocols/bgp.rst:834 msgid "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." msgstr "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." @@ -13814,19 +15337,19 @@ msgstr "This command allows you to select a specific access concentrator when yo msgid "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." msgstr "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." -#: ../../configuration/protocols/bgp.rst:867 +#: ../../configuration/protocols/bgp.rst:889 msgid "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." msgstr "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." -#: ../../configuration/protocols/bgp.rst:843 +#: ../../configuration/protocols/bgp.rst:865 msgid "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." msgstr "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." -#: ../../configuration/protocols/bgp.rst:851 +#: ../../configuration/protocols/bgp.rst:873 msgid "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." msgstr "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." -#: ../../configuration/protocols/bgp.rst:859 +#: ../../configuration/protocols/bgp.rst:881 msgid "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." msgstr "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." @@ -13854,7 +15377,7 @@ msgstr "This command can be used to filter the RIP path using prefix lists. :cfg msgid "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." msgstr "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." -#: ../../configuration/protocols/bgp.rst:652 +#: ../../configuration/protocols/bgp.rst:674 msgid "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." msgstr "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." @@ -13878,7 +15401,7 @@ msgstr "This command change distance value of OSPFv3 globally. The distance rang msgid "This command change the distance value of RIP. The distance range is 1 to 255." msgstr "This command change the distance value of RIP. The distance range is 1 to 255." -#: ../../configuration/protocols/bgp.rst:638 +#: ../../configuration/protocols/bgp.rst:650 msgid "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." msgstr "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." @@ -13954,23 +15477,23 @@ msgstr "This command defines matching parameters for access list rule. Matching msgid "This command defines the IS-IS router behavior:" msgstr "This command defines the IS-IS router behavior:" -#: ../../configuration/protocols/bgp.rst:720 +#: ../../configuration/protocols/bgp.rst:742 msgid "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." msgstr "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." -#: ../../configuration/protocols/bgp.rst:726 +#: ../../configuration/protocols/bgp.rst:748 msgid "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." msgstr "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." -#: ../../configuration/protocols/bgp.rst:713 +#: ../../configuration/protocols/bgp.rst:735 msgid "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." msgstr "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." -#: ../../configuration/protocols/bgp.rst:595 +#: ../../configuration/protocols/bgp.rst:601 msgid "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." msgstr "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." -#: ../../configuration/protocols/bgp.rst:732 +#: ../../configuration/protocols/bgp.rst:754 msgid "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." msgstr "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." @@ -13997,7 +15520,7 @@ msgstr "This command disables check of the MTU value in the OSPF DBD packets. Th msgid "This command disables it." msgstr "This command disables it." -#: ../../configuration/protocols/bgp.rst:607 +#: ../../configuration/protocols/bgp.rst:619 msgid "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." msgstr "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." @@ -14009,23 +15532,23 @@ msgstr "This command disables split-horizon on the interface. By default, VyOS d msgid "This command disables the load sharing across multiple LFA backups." msgstr "This command disables the load sharing across multiple LFA backups." -#: ../../configuration/protocols/bgp.rst:1009 +#: ../../configuration/protocols/bgp.rst:1031 msgid "This command displays BGP dampened routes." msgstr "This command displays BGP dampened routes." -#: ../../configuration/protocols/bgp.rst:1032 +#: ../../configuration/protocols/bgp.rst:1054 msgid "This command displays BGP received-routes that are accepted after filtering." msgstr "This command displays BGP received-routes that are accepted after filtering." -#: ../../configuration/protocols/bgp.rst:1022 +#: ../../configuration/protocols/bgp.rst:1044 msgid "This command displays BGP routes advertised to a neighbor." msgstr "This command displays BGP routes advertised to a neighbor." -#: ../../configuration/protocols/bgp.rst:1017 +#: ../../configuration/protocols/bgp.rst:1039 msgid "This command displays BGP routes allowed by the specified AS Path access list." msgstr "This command displays BGP routes allowed by the specified AS Path access list." -#: ../../configuration/protocols/bgp.rst:1026 +#: ../../configuration/protocols/bgp.rst:1048 msgid "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." msgstr "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." @@ -14052,11 +15575,11 @@ msgstr "This command displays a summary table with a database contents (LSA)." msgid "This command displays a table of paths to area boundary and autonomous system boundary routers." msgstr "This command displays a table of paths to area boundary and autonomous system boundary routers." -#: ../../configuration/protocols/bgp.rst:957 +#: ../../configuration/protocols/bgp.rst:979 msgid "This command displays all entries in BGP routing table." msgstr "This command displays all entries in BGP routing table." -#: ../../configuration/protocols/bgp.rst:1036 +#: ../../configuration/protocols/bgp.rst:1058 msgid "This command displays dampened routes received from BGP neighbor." msgstr "This command displays dampened routes received from BGP neighbor." @@ -14064,27 +15587,27 @@ msgstr "This command displays dampened routes received from BGP neighbor." msgid "This command displays external information redistributed into OSPFv3" msgstr "This command displays external information redistributed into OSPFv3" -#: ../../configuration/protocols/bgp.rst:1040 +#: ../../configuration/protocols/bgp.rst:1062 msgid "This command displays information about BGP routes whose AS path matches the specified regular expression." msgstr "This command displays information about BGP routes whose AS path matches the specified regular expression." -#: ../../configuration/protocols/bgp.rst:1013 +#: ../../configuration/protocols/bgp.rst:1035 msgid "This command displays information about flapping BGP routes." msgstr "This command displays information about flapping BGP routes." -#: ../../configuration/protocols/bgp.rst:977 +#: ../../configuration/protocols/bgp.rst:999 msgid "This command displays information about the particular entry in the BGP routing table." msgstr "This command displays information about the particular entry in the BGP routing table." -#: ../../configuration/protocols/bgp.rst:1004 +#: ../../configuration/protocols/bgp.rst:1026 msgid "This command displays routes that are permitted by the BGP community list." msgstr "This command displays routes that are permitted by the BGP community list." -#: ../../configuration/protocols/bgp.rst:997 +#: ../../configuration/protocols/bgp.rst:1019 msgid "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." msgstr "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." -#: ../../configuration/protocols/bgp.rst:993 +#: ../../configuration/protocols/bgp.rst:1015 msgid "This command displays routes with classless interdomain routing (CIDR)." msgstr "This command displays routes with classless interdomain routing (CIDR)." @@ -14126,7 +15649,7 @@ msgstr "This command displays the neighbors status." msgid "This command displays the neighbors status for a neighbor on the specified interface." msgstr "This command displays the neighbors status for a neighbor on the specified interface." -#: ../../configuration/protocols/bgp.rst:1045 +#: ../../configuration/protocols/bgp.rst:1067 msgid "This command displays the status of all BGP connections." msgstr "This command displays the status of all BGP connections." @@ -14134,7 +15657,7 @@ msgstr "This command displays the status of all BGP connections." msgid "This command enable/disables summarisation for the configured address range." msgstr "This command enable/disables summarisation for the configured address range." -#: ../../configuration/protocols/bgp.rst:603 +#: ../../configuration/protocols/bgp.rst:615 msgid "This command enable logging neighbor up/down changes and reset reason." msgstr "This command enable logging neighbor up/down changes and reset reason." @@ -14174,7 +15697,7 @@ msgstr "This command enables sending timestamps with each Hello and IHU message msgid "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." msgstr "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." -#: ../../configuration/protocols/bgp.rst:875 +#: ../../configuration/protocols/bgp.rst:897 msgid "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." msgstr "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." @@ -14198,7 +15721,7 @@ msgstr "This command generate a default route into the RIP." msgid "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -#: ../../configuration/protocols/bgp.rst:632 +#: ../../configuration/protocols/bgp.rst:644 msgid "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." msgstr "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." @@ -14241,7 +15764,7 @@ msgstr "This command is used for advertising IPv4 or IPv6 networks." msgid "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." msgstr "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." -#: ../../configuration/protocols/bgp.rst:620 +#: ../../configuration/protocols/bgp.rst:632 msgid "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." msgstr "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." @@ -14253,15 +15776,15 @@ msgstr "This command modifies the default metric (hop count) value for redistrib msgid "This command override AS number of the originating router with the local AS number." msgstr "This command override AS number of the originating router with the local AS number." -#: ../../configuration/protocols/bgp.rst:885 +#: ../../configuration/protocols/bgp.rst:907 msgid "This command prevents from sending back prefixes learned from the neighbor." msgstr "This command prevents from sending back prefixes learned from the neighbor." -#: ../../configuration/protocols/bgp.rst:804 +#: ../../configuration/protocols/bgp.rst:826 msgid "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." msgstr "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." -#: ../../configuration/protocols/bgp.rst:741 +#: ../../configuration/protocols/bgp.rst:763 msgid "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." msgstr "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." @@ -14297,19 +15820,19 @@ msgstr "This command redistributes routing information from the given route sour msgid "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." msgstr "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." -#: ../../configuration/protocols/bgp.rst:1068 +#: ../../configuration/protocols/bgp.rst:1090 msgid "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -#: ../../configuration/protocols/bgp.rst:1088 +#: ../../configuration/protocols/bgp.rst:1110 msgid "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -#: ../../configuration/protocols/bgp.rst:1075 +#: ../../configuration/protocols/bgp.rst:1097 msgid "This command resets all BGP connections of given router." msgstr "This command resets all BGP connections of given router." -#: ../../configuration/protocols/bgp.rst:1084 +#: ../../configuration/protocols/bgp.rst:1106 msgid "This command resets all external BGP peers of given router." msgstr "This command resets all external BGP peers of given router." @@ -14389,7 +15912,7 @@ msgstr "This command sets number of seconds for RxmtInterval timer value. This v msgid "This command sets old-style (ISO 10589) or new style packet formats:" msgstr "This command sets old-style (ISO 10589) or new style packet formats:" -#: ../../configuration/protocols/bgp.rst:944 +#: ../../configuration/protocols/bgp.rst:966 msgid "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." msgstr "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." @@ -14401,7 +15924,7 @@ msgstr "This command sets overload bit to avoid any transit traffic through this msgid "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." msgstr "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." -#: ../../configuration/protocols/bgp.rst:659 +#: ../../configuration/protocols/bgp.rst:681 msgid "This command sets the administrative distance for a particular route. The distance range is 1 to 255." msgstr "This command sets the administrative distance for a particular route. The distance range is 1 to 255." @@ -14461,7 +15984,7 @@ msgstr "This command should NOT be set normally." msgid "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -#: ../../configuration/protocols/bgp.rst:938 +#: ../../configuration/protocols/bgp.rst:960 msgid "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." msgstr "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." @@ -14517,11 +16040,11 @@ msgstr "This command specifies attributes to be left unchanged for advertisement msgid "This command specifies circuit type for interface:" msgstr "This command specifies circuit type for interface:" -#: ../../configuration/protocols/bgp.rst:920 +#: ../../configuration/protocols/bgp.rst:942 msgid "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." msgstr "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." -#: ../../configuration/protocols/bgp.rst:671 +#: ../../configuration/protocols/bgp.rst:693 msgid "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." msgstr "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." @@ -14530,7 +16053,7 @@ msgstr "This command specifies hold-time in seconds. The timer range is 4 to 655 msgid "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." msgstr "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." -#: ../../configuration/protocols/bgp.rst:677 +#: ../../configuration/protocols/bgp.rst:699 msgid "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." msgstr "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." @@ -14558,15 +16081,15 @@ msgstr "This command specifies metric type for redistributed routes. Difference msgid "This command specifies network type to Point-to-Point. The default network type is broadcast." msgstr "This command specifies network type to Point-to-Point. The default network type is broadcast." -#: ../../configuration/protocols/bgp.rst:784 +#: ../../configuration/protocols/bgp.rst:806 msgid "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." msgstr "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." -#: ../../configuration/protocols/bgp.rst:754 +#: ../../configuration/protocols/bgp.rst:776 msgid "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." msgstr "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." -#: ../../configuration/protocols/bgp.rst:791 +#: ../../configuration/protocols/bgp.rst:813 msgid "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." msgstr "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." @@ -14582,7 +16105,7 @@ msgstr "This command specifies that simple password authentication should be use msgid "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." msgstr "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." -#: ../../configuration/protocols/bgp.rst:748 +#: ../../configuration/protocols/bgp.rst:770 msgid "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." msgstr "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." @@ -14622,7 +16145,7 @@ msgstr "This command specifies the base receive cost for this interface. For wir msgid "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." msgstr "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." -#: ../../configuration/protocols/bgp.rst:799 +#: ../../configuration/protocols/bgp.rst:821 msgid "This command specifies the default local preference value. The local preference range is 0 to 4294967295." msgstr "This command specifies the default local preference value. The local preference range is 0 to 4294967295." @@ -14634,7 +16157,7 @@ msgstr "This command specifies the default metric value of redistributed routes. msgid "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." msgstr "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." -#: ../../configuration/protocols/bgp.rst:916 +#: ../../configuration/protocols/bgp.rst:938 msgid "This command specifies the given neighbor as route reflector client." msgstr "This command specifies the given neighbor as route reflector client." @@ -14658,7 +16181,7 @@ msgstr "This command specifies the minimum RTT, in milliseconds, starting from w msgid "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." msgstr "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." -#: ../../configuration/protocols/bgp.rst:589 +#: ../../configuration/protocols/bgp.rst:595 msgid "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." msgstr "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." @@ -14714,7 +16237,7 @@ msgstr "This command summarizes intra area paths from specified area into one su msgid "This command to ensure not advertise the summary lsa for the matched external LSAs." msgstr "This command to ensure not advertise the summary lsa for the matched external LSAs." -#: ../../configuration/protocols/bgp.rst:1079 +#: ../../configuration/protocols/bgp.rst:1101 msgid "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." msgstr "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." @@ -14763,7 +16286,7 @@ msgstr "This command will generate a default-route in L2 database." msgid "This command will give an overview of a rule in a single rule-set" msgstr "This command will give an overview of a rule in a single rule-set" -#: ../../configuration/firewall/ipv4.rst:1091 +#: ../../configuration/firewall/ipv4.rst:1114 msgid "This command will give an overview of a rule in a single rule-set, plus information for default action." msgstr "This command will give an overview of a rule in a single rule-set, plus information for default action." @@ -14771,7 +16294,7 @@ msgstr "This command will give an overview of a rule in a single rule-set, plus msgid "This command will give an overview of a rule in a single rule-set." msgstr "This command will give an overview of a rule in a single rule-set." -#: ../../configuration/firewall/ipv4.rst:1072 +#: ../../configuration/firewall/ipv4.rst:1095 #: ../../configuration/firewall/ipv6.rst:1088 msgid "This command will give an overview of a single rule-set." msgstr "This command will give an overview of a single rule-set." @@ -14792,11 +16315,19 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -14804,15 +16335,23 @@ msgstr "This configuration listen on port 80 and redirect incoming requests to H msgid "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." msgstr "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." -#: ../../configuration/service/dhcp-server.rst:76 -#: ../../configuration/service/dhcp-server.rst:520 +#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:579 msgid "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." msgstr "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." -#: ../../configuration/service/dhcp-server.rst:58 +#: ../../configuration/service/dhcp-server.rst:74 msgid "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." msgstr "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." +#: ../../configuration/service/dhcp-server.rst:58 +msgid "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" + +#: ../../configuration/service/dhcp-server.rst:154 +msgid "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" + #: ../../configuration/trafficpolicy/index.rst:628 msgid "This could be helpful if you want to test how an application behaves under certain network conditions." msgstr "This could be helpful if you want to test how an application behaves under certain network conditions." @@ -14825,7 +16364,7 @@ msgstr "This creates a route policy called FILTER-WEB with one rule to set the r msgid "This defaults to 10000." msgstr "This defaults to 10000." -#: ../../configuration/system/login.rst:254 +#: ../../configuration/system/login.rst:258 msgid "This defaults to 1812." msgstr "This defaults to 1812." @@ -14833,7 +16372,7 @@ msgstr "This defaults to 1812." msgid "This defaults to 2007." msgstr "This defaults to 2007." -#: ../../configuration/service/dns.rst:271 +#: ../../configuration/service/dns.rst:285 msgid "This defaults to 300 seconds." msgstr "This defaults to 300 seconds." @@ -14841,7 +16380,7 @@ msgstr "This defaults to 300 seconds." msgid "This defaults to 30 seconds." msgstr "This defaults to 30 seconds." -#: ../../configuration/system/login.rst:323 +#: ../../configuration/system/login.rst:327 msgid "This defaults to 49." msgstr "This defaults to 49." @@ -14857,7 +16396,7 @@ msgstr "This defaults to UDP" msgid "This defaults to both 1.2 and 1.3." msgstr "This defaults to both 1.2 and 1.3." -#: ../../configuration/pki/index.rst:283 +#: ../../configuration/pki/index.rst:314 msgid "This defaults to https://acme-v02.api.letsencrypt.org/directory" msgstr "This defaults to https://acme-v02.api.letsencrypt.org/directory" @@ -14893,15 +16432,27 @@ msgstr "This establishes our Port Forward rule, but if we created a firewall pol msgid "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." msgstr "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." +#: ../../configuration/vpn/ipsec.rst:392 +msgid "This example uses CACert as certificate authority." +msgstr "This example uses CACert as certificate authority." + +#: ../../configuration/vpn/ipsec.rst:386 +msgid "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." +msgstr "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." + +#: ../../configuration/protocols/bfd.rst:64 +msgid "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." +msgstr "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." + #: ../../configuration/protocols/ospf.rst:476 msgid "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." msgstr "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." -#: ../../configuration/service/dns.rst:404 +#: ../../configuration/service/dns.rst:418 msgid "This functionality is controlled by adding the following configuration:" msgstr "This functionality is controlled by adding the following configuration:" -#: ../../configuration/firewall/ipv4.rst:376 +#: ../../configuration/firewall/ipv4.rst:399 #: ../../configuration/firewall/ipv6.rst:378 msgid "This functions for both individual addresses and address groups." msgstr "This functions for both individual addresses and address groups." @@ -14930,11 +16481,11 @@ msgstr "This instructs opennhrp to reply with authorative answers on NHRP Resolu msgid "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." msgstr "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." -#: ../../configuration/service/dhcp-server.rst:82 +#: ../../configuration/service/dhcp-server.rst:98 msgid "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." msgstr "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." -#: ../../configuration/service/dhcp-server.rst:89 +#: ../../configuration/service/dhcp-server.rst:105 msgid "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." msgstr "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." @@ -14946,13 +16497,13 @@ msgstr "This is a mandatory command. Sets regular expression to match against lo msgid "This is a mandatory command. Sets the full path to the script. The script file must be executable." msgstr "This is a mandatory command. Sets the full path to the script. The script file must be executable." -#: ../../configuration/pki/index.rst:261 -#: ../../configuration/pki/index.rst:267 +#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:298 msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:117 -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "This is a mandatory setting." @@ -15015,11 +16566,14 @@ msgstr "This is the LCD model used in your system." #: ../../configuration/service/dhcp-server.rst:35 #: ../../configuration/service/dhcp-server.rst:44 -#: ../../configuration/service/dhcp-server.rst:51 msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." -#: ../../configuration/service/dhcp-server.rst:197 +#: ../../configuration/service/dhcp-server.rst:51 +msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." +msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." + +#: ../../configuration/service/dhcp-server.rst:253 msgid "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." msgstr "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." @@ -15031,7 +16585,7 @@ msgstr "This is the name of the physical interface used to connect to your LCD d msgid "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" msgstr "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" -#: ../../configuration/service/dhcp-server.rst:195 +#: ../../configuration/service/dhcp-server.rst:251 msgid "This is useful, for example, in combination with hostfile update." msgstr "This is useful, for example, in combination with hostfile update." @@ -15064,7 +16618,7 @@ msgstr "This mode provides load balancing and fault tolerance." msgid "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." msgstr "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." -#: ../../configuration/service/dhcp-server.rst:119 +#: ../../configuration/service/dhcp-server.rst:135 msgid "This option can be specified multiple times." msgstr "This option can be specified multiple times." @@ -15088,7 +16642,7 @@ msgstr "This option is used by some DHCP clients as a way for users to specify i msgid "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." msgstr "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." -#: ../../configuration/system/login.rst:390 +#: ../../configuration/system/login.rst:394 msgid "This option must be used with ``timeout`` option." msgstr "This option must be used with ``timeout`` option." @@ -15101,7 +16655,7 @@ msgstr "This option only affects 802.3ad mode." msgid "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." msgstr "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." -#: ../../configuration/pki/index.rst:277 +#: ../../configuration/pki/index.rst:308 msgid "This options defaults to 2048" msgstr "This options defaults to 2048" @@ -15131,12 +16685,12 @@ msgstr "This required setting defines the action of the current rule. If action msgid "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" msgstr "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" -#: ../../configuration/interfaces/bridge.rst:208 -#: ../../configuration/interfaces/bridge.rst:244 +#: ../../configuration/interfaces/bridge.rst:217 +#: ../../configuration/interfaces/bridge.rst:253 msgid "This results in the active configuration:" msgstr "This results in the active configuration:" -#: ../../configuration/service/dhcp-server.rst:68 +#: ../../configuration/service/dhcp-server.rst:84 msgid "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." msgstr "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." @@ -15219,11 +16773,19 @@ msgstr "This the simplest queue possible you can apply to your traffic. Traffic msgid "This topology was built using GNS3." msgstr "This topology was built using GNS3." +#: ../../configuration/system/option.rst:38 +msgid "This will add the following option to the Kernel commandline:" +msgstr "This will add the following option to the Kernel commandline:" + +#: ../../configuration/system/option.rst:48 +msgid "This will add the following two options to the Kernel commandline:" +msgstr "This will add the following two options to the Kernel commandline:" + #: ../../configuration/interfaces/ethernet.rst:9 msgid "This will be the most widely used interface on a router carrying traffic to the real world." msgstr "This will be the most widely used interface on a router carrying traffic to the real world." -#: ../../configuration/protocols/static.rst:171 +#: ../../configuration/protocols/static.rst:204 msgid "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." msgstr "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." @@ -15231,7 +16793,7 @@ msgstr "This will configure a static ARP entry always resolving `<address>` to ` msgid "This will match TCP traffic with source port 80." msgstr "This will match TCP traffic with source port 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" msgstr "This will render the following ddclient_ configuration entry:" @@ -15239,7 +16801,7 @@ msgstr "This will render the following ddclient_ configuration entry:" msgid "This will show you a basic firewall overview" msgstr "This will show you a basic firewall overview" -#: ../../configuration/firewall/ipv4.rst:961 +#: ../../configuration/firewall/ipv4.rst:984 msgid "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" msgstr "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" @@ -15255,17 +16817,17 @@ msgstr "This will show you a basic summary of zones configuration." msgid "This will show you a rule-set statistic since the last boot." msgstr "This will show you a rule-set statistic since the last boot." -#: ../../configuration/firewall/ipv4.rst:1112 +#: ../../configuration/firewall/ipv4.rst:1135 #: ../../configuration/firewall/ipv6.rst:1135 msgid "This will show you a statistic of all rule-sets since the last boot." msgstr "This will show you a statistic of all rule-sets since the last boot." -#: ../../configuration/firewall/ipv4.rst:1016 +#: ../../configuration/firewall/ipv4.rst:1039 #: ../../configuration/firewall/ipv6.rst:1032 msgid "This will show you a summary of rule-sets and groups" msgstr "This will show you a summary of rule-sets and groups" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." @@ -15301,29 +16863,49 @@ msgstr "Time in seconds that the prefix will remain preferred (default 4 hours)" msgid "Time in seconds that the prefix will remain valid (default: 30 days)" msgstr "Time in seconds that the prefix will remain valid (default: 30 days)" +#: ../../configuration/service/router-advert.rst:1 +msgid "Time in seconds that the prefix will remain valid (default: 65528 seconds)" +msgstr "Time in seconds that the prefix will remain valid (default: 65528 seconds)" + #: ../../configuration/service/webproxy.rst:177 msgid "Time is in minutes and defaults to 60." msgstr "Time is in minutes and defaults to 60." -#: ../../configuration/firewall/ipv4.rst:874 +#: ../../configuration/firewall/ipv4.rst:897 #: ../../configuration/firewall/ipv6.rst:883 #: ../../configuration/policy/route.rst:225 msgid "Time to match the defined rule." msgstr "Time to match the defined rule." +#: ../../configuration/service/ipoe-server.rst:368 +#: ../../configuration/service/pppoe-server.rst:534 +#: ../../configuration/vpn/l2tp.rst:488 +#: ../../configuration/vpn/pptp.rst:412 +#: ../../configuration/vpn/sstp.rst:446 +msgid "Timeout in seconds" +msgstr "Timeout in seconds" + #: ../../configuration/protocols/failover.rst:24 msgid "Timeout in seconds between health target checks." msgstr "Timeout in seconds between health target checks." -#: ../../configuration/vpn/sstp.rst:234 +#: ../../configuration/service/ipoe-server.rst:174 +#: ../../configuration/service/pppoe-server.rst:136 +#: ../../configuration/vpn/l2tp.rst:179 +#: ../../configuration/vpn/pptp.rst:119 +#: ../../configuration/vpn/sstp.rst:152 msgid "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" msgstr "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" -#: ../../configuration/vpn/sstp.rst:254 +#: ../../configuration/service/ipoe-server.rst:194 +#: ../../configuration/service/pppoe-server.rst:156 +#: ../../configuration/vpn/l2tp.rst:199 +#: ../../configuration/vpn/pptp.rst:139 +#: ../../configuration/vpn/sstp.rst:172 msgid "Timeout to wait response from server (seconds)" msgstr "Timeout to wait response from server (seconds)" -#: ../../configuration/protocols/bgp.rst:667 +#: ../../configuration/protocols/bgp.rst:689 #: ../../configuration/protocols/isis.rst:257 msgid "Timers" msgstr "Timers" @@ -15332,7 +16914,7 @@ msgstr "Timers" msgid "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" msgstr "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" -#: ../../configuration/vpn/l2tp.rst:58 +#: ../../configuration/vpn/l2tp.rst:108 msgid "To allow VPN-clients access via your external address, a NAT rule is required:" msgstr "To allow VPN-clients access via your external address, a NAT rule is required:" @@ -15344,7 +16926,7 @@ msgstr "To allow listing additional custom domain, for example ``openthread.thre msgid "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" msgstr "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" -#: ../../configuration/vpn/site2site_ipsec.rst:257 +#: ../../configuration/vpn/site2site_ipsec.rst:260 msgid "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" msgstr "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" @@ -15442,11 +17024,11 @@ msgstr "To configure syslog, you need to switch into configuration mode." msgid "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." msgstr "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." -#: ../../configuration/service/ipoe-server.rst:98 +#: ../../configuration/service/ipoe-server.rst:99 msgid "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." msgstr "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." -#: ../../configuration/system/login.rst:377 +#: ../../configuration/system/login.rst:381 msgid "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." msgstr "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." @@ -15462,11 +17044,11 @@ msgstr "To create routing table 100 and add a new default gateway to be used by msgid "To define a zone setup either one with interfaces or a local zone." msgstr "To define a zone setup either one with interfaces or a local zone." -#: ../../configuration/service/router-advert.rst:75 +#: ../../configuration/service/router-advert.rst:101 msgid "To disable advertisements without deleting the configuration:" msgstr "To disable advertisements without deleting the configuration:" -#: ../../configuration/system/login.rst:190 +#: ../../configuration/system/login.rst:194 msgid "To display the configured OTP user key, use the command:" msgstr "To display the configured OTP user key, use the command:" @@ -15483,7 +17065,11 @@ msgstr "To enable/disable helper support for a specific neighbour, the router-id msgid "To enable MLD reports and query on interfaces `eth0` and `eth1`:" msgstr "To enable MLD reports and query on interfaces `eth0` and `eth1`:" -#: ../../configuration/vpn/l2tp.rst:141 +#: ../../configuration/service/ipoe-server.rst:116 +#: ../../configuration/service/pppoe-server.rst:78 +#: ../../configuration/vpn/l2tp.rst:121 +#: ../../configuration/vpn/pptp.rst:61 +#: ../../configuration/vpn/sstp.rst:94 msgid "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." msgstr "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." @@ -15491,7 +17077,7 @@ msgstr "To enable RADIUS based authentication, the authentication mode needs to msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" @@ -15511,6 +17097,10 @@ msgstr "To enable the HTTP security headers in the configuration file, use the c msgid "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" msgstr "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" +#: ../../configuration/vpn/l2tp.rst:282 +msgid "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." +msgstr "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." + #: ../../configuration/service/snmp.rst:216 msgid "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." msgstr "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." @@ -15527,11 +17117,15 @@ msgstr "To generate the CA, the server private key and certificates the followin msgid "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." msgstr "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." -#: ../../configuration/service/dhcp-server.rst:566 +#: ../../configuration/service/dhcp-server.rst:625 msgid "To hand out individual prefixes to your clients the following configuration is used:" msgstr "To hand out individual prefixes to your clients the following configuration is used:" -#: ../../configuration/highavailability/index.rst:336 +#: ../../configuration/vpn/ipsec.rst:405 +msgid "To import it from the filesystem use:" +msgstr "To import it from the filesystem use:" + +#: ../../configuration/highavailability/index.rst:346 msgid "To know more about scripting, check the :ref:`command-scripting` section." msgstr "To know more about scripting, check the :ref:`command-scripting` section." @@ -15539,7 +17133,7 @@ msgstr "To know more about scripting, check the :ref:`command-scripting` section msgid "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" msgstr "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" -#: ../../configuration/protocols/static.rst:161 +#: ../../configuration/protocols/static.rst:194 msgid "To manipulate or display ARP_ table entries, the following commands are implemented." msgstr "To manipulate or display ARP_ table entries, the following commands are implemented." @@ -15552,7 +17146,7 @@ msgstr "To perform a graceful shutdown, the FRR ``graceful-restart prepare ip os msgid "To request a /56 prefix from your ISP use:" msgstr "To request a /56 prefix from your ISP use:" -#: ../../configuration/service/dhcp-server.rst:680 +#: ../../configuration/service/dhcp-server.rst:741 msgid "To restart the DHCPv6 server" msgstr "To restart the DHCPv6 server" @@ -15568,7 +17162,7 @@ msgstr "To setup a destination NAT rule we need to gather:" msgid "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" msgstr "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" -#: ../../configuration/service/ipoe-server.rst:113 +#: ../../configuration/service/ipoe-server.rst:114 msgid "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." @@ -15576,7 +17170,7 @@ msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the fol msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." msgstr "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." msgstr "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." @@ -15596,6 +17190,10 @@ msgstr "Topology:" msgid "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" msgstr "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" +#: ../../configuration/service/ipoe-server.rst:433 +msgid "Toubleshooting" +msgstr "Toubleshooting" + #: ../../configuration/highavailability/index.rst:171 msgid "Track" msgstr "Track" @@ -15644,7 +17242,7 @@ msgstr "Traffic from multicast sources will go to the Rendezvous Point, and rece msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." msgstr "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." -#: ../../configuration/firewall/ipv4.rst:928 +#: ../../configuration/firewall/ipv4.rst:951 #: ../../configuration/firewall/ipv6.rst:937 msgid "Traffic must be symmetric" msgstr "Traffic must be symmetric" @@ -15653,11 +17251,11 @@ msgstr "Traffic must be symmetric" msgid "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" msgstr "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" -#: ../../configuration/highavailability/index.rst:322 +#: ../../configuration/highavailability/index.rst:332 msgid "Transition scripts" msgstr "Transition scripts" -#: ../../configuration/highavailability/index.rst:324 +#: ../../configuration/highavailability/index.rst:334 msgid "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" msgstr "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" @@ -15667,6 +17265,8 @@ msgstr "Transparent Proxy" #: ../../configuration/interfaces/openvpn.rst:701 #: ../../configuration/interfaces/tunnel.rst:227 +#: ../../configuration/vpn/pptp.rst:484 +#: ../../configuration/vpn/sstp.rst:580 msgid "Troubleshooting" msgstr "Troubleshooting" @@ -15682,6 +17282,10 @@ msgstr "Tunnel" msgid "Tunnel keys" msgstr "Tunnel keys" +#: ../../configuration/vpn/l2tp.rst:280 +msgid "Tunnel password used to authenticate the client (LAC)" +msgstr "Tunnel password used to authenticate the client (LAC)" + #: ../../configuration/loadbalancing/wan.rst:257 msgid "Two environment variables are available:" msgstr "Two environment variables are available:" @@ -15714,15 +17318,15 @@ msgstr "UDP Broadcast Relay" msgid "UDP mode works better with NAT:" msgstr "UDP mode works better with NAT:" -#: ../../configuration/vpn/l2tp.rst:34 +#: ../../configuration/vpn/l2tp.rst:84 msgid "UDP port 1701 for IPsec" msgstr "UDP port 1701 for IPsec" -#: ../../configuration/vpn/l2tp.rst:39 +#: ../../configuration/vpn/l2tp.rst:89 msgid "UDP port 4500 (NAT-T)" msgstr "UDP port 4500 (NAT-T)" -#: ../../configuration/vpn/l2tp.rst:32 +#: ../../configuration/vpn/l2tp.rst:82 msgid "UDP port 500 (IKE)" msgstr "UDP port 500 (IKE)" @@ -15746,6 +17350,10 @@ msgstr "USB to serial converters will handle most of their work in software so y msgid "UUCP subsystem" msgstr "UUCP subsystem" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "Unicast" @@ -15778,11 +17386,11 @@ msgstr "Up to seven queues -defined as classes_ with different priorities- can b msgid "Update" msgstr "Update" -#: ../../configuration/container/index.rst:171 +#: ../../configuration/container/index.rst:207 msgid "Update container image" msgstr "Update container image" -#: ../../configuration/firewall/ipv4.rst:1175 +#: ../../configuration/firewall/ipv4.rst:1198 #: ../../configuration/firewall/ipv6.rst:1191 msgid "Update geoip database" msgstr "Update geoip database" @@ -15791,14 +17399,21 @@ msgstr "Update geoip database" msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." msgstr "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." -#: ../../configuration/vpn/sstp.rst:90 +#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/vpn/l2tp.rst:391 +#: ../../configuration/vpn/pptp.rst:315 +#: ../../configuration/vpn/sstp.rst:349 msgid "Upload bandwidth limit in kbit/s for `<user>`." msgstr "Upload bandwidth limit in kbit/s for `<user>`." +#: ../../configuration/service/ipoe-server.rst:325 +msgid "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." +msgstr "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." + #: ../../configuration/loadbalancing/wan.rst:209 msgid "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" msgstr "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" @@ -15816,7 +17431,7 @@ msgstr "Use 802.11n protocol" msgid "Use CA certificate from PKI subsystem" msgstr "Use CA certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:365 +#: ../../configuration/service/dns.rst:379 msgid "Use DynDNS as your preferred provider:" msgstr "Use DynDNS as your preferred provider:" @@ -15848,31 +17463,35 @@ msgstr "Use `delete system conntrack modules` to deactive all modules." msgid "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." msgstr "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." -#: ../../configuration/firewall/ipv4.rst:515 +#: ../../configuration/firewall/ipv4.rst:538 #: ../../configuration/firewall/ipv6.rst:525 msgid "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:578 +#: ../../configuration/firewall/ipv4.rst:601 #: ../../configuration/firewall/ipv6.rst:588 msgid "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:599 +#: ../../configuration/firewall/ipv4.rst:622 #: ../../configuration/firewall/ipv6.rst:609 msgid "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:536 +#: ../../configuration/firewall/ipv4.rst:559 #: ../../configuration/firewall/ipv6.rst:546 msgid "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:557 +#: ../../configuration/firewall/ipv4.rst:580 #: ../../configuration/firewall/ipv6.rst:567 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." +#: ../../configuration/service/dhcp-server.rst:430 +msgid "Use active-active HA mode." +msgstr "Use active-active HA mode." + #: ../../configuration/nat/nat44.rst:259 msgid "Use address `masquerade` (the interfaces primary address) on rule 30" msgstr "Use address `masquerade` (the interfaces primary address) on rule 30" @@ -15885,7 +17504,7 @@ msgstr "Use an automatically generated self-signed certificate" msgid "Use any local address, configured on any interface if this is not set." msgstr "Use any local address, configured on any interface if this is not set." -#: ../../configuration/service/dns.rst:279 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" msgstr "Use auth key file at ``/config/auth/my.key``" @@ -15893,10 +17512,14 @@ msgstr "Use auth key file at ``/config/auth/my.key``" msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:408 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." msgstr "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." +#: ../../configuration/service/dns.rst:462 +msgid "Use deSEC (dedyn.io) as your preferred provider:" +msgstr "Use deSEC (dedyn.io) as your preferred provider:" + #: ../../configuration/firewall/general-legacy.rst:478 msgid "Use inverse-match to match anything except the given country-codes." msgstr "Use inverse-match to match anything except the given country-codes." @@ -15905,7 +17528,7 @@ msgstr "Use inverse-match to match anything except the given country-codes." msgid "Use local socket for API" msgstr "Use local socket for API" -#: ../../configuration/vpn/sstp.rst:288 +#: ../../configuration/vpn/sstp.rst:357 msgid "Use local user `foo` with password `bar`" msgstr "Use local user `foo` with password `bar`" @@ -15913,7 +17536,7 @@ msgstr "Use local user `foo` with password `bar`" msgid "Use tab completion to get a list of categories." msgstr "Use tab completion to get a list of categories." -#: ../../configuration/system/option.rst:53 +#: ../../configuration/system/option.rst:83 msgid "Use the address of the specified interface on the local machine as the source address of the connection." msgstr "Use the address of the specified interface on the local machine as the source address of the connection." @@ -15925,7 +17548,7 @@ msgstr "Use the following topology to build a nat66 based isolated network betwe msgid "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." msgstr "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." -#: ../../configuration/system/option.rst:48 +#: ../../configuration/system/option.rst:78 msgid "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." msgstr "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." @@ -15957,10 +17580,26 @@ msgstr "Use this PIM command to modify the time out value (31-60000 seconds) for msgid "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." -#: ../../configuration/vpn/sstp.rst:137 +#: ../../configuration/service/ipoe-server.rst:261 +msgid "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/service/pppoe-server.rst:355 +msgid "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/pptp.rst:223 +msgid "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/sstp.rst:257 msgid "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +#: ../../configuration/vpn/l2tp.rst:299 +msgid "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + #: ../../configuration/service/pppoe-server.rst:93 msgid "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." msgstr "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." @@ -16005,7 +17644,7 @@ msgstr "Use this command to check the tunnel status for OpenVPN server interface msgid "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." msgstr "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." -#: ../../configuration/system/ipv6.rst:154 +#: ../../configuration/system/ipv6.rst:167 msgid "Use this command to clear Border Gateway Protocol statistics or status." msgstr "Use this command to clear Border Gateway Protocol statistics or status." @@ -16013,16 +17652,32 @@ msgstr "Use this command to clear Border Gateway Protocol statistics or status." msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." -#: ../../configuration/vpn/sstp.rst:146 +#: ../../configuration/service/ipoe-server.rst:269 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/service/pppoe-server.rst:363 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/pptp.rst:231 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/sstp.rst:265 msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +#: ../../configuration/vpn/l2tp.rst:307 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + #: ../../configuration/service/pppoe-server.rst:120 msgid "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." msgstr "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." -#: ../../configuration/protocols/static.rst:112 -#: ../../configuration/protocols/static.rst:125 +#: ../../configuration/protocols/static.rst:146 +#: ../../configuration/protocols/static.rst:159 msgid "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." msgstr "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." @@ -16226,6 +17881,10 @@ msgstr "Use this command to control the maximum number of equal cost paths to re msgid "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." msgstr "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." +#: ../../configuration/vpn/l2tp.rst:68 +msgid "Use this command to define IPsec interface." +msgstr "Use this command to define IPsec interface." + #: ../../configuration/trafficpolicy/index.rst:425 msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." @@ -16234,8 +17893,19 @@ msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." -#: ../../configuration/service/pppoe-server.rst:81 -#: ../../configuration/vpn/sstp.rst:132 +#: ../../configuration/service/ipoe-server.rst:277 +#: ../../configuration/service/pppoe-server.rst:371 +#: ../../configuration/vpn/l2tp.rst:315 +#: ../../configuration/vpn/pptp.rst:239 +#: ../../configuration/vpn/sstp.rst:273 +msgid "Use this command to define default IPv6 address pool name." +msgstr "Use this command to define default IPv6 address pool name." + +#: ../../configuration/service/ipoe-server.rst:77 +#: ../../configuration/service/pppoe-server.rst:61 +#: ../../configuration/vpn/l2tp.rst:48 +#: ../../configuration/vpn/pptp.rst:50 +#: ../../configuration/vpn/sstp.rst:75 msgid "Use this command to define default address pool name." msgstr "Use this command to define default address pool name." @@ -16255,15 +17925,31 @@ msgstr "Use this command to define in the selected interface whether you choose msgid "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +#: ../../configuration/service/ipoe-server.rst:70 +msgid "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + #: ../../configuration/service/pppoe-server.rst:73 msgid "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." -#: ../../configuration/vpn/sstp.rst:121 +#: ../../configuration/vpn/pptp.rst:43 +msgid "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/vpn/sstp.rst:68 msgid "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." -#: ../../configuration/service/pppoe-server.rst:42 +#: ../../configuration/vpn/l2tp.rst:41 +msgid "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:54 +msgid "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:65 msgid "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." msgstr "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." @@ -16283,8 +17969,11 @@ msgstr "Use this command to define the maximum number of entries to keep in the msgid "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." msgstr "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." -#: ../../configuration/service/pppoe-server.rst:77 -#: ../../configuration/vpn/sstp.rst:128 +#: ../../configuration/service/ipoe-server.rst:332 +#: ../../configuration/service/pppoe-server.rst:450 +#: ../../configuration/vpn/l2tp.rst:404 +#: ../../configuration/vpn/pptp.rst:328 +#: ../../configuration/vpn/sstp.rst:362 msgid "Use this command to define the next address pool name." msgstr "Use this command to define the next address pool name." @@ -16352,7 +18041,7 @@ msgstr "Use this command to enable PIMv6 in the selected interface so that it ca msgid "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." msgstr "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." -#: ../../configuration/service/pppoe-server.rst:236 +#: ../../configuration/service/pppoe-server.rst:310 msgid "Use this command to enable bandwidth shaping via RADIUS." msgstr "Use this command to enable bandwidth shaping via RADIUS." @@ -16364,7 +18053,7 @@ msgstr "Use this command to enable proxy Address Resolution Protocol (ARP) on th msgid "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." msgstr "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." -#: ../../configuration/service/pppoe-server.rst:249 +#: ../../configuration/service/pppoe-server.rst:323 msgid "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." msgstr "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." @@ -16386,7 +18075,7 @@ msgstr "Use this command to enable the logging of the default action on custom c msgid "Use this command to enable the logging of the default action on the specified chain." msgstr "Use this command to enable the logging of the default action on the specified chain." -#: ../../configuration/system/ipv6.rst:165 +#: ../../configuration/system/ipv6.rst:178 msgid "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." msgstr "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." @@ -16394,11 +18083,11 @@ msgstr "Use this command to flush the kernel IPv6 route cache. An address can be msgid "Use this command to get an overview of a zone." msgstr "Use this command to get an overview of a zone." -#: ../../configuration/system/ipv6.rst:120 +#: ../../configuration/system/ipv6.rst:133 msgid "Use this command to get information about OSPFv3." msgstr "Use this command to get information about OSPFv3." -#: ../../configuration/system/ipv6.rst:142 +#: ../../configuration/system/ipv6.rst:155 msgid "Use this command to get information about the RIPNG protocol" msgstr "Use this command to get information about the RIPNG protocol" @@ -16410,10 +18099,22 @@ msgstr "Use this command to instruct the system to establish a PPPoE connection msgid "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." msgstr "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." -#: ../../configuration/service/pppoe-server.rst:311 +#: ../../configuration/service/ipoe-server.rst:394 +msgid "Use this command to locally check the active sessions in the IPoE server." +msgstr "Use this command to locally check the active sessions in the IPoE server." + +#: ../../configuration/service/pppoe-server.rst:587 msgid "Use this command to locally check the active sessions in the PPPoE server." msgstr "Use this command to locally check the active sessions in the PPPoE server." +#: ../../configuration/vpn/pptp.rst:446 +msgid "Use this command to locally check the active sessions in the PPTP server." +msgstr "Use this command to locally check the active sessions in the PPTP server." + +#: ../../configuration/vpn/sstp.rst:542 +msgid "Use this command to locally check the active sessions in the SSTP server." +msgstr "Use this command to locally check the active sessions in the SSTP server." + #: ../../configuration/protocols/igmp.rst:104 msgid "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." msgstr "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." @@ -16427,7 +18128,7 @@ msgstr "Use this command to not install advertised DNS nameservers into the loca msgid "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." msgstr "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." -#: ../../configuration/system/ipv6.rst:160 +#: ../../configuration/system/ipv6.rst:173 msgid "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." msgstr "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." @@ -16467,7 +18168,7 @@ msgstr "Use this command to see discovery hello information" msgid "Use this command to see the Label Information Base." msgstr "Use this command to see the Label Information Base." -#: ../../configuration/service/pppoe-server.rst:26 +#: ../../configuration/service/pppoe-server.rst:33 msgid "Use this command to set a name for this PPPoE-server access concentrator." msgstr "Use this command to set a name for this PPPoE-server access concentrator." @@ -16511,31 +18212,31 @@ msgstr "Use this command to set the username for authenticating with a remote PP msgid "Use this command to show IPv6 Border Gateway Protocol information." msgstr "Use this command to show IPv6 Border Gateway Protocol information." -#: ../../configuration/system/ipv6.rst:50 +#: ../../configuration/system/ipv6.rst:63 msgid "Use this command to show IPv6 Neighbor Discovery Protocol information." msgstr "Use this command to show IPv6 Neighbor Discovery Protocol information." -#: ../../configuration/system/ipv6.rst:58 +#: ../../configuration/system/ipv6.rst:71 msgid "Use this command to show IPv6 forwarding status." msgstr "Use this command to show IPv6 forwarding status." -#: ../../configuration/system/ipv6.rst:54 +#: ../../configuration/system/ipv6.rst:67 msgid "Use this command to show IPv6 multicast group membership." msgstr "Use this command to show IPv6 multicast group membership." -#: ../../configuration/system/ipv6.rst:62 +#: ../../configuration/system/ipv6.rst:75 msgid "Use this command to show IPv6 routes." msgstr "Use this command to show IPv6 routes." -#: ../../configuration/system/ipv6.rst:105 +#: ../../configuration/system/ipv6.rst:118 msgid "Use this command to show all IPv6 access lists" msgstr "Use this command to show all IPv6 access lists" -#: ../../configuration/system/ipv6.rst:90 +#: ../../configuration/system/ipv6.rst:103 msgid "Use this command to show all IPv6 prefix lists" msgstr "Use this command to show all IPv6 prefix lists" -#: ../../configuration/system/ipv6.rst:146 +#: ../../configuration/system/ipv6.rst:159 msgid "Use this command to show the status of the RIPNG protocol" msgstr "Use this command to show the status of the RIPNG protocol" @@ -16595,6 +18296,14 @@ msgstr "Used to block specific domains by the Proxy. Specifying \"vyos.net\" wil msgid "User-level messages" msgstr "User-level messages" +#: ../../configuration/service/ipoe-server.rst:250 +#: ../../configuration/service/pppoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:255 +#: ../../configuration/vpn/pptp.rst:195 +#: ../../configuration/vpn/sstp.rst:228 +msgid "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." +msgstr "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." + #: ../../configuration/policy/examples.rst:18 msgid "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." @@ -16603,19 +18312,23 @@ msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing t msgid "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." msgstr "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." -#: ../../configuration/protocols/bgp.rst:900 +#: ../../configuration/protocols/bgp.rst:922 msgid "Using BGP confederation" msgstr "Using BGP confederation" -#: ../../configuration/protocols/bgp.rst:899 +#: ../../configuration/protocols/bgp.rst:921 msgid "Using BGP route-reflectors" msgstr "Using BGP route-reflectors" -#: ../../configuration/interfaces/bridge.rst:225 +#: ../../configuration/interfaces/bridge.rst:234 msgid "Using VLAN aware Bridge" msgstr "Using VLAN aware Bridge" -#: ../../configuration/interfaces/bridge.rst:266 +#: ../../configuration/vpn/sstp.rst:29 +msgid "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" +msgstr "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" + +#: ../../configuration/interfaces/bridge.rst:275 msgid "Using the operation mode command to view Bridge Information" msgstr "Using the operation mode command to view Bridge Information" @@ -16645,18 +18358,22 @@ msgstr "VHT operating channel center frequency - center freq 2 (for use with the #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 msgid "VLAN" msgstr "VLAN" +#: ../../configuration/service/pppoe-server.rst:232 +msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." +msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." + #: ../../configuration/service/pppoe-server.rst:163 msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." -#: ../../configuration/interfaces/bridge.rst:231 +#: ../../configuration/interfaces/bridge.rst:240 msgid "VLAN 10 on member interface `eth2` (ACCESS mode)" msgstr "VLAN 10 on member interface `eth2` (ACCESS mode)" @@ -16664,10 +18381,14 @@ msgstr "VLAN 10 on member interface `eth2` (ACCESS mode)" msgid "VLAN Example" msgstr "VLAN Example" -#: ../../configuration/interfaces/bridge.rst:134 +#: ../../configuration/interfaces/bridge.rst:143 msgid "VLAN Options" msgstr "VLAN Options" +#: ../../configuration/service/ipoe-server.rst:315 +msgid "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" +msgstr "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" + #: ../../configuration/service/lldp.rst:28 msgid "VLAN name" msgstr "VLAN name" @@ -16688,32 +18409,32 @@ msgstr "VPN-clients will request configuration parameters, optionally you can DN msgid "VRF" msgstr "VRF" -#: ../../configuration/vrf/index.rst:411 +#: ../../configuration/vrf/index.rst:430 msgid "VRF Route Leaking" msgstr "VRF Route Leaking" -#: ../../configuration/vrf/index.rst:283 +#: ../../configuration/vrf/index.rst:302 msgid "VRF and NAT" msgstr "VRF and NAT" -#: ../../configuration/vrf/index.rst:380 +#: ../../configuration/vrf/index.rst:399 msgid "VRF blue routing table" msgstr "VRF blue routing table" -#: ../../configuration/vrf/index.rst:347 +#: ../../configuration/vrf/index.rst:366 msgid "VRF default routing table" msgstr "VRF default routing table" -#: ../../configuration/vrf/index.rst:363 +#: ../../configuration/vrf/index.rst:382 msgid "VRF red routing table" msgstr "VRF red routing table" -#: ../../configuration/vrf/index.rst:235 -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:254 +#: ../../configuration/vrf/index.rst:261 msgid "VRF route leaking" msgstr "VRF route leaking" -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:261 msgid "VRF topology example" msgstr "VRF topology example" @@ -16769,11 +18490,19 @@ msgstr "Valid values are 0..255." msgid "Value" msgstr "Value" -#: ../../configuration/vpn/sstp.rst:263 +#: ../../configuration/service/ipoe-server.rst:203 +#: ../../configuration/service/pppoe-server.rst:165 +#: ../../configuration/vpn/l2tp.rst:208 +#: ../../configuration/vpn/pptp.rst:148 +#: ../../configuration/vpn/sstp.rst:181 msgid "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." msgstr "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." -#: ../../configuration/vpn/sstp.rst:258 +#: ../../configuration/service/ipoe-server.rst:198 +#: ../../configuration/service/pppoe-server.rst:160 +#: ../../configuration/vpn/l2tp.rst:203 +#: ../../configuration/vpn/pptp.rst:143 +#: ../../configuration/vpn/sstp.rst:176 msgid "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." msgstr "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." @@ -16795,11 +18524,11 @@ msgstr "Verify that connections are hitting the rule on both sides:" msgid "Version" msgstr "Version" -#: ../../configuration/highavailability/index.rst:339 +#: ../../configuration/highavailability/index.rst:349 msgid "Virtual-server" msgstr "Virtual-server" -#: ../../configuration/highavailability/index.rst:398 +#: ../../configuration/highavailability/index.rst:408 msgid "Virtual-server can be configured with VRRP virtual address or without VRRP." msgstr "Virtual-server can be configured with VRRP virtual address or without VRRP." @@ -16807,7 +18536,7 @@ msgstr "Virtual-server can be configured with VRRP virtual address or without VR msgid "Virtual Ethernet" msgstr "Virtual Ethernet" -#: ../../configuration/highavailability/index.rst:342 +#: ../../configuration/highavailability/index.rst:352 msgid "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." msgstr "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." @@ -16823,11 +18552,11 @@ msgstr "VyOS 1.1 supported login as user ``root``. This has been removed due to msgid "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." msgstr "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." -#: ../../configuration/vrf/index.rst:84 +#: ../../configuration/vrf/index.rst:103 msgid "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." msgstr "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." -#: ../../configuration/pki/index.rst:9 +#: ../../configuration/pki/index.rst:11 msgid "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." msgstr "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." @@ -16839,7 +18568,7 @@ msgstr "VyOS 1.4 uses chrony instead of ntpd (see :vytask:`T3008`) which will no msgid "VyOS Arista EOS setup" msgstr "VyOS Arista EOS setup" -#: ../../configuration/vpn/ipsec.rst:120 +#: ../../configuration/vpn/ipsec.rst:123 msgid "VyOS ESP group has the next options:" msgstr "VyOS ESP group has the next options:" @@ -16883,10 +18612,14 @@ msgstr "VyOS SNMP supports both IPv4 and IPv6." msgid "VyOS also comes with a build in SSTP server, see :ref:`sstp`." msgstr "VyOS also comes with a build in SSTP server, see :ref:`sstp`." -#: ../../configuration/service/dhcp-server.rst:504 +#: ../../configuration/service/dhcp-server.rst:563 msgid "VyOS also provides DHCPv6 server functionality which is described in this section." msgstr "VyOS also provides DHCPv6 server functionality which is described in this section." +#: ../../configuration/vpn/ipsec.rst:474 +msgid "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." +msgstr "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:127 msgid "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." msgstr "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." @@ -16928,11 +18661,15 @@ msgstr "VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**, **IGMP* msgid "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/ids.rst:17 +msgid "VyOS includes the FastNetMon Community Edition." +msgstr "VyOS includes the FastNetMon Community Edition." + +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS is also able to use any service relying on protocols supported by ddclient." @@ -16952,15 +18689,15 @@ msgstr "VyOS makes use of Linux `netfilter <https://netfilter.org/>`_ for packet msgid "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" msgstr "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" -#: ../../configuration/pki/index.rst:21 +#: ../../configuration/pki/index.rst:23 msgid "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." msgstr "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." -#: ../../configuration/pki/index.rst:35 +#: ../../configuration/pki/index.rst:37 msgid "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." msgstr "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." -#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:323 msgid "VyOS operational mode commands are not only available for generating keys but also to display them." msgstr "VyOS operational mode commands are not only available for generating keys but also to display them." @@ -16972,6 +18709,10 @@ msgstr "VyOS provide an HTTP API. You can use it to execute op-mode commands, up msgid "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." msgstr "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." +#: ../../configuration/service/dhcp-server.rst:172 +msgid "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" +msgstr "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:144 msgid "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." msgstr "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." @@ -16996,10 +18737,14 @@ msgstr "VyOS provides policies commands exclusively for BGP traffic filtering an msgid "VyOS provides some operational commands on OpenVPN." msgstr "VyOS provides some operational commands on OpenVPN." -#: ../../configuration/service/dhcp-server.rst:138 +#: ../../configuration/service/dhcp-server.rst:172 msgid "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." msgstr "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." +#: ../../configuration/pki/index.rst:255 +msgid "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." +msgstr "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." + #: ../../configuration/loadbalancing/reverse-proxy.rst:8 msgid "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." msgstr "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." @@ -17020,6 +18765,10 @@ msgstr "VyOS supports both MLD version 1 and version 2 (which allows source-spec msgid "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." msgstr "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." +#: ../../configuration/vpn/ipsec.rst:452 +msgid "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." +msgstr "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." + #: ../../configuration/system/updates.rst:5 msgid "VyOS supports online checking for updates" msgstr "VyOS supports online checking for updates" @@ -17060,11 +18809,11 @@ msgstr "VyOS uses the `mirror` option to configure port mirroring. The configura msgid "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." -#: ../../configuration/service/ipoe-server.rst:9 +#: ../../configuration/service/ipoe-server.rst:7 msgid "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." msgstr "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." -#: ../../configuration/vpn/l2tp.rst:6 +#: ../../configuration/vpn/l2tp.rst:7 msgid "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." @@ -17076,7 +18825,7 @@ msgstr "VyOS utilizes accel-ppp_ to provide SSTP server functionality. We suppor msgid "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." msgstr "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." -#: ../../configuration/vpn/site2site_ipsec.rst:164 +#: ../../configuration/vpn/site2site_ipsec.rst:167 msgid "WAN interface on `eth1`" msgstr "WAN interface on `eth1`" @@ -17117,7 +18866,7 @@ msgstr "We'll configure OpenVPN using self-signed certificates, and then discuss msgid "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." msgstr "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." -#: ../../configuration/vpn/ipsec.rst:232 +#: ../../configuration/vpn/ipsec.rst:236 msgid "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." msgstr "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." @@ -17129,11 +18878,15 @@ msgstr "We can't support all displays from the beginning. If your display type i msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." -#: ../../configuration/protocols/rpki.rst:158 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" -#: ../../configuration/protocols/bgp.rst:1249 +#: ../../configuration/vpn/ipsec.rst:456 +msgid "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." +msgstr "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." + +#: ../../configuration/protocols/bgp.rst:1271 msgid "We could expand on this and also deny link local and multicast in the rule 20 action deny." msgstr "We could expand on this and also deny link local and multicast in the rule 20 action deny." @@ -17145,6 +18898,10 @@ msgstr "We do not have CLI nodes for every single OpenVPN option. If an option i msgid "We don't recomend to use arguments. Using environments is more preffereble." msgstr "We don't recomend to use arguments. Using environments is more preffereble." +#: ../../configuration/vpn/ipsec.rst:506 +msgid "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." +msgstr "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." + #: ../../configuration/interfaces/wireguard.rst:148 msgid "We listen on port 51820" msgstr "We listen on port 51820" @@ -17153,7 +18910,7 @@ msgstr "We listen on port 51820" msgid "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" msgstr "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" -#: ../../configuration/system/option.rst:85 +#: ../../configuration/system/option.rst:115 msgid "We now utilize `tuned` for dynamic resource balancing based on profiles." msgstr "We now utilize `tuned` for dynamic resource balancing based on profiles." @@ -17169,7 +18926,7 @@ msgstr "We only need a single step for this interface:" msgid "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" msgstr "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" -#: ../../configuration/system/login.rst:420 +#: ../../configuration/system/login.rst:424 msgid "We use a vontainer providing the TACACS serve rin this example." msgstr "We use a vontainer providing the TACACS serve rin this example." @@ -17177,7 +18934,7 @@ msgstr "We use a vontainer providing the TACACS serve rin this example." msgid "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." msgstr "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." -#: ../../configuration/service/dhcp-server.rst:331 +#: ../../configuration/service/dhcp-server.rst:387 msgid "Web Proxy Autodiscovery (WPAD) URL" msgstr "Web Proxy Autodiscovery (WPAD) URL" @@ -17201,15 +18958,19 @@ msgstr "When LDP is working, you will be able to see label information in the ou msgid "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." msgstr "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." -#: ../../configuration/vrf/index.rst:73 +#: ../../configuration/vrf/index.rst:92 msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." -#: ../../configuration/service/dns.rst:354 +#: ../../configuration/service/dns.rst:445 +msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." +msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." + +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." msgstr "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." -#: ../../configuration/service/dns.rst:347 +#: ../../configuration/service/dns.rst:361 msgid "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." msgstr "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." @@ -17225,7 +18986,11 @@ msgstr "When a link is reconnected or a new slave joins the bond the receive tra msgid "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." msgstr "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." -#: ../../configuration/protocols/bgp.rst:684 +#: ../../configuration/protocols/bgp.rst:589 +msgid "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." +msgstr "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." + +#: ../../configuration/protocols/bgp.rst:706 msgid "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." msgstr "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." @@ -17237,7 +19002,7 @@ msgstr "When adding IPv6 routing information exchange feature to BGP. There were msgid "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." msgstr "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." -#: ../../configuration/service/pppoe-server.rst:169 +#: ../../configuration/service/pppoe-server.rst:238 msgid "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." msgstr "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." @@ -17271,17 +19036,21 @@ msgstr "When dequeuing, each hash-bucket with data is queried in a round robin f msgid "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." msgstr "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." -#: ../../configuration/vrf/index.rst:188 +#: ../../configuration/vrf/index.rst:207 msgid "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." msgstr "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." -#: ../../configuration/pki/index.rst:176 -#: ../../configuration/pki/index.rst:219 +#: ../../configuration/vpn/ipsec.rst:529 +msgid "When first connecting to the new VPN the user is prompted to enter proper credentials." +msgstr "When first connecting to the new VPN the user is prompted to enter proper credentials." + +#: ../../configuration/pki/index.rst:178 +#: ../../configuration/pki/index.rst:221 msgid "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" -#: ../../configuration/pki/index.rst:197 -#: ../../configuration/pki/index.rst:235 +#: ../../configuration/pki/index.rst:199 +#: ../../configuration/pki/index.rst:237 msgid "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" @@ -17325,7 +19094,7 @@ msgstr "When set the interface is enabled for \"dial-on-demand\"." msgid "When specified, this should be the only keyword for the interface." msgstr "When specified, this should be the only keyword for the interface." -#: ../../configuration/system/option.rst:60 +#: ../../configuration/system/option.rst:90 msgid "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." msgstr "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." @@ -17334,7 +19103,7 @@ msgstr "When starting a VyOS live system (the installation CD) the configured ke msgid "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." msgstr "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." -#: ../../configuration/vpn/site2site_ipsec.rst:416 +#: ../../configuration/vpn/site2site_ipsec.rst:419 msgid "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." msgstr "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." @@ -17346,6 +19115,10 @@ msgstr "When the command above is set, VyOS will answer every ICMP echo request msgid "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." msgstr "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." +#: ../../configuration/highavailability/index.rst:321 +msgid "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" +msgstr "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" + #: ../../_include/interface-address-with-dhcp.txt:14 msgid "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" msgstr "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" @@ -17366,6 +19139,10 @@ msgstr "When using NAT for a large number of host systems it recommended that a msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." +#: ../../configuration/protocols/rpki.rst:161 +msgid "When using SSH, private-key-file and public-key-file are mandatory options." +msgstr "When using SSH, private-key-file and public-key-file are mandatory options." + #: ../../configuration/vpn/openconnect.rst:222 msgid "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" msgstr "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" @@ -17450,12 +19227,23 @@ msgstr "Will be recorded only packets/flows on **incoming** direction in configu msgid "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" msgstr "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" +#: ../../configuration/vpn/ipsec.rst:501 +msgid "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." +msgstr "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." + +#: ../../configuration/service/pppoe-server.rst:579 +#: ../../configuration/vpn/l2tp.rst:514 +#: ../../configuration/vpn/pptp.rst:438 +#: ../../configuration/vpn/sstp.rst:472 +msgid "Windows Internet Name Service (WINS) servers propagated to client" +msgstr "Windows Internet Name Service (WINS) servers propagated to client" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:147 msgid "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." msgstr "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/interfaces/wireguard.rst:7 -#: ../../configuration/pki/index.rst:132 +#: ../../configuration/pki/index.rst:134 msgid "WireGuard" msgstr "WireGuard" @@ -17521,20 +19309,24 @@ msgid "With this command, you can specify how the URL path should be matched aga msgstr "With this command, you can specify how the URL path should be matched against incoming requests." #: ../../configuration/firewall/index.rst:166 +msgid "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." +msgstr "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." + +#: ../../configuration/firewall/index.rst:166 msgid "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." msgstr "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." -#: ../../configuration/service/dhcp-server.rst:257 -#: ../../configuration/service/dhcp-server.rst:262 -#: ../../configuration/service/dhcp-server.rst:267 -#: ../../configuration/service/dhcp-server.rst:277 -#: ../../configuration/service/dhcp-server.rst:282 -#: ../../configuration/service/dhcp-server.rst:312 -#: ../../configuration/service/dhcp-server.rst:317 -#: ../../configuration/service/dhcp-server.rst:322 -#: ../../configuration/service/dhcp-server.rst:342 -#: ../../configuration/service/dhcp-server.rst:347 -#: ../../configuration/service/dhcp-server.rst:357 +#: ../../configuration/service/dhcp-server.rst:313 +#: ../../configuration/service/dhcp-server.rst:318 +#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:338 +#: ../../configuration/service/dhcp-server.rst:368 +#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/service/dhcp-server.rst:378 +#: ../../configuration/service/dhcp-server.rst:398 +#: ../../configuration/service/dhcp-server.rst:403 +#: ../../configuration/service/dhcp-server.rst:413 msgid "Y" msgstr "Y" @@ -17542,7 +19334,7 @@ msgstr "Y" msgid "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." msgstr "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." -#: ../../configuration/system/login.rst:365 +#: ../../configuration/system/login.rst:369 msgid "You are able to set post-login or pre-login banner messages to display certain information for this system." msgstr "You are able to set post-login or pre-login banner messages to display certain information for this system." @@ -17558,11 +19350,15 @@ msgstr "You can also configure the time interval for preemption with the \"preem msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" msgstr "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" -#: ../../configuration/system/ipv6.rst:107 +#: ../../configuration/service/router-advert.rst:58 +msgid "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." +msgstr "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." + +#: ../../configuration/system/ipv6.rst:120 msgid "You can also specify which IPv6 access-list should be shown:" msgstr "You can also specify which IPv6 access-list should be shown:" @@ -17578,7 +19374,7 @@ msgstr "You can also use another attributes for identify client for disconnect, msgid "You can also write a description for a filter:" msgstr "You can also write a description for a filter:" -#: ../../configuration/system/login.rst:78 +#: ../../configuration/system/login.rst:82 msgid "You can assign multiple keys to the same user by using a unique identifier per SSH key." msgstr "You can assign multiple keys to the same user by using a unique identifier per SSH key." @@ -17614,7 +19410,7 @@ msgstr "You can create multiple VLAN interfaces on a physical interface. The VLA msgid "You can disable a VRRP group with ``disable`` option:" msgstr "You can disable a VRRP group with ``disable`` option:" -#: ../../configuration/system/ipv6.rst:122 +#: ../../configuration/system/ipv6.rst:135 msgid "You can get more specific OSPFv3 information by using the parameters shown below:" msgstr "You can get more specific OSPFv3 information by using the parameters shown below:" @@ -17626,15 +19422,15 @@ msgstr "You can not assign the same allowed-ips statement to multiple WireGuard msgid "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" msgstr "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" -#: ../../configuration/vpn/sstp.rst:332 +#: ../../configuration/vpn/sstp.rst:505 msgid "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." -#: ../../configuration/system/login.rst:443 +#: ../../configuration/system/login.rst:447 msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" @@ -17642,7 +19438,7 @@ msgstr "You can only apply one policy per interface and direction, but you could msgid "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" msgstr "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" -#: ../../configuration/service/dhcp-server.rst:176 +#: ../../configuration/service/dhcp-server.rst:226 msgid "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." msgstr "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." @@ -17718,6 +19514,10 @@ msgstr "You will also need the public key of your peer as well as the network(s) msgid "Your ISPs modem is connected to port ``eth0`` of your VyOS box." msgstr "Your ISPs modem is connected to port ``eth0`` of your VyOS box." +#: ../../configuration/service/router-advert.rst:110 +msgid "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" +msgstr "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" + #: ../../configuration/system/ip.rst:31 #: ../../configuration/system/ipv6.rst:27 #: ../../configuration/vrf/index.rst:44 @@ -17758,7 +19558,7 @@ msgstr "(This can be useful when a called service has many and/or often changing msgid ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." msgstr ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." -#: ../../configuration/protocols/static.rst:152 +#: ../../configuration/protocols/static.rst:185 msgid ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." msgstr ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." @@ -17798,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports a msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." @@ -17818,7 +19618,7 @@ msgstr ":abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc msgid ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." msgstr ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." -#: ../../configuration/vrf/index.rst:401 +#: ../../configuration/vrf/index.rst:420 msgid ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." msgstr ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." @@ -17830,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." @@ -17890,7 +19694,11 @@ msgstr ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -18010,43 +19818,43 @@ msgstr ":lastproofread:2021-07-12" msgid ":opcmd:`generate pki wireguard key-pair`." msgstr ":opcmd:`generate pki wireguard key-pair`." -#: ../../configuration/vrf/index.rst:88 +#: ../../configuration/vrf/index.rst:107 msgid ":ref:`routing-bgp`" msgstr ":ref:`routing-bgp`" -#: ../../configuration/vrf/index.rst:104 +#: ../../configuration/vrf/index.rst:123 msgid ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" msgstr ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" -#: ../../configuration/vrf/index.rst:89 +#: ../../configuration/vrf/index.rst:108 msgid ":ref:`routing-isis`" msgstr ":ref:`routing-isis`" -#: ../../configuration/vrf/index.rst:105 +#: ../../configuration/vrf/index.rst:124 msgid ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" msgstr ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" -#: ../../configuration/vrf/index.rst:90 +#: ../../configuration/vrf/index.rst:109 msgid ":ref:`routing-ospf`" msgstr ":ref:`routing-ospf`" -#: ../../configuration/vrf/index.rst:106 +#: ../../configuration/vrf/index.rst:125 msgid ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" msgstr ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" -#: ../../configuration/vrf/index.rst:91 +#: ../../configuration/vrf/index.rst:110 msgid ":ref:`routing-ospfv3`" msgstr ":ref:`routing-ospfv3`" -#: ../../configuration/vrf/index.rst:107 +#: ../../configuration/vrf/index.rst:126 msgid ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" msgstr ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" -#: ../../configuration/vrf/index.rst:92 +#: ../../configuration/vrf/index.rst:111 msgid ":ref:`routing-static`" msgstr ":ref:`routing-static`" -#: ../../configuration/vrf/index.rst:108 +#: ../../configuration/vrf/index.rst:127 msgid ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" msgstr ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" @@ -18054,7 +19862,7 @@ msgstr ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." -#: ../../configuration/service/dns.rst:230 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Based" @@ -18062,7 +19870,7 @@ msgstr ":rfc:`2136` Based" msgid ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." msgstr ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." -#: ../../configuration/pki/index.rst:15 +#: ../../configuration/pki/index.rst:17 msgid ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." msgstr ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." @@ -18082,23 +19890,27 @@ msgstr "`3. Add a full path to the script`_" msgid "`4. Add optional parameters`_" msgstr "`4. Add optional parameters`_" -#: ../../configuration/service/dhcp-server.rst:154 +#: ../../configuration/service/dhcp-server.rst:203 msgid "`<name>` must be identical on both sides!" msgstr "`<name>` must be identical on both sides!" -#: ../../configuration/pki/index.rst:202 +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + +#: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:181 +#: ../../configuration/pki/index.rst:183 msgid "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:240 +#: ../../configuration/pki/index.rst:242 msgid "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:224 +#: ../../configuration/pki/index.rst:226 msgid "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" @@ -18202,14 +20014,26 @@ msgstr "``802.3ad`` - IEEE 802.3ad Dynamic link aggregation. Creates aggregation msgid "``9600`` - 9600 bps" msgstr "``9600`` - 9600 bps" -#: ../../configuration/vpn/ipsec.rst:149 +#: ../../configuration/vpn/ipsec.rst:152 msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` defines a Diffie-Hellman group for PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Known limitations:``" +#: ../../configuration/service/ipoe-server.rst:247 +#: ../../configuration/service/pppoe-server.rst:209 +#: ../../configuration/vpn/l2tp.rst:252 +#: ../../configuration/vpn/pptp.rst:192 +#: ../../configuration/vpn/sstp.rst:225 +msgid "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." +msgstr "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." + #: ../../configuration/loadbalancing/wan.rst:259 msgid "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" msgstr "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" @@ -18226,11 +20050,11 @@ msgstr "``a`` - 802.11a - 54 Mbits/sec" msgid "``ac`` - 802.11ac - 1300 Mbits/sec" msgstr "``ac`` - 802.11ac - 1300 Mbits/sec" -#: ../../configuration/policy/route-map.rst:375 +#: ../../configuration/policy/route-map.rst:378 msgid "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" msgstr "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" -#: ../../configuration/policy/route-map.rst:368 +#: ../../configuration/policy/route-map.rst:371 msgid "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" msgstr "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" @@ -18256,7 +20080,7 @@ msgstr "``active-backup`` - Active-backup policy: Only one slave in the bond is msgid "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." msgstr "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." -#: ../../configuration/vpn/ipsec.rst:96 +#: ../../configuration/vpn/ipsec.rst:98 msgid "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" msgstr "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" @@ -18268,11 +20092,19 @@ msgstr "``all-available`` all checking target addresses must be available to pas msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``any-available`` any of the checking target addresses must be available to pass this check" -#: ../../configuration/vpn/site2site_ipsec.rst:385 +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + +#: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." #: ../../configuration/vpn/site2site_ipsec.rst:18 +msgid "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" +msgstr "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" + +#: ../../configuration/vpn/site2site_ipsec.rst:18 msgid "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" msgstr "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" @@ -18292,11 +20124,11 @@ msgstr "``begin`` Matches the beginning of the URL path" msgid "``bgp`` - Border Gateway Protocol (BGP)" msgstr "``bgp`` - Border Gateway Protocol (BGP)" -#: ../../configuration/vpn/site2site_ipsec.rst:147 +#: ../../configuration/vpn/site2site_ipsec.rst:150 msgid "``bind`` - select a VTI interface to bind to this peer;" msgstr "``bind`` - select a VTI interface to bind to this peer;" -#: ../../configuration/policy/route-map.rst:376 +#: ../../configuration/policy/route-map.rst:379 msgid "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" msgstr "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" @@ -18312,6 +20144,10 @@ msgstr "``burst``: Number of packets allowed to overshoot the limit within ``per msgid "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" msgstr "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:61 +msgid "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" +msgstr "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" + #: ../../configuration/service/lldp.rst:65 msgid "``cdp`` - Listen for CDP for Cisco routers/switches" msgstr "``cdp`` - Listen for CDP for Cisco routers/switches" @@ -18320,6 +20156,14 @@ msgstr "``cdp`` - Listen for CDP for Cisco routers/switches" msgid "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" msgstr "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:64 +msgid "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" +msgstr "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" + +#: ../../configuration/vpn/ipsec.rst:66 +msgid "``clear`` closes the CHILD_SA and does not take further action (default);" +msgstr "``clear`` closes the CHILD_SA and does not take further action (default);" + #: ../../configuration/vpn/ipsec.rst:65 msgid "``clear`` set action to clear;" msgstr "``clear`` set action to clear;" @@ -18328,11 +20172,15 @@ msgstr "``clear`` set action to clear;" msgid "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." msgstr "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +#: ../../configuration/vpn/site2site_ipsec.rst:414 +msgid "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +msgstr "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." + #: ../../configuration/vpn/ipsec.rst:47 msgid "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" msgstr "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" -#: ../../configuration/vpn/ipsec.rst:122 +#: ../../configuration/vpn/ipsec.rst:125 msgid "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." msgstr "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." @@ -18344,7 +20192,7 @@ msgstr "``compression`` whether IPComp compression of content is proposed on the msgid "``connected`` - Connected routes (directly attached subnet or host)" msgstr "``connected`` - Connected routes (directly attached subnet or host)" -#: ../../configuration/vpn/site2site_ipsec.rst:72 +#: ../../configuration/vpn/site2site_ipsec.rst:69 msgid "``connection-type`` - how to handle this connection process. Possible variants:" msgstr "``connection-type`` - how to handle this connection process. Possible variants:" @@ -18366,39 +20214,43 @@ msgstr "``d`` - Execution interval in days" msgid "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." msgstr "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +#: ../../configuration/vpn/site2site_ipsec.rst:403 +msgid "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +msgstr "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." + #: ../../configuration/vpn/ipsec.rst:56 msgid "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" msgstr "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" -#: ../../configuration/vpn/site2site_ipsec.rst:88 +#: ../../configuration/vpn/site2site_ipsec.rst:85 msgid "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" msgstr "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" -#: ../../configuration/vpn/site2site_ipsec.rst:92 +#: ../../configuration/vpn/site2site_ipsec.rst:89 msgid "``description`` - description for this peer;" msgstr "``description`` - description for this peer;" -#: ../../configuration/vpn/ipsec.rst:101 +#: ../../configuration/vpn/ipsec.rst:103 msgid "``dh-group`` dh-group;" msgstr "``dh-group`` dh-group;" -#: ../../configuration/vpn/site2site_ipsec.rst:23 +#: ../../configuration/vpn/site2site_ipsec.rst:24 msgid "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" msgstr "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" -#: ../../configuration/vpn/site2site_ipsec.rst:94 +#: ../../configuration/vpn/site2site_ipsec.rst:91 msgid "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" msgstr "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" -#: ../../configuration/vpn/ipsec.rst:88 +#: ../../configuration/vpn/ipsec.rst:90 msgid "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." msgstr "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." -#: ../../configuration/vpn/site2site_ipsec.rst:396 +#: ../../configuration/vpn/site2site_ipsec.rst:399 msgid "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." msgstr "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." -#: ../../configuration/vpn/ipsec.rst:162 +#: ../../configuration/vpn/ipsec.rst:166 msgid "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" msgstr "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" @@ -18406,7 +20258,7 @@ msgstr "``disable-route-autoinstall`` Do not automatically install routes to rem msgid "``disable`` - disable this tunnel;" msgstr "``disable`` - disable this tunnel;" -#: ../../configuration/vpn/ipsec.rst:147 +#: ../../configuration/vpn/ipsec.rst:150 msgid "``disable`` Disable PFS;" msgstr "``disable`` Disable PFS;" @@ -18424,15 +20276,15 @@ msgstr "``disable`` disable MOBIKE;" msgid "``drop``: drop the packet." msgstr "``drop``: drop the packet." -#: ../../configuration/system/login.rst:71 +#: ../../configuration/system/login.rst:75 msgid "``ecdsa-sha2-nistp256``" msgstr "``ecdsa-sha2-nistp256``" -#: ../../configuration/system/login.rst:72 +#: ../../configuration/system/login.rst:76 msgid "``ecdsa-sha2-nistp384``" msgstr "``ecdsa-sha2-nistp384``" -#: ../../configuration/system/login.rst:73 +#: ../../configuration/system/login.rst:77 msgid "``ecdsa-sha2-nistp521``" msgstr "``ecdsa-sha2-nistp521``" @@ -18440,7 +20292,7 @@ msgstr "``ecdsa-sha2-nistp521``" msgid "``edp`` - Listen for EDP for Extreme routers/switches" msgstr "``edp`` - Listen for EDP for Extreme routers/switches" -#: ../../configuration/vpn/ipsec.rst:145 +#: ../../configuration/vpn/ipsec.rst:148 msgid "``enable`` Inherit Diffie-Hellman group from IKE group (default);" msgstr "``enable`` Inherit Diffie-Hellman group from IKE group (default);" @@ -18452,11 +20304,11 @@ msgstr "``enable`` enable IPComp compression;" msgid "``enable`` enable MOBIKE (default for IKEv2);" msgstr "``enable`` enable MOBIKE (default for IKEv2);" -#: ../../configuration/vpn/ipsec.rst:103 +#: ../../configuration/vpn/ipsec.rst:105 msgid "``encryption`` encryption algorithm;" msgstr "``encryption`` encryption algorithm;" -#: ../../configuration/vpn/ipsec.rst:153 +#: ../../configuration/vpn/ipsec.rst:156 msgid "``encryption`` encryption algorithm (default 128 bit AES-CBC);" msgstr "``encryption`` encryption algorithm (default 128 bit AES-CBC);" @@ -18468,7 +20320,7 @@ msgstr "``end`` Matches the end of the URL path." msgid "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" msgstr "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" -#: ../../configuration/vpn/site2site_ipsec.rst:149 +#: ../../configuration/vpn/site2site_ipsec.rst:152 msgid "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." msgstr "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." @@ -18488,11 +20340,11 @@ msgstr "``file`` - path to the key file;" msgid "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/ipsec.rst:164 +#: ../../configuration/vpn/ipsec.rst:168 msgid "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/site2site_ipsec.rst:97 +#: ../../configuration/vpn/site2site_ipsec.rst:94 msgid "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" msgstr "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" @@ -18500,7 +20352,7 @@ msgstr "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagr msgid "``g`` - 802.11g - 54 Mbits/sec (default)" msgstr "``g`` - 802.11g - 54 Mbits/sec (default)" -#: ../../configuration/policy/route-map.rst:367 +#: ../../configuration/policy/route-map.rst:370 msgid "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" msgstr "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" @@ -18508,11 +20360,11 @@ msgstr "``graceful-shutdown`` - Well-known communities value GRACEFUL msgid "``h`` - Execution interval in hours" msgstr "``h`` - Execution interval in hours" -#: ../../configuration/vpn/ipsec.rst:105 +#: ../../configuration/vpn/ipsec.rst:107 msgid "``hash`` hash algorithm." msgstr "``hash`` hash algorithm." -#: ../../configuration/vpn/ipsec.rst:155 +#: ../../configuration/vpn/ipsec.rst:158 msgid "``hash`` hash algorithm (default sha1)." msgstr "``hash`` hash algorithm (default sha1)." @@ -18536,23 +20388,23 @@ msgstr "``ht40-`` - Both 20 MHz and 40 MHz with secondary channel below the prim msgid "``hvc0`` - Xen console" msgstr "``hvc0`` - Xen console" -#: ../../configuration/vpn/site2site_ipsec.rst:25 +#: ../../configuration/vpn/site2site_ipsec.rst:26 msgid "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" msgstr "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" -#: ../../configuration/vpn/site2site_ipsec.rst:101 +#: ../../configuration/vpn/site2site_ipsec.rst:98 msgid "``ike-group`` - IKE group to use for key exchanges;" msgstr "``ike-group`` - IKE group to use for key exchanges;" -#: ../../configuration/vpn/ipsec.rst:82 +#: ../../configuration/vpn/ipsec.rst:84 msgid "``ikev1`` use IKEv1 for Key Exchange;" msgstr "``ikev1`` use IKEv1 for Key Exchange;" -#: ../../configuration/vpn/site2site_ipsec.rst:103 +#: ../../configuration/vpn/site2site_ipsec.rst:100 msgid "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" msgstr "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" -#: ../../configuration/vpn/ipsec.rst:73 +#: ../../configuration/vpn/ipsec.rst:75 msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." @@ -18560,7 +20412,7 @@ msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticat msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" -#: ../../configuration/vpn/ipsec.rst:84 +#: ../../configuration/vpn/ipsec.rst:86 msgid "``ikev2`` use IKEv2 for Key Exchange;" msgstr "``ikev2`` use IKEv2 for Key Exchange;" @@ -18568,23 +20420,27 @@ msgstr "``ikev2`` use IKEv2 for Key Exchange;" msgid "``in``: Ruleset for forwarded packets on an inbound interface" msgstr "``in``: Ruleset for forwarded packets on an inbound interface" -#: ../../configuration/vpn/site2site_ipsec.rst:75 +#: ../../configuration/vpn/site2site_ipsec.rst:72 msgid "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" msgstr "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" -#: ../../configuration/vpn/ipsec.rst:166 +#: ../../configuration/system/option.rst:50 +msgid "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" +msgstr "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" + +#: ../../configuration/vpn/ipsec.rst:170 msgid "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" msgstr "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" -#: ../../configuration/pki/index.rst:148 +#: ../../configuration/pki/index.rst:150 msgid "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." msgstr "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." -#: ../../configuration/policy/route-map.rst:366 +#: ../../configuration/policy/route-map.rst:369 msgid "``internet`` - Well-known communities value 0" msgstr "``internet`` - Well-known communities value 0" -#: ../../configuration/vpn/ipsec.rst:69 +#: ../../configuration/vpn/ipsec.rst:71 msgid "``interval`` keep-alive interval in seconds <2-86400> (default 30);" msgstr "``interval`` keep-alive interval in seconds <2-86400> (default 30);" @@ -18602,7 +20458,7 @@ msgstr "``jump``: jump to another custom chain." msgid "``kernel`` - Kernel routes" msgstr "``kernel`` - Kernel routes" -#: ../../configuration/vpn/ipsec.rst:78 +#: ../../configuration/vpn/ipsec.rst:80 msgid "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" msgstr "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" @@ -18610,7 +20466,11 @@ msgstr "``key-exchange`` which protocol should be used to initialize the connect msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:" -#: ../../configuration/system/option.rst:107 +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + +#: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." @@ -18622,19 +20482,19 @@ msgstr "``least-connection`` Distributes requests to the server with the fewest msgid "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" msgstr "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" -#: ../../configuration/vpn/ipsec.rst:125 +#: ../../configuration/vpn/ipsec.rst:128 msgid "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" msgstr "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" -#: ../../configuration/vpn/ipsec.rst:128 +#: ../../configuration/vpn/ipsec.rst:131 msgid "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" msgstr "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" -#: ../../configuration/vpn/ipsec.rst:131 +#: ../../configuration/vpn/ipsec.rst:134 msgid "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" msgstr "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" -#: ../../configuration/vpn/ipsec.rst:86 +#: ../../configuration/vpn/ipsec.rst:88 msgid "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" @@ -18642,22 +20502,26 @@ msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgid "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" -#: ../../configuration/policy/route-map.rst:373 +#: ../../configuration/policy/route-map.rst:376 msgid "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" msgstr "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" -#: ../../configuration/vpn/site2site_ipsec.rst:107 +#: ../../configuration/vpn/site2site_ipsec.rst:104 msgid "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" msgstr "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" -#: ../../configuration/policy/route-map.rst:363 +#: ../../configuration/policy/route-map.rst:366 msgid "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" msgstr "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" -#: ../../configuration/vpn/site2site_ipsec.rst:31 +#: ../../configuration/vpn/site2site_ipsec.rst:32 msgid "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" msgstr "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:50 +msgid "``local-key`` - name of PKI key-pair with local private key" +msgstr "``local-key`` - name of PKI key-pair with local private key" + #: ../../configuration/firewall/general-legacy.rst:753 msgid "``local``: Ruleset for packets destined for this router" msgstr "``local``: Ruleset for packets destined for this router" @@ -18674,7 +20538,7 @@ msgstr "``m`` - Execution interval in minutes" msgid "``main`` Routing table used by VyOS and other interfaces not participating in PBR" msgstr "``main`` Routing table used by VyOS and other interfaces not participating in PBR" -#: ../../configuration/vpn/ipsec.rst:93 +#: ../../configuration/vpn/ipsec.rst:95 msgid "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" msgstr "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" @@ -18682,19 +20546,23 @@ msgstr "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommen msgid "``message``: Full message that has triggered the script." msgstr "``message``: Full message that has triggered the script." +#: ../../configuration/system/option.rst:40 +msgid "``mitigations=off``" +msgstr "``mitigations=off``" + #: ../../configuration/vpn/ipsec.rst:92 msgid "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" msgstr "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" -#: ../../configuration/vpn/site2site_ipsec.rst:35 +#: ../../configuration/vpn/site2site_ipsec.rst:36 msgid "``mode`` - mode for authentication between VyOS and remote peer:" msgstr "``mode`` - mode for authentication between VyOS and remote peer:" -#: ../../configuration/vpn/ipsec.rst:91 +#: ../../configuration/vpn/ipsec.rst:93 msgid "``mode`` IKEv1 Phase 1 Mode Selection:" msgstr "``mode`` IKEv1 Phase 1 Mode Selection:" -#: ../../configuration/vpn/ipsec.rst:136 +#: ../../configuration/vpn/ipsec.rst:139 msgid "``mode`` the type of the connection:" msgstr "``mode`` the type of the connection:" @@ -18758,19 +20626,19 @@ msgstr "``net.ipv6.conf.all.accept_redirects``" msgid "``net.ipv6.conf.all.accept_source_route``" msgstr "``net.ipv6.conf.all.accept_source_route``" -#: ../../configuration/policy/route-map.rst:364 +#: ../../configuration/policy/route-map.rst:367 msgid "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" msgstr "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" -#: ../../configuration/policy/route-map.rst:365 +#: ../../configuration/policy/route-map.rst:368 msgid "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" msgstr "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" -#: ../../configuration/policy/route-map.rst:374 +#: ../../configuration/policy/route-map.rst:377 msgid "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" msgstr "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" -#: ../../configuration/policy/route-map.rst:377 +#: ../../configuration/policy/route-map.rst:380 msgid "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" msgstr "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" @@ -18782,7 +20650,7 @@ msgstr "``no`` disable remote host re-authenticaton during an IKE rekey;" msgid "``none`` - Execution interval in minutes" msgstr "``none`` - Execution interval in minutes" -#: ../../configuration/vpn/site2site_ipsec.rst:85 +#: ../../configuration/vpn/site2site_ipsec.rst:82 msgid "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." msgstr "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." @@ -18798,7 +20666,7 @@ msgstr "``noselect`` marks the server as unused, except for display purposes. Th msgid "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" msgstr "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" -#: ../../configuration/vpn/ipsec.rst:160 +#: ../../configuration/vpn/ipsec.rst:164 msgid "``options``" msgstr "``options``" @@ -18814,11 +20682,19 @@ msgstr "``ospfv3`` - Open Shortest Path First (IPv6) (OSPFv3)" msgid "``out``: Ruleset for forwarded packets on an outbound interface" msgstr "``out``: Ruleset for forwarded packets on an outbound interface" +#: ../../configuration/vpn/site2site_ipsec.rst:54 +msgid "``passphrase`` - local private key passphrase" +msgstr "``passphrase`` - local private key passphrase" + +#: ../../configuration/vpn/site2site_ipsec.rst:67 +msgid "``passphrase`` - private key passphrase, if needed." +msgstr "``passphrase`` - private key passphrase, if needed." + #: ../../configuration/vpn/site2site_ipsec.rst:70 msgid "``password`` - passphrase private key, if needed." msgstr "``password`` - passphrase private key, if needed." -#: ../../configuration/pki/index.rst:163 +#: ../../configuration/pki/index.rst:165 msgid "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." msgstr "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." @@ -18826,7 +20702,7 @@ msgstr "``peer`` is used for the VyOS CLI command to identify the WireGuard peer msgid "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." msgstr "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." -#: ../../configuration/vpn/ipsec.rst:142 +#: ../../configuration/vpn/ipsec.rst:145 msgid "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" msgstr "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" @@ -18835,11 +20711,11 @@ msgid "``pool`` mobilizes persistent client mode association with a number of re msgstr "``pool`` mobilizes persistent client mode association with a number of remote servers." #: ../../configuration/vpn/site2site_ipsec.rst:126 -#: ../../configuration/vpn/site2site_ipsec.rst:136 +#: ../../configuration/vpn/site2site_ipsec.rst:139 msgid "``port`` - define port. Have effect only when used together with ``prefix``;" msgstr "``port`` - define port. Have effect only when used together with ``prefix``;" -#: ../../configuration/vpn/site2site_ipsec.rst:37 +#: ../../configuration/vpn/site2site_ipsec.rst:38 msgid "``pre-shared-secret`` - use predefined shared secret phrase;" msgstr "``pre-shared-secret`` - use predefined shared secret phrase;" @@ -18851,27 +20727,35 @@ msgstr "``prefer`` marks the server as preferred. All other things being equal, msgid "``prefix`` - IP network at local side." msgstr "``prefix`` - IP network at local side." -#: ../../configuration/vpn/site2site_ipsec.rst:138 +#: ../../configuration/vpn/site2site_ipsec.rst:141 msgid "``prefix`` - IP network at remote side." msgstr "``prefix`` - IP network at remote side." -#: ../../configuration/vpn/ipsec.rst:107 +#: ../../configuration/vpn/ipsec.rst:109 msgid "``prf`` pseudo-random function." msgstr "``prf`` pseudo-random function." -#: ../../configuration/vpn/ipsec.rst:151 +#: ../../configuration/vpn/site2site_ipsec.rst:130 +msgid "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" +msgstr "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" + +#: ../../configuration/system/option.rst:51 +msgid "``processor.max_cstate=1`` Limit processor to maximum C-state 1" +msgstr "``processor.max_cstate=1`` Limit processor to maximum C-state 1" + +#: ../../configuration/vpn/ipsec.rst:154 msgid "``proposal`` ESP-group proposal with number <1-65535>:" msgstr "``proposal`` ESP-group proposal with number <1-65535>:" -#: ../../configuration/vpn/ipsec.rst:99 +#: ../../configuration/vpn/ipsec.rst:101 msgid "``proposal`` the list of proposals and their parameters:" msgstr "``proposal`` the list of proposals and their parameters:" -#: ../../configuration/vpn/site2site_ipsec.rst:130 +#: ../../configuration/vpn/site2site_ipsec.rst:133 msgid "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" msgstr "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" -#: ../../configuration/vpn/site2site_ipsec.rst:21 +#: ../../configuration/vpn/site2site_ipsec.rst:22 msgid "``psk`` - Preshared secret key name:" msgstr "``psk`` - Preshared secret key name:" @@ -18890,7 +20774,7 @@ msgstr "``rate``: Number of packets. Default 5." msgid "``reject``: reject the packet." msgstr "``reject``: reject the packet." -#: ../../configuration/vpn/site2site_ipsec.rst:111 +#: ../../configuration/vpn/site2site_ipsec.rst:108 msgid "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." msgstr "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." @@ -18898,10 +20782,18 @@ msgstr "``remote-address`` - remote IP address or hostname for IPSec connection. msgid "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" msgstr "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" -#: ../../configuration/vpn/site2site_ipsec.rst:133 +#: ../../configuration/vpn/site2site_ipsec.rst:52 +msgid "``remote-key`` - name of PKI key-pair with remote public key" +msgstr "``remote-key`` - name of PKI key-pair with remote public key" + +#: ../../configuration/vpn/site2site_ipsec.rst:136 msgid "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" msgstr "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" +#: ../../configuration/vpn/site2site_ipsec.rst:113 +msgid "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" +msgstr "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" + #: ../../configuration/loadbalancing/reverse-proxy.rst:64 msgid "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" msgstr "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" @@ -18910,10 +20802,14 @@ msgstr "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" msgid "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" msgstr "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" -#: ../../configuration/vpn/site2site_ipsec.rst:80 +#: ../../configuration/vpn/site2site_ipsec.rst:77 msgid "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." msgstr "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." +#: ../../configuration/vpn/ipsec.rst:68 +msgid "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" +msgstr "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" + #: ../../configuration/vpn/ipsec.rst:54 #: ../../configuration/vpn/ipsec.rst:67 msgid "``restart`` set action to restart;" @@ -18941,19 +20837,19 @@ msgstr "``round-robin`` - Round-robin policy: Transmit packets in sequential ord msgid "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" msgstr "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" -#: ../../configuration/policy/route-map.rst:369 +#: ../../configuration/policy/route-map.rst:372 msgid "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" msgstr "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" -#: ../../configuration/policy/route-map.rst:371 +#: ../../configuration/policy/route-map.rst:374 msgid "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" msgstr "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" -#: ../../configuration/policy/route-map.rst:370 +#: ../../configuration/policy/route-map.rst:373 msgid "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" msgstr "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" -#: ../../configuration/policy/route-map.rst:372 +#: ../../configuration/policy/route-map.rst:375 msgid "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" msgstr "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" @@ -18961,11 +20857,19 @@ msgstr "``route-filter-v6`` - Well-known communities value ROUTE_FI msgid "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" +#: ../../configuration/vpn/site2site_ipsec.rst:48 +msgid "``rsa`` - options for RSA authentication mode:" +msgstr "``rsa`` - options for RSA authentication mode:" + +#: ../../configuration/vpn/site2site_ipsec.rst:40 +msgid "``rsa`` - use simple shared RSA key." +msgstr "``rsa`` - use simple shared RSA key." + #: ../../configuration/vpn/site2site_ipsec.rst:39 msgid "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" -#: ../../configuration/vpn/site2site_ipsec.rst:27 +#: ../../configuration/vpn/site2site_ipsec.rst:28 msgid "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" msgstr "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" @@ -18978,10 +20882,13 @@ msgid "``set firewall ipv4 forward filter ...``." msgstr "``set firewall ipv4 forward filter ...``." #: ../../configuration/firewall/index.rst:54 -#: ../../configuration/firewall/index.rst:72 msgid "``set firewall ipv4 input filter ...``." msgstr "``set firewall ipv4 input filter ...``." +#: ../../configuration/firewall/index.rst:72 +msgid "``set firewall ipv4 output filter ...``." +msgstr "``set firewall ipv4 output filter ...``." + #: ../../configuration/firewall/index.rst:63 msgid "``set firewall ipv6 forward filter ...``." msgstr "``set firewall ipv6 forward filter ...``." @@ -19010,19 +20917,19 @@ msgstr "``sonmp`` - Listen for SONMP for Nortel routers/switches" msgid "``source-address`` Distributes requests based on the source IP address of the client" msgstr "``source-address`` Distributes requests based on the source IP address of the client" -#: ../../configuration/system/login.rst:74 +#: ../../configuration/system/login.rst:78 msgid "``ssh-dss``" msgstr "``ssh-dss``" -#: ../../configuration/system/login.rst:75 +#: ../../configuration/system/login.rst:79 msgid "``ssh-ed25519``" msgstr "``ssh-ed25519``" -#: ../../configuration/system/login.rst:49 +#: ../../configuration/system/login.rst:53 msgid "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" msgstr "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" -#: ../../configuration/system/login.rst:76 +#: ../../configuration/system/login.rst:80 msgid "``ssh-rsa``" msgstr "``ssh-rsa``" @@ -19034,6 +20941,10 @@ msgstr "``ssl-fc-sni-end`` SSL frontend match end of connection Server Name" msgid "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" msgstr "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" +#: ../../configuration/vpn/ipsec.rst:54 +msgid "``start`` tries to immediately re-create the CHILD_SA;" +msgstr "``start`` tries to immediately re-create the CHILD_SA;" + #: ../../configuration/policy/route-map.rst:173 msgid "``static`` - Statically configured routes" msgstr "``static`` - Statically configured routes" @@ -19042,6 +20953,18 @@ msgstr "``static`` - Statically configured routes" msgid "``station`` - Connects to another access point" msgstr "``station`` - Connects to another access point" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -19083,22 +21006,34 @@ msgstr "``test-script``: A user defined script must return 0 to be considered su msgid "``threshold``: ``below`` or ``above`` the specified rate limit." msgstr "``threshold``: ``below`` or ``above`` the specified rate limit." -#: ../../configuration/system/option.rst:97 +#: ../../configuration/system/option.rst:127 msgid "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." msgstr "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." -#: ../../configuration/vpn/ipsec.rst:71 +#: ../../configuration/vpn/ipsec.rst:73 msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." -#: ../../configuration/vpn/ipsec.rst:140 +#: ../../configuration/vpn/ipsec.rst:143 msgid "``transport`` transport mode;" msgstr "``transport`` transport mode;" +#: ../../configuration/vpn/ipsec.rst:63 +msgid "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" +msgstr "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" + +#: ../../configuration/vpn/ipsec.rst:52 +msgid "``trap`` installs a trap policy for the CHILD_SA;" +msgstr "``trap`` installs a trap policy for the CHILD_SA;" + #: ../../configuration/loadbalancing/wan.rst:179 msgid "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" msgstr "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" @@ -19115,7 +21050,7 @@ msgstr "``ttyUSBX`` - USB Serial device name" msgid "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" msgstr "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" -#: ../../configuration/vpn/ipsec.rst:138 +#: ../../configuration/vpn/ipsec.rst:141 msgid "``tunnel`` tunnel mode (default);" msgstr "``tunnel`` tunnel mode (default);" @@ -19123,11 +21058,11 @@ msgstr "``tunnel`` tunnel mode (default);" msgid "``type``: Specify the type of test. type can be ping, ttl or a user defined script" msgstr "``type``: Specify the type of test. type can be ping, ttl or a user defined script" -#: ../../configuration/vpn/site2site_ipsec.rst:51 +#: ../../configuration/vpn/site2site_ipsec.rst:56 msgid "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" msgstr "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" -#: ../../configuration/vpn/site2site_ipsec.rst:152 +#: ../../configuration/vpn/site2site_ipsec.rst:155 msgid "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." msgstr "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." @@ -19135,7 +21070,7 @@ msgstr "``virtual-address`` - Defines a virtual IP address which is requested by msgid "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." msgstr "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." -#: ../../configuration/vpn/ipsec.rst:168 +#: ../../configuration/vpn/ipsec.rst:172 msgid "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." @@ -19143,11 +21078,27 @@ msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated l msgid "``vnc`` - Virtual Network Control (VNC)" msgstr "``vnc`` - Virtual Network Control (VNC)" -#: ../../configuration/vpn/site2site_ipsec.rst:140 +#: ../../configuration/vpn/site2site_ipsec.rst:143 msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" -#: ../../configuration/vpn/site2site_ipsec.rst:54 +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + +#: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - options for x509 authentication mode:" @@ -19163,10 +21114,26 @@ msgstr "``xor-hash`` - XOR policy: Transmit based on the selected transmit hash msgid "``yes`` enable remote host re-authentication during an IKE rekey;" msgstr "``yes`` enable remote host re-authentication during an IKE rekey;" -#: ../../configuration/system/option.rst:39 +#: ../../configuration/service/ntp.rst:90 +msgid "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." +msgstr "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." + +#: ../../configuration/service/ntp.rst:94 +msgid "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." +msgstr "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." + +#: ../../configuration/system/option.rst:69 msgid "`source-address` and `source-interface` can not be used at the same time." msgstr "`source-address` and `source-interface` can not be used at the same time." +#: ../../configuration/service/ntp.rst:102 +msgid "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." +msgstr "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." + +#: ../../configuration/service/ntp.rst:107 +msgid "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" +msgstr "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" + #: ../../configuration/protocols/rpki.rst:12 msgid "`tweet by EvilMog`_, 2020-02-21" msgstr "`tweet by EvilMog`_, 2020-02-21" @@ -19194,7 +21161,7 @@ msgstr "alert" msgid "all" msgstr "all" -#: ../../configuration/vrf/index.rst:428 +#: ../../configuration/vrf/index.rst:447 msgid "an RD / RTLIST" msgstr "an RD / RTLIST" @@ -19234,23 +21201,23 @@ msgstr "bgpd" msgid "bonding" msgstr "bonding" -#: ../../configuration/service/dhcp-server.rst:305 +#: ../../configuration/service/dhcp-server.rst:361 msgid "boot-size" msgstr "boot-size" -#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:354 msgid "bootfile-name" msgstr "bootfile-name" -#: ../../configuration/service/dhcp-server.rst:300 +#: ../../configuration/service/dhcp-server.rst:356 msgid "bootfile-name, filename" msgstr "bootfile-name, filename" -#: ../../configuration/service/dhcp-server.rst:288 +#: ../../configuration/service/dhcp-server.rst:344 msgid "bootfile-server" msgstr "bootfile-server" -#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:359 msgid "bootfile-size" msgstr "bootfile-size" @@ -19258,7 +21225,7 @@ msgstr "bootfile-size" msgid "bridge" msgstr "bridge" -#: ../../configuration/service/dhcp-server.rst:236 +#: ../../configuration/service/dhcp-server.rst:292 msgid "client-prefix-length" msgstr "client-prefix-length" @@ -19286,15 +21253,19 @@ msgstr "cron" msgid "daemon" msgstr "daemon" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ has another way to determine the WAN IP address. This is controlled by:" -#: ../../configuration/service/dns.rst:218 +#: ../../configuration/service/dns.rst:232 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:413 +#: ../../configuration/service/dns.rst:299 +msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." +msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." + +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in `<pattern>`." msgstr "ddclient_ will skip any address located before the string set in `<pattern>`." @@ -19306,7 +21277,7 @@ msgstr "debug" msgid "decrement-lifetime" msgstr "decrement-lifetime" -#: ../../configuration/service/dhcp-server.rst:335 +#: ../../configuration/service/dhcp-server.rst:391 msgid "default-lease-time, max-lease-time" msgstr "default-lease-time, max-lease-time" @@ -19318,7 +21289,7 @@ msgstr "default-lifetime" msgid "default-preference" msgstr "default-preference" -#: ../../configuration/service/dhcp-server.rst:248 +#: ../../configuration/service/dhcp-server.rst:304 msgid "default-router" msgstr "default-router" @@ -19330,15 +21301,15 @@ msgstr "default min-threshold" msgid "deprecate-prefix" msgstr "deprecate-prefix" -#: ../../configuration/highavailability/index.rst:354 +#: ../../configuration/highavailability/index.rst:364 msgid "destination-hashing" msgstr "destination-hashing" -#: ../../configuration/service/dhcp-server.rst:285 +#: ../../configuration/service/dhcp-server.rst:341 msgid "dhcp-server-identifier" msgstr "dhcp-server-identifier" -#: ../../configuration/highavailability/index.rst:364 +#: ../../configuration/highavailability/index.rst:374 msgid "direct" msgstr "direct" @@ -19356,17 +21327,17 @@ msgstr "disable: No source validation" msgid "dnssl" msgstr "dnssl" -#: ../../configuration/service/dhcp-server.rst:263 -#: ../../configuration/service/dhcp-server.rst:265 +#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:321 msgid "domain-name" msgstr "domain-name" -#: ../../configuration/service/dhcp-server.rst:260 +#: ../../configuration/service/dhcp-server.rst:316 msgid "domain-name-servers" msgstr "domain-name-servers" -#: ../../configuration/service/dhcp-server.rst:318 -#: ../../configuration/service/dhcp-server.rst:320 +#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:376 msgid "domain-search" msgstr "domain-search" @@ -19402,11 +21373,11 @@ msgstr "ethernet" msgid "exact-match: exact match of the network prefixes." msgstr "exact-match: exact match of the network prefixes." -#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:399 msgid "exclude" msgstr "exclude" -#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:404 msgid "failover" msgstr "failover" @@ -19418,8 +21389,8 @@ msgstr "fast: Request partner to transmit LACPDUs every 1 second" msgid "file <file name>" msgstr "file <file name>" -#: ../../configuration/protocols/bgp.rst:826 -#: ../../configuration/protocols/bgp.rst:832 +#: ../../configuration/protocols/bgp.rst:848 +#: ../../configuration/protocols/bgp.rst:854 msgid "filter-list" msgstr "filter-list" @@ -19431,6 +21402,10 @@ msgstr "ftp" msgid "full - always use full-duplex" msgstr "full - always use full-duplex" +#: ../../configuration/service/router-advert.rst:16 +msgid "geneve" +msgstr "geneve" + #: ../../configuration/interfaces/ethernet.rst:32 msgid "half - always use half-duplex" msgstr "half - always use half-duplex" @@ -19443,7 +21418,7 @@ msgstr "hop-limit" msgid "host: single host IP address to match." msgstr "host: single host IP address to match." -#: ../../configuration/system/option.rst:89 +#: ../../configuration/system/option.rst:119 msgid "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" msgstr "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" @@ -19467,7 +21442,7 @@ msgstr "info" msgid "interval" msgstr "interval" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "invalid" @@ -19475,8 +21450,8 @@ msgstr "invalid" msgid "inverse-match: network/netmask to match (requires network be defined)." msgstr "inverse-match: network/netmask to match (requires network be defined)." -#: ../../configuration/service/dhcp-server.rst:268 -#: ../../configuration/service/dhcp-server.rst:270 +#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:326 msgid "ip-forwarding" msgstr "ip-forwarding" @@ -19484,10 +21459,18 @@ msgstr "ip-forwarding" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "it can be used with any NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." @@ -19496,7 +21479,7 @@ msgstr "it does not increase hardware device interrupt rate (although it does in msgid "kern" msgstr "kern" -#: ../../configuration/service/router-advert.rst:16 +#: ../../configuration/service/router-advert.rst:17 msgid "l2tpv3" msgstr "l2tpv3" @@ -19504,27 +21487,27 @@ msgstr "l2tpv3" msgid "ldpd" msgstr "ldpd" -#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:389 msgid "lease" msgstr "lease" -#: ../../configuration/highavailability/index.rst:351 +#: ../../configuration/highavailability/index.rst:361 msgid "least-connection" msgstr "least-connection" -#: ../../configuration/vpn/site2site_ipsec.rst:275 +#: ../../configuration/vpn/site2site_ipsec.rst:278 msgid "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" msgstr "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" -#: ../../configuration/vpn/site2site_ipsec.rst:167 +#: ../../configuration/vpn/site2site_ipsec.rst:170 msgid "left local_ip: `198.51.100.3` # server side WAN IP" msgstr "left local_ip: `198.51.100.3` # server side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:276 +#: ../../configuration/vpn/site2site_ipsec.rst:279 msgid "left public_ip:172.18.201.10" msgstr "left public_ip:172.18.201.10" -#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:168 msgid "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" msgstr "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" @@ -19592,7 +21575,7 @@ msgstr "local use 5 (local5)" msgid "local use 7 (local7)" msgstr "local use 7 (local7)" -#: ../../configuration/highavailability/index.rst:355 +#: ../../configuration/highavailability/index.rst:365 msgid "locality-based-least-connection" msgstr "locality-based-least-connection" @@ -19666,12 +21649,12 @@ msgstr "more information related IGP - :ref:`routing-isis`" msgid "more information related IGP - :ref:`routing-ospf`" msgstr "more information related IGP - :ref:`routing-ospf`" -#: ../../configuration/service/dhcp-server.rst:258 +#: ../../configuration/service/dhcp-server.rst:314 #: ../../configuration/service/router-advert.rst:1 msgid "name-server" msgstr "name-server" -#: ../../configuration/service/dhcp-server.rst:280 +#: ../../configuration/service/dhcp-server.rst:336 msgid "netbios-name-servers" msgstr "netbios-name-servers" @@ -19687,7 +21670,7 @@ msgstr "network: network/netmask to match (requires inverse-match be defined) BU msgid "news" msgstr "news" -#: ../../configuration/service/dhcp-server.rst:290 +#: ../../configuration/service/dhcp-server.rst:346 msgid "next-server" msgstr "next-server" @@ -19699,7 +21682,7 @@ msgstr "no-autonomous-flag" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "notfound" @@ -19711,11 +21694,11 @@ msgstr "notice" msgid "ntp" msgstr "ntp" -#: ../../configuration/service/dhcp-server.rst:273 +#: ../../configuration/service/dhcp-server.rst:329 msgid "ntp-server" msgstr "ntp-server" -#: ../../configuration/service/dhcp-server.rst:275 +#: ../../configuration/service/dhcp-server.rst:331 msgid "ntp-servers" msgstr "ntp-servers" @@ -19723,7 +21706,7 @@ msgstr "ntp-servers" msgid "one rule with a LAN (inbound-interface) and the WAN (interface)." msgstr "one rule with a LAN (inbound-interface) and the WAN (interface)." -#: ../../configuration/service/router-advert.rst:17 +#: ../../configuration/service/router-advert.rst:18 msgid "openvpn" msgstr "openvpn" @@ -19763,8 +21746,8 @@ msgstr "policy extcommunity-list" msgid "policy large-community-list" msgstr "policy large-community-list" -#: ../../configuration/service/dhcp-server.rst:313 -#: ../../configuration/service/dhcp-server.rst:315 +#: ../../configuration/service/dhcp-server.rst:369 +#: ../../configuration/service/dhcp-server.rst:371 msgid "pop-server" msgstr "pop-server" @@ -19772,17 +21755,17 @@ msgstr "pop-server" msgid "preferred-lifetime" msgstr "preferred-lifetime" -#: ../../configuration/protocols/bgp.rst:827 -#: ../../configuration/protocols/bgp.rst:831 +#: ../../configuration/protocols/bgp.rst:849 +#: ../../configuration/protocols/bgp.rst:853 msgid "prefix-list, distribute-list" msgstr "prefix-list, distribute-list" -#: ../../configuration/service/router-advert.rst:18 +#: ../../configuration/service/router-advert.rst:19 msgid "pseudo-ethernet" msgstr "pseudo-ethernet" -#: ../../configuration/service/dhcp-server.rst:338 -#: ../../configuration/service/dhcp-server.rst:340 +#: ../../configuration/service/dhcp-server.rst:394 +#: ../../configuration/service/dhcp-server.rst:396 msgid "range" msgstr "range" @@ -19790,7 +21773,7 @@ msgstr "range" msgid "reachable-time" msgstr "reachable-time" -#: ../../configuration/system/ip.rst:82 +#: ../../configuration/system/ip.rst:95 msgid "reset commands" msgstr "reset commands" @@ -19798,7 +21781,7 @@ msgstr "reset commands" msgid "retrans-timer" msgstr "retrans-timer" -#: ../../configuration/service/dhcp-server.rst:325 +#: ../../configuration/service/dhcp-server.rst:381 msgid "rfc3442-static-route, windows-static-route" msgstr "rfc3442-static-route, windows-static-route" @@ -19806,15 +21789,15 @@ msgstr "rfc3442-static-route, windows-static-route" msgid "rfc3768-compatibility" msgstr "rfc3768-compatibility" -#: ../../configuration/vpn/site2site_ipsec.rst:277 +#: ../../configuration/vpn/site2site_ipsec.rst:280 msgid "right local_ip: 172.18.202.10 # right side WAN IP" msgstr "right local_ip: 172.18.202.10 # right side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:169 +#: ../../configuration/vpn/site2site_ipsec.rst:172 msgid "right local_ip: `203.0.113.2` # remote office side WAN IP" msgstr "right local_ip: `203.0.113.2` # remote office side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:168 +#: ../../configuration/vpn/site2site_ipsec.rst:171 msgid "right subnet: `10.0.0.0/24` site2,remote office side" msgstr "right subnet: `10.0.0.0/24` site2,remote office side" @@ -19822,16 +21805,16 @@ msgstr "right subnet: `10.0.0.0/24` site2,remote office side" msgid "ripd" msgstr "ripd" -#: ../../configuration/highavailability/index.rst:349 +#: ../../configuration/highavailability/index.rst:359 msgid "round-robin" msgstr "round-robin" -#: ../../configuration/protocols/bgp.rst:825 -#: ../../configuration/protocols/bgp.rst:833 +#: ../../configuration/protocols/bgp.rst:847 +#: ../../configuration/protocols/bgp.rst:855 msgid "route-map" msgstr "route-map" -#: ../../configuration/service/dhcp-server.rst:250 +#: ../../configuration/service/dhcp-server.rst:306 msgid "routers" msgstr "routers" @@ -19848,7 +21831,7 @@ msgstr "sFlow is a technology that enables monitoring of network traffic by send msgid "security" msgstr "security" -#: ../../configuration/service/dhcp-server.rst:283 +#: ../../configuration/service/dhcp-server.rst:339 msgid "server-identifier" msgstr "server-identifier" @@ -19865,11 +21848,11 @@ msgstr "set a destination and/or source address. Accepted input:" msgid "sha256 Hashes" msgstr "sha256 Hashes" -#: ../../configuration/system/ip.rst:50 +#: ../../configuration/system/ip.rst:63 msgid "show commands" msgstr "show commands" -#: ../../configuration/service/dhcp-server.rst:289 +#: ../../configuration/service/dhcp-server.rst:345 msgid "siaddr" msgstr "siaddr" @@ -19877,16 +21860,20 @@ msgstr "siaddr" msgid "slow: Request partner to transmit LACPDUs every 30 seconds" msgstr "slow: Request partner to transmit LACPDUs every 30 seconds" -#: ../../configuration/service/dhcp-server.rst:308 -#: ../../configuration/service/dhcp-server.rst:310 +#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:366 msgid "smtp-server" msgstr "smtp-server" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "software filters can easily be added to hash over new protocols," -#: ../../configuration/highavailability/index.rst:353 +#: ../../configuration/highavailability/index.rst:363 msgid "source-hashing" msgstr "source-hashing" @@ -19898,11 +21885,11 @@ msgstr "spoke01-spoke04" msgid "spoke05" msgstr "spoke05" -#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:409 msgid "static-mapping" msgstr "static-mapping" -#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:379 msgid "static-route" msgstr "static-route" @@ -19912,7 +21899,7 @@ msgstr "static-route" msgid "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." msgstr "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." -#: ../../configuration/service/dhcp-server.rst:238 +#: ../../configuration/service/dhcp-server.rst:294 msgid "subnet-mask" msgstr "subnet-mask" @@ -19928,8 +21915,8 @@ msgstr "tail" msgid "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." msgstr "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." -#: ../../configuration/service/dhcp-server.rst:293 -#: ../../configuration/service/dhcp-server.rst:295 +#: ../../configuration/service/dhcp-server.rst:349 +#: ../../configuration/service/dhcp-server.rst:351 msgid "tftp-server-name" msgstr "tftp-server-name" @@ -19938,21 +21925,21 @@ msgstr "tftp-server-name" msgid "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." msgstr "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." -#: ../../configuration/service/dhcp-server.rst:242 -#: ../../configuration/service/dhcp-server.rst:244 +#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:300 msgid "time-offset" msgstr "time-offset" -#: ../../configuration/service/dhcp-server.rst:253 +#: ../../configuration/service/dhcp-server.rst:309 msgid "time-server" msgstr "time-server" -#: ../../configuration/service/dhcp-server.rst:255 +#: ../../configuration/service/dhcp-server.rst:311 msgid "time-servers" msgstr "time-servers" -#: ../../configuration/highavailability/index.rst:365 -#: ../../configuration/service/router-advert.rst:19 +#: ../../configuration/highavailability/index.rst:375 +#: ../../configuration/service/router-advert.rst:20 msgid "tunnel" msgstr "tunnel" @@ -19972,7 +21959,7 @@ msgstr "user" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "valid" @@ -19984,7 +21971,7 @@ msgstr "valid-lifetime" msgid "veth interfaces need to be created in pairs - it's called the peer name" msgstr "veth interfaces need to be created in pairs - it's called the peer name" -#: ../../configuration/service/router-advert.rst:20 +#: ../../configuration/service/router-advert.rst:21 msgid "vxlan" msgstr "vxlan" @@ -19996,11 +21983,11 @@ msgstr "warning" msgid "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." msgstr "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." -#: ../../configuration/highavailability/index.rst:352 +#: ../../configuration/highavailability/index.rst:362 msgid "weighted-least-connection" msgstr "weighted-least-connection" -#: ../../configuration/highavailability/index.rst:350 +#: ../../configuration/highavailability/index.rst:360 msgid "weighted-round-robin" msgstr "weighted-round-robin" @@ -20008,15 +21995,15 @@ msgstr "weighted-round-robin" msgid "while a *byte* is written as a single **b**." msgstr "while a *byte* is written as a single **b**." -#: ../../configuration/service/dhcp-server.rst:278 +#: ../../configuration/service/dhcp-server.rst:334 msgid "wins-server" msgstr "wins-server" -#: ../../configuration/service/router-advert.rst:21 +#: ../../configuration/service/router-advert.rst:22 msgid "wireguard" msgstr "wireguard" -#: ../../configuration/service/router-advert.rst:22 +#: ../../configuration/service/router-advert.rst:23 msgid "wireless" msgstr "wireless" @@ -20024,15 +22011,15 @@ msgstr "wireless" msgid "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." msgstr "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." -#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:384 msgid "wpad-url" msgstr "wpad-url" -#: ../../configuration/service/dhcp-server.rst:330 +#: ../../configuration/service/dhcp-server.rst:386 msgid "wpad-url, wpad-url code 252 = text" msgstr "wpad-url, wpad-url code 252 = text" -#: ../../configuration/service/router-advert.rst:23 +#: ../../configuration/service/router-advert.rst:24 msgid "wwan" msgstr "wwan" diff --git a/docs/_locale/de/contributing.pot b/docs/_locale/de/contributing.pot index 5f9d0337..9e7d1188 100644 --- a/docs/_locale/de/contributing.pot +++ b/docs/_locale/de/contributing.pot @@ -72,6 +72,18 @@ msgstr "Ein guter Ansatz für das Schreiben von Commit-Nachrichten ist es, einen msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "Eine Reihe von Flags kann eingerichtet werden, um das Verhalten von VyOS zur Laufzeit zu ändern. Diese Flags können entweder durch Umgebungsvariablen oder durch das Erstellen von Dateien umgeschaltet werden." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "Eine einzelne, kurze Zusammenfassung des Commits (empfohlen 50 Zeichen oder weniger, nicht mehr als 80 Zeichen), die ein Präfix der geänderten Komponente und die entsprechende Phabricator_ Referenz enthält, z.B. ``snmp: T1111:`` oder ``Ethernet: T2222:`` - mehrere Komponenten können verkettet werden, wie z.B. ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Auch Akronyme **müssen** groß geschrieben werden, um sie optisch von n msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Hinzufügen einer Datei zum Git-Index mit ``git add myfile``, oder für ein ganzes Verzeichnis: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Eine oder mehrere IP-Adressen hinzufügen" @@ -155,6 +167,14 @@ msgstr "Jedes \"modifizierte\" Paket kann sich auf eine geänderte Version von z msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Alle Pakete im Paketverzeichnis werden während des Builds zur iso hinzugefügt und ersetzen die Upstream-Pakete. Stellen Sie sicher, dass Sie diese löschen (sowohl die Quellverzeichnisse als auch die erstellten deb-Pakete), wenn Sie eine Iso aus reinen Upstream-Paketen erstellen wollen." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "Da Smoketests die Systemkonfiguration ändern und Sie aus der Ferne eingeloggt sind, kann es sein, dass Sie die Verbindung zum System verlieren." @@ -207,6 +227,10 @@ msgstr "Schlecht: radius (unless it's about the distance between a center of a c msgid "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." msgstr "Wenn man mutig ist und die neuesten Rolling Releases einsetzt, kann es manchmal zu Fehlern kommen, die wir in unserem Design übersehen haben. Diese Bugs sollten über Phabricator_ gemeldet werden, aber Sie können uns helfen, das Problem einzugrenzen. Loggen Sie sich in Ihr VyOS-System ein und wechseln Sie in den Konfigurationsmodus, indem Sie ``configure`` eingeben. Laden Sie nun Ihre Boot-Konfiguration neu, indem Sie einfach ``load`` gefolgt von Return eingeben." +#: ../../contributing/debugging.rst:160 +msgid "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +msgstr "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." + #: ../../contributing/debugging.rst:170 msgid "Boot Timing" msgstr "Startzeitpunkt" @@ -215,6 +239,10 @@ msgstr "Startzeitpunkt" msgid "Bug Report/Issue" msgstr "Fehlerbericht/Ereignis" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Erstellen" @@ -299,7 +327,7 @@ msgstr "Befehlsdefinitionen sind rein deklarativ und können keine Logik enthalt msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Übertragen Sie die Änderungen durch den Aufruf von ``git commit``. Bitte verwenden Sie eine aussagekräftige Commit-Überschrift (siehe oben) und vergessen Sie nicht, die Phabricator_ ID anzugeben." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Last Tests der Konfiguration" @@ -327,7 +355,7 @@ msgstr "Continuous Integration" msgid "Customize" msgstr "Anpassen" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "DHCP-Client und DHCPv6-Präfix-Delegation" @@ -436,9 +464,9 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "Jeder Änderungssatz muss konsistent (in sich geschlossen) sein! Beheben Sie nicht mehrere Fehler in einem einzigen Commit. Wenn Sie bereits an mehreren Fehlerkorrekturen in derselben Datei gearbeitet haben, verwenden Sie `git add --patch`, um nur die Teile, die sich auf das eine Problem beziehen, in Ihren nächsten Commit aufzunehmen." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" -msgstr "Beispiel:" +msgstr "Example:" #: ../../contributing/development.rst:559 #: ../../contributing/development.rst:571 @@ -469,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Feature Anfrage" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "Firmware" @@ -574,11 +610,15 @@ msgstr "Schrecklich: \"Tcp connection timeout\"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Schrecklich: \"frobnication algorithm.\"" -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "Wie können wir diesen Fehler reproduzieren?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "IP- und IPv6-Optionen" @@ -602,14 +642,30 @@ msgstr "Wenn ein Verb wesentlich ist, behalten Sie es bei. Zum Beispiel ist im H msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "Falls zutreffend, sollte ein Verweis auf einen vorhergehenden Commit gemacht werden, der diese Commits beim Durchsuchen der History gut miteinander verbindet: ``Nach dem Commit abcd12ef (\"snmp: this is a headline\") fehlt eine Python-Import-Anweisung, die folgende Ausnahme auslöst: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "Wenn in den Commits Ihres Pull-Requests keine Phabricator_ Referenz vorhanden ist, müssen wir Sie bitten, die Commit-Nachricht zu ändern. Andernfalls müssen wir sie ablehnen." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "Wenn Sie mutig genug sind, sich ein ISO-Image zu erstellen, das ein beliebiges modifiziertes Paket aus unserer GitHub-Organisation enthält, sind Sie hier genau richtig." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "Wenn Sie Ihren Kernel aktualisieren oder neue Treiber einbinden, benötigen Sie möglicherweise eine neue Firmware. Erstellen Sie ein neues ``vyos-linux-firmware`` Paket mit den enthaltenen Hilfsskripten." @@ -622,7 +678,7 @@ msgstr "In a big system, such as VyOS, that is comprised of multiple components, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "Darüber hinaus hilft dies auch beim Durchsuchen der GitHub-Codebasis auf einem mobilen Gerät, wenn Sie ein verrückter Wissenschaftler sind." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." @@ -686,10 +742,14 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Interface based tests" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Issues/Feature requests" @@ -702,6 +762,10 @@ msgstr "Issues or bugs are found in any software project. VyOS is not an excepti msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." @@ -758,7 +822,7 @@ msgstr "Linux Kernel" msgid "Live System" msgstr "Live System" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "MTU size" @@ -766,11 +830,11 @@ msgstr "MTU size" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Manual Smoketest Run" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Manual config load test" @@ -847,7 +911,7 @@ msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` t msgid "Old concept/syntax" msgstr "Old concept/syntax" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." @@ -859,7 +923,7 @@ msgstr "Once you have the required dependencies installed, you may proceed with msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own." @@ -884,6 +948,10 @@ msgid "Our StrongSWAN build differs from the upstream:" msgstr "Our StrongSWAN build differs from the upstream:" #: ../../contributing/testing.rst:20 +msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." +msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." + +#: ../../contributing/testing.rst:20 msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." @@ -895,7 +963,7 @@ msgstr "Our code is split into several modules. VyOS is composed of multiple ind msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." @@ -924,11 +992,15 @@ msgstr "Please submit your patches using the well-known GitHub pull-request agai msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/development.rst:254 +msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." +msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." + +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "Port description" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Port disable" @@ -952,7 +1024,11 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Provide as much information as you can" @@ -984,7 +1060,7 @@ msgstr "Rationale: this seems to be the unwritten standard in network device CLI msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Report a Bug" @@ -1017,6 +1093,10 @@ msgstr "Smoketests executes predefined VyOS CLI commands and checks if the desir msgid "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." msgstr "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +#: ../../contributing/testing.rst:45 +msgid "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +msgstr "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." + #: ../../contributing/build-vyos.rst:202 msgid "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." @@ -1025,7 +1105,7 @@ msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which ver msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." @@ -1061,6 +1141,14 @@ msgstr "Suppose you want to make a change in the webproxy script but yet you do msgid "System Startup" msgstr "System Startup" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." @@ -1121,11 +1209,15 @@ msgstr "The ``verify()`` function takes your internal representation of the conf msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1145,7 +1237,7 @@ msgstr "The default template processor for VyOS code is Jinja2_." msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." @@ -1185,7 +1277,7 @@ msgstr "The most obvious reasons could be:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "The original repo is at https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." @@ -1198,6 +1290,10 @@ msgid "The package ends up in deb_dist dir." msgstr "The package ends up in deb_dist dir." #: ../../contributing/debugging.rst:148 +msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" +msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" + +#: ../../contributing/debugging.rst:148 msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" @@ -1245,6 +1341,10 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" @@ -1261,6 +1361,10 @@ msgstr "This chapter lists those exceptions and gives you a brief overview what msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" @@ -1285,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Those common tests consists out of:" @@ -1314,10 +1418,18 @@ msgid "To debug issues in priorities or to see what's going on in the background msgstr "To debug issues in priorities or to see what's going on in the background you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution order of the scripts." #: ../../contributing/build-vyos.rst:373 +msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" +msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" + +#: ../../contributing/build-vyos.rst:373 msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" #: ../../contributing/debugging.rst:182 +msgid "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" +msgstr "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" + +#: ../../contributing/debugging.rst:182 msgid "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" msgstr "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" @@ -1325,6 +1437,10 @@ msgstr "To enable boot time graphing change the Kernel commandline and add the f msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." @@ -1385,7 +1501,7 @@ msgstr "Useful commands are:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLANs (QinQ and regular 802.1q)" @@ -1409,6 +1525,10 @@ msgstr "Virtualization Platforms" msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." +#: ../../contributing/debugging.rst:190 +msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." +msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." + #: ../../contributing/build-vyos.rst:168 msgid "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." msgstr "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." @@ -1425,6 +1545,10 @@ msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. O msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." @@ -1441,6 +1565,10 @@ msgstr "We now need to mount some required, volatile filesystems" msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" @@ -1485,6 +1613,10 @@ msgstr "When you are able to verify that it is actually a bug, spend some time t msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +#: ../../contributing/testing.rst:112 +msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." + #: ../../contributing/issues-features.rst:21 msgid "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." msgstr "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." @@ -1493,7 +1625,7 @@ msgstr "When you believe you have found a bug, it is always a good idea to verif msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "Which version of VyOS are you using? ``run show version``" @@ -1538,6 +1670,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1546,10 +1682,27 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + +#: ../../contributing/debugging.rst:166 +msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." + #: ../../contributing/development.rst:146 msgid "You then can proceed with cloning your fork or add a new remote to your local repository:" msgstr "You then can proceed with cloning your fork or add a new remote to your local repository:" @@ -1558,7 +1711,7 @@ msgstr "You then can proceed with cloning your fork or add a new remote to your msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." @@ -1666,6 +1819,10 @@ msgstr "commit:expression:" msgid "contine execution using ``cont``" msgstr "contine execution using ``cont``" +#: ../../contributing/debugging.rst:128 +msgid "continue execution using ``cont``" +msgstr "continue execution using ``cont``" + #: ../../contributing/development.rst:675 msgid "default:" msgstr "default:" diff --git a/docs/_locale/de/copyright.pot b/docs/_locale/de/copyright.pot index be71d158..8787d36c 100644 --- a/docs/_locale/de/copyright.pot +++ b/docs/_locale/de/copyright.pot @@ -13,6 +13,10 @@ msgid "Copyright Notice" msgstr "Copyright Notice" #: ../../copyright.md:3 +msgid "Copyright (C) 2018-2023 VyOS maintainers and contributors" +msgstr "Copyright (C) 2018-2023 VyOS maintainers and contributors" + +#: ../../copyright.md:3 msgid "Copyright (C) 2018-2024 VyOS maintainers and contributors" msgstr "Copyright (C) 2018-2024 VyOS maintainers and contributors" diff --git a/docs/_locale/de/documentation.pot b/docs/_locale/de/documentation.pot index 45c5de33..42d57656 100644 --- a/docs/_locale/de/documentation.pot +++ b/docs/_locale/de/documentation.pot @@ -8,27 +8,47 @@ msgstr "" "Language: de\n" "Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" -#: ../../documentation.rst:239 +#: ../../documentation.rst:216 msgid "16bit ASN: ``64496 - 64511``" msgstr "16bit ASN: ``64496 - 64511``" -#: ../../documentation.rst:240 +#: ../../documentation.rst:84 +msgid "1. Theoretical information" +msgstr "1. Theoretical information" + +#: ../../documentation.rst:92 +msgid "2. Configuration description" +msgstr "2. Configuration description" + +#: ../../documentation.rst:217 msgid "32bit ASN: ``65536 - 65551``" msgstr "32bit ASN: ``65536 - 65551``" -#: ../../documentation.rst:182 +#: ../../documentation.rst:99 +msgid "3. Configuration examples" +msgstr "3. Configuration examples" + +#: ../../documentation.rst:105 +msgid "4. Known issues" +msgstr "4. Known issues" + +#: ../../documentation.rst:113 +msgid "5. Debugging" +msgstr "5. Debugging" + +#: ../../documentation.rst:159 msgid "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." msgstr "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." -#: ../../documentation.rst:103 +#: ../../documentation.rst:408 msgid "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." msgstr "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." -#: ../../documentation.rst:229 +#: ../../documentation.rst:206 msgid "Address space" msgstr "Address space" -#: ../../documentation.rst:390 +#: ../../documentation.rst:58 msgid "All RST files must follow the same TOC Level syntax and have to start with" msgstr "All RST files must follow the same TOC Level syntax and have to start with" @@ -36,7 +56,7 @@ msgstr "All RST files must follow the same TOC Level syntax and have to start wi msgid "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." msgstr "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." -#: ../../documentation.rst:53 +#: ../../documentation.rst:51 msgid "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." msgstr "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." @@ -48,23 +68,23 @@ msgstr "Anything else" msgid "Anything else that is not a configuration or an operation command has no predefined structure." msgstr "Anything else that is not a configuration or an operation command has no predefined structure." -#: ../../documentation.rst:257 +#: ../../documentation.rst:234 msgid "Autolinter" msgstr "Autolinter" -#: ../../documentation.rst:94 +#: ../../documentation.rst:399 msgid "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." msgstr "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." -#: ../../documentation.rst:123 +#: ../../documentation.rst:428 msgid "Check your configured remote repositories:" msgstr "Check your configured remote repositories:" -#: ../../documentation.rst:78 +#: ../../documentation.rst:383 msgid "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" msgstr "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" -#: ../../documentation.rst:107 +#: ../../documentation.rst:412 msgid "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." msgstr "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." @@ -72,55 +92,67 @@ msgstr "Commit your changes with the message, ``$ git commit -m \"<commit messag msgid "Configuration mode pages" msgstr "Configuration mode pages" -#: ../../documentation.rst:84 +#: ../../documentation.rst:389 msgid "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" msgstr "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" -#: ../../documentation.rst:180 +#: ../../documentation.rst:157 msgid "Cross-References" msgstr "Cross-References" -#: ../../documentation.rst:268 +#: ../../documentation.rst:245 msgid "Custom Sphinx-doc Markup" msgstr "Custom Sphinx-doc Markup" -#: ../../documentation.rst:270 +#: ../../documentation.rst:247 msgid "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." msgstr "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." -#: ../../documentation.rst:45 +#: ../../documentation.rst:94 +msgid "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." +msgstr "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." + +#: ../../documentation.rst:115 +msgid "Described procedures for debugging a service:" +msgstr "Described procedures for debugging a service:" + +#: ../../documentation.rst:43 msgid "Don't forget to update ``index.rst`` when adding a new node." msgstr "Don't forget to update ``index.rst`` when adding a new node." -#: ../../documentation.rst:259 +#: ../../documentation.rst:236 msgid "Each GitHub pull request is automatically linted to check the address space and line length." msgstr "Each GitHub pull request is automatically linted to check the address space and line length." -#: ../../documentation.rst:252 +#: ../../documentation.rst:81 +msgid "Each page must contain the following parts:" +msgstr "Each page must contain the following parts:" + +#: ../../documentation.rst:229 msgid "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." msgstr "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." -#: ../../documentation.rst:292 +#: ../../documentation.rst:269 msgid "For an inline configuration level command, use ``:cfgcmd:``" msgstr "For an inline configuration level command, use ``:cfgcmd:``" -#: ../../documentation.rst:328 +#: ../../documentation.rst:305 msgid "For an inline operational level command, use ``:opcmd:``" msgstr "For an inline operational level command, use ``:opcmd:``" -#: ../../documentation.rst:186 +#: ../../documentation.rst:163 msgid "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." msgstr "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." -#: ../../documentation.rst:405 +#: ../../documentation.rst:70 msgid "For example:" msgstr "For example:" -#: ../../documentation.rst:76 +#: ../../documentation.rst:381 msgid "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" msgstr "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" -#: ../../documentation.rst:58 +#: ../../documentation.rst:363 msgid "Forking Workflow" msgstr "Forking Workflow" @@ -128,6 +160,10 @@ msgstr "Forking Workflow" msgid "Formating and Sphinxmarkup" msgstr "Formating and Sphinxmarkup" +#: ../../documentation.rst:127 +msgid "Formatting and Sphinxmarkup" +msgstr "Formatting and Sphinxmarkup" + #: ../../documentation.rst:432 msgid "General concepts for troubleshooting and detailed process descriptions belong here." msgstr "General concepts for troubleshooting and detailed process descriptions belong here." @@ -140,7 +176,11 @@ msgstr "Guidelines" msgid "If there some troubleshooting guides related to the commands. Explain it in the next optional part." msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part." -#: ../../documentation.rst:143 +#: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" @@ -152,43 +192,43 @@ msgstr "If you are willing to contribute to our documentation this is the defini msgid "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." msgstr "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." -#: ../../documentation.rst:417 +#: ../../documentation.rst:75 msgid "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." msgstr "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." -#: ../../documentation.rst:50 +#: ../../documentation.rst:48 msgid "Indent with two spaces." msgstr "Indent with two spaces." -#: ../../documentation.rst:81 +#: ../../documentation.rst:386 msgid "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" msgstr "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" -#: ../../documentation.rst:49 +#: ../../documentation.rst:47 msgid "Leave a newline before and after a header." msgstr "Leave a newline before and after a header." -#: ../../documentation.rst:250 +#: ../../documentation.rst:227 msgid "Limit all lines to a maximum of 80 characters." msgstr "Limit all lines to a maximum of 80 characters." -#: ../../documentation.rst:248 +#: ../../documentation.rst:225 msgid "Line length" msgstr "Line length" -#: ../../documentation.rst:87 +#: ../../documentation.rst:392 msgid "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." msgstr "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." -#: ../../documentation.rst:242 +#: ../../documentation.rst:219 msgid "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" msgstr "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" -#: ../../documentation.rst:231 +#: ../../documentation.rst:208 msgid "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" msgstr "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" -#: ../../documentation.rst:118 +#: ../../documentation.rst:423 msgid "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" msgstr "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" @@ -200,39 +240,43 @@ msgstr "Operation mode commands that do not fit in a related configuration mode msgid "Operation mode pages" msgstr "Operation mode pages" -#: ../../documentation.rst:385 +#: ../../documentation.rst:56 msgid "Page content" msgstr "Page content" -#: ../../documentation.rst:244 +#: ../../documentation.rst:221 msgid "Please do not use other public address space." msgstr "Please do not use other public address space." -#: ../../documentation.rst:47 +#: ../../documentation.rst:101 +msgid "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." +msgstr "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." + +#: ../../documentation.rst:45 msgid "Properly quote commands, filenames and brief code snippets with double backticks." msgstr "Properly quote commands, filenames and brief code snippets with double backticks." -#: ../../documentation.rst:112 +#: ../../documentation.rst:417 msgid "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" msgstr "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" -#: ../../documentation.rst:420 +#: ../../documentation.rst:78 msgid "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." msgstr "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." -#: ../../documentation.rst:262 +#: ../../documentation.rst:239 msgid "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." msgstr "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." -#: ../../documentation.rst:147 +#: ../../documentation.rst:124 msgid "Style Guide" msgstr "Style Guide" -#: ../../documentation.rst:114 +#: ../../documentation.rst:419 msgid "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." msgstr "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." -#: ../../documentation.rst:153 +#: ../../documentation.rst:130 msgid "TOC Level" msgstr "TOC Level" @@ -240,7 +284,7 @@ msgstr "TOC Level" msgid "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." msgstr "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." -#: ../../documentation.rst:60 +#: ../../documentation.rst:365 msgid "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." msgstr "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." @@ -248,7 +292,7 @@ msgstr "The Forking Workflow is fundamentally different from other popular Git w msgid "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." msgstr "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." -#: ../../documentation.rst:401 +#: ../../documentation.rst:66 msgid "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." msgstr "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." @@ -260,51 +304,59 @@ msgstr "The documentation has 3 different types of pages. The same kind of pages msgid "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." msgstr "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." -#: ../../documentation.rst:41 +#: ../../documentation.rst:39 msgid "The following is a quick summary of the rules:" msgstr "The following is a quick summary of the rules:" -#: ../../documentation.rst:66 +#: ../../documentation.rst:371 msgid "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." msgstr "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." -#: ../../documentation.rst:199 +#: ../../documentation.rst:176 msgid "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." msgstr "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." +#: ../../documentation.rst:86 +msgid "Theoretical information required for users to understand the next document sections:" +msgstr "Theoretical information required for users to understand the next document sections:" + #: ../../documentation.rst:35 msgid "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." msgstr "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." -#: ../../documentation.rst:299 +#: ../../documentation.rst:107 +msgid "This section must contain a list of:" +msgstr "This section must contain a list of:" + +#: ../../documentation.rst:276 msgid "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." msgstr "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." -#: ../../documentation.rst:337 +#: ../../documentation.rst:314 msgid "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." msgstr "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." -#: ../../documentation.rst:46 +#: ../../documentation.rst:44 msgid "Try not to exceed 80 characters per line, but don't break URLs over this." msgstr "Try not to exceed 80 characters per line, but don't break URLs over this." -#: ../../documentation.rst:241 +#: ../../documentation.rst:218 msgid "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" msgstr "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" -#: ../../documentation.rst:73 +#: ../../documentation.rst:378 msgid "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." msgstr "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." -#: ../../documentation.rst:43 +#: ../../documentation.rst:41 msgid "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." msgstr "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." -#: ../../documentation.rst:48 +#: ../../documentation.rst:46 msgid "Use literal blocks for longer snippets." msgstr "Use literal blocks for longer snippets." -#: ../../documentation.rst:99 +#: ../../documentation.rst:404 msgid "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." msgstr "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." @@ -312,35 +364,39 @@ msgstr "View modified files by calling ``$ git status``. You will get an overvie msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +#: ../../documentation.rst:20 +msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." + #: ../../documentation.rst:9 msgid "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." msgstr "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." -#: ../../documentation.rst:155 +#: ../../documentation.rst:132 msgid "We use the following syntax for Headlines." msgstr "We use the following syntax for Headlines." -#: ../../documentation.rst:277 +#: ../../documentation.rst:254 msgid "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." msgstr "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." -#: ../../documentation.rst:316 +#: ../../documentation.rst:293 msgid "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." msgstr "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." -#: ../../documentation.rst:51 +#: ../../documentation.rst:49 msgid "When in doubt, follow the style of existing documentation." msgstr "When in doubt, follow the style of existing documentation." -#: ../../documentation.rst:375 +#: ../../documentation.rst:352 msgid "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." msgstr "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." -#: ../../documentation.rst:319 +#: ../../documentation.rst:296 msgid "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." -#: ../../documentation.rst:282 +#: ../../documentation.rst:259 msgid "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." @@ -352,66 +408,98 @@ msgstr "Write Documentation" msgid "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." msgstr "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." -#: ../../documentation.rst:133 +#: ../../documentation.rst:29 +msgid "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." +msgstr "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." + +#: ../../documentation.rst:438 msgid "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." msgstr "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." -#: ../../documentation.rst:235 +#: ../../documentation.rst:212 msgid "``192.0.2.0/24``" msgstr "``192.0.2.0/24``" -#: ../../documentation.rst:236 +#: ../../documentation.rst:213 msgid "``198.51.100.0/24``" msgstr "``198.51.100.0/24``" -#: ../../documentation.rst:238 +#: ../../documentation.rst:215 msgid "``2001:db8::/32``" msgstr "``2001:db8::/32``" -#: ../../documentation.rst:237 +#: ../../documentation.rst:214 msgid "``203.0.113.0/24``" msgstr "``203.0.113.0/24``" -#: ../../documentation.rst:194 +#: ../../documentation.rst:171 msgid "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" msgstr "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" -#: ../../documentation.rst:190 +#: ../../documentation.rst:167 msgid "``:ref:`configuration/interfaces/ethernet:vlan``" msgstr "``:ref:`configuration/interfaces/ethernet:vlan``" -#: ../../documentation.rst:407 +#: ../../documentation.rst:72 msgid "``set firewall zone`` is written in ``firewall/zone.rst``" msgstr "``set firewall zone`` is written in ``firewall/zone.rst``" -#: ../../documentation.rst:408 +#: ../../documentation.rst:73 msgid "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" msgstr "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" -#: ../../documentation.rst:275 +#: ../../documentation.rst:88 +msgid "a simple explanation of what is this page about, why or when it is required to be used" +msgstr "a simple explanation of what is this page about, why or when it is required to be used" + +#: ../../documentation.rst:252 msgid "cfgcmd" msgstr "cfgcmd" -#: ../../documentation.rst:335 +#: ../../documentation.rst:312 msgid "cmdinclude" msgstr "cmdinclude" -#: ../../documentation.rst:197 +#: ../../documentation.rst:174 msgid "handle build errors" msgstr "handle build errors" -#: ../../documentation.rst:314 +#: ../../documentation.rst:117 +msgid "how to collect logs or other debugging information (like `show` commands output)" +msgstr "how to collect logs or other debugging information (like `show` commands output)" + +#: ../../documentation.rst:118 +msgid "how to read and what to search for in logs and collected information" +msgstr "how to read and what to search for in logs and collected information" + +#: ../../documentation.rst:109 +msgid "known issues or potential problems for the service or use case" +msgstr "known issues or potential problems for the service or use case" + +#: ../../documentation.rst:291 msgid "opcmd" msgstr "opcmd" -#: ../../documentation.rst:346 +#: ../../documentation.rst:89 +msgid "references to standards, RFCs" +msgstr "references to standards, RFCs" + +#: ../../documentation.rst:323 msgid "the content of interface-address.txt looks like this" msgstr "the content of interface-address.txt looks like this" -#: ../../documentation.rst:192 +#: ../../documentation.rst:169 msgid "to use an alternative hyperlink use it this way:" msgstr "to use an alternative hyperlink use it this way:" -#: ../../documentation.rst:373 +#: ../../documentation.rst:350 msgid "vytask" msgstr "vytask" + +#: ../../documentation.rst:119 +msgid "what are indicators of good and bad states in debugging outputs" +msgstr "what are indicators of good and bad states in debugging outputs" + +#: ../../documentation.rst:110 +msgid "workarounds for known issues (if any exist)" +msgstr "workarounds for known issues (if any exist)" diff --git a/docs/_locale/de/installation.pot b/docs/_locale/de/installation.pot index 6adeb7fe..f4eb678e 100644 --- a/docs/_locale/de/installation.pot +++ b/docs/_locale/de/installation.pot @@ -212,6 +212,10 @@ msgstr "Add one or more routes for networks you want to pass through the VyOS VM msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." +#: ../../installation/cloud/aws.rst:27 +msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." +msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." + #: ../../installation/vyos-on-baremetal.rst:394 msgid "Advanced > Serial Port Console Redirection > Console Redirection Settings:" msgstr "Advanced > Serial Port Console Redirection > Console Redirection Settings:" @@ -465,6 +469,10 @@ msgstr "Clients (where VyOS is to be installed) with a PXE-enabled NIC" msgid "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." msgstr "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +#: ../../installation/cloud/aws.rst:88 +msgid "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +msgstr "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." + #: ../../installation/cloud/aws.rst:82 msgid "CloudWatch SSM Configuration creation" msgstr "CloudWatch SSM Configuration creation" @@ -1303,6 +1311,10 @@ msgstr "Requirements" msgid "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." msgstr "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +#: ../../installation/cloud/aws.rst:69 +msgid "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +msgstr "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." + #: ../../installation/install.rst:74 msgid "Rolling Release" msgstr "Rolling Release" diff --git a/docs/_locale/de/quick-start.pot b/docs/_locale/de/quick-start.pot index 90903260..108f972b 100644 --- a/docs/_locale/de/quick-start.pot +++ b/docs/_locale/de/quick-start.pot @@ -101,6 +101,10 @@ msgid "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAG msgstr "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:" #: ../../quick-start.rst:243 +msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." +msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." + +#: ../../quick-start.rst:243 msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." @@ -292,6 +296,10 @@ msgstr "To make firewall configuration easier, we can create groups of interface msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." +#: ../../quick-start.rst:164 +msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." +msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." + #: ../../quick-start.rst:90 msgid "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" msgstr "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" diff --git a/docs/_locale/en/LC_MESSAGES/automation.mo b/docs/_locale/en/LC_MESSAGES/automation.mo Binary files differindex 49ed194b..aaaeacc8 100644 --- a/docs/_locale/en/LC_MESSAGES/automation.mo +++ b/docs/_locale/en/LC_MESSAGES/automation.mo diff --git a/docs/_locale/en/LC_MESSAGES/cli.mo b/docs/_locale/en/LC_MESSAGES/cli.mo Binary files differindex 43736169..4a9800a8 100644 --- a/docs/_locale/en/LC_MESSAGES/cli.mo +++ b/docs/_locale/en/LC_MESSAGES/cli.mo diff --git a/docs/_locale/en/LC_MESSAGES/configexamples.mo b/docs/_locale/en/LC_MESSAGES/configexamples.mo Binary files differindex 5b6b8041..259708b2 100644 --- a/docs/_locale/en/LC_MESSAGES/configexamples.mo +++ b/docs/_locale/en/LC_MESSAGES/configexamples.mo diff --git a/docs/_locale/en/LC_MESSAGES/configuration.mo b/docs/_locale/en/LC_MESSAGES/configuration.mo Binary files differindex abedbe89..690b62d0 100644 --- a/docs/_locale/en/LC_MESSAGES/configuration.mo +++ b/docs/_locale/en/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/en/LC_MESSAGES/contributing.mo b/docs/_locale/en/LC_MESSAGES/contributing.mo Binary files differindex ef064a92..36a82404 100644 --- a/docs/_locale/en/LC_MESSAGES/contributing.mo +++ b/docs/_locale/en/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/en/LC_MESSAGES/copyright.mo b/docs/_locale/en/LC_MESSAGES/copyright.mo Binary files differindex b5e3d67d..d6b0d72e 100644 --- a/docs/_locale/en/LC_MESSAGES/copyright.mo +++ b/docs/_locale/en/LC_MESSAGES/copyright.mo diff --git a/docs/_locale/en/LC_MESSAGES/documentation.mo b/docs/_locale/en/LC_MESSAGES/documentation.mo Binary files differindex 5f5250aa..b404d64c 100644 --- a/docs/_locale/en/LC_MESSAGES/documentation.mo +++ b/docs/_locale/en/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/en/LC_MESSAGES/installation.mo b/docs/_locale/en/LC_MESSAGES/installation.mo Binary files differindex 19a1ac80..abb49ad2 100644 --- a/docs/_locale/en/LC_MESSAGES/installation.mo +++ b/docs/_locale/en/LC_MESSAGES/installation.mo diff --git a/docs/_locale/en/LC_MESSAGES/quick-start.mo b/docs/_locale/en/LC_MESSAGES/quick-start.mo Binary files differindex c1b5d942..232f254b 100644 --- a/docs/_locale/en/LC_MESSAGES/quick-start.mo +++ b/docs/_locale/en/LC_MESSAGES/quick-start.mo diff --git a/docs/_locale/es/LC_MESSAGES/automation.mo b/docs/_locale/es/LC_MESSAGES/automation.mo Binary files differindex 3298d9cf..861546f9 100644 --- a/docs/_locale/es/LC_MESSAGES/automation.mo +++ b/docs/_locale/es/LC_MESSAGES/automation.mo diff --git a/docs/_locale/es/LC_MESSAGES/cli.mo b/docs/_locale/es/LC_MESSAGES/cli.mo Binary files differindex 8d45db97..c650bc45 100644 --- a/docs/_locale/es/LC_MESSAGES/cli.mo +++ b/docs/_locale/es/LC_MESSAGES/cli.mo diff --git a/docs/_locale/es/LC_MESSAGES/configexamples.mo b/docs/_locale/es/LC_MESSAGES/configexamples.mo Binary files differindex e22b1e9c..f3c00d5f 100644 --- a/docs/_locale/es/LC_MESSAGES/configexamples.mo +++ b/docs/_locale/es/LC_MESSAGES/configexamples.mo diff --git a/docs/_locale/es/LC_MESSAGES/configuration.mo b/docs/_locale/es/LC_MESSAGES/configuration.mo Binary files differindex d0658d54..fd5da1d5 100644 --- a/docs/_locale/es/LC_MESSAGES/configuration.mo +++ b/docs/_locale/es/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/es/LC_MESSAGES/contributing.mo b/docs/_locale/es/LC_MESSAGES/contributing.mo Binary files differindex 1f87ad10..cf0faaa8 100644 --- a/docs/_locale/es/LC_MESSAGES/contributing.mo +++ b/docs/_locale/es/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/es/LC_MESSAGES/copyright.mo b/docs/_locale/es/LC_MESSAGES/copyright.mo Binary files differindex 262368c4..f0decd2c 100644 --- a/docs/_locale/es/LC_MESSAGES/copyright.mo +++ b/docs/_locale/es/LC_MESSAGES/copyright.mo diff --git a/docs/_locale/es/LC_MESSAGES/documentation.mo b/docs/_locale/es/LC_MESSAGES/documentation.mo Binary files differindex 7c167f24..97ee8dba 100644 --- a/docs/_locale/es/LC_MESSAGES/documentation.mo +++ b/docs/_locale/es/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/es/LC_MESSAGES/installation.mo b/docs/_locale/es/LC_MESSAGES/installation.mo Binary files differindex 1fde49bd..d0b2b61f 100644 --- a/docs/_locale/es/LC_MESSAGES/installation.mo +++ b/docs/_locale/es/LC_MESSAGES/installation.mo diff --git a/docs/_locale/es/LC_MESSAGES/quick-start.mo b/docs/_locale/es/LC_MESSAGES/quick-start.mo Binary files differindex 0a3a4fbb..ddd34e9a 100644 --- a/docs/_locale/es/LC_MESSAGES/quick-start.mo +++ b/docs/_locale/es/LC_MESSAGES/quick-start.mo diff --git a/docs/_locale/es/automation.pot b/docs/_locale/es/automation.pot index af30a70e..1bef6c23 100644 --- a/docs/_locale/es/automation.pot +++ b/docs/_locale/es/automation.pot @@ -8,55 +8,100 @@ msgstr "" "Language: es\n" "Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" +#: ../../automation/terraform/index.rst:15 +msgid "# terraformAZ # terraformvSphere # terraformGoogle" +msgstr "# terraformAZ # terraformvSphere # terraformGoogle" + +#: ../../automation/vyos-terraform.rst:707 +msgid "#az login" +msgstr "#az login" + +#: ../../automation/vyos-terraform.rst:261 +#: ../../automation/vyos-terraform.rst:283 +#: ../../automation/vyos-terraform.rst:711 +#: ../../automation/vyos-terraform.rst:731 +#: ../../automation/vyos-terraform.rst:1008 +#: ../../automation/vyos-terraform.rst:1029 +msgid "#cd /your folder" +msgstr "#cd /your folder" + +#: ../../automation/vyos-terraform.rst:287 +#: ../../automation/vyos-terraform.rst:735 +#: ../../automation/vyos-terraform.rst:1033 +msgid "#terraform apply" +msgstr "#terraform apply" + +#: ../../automation/vyos-terraform.rst:263 +#: ../../automation/vyos-terraform.rst:713 +#: ../../automation/vyos-terraform.rst:1010 +msgid "#terraform init" +msgstr "#terraform init" + +#: ../../automation/vyos-terraform.rst:285 +#: ../../automation/vyos-terraform.rst:733 +#: ../../automation/vyos-terraform.rst:1031 +msgid "#terraform plan" +msgstr "#terraform plan" + +#: ../../automation/vyos-terraform.rst:289 +#: ../../automation/vyos-terraform.rst:737 +#: ../../automation/vyos-terraform.rst:1035 +msgid "#yes" +msgstr "#yes" + +#: ../../automation/cloud-init.rst:366 +msgid "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." +msgstr "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." + #: ../../automation/cloud-init.rst:363 msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." msgstr "**NOTA**: tenga cuidado al copiar y pegar comandos anteriores. Es posible que sea necesario corregir las comillas dobles." -#: ../../automation/cloud-init.rst:305 +#: ../../automation/cloud-init.rst:308 msgid "**meta-data**: empty file (required)." msgstr "**metadatos**: archivo vacío (obligatorio)." -#: ../../automation/cloud-init.rst:300 +#: ../../automation/cloud-init.rst:303 msgid "**network-config**: file that will indicate to avoid dhcp client on first interface." msgstr "**network-config**: archivo que indicará evitar el cliente dhcp en la primera interfaz." -#: ../../automation/cloud-init.rst:333 +#: ../../automation/cloud-init.rst:336 msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface." msgstr "El archivo **network-config** solo tiene una configuración que deshabilita el cliente dhcp automático en la primera interfaz." -#: ../../automation/cloud-init.rst:303 +#: ../../automation/cloud-init.rst:306 msgid "**user-data**: includes vyos-commands." msgstr "**datos de usuario**: incluye comandos vyos." -#: ../../automation/cloud-init.rst:314 +#: ../../automation/cloud-init.rst:317 msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" msgstr "El archivo **datos de usuario** debe comenzar con ``#cloud-config`` y contiene comandos vyos. Por ejemplo:" -#: ../../automation/vyos-api.rst:322 +#: ../../automation/vyos-api.rst:355 msgid "/config-file" msgstr "/archivo de configuración" -#: ../../automation/vyos-api.rst:265 +#: ../../automation/vyos-api.rst:298 msgid "/configure" msgstr "/configurar" -#: ../../automation/vyos-api.rst:246 +#: ../../automation/vyos-api.rst:278 msgid "/generate" msgstr "/generar" -#: ../../automation/vyos-api.rst:184 +#: ../../automation/vyos-api.rst:216 msgid "/image" msgstr "/imagen" -#: ../../automation/vyos-api.rst:165 +#: ../../automation/vyos-api.rst:197 msgid "/poweroff" msgstr "/poweroff" -#: ../../automation/vyos-api.rst:147 +#: ../../automation/vyos-api.rst:179 msgid "/reboot" msgstr "/reboot" -#: ../../automation/vyos-api.rst:129 +#: ../../automation/vyos-api.rst:161 msgid "/reset" msgstr "/reiniciar" @@ -64,19 +109,276 @@ msgstr "/reiniciar" msgid "/retrieve" msgstr "/recuperar" -#: ../../automation/vyos-api.rst:222 +#: ../../automation/vyos-api.rst:254 msgid "/show" msgstr "/espectáculo" +#: ../../automation/vyos-terraform.rst:993 +msgid "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" +msgstr "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:61 +msgid "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/vyos-terraform.rst:692 +msgid "1.1 Create an account with Azure" +msgstr "1.1 Create an account with Azure" + +#: ../../automation/vyos-terraform.rst:243 +msgid "1.2 Create a key pair and download your .pem key" +msgstr "1.2 Create a key pair and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:63 +msgid "1.2 Create a key pair_ and download your .pem key" +msgstr "1.2 Create a key pair_ and download your .pem key" + +#: ../../automation/vyos-terraform.rst:245 +msgid "1.3 Create a security group for the new VyOS instance" +msgstr "1.3 Create a security group for the new VyOS instance" + +#: ../../automation/terraform/terraformAWS.rst:70 +msgid "1.3 Create a security group_ for the new VyOS instance and open all traffic" +msgstr "1.3 Create a security group_ for the new VyOS instance and open all traffic" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/terraform/terraformAWS.rst:266 +msgid "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." +msgstr "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." + +#: ../../automation/terraform/terraformvSphere.rst:23 +msgid "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" +msgstr "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:77 +#: ../../automation/terraform/terraformAZ.rst:54 +#: ../../automation/terraform/terraformGoogle.rst:76 +#: ../../automation/terraform/terraformvSphere.rst:53 +msgid "1 Create an UNIX instance whenever you want (local, cloud, and so on)" +msgstr "1 Create an UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:54 +#: ../../automation/terraform/terraformAZ.rst:26 +#: ../../automation/terraform/terraformGoogle.rst:52 +#: ../../automation/terraform/terraformvSphere.rst:29 +msgid "1 Create an UNIX or Windows instance" +msgstr "1 Create an UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:29 +msgid "1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/terraform/terraformAZ.rst:21 +msgid "1 Create an account with Azure" +msgstr "1 Create an account with Azure" + +#: ../../automation/terraform/terraformGoogle.rst:22 +msgid "1 Create an account with google cloud and a new project" +msgstr "1 Create an account with google cloud and a new project" + +#: ../../automation/terraform/terraformGoogle.rst:344 +msgid "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." +msgstr "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." + +#: ../../automation/terraform/terraformAWS.rst:86 +msgid "2.1 Create a0 UNIX or Windows instance" +msgstr "2.1 Create a0 UNIX or Windows instance" + +#: ../../automation/vyos-terraform.rst:250 +#: ../../automation/vyos-terraform.rst:697 +#: ../../automation/vyos-terraform.rst:998 +msgid "2.1 Create a UNIX or Windows instance" +msgstr "2.1 Create a UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:88 +msgid "2.2 Download and install Terraform" +msgstr "2.2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:90 +msgid "2.3 Create the folder for example /root/awsterraform" +msgstr "2.3 Create the folder for example /root/awsterraform" + +#: ../../automation/vyos-terraform.rst:254 +msgid "2.3 Create the folder for example ../awsvyos/" +msgstr "2.3 Create the folder for example ../awsvyos/" + +#: ../../automation/vyos-terraform.rst:701 +msgid "2.3 Create the folder for example ../azvyos/" +msgstr "2.3 Create the folder for example ../azvyos/" + +#: ../../automation/vyos-terraform.rst:1002 +msgid "2.3 Create the folder for example ../vsphere/" +msgstr "2.3 Create the folder for example ../vsphere/" + +#: ../../automation/vyos-terraform.rst:1004 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project" + +#: ../../automation/vyos-terraform.rst:703 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" + +#: ../../automation/terraform/terraformAWS.rst:96 +msgid "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" +msgstr "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" + +#: ../../automation/vyos-terraform.rst:256 +msgid "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" +msgstr "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" + +#: ../../automation/vyos-terraform.rst:705 +msgid "2.5 Login with Azure using the command" +msgstr "2.5 Login with Azure using the command" + +#: ../../automation/terraform/terraformAWS.rst:98 +msgid "2.5 Type the commands :" +msgstr "2.5 Type the commands :" + +#: ../../automation/terraform/terraformAZ.rst:44 +msgid "2.6 Type the commands :" +msgstr "2.6 Type the commands :" + +#: ../../automation/terraform/terraformAWS.rst:31 +msgid "2 Create a key pair_ and download your .pem key" +msgstr "2 Create a key pair_ and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:79 +#: ../../automation/terraform/terraformAZ.rst:56 +#: ../../automation/terraform/terraformGoogle.rst:78 +#: ../../automation/terraform/terraformvSphere.rst:55 +msgid "2 Download and install Ansible" +msgstr "2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:56 +#: ../../automation/terraform/terraformAZ.rst:28 +#: ../../automation/terraform/terraformGoogle.rst:54 +#: ../../automation/terraform/terraformvSphere.rst:31 +msgid "2 Download and install Terraform" +msgstr "2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:270 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" + +#: ../../automation/terraform/terraformGoogle.rst:347 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" + +#: ../../automation/vyos-terraform.rst:268 +#: ../../automation/vyos-terraform.rst:718 +#: ../../automation/vyos-terraform.rst:1016 +msgid "3.1 Create a UNIX instance" +msgstr "3.1 Create a UNIX instance" + +#: ../../automation/terraform/terraformAWS.rst:109 +msgid "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" +msgstr "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:111 +msgid "3.2 Download and install Ansible" +msgstr "3.2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:113 +msgid "3.3 Create the folder for example /root/aws/" +msgstr "3.3 Create the folder for example /root/aws/" + +#: ../../automation/vyos-terraform.rst:722 +msgid "3.3 Create the folder for example /root/az/" +msgstr "3.3 Create the folder for example /root/az/" + +#: ../../automation/vyos-terraform.rst:1020 +msgid "3.3 Create the folder for example /root/vsphere/" +msgstr "3.3 Create the folder for example /root/vsphere/" + +#: ../../automation/vyos-terraform.rst:274 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" + +#: ../../automation/vyos-terraform.rst:724 +#: ../../automation/vyos-terraform.rst:1022 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" + +#: ../../automation/terraform/terraformAWS.rst:115 +msgid "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAWS.rst:81 +msgid "3 Create the folder for example /root/aws/" +msgstr "3 Create the folder for example /root/aws/" + +#: ../../automation/terraform/terraformAWS.rst:58 +msgid "3 Create the folder for example /root/awsterraform" +msgstr "3 Create the folder for example /root/awsterraform" + +#: ../../automation/terraform/terraformAZ.rst:58 +msgid "3 Create the folder for example /root/az/" +msgstr "3 Create the folder for example /root/az/" + +#: ../../automation/terraform/terraformAZ.rst:30 +msgid "3 Create the folder for example /root/azvyos/" +msgstr "3 Create the folder for example /root/azvyos/" + +#: ../../automation/terraform/terraformGoogle.rst:56 +msgid "3 Create the folder for example /root/google" +msgstr "3 Create the folder for example /root/google" + +#: ../../automation/terraform/terraformGoogle.rst:80 +msgid "3 Create the folder for example /root/google/" +msgstr "3 Create the folder for example /root/google/" + +#: ../../automation/terraform/terraformvSphere.rst:33 +msgid "3 Create the folder for example /root/vsphereterraform" +msgstr "3 Create the folder for example /root/vsphereterraform" + +#: ../../automation/terraform/terraformvSphere.rst:57 +msgid "3 Create the folder for example /root/vsphereterraform/" +msgstr "3 Create the folder for example /root/vsphereterraform/" + +#: ../../automation/terraform/terraformAWS.rst:123 +msgid "4.1 Type the commands on your Terrafom instance:" +msgstr "4.1 Type the commands on your Terrafom instance:" + +#: ../../automation/terraform/terraformAWS.rst:83 +msgid "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAZ.rst:60 +msgid "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" +msgstr "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" + +#: ../../automation/terraform/terraformGoogle.rst:82 +msgid "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" +msgstr "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" + +#: ../../automation/terraform/terraformvSphere.rst:59 +msgid "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" +msgstr "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" + #: ../../automation/vyos-api.rst:41 msgid "API Endpoints" msgstr "Puntos finales de la API" +#: ../../automation/terraform/terraformAWS.rst:26 +msgid "AWS" +msgstr "AWS" + +#: ../../automation/vyos-terraform.rst:233 +msgid "AWS_terraform_ansible_single_vyos_instance" +msgstr "AWS_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:273 +msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." + #: ../../automation/cloud-init.rst:270 msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." msgstr "Se necesita una imagen qcow de VyOS con opciones de inicialización en la nube. Esto se puede obtener usando `vyos-vm-images`_ repo. Después de clonar el repositorio, edite el archivo **qemu.yml** y comente el rol **download-iso**." -#: ../../automation/cloud-init.rst:63 +#: ../../automation/cloud-init.rst:64 msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." msgstr "Un documento de configuración de la nube está escrito en YAML. El archivo debe comenzar con la línea ``#cloud-config``. Las únicas claves de nivel superior admitidas son ``vyos_config_commands`` y ``write_files``. El uso de estas teclas se describe en las dos secciones siguientes." @@ -84,7 +386,7 @@ msgstr "Un documento de configuración de la nube está escrito en YAML. El arch msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." msgstr "A continuación se muestra un ejemplo simple, donde el comando ops ejecutado en el script posterior al enlace es "mostrar interfaces"." -#: ../../automation/cloud-init.rst:82 +#: ../../automation/cloud-init.rst:83 msgid "A single-quote symbol is not allowed inside command or value." msgstr "No se permite un símbolo de comillas simples dentro de un comando o valor." @@ -92,18 +394,53 @@ msgstr "No se permite un símbolo de comillas simples dentro de un comando o val msgid "Accept minion key" msgstr "Aceptar clave de minion" +#: ../../automation/terraform/terraformAWS.rst:255 +msgid "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformAZ.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformGoogle.rst:333 +msgid "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformvSphere.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/cloud-init.rst:92 +msgid "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." +msgstr "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." + #: ../../automation/vyos-api.rst:15 msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." msgstr "Todos los puntos finales solo escuchan solicitudes HTTP POST y la CLAVE API debe establecerse como ``clave`` en los datos del formulario." -#: ../../automation/cloud-init.rst:115 +#: ../../automation/terraform/terraformAWS.rst:539 +#: ../../automation/terraform/terraformAZ.rst:484 +#: ../../automation/terraform/terraformGoogle.rst:705 +#: ../../automation/terraform/terraformvSphere.rst:397 +msgid "All files about the article can be found here_" +msgstr "All files about the article can be found here_" + +#: ../../automation/cloud-init.rst:119 msgid "All of these can be overridden using the configuration in user-data." msgstr "Todos estos pueden anularse mediante la configuración en los datos de usuario." -#: ../../automation/cloud-init.rst:256 +#: ../../automation/terraform/terraformAWS.rst:267 +msgid "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/cloud-init.rst:259 msgid "Also, this lab considers:" msgstr "Además, este laboratorio considera:" +#: ../../automation/terraform/terraformAWS.rst:74 +#: ../../automation/terraform/terraformAZ.rst:51 +#: ../../automation/terraform/terraformGoogle.rst:73 +#: ../../automation/terraform/terraformvSphere.rst:50 #: ../../automation/vyos-ansible.rst:6 msgid "Ansible" msgstr "Ansible" @@ -121,7 +458,16 @@ msgstr "En este paso, podemos obtener información del modo operativo de los nod msgid "Authentication" msgstr "Autenticación" -#: ../../automation/cloud-init.rst:241 +#: ../../automation/terraform/terraformAZ.rst:19 +msgid "Azure" +msgstr "Azur" + +#: ../../automation/vyos-terraform.rst:684 +#: ../../automation/vyos-terraform.rst:985 +msgid "Azure_terraform_ansible_single_vyos_instance" +msgstr "Azure_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:244 msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." msgstr "Antes de comenzar, consulte cloud-init `network-config-docs`_ para saber cómo importar configuraciones de usuario y de red." @@ -145,11 +491,11 @@ msgstr "Comprueba que el maestro de la sal puede comunicarse con los minions" msgid "Cloud-config modules" msgstr "Módulos de configuración en la nube" -#: ../../automation/cloud-init.rst:420 +#: ../../automation/cloud-init.rst:423 msgid "Cloud-init `network-config-docs`_." msgstr "Cloud-init `red-config-docs`_." -#: ../../automation/cloud-init.rst:239 +#: ../../automation/cloud-init.rst:242 msgid "Cloud-init on Proxmox" msgstr "Cloud-init en Proxmox" @@ -157,7 +503,7 @@ msgstr "Cloud-init en Proxmox" msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." msgstr "Las instancias en la nube y virtualizadas de VyOS se inicializan mediante el estándar de la industria cloud-init. A través de cloud-init, el sistema realiza tareas como inyectar claves SSH y configurar la red. Además, el usuario puede proporcionar una configuración personalizada en el momento del lanzamiento de la instancia." -#: ../../automation/cloud-init.rst:120 +#: ../../automation/cloud-init.rst:124 msgid "Command Execution at Initial Boot" msgstr "Ejecución de comandos en el arranque inicial" @@ -165,11 +511,11 @@ msgstr "Ejecución de comandos en el arranque inicial" msgid "Command Scripting" msgstr "Secuencias de comandos de comandos" -#: ../../automation/cloud-init.rst:356 +#: ../../automation/cloud-init.rst:359 msgid "Command for generating ``seed.iso``" msgstr "Comando para generar ``seed.iso``" -#: ../../automation/cloud-init.rst:78 +#: ../../automation/cloud-init.rst:79 msgid "Commands requirements:" msgstr "Requisitos de los comandos:" @@ -186,51 +532,55 @@ msgstr "Configuración" msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" msgstr "Los comandos de configuración se ejecutan como en una sesión de configuración normal. Por ejemplo, si desea deshabilitar un par BGP en la transición VRRP a la copia de seguridad:" -#: ../../automation/vyos-pyvyos.rst:94 +#: ../../automation/vyos-pyvyos.rst:102 msgid "Configure, then Delete Object" msgstr "Configure, then Delete Object" -#: ../../automation/vyos-pyvyos.rst:141 +#: ../../automation/vyos-pyvyos.rst:149 msgid "Configure, then Load File" msgstr "Configure, then Load File" -#: ../../automation/vyos-pyvyos.rst:101 +#: ../../automation/vyos-pyvyos.rst:109 msgid "Configure, then Save" msgstr "Configure, then Save" -#: ../../automation/vyos-pyvyos.rst:108 +#: ../../automation/vyos-pyvyos.rst:116 msgid "Configure, then Save File" msgstr "Configure, then Save File" -#: ../../automation/vyos-pyvyos.rst:68 +#: ../../automation/vyos-pyvyos.rst:76 msgid "Configure, then Set" msgstr "Configure, then Set" -#: ../../automation/vyos-pyvyos.rst:85 +#: ../../automation/vyos-pyvyos.rst:93 msgid "Configure, then Show Object" msgstr "Configure, then Show Object" -#: ../../automation/vyos-pyvyos.rst:77 +#: ../../automation/vyos-pyvyos.rst:85 msgid "Configure, then Show a Single Object Value" msgstr "Configure, then Show a Single Object Value" +#: ../../automation/terraform/index.rst:5 +msgid "Content" +msgstr "Content" + #: ../../automation/vyos-napalm.rst:89 msgid "Content of commands.conf" msgstr "Contenido de comandos.conf" -#: ../../automation/cloud-init.rst:337 +#: ../../automation/cloud-init.rst:340 msgid "Content of network-config file:" msgstr "Contenido del archivo de configuración de red:" -#: ../../automation/cloud-init.rst:351 +#: ../../automation/cloud-init.rst:354 msgid "Create seed.iso" msgstr "Crear semilla.iso" -#: ../../automation/cloud-init.rst:189 +#: ../../automation/cloud-init.rst:193 msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." msgstr "Cree archivos de texto llamados datos de usuario y metadatos. En los sistemas basados en Linux, la utilidad mkisofs se puede utilizar para crear la ISO inicial. La siguiente sintaxis agregará estos archivos al sistema de archivos ISO 9660." -#: ../../automation/cloud-init.rst:368 +#: ../../automation/cloud-init.rst:371 msgid "Creating the VM" msgstr "Creación de la máquina virtual" @@ -238,10 +588,38 @@ msgstr "Creación de la máquina virtual" msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." msgstr "Los scripts personalizados no se ejecutan con privilegios de root (Use sudo inside si es necesario)." -#: ../../automation/cloud-init.rst:113 +#: ../../automation/cloud-init.rst:117 msgid "DHCP on first Ethernet interface if no network configuration is provided." msgstr "DHCP en la primera interfaz Ethernet si no se proporciona ninguna configuración de red." +#: ../../automation/terraform/terraformAWS.rst:6 +msgid "Deploying VyOS in the AWS cloud" +msgstr "Deploying VyOS in the AWS cloud" + +#: ../../automation/terraform/terraformAZ.rst:6 +msgid "Deploying VyOS in the Azure cloud" +msgstr "Deploying VyOS in the Azure cloud" + +#: ../../automation/terraform/terraformGoogle.rst:6 +msgid "Deploying VyOS in the google cloud" +msgstr "Deploying VyOS in the google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:6 +msgid "Deploying VyOS in the vSphere infrastructure" +msgstr "Deploying VyOS in the vSphere infrastructure" + +#: ../../automation/terraform/terraformAWS.rst:39 +msgid "Deploying vyos in the AWS cloud" +msgstr "Deploying vyos in the AWS cloud" + +#: ../../automation/vyos-terraform.rst:299 +msgid "Deploying vyos in the Azure cloud" +msgstr "Deploying vyos in the Azure cloud" + +#: ../../automation/vyos-terraform.rst:742 +msgid "Deploying vyos in the Vsphere infrastructia" +msgstr "Deploying vyos in the Vsphere infrastructia" + #: ../../automation/vyos-netmiko.rst:12 msgid "Example" msgstr "Ejemplo" @@ -274,10 +652,46 @@ msgstr "Ejecución de secuencias de comandos pre-hooks/post-hooks" msgid "File contents" msgstr "Contenido del archivo" -#: ../../automation/cloud-init.rst:284 +#: ../../automation/terraform/terraformAWS.rst:476 +msgid "File contents of Ansible for AWS" +msgstr "File contents of Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:426 +msgid "File contents of Ansible for Azure" +msgstr "File contents of Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:651 +msgid "File contents of Ansible for google cloud" +msgstr "File contents of Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:338 +msgid "File contents of Ansible for vSphere" +msgstr "File contents of Ansible for vSphere" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "File contents of Terrafom for AWS" +msgstr "File contents of Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:93 +msgid "File contents of Terrafom for Azure" +msgstr "File contents of Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:375 +msgid "File contents of Terrafom for google cloud" +msgstr "File contents of Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:96 +msgid "File contents of Terrafom for vSphere" +msgstr "File contents of Terrafom for vSphere" + +#: ../../automation/cloud-init.rst:287 msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" msgstr "Archivo generado con el comando anterior: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" +#: ../../automation/cloud-init.rst:350 +msgid "Finally, file **meta-data** has no content, but it's required." +msgstr "Finally, file **meta-data** has no content, but it's required." + #: ../../automation/cloud-init.rst:347 msgid "Finaly, file **meta-data** has no content, but it's required." msgstr "Finalmente, el archivo **metadatos** no tiene contenido, pero es obligatorio." @@ -290,11 +704,15 @@ msgstr "Para problemas de administración de configuración/actualización, la m msgid "For configuration and enabling the API see :ref:`http-api`" msgstr "Para configurar y habilitar la API, consulte :ref:`http-api`" +#: ../../automation/vyos-api.rst:130 +msgid "For example, check an existing path:" +msgstr "For example, check an existing path:" + #: ../../automation/vyos-api.rst:109 msgid "For example, get the addresses of a ``dum0`` interface." msgstr "Por ejemplo, obtenga las direcciones de una interfaz ``dum0``." -#: ../../automation/vyos-api.rst:226 +#: ../../automation/vyos-api.rst:258 msgid "For example, show which images are installed." msgstr "Por ejemplo, muestre qué imágenes están instaladas." @@ -302,19 +720,27 @@ msgstr "Por ejemplo, muestre qué imágenes están instaladas." msgid "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." msgstr "Para obtener más información sobre la fuente de datos NoCloud, visite su `página<https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html> `_ en la documentación de inicio de nube." -#: ../../automation/cloud-init.rst:411 +#: ../../automation/cloud-init.rst:221 +msgid "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." +msgstr "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." + +#: ../../automation/cloud-init.rst:414 msgid "From cli or GUI, power on VM, and after it boots, verify configuration" msgstr "Desde cli o GUI, encienda la VM y, después de que arranque, verifique la configuración" -#: ../../automation/vyos-pyvyos.rst:123 +#: ../../automation/terraform/terraformvyos.rst:26 +msgid "General commands that we will use for running Terraform scripts" +msgstr "General commands that we will use for running Terraform scripts" + +#: ../../automation/vyos-pyvyos.rst:131 msgid "Generate Object" msgstr "Generate Object" -#: ../../automation/cloud-init.rst:268 +#: ../../automation/cloud-init.rst:271 msgid "Generate qcow image" msgstr "Generar imagen qcow" -#: ../../automation/vyos-pyvyos.rst:24 +#: ../../automation/vyos-pyvyos.rst:32 msgid "Getting Started" msgstr "Getting Started" @@ -322,27 +748,47 @@ msgstr "Getting Started" msgid "Here is a simple example:" msgstr "Aquí hay un ejemplo simple:" -#: ../../automation/cloud-init.rst:91 +#: ../../automation/cloud-init.rst:95 msgid "Here is an example cloud-config that appends configuration at the time of first boot." msgstr "Aquí hay un ejemplo de configuración en la nube que agrega la configuración en el momento del primer arranque." -#: ../../automation/cloud-init.rst:377 +#: ../../automation/terraform/terraformAWS.rst:23 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" + +#: ../../automation/terraform/terraformAZ.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" + +#: ../../automation/vyos-terraform.rst:987 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" + +#: ../../automation/terraform/terraformGoogle.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" + +#: ../../automation/terraform/terraformvSphere.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" + +#: ../../automation/cloud-init.rst:380 msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." msgstr "Almacenamiento de archivos ISO: el volumen ``local`` se utiliza para el almacenamiento de archivos ``.iso``. En este escenario, el tipo de volumen ``local`` se establece en **directorio**, y se adjunta a ``/var/lib/vz``." -#: ../../automation/cloud-init.rst:81 +#: ../../automation/cloud-init.rst:82 msgid "If command ends in a value, it must be inside single quotes." msgstr "Si el comando termina en un valor, debe estar entre comillas simples." -#: ../../automation/cloud-init.rst:250 +#: ../../automation/cloud-init.rst:253 msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." msgstr "Si no se proporciona una configuración de red, el cliente dhcp se habilitará en la primera interfaz. Tenga en cuenta que esta configuración se inyectará a nivel del sistema operativo, así que no espere encontrar la configuración del cliente dhcp en vyos cli. Debido a este comportamiento, en el siguiente laboratorio de ejemplo, deshabilitaremos la configuración de dhcp-client en eth0." -#: ../../automation/cloud-init.rst:225 +#: ../../automation/cloud-init.rst:228 msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." msgstr "Si encuentra problemas, verifique que el documento de configuración de la nube contenga YAML válido. Los recursos en línea como https://www.yamllint.com/ brindan una herramienta simple para validar YAML." -#: ../../automation/cloud-init.rst:153 +#: ../../automation/cloud-init.rst:157 msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." msgstr "Si necesita recopilar información de los comandos de Linux para configurar VyOS, puede ejecutar los comandos y luego configurar VyOS en el mismo script." @@ -350,11 +796,11 @@ msgstr "Si necesita recopilar información de los comandos de Linux para configu msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." msgstr "Si desea programar las configuraciones en un idioma que no sea bash, puede tener los comandos de salida de su script y luego generarlos en un script bash." -#: ../../automation/vyos-pyvyos.rst:27 +#: ../../automation/vyos-pyvyos.rst:35 msgid "Importing and Disabling Warnings for verify=False" msgstr "Importing and Disabling Warnings for verify=False" -#: ../../automation/cloud-init.rst:298 +#: ../../automation/cloud-init.rst:301 msgid "In Proxmox server three files are going to be used for this setup:" msgstr "En el servidor Proxmox, se utilizarán tres archivos para esta configuración:" @@ -362,23 +808,39 @@ msgstr "En el servidor Proxmox, se utilizarán tres archivos para esta configura msgid "In VyOS, by default, enables only two modules:" msgstr "En VyOS, por defecto, habilita solo dos módulos:" -#: ../../automation/cloud-init.rst:307 +#: ../../automation/terraform/terraformAWS.rst:17 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." + +#: ../../automation/cloud-init.rst:310 msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" msgstr "En esta práctica de laboratorio, todos los archivos se encuentran en ``/tmp/``. Entonces, antes de continuar, pasemos a ese directorio:" -#: ../../automation/cloud-init.rst:274 +#: ../../automation/cloud-init.rst:277 msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" msgstr "En esta práctica de laboratorio, usamos la versión 1.3.0 de VyOS y configuramos un disco de 10G. Descargue el archivo .iso de VyOS y guárdelo como ``/tmp/vyos.iso``. Comando utilizado para generar la imagen qcow:" -#: ../../automation/cloud-init.rst:71 +#: ../../automation/cloud-init.rst:72 msgid "Initial Configuration" msgstr "Configuracion inicial" -#: ../../automation/vyos-pyvyos.rst:47 +#: ../../automation/vyos-pyvyos.rst:55 msgid "Initializing a VyDevice Object" msgstr "Initializing a VyDevice Object" -#: ../../automation/cloud-init.rst:180 +#: ../../automation/cloud-init.rst:184 msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." msgstr "La inyección de datos de configuración no se limita a las plataformas en la nube. Los usuarios pueden emplear la fuente de datos NoCloud para inyectar datos de usuario y metadatos en plataformas de virtualización como VMware, Hyper-V y KVM." @@ -386,7 +848,7 @@ msgstr "La inyección de datos de configuración no se limita a las plataformas msgid "Install ``napalm-vyos`` module" msgstr "Instalar el módulo ``napalm-vyos''" -#: ../../automation/vyos-pyvyos.rst:15 +#: ../../automation/vyos-pyvyos.rst:23 msgid "Installation" msgstr "Instalación" @@ -398,11 +860,20 @@ msgstr "Es posible configurar VyOS a través del módulo proxy netmiko_. Requier msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." msgstr "Los principales proveedores de la nube ofrecen un medio para proporcionar datos de usuario en el momento del lanzamiento de la instancia. Se puede proporcionar como texto sin formato o como texto codificado en base64, según el proveedor de la nube. Además, se puede comprimir usando gzip, lo que tiene sentido con una larga lista de comandos de configuración, debido al límite estricto de ~16384 bytes para todos los datos del usuario." +#: ../../automation/terraform/terraformAWS.rst:282 +#: ../../automation/terraform/terraformGoogle.rst:359 +msgid "Make sure that Ansible is pinging from Terrafom." +msgstr "Make sure that Ansible is pinging from Terrafom." + +#: ../../automation/terraform/terraformGoogle.rst:345 +msgid "Make sure that you have opened access to the instance in the security group." +msgstr "Make sure that you have opened access to the instance in the security group." + #: ../../automation/cloud-init.rst:20 msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." msgstr "Metadatos: los metadatos provienen de la plataforma en la nube o el hipervisor. En algunas nubes, se implementa como punto final HTTP en ``http://169.254.169.254``." -#: ../../automation/cloud-init.rst:244 +#: ../../automation/cloud-init.rst:247 msgid "Most important keys that needs to be considered:" msgstr "Claves más importantes a tener en cuenta:" @@ -410,6 +881,10 @@ msgstr "Claves más importantes a tener en cuenta:" msgid "Napalm" msgstr "Napalm" +#: ../../automation/terraform/terraformvyos.rst:13 +msgid "Need to install_ Terraform" +msgstr "Need to install_ Terraform" + #: ../../automation/vyos-netmiko.rst:6 msgid "Netmiko" msgstr "Netmiko" @@ -418,31 +893,37 @@ msgstr "Netmiko" msgid "Netmiko-proxy" msgstr "Netmiko-proxy" +#: ../../automation/terraform/terraformAWS.rst:-1 +#: ../../automation/terraform/terraformGoogle.rst:-1 +msgid "Network Topology Diagram" +msgstr "Diagrama de topología de red" + #: ../../automation/cloud-init.rst:24 msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." msgstr "Configuración de red: esta fuente de configuración informa al sistema sobre la configuración de red, como direcciones IP, rutas, DNS. Disponible solo en varias plataformas de nube y virtualización." -#: ../../automation/cloud-init.rst:248 +#: ../../automation/cloud-init.rst:251 msgid "Networking configurations shouldn't be passed in user-data file." msgstr "Las configuraciones de red no deben pasarse en el archivo de datos de usuario." -#: ../../automation/cloud-init.rst:178 +#: ../../automation/cloud-init.rst:182 msgid "NoCloud" msgstr "Sin Nube" #: ../../automation/index.rst:6 +#: ../../automation/terraform/index.rst:6 msgid "Nornir" msgstr "brujas" -#: ../../automation/cloud-init.rst:131 +#: ../../automation/cloud-init.rst:135 msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." msgstr "Tenga en cuenta que /opt/vyatta/etc/config se usa en lugar del directorio /config/scripts al que se hace referencia en la sección :ref:`command-scripting` de la documentación porque el directorio /config/script no está montado cuando ` Se ejecuta el módulo `write_files``." -#: ../../automation/cloud-init.rst:370 +#: ../../automation/cloud-init.rst:373 msgid "Notes for this particular example, that may need to be modified in other setups:" msgstr "Notas para este ejemplo en particular, que puede necesitar ser modificado en otras configuraciones:" -#: ../../automation/cloud-init.rst:287 +#: ../../automation/cloud-init.rst:290 msgid "Now, that file needs to be copied to proxmox server:" msgstr "Ahora, ese archivo debe copiarse en el servidor proxmox:" @@ -450,15 +931,15 @@ msgstr "Ahora, ese archivo debe copiarse en el servidor proxmox:" msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" msgstr "En VyOS, esto causará el siguiente problema: después de modificar la configuración a través de un script como este una vez, ya no es posible modificar manualmente la configuración:" -#: ../../automation/cloud-init.rst:390 +#: ../../automation/cloud-init.rst:393 msgid "On proxmox server:" msgstr "En el servidor proxmox:" -#: ../../automation/cloud-init.rst:353 +#: ../../automation/cloud-init.rst:356 msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." msgstr "Una vez que se crearon los tres archivos, es hora de generar la imagen ``seed.iso``, que debe montarse en la nueva VM como un cd." -#: ../../automation/cloud-init.rst:80 +#: ../../automation/cloud-init.rst:81 msgid "One command per line." msgstr "Un comando por línea." @@ -487,7 +968,7 @@ msgstr "Por favor, eche un vistazo a la Guía de contribución para nuestra :ref msgid "Postconfig on boot" msgstr "Postconfig en el arranque" -#: ../../automation/cloud-init.rst:409 +#: ../../automation/cloud-init.rst:412 msgid "Power on VM and verifications" msgstr "Encendido de VM y verificaciones" @@ -495,15 +976,31 @@ msgstr "Encendido de VM y verificaciones" msgid "Preconfig on boot" msgstr "Preconfiguración en el arranque" -#: ../../automation/cloud-init.rst:296 +#: ../../automation/terraform/terraformAWS.rst:21 +msgid "Preparation steps for deploying VyOS on AWS" +msgstr "Preparation steps for deploying VyOS on AWS" + +#: ../../automation/terraform/terraformAZ.rst:14 +msgid "Preparation steps for deploying VyOS on Azure" +msgstr "Preparation steps for deploying VyOS on Azure" + +#: ../../automation/terraform/terraformGoogle.rst:14 +msgid "Preparation steps for deploying VyOS on google" +msgstr "Preparation steps for deploying VyOS on google" + +#: ../../automation/terraform/terraformvSphere.rst:14 +msgid "Preparation steps for deploying VyOS on vSphere" +msgstr "Preparation steps for deploying VyOS on vSphere" + +#: ../../automation/cloud-init.rst:299 msgid "Prepare cloud-init files" msgstr "Preparar archivos de inicialización en la nube" -#: ../../automation/cloud-init.rst:258 +#: ../../automation/cloud-init.rst:261 msgid "Proxmox IP address: **192.168.0.253/24**" msgstr "Dirección IP de proximidad: **192.168.0.253/24**" -#: ../../automation/cloud-init.rst:422 +#: ../../automation/cloud-init.rst:425 msgid "Proxmox `Cloud-init-Support`_." msgstr "Proxmox `Cloud-init-Support`_." @@ -515,18 +1012,22 @@ msgstr "PyVyOS" msgid "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." msgstr "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." -#: ../../automation/cloud-init.rst:416 +#: ../../automation/cloud-init.rst:419 msgid "References" msgstr "Referencias" -#: ../../automation/cloud-init.rst:263 +#: ../../automation/cloud-init.rst:266 msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." msgstr "Elimine el cliente dhcp predeterminado en la primera interfaz y cargue otra configuración durante el primer arranque, usando cloud-init." -#: ../../automation/vyos-pyvyos.rst:132 +#: ../../automation/vyos-pyvyos.rst:140 msgid "Reset Object" msgstr "Reset Object" +#: ../../automation/vyos-terraform.rst:22 +msgid "Run Terraform" +msgstr "Run Terraform" + #: ../../automation/vyos-ansible.rst:80 msgid "Run ansible" msgstr "ejecutar ansible" @@ -543,7 +1044,7 @@ msgstr "Ejecutar comandos de configuración" msgid "Run operational commands" msgstr "Ejecutar comandos operativos" -#: ../../automation/cloud-init.rst:111 +#: ../../automation/cloud-init.rst:115 msgid "SSH is configured on port 22." msgstr "SSH está configurado en el puerto 22." @@ -555,11 +1056,11 @@ msgstr "Sal" msgid "Salt master configuration:" msgstr "Configuración maestra de sal:" -#: ../../automation/vyos-api.rst:344 +#: ../../automation/vyos-api.rst:377 msgid "Save a running configuration to a file." msgstr "Guarde una configuración en ejecución en un archivo." -#: ../../automation/vyos-api.rst:326 +#: ../../automation/vyos-api.rst:359 msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." msgstr "Guarde una configuración en ejecución en la configuración de inicio. Cuando no especifica el archivo al guardar, se guarda en ``/config/config.boot``." @@ -571,7 +1072,7 @@ msgstr "Guión vyos-napalm.py" msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." msgstr "Los scripts se ejecutan en orden alfabético. Sus nombres deben consistir completamente en letras mayúsculas y minúsculas ASCII, dígitos ASCII, guiones bajos ASCII y guiones negativos ASCII. No se permiten otros caracteres." -#: ../../automation/vyos-pyvyos.rst:115 +#: ../../automation/vyos-pyvyos.rst:123 msgid "Show Object" msgstr "Show Object" @@ -579,7 +1080,42 @@ msgstr "Show Object" msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." msgstr "A veces, simplemente no desea ejecutar un montón de comandos de modo operativo a través de SSH en un sistema VyOS remoto." -#: ../../automation/cloud-init.rst:260 +#: ../../automation/command-scripting.rst:52 +msgid "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." + +#: ../../automation/terraform/terraformAWS.rst:537 +msgid "Sourse files for AWS from GIT" +msgstr "Sourse files for AWS from GIT" + +#: ../../automation/terraform/terraformAZ.rst:482 +msgid "Sourse files for Azure from GIT" +msgstr "Sourse files for Azure from GIT" + +#: ../../automation/terraform/terraformGoogle.rst:703 +msgid "Sourse files for google cloud from GIT" +msgstr "Sourse files for google cloud from GIT" + +#: ../../automation/terraform/terraformvSphere.rst:395 +msgid "Sourse files for vSphere from GIT" +msgstr "Sourse files for vSphere from GIT" + +#: ../../automation/terraform/terraformAWS.rst:88 +#: ../../automation/terraform/terraformAZ.rst:63 +#: ../../automation/terraform/terraformGoogle.rst:87 +#: ../../automation/terraform/terraformvSphere.rst:62 +msgid "Start" +msgstr "Start" + +#: ../../automation/terraform/terraformGoogle.rst:101 +msgid "Start creating a google cloud instance and check the result" +msgstr "Start creating a google cloud instance and check the result" + +#: ../../automation/terraform/terraformAWS.rst:102 +msgid "Start creating an AWS instance and check the result" +msgstr "Start creating an AWS instance and check the result" + +#: ../../automation/cloud-init.rst:263 msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." msgstr "Storaged used: volumen local, que está montado en el directorio **/var/lib/vz**, y contiene todo tipo de contenido, incluidos fragmentos." @@ -591,14 +1127,80 @@ msgstr "Estructura de /srv/salt:" msgid "Structure of files" msgstr "Estructura de archivos" -#: ../../automation/cloud-init.rst:107 +#: ../../automation/vyos-terraform.rst:166 +#: ../../automation/vyos-terraform.rst:624 +msgid "Structure of files Ansible" +msgstr "Structure of files Ansible" + +#: ../../automation/terraform/terraformAWS.rst:463 +msgid "Structure of files Ansible for AWS" +msgstr "Structure of files Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:414 +msgid "Structure of files Ansible for Azure" +msgstr "Structure of files Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:639 +msgid "Structure of files Ansible for google cloud" +msgstr "Structure of files Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:326 +msgid "Structure of files Ansible for vSphere" +msgstr "Structure of files Ansible for vSphere" + +#: ../../automation/vyos-terraform.rst:38 +#: ../../automation/vyos-terraform.rst:302 +#: ../../automation/vyos-terraform.rst:745 +msgid "Structure of files Terrafom" +msgstr "Structure of files Terrafom" + +#: ../../automation/terraform/terraformAWS.rst:285 +msgid "Structure of files Terrafom for AWS" +msgstr "Structure of files Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:83 +msgid "Structure of files Terrafom for Azure" +msgstr "Structure of files Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:362 +msgid "Structure of files Terrafom for google cloud" +msgstr "Structure of files Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:84 +msgid "Structure of files Terrafom for vSphere" +msgstr "Structure of files Terrafom for vSphere" + +#: ../../automation/terraform/terraformvyos.rst:15 +msgid "Structure of files in the standard Terraform project:" +msgstr "Structure of files in the standard Terraform project:" + +#: ../../automation/cloud-init.rst:111 msgid "System Defaults/Fallbacks" msgstr "Valores predeterminados/alternativos del sistema" -#: ../../automation/vyos-api.rst:301 +#: ../../automation/terraform/terraformAWS.rst:51 +#: ../../automation/terraform/terraformAZ.rst:23 +#: ../../automation/terraform/terraformGoogle.rst:49 +#: ../../automation/terraform/terraformvSphere.rst:26 +msgid "Terraform" +msgstr "Terraform" + +#: ../../automation/terraform/terraformAWS.rst:302 +msgid "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" +msgstr "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" + +#: ../../automation/terraform/terraformvyos.rst:6 +msgid "Terraform for VyOS" +msgstr "Terraform for VyOS" + +#: ../../automation/vyos-api.rst:334 msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." msgstr "La API envía cada solicitud a una sesión y la confirma. Pero algunos de los componentes de VyOS, como los servidores DHCP y PPPoE, IPSec, VXLAN y otros túneles, requieren una configuración completa para la confirmación. El punto final procesará múltiples comandos cuando los pase como una lista al campo ``datos``." +#: ../../automation/terraform/terraformGoogle.rst:41 +msgid "The .JSON file download automaticly after creating and will look like:" +msgstr "The .JSON file download automaticly after creating and will look like:" + #: ../../automation/command-scripting.rst:197 msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." msgstr "El script ``/config/scripts/vyos-postconfig-bootup.script`` se llama en el arranque después de que la configuración de VyOS se haya aplicado por completo." @@ -607,23 +1209,23 @@ msgstr "El script ``/config/scripts/vyos-postconfig-bootup.script`` se llama en msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." msgstr "El script ``/config/scripts/vyos-preconfig-bootup.script`` se llama en el arranque antes de la configuración de VyOS durante el proceso de arranque." -#: ../../automation/vyos-api.rst:224 +#: ../../automation/vyos-api.rst:256 msgid "The ``/show`` endpoint is to show everything in the operational mode." msgstr "El punto final ``/show`` es mostrar todo en el modo operativo." -#: ../../automation/vyos-api.rst:248 +#: ../../automation/vyos-api.rst:280 msgid "The ``generate`` endpoint run a ``generate`` command." msgstr "El extremo ``generar`` ejecuta un comando ``generar``." -#: ../../automation/vyos-api.rst:131 +#: ../../automation/vyos-api.rst:163 msgid "The ``reset`` endpoint run a ``reset`` command." msgstr "El extremo ``reset`` ejecuta un comando ``reset``." -#: ../../automation/cloud-init.rst:84 +#: ../../automation/cloud-init.rst:85 msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." msgstr "La lista de comandos producida por el comando ``mostrar comandos de configuración`` en un enrutador VyOS debe cumplir con todos los requisitos, por lo que es fácil obtener una lista de comandos adecuada copiándola desde otro enrutador." -#: ../../automation/cloud-init.rst:88 +#: ../../automation/cloud-init.rst:89 msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." msgstr "La configuración especificada en el documento de configuración de la nube sobrescribe los valores de configuración predeterminados y los valores configurados a través de metadatos." @@ -640,23 +1242,23 @@ msgstr "El archivo predeterminado se ve así:" msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below." msgstr "La forma más fácil de configurar el sistema a través de los datos del usuario es la sintaxis de configuración de la nube que se describe a continuación." -#: ../../automation/vyos-api.rst:324 +#: ../../automation/vyos-api.rst:357 msgid "The endpoint ``/config-file`` is to save or load a configuration." msgstr "El punto final ``/config-file`` es para guardar o cargar una configuración." -#: ../../automation/cloud-init.rst:156 +#: ../../automation/cloud-init.rst:160 msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." msgstr "El siguiente ejemplo establece el nombre de host en función del identificador de instancia obtenido del servicio de metadatos de EC2." -#: ../../automation/cloud-init.rst:136 +#: ../../automation/cloud-init.rst:140 msgid "The following example shows how to execute commands after the initial configuration." msgstr "El siguiente ejemplo muestra cómo ejecutar comandos después de la configuración inicial." -#: ../../automation/cloud-init.rst:74 +#: ../../automation/cloud-init.rst:75 msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." msgstr "La clave utilizada para designar una configuración de VyOS es ``vyos_config_commands``. Lo que sigue es la configuración de VyOS utilizando la sintaxis "set-style". Se admiten los comandos "establecer" y "eliminar"." -#: ../../automation/cloud-init.rst:197 +#: ../../automation/cloud-init.rst:201 msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." msgstr "El archivo seed.iso se puede adjuntar a la máquina virtual. A modo de ejemplo, a continuación se muestra el método con KVM para adjuntar la ISO como una unidad de CD." @@ -664,7 +1266,7 @@ msgstr "El archivo seed.iso se puede adjuntar a la máquina virtual. A modo de e msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." msgstr "Hay una trampa cuando se trabaja con scripts de configuración. Es tentador llamar a los scripts de configuración con "sudo" (es decir, permisos temporales de raíz), porque esa es la forma común en la mayoría de las plataformas Linux de llamar a los comandos del sistema." -#: ../../automation/cloud-init.rst:109 +#: ../../automation/cloud-init.rst:113 msgid "These are the VyOS defaults and fallbacks." msgstr "Estos son los valores predeterminados y alternativos de VyOS." @@ -676,11 +1278,11 @@ msgstr "Esta sección necesita mejoras, ejemplos y explicaciones." msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." msgstr "Esto dará como resultado el siguiente mensaje de error: ``Establecimiento fallido`` Si esto sucede, se requiere reiniciar para poder editar la configuración manualmente nuevamente." -#: ../../automation/vyos-api.rst:360 +#: ../../automation/vyos-api.rst:393 msgid "To Load a configuration file." msgstr "Para cargar un archivo de configuración." -#: ../../automation/vyos-api.rst:186 +#: ../../automation/vyos-api.rst:218 msgid "To add or delete an image, use the ``/image`` endpoint." msgstr "Para agregar o eliminar una imagen, use el punto final ``/image``." @@ -688,6 +1290,10 @@ msgstr "Para agregar o eliminar una imagen, use el punto final ``/image``." msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" msgstr "Para evitar estos problemas, la forma adecuada es llamar a un script con el grupo ``vyattacfg``, por ejemplo, utilizando el comando ``sg`` (cambiar de grupo):" +#: ../../automation/vyos-api.rst:128 +msgid "To check existence of a configuration path, use the ``exists`` operation." +msgstr "To check existence of a configuration path, use the ``exists`` operation." + #: ../../automation/vyos-api.rst:48 msgid "To get the whole configuration, pass an empty list to the ``path`` field" msgstr "Para obtener la configuración completa, pase una lista vacía al campo ``ruta``" @@ -696,7 +1302,7 @@ msgstr "Para obtener la configuración completa, pase una lista vacía al campo msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." msgstr "Para incluir funciones y alias específicos de VyOS, necesita archivos ``fuente /opt/vyatta/etc/functions/script-template`` en la parte superior de su secuencia de comandos." -#: ../../automation/vyos-api.rst:149 +#: ../../automation/vyos-api.rst:181 msgid "To initiate a reboot use the ``reboot`` endpoint." msgstr "To initiate a reboot use the ``reboot`` endpoint." @@ -708,14 +1314,23 @@ msgstr "Para asegurarse de que una secuencia de comandos no se llame accidentalm msgid "To only get a part of the configuration, for example ``system syslog``." msgstr "Para obtener solo una parte de la configuración, por ejemplo ``system syslog``." -#: ../../automation/vyos-api.rst:167 +#: ../../automation/vyos-api.rst:199 msgid "To power off the system use the ``poweroff`` endpoint." msgstr "To power off the system use the ``poweroff`` endpoint." -#: ../../automation/cloud-init.rst:223 +#: ../../automation/cloud-init.rst:226 +#: ../../automation/terraform/terraformAWS.rst:264 +#: ../../automation/terraform/terraformGoogle.rst:342 msgid "Troubleshooting" msgstr "Solución de problemas" +#: ../../automation/terraform/terraformAWS.rst:91 +#: ../../automation/terraform/terraformAZ.rst:66 +#: ../../automation/terraform/terraformGoogle.rst:90 +#: ../../automation/terraform/terraformvSphere.rst:65 +msgid "Type the commands on your Terrafom instance:" +msgstr "Type the commands on your Terrafom instance:" + #: ../../automation/command-scripting.rst:39 msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." msgstr "A diferencia de una sesión de configuración normal, todos los comandos operativos deben ir precedidos de ``ejecutar``, incluso si no ha creado una sesión con configure." @@ -725,10 +1340,14 @@ msgid "User-data" msgstr "Datos del usuario" #: ../../automation/cloud-init.rst:28 +msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." + +#: ../../automation/cloud-init.rst:28 msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." msgstr "Datos de usuario: los datos de usuario son especificados por el usuario. Esta fuente de configuración ofrece la posibilidad de insertar cualquier comando de configuración CLI en la configuración antes del primer arranque." -#: ../../automation/vyos-pyvyos.rst:35 +#: ../../automation/vyos-pyvyos.rst:43 msgid "Using API Response Class" msgstr "Using API Response Class" @@ -736,18 +1355,26 @@ msgstr "Using API Response Class" msgid "Using PyVyOS" msgstr "Using PyVyOS" -#: ../../automation/cloud-init.rst:373 +#: ../../automation/vyos-pyvyos.rst:73 +msgid "Using pyvyos" +msgstr "Using pyvyos" + +#: ../../automation/cloud-init.rst:376 msgid "VM ID: in this example, VM ID used is 555." msgstr "ID de VM: en este ejemplo, el ID de VM utilizado es 555." -#: ../../automation/cloud-init.rst:381 +#: ../../automation/cloud-init.rst:384 msgid "VM Resources: these parameters can be modified as needed." msgstr "Recursos de VM: estos parámetros se pueden modificar según sea necesario." -#: ../../automation/cloud-init.rst:375 +#: ../../automation/cloud-init.rst:378 msgid "VM Storage: ``local`` volume is used." msgstr "Almacenamiento de VM: se utiliza el volumen ``local``." +#: ../../automation/vyos-terraform.rst:991 +msgid "Vsphere" +msgstr "Vsphere" + #: ../../automation/vyos-api.rst:7 msgid "VyOS API" msgstr "API de VyOS" @@ -756,7 +1383,11 @@ msgstr "API de VyOS" msgid "VyOS Automation" msgstr "Automatización VyOS" -#: ../../automation/cloud-init.rst:418 +#: ../../automation/terraform/index.rst:3 +msgid "VyOS Terraform" +msgstr "VyOS Terraform" + +#: ../../automation/cloud-init.rst:421 msgid "VyOS `cloud-init-docs`_." msgstr "VyOS `nube-init-docs`_." @@ -764,7 +1395,7 @@ msgstr "VyOS `nube-init-docs`_." msgid "VyOS cloud-init" msgstr "Inicialización en la nube de VyOS" -#: ../../automation/cloud-init.rst:246 +#: ../../automation/cloud-init.rst:249 msgid "VyOS configuration commands are defined in user-data file." msgstr "Los comandos de configuración de VyOS se definen en el archivo de datos de usuario." @@ -784,6 +1415,18 @@ msgstr "VyOS admite la configuración a través de ansible. Necesita instalar el msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." msgstr "VyOS admite la configuración a través de netmiko_. Requiere instalar el módulo ``python3-netmiko``." +#: ../../automation/vyos-terraform.rst:8 +msgid "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" +msgstr "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" + +#: ../../automation/terraform/terraformvyos.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." + +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." + #: ../../automation/command-scripting.rst:8 msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts." msgstr "VyOS admite la ejecución de comandos operativos y de configuración de forma no interactiva desde scripts de shell." @@ -796,7 +1439,7 @@ msgstr "VyOS admite el modo operativo y la configuración a través de salt_." msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." msgstr "VyOS admite algunas funciones de napalm_ para la configuración y el modo operativo. Requiere más pruebas." -#: ../../automation/cloud-init.rst:122 +#: ../../automation/cloud-init.rst:126 msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." msgstr "VyOS admite la ejecución de comandos operativos y comandos de Linux en el arranque inicial. Esto se logra usando ``write_files`` para ciertos archivos en el directorio /opt/vyatta/etc/config/scripts. Los comandos especificados en opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script se ejecutan antes de la configuración. El archivo /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script contiene comandos que se ejecutarán después de la configuración. En ambos casos, los comandos se ejecutan como usuario root." @@ -804,7 +1447,7 @@ msgstr "VyOS admite la ejecución de comandos operativos y comandos de Linux en msgid "We need 2 files, commands.conf and script itself." msgstr "Necesitamos 2 archivos, commands.conf y el propio script." -#: ../../automation/cloud-init.rst:184 +#: ../../automation/cloud-init.rst:188 msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." msgstr "Si bien existen otros métodos, el método más sencillo para usar la fuente de datos de NoCloud es crear una semilla ISO y adjuntarla a la máquina virtual como una unidad de CD. El volumen debe estar formateado como un sistema de archivos vfat o ISO 9660 con la etiqueta "cidata" o "CIDATA"." @@ -816,6 +1459,34 @@ msgstr "Volverá:" msgid "With the ``retrieve`` endpoint you get parts or the whole configuration." msgstr "Con el punto final ``retrieve`` obtienes partes o la configuración completa." +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAWS.rst:40 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/vyos-terraform.rst:300 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." + +#: ../../automation/vyos-terraform.rst:743 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." + #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and support op-mode data:" msgstr "Sin proxy, requiere configuración minion de VyOS y admite datos en modo operativo:" @@ -828,27 +1499,31 @@ msgstr "Sin proxy, requiere la configuración de minion de VyOS y admite datos e msgid "You can install PyVyOS using pip:" msgstr "You can install PyVyOS using pip:" -#: ../../automation/vyos-api.rst:267 +#: ../../automation/vyos-pyvyos.rst:25 +msgid "You can install pyvyos using pip:" +msgstr "You can install pyvyos using pip:" + +#: ../../automation/vyos-api.rst:300 msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." msgstr "Puede pasar un comando ``set``, ``delete`` o ``comment`` al extremo ``/configure``." -#: ../../automation/vyos-api.rst:286 +#: ../../automation/vyos-api.rst:319 msgid "``delete`` a single command" msgstr "``borrar`` un solo comando" -#: ../../automation/cloud-init.rst:383 +#: ../../automation/cloud-init.rst:386 msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" msgstr "``seed.iso`` se creó previamente en el directorio ``/tmp/``. Es necesario moverlo a ``/var/lib/vz/template/iso``" -#: ../../automation/vyos-api.rst:270 +#: ../../automation/vyos-api.rst:303 msgid "``set`` a single command" msgstr "``establecer`` un solo comando" -#: ../../automation/cloud-init.rst:55 +#: ../../automation/cloud-init.rst:56 msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." msgstr "``vyos_userdata``: el módulo acepta una lista de comandos de configuración de la CLI en una sección ``vyos_config_commands``, que brinda una forma fácil de configurar el sistema durante la implementación." -#: ../../automation/cloud-init.rst:112 +#: ../../automation/cloud-init.rst:116 msgid "``vyos``/``vyos`` credentials if no others specified by data source." msgstr "Credenciales ``vyos''/``vyos'' si no hay otras especificadas por la fuente de datos." @@ -856,19 +1531,39 @@ msgstr "Credenciales ``vyos''/``vyos'' si no hay otras especific msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." msgstr "``write_files``: este módulo permite insertar cualquier archivo en el sistema de archivos antes del primer arranque, por ejemplo, claves de cifrado generadas previamente, certificados o incluso un archivo ``config.boot`` completo. El formato se describe en la documentación de cloudinit `Cloud-init-write_files`_." -#: ../../automation/vyos-api.rst:188 +#: ../../automation/vyos-pyvyos.rst:12 +msgid "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." +msgstr "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." + +#: ../../automation/vyos-pyvyos.rst:15 +msgid "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." +msgstr "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." + +#: ../../automation/vyos-pyvyos.rst:17 +msgid "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." +msgstr "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." + +#: ../../automation/vyos-api.rst:220 msgid "add an image" msgstr "Añadir una imagen" +#: ../../automation/terraform/terraformAWS.rst:560 +msgid "all" +msgstr "todo" + +#: ../../automation/terraform/terraformAWS.rst:478 +#: ../../automation/terraform/terraformAZ.rst:428 +#: ../../automation/terraform/terraformGoogle.rst:653 +#: ../../automation/terraform/terraformvSphere.rst:340 #: ../../automation/vyos-ansible.rst:26 msgid "ansible.cfg" msgstr "ansible.cfg" -#: ../../automation/cloud-init.rst:61 +#: ../../automation/cloud-init.rst:62 msgid "cloud-config file format" msgstr "formato de archivo de configuración en la nube" -#: ../../automation/cloud-init.rst:229 +#: ../../automation/cloud-init.rst:232 msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" msgstr "cloud-init registra en /var/log/cloud-init.log. Este archivo puede ser útil para determinar por qué la configuración varía de lo esperado. Puede obtener la salida de filtrado de datos más importante para la palabra clave ``vyos``:" @@ -876,10 +1571,21 @@ msgstr "cloud-init registra en /var/log/cloud-init.log. Este archivo puede ser msgid "commands.txt" msgstr "comandos.txt" -#: ../../automation/vyos-api.rst:205 +#: ../../automation/vyos-api.rst:237 msgid "delete an image, for example ``1.3-rolling-202006070117``" msgstr "borrar una imagen, por ejemplo ``1.3-rolling-202006070117``" +#: ../../automation/terraform/terraformGoogle.rst:19 +msgid "google cloud" +msgstr "google cloud" + +#: ../../automation/terraform/terraformAWS.rst:528 +#: ../../automation/terraform/terraformAZ.rst:470 +#: ../../automation/terraform/terraformGoogle.rst:693 +#: ../../automation/terraform/terraformvSphere.rst:381 +msgid "group_vars/all" +msgstr "group_vars/all" + #: ../../automation/vyos-ansible.rst:42 msgid "hosts" msgstr "Hospedadores" @@ -892,18 +1598,90 @@ msgstr "id_rsa_docker.pub. Necesita declarar solo la clave pública exactamente. msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." msgstr "si solo desea el valor de un nodo de varios valores, utilice la operación ``returnValues``." +#: ../../automation/terraform/terraformAWS.rst:495 +#: ../../automation/terraform/terraformAZ.rst:438 +#: ../../automation/terraform/terraformGoogle.rst:662 +#: ../../automation/terraform/terraformvSphere.rst:350 +msgid "instance.yml" +msgstr "instance.yml" + +#: ../../automation/vyos-terraform.rst:313 +#: ../../automation/vyos-terraform.rst:758 +msgid "main.tf" +msgstr "main.tf" + #: ../../automation/vyos-ansible.rst:56 msgid "main.yml" msgstr "principal.yml" +#: ../../automation/terraform/terraformGoogle.rst:84 +msgid "mykey.json you have to get using step 2 of the google cloud" +msgstr "mykey.json you have to get using step 2 of the google cloud" + +#: ../../automation/terraform/terraformAWS.rst:488 +msgid "mykey.pem" +msgstr "mykey.pem" + +#: ../../automation/terraform/terraformAWS.rst:85 +msgid "mykey.pem you have to get using step 1.2" +msgstr "mykey.pem you have to get using step 1.2" + +#: ../../automation/vyos-pyvyos.rst:6 +msgid "pyvyos" +msgstr "pyvyos" + +#: ../../automation/vyos-pyvyos.rst:8 +msgid "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." +msgstr "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." + #: ../../automation/vyos-salt.rst:141 msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" msgstr "r11-proxy.sls Incluye parámetros para conectarse a salt-proxy minion" #: ../../automation/index.rst:7 +#: ../../automation/terraform/index.rst:7 msgid "startup scripts" msgstr "guiones de inicio" +#: ../../automation/terraform/terraformAWS.rst:452 +#: ../../automation/terraform/terraformAZ.rst:405 +#: ../../automation/terraform/terraformGoogle.rst:623 +#: ../../automation/terraform/terraformvSphere.rst:307 +msgid "terraform.tfvars" +msgstr "terraform.tfvars" + #: ../../automation/vyos-salt.rst:131 msgid "top.sls" msgstr "top.sls" + +#: ../../automation/terraform/terraformvSphere.rst:20 +msgid "vSphere" +msgstr "vSphere" + +#: ../../automation/terraform/terraformAWS.rst:415 +#: ../../automation/terraform/terraformAZ.rst:298 +#: ../../automation/terraform/terraformGoogle.rst:538 +#: ../../automation/terraform/terraformvSphere.rst:239 +msgid "var.tf" +msgstr "var.tf" + +#: ../../automation/vyos-terraform.rst:516 +#: ../../automation/vyos-terraform.rst:899 +msgid "variables.tf" +msgstr "variables.tf" + +#: ../../automation/terraform/terraformAWS.rst:439 +#: ../../automation/terraform/terraformvSphere.rst:223 +msgid "versions.tf" +msgstr "versions.tf" + +#: ../../automation/vyos-api.rst:145 +msgid "versus a non-existent path:" +msgstr "versus a non-existent path:" + +#: ../../automation/terraform/terraformAWS.rst:300 +#: ../../automation/terraform/terraformAZ.rst:95 +#: ../../automation/terraform/terraformGoogle.rst:377 +#: ../../automation/terraform/terraformvSphere.rst:98 +msgid "vyos.tf" +msgstr "vyos.tf" diff --git a/docs/_locale/es/cli.pot b/docs/_locale/es/cli.pot index a8038b51..1c4c9191 100644 --- a/docs/_locale/es/cli.pot +++ b/docs/_locale/es/cli.pot @@ -28,23 +28,23 @@ msgstr "**Configuración de trabajo** es la que se está modificando actualmente msgid "A VyOS system has three major types of configurations:" msgstr "Un sistema VyOS tiene tres tipos principales de configuraciones:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "Un reinicio porque no ingresaste ``confirm`` no te llevará necesariamente a la *configuración guardada*, sino al punto anterior a la desafortunada confirmación." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Acceder al modo de operación desde el modo de configuración" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "El acceso a estos comandos es posible mediante el uso del comando ``ejecutar [comando]``. Desde este mando tendrás acceso a todo lo accesible desde el modo operativo." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Agregue un comentario como una anotación a un nodo de configuración." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "Todos los cambios en la configuración de trabajo se perderán." @@ -52,7 +52,7 @@ msgstr "Todos los cambios en la configuración de trabajo se perderán." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "Todos los comandos ejecutados aquí son relativos al nivel de configuración que ha ingresado. Puede hacer todo desde el nivel superior, pero los comandos serán bastante largos al escribirlos manualmente." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "Una cosa importante a tener en cuenta es que dado que el comentario se agrega en la parte superior de la sección, no aparecerá si el `` mostrar<section> Se utiliza el comando ``. Con el ejemplo anterior, el comando `show firewall` volvería comenzando después de la línea ``firewall {``, ocultando el comentario." @@ -72,11 +72,11 @@ msgstr "De forma predeterminada, la configuración se muestra en una jerarquía msgid "Command Line Interface" msgstr "Interfaz de línea de comandos" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "La finalización de comandos y la ayuda de sintaxis con ``?`` y ``[tab]`` también funcionarán." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Comparar configuraciones" @@ -92,11 +92,11 @@ msgstr "Descripción general de la configuración" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Los comandos de configuración se aplanan del árbol en comandos de 'una sola línea' que se muestran en :opcmd:`mostrar comandos de configuración` desde el modo de operación. Los comandos son relativos al nivel en el que se ejecutan y toda la información redundante del nivel actual se elimina del comando ingresado." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "No se puede salir del modo de configuración mientras existan cambios no confirmados. Para salir del modo de configuración sin aplicar los cambios, se debe utilizar el comando :cfgcmd:`exit descartar`." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copie un elemento de configuración." @@ -104,7 +104,7 @@ msgstr "Copie un elemento de configuración." msgid "Editing the configuration" msgstr "Editando la configuración" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Ejemplo:" @@ -124,11 +124,11 @@ msgstr "Por ejemplo, al escribir ``sh`` seguido de la tecla ``TAB`` se completar msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Obtenga una colección de todos los comandos establecidos necesarios que condujeron a la configuración en ejecución." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "Si está conectado de forma remota, perderá su conexión. Es posible que desee copiar primero la configuración, editarla para garantizar la conectividad y cargar la configuración editada." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "En el caso de que desee eliminar completamente su configuración y restaurar la predeterminada, puede ingresar el siguiente comando en el modo de configuración:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "También es posible mostrar todos los comandos `set` dentro del modo de configuración usando :cfgcmd:`show | comandos`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Archivo local" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Administrar configuraciones" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Tenga en cuenta que el comando ``mostrar`` respeta su nivel de edición y desde este nivel puede ver el conjunto de reglas de firewall modificado con solo ``mostrar`` sin parámetros." @@ -164,31 +164,31 @@ msgstr "El modo operativo permite que los comandos realicen tareas operativas de msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Cambios rápidos de ``$`` a ``#``. Para salir del modo de configuración, escriba ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Archivo remoto" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Cambiar el nombre de un elemento de configuración." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restaurar predeterminado" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Las revisiones se almacenan en el disco. Puede verlos, compararlos y revertirlos a cualquier revisión anterior si algo sale mal." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Cambios de reversión" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Retroceder a la revisión N (actualmente requiere reiniciar)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Guardar y cargar manualmente" @@ -200,11 +200,11 @@ msgstr "Consulte la sección de configuración de este documento para obtener m msgid "Seeing and navigating the configuration" msgstr "Ver y navegar por la configuración" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Mostrar diferencia de revisión de confirmación." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Especifique la ubicación remota del archivo de confirmación como cualquiera de los siguientes :abbr:`URI (Identificador uniforme de recursos)`" @@ -228,11 +228,15 @@ msgstr "El comando :cfgcmd:`show` dentro del modo de configuración mostrará la msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "El comando ``comentario`` le permite insertar un comentario encima del ``<config node> `` sección de configuración. Cuando se muestran, los comentarios se encierran con ``/*`` y ``*/`` como delimitadores de apertura/cierre. Los comentarios deben confirmarse, al igual que otros cambios de configuración." -#: ../../cli.rst:784 +#: ../../cli.rst:656 +msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." +msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." + +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "El comando :cfgcmd:`compare` le permite comparar diferentes tipos de configuraciones. También le permite comparar diferentes revisiones a través del comando :cfgcmd:`compare NM`, donde N y M son números de revisión. La salida describirá cómo es la configuración N en comparación con M indicando con un signo más (``+``) las partes adicionales que tiene N en comparación con M, e indicando con un signo menos (``-``) las que faltan. las partes N fallan en comparación con M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "El comando anterior también te permite ver la diferencia entre dos confirmaciones. De forma predeterminada, se muestra la diferencia con la configuración en ejecución." @@ -248,11 +252,11 @@ msgstr "La configuración se puede editar mediante el uso de los comandos :cfgcm msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "El nivel de jerarquía actual se puede cambiar con el comando :cfgcmd:`edit`." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "El número de revisiones no afecta el archivo de confirmación." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Entonces es posible que desee :cfgcmd:`save` para eliminar también la configuración guardada." @@ -264,7 +268,7 @@ msgstr "Estos comandos también son relativos al nivel en el que se encuentra y msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "Estos dos comandos anteriores son esencialmente los mismos, solo que se ejecutan desde diferentes niveles en la jerarquía." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "Esto significa que hace cuatro confirmaciones hicimos ``set system ipv6 disabled-forwarding``." @@ -276,7 +280,7 @@ msgstr "Para eliminar una entrada de configuración, use el comando :cfgcmd:`del msgid "To enter configuration mode use the ``configure`` command:" msgstr "Para ingresar al modo de configuración use el comando ``configure``:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "Para eliminar un comentario existente de su configuración actual, especifique una cadena vacía entre comillas dobles (``""``) como texto del comentario." @@ -284,11 +288,11 @@ msgstr "Para eliminar un comentario existente de su configuración actual, espec msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use los comandos ``mostrar configuración | comando strip-private`` cuando desee ocultar datos privados. Es posible que desee hacerlo si desea compartir su configuración en el `foro`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Utilice este comando para cargar una configuración que reemplazará la configuración en ejecución. Defina la ubicación del archivo de configuración que se va a cargar. Puede utilizar una ruta a un archivo local, una dirección SCP, una dirección SFTP, una dirección FTP, una dirección HTTP, una dirección HTTPS o una dirección TFTP." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Utilice este comando para conservar los cambios de configuración al reiniciar. De forma predeterminada, se almacena en */config/config.boot*. En caso de que desee almacenar el archivo de configuración en otro lugar, puede agregar una ruta local, una dirección SCP, una dirección FTP o una dirección TFTP." @@ -296,15 +300,15 @@ msgstr "Utilice este comando para conservar los cambios de configuración al rei msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Utilice este comando para establecer el valor de un parámetro o para crear un nuevo elemento." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use este comando para detectar cuáles son las diferencias entre las diferentes configuraciones." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Utilice este comando para confirmar temporalmente sus cambios y establecer la cantidad de minutos disponibles para la validación. Se debe ingresar ``confirmar`` dentro de esos minutos, de lo contrario, el sistema se reiniciará con la configuración anterior. El valor predeterminado es 10 minutos." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "Ver todas las revisiones existentes en el sistema local." @@ -320,15 +324,19 @@ msgstr "Ver la configuración activa actual en formato JSON." msgid "View the current active configuration in readable JSON format." msgstr "Vea la configuración activa actual en formato JSON legible." +#: ../../cli.rst:855 +msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." +msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." + #: ../../cli.rst:852 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS puede cargar la configuración en una ubicación remota después de cada llamada a :cfgcmd:`commit`. Deberá establecer la ubicación del archivo de confirmación. Se admiten servidores TFTP, FTP, SCP y SFTP. Cada vez que un :cfgcmd:`commit` tiene éxito, el archivo ``config.boot`` se copiará en los destinos definidos. El nombre de archivo utilizado en el host remoto será ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS viene con un sistema de control de versiones integrado para la configuración del sistema. Mantiene automáticamente una copia de seguridad de todas las configuraciones anteriores que se han comprometido en el sistema. Las configuraciones se versionan localmente para revertirlas, pero también se pueden almacenar en un host remoto por razones de archivado/copia de seguridad." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS le permite comparar diferentes configuraciones." @@ -340,6 +348,10 @@ msgstr "VyOS utiliza un archivo de configuración unificado para la configuraci msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "¿Qué pasa si estás haciendo algo peligroso? Suponga que desea configurar un firewall y no está seguro de que no haya errores que lo bloqueen del sistema. Puede usar la confirmación confirmada. Si ejecuta el comando ``commit-confirm``, sus cambios se confirmarán, y si no ejecuta el comando ``confirm`` en 10 minutos, su sistema se reiniciará con la revisión de configuración anterior." +#: ../../cli.rst:561 +msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." + #: ../../cli.rst:340 msgid "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." msgstr "Al ingresar al modo de configuración, está navegando dentro de una estructura de árbol, para ingresar al modo de configuración, ingrese el comando :opcmd:`configure` cuando esté en modo operativo." @@ -348,7 +360,7 @@ msgstr "Al ingresar al modo de configuración, está navegando dentro de una est msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "Al ingresar al modo de configuración, el aviso cambia de ``$`` a ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "Cuando está dentro del modo de configuración, no puede ejecutar directamente los comandos operativos." @@ -356,7 +368,7 @@ msgstr "Cuando está dentro del modo de configuración, no puede ejecutar direct msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "Cuando la salida de un comando da como resultado más líneas de las que se pueden mostrar en la pantalla de la terminal, la salida se pagina como lo indica un indicador ``:``." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "Al usar el comando save_, puede agregar una ubicación específica donde almacenar su archivo de configuración. Y, cuando lo necesites, podrás cargarlo con el comando ``load``:" @@ -372,15 +384,15 @@ msgstr "Ahora se encuentra en un subnivel relativo a ``interfaces ethernet eth0` msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "También puede cambiar el nombre de los subárboles de configuración:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "Puede copiar y eliminar subárboles de configuración. Suponga que configura un conjunto de reglas de cortafuegos ``FromWorld`` con una regla que permite el tráfico desde una subred específica. Ahora desea configurar una regla similar, pero para una subred diferente. Cambie su nivel de edición a ``nombre de firewall FromWorld`` y use ``copie la regla 10 a la regla 20``, luego modifique la regla 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "Puede revertir los cambios de configuración mediante el comando de reversión. Esto aplicará la revisión seleccionada y activará un reinicio del sistema." @@ -388,19 +400,23 @@ msgstr "Puede revertir los cambios de configuración mediante el comando de reve msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "Puedes desplazarte hacia arriba con las teclas ``[Shift]+[PageUp]`` y desplazarte hacia abajo con ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "Puede especificar el número de revisiones almacenadas en el disco. N puede estar en el rango de 0 a 65535. Cuando el número de revisiones supera el valor configurado, se elimina la revisión más antigua. La configuración predeterminada para este valor es almacenar 100 revisiones localmente." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "Puede usar los comandos ``guardar`` y ``cargar`` si desea administrar manualmente archivos de configuración específicos." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "Es posible que VyOS no permita la conexión segura porque no puede verificar la legitimidad del servidor remoto. Puede usar la solución a continuación para agregar rápidamente la huella digital SSH del host remoto a su archivo ``~/.ssh/known_hosts``:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "Se le preguntará si desea continuar. Si acepta, deberá usar :cfgcmd:`commit` si desea activar los cambios." @@ -408,19 +424,19 @@ msgstr "Se le preguntará si desea continuar. Si acepta, deberá usar :cfgcmd:`c msgid "``b`` will scroll back one page" msgstr "``b`` retrocederá una página" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user> :<passwd> @<host> /<dir> ``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -436,11 +452,11 @@ msgstr "La tecla ``q`` se puede utilizar para cancelar la salida" msgid "``return`` will scroll down one line" msgstr "``return`` se desplazará una línea hacia abajo" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user> :<passwd> @<host> :/<dir> ``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user> :<passwd> @<host> /<dir> ``" @@ -448,7 +464,7 @@ msgstr "``sftp://<user> :<passwd> @<host> /<dir> ``" msgid "``space`` will scroll down one page" msgstr "``espacio`` se desplazará hacia abajo una página" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host> /<dir> ``" diff --git a/docs/_locale/es/configexamples.pot b/docs/_locale/es/configexamples.pot index 7574e74f..c1bdffc0 100644 --- a/docs/_locale/es/configexamples.pot +++ b/docs/_locale/es/configexamples.pot @@ -272,7 +272,7 @@ msgstr "Una breve excursión a los VRF: esta ha sido una de las solicitudes de f msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." msgstr "Un recurso de conexión implementado en Azure que vincula la puerta de enlace de la red virtual de Azure y la puerta de enlace de la red local que representa el dispositivo Vyos." -#: ../../configexamples/index.rst:37 +#: ../../configexamples/index.rst:38 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." msgstr "Se utilizará un host ``vyos-oobm`` como proxy ssh. Este host solo es necesario para la prueba de laboratorio." @@ -318,6 +318,14 @@ msgstr "Directorio activo en el servidor de Windows" msgid "Add (temporary) default route" msgstr "Agregar ruta predeterminada (temporal)" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -351,6 +359,10 @@ msgid "After configured all the VRFs involved in this topology we take a deeper msgstr "Después de configurar todos los VRF involucrados en esta topología, echamos un vistazo más profundo tanto a BGP como a la tabla de enrutamiento para VRF LAN1." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "Todo el tráfico que ingresa a través de eth2 se equilibra entre eth0 y msgid "Allow DHCPv6 packets for router" msgstr "Permitir paquetes DHCPv6 para el enrutador" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -572,6 +592,10 @@ msgid "Basic Setup (via console)" msgstr "Configuración básica (a través de la consola)" #: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + +#: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -656,11 +680,19 @@ msgstr "Cisco VPC Crossconnect: puertos 39 y 40 enlazados entre cada switch" msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." msgstr "Sujete el MSS de VTI a 1350 para evitar los agujeros negros de PMTU." +#: ../../configexamples/lac-lns.rst:96 +msgid "Client" +msgstr "Client" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:94 msgid "Client configuration" msgstr "Configuración del cliente" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -704,7 +736,7 @@ msgstr "Configuración 'dcsp' y modelador usando QoS" msgid "Configuration Blueprints" msgstr "Planos de configuración" -#: ../../configexamples/index.rst:30 +#: ../../configexamples/index.rst:31 msgid "Configuration Blueprints (autotest)" msgstr "Configuración de blueprints (autoprueba)" @@ -717,6 +749,7 @@ msgid "Configuration of basic firewall in one site, in order to:" msgstr "Configuration of basic firewall in one site, in order to:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113 +#: ../../configexamples/lac-lns.rst:29 #: ../../configexamples/pppoe-ipv6-basic.rst:26 msgid "Configurations" msgstr "Configuraciones" @@ -885,7 +918,7 @@ msgstr "Enrutamiento dinámico utilizado entre nodos CE y PE y peering eBGP esta msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." msgstr "Cada interfaz está asignada a una zona. La interfaz puede ser física o virtual, como túneles (VPN, PPTP, GRE, etc.) y se tratan exactamente de la misma manera." -#: ../../configexamples/index.rst:34 +#: ../../configexamples/index.rst:35 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." msgstr "Cada laboratorio creará una prueba a partir de un script externo. El contenido de la página se generará, por lo que los cambios no tendrán efecto." @@ -1008,6 +1041,10 @@ msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn msgstr "Para configuraciones redundantes/activo-activo, consulte :ref:`examples-azure-vpn-dual-bgp`" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1213,6 +1250,10 @@ msgid "In the end, you will end up with something like this config. I took out e msgstr "Al final, terminará con algo como esta configuración. Eliminé todo excepto las secciones Firewall, Interfaces y zone-policy. Es lo suficientemente largo como está." #: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + +#: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1252,6 +1293,14 @@ msgstr "En este ejemplo, existen dos interfaces LAN en diferentes subredes en lu msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." msgstr "En este ejemplo tenemos 4 zonas. LAN, WAN, DMZ, locales. La zona local es el propio cortafuegos." +#: ../../configexamples/lac-lns.rst:17 +msgid "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." +msgstr "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." + +#: ../../configexamples/lac-lns.rst:98 +msgid "In this lab we use Windows PPPoE client." +msgstr "In this lab we use Windows PPPoE client." + #: ../../configexamples/zone-policy.rst:50 msgid "Inbound WAN connect to DMZ host." msgstr "Conexión WAN entrante al host DMZ." @@ -1265,6 +1314,14 @@ msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Información sobre prefijo-sid y etiqueta-operación de VyOS" #: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + +#: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1345,6 +1402,10 @@ msgstr "Tabla de parámetros de configuración de L3VPN:" msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" msgstr "L3VPN para conectividad Hub-and-Spoke con VyOS" +#: ../../configexamples/lac-lns.rst:32 +msgid "LAC" +msgstr "LAC" + #: ../../configexamples/zone-policy.rst:392 msgid "LAN, WAN, DMZ, local and TUN (tunnel)" msgstr "LAN, WAN, DMZ, local y TUN (túnel)" @@ -1389,6 +1450,10 @@ msgstr "Los hosts LAN y DMZ tienen acceso de salida básico: Web, FTP, SSH." msgid "LAN can access DMZ resources." msgstr "La LAN puede acceder a los recursos de la DMZ." +#: ../../configexamples/lac-lns.rst:72 +msgid "LNS" +msgstr "LNS" + #: ../../configexamples/l3vpn-hub-and-spoke.rst:551 msgid "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" msgstr "Verifiquemos el enrutamiento IPv4 y la información de MPLS en los nodos del proveedor (el mismo procedimiento para todos los nodos P):" @@ -1398,6 +1463,10 @@ msgid "Let’s say we have a requirement to have multiple networks." msgstr "Digamos que tenemos un requisito para tener varias redes." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1433,9 +1502,22 @@ msgid "Masquerade Traffic originating from 10.200.201.0/24 that is heading out t msgstr "Tráfico de enmascaramiento que se origina en 10.200.201.0/24 que se dirige hacia la interfaz pública." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:254 +#: ../../configexamples/lac-lns.rst:106 msgid "Monitoring" msgstr "Supervisión" +#: ../../configexamples/lac-lns.rst:117 +msgid "Monitoring on LAC side" +msgstr "Monitoring on LAC side" + +#: ../../configexamples/lac-lns.rst:108 +msgid "Monitoring on LNS side" +msgstr "Monitoring on LNS side" + +#: ../../configexamples/lac-lns.rst:140 +msgid "Monitoring on RADIUS Server side" +msgstr "Monitoring on RADIUS Server side" + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162 msgid "Multiple LAN/DMZ Setup" msgstr "Configuración de múltiples LAN/DMZ" @@ -1456,6 +1538,7 @@ msgstr "IPv4 e IPv6 nativos" msgid "Network Cabling" msgstr "Cableado de red" +#: ../../configexamples/lac-lns.rst:21 #: ../../configexamples/pppoe-ipv6-basic.rst:18 msgid "Network Topology" msgstr "Topología de la red" @@ -1463,6 +1546,7 @@ msgstr "Topología de la red" #: ../../configexamples/ansible.rst:-1 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:-1 #: ../../configexamples/l3vpn-hub-and-spoke.rst:-1 +#: ../../configexamples/lac-lns.rst:-1 #: ../../configexamples/nmp.rst:-1 #: ../../configexamples/pppoe-ipv6-basic.rst:-1 #: ../../configexamples/qos.rst:-1 @@ -1655,6 +1739,10 @@ msgstr "Configuración básica de PPPoE IPv6 para la red doméstica" msgid "PPPoE Setup" msgstr "Configuración de PPPoE" +#: ../../configexamples/lac-lns.rst:7 +msgid "PPPoE over L2TP" +msgstr "PPPoE over L2TP" + #: ../../configexamples/segment-routing-isis.rst:255 msgid "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" msgstr "Haga ping entre VyOS-P1 / VyOS-P2 para confirmar la accesibilidad:" @@ -1692,6 +1780,10 @@ msgid "Priorities" msgstr "Prioridades" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2046,7 +2138,7 @@ msgstr "El laboratorio que construí usa un VRF (llamado **mgmt**) para proporci msgid "The lab was built using EVE-NG." msgstr "The lab was built using EVE-NG." -#: ../../configexamples/index.rst:32 +#: ../../configexamples/index.rst:33 msgid "The next pages contains automatic full tested configuration examples." msgstr "Las siguientes páginas contienen ejemplos de configuración probados completamente automáticos." @@ -2054,7 +2146,7 @@ msgstr "Las siguientes páginas contienen ejemplos de configuración probados co msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." msgstr "El ejemplo anterior usó el comando de conmutación por error para enviar tráfico a través de eth1 si falla eth0. En este ejemplo, el orden de las reglas proporciona la funcionalidad de conmutación por error." -#: ../../configexamples/index.rst:40 +#: ../../configexamples/index.rst:41 msgid "The process will do the following steps:" msgstr "El proceso seguirá los siguientes pasos:" @@ -2123,6 +2215,10 @@ msgid "This chapter contains various configuration examples:" msgstr "Este capítulo contiene varios ejemplos de configuración:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2130,6 +2226,10 @@ msgstr "This configuration example and the requirments consists on:" msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." msgstr "Este documento tiene como objetivo guiarlo a través de la configuración de todo, de modo que pueda reiniciar cualquier máquina y no perder más de unos segundos de conectividad." +#: ../../configexamples/lac-lns.rst:9 +msgid "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." +msgstr "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." + #: ../../configexamples/pppoe-ipv6-basic.rst:9 msgid "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." msgstr "Este documento describe una configuración básica que utiliza PPPoE con DHCPv6-PD + SLAAC para construir una red doméstica típica. El usuario puede seguir los pasos que se describen aquí para configurar rápidamente una red que funcione y usar esto como punto de partida para configurar o ajustar otras configuraciones." @@ -2166,6 +2266,10 @@ msgstr "Esta guía muestra un ejemplo de una VPN de sitio a sitio IKEv2 basada e msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "Esta guía recorre la configuración de https://www.tunnelbroker.net/ para un túnel IPv6." @@ -2210,6 +2314,10 @@ msgstr "Esta sección describe los comandos de verificación para los protocolos msgid "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." msgstr "Esta sección proporciona pasos de configuración para establecer VRF en nuestros nodos PE, incluidas las interfaces orientadas a CE, BGP, rd e importación/exportación de destino de ruta en función de los parámetros predefinidos." +#: ../../configexamples/lac-lns.rst:91 +msgid "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." +msgstr "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." + #: ../../configexamples/autotest/Wireguard/Wireguard.rst:10 msgid "This simple structure show how to connect two offices. One remote branch and the central office." msgstr "Esta estructura simple muestra cómo conectar dos oficinas. Una sucursal remota y la oficina central." @@ -2580,6 +2688,10 @@ msgstr "Cuando tenga ambos enrutadores activos, debería poder establecer una co msgid "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" msgstr "Cuando haya habilitado OSPF en ambos enrutadores, debería poder verse con el comando ``show ip ospf neighbour``. El estado debe ser 'Completo' o '2 vías'. Si no es así, entonces hay un problema de conectividad de red entre los hosts. Esto suele deberse a problemas de NAT o MTU. No debería ver ninguna ruta nueva (a menos que esta sea la segunda pasada) en la salida de ``show ip route``" +#: ../../configexamples/lac-lns.rst:-1 +msgid "Window PPPoE Client Configuration" +msgstr "Window PPPoE Client Configuration" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:13 msgid "Windows Server 2019 with a running Active Directory" msgstr "Windows Server 2019 con Active Directory en ejecución" @@ -2713,15 +2825,15 @@ msgstr "compute3 - Puerto 11 de cada switch" msgid "compute3 (VMware ESXi 6.5)" msgstr "computar3 (VMware ESXi 6.5)" -#: ../../configexamples/index.rst:43 +#: ../../configexamples/index.rst:44 msgid "configure each host in the lab" msgstr "configurar cada host en el laboratorio" -#: ../../configexamples/index.rst:42 +#: ../../configexamples/index.rst:43 msgid "create the lab on a eve-ng server" msgstr "crear el laboratorio en un servidor eve-ng" -#: ../../configexamples/index.rst:44 +#: ../../configexamples/index.rst:45 msgid "do some defined tests" msgstr "hacer algunas pruebas definidas" @@ -2742,7 +2854,7 @@ msgstr "comunidad extendida y etiqueta remota de destino específico" msgid "first the PCA" msgstr "primero el PCA" -#: ../../configexamples/index.rst:46 +#: ../../configexamples/index.rst:47 msgid "generate the documentation and include files" msgstr "generar la documentación e incluir archivos" @@ -2754,7 +2866,7 @@ msgstr "verde usa la identificación de la tabla de enrutamiento local y VNI 400 msgid "information between PE and CE:" msgstr "información entre PE y CE:" -#: ../../configexamples/index.rst:45 +#: ../../configexamples/index.rst:46 msgid "optional do an upgrade to a higher version and do step 3 again." msgstr "opcional, actualice a una versión superior y vuelva a realizar el paso 3." @@ -2770,7 +2882,7 @@ msgstr "router2 (máquina aleatoria de 1RU con 4 NIC)" msgid "save the output to a file and import it in nearly all openvpn clients." msgstr "guarde el resultado en un archivo e impórtelo en casi todos los clientes de openvpn." -#: ../../configexamples/index.rst:47 +#: ../../configexamples/index.rst:48 msgid "shutdown and destroy the lab, if there is no error" msgstr "apagar y destruir el laboratorio, si no hay ningún error" diff --git a/docs/_locale/es/configuration.pot b/docs/_locale/es/configuration.pot index 91efbcec..b7b3a78a 100644 --- a/docs/_locale/es/configuration.pot +++ b/docs/_locale/es/configuration.pot @@ -76,12 +76,20 @@ msgstr "**9** - NetFlow versión 9 (predeterminado)" msgid "**AS path length check**" msgstr "**Comprobación de longitud de ruta AS**" +#: ../../configuration/service/dhcp-server.rst:175 +msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." +msgstr "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." + +#: ../../configuration/service/dhcp-server.rst:178 +msgid "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." +msgstr "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." + #: ../../configuration/protocols/bgp.rst:106 msgid "**Already-selected external check**" msgstr "**Comprobación externa ya seleccionada**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Se aplica a:** Tráfico entrante." @@ -97,6 +105,7 @@ msgstr "**Se aplica a:** Tráfico saliente." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Se aplica a:** Tráfico saliente." @@ -168,9 +177,11 @@ msgstr "**Documentation under development**" msgid "**Ethernet (protocol, destination address or source address)**" msgstr "**Ethernet (protocolo, dirección de destino o dirección de origen)**" -#: ../../configuration/service/dhcp-server.rst:200 -#: ../../configuration/service/dhcp-server.rst:587 -#: ../../configuration/service/dhcp-server.rst:626 +#: ../../configuration/service/dhcp-server.rst:63 +#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:646 +#: ../../configuration/service/dhcp-server.rst:687 msgid "**Example:**" msgstr "**Ejemplo:**" @@ -269,11 +280,11 @@ msgstr "**Input**: stage where traffic destined for the router itself can be fil msgid "**Interface name**" msgstr "**Nombre de interfaz**" -#: ../../configuration/vpn/site2site_ipsec.rst:303 +#: ../../configuration/vpn/site2site_ipsec.rst:306 msgid "**LEFT**" msgstr "**LEFT**" -#: ../../configuration/vpn/site2site_ipsec.rst:287 +#: ../../configuration/vpn/site2site_ipsec.rst:290 msgid "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" msgstr "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" @@ -309,11 +320,11 @@ msgstr "**CON cheque**" msgid "**Multi-path check**" msgstr "**Comprobación de rutas múltiples**" -#: ../../configuration/protocols/bgp.rst:1193 +#: ../../configuration/protocols/bgp.rst:1215 msgid "**Node1:**" msgstr "**Nodo1:**" -#: ../../configuration/protocols/bgp.rst:1221 +#: ../../configuration/protocols/bgp.rst:1243 msgid "**Node2:**" msgstr "**Nodo2:**" @@ -326,10 +337,10 @@ msgid "**Node 1**" msgstr "**Nodo 1**" #: ../../configuration/protocols/babel.rst:192 -#: ../../configuration/protocols/bgp.rst:1103 -#: ../../configuration/protocols/bgp.rst:1130 -#: ../../configuration/protocols/bgp.rst:1148 -#: ../../configuration/protocols/bgp.rst:1176 +#: ../../configuration/protocols/bgp.rst:1125 +#: ../../configuration/protocols/bgp.rst:1152 +#: ../../configuration/protocols/bgp.rst:1170 +#: ../../configuration/protocols/bgp.rst:1198 #: ../../configuration/protocols/isis.rst:341 #: ../../configuration/protocols/isis.rst:416 #: ../../configuration/protocols/isis.rst:457 @@ -350,10 +361,10 @@ msgid "**Node 2**" msgstr "**Nodo 2**" #: ../../configuration/protocols/babel.rst:202 -#: ../../configuration/protocols/bgp.rst:1114 #: ../../configuration/protocols/bgp.rst:1136 -#: ../../configuration/protocols/bgp.rst:1160 +#: ../../configuration/protocols/bgp.rst:1158 #: ../../configuration/protocols/bgp.rst:1182 +#: ../../configuration/protocols/bgp.rst:1204 #: ../../configuration/protocols/isis.rst:352 #: ../../configuration/protocols/isis.rst:432 #: ../../configuration/protocols/isis.rst:511 @@ -384,6 +395,10 @@ msgid "**Output**: stage where traffic that is originated by the router itself c msgstr "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:65 +msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" @@ -411,7 +426,7 @@ msgstr "**Prerouting**: several actions can be done in this stage, and currently msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" -#: ../../configuration/service/dhcp-server.rst:391 +#: ../../configuration/service/dhcp-server.rst:448 msgid "**Primary**" msgstr "**Primario**" @@ -423,6 +438,10 @@ msgstr "**Disciplina de colas** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Disciplina de colas:** Déficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Disciplina de colas:** Descenso anticipado aleatorio generalizado." @@ -481,11 +500,11 @@ msgstr "**Grupos de IP basados en RADIUS (dirección IP enmarcada)**" msgid "**RADIUS sessions management DM/CoA**" msgstr "**Administración de sesiones RADIUS DM/CoA**" -#: ../../configuration/vpn/site2site_ipsec.rst:343 +#: ../../configuration/vpn/site2site_ipsec.rst:346 msgid "**RIGHT**" msgstr "**RIGHT**" -#: ../../configuration/vpn/site2site_ipsec.rst:293 +#: ../../configuration/vpn/site2site_ipsec.rst:296 msgid "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" @@ -521,15 +540,15 @@ msgstr "**SW1**" msgid "**SW2**" msgstr "**SW2**" -#: ../../configuration/service/dhcp-server.rst:400 +#: ../../configuration/service/dhcp-server.rst:458 msgid "**Secondary**" msgstr "**Secundario**" -#: ../../configuration/vpn/ipsec.rst:261 +#: ../../configuration/vpn/ipsec.rst:265 msgid "**Setting up IPSec**" msgstr "**Configuración de IPSec**" -#: ../../configuration/vpn/ipsec.rst:237 +#: ../../configuration/vpn/ipsec.rst:241 msgid "**Setting up the GRE tunnel**" msgstr "**Configuración del túnel GRE**" @@ -566,6 +585,10 @@ msgstr "**Enrutador VyOS:**" msgid "**Weight check**" msgstr "**Comprobación de peso**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**dirección** se puede especificar varias veces, por ejemplo, 192.168.100.1 y/o 192.168.100.0/24" @@ -575,11 +598,25 @@ msgstr "**dirección** se puede especificar varias veces, por ejemplo, 192.168.1 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" msgstr "**dirección** se puede especificar varias veces como dirección IPv4 y/o IPv6, por ejemplo, 192.0.2.1/24 y/o 2001:db8::1/64" +#: ../../configuration/service/pppoe-server.rst:474 +#: ../../configuration/vpn/l2tp.rst:428 +#: ../../configuration/vpn/pptp.rst:352 +#: ../../configuration/vpn/sstp.rst:386 +msgid "**allow** - Negotiate IPv4 only if client requests (Default value)" +msgstr "**allow** - Negotiate IPv4 only if client requests (Default value)" + +#: ../../configuration/service/pppoe-server.rst:349 +#: ../../configuration/vpn/l2tp.rst:293 +#: ../../configuration/vpn/pptp.rst:217 +#: ../../configuration/vpn/sstp.rst:251 +msgid "**allow** - Negotiate IPv6 only if client requests" +msgstr "**allow** - Negotiate IPv6 only if client requests" + #: ../../configuration/container/index.rst:38 msgid "**allow-host-networks** cannot be used with **network**" msgstr "**allow-host-networks** no se puede usar con **red**" -#: ../../configuration/container/index.rst:102 +#: ../../configuration/container/index.rst:107 msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" msgstr "**siempre**: reinicia los contenedores cuando salen, independientemente del estado, reintentando indefinidamente" @@ -595,6 +632,10 @@ msgstr "**aplicación**: analiza los datos de flujo recibidos en el contexto de msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." msgstr "**auto**: determina automáticamente el tipo de interfaz. **cableado**: permite optimizaciones para interfaces cableadas. **inalámbrico**: desactiva una serie de optimizaciones que solo son correctas en las interfaces con cable. La especificación inalámbrica siempre es correcta, pero puede provocar una convergencia más lenta y un tráfico de enrutamiento adicional." +#: ../../configuration/service/ids.rst:90 +msgid "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." +msgstr "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." + #: ../../configuration/protocols/ospf.rst:435 msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." msgstr "**difusión**: distribución de direcciones IP de difusión. **sin transmisión**: distribución de direcciones en topología de redes NBMA. **punto a multipunto**: distribución de direcciones en redes punto a multipunto. **punto a punto**: distribución de direcciones en redes punto a punto." @@ -603,6 +644,13 @@ msgstr "**difusión**: distribución de direcciones IP de difusión. **sin trans msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." msgstr "**difusión**: distribución de direcciones IP de difusión. **punto a punto**: distribución de direcciones en redes punto a punto." +#: ../../configuration/service/pppoe-server.rst:401 +#: ../../configuration/vpn/l2tp.rst:345 +#: ../../configuration/vpn/pptp.rst:269 +#: ../../configuration/vpn/sstp.rst:303 +msgid "**calling-sid** - Calculate interface identifier from calling-station-id." +msgstr "**calling-sid** - Calculate interface identifier from calling-station-id." + #: ../../configuration/protocols/ospf.rst:121 msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." msgstr "**cisco**: un enrutador se considerará como ABR si tiene varios enlaces configurados a las redes en diferentes áreas, una de las cuales es un área de red troncal. Además, el enlace al área de la red troncal debe estar activo (funcionando). **ibm**: idéntico al modelo "cisco", pero en este caso es posible que no esté activo un enlace de área troncal. **estándar**: el enrutador tiene varios enlaces activos a diferentes áreas. **atajo**: idéntico al "estándar", pero en este modelo se permite que un enrutador use una topología de áreas conectadas sin involucrar un área de red troncal para conexiones entre áreas." @@ -619,7 +667,28 @@ msgstr "**predeterminado**: esta área se usará para atajos solo si ABR no tien msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." msgstr "**predeterminado**: habilite el horizonte dividido en las interfaces cableadas y deshabilite el horizonte dividido en las interfaces inalámbricas. **habilitar**: habilitar el horizonte dividido en estas interfaces. **deshabilitar**: deshabilitar el horizonte dividido en estas interfaces." -#: ../../configuration/vpn/sstp.rst:199 +#: ../../configuration/service/pppoe-server.rst:566 +msgid "**deny**: Deny second session authorization." +msgstr "**deny**: Deny second session authorization." + +#: ../../configuration/service/pppoe-server.rst:475 +#: ../../configuration/vpn/l2tp.rst:429 +#: ../../configuration/vpn/pptp.rst:353 +#: ../../configuration/vpn/sstp.rst:387 +msgid "**deny** - Do not negotiate IPv4" +msgstr "**deny** - Do not negotiate IPv4" + +#: ../../configuration/service/pppoe-server.rst:350 +#: ../../configuration/vpn/l2tp.rst:294 +#: ../../configuration/vpn/pptp.rst:218 +#: ../../configuration/vpn/sstp.rst:252 +msgid "**deny** - Do not negotiate IPv6 (default value)" +msgstr "**deny** - Do not negotiate IPv6 (default value)" + +#: ../../configuration/service/pppoe-server.rst:507 +#: ../../configuration/vpn/l2tp.rst:461 +#: ../../configuration/vpn/pptp.rst:385 +#: ../../configuration/vpn/sstp.rst:419 msgid "**deny** - deny mppe" msgstr "**negar** - negar mppe" @@ -635,6 +704,10 @@ msgstr "La dirección de la interfaz **dhcp** es recibida por DHCP desde un serv msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." msgstr "DHCPv6 recibe la dirección de la interfaz **dhcpv6** desde un servidor DHCPv6 en este segmento." +#: ../../configuration/service/pppoe-server.rst:565 +msgid "**disable**: Disables session control." +msgstr "**disable**: Disables session control." + #: ../../configuration/service/dhcp-relay.rst:75 msgid "**discard:** Received packets which already contain relay information will be discarded." msgstr "**descartar:** Se descartarán los paquetes recibidos que ya contengan información de retransmisión." @@ -667,6 +740,17 @@ msgstr "**interfaz de entrada** - aplicable solo a :ref:`destination-nat`. Confi msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." +#: ../../configuration/service/pppoe-server.rst:400 +#: ../../configuration/vpn/l2tp.rst:344 +#: ../../configuration/vpn/pptp.rst:268 +#: ../../configuration/vpn/sstp.rst:302 +msgid "**ipv4-addr** - Calculate interface identifier from IPv4 address." +msgstr "**ipv4-addr** - Calculate interface identifier from IPv4 address." + +#: ../../configuration/service/ipoe-server.rst:91 +msgid "**l2**: It means that clients are on same network where interface is.**(default)**" +msgstr "**l2**: It means that clients are on same network where interface is.**(default)**" + #: ../../configuration/interfaces/bonding.rst:161 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" msgstr "**capa2**: utiliza XOR de direcciones MAC de hardware y campo de ID de tipo de paquete para generar el hash. la fórmula es" @@ -707,10 +791,18 @@ msgstr "**solo nivel 2**: actúa solo como un enrutador de área (nivel 2)." msgid "**level-2-only** - Level-2 only adjacencies are formed" msgstr "**solo nivel 2**: se forman adyacencias solo de nivel 2" -#: ../../configuration/vpn/sstp.rst:105 +#: ../../configuration/service/ipoe-server.rst:65 +#: ../../configuration/service/pppoe-server.rst:43 +#: ../../configuration/vpn/l2tp.rst:31 +#: ../../configuration/vpn/pptp.rst:32 +#: ../../configuration/vpn/sstp.rst:58 msgid "**local**: All authentication queries are handled locally." msgstr "**local**: Todas las consultas de autenticación se manejan localmente." +#: ../../configuration/service/ipoe-server.rst:93 +msgid "**local**: It means that client are behind some router." +msgstr "**local**: It means that client are behind some router." + #: ../../configuration/interfaces/wireguard.rst:140 msgid "**local side - commands**" msgstr "**lado local - comandos**" @@ -719,34 +811,55 @@ msgstr "**lado local - comandos**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** En este modo, el recursor intentará validar todos los datos que recupera de los servidores autorizados, independientemente de los deseos de DNSSEC del cliente, y registrará el resultado de la validación. Este modo se puede usar para determinar la carga adicional y la cantidad de respuestas posiblemente falsas antes de activar la validación completa. Las respuestas a las consultas de los clientes son las mismas que con el proceso." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**estrecho**: use el estilo antiguo de TLV con métrica estrecha." -#: ../../configuration/container/index.rst:119 +#: ../../configuration/container/index.rst:124 msgid "**net-admin**: Network operations (interface, firewall, routing tables)" msgstr "**net-admin**: operaciones de red (interfaz, cortafuegos, tablas de enrutamiento)" -#: ../../configuration/container/index.rst:120 +#: ../../configuration/container/index.rst:125 msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" msgstr "**net-bind-service**: vincula un socket a puertos privilegiados (números de puerto inferiores a 1024)" -#: ../../configuration/container/index.rst:121 +#: ../../configuration/container/index.rst:126 msgid "**net-raw**: Permission to create raw network sockets" msgstr "**net-raw**: permiso para crear sockets de red sin procesar" -#: ../../configuration/container/index.rst:100 +#: ../../configuration/container/index.rst:105 msgid "**no**: Do not restart containers on exit" msgstr "**no**: no reinicie los contenedores al salir" +#: ../../configuration/service/ipoe-server.rst:66 +msgid "**noauth**: Authentication disabled" +msgstr "**noauth**: Authentication disabled" + +#: ../../configuration/service/pppoe-server.rst:44 +#: ../../configuration/vpn/pptp.rst:33 +msgid "**noauth**: Authentication disabled." +msgstr "**noauth**: Authentication disabled." + #: ../../configuration/service/dns.rst:66 msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." msgstr "**apagado** En este modo, no se lleva a cabo ningún procesamiento de DNSSEC. El recursor no establecerá el bit DNSSEC OK (DO) en las consultas salientes e ignorará los bits DO y AD en las consultas." -#: ../../configuration/container/index.rst:101 +#: ../../configuration/container/index.rst:106 msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**en caso de error**: reiniciar los contenedores cuando salen con un código de salida distinto de cero, reintentando indefinidamente (predeterminado)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires `<value>`." +msgstr "**order** Rule order. Requires `<value>`." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**interfaz de salida** - aplicable solo a :ref:`source-nat`. Configura la interfaz que se utiliza para el tráfico externo al que se aplica esta regla de traducción." @@ -755,10 +868,35 @@ msgstr "**interfaz de salida** - aplicable solo a :ref:`source-nat`. Configura l msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." -#: ../../configuration/vpn/sstp.rst:198 +#: ../../configuration/service/pppoe-server.rst:473 +#: ../../configuration/vpn/l2tp.rst:427 +#: ../../configuration/vpn/pptp.rst:351 +#: ../../configuration/vpn/sstp.rst:385 +msgid "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" + +#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/vpn/l2tp.rst:292 +#: ../../configuration/vpn/pptp.rst:216 +#: ../../configuration/vpn/sstp.rst:250 +msgid "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" + +#: ../../configuration/vpn/sstp.rst:204 msgid "**prefer** - ask client for mppe, if it rejects don't fail" msgstr "**preferir** - preguntar al cliente por mppe, si lo rechaza no fallar" +#: ../../configuration/service/pppoe-server.rst:506 +#: ../../configuration/vpn/l2tp.rst:460 +#: ../../configuration/vpn/pptp.rst:384 +#: ../../configuration/vpn/sstp.rst:418 +msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" + +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**proceso** Cuando dnssec está configurado para procesar, el comportamiento es similar a procesar sin validar. Sin embargo, el recursor intentará validar los datos si al menos uno de los bits DO o AD está configurado en la consulta; en ese caso, establecerá el bit AD en la respuesta cuando los datos se validen con éxito, o enviará SERVFAIL cuando la validación resulte falsa." @@ -771,39 +909,99 @@ msgstr "**procesar sin validar** En este modo, el recursor actúa como un servid msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocolo**: especifique a qué tipos de protocolos se aplica esta regla de traducción. Solo los paquetes que coinciden con el protocolo especificado reciben NAT. Por defecto, esto se aplica a `todos` los protocolos." -#: ../../configuration/vpn/sstp.rst:103 +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + +#: ../../configuration/service/ipoe-server.rst:63 +#: ../../configuration/service/pppoe-server.rst:41 +#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/vpn/pptp.rst:30 +#: ../../configuration/vpn/sstp.rst:56 msgid "**radius**: All authentication queries are handled by a configured RADIUS server." msgstr "**radius**: Todas las consultas de autenticación son manejadas por un servidor RADIUS configurado." +#: ../../configuration/service/pppoe-server.rst:391 +#: ../../configuration/service/pppoe-server.rst:398 +#: ../../configuration/vpn/l2tp.rst:335 +#: ../../configuration/vpn/l2tp.rst:342 +#: ../../configuration/vpn/pptp.rst:259 +#: ../../configuration/vpn/pptp.rst:266 +#: ../../configuration/vpn/sstp.rst:293 +#: ../../configuration/vpn/sstp.rst:300 +msgid "**random** - Random interface identifier for IPv6" +msgstr "**random** - Random interface identifier for IPv6" + +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires `<value>`." +msgstr "**regexp** Regular expression. Requires `<value>`." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**lado remoto - comandos**" +#: ../../configuration/service/pppoe-server.rst:567 +msgid "**replace**: Terminate first session when second is authorized **(default)**" +msgstr "**replace**: Terminate first session when second is authorized **(default)**" + #: ../../configuration/service/dhcp-relay.rst:81 msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**reemplazar:** la información de retransmisión que ya está presente en un paquete se elimina y se reemplaza con el propio conjunto de información de retransmisión del enrutador." -#: ../../configuration/vpn/sstp.rst:197 +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + +#: ../../configuration/service/pppoe-server.rst:472 +#: ../../configuration/vpn/l2tp.rst:426 +#: ../../configuration/vpn/pptp.rst:350 +#: ../../configuration/vpn/sstp.rst:384 +msgid "**require** - Require IPv4 negotiation" +msgstr "**require** - Require IPv4 negotiation" + +#: ../../configuration/service/pppoe-server.rst:347 +#: ../../configuration/vpn/l2tp.rst:291 +#: ../../configuration/vpn/pptp.rst:215 +#: ../../configuration/vpn/sstp.rst:249 +msgid "**require** - Require IPv6 negotiation" +msgstr "**require** - Require IPv6 negotiation" + +#: ../../configuration/service/pppoe-server.rst:505 +#: ../../configuration/vpn/l2tp.rst:459 +#: ../../configuration/vpn/pptp.rst:383 +#: ../../configuration/vpn/sstp.rst:417 msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**requerir**: solicitar al cliente mppe, si rechaza la conexión de caída" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**bien**" -#: ../../configuration/container/index.rst:122 +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires `<value>`." +msgstr "**service** Service type. Requires `<value>`." + +#: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: conjuntos de capacidades (del conjunto acotado o heredado)" +#: ../../configuration/service/ipoe-server.rst:99 +msgid "**shared**: Multiple clients share the same network. **(default)**" +msgstr "**shared**: Multiple clients share the same network. **(default)**" + #: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." msgstr "**origen**: especifica a qué paquetes se aplica la regla de traducción de NAT según la dirección IP de origen de los paquetes y/o el puerto de origen. Solo los paquetes coincidentes se consideran para NAT." -#: ../../configuration/container/index.rst:123 +#: ../../configuration/container/index.rst:128 msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" msgstr "**sys-admin**: Operaciones de administración (quotactl, mount, sethostname, setdomainname)" -#: ../../configuration/container/index.rst:124 +#: ../../configuration/container/index.rst:129 msgid "**sys-time**: Permission to set system clock" msgstr "**sys-time**: permiso para configurar el reloj del sistema" @@ -819,10 +1017,25 @@ msgstr "**ascendente:** La interfaz de red ascendente es la interfaz de salida q msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." msgstr "**validar** El modo más alto de procesamiento de DNSSEC. En este modo, todas las consultas serán validadas y respondidas con un SERVFAIL en caso de datos falsos, independientemente de la solicitud del cliente." +#: ../../configuration/service/ipoe-server.rst:100 +msgid "**vlan**: One VLAN per client." +msgstr "**vlan**: One VLAN per client." + #: ../../configuration/protocols/isis.rst:102 msgid "**wide** - Use new style of TLVs to carry wider metric." msgstr "**ancho**: use el nuevo estilo de TLV para llevar una métrica más amplia." +#: ../../configuration/service/pppoe-server.rst:392 +#: ../../configuration/service/pppoe-server.rst:399 +#: ../../configuration/vpn/l2tp.rst:336 +#: ../../configuration/vpn/l2tp.rst:343 +#: ../../configuration/vpn/pptp.rst:260 +#: ../../configuration/vpn/pptp.rst:267 +#: ../../configuration/vpn/sstp.rst:294 +#: ../../configuration/vpn/sstp.rst:301 +msgid "**x:x:x:x** - Specify interface identifier for IPv6" +msgstr "**x:x:x:x** - Specify interface identifier for IPv6" + #: ../../configuration/protocols/bgp.rst:143 msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." msgstr "*bgpd* admite la extensión multiprotocolo para BGP. Entonces, si un par remoto admite el protocolo, *bgpd* puede intercambiar información de enrutamiento de IPv6 y/o multidifusión." @@ -887,7 +1100,7 @@ msgstr "0 si no está definido, lo que significa que no se actualiza." msgid "0 if not defined." msgstr "0 si no está definido." -#: ../../configuration/service/dhcp-server.rst:237 +#: ../../configuration/service/dhcp-server.rst:293 #: ../../configuration/system/syslog.rst:114 #: ../../configuration/system/syslog.rst:173 #: ../../configuration/trafficpolicy/index.rst:801 @@ -950,7 +1163,7 @@ msgstr "10 - 10 MBit/s" msgid "11" msgstr "11" -#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:375 msgid "119" msgstr "119" @@ -960,11 +1173,11 @@ msgstr "119" msgid "12" msgstr "12" -#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:380 msgid "121, 249" msgstr "121, 249" -#: ../../configuration/service/dhcp-server.rst:304 +#: ../../configuration/service/dhcp-server.rst:360 #: ../../configuration/system/syslog.rst:138 #: ../../configuration/trafficpolicy/index.rst:870 msgid "13" @@ -976,7 +1189,7 @@ msgstr "13" msgid "14" msgstr "14" -#: ../../configuration/service/dhcp-server.rst:264 +#: ../../configuration/service/dhcp-server.rst:320 #: ../../configuration/system/syslog.rst:142 #: ../../configuration/trafficpolicy/index.rst:866 msgid "15" @@ -1000,7 +1213,7 @@ msgstr "172.16.0.0 a 172.31.255.255 (CIDR: 172.16.0.0/12)" msgid "18" msgstr "18" -#: ../../configuration/service/dhcp-server.rst:269 +#: ../../configuration/service/dhcp-server.rst:325 #: ../../configuration/system/syslog.rst:150 msgid "19" msgstr "19" @@ -1025,7 +1238,7 @@ msgstr "1: Enable DAD (default)" msgid "1 if not defined." msgstr "1 si no está definido." -#: ../../configuration/service/dhcp-server.rst:243 +#: ../../configuration/service/dhcp-server.rst:299 #: ../../configuration/system/syslog.rst:116 #: ../../configuration/system/syslog.rst:178 #: ../../configuration/trafficpolicy/index.rst:799 @@ -1059,7 +1272,7 @@ msgstr "25000 - 25 GBit/s" msgid "2500 - 2.5 GBit/s" msgstr "2500 - 2,5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:329 +#: ../../configuration/service/dhcp-server.rst:385 msgid "252" msgstr "252" @@ -1087,7 +1300,7 @@ msgstr "2. Since this is the first packet, connection status of this connection, msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." -#: ../../configuration/service/dhcp-server.rst:249 +#: ../../configuration/service/dhcp-server.rst:305 #: ../../configuration/system/syslog.rst:118 #: ../../configuration/system/syslog.rst:181 #: ../../configuration/trafficpolicy/index.rst:797 @@ -1115,7 +1328,7 @@ msgstr "38" msgid "3. Add a full path to the script" msgstr "3. Agregue una ruta completa al script" -#: ../../configuration/service/dhcp-server.rst:254 +#: ../../configuration/service/dhcp-server.rst:310 #: ../../configuration/system/syslog.rst:120 #: ../../configuration/system/syslog.rst:183 #: ../../configuration/trafficpolicy/index.rst:795 @@ -1131,11 +1344,11 @@ msgstr "40000 - 40 GBit/s" msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." msgstr "Los canales de 40 MHz pueden cambiar sus canales primarios y secundarios si es necesario o la creación de un canal de 40 MHz puede rechazarse en función de los BSS superpuestos. Estos cambios se realizan automáticamente cuando hostapd está configurando el canal de 40 MHz." -#: ../../configuration/service/dhcp-server.rst:274 +#: ../../configuration/service/dhcp-server.rst:330 msgid "42" msgstr "42" -#: ../../configuration/service/dhcp-server.rst:279 +#: ../../configuration/service/dhcp-server.rst:335 msgid "44" msgstr "44" @@ -1166,7 +1379,7 @@ msgstr "50000 - 50 GBit/s" msgid "5000 - 5 GBit/s" msgstr "5000 - 5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:284 +#: ../../configuration/service/dhcp-server.rst:340 msgid "54" msgstr "54" @@ -1179,7 +1392,7 @@ msgstr "5. Second packet for this connection is received by the router. Since co msgid "5 if not defined." msgstr "5 si no está definido." -#: ../../configuration/service/dhcp-server.rst:259 +#: ../../configuration/service/dhcp-server.rst:315 #: ../../configuration/system/syslog.rst:124 #: ../../configuration/system/syslog.rst:189 #: ../../configuration/trafficpolicy/index.rst:791 @@ -1187,7 +1400,7 @@ msgstr "5 si no está definido." msgid "6" msgstr "6" -#: ../../configuration/service/dhcp-server.rst:294 +#: ../../configuration/service/dhcp-server.rst:350 msgid "66" msgstr "66" @@ -1195,11 +1408,11 @@ msgstr "66" msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." msgstr "El 66% del tráfico se enruta a eth0, eth1 obtiene el 33% del tráfico." -#: ../../configuration/service/dhcp-server.rst:299 +#: ../../configuration/service/dhcp-server.rst:355 msgid "67" msgstr "67" -#: ../../configuration/service/dhcp-server.rst:309 +#: ../../configuration/service/dhcp-server.rst:365 msgid "69" msgstr "69" @@ -1222,7 +1435,7 @@ msgstr "6in4 usa túneles para encapsular el tráfico IPv6 sobre enlaces IPv4 co msgid "7" msgstr "7" -#: ../../configuration/service/dhcp-server.rst:314 +#: ../../configuration/service/dhcp-server.rst:370 msgid "70" msgstr "70" @@ -1299,19 +1512,19 @@ msgstr "<x.x.x.x>-<x.x.x.x> : rango de IP para coincidir." msgid "<x.x.x.x>: IP address to match." msgstr "<x.x.x.x>: dirección IP para hacer coincidir." -#: ../../configuration/pki/index.rst:252 +#: ../../configuration/pki/index.rst:283 msgid "ACME" msgstr "ACME" -#: ../../configuration/pki/index.rst:281 +#: ../../configuration/pki/index.rst:312 msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" -#: ../../configuration/protocols/static.rst:150 +#: ../../configuration/protocols/static.rst:183 msgid "ARP" msgstr "ARP" @@ -1335,7 +1548,11 @@ msgstr "Un *bit* se escribe como **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "Un enrutador que habla BGP como VyOS puede recuperar información de ROA del "software de usuario de confianza" RPKI (a menudo llamado simplemente "servidor RPKI" o "validador RPKI") mediante el uso del protocolo :abbr:`RTR (RPKI to Router)`. Hay varias implementaciones de código abierto para elegir, como Routinator_ de NLNetLabs (escrito en Rust), GoRTR_ y OctoRPKI_ de Cloudflare (escrito en Go) y RPKI Validator_ de RIPE NCC (escrito en Java). El protocolo RTR se describe en :rfc:`8210`." -#: ../../configuration/protocols/bgp.rst:929 +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + +#: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "Una confederación BGP divide nuestro AS en sub-AS para reducir la cantidad de interconexiones IBGP requeridas. Dentro de un sub-AS aún requerimos IBGP de malla completa, pero entre estos sub-AS usamos algo que se parece a EBGP pero se comporta como IBGP (llamado BGP de confederación). El mecanismo de confederación se describe en :rfc:`5065`" @@ -1351,7 +1568,7 @@ msgstr "Un túnel GRE opera en la capa 3 del modelo OSI y está representado por msgid "A Rule-Set can be applied to every interface:" msgstr "Se puede aplicar un conjunto de reglas a cada interfaz:" -#: ../../configuration/service/dhcp-server.rst:561 +#: ../../configuration/service/dhcp-server.rst:620 msgid "A SNTP server address can be specified for DHCPv6 clients." msgstr "Se puede especificar una dirección de servidor SNTP para clientes DHCPv6." @@ -1363,11 +1580,11 @@ msgstr "Se crea un dispositivo VRF con una tabla de rutas asociada. Luego, las i msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "Un túnel VyOS GRE puede transportar tráfico IPv4 e IPv6 y también se puede crear sobre IPv4 (gre) o IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "Se requiere un enrutador VyOS con dos interfaces, eth0 (WAN) y eth1 (LAN), para implementar una configuración de DNS de horizonte dividido para example.com." -#: ../../configuration/service/dhcp-server.rst:533 +#: ../../configuration/service/dhcp-server.rst:592 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." msgstr "Se puede configurar un dominio :abbr:`NIS (Servicio de información de red)` para que se use con clientes DHCPv6." @@ -1379,11 +1596,15 @@ msgstr "Una configuración básica requiere un origen de túnel (dirección de o msgid "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." -#: ../../configuration/interfaces/bridge.rst:195 -#: ../../configuration/interfaces/bridge.rst:229 +#: ../../configuration/interfaces/bridge.rst:204 +#: ../../configuration/interfaces/bridge.rst:238 msgid "A bridge named `br100`" msgstr "Un puente llamado `br100`" +#: ../../configuration/container/index.rst:144 +msgid "A brief description what this network is all about." +msgstr "A brief description what this network is all about." + #: ../../configuration/trafficpolicy/index.rst:147 msgid "A class can have multiple match filters:" msgstr "Una clase puede tener varios filtros de coincidencia:" @@ -1396,7 +1617,11 @@ msgstr "Un ejemplo común es el caso de algunas políticas que, para ser efectiv msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" msgstr "Una configuración OpenVPN de autenticación LDAP completa podría parecerse al siguiente ejemplo:" -#: ../../configuration/vpn/sstp.rst:335 +#: ../../configuration/service/ids.rst:84 +msgid "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" +msgstr "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" + +#: ../../configuration/vpn/sstp.rst:508 msgid "A connection attempt will be shown as:" msgstr "Un intento de conexión se mostrará como:" @@ -1420,7 +1645,7 @@ msgstr "Un nombre de dominio es la etiqueta (nombre) asignada a una red informá msgid "A dummy interface for the provider-assigned IP;" msgstr "Una interfaz ficticia para la IP asignada por el proveedor;" -#: ../../configuration/highavailability/index.rst:426 +#: ../../configuration/highavailability/index.rst:436 msgid "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." msgstr "Una marca de firewall ``fwmark`` permite usar múltiples puertos para un servidor virtual de alta disponibilidad. Utiliza el valor fwmark." @@ -1428,7 +1653,7 @@ msgstr "Una marca de firewall ``fwmark`` permite usar múltiples puertos para un msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." msgstr "Puede encontrar un ejemplo completo de una configuración de Tunnelbroker.net en :ref:`aquí<examples-tunnelbroker-ipv6> `." -#: ../../configuration/service/dhcp-server.rst:152 +#: ../../configuration/service/dhcp-server.rst:201 msgid "A generic `<name>` referencing this sync service." msgstr "Un genérico `<name> ` que hace referencia a este servicio de sincronización." @@ -1436,11 +1661,11 @@ msgstr "Un genérico `<name> ` que hace referencia a este servicio de sincroniza msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." msgstr "Un nombre de host es la etiqueta (nombre) asignada a un dispositivo de red (un host) en una red y se usa para distinguir un dispositivo de otro en redes específicas o en Internet. Por otro lado, este será el nombre que aparecerá en la línea de comandos." -#: ../../configuration/pki/index.rst:189 +#: ../../configuration/pki/index.rst:191 msgid "A human readable description what this CA is about." msgstr "Una descripción legible por humanos de qué se trata esta CA." -#: ../../configuration/pki/index.rst:228 +#: ../../configuration/pki/index.rst:230 msgid "A human readable description what this certificate is about." msgstr "Una descripción legible por humanos de qué se trata este certificado." @@ -1448,6 +1673,10 @@ msgstr "Una descripción legible por humanos de qué se trata este certificado." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "Una interfaz de búsqueda siempre está activa, por lo que podría usarse para administrar el tráfico o como origen/destino para y :abbr:`IGP (Protocolo de puerta de enlace interior)` como :ref:`routing-bgp` para que su enlace BGP interno no dependa en los estados del enlace físico y se pueden elegir múltiples rutas hacia el destino. Siempre se debe preferir una interfaz :ref:`dummy-interface` a una interfaz :ref:`loopback-interface`." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "Un dispositivo administrado es un nodo de red que implementa una interfaz SNMP que permite el acceso unidireccional (solo lectura) o bidireccional (lectura y escritura) a información específica del nodo. Los dispositivos administrados intercambian información específica del nodo con los NMS. A veces llamados elementos de red, los dispositivos administrados pueden ser cualquier tipo de dispositivo, incluidos, entre otros, enrutadores, servidores de acceso, conmutadores, módems de cable, puentes, concentradores, teléfonos IP, cámaras de video IP, hosts informáticos e impresoras." @@ -1456,7 +1685,7 @@ msgstr "Un dispositivo administrado es un nodo de red que implementa una interfa msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." msgstr "Un filtro de coincidencia puede contener múltiples criterios y coincidirá con el tráfico si todos esos criterios son verdaderos." -#: ../../configuration/protocols/bfd.rst:138 +#: ../../configuration/protocols/bfd.rst:145 msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." msgstr "Una ruta estática supervisada condiciona la instalación en la RIB en el estado de ejecución de la sesión BFD: cuando la sesión BFD está activa, la ruta se instala en la RIB, pero cuando la sesión BFD está inactiva, se elimina de la RIB." @@ -1476,7 +1705,7 @@ msgstr "Se puede establecer un límite de tasa de paquetes para que una regla ap msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." -#: ../../configuration/protocols/bgp.rst:698 +#: ../../configuration/protocols/bgp.rst:720 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." msgstr "Se impone una penalización de 1000 cada vez que falla la ruta. Cuando las sanciones alcanzan un umbral predefinido (valor de supresión), el enrutador deja de anunciar la ruta." @@ -1488,7 +1717,7 @@ msgstr "Se requiere una interfaz física para conectar esta instancia de MACsec. msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" msgstr "Se puede definir un grupo de direcciones usando un guión entre dos direcciones IP:" -#: ../../configuration/firewall/ipv4.rst:485 +#: ../../configuration/firewall/ipv4.rst:508 #: ../../configuration/firewall/ipv6.rst:491 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." msgstr "Un puerto se puede configurar con un número de puerto o un nombre que se define aquí: ``/etc/services``." @@ -1526,11 +1755,11 @@ msgstr "Un ID de segmento que contiene un prefijo de dirección IP calculado por msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." msgstr "Una estación de envío (computadora o conmutador de red) puede estar transmitiendo datos más rápido de lo que el otro extremo del enlace puede aceptarlos. Mediante el control de flujo, la estación receptora puede señalar al remitente solicitando la suspensión de las transmisiones hasta que el receptor se ponga al día." -#: ../../configuration/service/dhcp-server.rst:589 +#: ../../configuration/service/dhcp-server.rst:648 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" msgstr "Una red compartida llamada ``NET1`` sirve a la subred ``2001:db8::/64``" -#: ../../configuration/protocols/bgp.rst:1146 +#: ../../configuration/protocols/bgp.rst:1168 msgid "A simple BGP configuration via IPv6." msgstr "Una configuración BGP simple a través de IPv6." @@ -1538,7 +1767,7 @@ msgstr "Una configuración BGP simple a través de IPv6." msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." msgstr "Una política simple de detección temprana aleatoria (RED) comenzaría a descartar aleatoriamente paquetes de una cola antes de que alcance su límite de cola, evitando así la congestión. Eso es bueno para las conexiones TCP, ya que la eliminación gradual de paquetes actúa como una señal para que el remitente disminuya su velocidad de transmisión." -#: ../../configuration/protocols/bgp.rst:1101 +#: ../../configuration/protocols/bgp.rst:1123 msgid "A simple eBGP configuration:" msgstr "Una configuración sencilla de eBGP:" @@ -1602,7 +1831,7 @@ msgstr "Un búfer muy pequeño pronto comenzará a descartar paquetes." msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." msgstr "Una zona debe configurarse antes de que se le asigne una interfaz y una interfaz se puede asignar a una sola zona." -#: ../../configuration/service/dns.rst:397 +#: ../../configuration/service/dns.rst:411 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." msgstr "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." @@ -1622,6 +1851,21 @@ msgstr "Aceptar conexiones SSH para el ` dado<device> ` en el puerto TCP `<port> msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." msgstr "Acepte solo determinados protocolos: es posible que desee replicar el estado de los flujos en función de su protocolo de capa 4." +#: ../../configuration/service/pppoe-server.rst:384 +#: ../../configuration/vpn/l2tp.rst:328 +#: ../../configuration/vpn/pptp.rst:252 +#: ../../configuration/vpn/sstp.rst:286 +msgid "Accept peer interface identifier. By default is not defined." +msgstr "Accept peer interface identifier. By default is not defined." + +#: ../../configuration/service/ipoe-server.rst:364 +#: ../../configuration/service/pppoe-server.rst:530 +#: ../../configuration/vpn/l2tp.rst:484 +#: ../../configuration/vpn/pptp.rst:408 +#: ../../configuration/vpn/sstp.rst:442 +msgid "Acceptable rate of connections (e.g. 1/min, 60/sec)" +msgstr "Acceptable rate of connections (e.g. 1/min, 60/sec)" + #: ../../configuration/policy/access-list.rst:3 msgid "Access List Policy" msgstr "Política de lista de acceso" @@ -1665,7 +1909,7 @@ msgstr "Agregue el elemento Power Constraint a los marcos Beacon y Probe Respons msgid "Add a forwarding rule matching UDP port on your internet router." msgstr "Agregue una regla de reenvío que coincida con el puerto UDP en su enrutador de Internet." -#: ../../configuration/container/index.rst:113 +#: ../../configuration/container/index.rst:118 msgid "Add a host device to the container." msgstr "Agregue un dispositivo host al contenedor." @@ -1693,11 +1937,11 @@ msgstr "Agregue un nuevo puerto a SSL-ports acl. Puertos incluidos por defecto e msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" msgstr "Agregar nuevo puerto a Safe-ports acl. Puertos incluidos por defecto en Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" -#: ../../configuration/policy/route-map.rst:221 +#: ../../configuration/policy/route-map.rst:224 msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" msgstr "Agregue o reemplace el atributo de comunidad BGP en formato ``<0-65535:0-65535>`` o de una lista de comunidad conocida" -#: ../../configuration/policy/route-map.rst:236 +#: ../../configuration/policy/route-map.rst:239 msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" msgstr "Agregue o reemplace el atributo de comunidad grande BGP en formato ``<0-4294967295:0-4294967295:0-4294967295>``" @@ -1705,11 +1949,11 @@ msgstr "Agregue o reemplace el atributo de comunidad grande BGP en formato ``< msgid "Add policy route matching VLAN source addresses" msgstr "Agregue direcciones de origen de VLAN coincidentes de ruta de política" -#: ../../configuration/pki/index.rst:217 +#: ../../configuration/pki/index.rst:219 msgid "Add public key portion for the certificate named `name` to the VyOS CLI." msgstr "Agregue una parte de la clave pública para el certificado llamado `nombre` a la CLI de VyOS." -#: ../../configuration/pki/index.rst:193 +#: ../../configuration/pki/index.rst:195 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." msgstr "Agregue la clave privada de las CA a la CLI de VyOS. Esto nunca debe salir del sistema y solo es necesario si usa VyOS como su generador de certificados como se mencionó anteriormente." @@ -1717,11 +1961,11 @@ msgstr "Agregue la clave privada de las CA a la CLI de VyOS. Esto nunca debe sal msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." -#: ../../configuration/pki/index.rst:232 +#: ../../configuration/pki/index.rst:234 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." msgstr "Agregue la parte de la clave privada de este certificado a la CLI. Esto nunca debe salir del sistema, ya que se utiliza para descifrar los datos." -#: ../../configuration/pki/index.rst:174 +#: ../../configuration/pki/index.rst:176 msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgstr "Agregue el certificado de CA público para la CA denominada "nombre" a la CLI de VyOS." @@ -1729,7 +1973,7 @@ msgstr "Agregue el certificado de CA público para la CA denominada "nombre msgid "Adding a 2FA with an OTP-key" msgstr "Agregar un 2FA con una clave OTP" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Se establecen parámetros globales adicionales, incluido el límite de número máximo de conexiones de 4000 y una versión mínima de TLS de 1.3." @@ -1765,11 +2009,11 @@ msgstr "Familias de direcciones" msgid "Address Groups" msgstr "Grupos de direcciones" -#: ../../configuration/service/dhcp-server.rst:592 +#: ../../configuration/service/dhcp-server.rst:651 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." msgstr "El grupo de direcciones será ``2001:db8::100`` hasta ``2001:db8::199``." -#: ../../configuration/service/dhcp-server.rst:582 +#: ../../configuration/service/dhcp-server.rst:641 msgid "Address pools" msgstr "Grupos de direcciones" @@ -1777,14 +2021,30 @@ msgstr "Grupos de direcciones" msgid "Address to listen for HTTPS requests" msgstr "Dirección para escuchar solicitudes HTTPS" -#: ../../configuration/container/index.rst:136 +#: ../../configuration/container/index.rst:160 +msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." +msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." + +#: ../../configuration/container/index.rst:141 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." msgstr "Agrega el registro a la lista de registros de búsqueda no calificados. De forma predeterminada, para cualquier imagen que no incluya el registro en el nombre de la imagen, Vyos utilizará docker.io como registro contenedor." -#: ../../configuration/protocols/bgp.rst:647 +#: ../../configuration/protocols/bgp.rst:669 msgid "Administrative Distance" msgstr "Distancia administrativa" +#: ../../configuration/service/ipoe-server.rst:335 +msgid "Advanced Interface Options" +msgstr "Advanced Interface Options" + +#: ../../configuration/service/ipoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:425 +#: ../../configuration/vpn/l2tp.rst:369 +#: ../../configuration/vpn/pptp.rst:293 +#: ../../configuration/vpn/sstp.rst:327 +msgid "Advanced Options" +msgstr "Advanced Options" + #: ../../configuration/nat/nat44.rst:301 msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." msgstr "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." @@ -1797,7 +2057,11 @@ msgstr "Las ventajas de OpenVPN son:" msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" msgstr "Anuncie el servidor DNS por https://tools.ietf.org/html/rfc6106" -#: ../../configuration/service/router-advert.rst:53 +#: ../../configuration/service/router-advert.rst:78 +msgid "Advertising a NAT64 Prefix" +msgstr "Advertising a NAT64 Prefix" + +#: ../../configuration/service/router-advert.rst:54 msgid "Advertising a Prefix" msgstr "Publicidad de un prefijo" @@ -1805,7 +2069,7 @@ msgstr "Publicidad de un prefijo" msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" msgstr "Después de confirmar, las contraseñas de texto sin formato se cifrarán y almacenarán en su configuración. La configuración de CLI resultante se verá así:" -#: ../../configuration/vrf/index.rst:325 +#: ../../configuration/vrf/index.rst:344 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." msgstr "Después de confirmar la configuración, podemos verificar que todas las rutas filtradas estén instaladas e intentar hacer ping ICMP a la PC1 desde la PC3." @@ -1813,10 +2077,18 @@ msgstr "Después de confirmar la configuración, podemos verificar que todas las msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." -#: ../../configuration/pki/index.rst:212 +#: ../../configuration/vpn/ipsec.rst:418 +msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." +msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." + +#: ../../configuration/pki/index.rst:214 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." msgstr "Después de haber importado los certificados de CA, ahora podemos importar y agregar certificados utilizados por los servicios en este enrutador." +#: ../../configuration/vpn/ipsec.rst:399 +msgid "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." +msgstr "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." + #: ../../configuration/service/snmp.rst:39 msgid "Agent - software which runs on managed devices" msgstr "Agente: software que se ejecuta en dispositivos administrados" @@ -1825,7 +2097,7 @@ msgstr "Agente: software que se ejecuta en dispositivos administrados" msgid "Alert" msgstr "Alerta" -#: ../../configuration/highavailability/index.rst:346 +#: ../../configuration/highavailability/index.rst:356 msgid "Algorithm" msgstr "Algoritmo" @@ -1833,7 +2105,7 @@ msgstr "Algoritmo" msgid "Aliases" msgstr "Alias" -#: ../../configuration/service/dns.rst:167 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "Todas las solicitudes de DNS para ejemplo.com deben reenviarse a un servidor DNS en 192.0.2.254 y 2001:db8:cafe::1" @@ -1861,7 +2133,7 @@ msgstr "Todas las interfaces utilizadas para el relé DHCP deben configurarse. E msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "Todos los elementos de un grupo de sincronización deben configurarse de manera similar. Si un grupo de VRRP se configura con un retraso o una prioridad de prioridad diferente, se produciría un ciclo de transición sin fin." -#: ../../configuration/service/dns.rst:169 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "Todas las demás solicitudes de DNS se reenviarán a un conjunto diferente de servidores DNS en 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff y 2001:db8::2:ffff" @@ -1897,7 +2169,11 @@ msgstr "Se permite todo el tráfico hacia y desde una interfaz dentro de una zon msgid "All tunnel sessions can be checked via:" msgstr "Todas las sesiones de túnel se pueden comprobar a través de:" -#: ../../configuration/vpn/l2tp.rst:209 +#: ../../configuration/service/ipoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:193 +#: ../../configuration/vpn/l2tp.rst:236 +#: ../../configuration/vpn/pptp.rst:176 +#: ../../configuration/vpn/sstp.rst:209 msgid "Allocation clients ip addresses by RADIUS" msgstr "Asignación de direcciones IP de clientes por RADIUS" @@ -1913,7 +2189,11 @@ msgstr "Permita el acceso a los sitios de un dominio sin recuperarlos de la memo msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Permita que bgp negocie la capacidad de próximo salto extendido con su par. Si está interconectando una dirección local de enlace IPv6, esta capacidad se activa automáticamente. Si está interconectando una dirección global IPv6, al activar este comando permitirá que BGP instale rutas IPv4 con nexthops IPv6 si no tiene IPv4 configurado en las interfaces." -#: ../../configuration/service/dns.rst:359 +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Permita una dirección IPv6 explícita para la interfaz." @@ -1933,13 +2213,13 @@ msgstr "Permitir que este par BFD no se conecte directamente" msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." msgstr "Valores permitidos para indicadores TCP: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` Al especificar más de una bandera, las banderas deben estar separadas por comas. El ``!`` niega el protocolo seleccionado." -#: ../../configuration/firewall/ipv4.rst:812 +#: ../../configuration/firewall/ipv4.rst:835 #: ../../configuration/firewall/ipv6.rst:821 #: ../../configuration/system/conntrack.rst:199 msgid "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." -#: ../../configuration/interfaces/bridge.rst:162 +#: ../../configuration/interfaces/bridge.rst:171 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." msgstr "Permite que las ID de VLAN específicas pasen a través de la interfaz de miembro del puente. Puede ser una identificación de VLAN individual o un rango de identificaciones de VLAN delimitadas por un guión." @@ -1947,11 +2227,11 @@ msgstr "Permite que las ID de VLAN específicas pasen a través de la interfaz d msgid "Allows to define URL path matching rules for a specific service." msgstr "Permite definir reglas de coincidencia de ruta de URL para un servicio específico." -#: ../../configuration/protocols/static.rst:69 +#: ../../configuration/protocols/static.rst:92 msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Le permite configurar la interfaz de siguiente salto para una ruta estática IPv4 basada en interfaz. `<interface> ` será la interfaz de siguiente salto donde se enruta el tráfico para el ` dado<subnet> `." -#: ../../configuration/protocols/static.rst:89 +#: ../../configuration/protocols/static.rst:112 msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Le permite configurar la interfaz de siguiente salto para una ruta estática IPv6 basada en interfaz. `<interface> ` será la interfaz de siguiente salto donde se enruta el tráfico para el ` dado<subnet> `." @@ -1977,11 +2257,11 @@ msgstr "Also, for those who haven't updated to newer version, legacy documentati msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." msgstr "Además, en :ref:`destination-nat`, se admite la redirección a localhost. La declaración de redirección es una forma especial de dnat que siempre traduce la dirección de destino a la del host local." -#: ../../configuration/protocols/static.rst:138 +#: ../../configuration/protocols/static.rst:171 msgid "Alternate Routing Tables" msgstr "Tablas de enrutamiento alternativas" -#: ../../configuration/protocols/static.rst:142 +#: ../../configuration/protocols/static.rst:175 msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." msgstr "Las tablas de enrutamiento alternativas se utilizan con el enrutamiento basado en políticas utilizando :ref:`vrf`." @@ -1989,7 +2269,7 @@ msgstr "Las tablas de enrutamiento alternativas se utilizan con el enrutamiento msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" msgstr "Como alternativa a la multidifusión, la dirección IPv4 remota del túnel VXLAN se puede configurar directamente. Cambiemos el ejemplo de multidifusión de arriba:" -#: ../../configuration/service/dhcp-server.rst:116 +#: ../../configuration/service/dhcp-server.rst:132 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." msgstr "Siempre excluya esta dirección de cualquier rango definido. Esta dirección nunca será asignada por el servidor DHCP." @@ -2037,7 +2317,7 @@ msgstr "Un agente es un módulo de software de administración de red que reside msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" msgstr "Un comando alternativo podría ser "mpls-te on" (Ingeniería de tráfico)" -#: ../../configuration/firewall/ipv4.rst:373 +#: ../../configuration/firewall/ipv4.rst:396 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." @@ -2062,7 +2342,7 @@ msgstr "Puede encontrar una introducción básica a los cortafuegos basados en z #: ../../configuration/interfaces/tunnel.rst:71 #: ../../configuration/interfaces/tunnel.rst:93 #: ../../configuration/interfaces/tunnel.rst:194 -#: ../../configuration/system/login.rst:195 +#: ../../configuration/system/login.rst:199 msgid "An example:" msgstr "Un ejemplo:" @@ -2070,11 +2350,11 @@ msgstr "Un ejemplo:" msgid "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" msgstr "Un ejemplo de una configuración que envía métricas de ``telegraf`` a ``InfluxDB 2`` remoto" -#: ../../configuration/interfaces/bridge.rst:227 +#: ../../configuration/interfaces/bridge.rst:236 msgid "An example of creating a VLAN-aware bridge is as follows:" msgstr "Un ejemplo de creación de un puente compatible con VLAN es el siguiente:" -#: ../../configuration/system/login.rst:149 +#: ../../configuration/system/login.rst:153 msgid "An example of key generation:" msgstr "Un ejemplo de generación de claves:" @@ -2102,6 +2382,10 @@ msgstr "And base chain for traffic generated by the router is ``set firewall ipv msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" +#: ../../configuration/service/ids.rst:138 +msgid "And content of the script:" +msgstr "And content of the script:" + #: ../../configuration/policy/route.rst:76 msgid "And for ipv6:" msgstr "Y para ipv6:" @@ -2114,7 +2398,7 @@ msgstr "And next, some configuration example where groups are used:" msgid "And op-mode commands:" msgstr "And op-mode commands:" -#: ../../configuration/system/ip.rst:84 +#: ../../configuration/system/ip.rst:97 msgid "And the different IPv4 **reset** commands available:" msgstr "Y los diferentes comandos IPv4 **reset** disponibles:" @@ -2131,6 +2415,10 @@ msgstr "Otro término que se usa a menudo para DNAT es **NAT 1 a 1**. Para una c msgid "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." msgstr "Otra cosa a tener en cuenta con LDP es que, al igual que BGP, es un protocolo que se ejecuta sobre TCP. Sin embargo, no tiene la capacidad de hacer algo como una capacidad de actualización como la capacidad de actualización de ruta de BGP. Por lo tanto, es posible que deba restablecer el vecino para que funcione un cambio de capacidad o un cambio de configuración." +#: ../../configuration/vpn/ipsec.rst:549 +msgid "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/vrf/index.rst:52 #: ../../configuration/vrf/index.rst:62 msgid "Apply a route-map filter to routes for the specified protocol." @@ -2156,7 +2444,7 @@ msgstr "Aplicar un conjunto de reglas a una zona" msgid "Applying a Rule-Set to an Interface" msgstr "Aplicar un conjunto de reglas a una interfaz" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Aplicar una política de tráfico" @@ -2221,11 +2509,15 @@ msgstr "Como resultado, el procesamiento de cada paquete se vuelve más eficient msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." msgstr "Como alternativa a la aplicación directa de políticas a una interfaz, se puede crear un firewall basado en zonas para simplificar la configuración cuando varias interfaces pertenecen a la misma zona de seguridad. En lugar de aplicar conjuntos de reglas a las interfaces, se aplican a pares de zona de origen y zona de destino." +#: ../../configuration/vpn/ipsec.rst:523 +msgid "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." +msgstr "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." + #: ../../configuration/firewall/flowtables.rst:109 msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." -#: ../../configuration/system/option.rst:80 +#: ../../configuration/system/option.rst:110 msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." msgstr "A medida que más y más enrutadores se ejecutan en hipervisores, especialmente con un :abbr:`NOS (sistema operativo de red)` como VyOS, tiene cada vez menos sentido usar enlaces de recursos estáticos como ``smp-affinity`` como está presente en VyOS 1.2 y anteriores para anclar ciertos controladores de interrupción a CPU específicas." @@ -2265,7 +2557,7 @@ msgstr "As the example image below shows, the device was configured with rules b msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." msgstr "Como su nombre lo indica, es IPv4 encapsulado en IPv6, tan simple como eso." -#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/l2tp.rst:86 msgid "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" msgstr "Además de lo siguiente para permitir NAT-transversal (cuando el cliente VPN detecta NAT, ESP se encapsula en UDP para NAT-transversal):" @@ -2301,7 +2593,7 @@ msgstr "Asignar `<member> `interfaz para puente`<interface> `. Un asistente de f msgid "Assign a specific backend to a rule" msgstr "Asignar un backend específico a una regla" -#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:98 msgid "Assign interface identified by `<interface>` to VRF named `<name>`." msgstr "Asignar interfaz identificada por `<interface> ` a VRF llamado `<name> `." @@ -2309,15 +2601,18 @@ msgstr "Asignar interfaz identificada por `<interface> ` a VRF llamado `<name> ` msgid "Assign member interfaces to PortChannel" msgstr "Asignar interfaces de miembros a PortChannel" -#: ../../configuration/vpn/sstp.rst:80 +#: ../../configuration/service/pppoe-server.rst:437 +#: ../../configuration/vpn/l2tp.rst:381 +#: ../../configuration/vpn/pptp.rst:305 +#: ../../configuration/vpn/sstp.rst:339 msgid "Assign static IP address to `<user>` account." msgstr "Asigne una dirección IP estática a `<user> ` cuenta." -#: ../../configuration/service/dhcp-server.rst:97 +#: ../../configuration/service/dhcp-server.rst:113 msgid "Assign the IP address to this machine for `<time>` seconds." msgstr "Asigne la dirección IP a esta máquina para `<time> ` segundos." -#: ../../configuration/system/login.rst:62 +#: ../../configuration/system/login.rst:66 msgid "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." msgstr "Asigne la parte de la clave pública SSH `<key> ` identificado por clave `<identifier> ` al usuario local `<username> `." @@ -2401,7 +2696,15 @@ msgstr "Adjunta la red definida por el usuario a un contenedor. Solo se debe esp msgid "Authentication" msgstr "Autenticación" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/service/ipoe-server.rst:310 +#: ../../configuration/service/pppoe-server.rst:428 +#: ../../configuration/vpn/l2tp.rst:372 +#: ../../configuration/vpn/pptp.rst:296 +#: ../../configuration/vpn/sstp.rst:330 +msgid "Authentication Advanced Options" +msgstr "Authentication Advanced Options" + +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Autenticación (EAPoL)" @@ -2433,15 +2736,19 @@ msgstr "token de autenticación" msgid "Authentication – to verify that the message is from a valid source." msgstr "Autenticación: para verificar que el mensaje proviene de una fuente válida." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "token de autorización" -#: ../../configuration/service/pppoe-server.rst:159 +#: ../../configuration/service/pppoe-server.rst:228 msgid "Automatic VLAN Creation" msgstr "Creación automática de VLAN" -#: ../../configuration/service/ipoe-server.rst:96 +#: ../../configuration/service/ipoe-server.rst:97 msgid "Automatic VLAN creation" msgstr "Creación automática de VLAN" @@ -2469,7 +2776,7 @@ msgstr "Explorador de datos de Azure" msgid "BFD" msgstr "BFD" -#: ../../configuration/protocols/bfd.rst:136 +#: ../../configuration/protocols/bfd.rst:143 msgid "BFD Static Route Monitoring" msgstr "Monitoreo de rutas estáticas BFD" @@ -2505,7 +2812,7 @@ msgstr "Ejemplo BGP" msgid "BGP Router Configuration" msgstr "Configuración del enrutador BGP" -#: ../../configuration/protocols/bgp.rst:888 +#: ../../configuration/protocols/bgp.rst:910 msgid "BGP Scaling Configuration" msgstr "Configuración de escalado de BGP" @@ -2517,7 +2824,7 @@ msgstr "Atributo del agregador BGP: Número AS o dirección IP de una agregació msgid "BGP as-path list to match." msgstr "BGP como lista de ruta para que coincida." -#: ../../configuration/policy/route-map.rst:216 +#: ../../configuration/policy/route-map.rst:219 msgid "BGP atomic aggregate attribute." msgstr "Atributo agregado atómico BGP." @@ -2533,11 +2840,11 @@ msgstr "Comunidad extendida BGP para que coincida." msgid "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" msgstr "Los roles de BGP se definen en RFC :rfc:`9234` y proporcionan una manera fácil de agregar prevención, detección y mitigación de fugas de ruta. El valor del rol local se negocia con la nueva capacidad del rol BGP que tiene una verificación integrada del valor correspondiente. En caso de discrepancia, se enviaría la nueva Notificación de discrepancia de roles OPEN <2, 11>. Los pares de roles correctos son:" -#: ../../configuration/protocols/bgp.rst:890 +#: ../../configuration/protocols/bgp.rst:912 msgid "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." msgstr "Los enrutadores BGP conectados dentro del mismo AS a través de BGP pertenecen a una sesión BGP interna o IBGP. Para evitar bucles en la tabla de enrutamiento, el hablante de IBGP no anuncia rutas aprendidas por IBGP a otro hablante de IBGP (mecanismo Split Horizon). Como tal, IBGP requiere una malla completa de todos los pares. Para redes grandes, esto rápidamente se vuelve inescalable." -#: ../../configuration/vrf/index.rst:413 +#: ../../configuration/vrf/index.rst:432 msgid "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." msgstr "Las rutas BGP pueden filtrarse (es decir, copiarse) entre una RIB VRF de unidifusión y la RIB SAFI de VPN de la VRF predeterminada para su uso en L3VPN basadas en MPLS. Las rutas de unidifusión también pueden filtrarse entre cualquier VRF (incluida la RIB de unidifusión de la instancia de BGP predeterminada). También está disponible una sintaxis de acceso directo para especificar fugas de un VRF a otro VRF utilizando la VPN RIB de la instancia predeterminada como intermediario. Una aplicación común de la función VRF-VRF es conectar el dominio de enrutamiento privado de un cliente al servicio VPN de un proveedor. La fuga se configura desde el punto de vista de un VRF individual: la importación se refiere a las rutas filtradas de VPN a un VRF de unidifusión, mientras que la exportación se refiere a las rutas filtradas de un VRF de unidifusión a VPN." @@ -2557,6 +2864,10 @@ msgstr "Babel es un protocolo de enrutamiento moderno diseñado para ser robusto msgid "Backend" msgstr "back-end" +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Algoritmos de equilibrio:" @@ -2565,22 +2876,24 @@ msgstr "Algoritmos de equilibrio:" msgid "Balancing Rules" msgstr "Reglas de equilibrio" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Equilibrio basado en el nombre de dominio" -#: ../../configuration/service/ipoe-server.rst:122 -#: ../../configuration/service/pppoe-server.rst:182 -#: ../../configuration/vpn/l2tp.rst:113 +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + +#: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "Conformación de ancho de banda" -#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/ipoe-server.rst:129 #: ../../configuration/vpn/l2tp.rst:118 msgid "Bandwidth Shaping for local users" msgstr "Conformación de ancho de banda para usuarios locales" -#: ../../configuration/service/pppoe-server.rst:184 +#: ../../configuration/service/pppoe-server.rst:253 msgid "Bandwidth rate limits can be set for local users or RADIUS based attributes." msgstr "Los límites de tasa de ancho de banda se pueden establecer para usuarios locales o atributos basados en RADIUS." @@ -2588,7 +2901,7 @@ msgstr "Los límites de tasa de ancho de banda se pueden establecer para usuario msgid "Bandwidth rate limits can be set for local users or via RADIUS based attributes." msgstr "Los límites de velocidad de ancho de banda se pueden establecer para usuarios locales o mediante atributos basados en RADIUS." -#: ../../configuration/service/ipoe-server.rst:124 +#: ../../configuration/service/ipoe-server.rst:125 msgid "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." msgstr "Los límites de tasa de ancho de banda se pueden establecer para usuarios locales dentro de la configuración o mediante atributos basados en RADIUS." @@ -2640,7 +2953,7 @@ msgstr "Debido a que un agregador no puede estar activo sin al menos un enlace d msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Debido a que las sesiones existentes no conmutan por error automáticamente a una nueva ruta, la tabla de sesión se puede vaciar en cada cambio de estado de conexión:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Antes de habilitar cualquier descarga de segmentación de hardware, se requiere una descarga de software correspondiente en GSO. De lo contrario, es posible que una trama se redirija entre dispositivos y termine sin poder transmitirse." @@ -2648,7 +2961,11 @@ msgstr "Antes de habilitar cualquier descarga de segmentación de hardware, se r msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Antes de poder aplicar un conjunto de reglas a una zona, primero debe crear las zonas." -#: ../../configuration/vpn/site2site_ipsec.rst:422 +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" + +#: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "El siguiente diagrama de flujo podría ser una referencia rápida para la combinación de acción de cierre, según cómo esté configurado el par." @@ -2672,6 +2989,10 @@ msgstr "NAT bidireccional" msgid "Binary value" msgstr "valor binario" +#: ../../configuration/container/index.rst:153 +msgid "Bind container network to a given VRF instance." +msgstr "Bind container network to a given VRF instance." + #: ../../configuration/protocols/bfd.rst:39 msgid "Bind listener to specific interface/address, mandatory for IPv6" msgstr "Vincular el oyente a una interfaz/dirección específica, obligatorio para IPv6" @@ -2680,7 +3001,7 @@ msgstr "Vincular el oyente a una interfaz/dirección específica, obligatorio pa msgid "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." msgstr "Vincula eth1.241 y vxlan241 entre sí al convertirlos en interfaces miembro del mismo puente." -#: ../../configuration/protocols/static.rst:108 +#: ../../configuration/protocols/static.rst:142 msgid "Blackhole" msgstr "Agujero negro" @@ -2708,11 +3029,11 @@ msgstr "Agregación de bonos/enlaces" msgid "Bond options" msgstr "Opciones de bonos" -#: ../../configuration/service/dhcp-server.rst:306 +#: ../../configuration/service/dhcp-server.rst:362 msgid "Boot image length in 512-octet blocks" msgstr "Longitud de la imagen de arranque en bloques de 512 octetos" -#: ../../configuration/service/dhcp-server.rst:301 +#: ../../configuration/service/dhcp-server.rst:357 msgid "Bootstrap file name" msgstr "Nombre de archivo de arranque" @@ -2752,8 +3073,8 @@ msgstr "Opciones de puente" msgid "Bridge Rules" msgstr "Bridge Rules" -#: ../../configuration/interfaces/bridge.rst:198 -#: ../../configuration/interfaces/bridge.rst:233 +#: ../../configuration/interfaces/bridge.rst:207 +#: ../../configuration/interfaces/bridge.rst:242 msgid "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" msgstr "Bridge responde en la dirección IP 192.0.2.1/24 y 2001:db8::ffff/64" @@ -2761,6 +3082,14 @@ msgstr "Bridge responde en la dirección IP 192.0.2.1/24 y 2001:db8::ffff/64" msgid "Bridge maximum aging `<time>` in seconds (default: 20)." msgstr "Envejecimiento máximo del puente `<time> ` en segundos (predeterminado: 20)." +#: ../../configuration/service/ipoe-server.rst:360 +#: ../../configuration/service/pppoe-server.rst:526 +#: ../../configuration/vpn/l2tp.rst:480 +#: ../../configuration/vpn/pptp.rst:404 +#: ../../configuration/vpn/sstp.rst:438 +msgid "Burst count" +msgstr "Burst count" + #: ../../configuration/interfaces/pppoe.rst:41 msgid "Business Users" msgstr "Usuarios comerciales" @@ -2777,15 +3106,15 @@ msgstr "De forma predeterminada, FRR mostrará la interconexión con una capacid msgid "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." msgstr "De forma predeterminada, VyOS no anuncia una ruta predeterminada (0.0.0.0/0) incluso si está en la tabla de enrutamiento. Cuando desee anunciar rutas predeterminadas al par, use este comando. Usando el argumento opcional :cfgcmd:`route-map`, puede inyectar la ruta predeterminada a un vecino dado solo si se cumplen las condiciones en el mapa de ruta." -#: ../../configuration/system/login.rst:126 +#: ../../configuration/system/login.rst:130 msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "De forma predeterminada, la aplicación móvil genera un nuevo token cada 30 segundos. Para compensar el posible desfase temporal entre el cliente y el servidor, se permite un token adicional antes y después de la hora actual. Esto permite un sesgo de tiempo de hasta 30 segundos entre el servidor de autenticación y el cliente." -#: ../../configuration/service/dns.rst:393 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "De manera predeterminada, ddclient_ actualizará un registro dns dinámico usando la dirección IP directamente adjunta a la interfaz. Si su instancia de VyOS está detrás de NAT, su registro se actualizará para apuntar a su IP interna." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "De manera predeterminada, habilitar RPKI no cambia la selección de la mejor ruta. En particular, los prefijos no válidos aún se considerarán durante la selección de la mejor ruta. Sin embargo, el enrutador se puede configurar para ignorar todos los prefijos no válidos." @@ -2794,6 +3123,10 @@ msgstr "De manera predeterminada, habilitar RPKI no cambia la selección de la m msgid "By default, it supports both planned and unplanned outages." msgstr "De forma predeterminada, admite interrupciones planificadas y no planificadas." +#: ../../configuration/protocols/bgp.rst:661 +msgid "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." +msgstr "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." + #: ../../configuration/service/https.rst:45 msgid "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." msgstr "De forma predeterminada, nginx expone la API local en todos los servidores virtuales. Use esto para restringir nginx a uno o más hosts virtuales." @@ -2839,7 +3172,11 @@ msgstr "Mediante el uso de interfaces Pseudo-Ethernet, habrá menos sobrecarga d msgid "Bypassing the webproxy" msgstr "Omitir el webproxy" -#: ../../configuration/pki/index.rst:170 +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + +#: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (autoridad de certificación)" @@ -2860,20 +3197,20 @@ msgstr "Negociación de capacidad" msgid "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." msgstr "Ciertos proveedores usan transmisiones para identificar su equipo dentro de un segmento de Ethernet. Desafortunadamente, si divide su red con varias VLAN, pierde la capacidad de identificar su equipo." -#: ../../configuration/pki/index.rst:33 +#: ../../configuration/pki/index.rst:35 msgid "Certificate Authority (CA)" msgstr "Autoridad de certificación (CA)" -#: ../../configuration/pki/index.rst:185 +#: ../../configuration/pki/index.rst:187 msgid "Certificate revocation list in PEM format." msgstr "Lista de revocación de certificados en formato PEM." -#: ../../configuration/pki/index.rst:63 +#: ../../configuration/pki/index.rst:65 #: ../../configuration/vpn/sstp.rst:27 msgid "Certificates" msgstr "Certificados" -#: ../../configuration/system/option.rst:66 +#: ../../configuration/system/option.rst:96 msgid "Change system keyboard layout to given language." msgstr "Cambie el diseño del teclado del sistema al idioma dado." @@ -2889,7 +3226,7 @@ msgstr "Los cambios en las políticas de BGP requieren que se borre la sesión d msgid "Changes to the NAT system only affect newly established connections. Already established connections are not affected." msgstr "Los cambios en el sistema NAT solo afectan a las conexiones recién establecidas. Las conexiones ya establecidas no se ven afectadas." -#: ../../configuration/system/option.rst:70 +#: ../../configuration/system/option.rst:100 msgid "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." msgstr "Cambiar el mapa de teclas solo tiene un efecto en la consola del sistema, el uso de SSH o el acceso remoto en serie al dispositivo no se ve afectado ya que el diseño del teclado aquí corresponde a su sistema de acceso." @@ -2909,11 +3246,11 @@ msgstr "Compruebe si el dispositivo Intel® QAT está activo y listo para hacer msgid "Check status" msgstr "Comprobar estado" -#: ../../configuration/system/ipv6.rst:64 +#: ../../configuration/system/ipv6.rst:77 msgid "Check the many parameters available for the `show ipv6 route` command:" msgstr "Verifique los muchos parámetros disponibles para el comando `show ipv6 route`:" -#: ../../configuration/service/pppoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:315 msgid "Checking connections" msgstr "Comprobación de conexiones" @@ -2945,11 +3282,11 @@ msgstr "trato de clase" msgid "Classes" msgstr "Clases" -#: ../../configuration/service/dhcp-server.rst:326 +#: ../../configuration/service/dhcp-server.rst:382 msgid "Classless static route" msgstr "Ruta estática sin clase" -#: ../../configuration/policy/route-map.rst:269 +#: ../../configuration/policy/route-map.rst:272 msgid "Clear all BGP extcommunities." msgstr "Borre todas las comunidades externas de BGP." @@ -2973,7 +3310,15 @@ msgstr "Autenticación del cliente" msgid "Client Configuration" msgstr "Client Configuration" -#: ../../configuration/vpn/sstp.rst:289 +#: ../../configuration/service/ipoe-server.rst:328 +#: ../../configuration/service/pppoe-server.rst:446 +#: ../../configuration/vpn/l2tp.rst:400 +#: ../../configuration/vpn/pptp.rst:324 +#: ../../configuration/vpn/sstp.rst:358 +msgid "Client IP Pool Advanced Options" +msgstr "Client IP Pool Advanced Options" + +#: ../../configuration/vpn/sstp.rst:358 msgid "Client IP addresses will be provided from pool `192.0.2.0/25`" msgstr "Las direcciones IP de los clientes se proporcionarán desde el grupo `192.0.2.0/25`" @@ -2981,15 +3326,15 @@ msgstr "Las direcciones IP de los clientes se proporcionarán desde el grupo `19 msgid "Client Side" msgstr "Lado del cliente" -#: ../../configuration/service/ipoe-server.rst:184 +#: ../../configuration/service/ipoe-server.rst:186 msgid "Client configuration" msgstr "Configuración del cliente" -#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:322 msgid "Client domain name" msgstr "nombre de dominio del cliente" -#: ../../configuration/service/dhcp-server.rst:321 +#: ../../configuration/service/dhcp-server.rst:377 msgid "Client domain search" msgstr "Búsqueda de dominio de cliente" @@ -3001,7 +3346,7 @@ msgstr "El aislamiento del cliente se puede utilizar para evitar puentes de tram msgid "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" msgstr "Los clientes se identifican por el campo CN de sus certificados x.509, en este ejemplo el CN es ``client0``:" -#: ../../configuration/service/dhcp-server.rst:514 +#: ../../configuration/service/dhcp-server.rst:573 msgid "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." msgstr "Los clientes que reciben mensajes publicitarios de varios servidores eligen el servidor con el valor de preferencia más alto. El rango para este valor es ``0...255``." @@ -3019,11 +3364,11 @@ msgstr "La finalización del comando se puede utilizar para enumerar las zonas h msgid "Command for disabling a rule but keep it in the configuration." msgstr "Command for disabling a rule but keep it in the configuration." -#: ../../configuration/vrf/index.rst:128 +#: ../../configuration/vrf/index.rst:147 msgid "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." msgstr "El comando probablemente debería extenderse para enumerar también las interfaces reales asignadas a este VRF para obtener una mejor visión general." -#: ../../configuration/firewall/ipv4.rst:1179 +#: ../../configuration/firewall/ipv4.rst:1202 #: ../../configuration/firewall/ipv6.rst:1195 msgid "Command used to update GeoIP database and firewall sets." msgstr "Comando utilizado para actualizar la base de datos GeoIP y los conjuntos de firewall." @@ -3032,7 +3377,7 @@ msgstr "Comando utilizado para actualizar la base de datos GeoIP y los conjuntos msgid "Commands" msgstr "Commands" -#: ../../configuration/service/dhcp-server.rst:379 +#: ../../configuration/service/dhcp-server.rst:436 msgid "Common configuration, valid for both primary and secondary node." msgstr "Configuración común, válida tanto para el nodo primario como para el secundario." @@ -3059,7 +3404,7 @@ msgstr "Configuración de interfaz común" msgid "Common parameters" msgstr "Parámetros comunes" -#: ../../configuration/protocols/bgp.rst:927 +#: ../../configuration/protocols/bgp.rst:949 msgid "Confederation Configuration" msgstr "Configuración de Confederación" @@ -3098,28 +3443,28 @@ msgstr "Confidencialidad: cifrado de paquetes para evitar la intromisión de una #: ../../configuration/policy/local-route.rst:9 #: ../../configuration/policy/prefix-list.rst:16 #: ../../configuration/policy/route-map.rst:10 -#: ../../configuration/protocols/bfd.rst:143 +#: ../../configuration/protocols/bfd.rst:150 #: ../../configuration/protocols/bgp.rst:164 #: ../../configuration/protocols/igmp-proxy.rst:14 #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 #: ../../configuration/service/dhcp-relay.rst:19 #: ../../configuration/service/dhcp-relay.rst:137 #: ../../configuration/service/dhcp-server.rst:22 -#: ../../configuration/service/dhcp-server.rst:510 +#: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:227 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 -#: ../../configuration/service/ipoe-server.rst:28 +#: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 #: ../../configuration/service/mdns.rst:19 #: ../../configuration/service/ntp.rst:40 -#: ../../configuration/service/pppoe-server.rst:17 +#: ../../configuration/service/router-advert.rst:28 #: ../../configuration/service/salt-minion.rst:25 #: ../../configuration/service/ssh.rst:36 #: ../../configuration/service/tftp-server.rst:14 @@ -3127,18 +3472,18 @@ msgstr "Confidencialidad: cifrado de paquetes para evitar la intromisión de una #: ../../configuration/system/default-route.rst:12 #: ../../configuration/system/flow-accounting.rst:43 #: ../../configuration/system/lcd.rst:17 -#: ../../configuration/system/login.rst:241 -#: ../../configuration/system/login.rst:310 +#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:314 #: ../../configuration/system/sflow.rst:12 #: ../../configuration/system/updates.rst:8 #: ../../configuration/vpn/dmvpn.rst:38 #: ../../configuration/vpn/dmvpn.rst:182 #: ../../configuration/vpn/openconnect.rst:21 -#: ../../configuration/vpn/sstp.rst:65 +#: ../../configuration/vpn/sstp.rst:40 #: ../../configuration/vrf/index.rst:16 -#: ../../configuration/vrf/index.rst:253 -#: ../../configuration/vrf/index.rst:288 -#: ../../configuration/vrf/index.rst:436 +#: ../../configuration/vrf/index.rst:272 +#: ../../configuration/vrf/index.rst:307 +#: ../../configuration/vrf/index.rst:455 msgid "Configuration" msgstr "Configuración" @@ -3148,8 +3493,8 @@ msgstr "Configuración" #: ../../configuration/protocols/pim6.rst:78 #: ../../configuration/protocols/rip.rst:239 #: ../../configuration/protocols/segment-routing.rst:187 -#: ../../configuration/system/login.rst:279 -#: ../../configuration/system/login.rst:350 +#: ../../configuration/system/login.rst:283 +#: ../../configuration/system/login.rst:354 msgid "Configuration Example" msgstr "Ejemplo de configuración" @@ -3171,7 +3516,7 @@ msgstr "Opciones de configuración" msgid "Configuration commands covered in this section:" msgstr "Configuration commands covered in this section:" -#: ../../configuration/vpn/ipsec.rst:284 +#: ../../configuration/vpn/ipsec.rst:288 msgid "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" msgstr "Los comandos de configuración para la clave privada y pública se mostrarán en la pantalla que primero debe configurarse en el enrutador. Tenga en cuenta el comando con la clave pública (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Luego haga lo mismo en el enrutador opuesto:" @@ -3183,7 +3528,7 @@ msgstr "Se mostrarán los comandos de configuración. Tenga en cuenta el comando msgid "Configuration example:" msgstr "Configuration example:" -#: ../../configuration/vrf/index.rst:430 +#: ../../configuration/vrf/index.rst:449 msgid "Configuration for these exported routes must, at a minimum, specify these two parameters." msgstr "La configuración de estas rutas exportadas debe, como mínimo, especificar estos dos parámetros." @@ -3191,15 +3536,19 @@ msgstr "La configuración de estas rutas exportadas debe, como mínimo, especifi msgid "Configuration of :ref:`routing-static`" msgstr "Configuración de :ref:`routing-static`" -#: ../../configuration/service/dhcp-server.rst:371 +#: ../../configuration/service/dhcp-server.rst:427 +msgid "Configuration of a DHCP HA pair:" +msgstr "Configuration of a DHCP HA pair:" + +#: ../../configuration/service/dhcp-server.rst:411 msgid "Configuration of a DHCP failover pair" msgstr "Configuración de un par de conmutación por error DHCP" -#: ../../configuration/vrf/index.rst:438 +#: ../../configuration/vrf/index.rst:457 msgid "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." msgstr "La configuración de la fuga de rutas entre una RIB VRF de unidifusión y la RIB SAFI de VPN de la VRF predeterminada se logra a través de comandos en el contexto de una familia de direcciones VRF." -#: ../../configuration/protocols/static.rst:166 +#: ../../configuration/protocols/static.rst:199 #: ../../configuration/system/conntrack.rst:12 msgid "Configure" msgstr "Configurar" @@ -3208,11 +3557,11 @@ msgstr "Configurar" msgid "Configure BFD" msgstr "Configurar BFD" -#: ../../configuration/service/dns.rst:258 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `<record>` which should be updated. This can be set multiple times." msgstr "Configurar DNS `<record> ` que debe ser actualizado. Esto se puede configurar varias veces." -#: ../../configuration/service/dns.rst:253 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `<zone>` to be updated." msgstr "Configurar DNS `<zone> ` para ser actualizado." @@ -3230,15 +3579,27 @@ msgstr "Configure el reinicio elegante :rfc:`3623` soporte auxiliar. De forma pr msgid "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." msgstr "Configure el reinicio elegante :rfc:`3623` soporte de reinicio. Cuando está habilitado, el período de gracia predeterminado es de 120 segundos." +#: ../../configuration/service/ids.rst:69 +msgid "Configure ICMP threshold parameters." +msgstr "Configure ICMP threshold parameters." + #: ../../configuration/service/dhcp-relay.rst:40 msgid "Configure IP address of the DHCP `<server>` which will handle the relayed packets." msgstr "Configurar la dirección IP del DHCP `<server> ` que manejará los paquetes retransmitidos." -#: ../../configuration/vpn/sstp.rst:214 +#: ../../configuration/service/ipoe-server.rst:162 +#: ../../configuration/service/pppoe-server.rst:124 +#: ../../configuration/vpn/l2tp.rst:167 +#: ../../configuration/vpn/pptp.rst:107 +#: ../../configuration/vpn/sstp.rst:140 msgid "Configure RADIUS `<server>` and its required port for authentication requests." msgstr "Configurar RADIO `<server> ` y su puerto requerido para las solicitudes de autenticación." -#: ../../configuration/vpn/sstp.rst:218 +#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/pppoe-server.rst:90 +#: ../../configuration/vpn/l2tp.rst:133 +#: ../../configuration/vpn/pptp.rst:73 +#: ../../configuration/vpn/sstp.rst:106 msgid "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." msgstr "Configurar RADIO `<server> ` y su requerido compartido `<secret> ` para comunicarse con el servidor RADIUS." @@ -3246,23 +3607,39 @@ msgstr "Configurar RADIO `<server> ` y su requerido compartido `<secret> ` para msgid "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." msgstr "Configure la regla SNAT (40) solo para paquetes NAT con una dirección de destino de 192.0.2.1." +#: ../../configuration/service/ids.rst:74 +msgid "Configure TCP threshold parameters" +msgstr "Configure TCP threshold parameters" + +#: ../../configuration/service/ids.rst:79 +msgid "Configure UDP threshold parameters" +msgstr "Configure UDP threshold parameters" + #: ../../_include/interface-mtu.txt:4 msgid "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." msgstr "Configure :abbr:`MTU (Unidad máxima de transmisión)` en ` dado<interface> `. Es el tamaño (en bytes) de la trama Ethernet más grande enviada en este enlace." -#: ../../configuration/system/login.rst:375 +#: ../../configuration/system/login.rst:379 msgid "Configure `<message>` which is shown after user has logged in to the system." msgstr "Configurar `<message> ` que se muestra después de que el usuario haya iniciado sesión en el sistema." -#: ../../configuration/system/login.rst:370 +#: ../../configuration/system/login.rst:374 msgid "Configure `<message>` which is shown during SSH connect and before a user is logged in." msgstr "Configurar `<message> ` que se muestra durante la conexión SSH y antes de que un usuario inicie sesión." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:440 +msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:355 msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." msgstr "Configurar `<password> ` utilizado al autenticar la solicitud de actualización para el servicio DynDNS identificado por `<service> `." -#: ../../configuration/service/dns.rst:334 +#: ../../configuration/service/dns.rst:435 +msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:348 msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." msgstr "Configurar `<username> ` utilizado al autenticar la solicitud de actualización para el servicio DynDNS identificado por `<service> `. Para Namecheap, configure el<domain> desea actualizar." @@ -3274,13 +3651,13 @@ msgstr "Configure a URL that contains information about images." msgid "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." msgstr "Configure una dirección de agente de sFlow. Puede ser una dirección IPv4 o IPv6, pero debe establecer el mismo protocolo que se usa para las direcciones del recopilador sFlow. De manera predeterminada, se usa el id del enrutador del protocolo BGP o OSPF, o la dirección IP principal de la primera interfaz." -#: ../../configuration/protocols/bfd.rst:154 -#: ../../configuration/protocols/bfd.rst:167 +#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:174 msgid "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." msgstr "Configurar una ruta estática para<subnet> usando la puerta de enlace<address> , use la dirección de origen para identificar al par cuando se trata de una sesión de varios saltos y la dirección de la puerta de enlace como dirección de destino del par BFD." -#: ../../configuration/protocols/bfd.rst:148 -#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:155 +#: ../../configuration/protocols/bfd.rst:168 msgid "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." msgstr "Configurar una ruta estática para<subnet> usando la puerta de enlace<address> y use la dirección de la puerta de enlace como dirección de destino del par BFD." @@ -3304,6 +3681,10 @@ msgstr "Configure la dirección IP del agente asociada con esta interfaz." msgid "Configure aggregation delay timer interval." msgstr "Configure el intervalo del temporizador de retraso de agregación." +#: ../../configuration/service/ids.rst:24 +msgid "Configure alert script that will be executed when an attack is detected." +msgstr "Configure alert script that will be executed when an attack is detected." + #: ../../configuration/vpn/openconnect.rst:285 msgid "Configure an accounting server and enable accounting with:" msgstr "Configure un servidor de contabilidad y habilite la contabilidad con:" @@ -3328,6 +3709,10 @@ msgstr "Configurar back-end `<name> ` modo TCP o HTTP" msgid "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" msgstr "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" +#: ../../configuration/service/ids.rst:33 +msgid "Configure direction for processing traffic." +msgstr "Configure direction for processing traffic." + #: ../../configuration/service/console-server.rst:49 msgid "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." msgstr "Configure uno o dos bits de parada. Esto por defecto es un bit de parada si se deja sin configurar." @@ -3336,6 +3721,14 @@ msgstr "Configure uno o dos bits de parada. Esto por defecto es un bit de parada msgid "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." msgstr "Configure siete u ocho bits de datos. Esto tiene un valor predeterminado de ocho bits de datos si no se configura." +#: ../../configuration/service/ids.rst:64 +msgid "Configure general threshold parameters." +msgstr "Configure general threshold parameters." + +#: ../../configuration/service/ids.rst:28 +msgid "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." +msgstr "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." + #: ../../configuration/interfaces/bridge.rst:46 msgid "Configure individual bridge port `<priority>`." msgstr "Configurar puerto de puente individual `<priority> `." @@ -3353,6 +3746,14 @@ msgstr "Configure el comportamiento del host/enrutador específico de la interfa msgid "Configure interface `<interface>` with one or more interface addresses." msgstr "Configurar interfaz `<interface> ` con una o más direcciones de interfaz." +#: ../../configuration/service/ids.rst:42 +msgid "Configure listen interface for mirroring traffic." +msgstr "Configure listen interface for mirroring traffic." + +#: ../../configuration/service/ids.rst:55 +msgid "Configure local IPv4 address to listen for sflow." +msgstr "Configure local IPv4 address to listen for sflow." + #: ../../configuration/service/snmp.rst:148 msgid "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" msgstr "Configure un nuevo usuario SNMP llamado "vyos" con la contraseña "vyos12345678"" @@ -3369,7 +3770,7 @@ msgstr "Configurar siguiente salto `<address> ` para una ruta estática IPv4. Se msgid "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." msgstr "Configurar siguiente salto `<address> ` para una ruta estática IPv6. Se pueden crear múltiples rutas estáticas." -#: ../../configuration/system/option.rst:95 +#: ../../configuration/system/option.rst:125 msgid "Configure one of the predefined system performance profiles." msgstr "Configure uno de los perfiles de rendimiento del sistema predefinidos." @@ -3381,7 +3782,7 @@ msgstr "Configure uno o más atributos para el servidor NTP dado." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure uno o más servidores para la sincronización. El nombre del servidor puede ser una dirección IP o :abbr:`FQDN (Nombre de dominio completo)`." -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure el valor TTL opcional en el registro de recursos dado. Esto por defecto es de 600 segundos." @@ -3405,6 +3806,10 @@ msgstr "Configure la duplicación de puertos para el tráfico saliente de la &qu msgid "Configure port number of remote VXLAN endpoint." msgstr "Configure el número de puerto del extremo VXLAN remoto." +#: ../../configuration/service/ids.rst:59 +msgid "Configure port number to be used for sflow conection. Default port is 6343." +msgstr "Configure port number to be used for sflow conection. Default port is 6343." + #: ../../configuration/system/syslog.rst:73 msgid "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." msgstr "Configure el protocolo utilizado para la comunicación con el host de syslog remoto. Esto puede ser UDP o TCP." @@ -3413,6 +3818,14 @@ msgstr "Configure el protocolo utilizado para la comunicación con el host de sy msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure el puerto proxy si no escucha el puerto predeterminado 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configurar la dirección IPv4 o IPv6 del agente sFlow" @@ -3429,7 +3842,7 @@ msgstr "Configurar servicio `<name> ` modo TCP o HTTP" msgid "Configure service `<name>` to use the backend <name>" msgstr "Configurar servicio `<name> ` para usar el backend<name>" -#: ../../configuration/system/login.rst:394 +#: ../../configuration/system/login.rst:398 msgid "Configure session timeout after which the user will be logged out." msgstr "Configure el tiempo de espera de la sesión después del cual se cerrará la sesión del usuario." @@ -3445,7 +3858,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:247 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." msgstr "Configurar el DNS `<server> ` IP/FQDN utilizado al actualizar esta asignación dinámica." @@ -3457,18 +3870,22 @@ msgstr "Configure la dirección de escucha IPv4 o IPv6 del servidor TFTP. Se pue msgid "Configure the connection tracking protocol helper modules. All modules are enable by default." msgstr "Configure los módulos auxiliares del protocolo de seguimiento de conexión. Todos los módulos están habilitados por defecto." -#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:256 msgid "Configure the discrete port under which the RADIUS server can be reached." msgstr "Configure el puerto discreto bajo el cual se puede acceder al servidor RADIUS." -#: ../../configuration/system/login.rst:321 +#: ../../configuration/system/login.rst:325 msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure el puerto discreto bajo el cual se puede acceder al servidor TACACS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure el servicio de proxy inverso de equilibrio de carga para HTTP." +#: ../../configuration/service/ids.rst:46 +msgid "Configure traffic capture mode." +msgstr "Configure traffic capture mode." + #: ../../_include/interface-mac.txt:4 msgid "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." msgstr "Configure la dirección :abbr:`MAC (Control de acceso a medios)` definida por el usuario en `<interface> `." @@ -3489,10 +3906,54 @@ msgstr "Valor configurado" msgid "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." msgstr "Configura el altavoz BGP para que solo acepte conexiones entrantes, pero no inicie conexiones salientes con el par o grupo de pares." +#: ../../configuration/service/ipoe-server.rst:27 +msgid "Configuring IPoE Server" +msgstr "Configuring IPoE Server" + +#: ../../configuration/vpn/l2tp.rst:57 +msgid "Configuring IPsec" +msgstr "Configuring IPsec" + +#: ../../configuration/vpn/l2tp.rst:12 +msgid "Configuring L2TP Server" +msgstr "Configuring L2TP Server" + +#: ../../configuration/vpn/l2tp.rst:270 +msgid "Configuring LNS (L2TP Network Server)" +msgstr "Configuring LNS (L2TP Network Server)" + +#: ../../configuration/service/pppoe-server.rst:18 +msgid "Configuring PPPoE Server" +msgstr "Configuring PPPoE Server" + +#: ../../configuration/vpn/pptp.rst:13 +msgid "Configuring PPTP Server" +msgstr "Configuring PPTP Server" + #: ../../configuration/vpn/openconnect.rst:279 msgid "Configuring RADIUS accounting" msgstr "Configuración de la contabilidad de RADIUS" +#: ../../configuration/service/ipoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:76 +#: ../../configuration/vpn/l2tp.rst:119 +#: ../../configuration/vpn/pptp.rst:59 +#: ../../configuration/vpn/sstp.rst:92 +msgid "Configuring RADIUS authentication" +msgstr "Configuring RADIUS authentication" + +#: ../../configuration/vpn/sstp.rst:24 +msgid "Configuring SSTP Server" +msgstr "Configuring SSTP Server" + +#: ../../configuration/vpn/sstp.rst:476 +msgid "Configuring SSTP client" +msgstr "Configuring SSTP client" + +#: ../../configuration/vpn/ipsec.rst:494 +msgid "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." +msgstr "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." + #: ../../configuration/service/tftp-server.rst:39 msgid "Configuring a listen-address is essential for the service to work." msgstr "La configuración de una dirección de escucha es esencial para que el servicio funcione." @@ -3502,11 +3963,15 @@ msgstr "La configuración de una dirección de escucha es esencial para que el s msgid "Connect/Disconnect" msgstr "Conectar/Desconectar" -#: ../../configuration/vpn/sstp.rst:155 +#: ../../configuration/service/ipoe-server.rst:376 +#: ../../configuration/service/pppoe-server.rst:546 +#: ../../configuration/vpn/l2tp.rst:500 +#: ../../configuration/vpn/pptp.rst:424 +#: ../../configuration/vpn/sstp.rst:458 msgid "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." msgstr "El cliente conectado debe usar `<address> ` como su servidor DNS. Este comando acepta direcciones IPv4 e IPv6. Se pueden configurar hasta dos servidores de nombres para IPv4, hasta tres para IPv6." -#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:143 msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -3514,6 +3979,10 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Las conexiones al servidor de almacenamiento en caché RPKI no solo pueden establecerse mediante HTTP/TLS, sino que también puede confiar en una sesión SSH segura con el servidor. Para habilitar SSH, primero debe crear usted mismo un par de claves de cliente SSH usando ``generate ssh client-key /config/auth/id_rsa_rpki``. Una vez que se crea su clave, puede configurar la conexión." +#: ../../configuration/protocols/rpki.rst:141 +msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." + #: ../../configuration/system/conntrack.rst:4 msgid "Conntrack" msgstr "Contraseña" @@ -3542,7 +4011,7 @@ msgstr "Consola" msgid "Console Server" msgstr "Servidor de consola" -#: ../../configuration/container/index.rst:106 +#: ../../configuration/container/index.rst:111 msgid "Constrain the memory available to the container." msgstr "Restringe la memoria disponible para el contenedor." @@ -3550,6 +4019,14 @@ msgstr "Restringe la memoria disponible para el contenedor." msgid "Container" msgstr "Envase" +#: ../../configuration/container/index.rst:136 +msgid "Container Networks" +msgstr "Container Networks" + +#: ../../configuration/container/index.rst:156 +msgid "Container Registry" +msgstr "Container Registry" + #: ../../configuration/system/conntrack.rst:65 msgid "Contrack Timeouts" msgstr "Contrack Timeouts" @@ -3578,11 +4055,11 @@ msgstr "Crear política de lista comunitaria identificada por nombre<text> ." msgid "Creat extcommunity-list policy identified by name <text>." msgstr "Crear política de lista de comunidades externas identificada por nombre<text> ." -#: ../../configuration/service/dhcp-server.rst:104 +#: ../../configuration/service/dhcp-server.rst:120 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." msgstr "Cree un rango de direcciones DHCP con una identificación de rango de `<n> `. Las concesiones de DHCP se toman de este grupo. El grupo comienza en la dirección `<address> `." -#: ../../configuration/service/dhcp-server.rst:110 +#: ../../configuration/service/dhcp-server.rst:126 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." msgstr "Cree un rango de direcciones DHCP con una identificación de rango de `<n> `. Las concesiones de DHCP se toman de este grupo. La piscina se detiene con la dirección `<address> `." @@ -3590,11 +4067,22 @@ msgstr "Cree un rango de direcciones DHCP con una identificación de rango de `< msgid "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" msgstr "Cree un registro DNS por arrendamiento de cliente, agregando clientes al archivo /etc/hosts. La entrada tendrá formato: `<shared-network-name> _<hostname> .<domain-name> `" -#: ../../configuration/vpn/sstp.rst:70 +#: ../../configuration/service/pppoe-server.rst:49 +#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/pptp.rst:38 +#: ../../configuration/vpn/sstp.rst:63 msgid "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." msgstr "Crear `<user> ` para la autenticación local en este sistema. La contraseña de los usuarios se establecerá en `<pass> `." -#: ../../configuration/interfaces/bridge.rst:190 +#: ../../configuration/service/dhcp-server.rst:160 +msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." + +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + +#: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Crear un puente básico" @@ -3606,7 +4094,11 @@ msgstr "Cree un archivo llamado ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` u msgid "Create a load balancing rule, it can be a number between 1 and 9999:" msgstr "Cree una regla de equilibrio de carga, puede ser un número entre 1 y 9999:" -#: ../../configuration/service/dhcp-server.rst:183 +#: ../../configuration/service/dhcp-server.rst:239 +msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." +msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." + +#: ../../configuration/service/dhcp-server.rst:233 msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." msgstr "Cree una nueva asignación estática de DHCP llamada `<description> ` que es válido para el host identificado por su MAC `<address> `." @@ -3614,31 +4106,31 @@ msgstr "Cree una nueva asignación estática de DHCP llamada `<description> ` qu msgid "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." msgstr "Cree una nueva interfaz VLAN en la interfaz `<interface> ` utilizando el número de VLAN proporcionado a través de `<vlan-id> `." -#: ../../configuration/pki/index.rst:40 -#: ../../configuration/pki/index.rst:45 +#: ../../configuration/pki/index.rst:42 +#: ../../configuration/pki/index.rst:47 msgid "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." msgstr "Cree una nueva :abbr:`CA (Autoridad de certificación)` y genere la clave pública y privada de las CA en la consola." -#: ../../configuration/pki/index.rst:67 -#: ../../configuration/pki/index.rst:71 +#: ../../configuration/pki/index.rst:69 +#: ../../configuration/pki/index.rst:73 msgid "Create a new public/private keypair and output the certificate on the console." msgstr "Cree un nuevo par de claves pública/privada y emita el certificado en la consola." -#: ../../configuration/pki/index.rst:89 -#: ../../configuration/pki/index.rst:94 +#: ../../configuration/pki/index.rst:91 +#: ../../configuration/pki/index.rst:96 msgid "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." msgstr "Cree un nuevo par de claves pública/privada que esté firmada por la CA a la que hace referencia `ca-name`. A continuación, el certificado firmado se envía a la consola." -#: ../../configuration/pki/index.rst:77 -#: ../../configuration/pki/index.rst:82 +#: ../../configuration/pki/index.rst:79 +#: ../../configuration/pki/index.rst:84 msgid "Create a new self-signed certificate. The public/private is then shown on the console." msgstr "Cree un nuevo certificado autofirmado. A continuación, se muestra el público/privado en la consola." -#: ../../configuration/pki/index.rst:52 +#: ../../configuration/pki/index.rst:54 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." msgstr "Cree un nuevo subordinado :abbr:`CA (autoridad de certificación)` y fírmelo con la clave privada a la que hace referencia `ca-name`." -#: ../../configuration/pki/index.rst:57 +#: ../../configuration/pki/index.rst:59 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." msgstr "Cree un nuevo subordinado :abbr:`CA (autoridad de certificación)` y fírmelo con la clave privada a la que hace referencia `nombre`." @@ -3686,10 +4178,15 @@ msgstr "Crear llamado `<alias> ` para la asignación estática configurada para msgid "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." msgstr "Crea una nueva instancia VRF con `<name> `. El nombre se utiliza al colocar interfaces individuales en el VRF." -#: ../../configuration/service/dns.rst:234 +#: ../../configuration/service/dns.rst:248 msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." msgstr "Cree una nueva configuración de actualización de DNS :rfc:`2136` que actualizará la dirección IP asignada a `<interface> ` en el servicio que configuró en `<service-name> `." +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 +msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." + #: ../../configuration/system/login.rst:21 msgid "Create new system user with username `<name>` and real-name specified by `<string>`." msgstr "Crear nuevo usuario del sistema con nombre de usuario `<name> ` y nombre real especificado por `<string> `." @@ -3698,15 +4195,19 @@ msgstr "Crear nuevo usuario del sistema con nombre de usuario `<name> ` y nombre msgid "Create service `<name>` to listen on <port>" msgstr "Crear servicio `<name> ` para escuchar<port>" -#: ../../configuration/container/index.rst:132 +#: ../../configuration/container/index.rst:140 msgid "Creates a named container network" msgstr "Crea una red de contenedores con nombre" +#: ../../configuration/service/ipoe-server.rst:55 +msgid "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" +msgstr "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" + #: ../../configuration/vpn/dmvpn.rst:83 msgid "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." msgstr "Crea una asignación de pares estática de la dirección del protocolo a la dirección :abbr:`NBMA (red de acceso múltiple sin transmisión)`." -#: ../../configuration/interfaces/bridge.rst:192 +#: ../../configuration/interfaces/bridge.rst:201 msgid "Creating a bridge interface is very simple. In this example, we will have:" msgstr "Crear una interfaz de puente es muy simple. En este ejemplo tendremos:" @@ -3722,6 +4223,10 @@ msgstr "Creación de una política de tráfico" msgid "Creating rules for using flow tables:" msgstr "Creating rules for using flow tables:" +#: ../../configuration/container/index.rst:173 +msgid "Credentials can be defined here and will only be used when adding a container image to the system." +msgstr "Credentials can be defined here and will only be used when adding a container image to the system." + #: ../../configuration/system/syslog.rst:178 msgid "Critical" msgstr "crítico" @@ -3754,7 +4259,7 @@ msgstr "Límite de saltos en curso" msgid "Currently does not do much as caching is not implemented." msgstr "Actualmente no hace mucho ya que el almacenamiento en caché no está implementado." -#: ../../configuration/vrf/index.rst:86 +#: ../../configuration/vrf/index.rst:105 msgid "Currently dynamic routing is supported for the following protocols:" msgstr "Actualmente, el enrutamiento dinámico es compatible con los siguientes protocolos:" @@ -3778,7 +4283,7 @@ msgstr "Custom firewall chains can be created, with commands ``set firewall ipv4 msgid "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." msgstr "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." -#: ../../configuration/highavailability/index.rst:373 +#: ../../configuration/highavailability/index.rst:383 msgid "Custom health-check script allows checking real-server availability" msgstr "El script de verificación de estado personalizado permite verificar la disponibilidad del servidor real" @@ -3794,6 +4299,14 @@ msgstr "DCO se puede habilitar tanto para túneles nuevos como existentes. VyOS msgid "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." msgstr "La compatibilidad con DCO es una opción por túnel y no se habilita automáticamente de forma predeterminada para túneles nuevos o actualizados. Los túneles existentes seguirán funcionando como hasta ahora." +#: ../../configuration/service/ids.rst:5 +msgid "DDoS Protection" +msgstr "DDoS Protection" + +#: ../../configuration/service/dhcp-server.rst:181 +msgid "DHCP High Availability must be configured explicitly by the following statements on both servers:" +msgstr "DHCP High Availability must be configured explicitly by the following statements on both servers:" + #: ../../configuration/service/dhcp-relay.rst:5 msgid "DHCP Relay" msgstr "Retransmisión DHCP" @@ -3802,15 +4315,15 @@ msgstr "Retransmisión DHCP" msgid "DHCP Server" msgstr "servidor DHCP" -#: ../../configuration/service/dhcp-server.rst:351 +#: ../../configuration/service/dhcp-server.rst:407 msgid "DHCP failover parameters" msgstr "Parámetros de conmutación por error de DHCP" -#: ../../configuration/service/dhcp-server.rst:341 +#: ../../configuration/service/dhcp-server.rst:397 msgid "DHCP lease range" msgstr "Rango de concesión de DHCP" -#: ../../configuration/service/dhcp-server.rst:377 +#: ../../configuration/service/dhcp-server.rst:434 msgid "DHCP range spans from `192.168.189.10` - `192.168.189.250`" msgstr "El rango de DHCP abarca desde `192.168.189.10` - `192.168.189.250`" @@ -3822,7 +4335,7 @@ msgstr "Ejemplo de retransmisión DHCP" msgid "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." msgstr "El servidor DHCP está ubicado en la dirección IPv4 10.0.1.4 en ``eth2``." -#: ../../configuration/service/dhcp-server.rst:584 +#: ../../configuration/service/dhcp-server.rst:643 msgid "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." msgstr "Los grupos de direcciones DHCPv6 deben configurarse para que el sistema actúe como un servidor DHCPv6. El siguiente ejemplo describe un escenario común." @@ -3887,11 +4400,11 @@ msgstr "servidores de nombres DNS" msgid "DNS search list to advertise" msgstr "Lista de búsqueda de DNS para anunciar" -#: ../../configuration/service/dhcp-server.rst:261 +#: ../../configuration/service/dhcp-server.rst:317 msgid "DNS server IPv4 address" msgstr "Dirección IPv4 del servidor DNS" -#: ../../configuration/service/dhcp-server.rst:591 +#: ../../configuration/service/dhcp-server.rst:650 msgid "DNS server is located at ``2001:db8::ffff``" msgstr "El servidor DNS está ubicado en ``2001:db8::ffff``" @@ -3903,7 +4416,7 @@ msgstr "Valores DSCP según :rfc:`2474` y :rfc:`4595`:" msgid "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" msgstr "Modo DSSS/CCK en 40 MHz, esto establece ``[DSSS_CCK-40]``" -#: ../../configuration/firewall/ipv4.rst:444 +#: ../../configuration/firewall/ipv4.rst:467 #: ../../configuration/firewall/ipv6.rst:451 msgid "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." msgstr "Los datos son proporcionados por DB-IP.com bajo licencia CC-BY-4.0. Se requiere atribución, permite la redistribución para que podamos incluir una base de datos en imágenes (~3 MB comprimidos). Incluye secuencia de comandos cron (invocable manualmente por geoip de actualización de modo operativo) para mantener la base de datos y las reglas actualizadas." @@ -3940,15 +4453,18 @@ msgstr "Puerta de enlace/ruta predeterminada" msgid "Default Router Preference" msgstr "Preferencia de enrutador predeterminado" -#: ../../configuration/vpn/sstp.rst:201 +#: ../../configuration/service/pppoe-server.rst:509 +#: ../../configuration/vpn/l2tp.rst:463 +#: ../../configuration/vpn/pptp.rst:387 +#: ../../configuration/vpn/sstp.rst:421 msgid "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." msgstr "Comportamiento predeterminado: no le pida al cliente mppe, pero permítalo si el cliente lo desea. Tenga en cuenta que RADIUS puede anular esta opción mediante el atributo MS-MPPE-Encryption-Policy." -#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:431 msgid "Default gateway and DNS server is at `192.0.2.254`" msgstr "La puerta de enlace predeterminada y el servidor DNS están en `192.0.2.254`" -#: ../../configuration/container/index.rst:108 +#: ../../configuration/container/index.rst:113 msgid "Default is 512 MB. Use 0 MB for unlimited memory." msgstr "El valor predeterminado es 512 MB. Use 0 MB para memoria ilimitada." @@ -3976,7 +4492,7 @@ msgstr "El valor predeterminado es 'uid'" msgid "Defaults to 225.0.0.50." msgstr "El valor predeterminado es 225.0.0.50." -#: ../../configuration/system/option.rst:68 +#: ../../configuration/system/option.rst:98 msgid "Defaults to ``us``." msgstr "El valor predeterminado es ``nosotros``." @@ -3988,6 +4504,10 @@ msgstr "Definir tiempos de espera de conexión" msgid "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." msgstr "Defina la dirección de administración IPv4/IPv6 transmitida a través de LLDP. Se pueden definir varias direcciones. Solo se transmitirán las direcciones conectadas al sistema." +#: ../../configuration/container/index.rst:148 +msgid "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." +msgstr "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." + #: ../../configuration/firewall/groups.rst:52 msgid "Define a IPv4 or IPv6 Network group." msgstr "Defina un grupo de red IPv4 o IPv6." @@ -4040,6 +4560,10 @@ msgstr "Defina diferentes modos para enviar respuestas en respuesta a las solici msgid "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." msgstr "Defina diferentes niveles de restricción para anunciar la dirección IP de origen local de los paquetes IP en las solicitudes ARP enviadas en la interfaz." +#: ../../configuration/service/ntp.rst:88 +msgid "Define how to handle leaf-seonds." +msgstr "Define how to handle leaf-seonds." + #: ../../configuration/firewall/flowtables.rst:71 msgid "Define interfaces to be used in the flowtable." msgstr "Define interfaces to be used in the flowtable." @@ -4068,7 +4592,11 @@ msgstr "Defina el grupo de registro al que enviar el mensaje. Solo se aplica si msgid "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." msgstr "Defina la cantidad de paquetes para poner en cola dentro del kernel antes de enviarlos al espacio de usuario. Solo se aplica si el registro de reglas está habilitado y el grupo de registros está definido." -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/service/dhcp-server.rst:187 +msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" +msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" + +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Definir el intervalo de tiempo para actualizar el caché local" @@ -4080,7 +4608,11 @@ msgstr "Defina la zona como una zona local. Una zona local no tiene interfaces y msgid "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/interfaces/bridge.rst:135 +msgid "Define used ethertype of bridge interface." +msgstr "Define used ethertype of bridge interface." + +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Definió el IPv4, IPv6 o FQDN y el número de puerto de la instancia de almacenamiento en caché RPKI de almacenamiento en caché que se utiliza." @@ -4092,26 +4624,51 @@ msgstr "Define fuentes alternativas para multidifusión y datos IGMP. La direcci msgid "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." msgstr "Define un prefijo de red fuera de NBMA para el cual la interfaz GRE actuará como puerta de enlace. Esta es una alternativa a la definición de interfaces locales con indicador de destino de acceso directo." -#: ../../configuration/protocols/static.rst:120 -#: ../../configuration/protocols/static.rst:133 +#: ../../configuration/protocols/static.rst:154 +#: ../../configuration/protocols/static.rst:167 msgid "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Define la distancia del agujero negro para esta ruta, las rutas con menor distancia administrativa se eligen antes que las de mayor distancia." +#: ../../configuration/service/pppoe-server.rst:496 +#: ../../configuration/vpn/l2tp.rst:450 +#: ../../configuration/vpn/pptp.rst:374 +#: ../../configuration/vpn/sstp.rst:408 +msgid "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." +msgstr "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." + #: ../../configuration/protocols/static.rst:34 #: ../../configuration/protocols/static.rst:54 -#: ../../configuration/protocols/static.rst:81 -#: ../../configuration/protocols/static.rst:101 +#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:124 msgid "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Define la distancia del siguiente salto para esta ruta, las rutas con menor distancia administrativa se eligen antes que aquellas con mayor distancia." +#: ../../configuration/service/pppoe-server.rst:515 +#: ../../configuration/vpn/l2tp.rst:469 +#: ../../configuration/vpn/pptp.rst:393 +#: ../../configuration/vpn/sstp.rst:427 +msgid "Defines preferred MRU. By default is not defined." +msgstr "Defines preferred MRU. By default is not defined." + #: ../../configuration/protocols/failover.rst:31 msgid "Defines protocols for checking ARP, ICMP, TCP" msgstr "Define protocolos para verificar ARP, ICMP, TCP" -#: ../../configuration/vpn/sstp.rst:178 +#: ../../configuration/vpn/sstp.rst:184 msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." msgstr "Define el máximo `<number> ` de solicitudes de eco no respondidas. Al llegar al valor `<number> `, la sesión se reiniciará." +#: ../../configuration/service/pppoe-server.rst:479 +#: ../../configuration/vpn/l2tp.rst:433 +#: ../../configuration/vpn/pptp.rst:357 +#: ../../configuration/vpn/sstp.rst:391 +msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." + +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Define el dispositivo especificado como una consola del sistema. Los dispositivos de consola disponibles pueden ser (consulte el asistente de finalización):" @@ -4120,15 +4677,15 @@ msgstr "Define el dispositivo especificado como una consola del sistema. Los dis msgid "Defining Peers" msgstr "Definición de compañeros" -#: ../../configuration/service/dhcp-server.rst:579 +#: ../../configuration/service/dhcp-server.rst:638 msgid "Delegate prefixes from the range indicated by the start and stop qualifier." msgstr "Prefijos delegados del rango indicado por el calificador de inicio y fin." -#: ../../configuration/policy/route-map.rst:231 +#: ../../configuration/policy/route-map.rst:234 msgid "Delete BGP communities matching the community-list." msgstr "Elimine las comunidades BGP que coincidan con la lista de comunidades." -#: ../../configuration/policy/route-map.rst:246 +#: ../../configuration/policy/route-map.rst:249 msgid "Delete BGP communities matching the large-community-list." msgstr "Elimine las comunidades BGP que coincidan con la lista de comunidades grandes." @@ -4136,11 +4693,15 @@ msgstr "Elimine las comunidades BGP que coincidan con la lista de comunidades gr msgid "Delete Logs" msgstr "Eliminar registros" -#: ../../configuration/policy/route-map.rst:226 +#: ../../configuration/container/index.rst:211 +msgid "Delete a particular container image based on it's image ID. You can also delete all container images at once." +msgstr "Delete a particular container image based on it's image ID. You can also delete all container images at once." + +#: ../../configuration/policy/route-map.rst:229 msgid "Delete all BGP communities" msgstr "Eliminar todas las comunidades BGP" -#: ../../configuration/policy/route-map.rst:241 +#: ../../configuration/policy/route-map.rst:244 msgid "Delete all BGP large-communities" msgstr "Eliminar todas las comunidades grandes de BGP" @@ -4205,15 +4766,37 @@ msgstr "Los dispositivos que evalúan si una dirección IPv4 es pública deben a msgid "Different NAT Types" msgstr "Diferentes tipos de NAT" -#: ../../configuration/pki/index.rst:100 +#: ../../configuration/pki/index.rst:102 msgid "Diffie-Hellman parameters" msgstr "Parámetros de Diffie-Hellman" +#: ../../configuration/service/ids.rst:93 +msgid "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." +msgstr "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." + +#: ../../configuration/system/option.rst:46 +msgid "Disable CPU power saving mechanisms also known as C states." +msgstr "Disable CPU power saving mechanisms also known as C states." + +#: ../../configuration/service/pppoe-server.rst:457 +#: ../../configuration/vpn/l2tp.rst:411 +#: ../../configuration/vpn/pptp.rst:335 +#: ../../configuration/vpn/sstp.rst:369 +msgid "Disable Compression Control Protocol (CCP). CCP is enabled by default." +msgstr "Disable Compression Control Protocol (CCP). CCP is enabled by default." + #: ../../configuration/protocols/pim6.rst:37 msgid "Disable MLD reports and query on the interface." msgstr "Disable MLD reports and query on the interface." -#: ../../configuration/vpn/sstp.rst:75 +#: ../../configuration/system/login.rst:39 +msgid "Disable (lock) account. User will not be able to log in." +msgstr "Disable (lock) account. User will not be able to log in." + +#: ../../configuration/service/pppoe-server.rst:432 +#: ../../configuration/vpn/l2tp.rst:376 +#: ../../configuration/vpn/pptp.rst:300 +#: ../../configuration/vpn/sstp.rst:334 msgid "Disable `<user>` account." msgstr "Deshabilitar `<user> ` cuenta." @@ -4221,11 +4804,23 @@ msgstr "Deshabilitar `<user> ` cuenta." msgid "Disable a BFD peer" msgstr "Deshabilitar un compañero BFD" -#: ../../configuration/container/index.rst:128 +#: ../../configuration/container/index.rst:133 msgid "Disable a container." msgstr "Deshabilitar un contenedor." -#: ../../configuration/firewall/ipv4.rst:930 +#: ../../configuration/container/index.rst:166 +msgid "Disable a given container registry" +msgstr "Disable a given container registry" + +#: ../../configuration/system/option.rst:35 +msgid "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." +msgstr "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." + +#: ../../configuration/service/conntrack-sync.rst:103 +msgid "Disable connection logging via Syslog." +msgstr "Disable connection logging via Syslog." + +#: ../../configuration/firewall/ipv4.rst:953 #: ../../configuration/firewall/ipv6.rst:939 msgid "Disable conntrack loose track option" msgstr "Disable conntrack loose track option" @@ -4242,7 +4837,11 @@ msgstr "Deshabilite el servicio de retransmisión dhcpv6." msgid "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." msgstr "Deshabilitar dado `<interface> `. Se colocará en estado administrativamente inactivo (``A/D``)." -#: ../../configuration/protocols/bgp.rst:616 +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." + +#: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Deshabilite el restablecimiento inmediato de la sesión si el enlace conectado del compañero se cae." @@ -4254,6 +4853,10 @@ msgstr "Deshabilite la autenticación basada en contraseña. Inicie sesión solo msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Deshabilite la validación del host a través de búsquedas DNS inversas: puede acelerar el tiempo de inicio de sesión cuando no es posible la búsqueda inversa." @@ -4286,11 +4889,15 @@ msgstr "Deshabilitado de forma predeterminada: no se ha cargado ningún módulo msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Deshabilita el almacenamiento en caché de la información de pares de los paquetes de respuesta de resolución NHRP reenviados. Esto se puede usar para reducir el consumo de memoria en grandes subredes NBMA." -#: ../../configuration/protocols/static.rst:76 +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + +#: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Deshabilita la ruta estática IPv4 basada en la interfaz." -#: ../../configuration/protocols/static.rst:96 +#: ../../configuration/protocols/static.rst:119 msgid "Disables interface-based IPv6 static route." msgstr "Deshabilita la ruta estática IPv6 basada en la interfaz." @@ -4306,7 +4913,7 @@ msgstr "Deshabilita el filtrado web sin descartar la configuración." msgid "Disables web proxy transparent mode at a listening address." msgstr "Deshabilita el modo transparente de proxy web en una dirección de escucha." -#: ../../configuration/service/router-advert.rst:73 +#: ../../configuration/service/router-advert.rst:99 msgid "Disabling Advertisements" msgstr "Deshabilitar anuncios" @@ -4326,11 +4933,11 @@ msgstr "Las desventajas son:" msgid "Disassociate stations based on excessive transmission failures or other indications of connection loss." msgstr "Desasocie las estaciones en función de fallas de transmisión excesivas u otras indicaciones de pérdida de conexión." -#: ../../configuration/vrf/index.rst:142 +#: ../../configuration/vrf/index.rst:161 msgid "Display IPv4 routing table for VRF identified by `<name>`." msgstr "Muestra la tabla de enrutamiento IPv4 para VRF identificado por `<name> `." -#: ../../configuration/vrf/index.rst:161 +#: ../../configuration/vrf/index.rst:180 msgid "Display IPv6 routing table for VRF identified by `<name>`." msgstr "Muestra la tabla de enrutamiento IPv6 para VRF identificado por `<name> `." @@ -4338,7 +4945,7 @@ msgstr "Muestra la tabla de enrutamiento IPv6 para VRF identificado por `<name> msgid "Display Logs" msgstr "Mostrar registros" -#: ../../configuration/system/login.rst:188 +#: ../../configuration/system/login.rst:192 msgid "Display OTP key for user" msgstr "Mostrar clave OTP para el usuario" @@ -4346,11 +4953,11 @@ msgstr "Mostrar clave OTP para el usuario" msgid "Display all authorization attempts of the specified image" msgstr "Mostrar todos los intentos de autorización de la imagen especificada" -#: ../../configuration/protocols/static.rst:200 +#: ../../configuration/protocols/static.rst:233 msgid "Display all known ARP table entries on a given interface only (`eth1`):" msgstr "Mostrar todas las entradas de la tabla ARP conocidas solo en una interfaz dada (`eth1`):" -#: ../../configuration/protocols/static.rst:188 +#: ../../configuration/protocols/static.rst:221 msgid "Display all known ARP table entries spanning across all interfaces" msgstr "Muestra todas las entradas de la tabla ARP conocidas que abarcan todas las interfaces" @@ -4382,7 +4989,7 @@ msgstr "Muestra información sobre todos los vecinos descubiertos a través de L msgid "Displays queue information for a PPPoE interface." msgstr "Muestra información de la cola para una interfaz PPPoE." -#: ../../configuration/vrf/index.rst:213 +#: ../../configuration/vrf/index.rst:232 msgid "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." msgstr "Muestra los paquetes de ruta llevados a un host de red utilizando una instancia de VRF identificada por `<name> `. Cuando se utiliza la opción IPv4 o IPv6, muestra los paquetes de ruta llevados a la familia de direcciones IP de los hosts dados. Esta opción es útil cuando el host se especifica como un nombre de host en lugar de una dirección IP." @@ -4390,14 +4997,32 @@ msgstr "Muestra los paquetes de ruta llevados a un host de red utilizando una in msgid "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." msgstr "*No* edite manualmente `/etc/hosts`. Este archivo se regenerará automáticamente al arrancar según la configuración de esta sección, lo que significa que perderá todas las ediciones manuales. En su lugar, configure las asignaciones de host estático de la siguiente manera." +#: ../../configuration/system/ip.rst:55 +#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:85 +msgid "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + +#: ../../configuration/system/ipv6.rst:51 +msgid "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + #: ../../_include/interface-ipv6.txt:37 msgid "Do not assign a link-local IPv6 address to this interface." msgstr "No asigne una dirección IPv6 de enlace local a esta interfaz." -#: ../../configuration/trafficpolicy/index.rst:1208 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "No configure IFB como primer paso. Primero cree todo lo demás de su política de tráfico y luego puede configurar IFB. De lo contrario, es posible que obtenga el error ``RTNETLINK respuesta: el archivo existe``, que se puede resolver con ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + +#: ../../configuration/protocols/bgp.rst:609 +msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." +msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." + #: ../../configuration/service/dns.rst:103 msgid "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." msgstr "No use el archivo ``/etc/hosts`` local en la resolución de nombres. El servidor DHCP de VyOS utilizará este archivo para agregar resolutores a las direcciones asignadas." @@ -4426,7 +5051,7 @@ msgstr "Nombre(s) de dominio para los cuales obtener el certificado" msgid "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." msgstr "Los nombres de dominio pueden incluir letras, números, guiones y puntos con una longitud máxima de 253 caracteres." -#: ../../configuration/pki/index.rst:259 +#: ../../configuration/pki/index.rst:290 msgid "Domain names to apply, multiple domain-names can be specified." msgstr "Domain names to apply, multiple domain-names can be specified." @@ -4435,19 +5060,19 @@ msgstr "Domain names to apply, multiple domain-names can be specified." msgid "Domain search order" msgstr "Orden de búsqueda de dominio" -#: ../../configuration/pki/index.rst:25 +#: ../../configuration/pki/index.rst:27 msgid "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" msgstr "No tenga miedo de que necesite volver a hacer su configuración. La transformación clave está a cargo, como siempre, de nuestros scripts de migración, por lo que esta será una transición sin problemas para usted." -#: ../../configuration/protocols/bgp.rst:1172 +#: ../../configuration/protocols/bgp.rst:1194 msgid "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "No olvide, el CIDR declarado en la declaración de red **DEBE existir en su tabla de enrutamiento (dinámica o estática), la mejor manera de asegurarse de que sea cierto es creando una ruta estática:**" -#: ../../configuration/protocols/bgp.rst:1126 +#: ../../configuration/protocols/bgp.rst:1148 msgid "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "No olvide que el CIDR declarado en la declaración de red DEBE **existir en su tabla de enrutamiento (dinámico o estático), la mejor manera de asegurarse de que sea cierto es creando una ruta estática:**" -#: ../../configuration/vpn/site2site_ipsec.rst:299 +#: ../../configuration/vpn/site2site_ipsec.rst:302 msgid "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." msgstr "No se confunda con la subred del túnel /31 utilizada. :rfc:`3021` le brinda información adicional para usar subredes /31 en enlaces punto a punto." @@ -4459,10 +5084,17 @@ msgstr "Descargar/Actualizar lista negra completa" msgid "Download/Update partial blacklist." msgstr "Descargar/Actualizar lista negra parcial." -#: ../../configuration/vpn/sstp.rst:85 +#: ../../configuration/service/pppoe-server.rst:262 +#: ../../configuration/vpn/l2tp.rst:386 +#: ../../configuration/vpn/pptp.rst:310 +#: ../../configuration/vpn/sstp.rst:344 msgid "Download bandwidth limit in kbit/s for `<user>`." msgstr "Límite de ancho de banda de descarga en kbit/s para `<user> `." +#: ../../configuration/service/ipoe-server.rst:320 +msgid "Download bandwidth limit in kbit/s for user on interface `<interface>`." +msgstr "Download bandwidth limit in kbit/s for user on interface `<interface>`." + #: ../../configuration/policy/route-map.rst:202 msgid "Drop AS-NUMBER from the BGP AS path." msgstr "Suelte AS-NUMBER de la ruta BGP AS." @@ -4479,7 +5111,7 @@ msgstr "Tasa de abandono" msgid "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" msgstr "Los paquetes descartados informados en el canal DROPMON Netlink por el kernel de Linux se exportan a través de la extensión estándar sFlow v5 para informar paquetes descartados" -#: ../../configuration/service/pppoe-server.rst:367 +#: ../../configuration/service/pppoe-server.rst:625 msgid "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" msgstr "Aprovisionamiento de doble pila IPv4/IPv6 con delegación de prefijo" @@ -4495,19 +5127,23 @@ msgstr "Interfaz ficticia" msgid "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." msgstr "Las interfaces ficticias se pueden usar como interfaces que siempre permanecen activas (de la misma manera que los bucles invertidos en Cisco IOS) o con fines de prueba." -#: ../../configuration/vrf/index.rst:193 +#: ../../configuration/vrf/index.rst:212 msgid "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." msgstr "Los paquetes duplicados no se incluyen en el cálculo de pérdida de paquetes, aunque el tiempo de ida y vuelta de estos paquetes se usa para calcular los números de tiempo de ida y vuelta mínimo/promedio/máximo." -#: ../../configuration/pki/index.rst:285 +#: ../../configuration/pki/index.rst:316 msgid "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" msgstr "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" +#: ../../configuration/vpn/ipsec.rst:568 +msgid "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." +msgstr "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." + #: ../../configuration/service/ssh.rst:113 msgid "Dynamic-protection" msgstr "Protección dinámica" -#: ../../configuration/service/dns.rst:212 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "DNS Dinámico" @@ -4519,11 +5155,11 @@ msgstr "EAPoL viene con una opción de identificación. Usamos automáticamente msgid "ESP Phase:" msgstr "Fase ESP:" -#: ../../configuration/vpn/ipsec.rst:111 +#: ../../configuration/vpn/ipsec.rst:113 msgid "ESP (Encapsulating Security Payload) Attributes" msgstr "Atributos de ESP (Carga útil de seguridad encapsulada)" -#: ../../configuration/vpn/ipsec.rst:112 +#: ../../configuration/vpn/ipsec.rst:115 msgid "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" msgstr "ESP se utiliza para proporcionar confidencialidad, autenticación de origen de datos, integridad sin conexión, un servicio anti-reproducción (una forma de integridad de secuencia parcial) y confidencialidad de flujo de tráfico limitado. https://datatracker.ietf.org/doc/html/rfc4303" @@ -4587,7 +5223,7 @@ msgstr "Habilita la extensión del protocolo genérico (VXLAN-GPE). Actualmente, msgid "Email address to associate with certificate" msgstr "Dirección de correo electrónico para asociar con el certificado" -#: ../../configuration/pki/index.rst:265 +#: ../../configuration/pki/index.rst:296 msgid "Email used for registration and recovery contact." msgstr "Email used for registration and recovery contact." @@ -4599,35 +5235,35 @@ msgstr "Incrustar una política en otra" msgid "Emergency" msgstr "Emergencia" -#: ../../configuration/protocols/bfd.rst:89 +#: ../../configuration/protocols/bfd.rst:96 msgid "Enable BFD for ISIS on an interface" msgstr "Habilite BFD para ISIS en una interfaz" -#: ../../configuration/protocols/bfd.rst:77 +#: ../../configuration/protocols/bfd.rst:84 msgid "Enable BFD for OSPF on an interface" msgstr "Habilite BFD para OSPF en una interfaz" -#: ../../configuration/protocols/bfd.rst:81 +#: ../../configuration/protocols/bfd.rst:88 msgid "Enable BFD for OSPFv3 on an interface" msgstr "Habilite BFD para OSPFv3 en una interfaz" -#: ../../configuration/protocols/bfd.rst:61 +#: ../../configuration/protocols/bfd.rst:68 msgid "Enable BFD in BGP" msgstr "Habilitar BFD en BGP" -#: ../../configuration/protocols/bfd.rst:85 +#: ../../configuration/protocols/bfd.rst:92 msgid "Enable BFD in ISIS" msgstr "Habilitar BFD en ISIS" -#: ../../configuration/protocols/bfd.rst:73 +#: ../../configuration/protocols/bfd.rst:80 msgid "Enable BFD in OSPF" msgstr "Habilitar BFD en OSPF" -#: ../../configuration/protocols/bfd.rst:69 +#: ../../configuration/protocols/bfd.rst:76 msgid "Enable BFD on a BGP peer group" msgstr "Habilitar BFD en un grupo de pares BGP" -#: ../../configuration/protocols/bfd.rst:65 +#: ../../configuration/protocols/bfd.rst:72 msgid "Enable BFD on a single BGP neighbor" msgstr "Habilite BFD en un único vecino BGP" @@ -4635,6 +5271,10 @@ msgstr "Habilite BFD en un único vecino BGP" msgid "Enable DHCP failover configuration for this address pool." msgstr "Habilite la configuración de conmutación por error de DHCP para este conjunto de direcciones." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Habilitar reconocimiento de bloque retardado HT ``[DELAYED-BA]``" @@ -4651,7 +5291,7 @@ msgstr "Habilite el buscador IGMP y MLD." msgid "Enable IGMP and MLD snooping." msgstr "Habilite la indagación IGMP y MLD." -#: ../../configuration/service/dhcp-server.rst:271 +#: ../../configuration/service/dhcp-server.rst:327 msgid "Enable IP forwarding on client" msgstr "Habilitar el reenvío de IP en el cliente" @@ -4705,7 +5345,7 @@ msgstr "Habilite OSPF con enrutamiento de segmentos (experimental):" msgid "Enable OSPF with route redistribution of the loopback and default originate:" msgstr "Habilite OSPF con la redistribución de rutas del loopback y el origen predeterminado:" -#: ../../configuration/system/login.rst:103 +#: ../../configuration/system/login.rst:107 msgid "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." msgstr "Habilite OTP 2FA para el usuario `nombre de usuario` con la configuración predeterminada, utilizando la clave 2FA/MFA codificada en BASE32 especificada por `<key> `." @@ -4713,6 +5353,18 @@ msgstr "Habilite OTP 2FA para el usuario `nombre de usuario` con la configuraci msgid "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." msgstr "Habilite la función de descarga del canal de datos OpenVPN cargando el módulo del kernel apropiado." +#: ../../configuration/service/router-advert.rst:82 +msgid "Enable PREF64 option as outlined in :rfc:`8781`." +msgstr "Enable PREF64 option as outlined in :rfc:`8781`." + +#: ../../configuration/service/ipoe-server.rst:386 +#: ../../configuration/service/pppoe-server.rst:575 +#: ../../configuration/vpn/l2tp.rst:510 +#: ../../configuration/vpn/pptp.rst:434 +#: ../../configuration/vpn/sstp.rst:468 +msgid "Enable SNMP" +msgstr "Enable SNMP" + #: ../../configuration/service/lldp.rst:59 msgid "Enable SNMP queries of the LLDP database" msgstr "Habilitar consultas SNMP de la base de datos LLDP" @@ -4721,8 +5373,8 @@ msgstr "Habilitar consultas SNMP de la base de datos LLDP" msgid "Enable SNMP support for an individual routing daemon." msgstr "Enable SNMP support for an individual routing daemon." -#: ../../configuration/interfaces/bridge.rst:197 -#: ../../configuration/interfaces/bridge.rst:232 +#: ../../configuration/interfaces/bridge.rst:206 +#: ../../configuration/interfaces/bridge.rst:241 msgid "Enable STP" msgstr "Habilitar STP" @@ -4833,15 +5485,23 @@ msgstr "Las conexiones PPPoE bajo demanda habilitadas abren el enlace solo cuand msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Habilita la autenticación estilo Cisco en paquetes NHRP. Esto incrusta la contraseña secreta de texto sin formato en los paquetes NHRP salientes. Los paquetes NHRP entrantes en esta interfaz se descartan a menos que esté presente la contraseña secreta. La longitud máxima del secreto es de 8 caracteres." -#: ../../configuration/vrf/index.rst:461 +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + +#: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Permite adjuntar una etiqueta MPLS a una ruta exportada desde el VRF de unidifusión actual a VPN. Si el valor especificado es automático, el valor de la etiqueta se asigna automáticamente desde un grupo mantenido." -#: ../../configuration/vpn/sstp.rst:277 +#: ../../configuration/service/ipoe-server.rst:220 +#: ../../configuration/service/pppoe-server.rst:182 +#: ../../configuration/vpn/l2tp.rst:225 +#: ../../configuration/vpn/pptp.rst:165 +#: ../../configuration/vpn/sstp.rst:198 msgid "Enables bandwidth shaping via RADIUS." msgstr "Habilita la configuración del ancho de banda a través de RADIUS." -#: ../../configuration/vrf/index.rst:483 +#: ../../configuration/vrf/index.rst:502 msgid "Enables import or export of routes between the current unicast VRF and VPN." msgstr "Habilita la importación o exportación de rutas entre el VRF de unidifusión actual y la VPN." @@ -4853,6 +5513,10 @@ msgstr "Enables the Generic Protocol extension (VXLAN-GPE). Currently, this is o msgid "Enables the echo transmission mode" msgstr "Habilita el modo de transmisión de eco" +#: ../../configuration/system/option.rst:27 +msgid "Enables the root partition auto-extension and resizes to the maximum available space on system boot." +msgstr "Enables the root partition auto-extension and resizes to the maximum available space on system boot." + #: ../../configuration/service/router-advert.rst:27 msgid "Enabling Advertisments" msgstr "Habilitación de anuncios" @@ -4873,11 +5537,15 @@ msgstr "Habilitar esta función aumenta el riesgo de saturación del ancho de ba msgid "Enforce strict path checking" msgstr "Hacer cumplir la verificación de ruta estricta" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Esclavizar `<member> `interfaz para enlazar`<interface> `." -#: ../../configuration/protocols/bgp.rst:764 +#: ../../configuration/protocols/bgp.rst:786 msgid "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." msgstr "Asegúrese de que al comparar rutas donde ambas son iguales en la mayoría de las métricas, incluidas las preferencias locales, la longitud de AS_PATH, el costo de IGP, MED, el empate se rompe en función de la ID del enrutador." @@ -4913,6 +5581,10 @@ msgstr "El control de flujo de Ethernet es un mecanismo para detener temporalmen msgid "Ethernet options" msgstr "Opciones de Ethernet" +#: ../../configuration/interfaces/bridge.rst:137 +msgid "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." +msgstr "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." + #: ../../configuration/service/eventhandler.rst:5 msgid "Event Handler" msgstr "Controlador de eventos" @@ -4945,11 +5617,11 @@ msgstr "Cada regla NAT tiene un comando de traducción definido. La dirección d msgid "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" msgstr "Cada regla SNAT66 tiene definido un comando de traducción. El prefijo definido para la traducción es el prefijo que se usa cuando se reemplaza la información de la dirección en un paquete.、" -#: ../../configuration/system/login.rst:47 +#: ../../configuration/system/login.rst:51 msgid "Every SSH key comes in three parts:" msgstr "Cada clave SSH viene en tres partes:" -#: ../../configuration/system/login.rst:68 +#: ../../configuration/system/login.rst:72 msgid "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" msgstr "Cada parte de la clave pública SSH a la que hace referencia `<identifier> ` requiere la configuración de `<type> ` de la clave pública utilizada. Este tipo puede ser cualquiera de:" @@ -4965,12 +5637,16 @@ msgstr "Cada interfaz Ethernet virtual se comporta como una interfaz Ethernet re msgid "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." msgstr "Cada conexión WWAN requiere un :abbr:`APN (Nombre de punto de acceso)` que utiliza el cliente para conectarse a la red del ISP. Este es un parámetro obligatorio. Póngase en contacto con su proveedor de servicios para obtener el APN correcto." +#: ../../configuration/vpn/ipsec.rst:439 +msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." +msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:98 msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." #: ../../configuration/firewall/bridge.rst:321 -#: ../../configuration/highavailability/index.rst:397 +#: ../../configuration/highavailability/index.rst:407 #: ../../configuration/interfaces/bonding.rst:291 #: ../../configuration/interfaces/l2tpv3.rst:86 #: ../../configuration/interfaces/pppoe.rst:323 @@ -4980,23 +5656,24 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:156 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 -#: ../../configuration/service/conntrack-sync.rst:186 +#: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 -#: ../../configuration/service/dhcp-server.rst:362 -#: ../../configuration/service/dns.rst:160 -#: ../../configuration/service/dns.rst:276 +#: ../../configuration/service/dhcp-server.rst:418 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 -#: ../../configuration/service/ipoe-server.rst:150 +#: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 #: ../../configuration/service/monitoring.rst:134 +#: ../../configuration/service/router-advert.rst:108 #: ../../configuration/service/snmp.rst:94 #: ../../configuration/service/snmp.rst:145 #: ../../configuration/service/tftp-server.rst:47 #: ../../configuration/system/acceleration.rst:58 -#: ../../configuration/system/login.rst:397 +#: ../../configuration/system/login.rst:401 #: ../../configuration/system/name-server.rst:28 #: ../../configuration/system/name-server.rst:63 #: ../../configuration/system/sflow.rst:49 @@ -5005,9 +5682,8 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/trafficpolicy/index.rst:1122 #: ../../configuration/vpn/dmvpn.rst:161 #: ../../configuration/vpn/openconnect.rst:97 -#: ../../configuration/vpn/sstp.rst:286 -#: ../../configuration/vrf/index.rst:99 -#: ../../configuration/vrf/index.rst:232 +#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:251 msgid "Example" msgstr "Ejemplo" @@ -5028,16 +5704,18 @@ msgstr "Ejemplo, desde el comando de envío del servidor de radio para desconect #: ../../configuration/nat/nat44.rst:425 #: ../../configuration/nat/nat66.rst:78 #: ../../configuration/nat/nat66.rst:96 -#: ../../configuration/protocols/static.rst:174 -#: ../../configuration/service/dns.rst:363 +#: ../../configuration/protocols/static.rst:67 +#: ../../configuration/protocols/static.rst:135 +#: ../../configuration/protocols/static.rst:207 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 #: ../../configuration/service/ssh.rst:200 #: ../../configuration/system/flow-accounting.rst:164 -#: ../../configuration/vpn/l2tp.rst:41 -#: ../../configuration/vpn/site2site_ipsec.rst:162 -#: ../../configuration/vpn/site2site_ipsec.rst:273 +#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:276 #: ../../_include/interface-address-with-dhcp.txt:22 #: ../../_include/interface-address.txt:9 #: ../../_include/interface-description.txt:7 @@ -5105,15 +5783,15 @@ msgstr "Ejemplo: Duplicar el tráfico saliente del puerto `br1` a `eth3`" msgid "Example: Mirror the outbound traffic of `eth1` port to `eth3`" msgstr "Ejemplo: Duplicar el tráfico saliente del puerto `eth1` a `eth3`" -#: ../../configuration/interfaces/bridge.rst:166 +#: ../../configuration/interfaces/bridge.rst:175 msgid "Example: Set `eth0` member port to be allowed VLAN 4" msgstr "Ejemplo: configurar el puerto miembro `eth0` para que se permita VLAN 4" -#: ../../configuration/interfaces/bridge.rst:172 +#: ../../configuration/interfaces/bridge.rst:181 msgid "Example: Set `eth0` member port to be allowed VLAN 6-8" msgstr "Ejemplo: Configure el puerto miembro `eth0` para permitir VLAN 6-8" -#: ../../configuration/interfaces/bridge.rst:153 +#: ../../configuration/interfaces/bridge.rst:162 msgid "Example: Set `eth0` member port to be native VLAN 2" msgstr "Ejemplo: establezca el puerto miembro `eth0` para que sea VLAN 2 nativo" @@ -5121,13 +5799,12 @@ msgstr "Ejemplo: establezca el puerto miembro `eth0` para que sea VLAN 2 nativo" msgid "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." msgstr "Ejemplo: para agregar se establece en ``vyos.net`` y la URL recibida es ``www/foo.html``, el sistema usará la URL final generada de ``www.vyos.net/foo. html``." -#: ../../configuration/container/index.rst:177 -#: ../../configuration/service/https.rst:77 -#: ../../configuration/service/router-advert.rst:80 +#: ../../configuration/container/index.rst:216 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Configuración de ejemplo" -#: ../../configuration/service/dns.rst:378 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Ejemplo de solo IPv6:" @@ -5135,7 +5812,7 @@ msgstr "Ejemplo de solo IPv6:" msgid "Example Network" msgstr "Red de ejemplo" -#: ../../configuration/firewall/ipv4.rst:1130 +#: ../../configuration/firewall/ipv4.rst:1153 #: ../../configuration/firewall/ipv6.rst:1153 msgid "Example Partial Config" msgstr "Ejemplo de configuración parcial" @@ -5156,27 +5833,28 @@ msgstr "Ejemplo para configurar una VPN L2TP simple sobre IPsec para acceso remo msgid "Example of redirection:" msgstr "Ejemplo de redirección:" -#: ../../configuration/firewall/ipv4.rst:925 +#: ../../configuration/firewall/ipv4.rst:948 #: ../../configuration/firewall/ipv6.rst:934 msgid "Example synproxy" msgstr "Example synproxy" #: ../../configuration/firewall/groups.rst:145 -#: ../../configuration/interfaces/bridge.rst:187 +#: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 -#: ../../configuration/protocols/bgp.rst:1096 +#: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 #: ../../configuration/protocols/ospf.rst:834 -#: ../../configuration/service/pppoe-server.rst:343 +#: ../../configuration/service/pppoe-server.rst:601 #: ../../configuration/service/webproxy.rst:419 msgid "Examples" msgstr "Ejemplos" #: ../../configuration/nat/nat44.rst:154 -#: ../../configuration/vpn/site2site_ipsec.rst:157 +#: ../../configuration/vpn/site2site_ipsec.rst:160 msgid "Examples:" msgstr "Ejemplos:" @@ -5224,6 +5902,10 @@ msgstr "El servidor DHCPv6 externo está en 2001:db8::4" msgid "External Route Summarisation" msgstr "Resumen de ruta externa" +#: ../../configuration/service/ids.rst:101 +msgid "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" +msgstr "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" + #: ../../configuration/trafficpolicy/index.rst:441 msgid "FQ-CoDel" msgstr "FQ-CoDel" @@ -5274,8 +5956,6 @@ msgstr "Código de instalación" #: ../../configuration/loadbalancing/wan.rst:218 #: ../../configuration/protocols/failover.rst:3 -#: ../../configuration/service/dhcp-server.rst:136 -#: ../../configuration/service/dhcp-server.rst:369 msgid "Failover" msgstr "conmutación por error" @@ -5291,6 +5971,10 @@ msgstr "Mecanismo de conmutación por error que se utilizará para conntrack-syn msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Las rutas de conmutación por error son rutas configuradas manualmente, pero se instalan en la tabla de enrutamiento si el objetivo de verificación de estado está activo. Si el destino no está activo, la ruta se elimina de la tabla de enrutamiento hasta que el destino esté disponible." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Cola justa" @@ -5303,7 +5987,15 @@ msgstr "Fair Queue es una política sin configuración (que conserva el trabajo) msgid "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." msgstr "Fair Queue es un programador de conservación de trabajo que programa la transmisión de paquetes en función de los flujos, es decir, equilibra el tráfico distribuyéndolo a través de diferentes subcolas para garantizar la equidad de modo que cada flujo pueda enviar datos a su vez, evitando cualquier uno solo de ahogar al resto." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/service/ids.rst:9 +msgid "FastNetMon" +msgstr "FastNetMon" + +#: ../../configuration/service/ids.rst:11 +msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." +msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." + +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Características de la implementación actual" @@ -5311,11 +6003,15 @@ msgstr "Características de la implementación actual" msgid "Field" msgstr "Campo" -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:325 +msgid "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." +msgstr "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." + +#: ../../configuration/service/dns.rst:255 msgid "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." msgstr "Archivo identificado por `<keyfile> ` que contiene la clave RNDC secreta compartida con el servidor DNS remoto." -#: ../../configuration/service/pppoe-server.rst:228 +#: ../../configuration/service/pppoe-server.rst:302 msgid "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" msgstr "Filter-Id=2000/3000 (significa tasa de flujo descendente de 2000 Kbit y tasa de flujo ascendente de 3000 Kbit)" @@ -5404,7 +6100,7 @@ msgstr "Firewall groups represent collections of IP addresses, networks, ports, msgid "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." msgstr "Los grupos de firewall representan colecciones de direcciones IP, redes, puertos, direcciones mac o dominios. Una vez creado, un grupo puede ser referenciado por reglas de ruta de política, nat y firewall como un comparador de origen o de destino. Los miembros se pueden agregar o eliminar de un grupo sin cambios o la necesidad de volver a cargar las reglas de firewall individuales." -#: ../../configuration/highavailability/index.rst:381 +#: ../../configuration/highavailability/index.rst:391 msgid "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" msgstr "Marca de cortafuegos. Es posible equilibrar la carga del tráfico en función del valor ``fwmark``" @@ -5428,7 +6124,7 @@ msgstr "actualización de firmware" msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." msgstr "Primero, en ambos enrutadores ejecute el comando operativo "generar instalación de par de claves pki<key-pair nam> >". Puede elegir una longitud diferente a 2048, por supuesto." -#: ../../configuration/vpn/ipsec.rst:267 +#: ../../configuration/vpn/ipsec.rst:271 msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." msgstr "Primero, en ambos enrutadores ejecute el comando operativo "generar instalación de par de claves pki<key-pair name> ". Puede elegir una longitud diferente a 2048, por supuesto." @@ -5436,6 +6132,10 @@ msgstr "Primero, en ambos enrutadores ejecute el comando operativo "generar msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "Primero, uno de los sistemas genera la clave usando :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki> `comando. Una vez generada, deberá instalar esta clave en el sistema local, luego copiar e instalar esta clave en el enrutador remoto." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -5468,6 +6168,10 @@ msgstr "Primero se deben generar las claves OTP y enviarlas al usuario y a la co msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "Primero necesitamos especificar la configuración básica. 1194/UDP es el predeterminado. Se recomienda la opción ``persistent-tunnel``, que evita que el dispositivo TUN/TAP se cierre al reiniciar la conexión o recargar el daemon." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "Primero deberá implementar un validador RPKI para que lo usen sus enrutadores. El RIPE NCC proporciona útilmente `algunas instrucciones`_ para que pueda comenzar con varias opciones diferentes. Una vez que su servidor esté funcionando, puede comenzar a validar los anuncios." @@ -5492,6 +6196,30 @@ msgstr "Exportación de flujo" msgid "Flow and packet-based balancing" msgstr "Equilibrio basado en flujo y paquetes" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Los flujos se pueden exportar a través de dos protocolos diferentes: NetFlow (versiones 5, 9 y 10/IPFIX) y sFlow. Además, puede guardar flujos en una tabla en memoria internamente en un enrutador." @@ -5544,15 +6272,15 @@ msgstr "Para hash:" msgid "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." msgstr "Para que IS-IS top funcione correctamente, se debe hacer el equivalente a un Router ID en CLNS. Este ID de enrutador se denomina :abbr:`NET (Título de entidad de red)`. Esto debe ser único para todos y cada uno de los enrutadores que operan en IS-IS. Tampoco debe duplicarse, de lo contrario, los mismos problemas que ocurren dentro de OSPF ocurrirán dentro de IS-IS cuando se trata de dicha duplicación." -#: ../../configuration/policy/route-map.rst:311 +#: ../../configuration/policy/route-map.rst:314 msgid "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." msgstr "Para los mapas de rutas entrantes e importados, si recibimos una dirección v6 global y v6 LL para la ruta, entonces preferimos usar la dirección global como el siguiente salto." -#: ../../configuration/service/pppoe-server.rst:188 +#: ../../configuration/service/pppoe-server.rst:257 msgid "For Local Users" msgstr "Para usuarios locales" -#: ../../configuration/service/pppoe-server.rst:223 +#: ../../configuration/service/pppoe-server.rst:297 msgid "For RADIUS users" msgstr "Para usuarios de RADIUS" @@ -5592,7 +6320,7 @@ msgstr "Para una red doméstica simple que utiliza solo el equipo del ISP, esto msgid "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." msgstr "Para protocolos sin conexión como ICMP y UDP, un flujo se considera completo una vez que no aparecen más paquetes para este flujo después del tiempo de espera configurable." -#: ../../configuration/system/login.rst:132 +#: ../../configuration/system/login.rst:136 msgid "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." msgstr "Por ejemplo, si se experimentan problemas con la sincronización horaria deficiente, la ventana se puede aumentar desde su tamaño predeterminado de 3 códigos permitidos (un código anterior, el código actual, el código siguiente) a 17 códigos permitidos (los 8 códigos anteriores, el código actual código, y los 8 códigos siguientes). Esto permitirá un sesgo de tiempo de hasta 4 minutos entre el cliente y el servidor." @@ -5618,7 +6346,7 @@ msgstr "Para paquetes TCP o UDP fragmentados y todo el resto del tráfico de pro msgid "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" msgstr "Para generar una clave OTP en VyOS, puede usar el comando CLI (modo operativo):" -#: ../../configuration/protocols/bgp.rst:823 +#: ../../configuration/protocols/bgp.rst:845 msgid "For inbound updates the order of preference is:" msgstr "Para las actualizaciones entrantes, el orden de preferencia es:" @@ -5642,7 +6370,11 @@ msgstr "For latest releases, refer the `firewall (interface-groups) <https://doc msgid "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." msgstr "Para obtener más información sobre cómo funciona el cambio de etiquetas MPLS, visite `Wikipedia (MPLS)`_." -#: ../../configuration/service/pppoe-server.rst:299 +#: ../../configuration/protocols/bfd.rst:61 +msgid "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." +msgstr "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." + +#: ../../configuration/service/pppoe-server.rst:307 msgid "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." msgstr "Para el mantenimiento de la red, es una buena idea dirigir a los usuarios a un servidor de respaldo para que el servidor principal pueda quedar fuera de servicio de manera segura. Es posible cambiar su servidor PPPoE al modo de mantenimiento donde mantiene las conexiones ya establecidas, pero rechaza nuevos intentos de conexión." @@ -5650,7 +6382,7 @@ msgstr "Para el mantenimiento de la red, es una buena idea dirigir a los usuario msgid "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." msgstr "Para una escalabilidad óptima, no se debe usar Multicast en absoluto, sino usar BGP para señalar todos los dispositivos conectados entre hojas. Desafortunadamente, VyOS aún no es compatible con esto." -#: ../../configuration/protocols/bgp.rst:829 +#: ../../configuration/protocols/bgp.rst:851 msgid "For outbound updates the order of preference is:" msgstr "Para las actualizaciones salientes, el orden de preferencia es:" @@ -5691,11 +6423,11 @@ msgstr "Para la regla :ref:`destination-nat66`, la dirección de destino del paq msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "Para el usuario promedio, una consola en serie no tiene ninguna ventaja sobre una consola que ofrece un teclado y una pantalla conectados directamente. Las consolas en serie son mucho más lentas y tardan hasta un segundo en llenar una pantalla de 80 columnas por 24 líneas. Las consolas seriales generalmente solo admiten texto ASCII no proporcional, con soporte limitado para idiomas distintos del inglés." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "Para el tráfico de entrada de una interfaz, solo hay una política que puede aplicar directamente, una política **Limitadora**. No puede aplicar una política de configuración directamente al tráfico de entrada de ninguna interfaz porque la configuración solo funciona para el tráfico saliente." -#: ../../configuration/container/index.rst:179 +#: ../../configuration/container/index.rst:218 msgid "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." msgstr "En aras de la demostración, `ejemplo #1 en la documentación oficial<https://www.zabbix.com/documentation/current/manual/installation/containers> `_ a la sintaxis declarativa de la CLI de VyOS." @@ -5729,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formalmente, un enlace virtual parece una red punto a punto que conecta dos ABR de un área, una de las cuales está conectada físicamente a un área de red troncal. Se considera que esta pseudo-red pertenece a un área de red troncal." @@ -5737,7 +6473,7 @@ msgstr "Formalmente, un enlace virtual parece una red punto a punto que conecta msgid "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." msgstr "Reenvíe las consultas DNS entrantes a los servidores DNS configurados en los nodos ``system name-server``." -#: ../../configuration/highavailability/index.rst:362 +#: ../../configuration/highavailability/index.rst:372 msgid "Forward method" msgstr "Método de reenvío" @@ -5765,7 +6501,7 @@ msgstr "Desde una perspectiva de seguridad, no se recomienda permitir que un ter msgid "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" msgstr "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" -#: ../../configuration/highavailability/index.rst:380 +#: ../../configuration/highavailability/index.rst:390 msgid "Fwmark" msgstr "Fwmark" @@ -5806,6 +6542,11 @@ msgstr "GRE a menudo se ve como una solución única para todos cuando se trata msgid "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." msgstr "Genere un nuevo secreto compartido de OpenVPN. El secreto generado es la salida a la consola." +#: ../../configuration/pki/index.rst:123 +#: ../../configuration/pki/index.rst:128 +msgid "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." +msgstr "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." + #: ../../configuration/protocols/isis.rst:25 #: ../../configuration/protocols/ospf.rst:25 #: ../../configuration/protocols/ospf.rst:1081 @@ -5835,18 +6576,18 @@ msgstr "Genere la clave CAK :abbr:`MKA (protocolo de acuerdo de clave MACsec)`." msgid "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." msgstr "Genere :abbr:`MKA (Protocolo de acuerdo de clave MACsec)` Clave CAK de 128 o 256 bits." -#: ../../configuration/pki/index.rst:153 -#: ../../configuration/pki/index.rst:157 +#: ../../configuration/pki/index.rst:155 +#: ../../configuration/pki/index.rst:159 msgid "Generate a WireGuard pre-shared secret used for peers to communicate." msgstr "Genere un secreto precompartido de WireGuard que se utiliza para que los pares se comuniquen." -#: ../../configuration/pki/index.rst:136 -#: ../../configuration/pki/index.rst:141 +#: ../../configuration/pki/index.rst:138 +#: ../../configuration/pki/index.rst:143 msgid "Generate a new WireGuard public/private key portion and output the result to the console." msgstr "Genere una nueva porción de clave pública/privada de WireGuard y envíe el resultado a la consola." -#: ../../configuration/pki/index.rst:104 -#: ../../configuration/pki/index.rst:111 +#: ../../configuration/pki/index.rst:106 +#: ../../configuration/pki/index.rst:113 msgid "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." msgstr "Genere un nuevo conjunto de parámetros :abbr:`DH (Diffie-Hellman)`. La CLI solicita el tamaño de la clave y el valor predeterminado es 2048 bits." @@ -5882,7 +6623,7 @@ msgstr "Obtenga información detallada sobre los vecinos LLDP." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Empezando" @@ -5898,6 +6639,18 @@ msgstr "Dado el siguiente ejemplo, tenemos un enrutador VyOS que actúa como ser msgid "Gloabal" msgstr "global" +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +msgid "Global" +msgstr "Global" + +#: ../../configuration/service/ipoe-server.rst:352 +#: ../../configuration/service/pppoe-server.rst:518 +#: ../../configuration/vpn/l2tp.rst:472 +#: ../../configuration/vpn/pptp.rst:396 +#: ../../configuration/vpn/sstp.rst:430 +msgid "Global Advanced options" +msgstr "Global Advanced options" + #: ../../configuration/firewall/general.rst:84 msgid "Global Options" msgstr "Global Options" @@ -5910,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Opciones globales" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Parámetros globales" @@ -5923,6 +6676,10 @@ msgstr "ajustes globales" msgid "Graceful Restart" msgstr "Reinicio elegante" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "ARP gratuito" @@ -5947,7 +6704,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "Servicios basados en HTTP" @@ -5956,10 +6713,14 @@ msgstr "Servicios basados en HTTP" msgid "HTTP basic authentication username" msgstr "Nombre de usuario de autenticación básica HTTP" -#: ../../configuration/system/option.rst:27 +#: ../../configuration/system/option.rst:57 msgid "HTTP client" msgstr "cliente HTTP" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "Capacidades HT (alto rendimiento) (802.11n)" @@ -5968,7 +6729,7 @@ msgstr "Capacidades HT (alto rendimiento) (802.11n)" msgid "Hairpin NAT/NAT Reflection" msgstr "Horquilla NAT/NAT Reflexión" -#: ../../configuration/service/dhcp-server.rst:573 +#: ../../configuration/service/dhcp-server.rst:632 msgid "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." msgstr "Reparta prefijos de tamaño `<length> ` a los clientes en la subred `<prefix> ` cuando solicitan delegación de prefijo." @@ -5980,7 +6741,7 @@ msgstr "Manipulación y seguimiento" msgid "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." msgstr "Tener control sobre la coincidencia del tráfico de estado NO VÁLIDO, por ejemplo, la capacidad de registrar de forma selectiva, es una herramienta importante de solución de problemas para observar el comportamiento del protocolo roto. Por esta razón, VyOS no elimina globalmente el tráfico de estado no válido, sino que permite que el operador determine cómo se maneja el tráfico." -#: ../../configuration/highavailability/index.rst:372 +#: ../../configuration/highavailability/index.rst:382 msgid "Health-check" msgstr "Chequeo de salud" @@ -6024,7 +6785,7 @@ msgstr "Aquí hay un segundo ejemplo de un túnel de doble pila sobre IPv6 entre msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Aquí hay un ejemplo de valor :abbr:`NET (Título de entidad de red)`:" -#: ../../configuration/protocols/rpki.rst:167 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Aquí hay un mapa de ruta de ejemplo para aplicar a las rutas aprendidas en la importación. En este filtro, rechazamos los prefijos con el estado "no válido" y establecemos una "preferencia local" más alta si el prefijo es RPKI "válido" en lugar de simplemente "no encontrado"." @@ -6054,6 +6815,11 @@ msgstr "Hewlett-Packard lo llama filtrado de puerto de origen o aislamiento de p msgid "High" msgstr "Alto" +#: ../../configuration/service/dhcp-server.rst:170 +#: ../../configuration/service/dhcp-server.rst:425 +msgid "High Availability" +msgstr "High Availability" + #: ../../configuration/highavailability/index.rst:6 msgid "High availability" msgstr "Alta disponibilidad" @@ -6074,7 +6840,7 @@ msgstr "Información del anfitrión" msgid "Host name" msgstr "Nombre de anfitrión" -#: ../../configuration/service/dhcp-server.rst:630 +#: ../../configuration/service/dhcp-server.rst:691 msgid "Host specific mapping shall be named ``client1``" msgstr "El mapeo específico del host se llamará ``client1``" @@ -6094,7 +6860,7 @@ msgstr "Cómo configurar el controlador de eventos" msgid "How to make it work" msgstr "Cómo hacer que funcione" -#: ../../configuration/vpn/ipsec.rst:263 +#: ../../configuration/vpn/ipsec.rst:267 msgid "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." msgstr "Sin embargo, ahora necesita hacer que IPsec funcione con una dirección dinámica en un lado. La parte complicada es que la autenticación secreta precompartida no funciona con direcciones dinámicas, por lo que tendremos que usar claves RSA." @@ -6158,14 +6924,18 @@ msgstr "Atributos de IKE (intercambio de claves de Internet)" msgid "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" msgstr "IKE realiza la autenticación mutua entre dos partes y establece una asociación de seguridad (SA) de IKE que incluye información secreta compartida que se puede usar para establecer de manera eficiente las SA para encapsular la carga útil de seguridad (ESP) o el encabezado de autenticación (AH) y un conjunto de algoritmos criptográficos para ser utilizados por las SA para proteger el tráfico que transportan. https://datatracker.ietf.org/doc/html/rfc5996" -#: ../../configuration/vpn/site2site_ipsec.rst:160 +#: ../../configuration/vpn/site2site_ipsec.rst:163 msgid "IKEv1" msgstr "IKEv1" -#: ../../configuration/vpn/site2site_ipsec.rst:271 +#: ../../configuration/vpn/site2site_ipsec.rst:274 msgid "IKEv2" msgstr "IKEv2" +#: ../../configuration/vpn/ipsec.rst:372 +msgid "IKEv2 IPSec road-warriors remote-access VPN" +msgstr "IKEv2 IPSec road-warriors remote-access VPN" + #: ../../configuration/system/ip.rst:3 msgid "IP" msgstr "IP" @@ -6198,11 +6968,11 @@ msgstr "Grupos IPSec IKE y ESP;" msgid "IPSec IKEv2 Remote Access VPN" msgstr "IPSec IKEv2 Remote Access VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN" msgstr "IPSec IKEv2 sitio a sitio VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" msgstr "IPSec IKEv2 site2site VPN (fuente ./draw.io/vpn_s2s_ikev2.drawio)" @@ -6218,7 +6988,7 @@ msgstr "Túneles VPN IPSec." msgid "IP address" msgstr "dirección IP" -#: ../../configuration/service/dhcp-server.rst:202 +#: ../../configuration/service/dhcp-server.rst:258 msgid "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" msgstr "La dirección IP ``192.168.1.100`` se asignará estáticamente al cliente llamado ``client1``" @@ -6227,19 +6997,19 @@ msgstr "La dirección IP ``192.168.1.100`` se asignará estáticamente al client msgid "IP address ``192.168.2.1/24``" msgstr "Dirección IP ``192.168.2.1/24``" -#: ../../configuration/service/dhcp-server.rst:286 +#: ../../configuration/service/dhcp-server.rst:342 msgid "IP address for DHCP server identifier" msgstr "Dirección IP para el identificador del servidor DHCP" -#: ../../configuration/service/dhcp-server.rst:276 +#: ../../configuration/service/dhcp-server.rst:332 msgid "IP address of NTP server" msgstr "Dirección IP del servidor NTP" -#: ../../configuration/service/dhcp-server.rst:316 +#: ../../configuration/service/dhcp-server.rst:372 msgid "IP address of POP3 server" msgstr "Dirección IP del servidor POP3" -#: ../../configuration/service/dhcp-server.rst:311 +#: ../../configuration/service/dhcp-server.rst:367 msgid "IP address of SMTP server" msgstr "Dirección IP del servidor SMTP" @@ -6255,7 +7025,7 @@ msgstr "Dirección IP de la ruta para hacer coincidir, según la lista de prefij msgid "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." msgstr "Dirección IP de la ruta para hacer coincidir, según la longitud de prefijo especificada. Tenga en cuenta que esto solo se puede usar para rutas del kernel. No aplique a las rutas de los protocolos de enrutamiento dinámico (por ejemplo, BGP, RIP, OSFP), ya que esto puede conducir a resultados inesperados." -#: ../../configuration/service/dhcp-server.rst:346 +#: ../../configuration/service/dhcp-server.rst:402 msgid "IP address to exclude from DHCP lease range" msgstr "Dirección IP para excluir del rango de concesión de DHCP" @@ -6295,7 +7065,7 @@ msgstr "Siguiente salto de IP de ruta para coincidir, según el tipo." msgid "IP precedence as defined in :rfc:`791`:" msgstr "Precedencia de IP como se define en :rfc:`791`:" -#: ../../configuration/vpn/l2tp.rst:33 +#: ../../configuration/vpn/l2tp.rst:83 msgid "IP protocol number 50 (ESP)" msgstr "Número de protocolo IP 50 (ESP)" @@ -6307,19 +7077,19 @@ msgstr "Origen de la ruta IP de la ruta para hacer coincidir, según la lista de msgid "IP route source of route to match, based on prefix-list." msgstr "Origen de la ruta IP de la ruta para hacer coincidir, según la lista de prefijos." -#: ../../configuration/service/ipoe-server.rst:7 +#: ../../configuration/service/ipoe-server.rst:5 msgid "IPoE Server" msgstr "Servidor IPoE" -#: ../../configuration/service/ipoe-server.rst:30 +#: ../../configuration/service/ipoe-server.rst:29 msgid "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." msgstr "IPoE se puede configurar en diferentes interfaces, dependerá de cada situación específica qué interfaz proporcionará IPoE a los clientes. La dirección mac del cliente y la interfaz de entrada se utilizan como parámetro de control para autenticar a un cliente." -#: ../../configuration/service/ipoe-server.rst:13 +#: ../../configuration/service/ipoe-server.rst:11 msgid "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." msgstr "IPoE es un método para entregar una carga útil de IP a través de una red de acceso basada en Ethernet o una red de acceso que usa Ethernet con puente sobre el modo de transferencia asíncrono (ATM) sin usar PPPoE. Encapsula directamente los datagramas IP en tramas Ethernet, utilizando el encapsulado estándar :rfc:`894`." -#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:153 msgid "IPoE server will listen on interfaces eth1.50 and eth1.51" msgstr "El servidor IPoE escuchará en las interfaces eth1.50 y eth1.51" @@ -6327,11 +7097,11 @@ msgstr "El servidor IPoE escuchará en las interfaces eth1.50 y eth1.51" msgid "IPsec" msgstr "IPsec" -#: ../../configuration/vpn/ipsec.rst:172 +#: ../../configuration/vpn/ipsec.rst:176 msgid "IPsec policy matching GRE" msgstr "Política IPsec que coincide con GRE" -#: ../../configuration/service/pppoe-server.rst:346 +#: ../../configuration/service/pppoe-server.rst:604 msgid "IPv4" msgstr "IPv4" @@ -6343,11 +7113,11 @@ msgstr "Dirección remota IPv4/IPv6 del túnel VXLAN. Alternativa a la multidifu msgid "IPv4 Firewall Configuration" msgstr "IPv4 Firewall Configuration" -#: ../../configuration/service/dhcp-server.rst:291 +#: ../../configuration/service/dhcp-server.rst:347 msgid "IPv4 address of next bootstrap server" msgstr "Dirección IPv4 del próximo servidor de arranque" -#: ../../configuration/service/dhcp-server.rst:251 +#: ../../configuration/service/dhcp-server.rst:307 msgid "IPv4 address of router on the client's subnet" msgstr "Dirección IPv4 del enrutador en la subred del cliente" @@ -6355,7 +7125,7 @@ msgstr "Dirección IPv4 del enrutador en la subred del cliente" msgid "IPv4 or IPv6 source address of NetFlow packets" msgstr "Dirección de origen IPv4 o IPv6 de los paquetes NetFlow" -#: ../../configuration/protocols/bgp.rst:1099 +#: ../../configuration/protocols/bgp.rst:1121 msgid "IPv4 peering" msgstr "emparejamiento IPv4" @@ -6376,8 +7146,12 @@ msgid "IPv4 server" msgstr "servidor IPv4" #: ../../configuration/interfaces/pppoe.rst:244 -#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/service/ipoe-server.rst:256 +#: ../../configuration/service/pppoe-server.rst:341 #: ../../configuration/system/ipv6.rst:3 +#: ../../configuration/vpn/l2tp.rst:286 +#: ../../configuration/vpn/pptp.rst:210 +#: ../../configuration/vpn/sstp.rst:244 msgid "IPv6" msgstr "IPv6" @@ -6385,6 +7159,13 @@ msgstr "IPv6" msgid "IPv6 Access List" msgstr "Lista de acceso IPv6" +#: ../../configuration/service/pppoe-server.rst:381 +#: ../../configuration/vpn/l2tp.rst:325 +#: ../../configuration/vpn/pptp.rst:249 +#: ../../configuration/vpn/sstp.rst:283 +msgid "IPv6 Advanced Options" +msgstr "IPv6 Advanced Options" + #: ../../configuration/interfaces/pppoe.rst:379 msgid "IPv6 DHCPv6-PD Example" msgstr "Ejemplo de IPv6 DHCPv6-PD" @@ -6417,7 +7198,7 @@ msgstr "IPv6 SLAAC e IA-PD" msgid "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" msgstr "Los filtros IPv6 TCP solo coincidirán con paquetes IPv6 sin extensión de encabezado, consulte https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" -#: ../../configuration/service/dhcp-server.rst:628 +#: ../../configuration/service/dhcp-server.rst:689 msgid "IPv6 address ``2001:db8::101`` shall be statically mapped" msgstr "La dirección IPv6 ``2001:db8::101`` se mapeará estáticamente" @@ -6434,10 +7215,18 @@ msgid "IPv6 address of route to match, based on specified prefix-length. Note th msgstr "Dirección IPv6 de la ruta para hacer coincidir, según la longitud de prefijo especificada. Tenga en cuenta que esto solo se puede usar para rutas del kernel. No aplique a las rutas de los protocolos de enrutamiento dinámico (por ejemplo, BGP, RIP, OSFP), ya que esto puede conducir a resultados inesperados." #: ../../configuration/service/pppoe-server.rst:270 +msgid "IPv6 client's prefix" +msgstr "IPv6 client's prefix" + +#: ../../configuration/service/pppoe-server.rst:270 msgid "IPv6 client's prefix assignment" msgstr "Asignación de prefijo del cliente IPv6" -#: ../../configuration/protocols/bgp.rst:1144 +#: ../../configuration/service/pppoe-server.rst:295 +msgid "IPv6 default client's pool assignment" +msgstr "IPv6 default client's pool assignment" + +#: ../../configuration/protocols/bgp.rst:1166 msgid "IPv6 peering" msgstr "emparejamiento IPv6" @@ -6445,7 +7234,7 @@ msgstr "emparejamiento IPv6" msgid "IPv6 prefix." msgstr "Prefijo IPv6." -#: ../../configuration/service/dhcp-server.rst:629 +#: ../../configuration/service/dhcp-server.rst:690 msgid "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" msgstr "El prefijo IPv6 ``2001:db8:0:101::/64`` se mapeará estáticamente" @@ -6457,7 +7246,7 @@ msgstr "retransmisión IPv6" msgid "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." msgstr "Origen de la ruta IPv6: bgp, conectado, eigrp, isis, kernel, nhrp, ospfv3, ripng, estático." -#: ../../configuration/service/dhcp-server.rst:502 +#: ../../configuration/service/dhcp-server.rst:561 msgid "IPv6 server" msgstr "servidor IPv6" @@ -6477,7 +7266,7 @@ msgstr "Configuración global IS-IS" msgid "IS-IS SR Configuration" msgstr "Configuración IS-IS SR" -#: ../../configuration/service/dhcp-server.rst:233 +#: ../../configuration/service/dhcp-server.rst:289 msgid "ISC-DHCP Option name" msgstr "Nombre de la opción ISC-DHCP" @@ -6493,7 +7282,7 @@ msgstr "Si **umbral máximo** está configurado pero **umbral mínimo no lo est msgid "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." msgstr "Si el monitoreo ARP se usa en un modo compatible con etherchannel (modos round-robin y xor-hash), el conmutador debe configurarse en un modo que distribuya los paquetes de manera uniforme en todos los enlaces. Si el conmutador está configurado para distribuir los paquetes de forma XOR, todas las respuestas de los objetivos ARP se recibirán en el mismo enlace, lo que podría causar que los otros miembros del equipo fallen." -#: ../../configuration/pki/index.rst:249 +#: ../../configuration/pki/index.rst:251 msgid "If CA is present, this certificate will be included in generated CRLs" msgstr "Si CA está presente, este certificado se incluirá en las CRL generadas" @@ -6517,7 +7306,11 @@ msgstr "Si se establece :cfgcmd:`strict`, la sesión de BGP no se establecerá h msgid "If ``alias`` is set, it can be used instead of the device when connecting." msgstr "Si se establece ``alias``, se puede usar en lugar del dispositivo cuando se conecta." -#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/policy/route-map.rst:204 +msgid "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." +msgstr "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." + +#: ../../configuration/vpn/l2tp.rst:79 msgid "If a local firewall policy is in place on your external interface you will need to allow the ports below:" msgstr "Si existe una política de firewall local en su interfaz externa, deberá permitir los siguientes puertos:" @@ -6530,7 +7323,7 @@ msgstr "Si no se especifica un registro, Docker.io se usará como registro de co msgid "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." msgstr "Si se escucha una respuesta, se abandona la concesión y el servidor no responde al cliente. La concesión permanecerá abandonada durante un mínimo de segundos de tiempo de abandono de la concesión (el valor predeterminado es 24 horas)." -#: ../../configuration/protocols/bgp.rst:771 +#: ../../configuration/protocols/bgp.rst:793 msgid "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." msgstr "Si una ruta tiene un atributo ORIGINATOR_ID porque se ha reflejado, se utilizará ese ORIGINATOR_ID. De lo contrario, se utilizará la ID del enrutador del par del que se recibió la ruta." @@ -6608,7 +7401,7 @@ msgstr "Si utiliza múltiples túneles, OpenVPN debe tener una forma de distingu msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "Si la ruta múltiple está habilitada, verifique si las rutas que aún no se han distinguido en preferencia pueden considerarse iguales. Si se establece :cfgcmd:`bgp bestpath as-path multipath-relax`, todas esas rutas se consideran iguales; de lo contrario, las rutas recibidas a través de iBGP con AS_PATH idénticos o las rutas recibidas de vecinos eBGP en el mismo AS se consideran iguales." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "Si no se puede establecer una conexión con un servidor de caché RPKI después de un tiempo de espera predefinido, el enrutador procesará rutas sin validación de origen de prefijo. Todavía intentará establecer una conexión con un servidor de caché RPKI en segundo plano." @@ -6660,11 +7453,46 @@ msgstr "Si el AS-Path para la ruta solo tiene ASN privados, los ASN privados se msgid "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." msgstr "Si la máscara de prefijo IP está presente, indica a opennhrp que use este par como servidor de siguiente salto cuando envíe solicitudes de resolución que coincidan con esta subred." +#: ../../configuration/service/ipoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:205 +#: ../../configuration/vpn/l2tp.rst:248 +#: ../../configuration/vpn/pptp.rst:188 +#: ../../configuration/vpn/sstp.rst:221 +msgid "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:233 +#: ../../configuration/service/pppoe-server.rst:195 +#: ../../configuration/vpn/l2tp.rst:238 +#: ../../configuration/vpn/pptp.rst:178 +#: ../../configuration/vpn/sstp.rst:211 +msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." +msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." + #: ../../configuration/vpn/l2tp.rst:211 msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." msgstr "Si el servidor RADIUS envía el atributo ``Framed-IP-Address``, esta dirección IP se asignará al cliente y se ignorará la opción ip-pool dentro de la configuración de la CLI." -#: ../../configuration/vpn/l2tp.rst:218 +#: ../../configuration/service/ipoe-server.rst:237 +#: ../../configuration/service/pppoe-server.rst:199 +#: ../../configuration/vpn/l2tp.rst:242 +#: ../../configuration/vpn/pptp.rst:182 +#: ../../configuration/vpn/sstp.rst:215 +msgid "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:240 +#: ../../configuration/service/pppoe-server.rst:202 +#: ../../configuration/vpn/l2tp.rst:245 +#: ../../configuration/vpn/pptp.rst:185 +#: ../../configuration/vpn/sstp.rst:218 +msgid "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." + +#: ../../configuration/service/pppoe-server.rst:219 +#: ../../configuration/vpn/l2tp.rst:262 +#: ../../configuration/vpn/pptp.rst:202 +#: ../../configuration/vpn/sstp.rst:235 msgid "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." msgstr "Si el servidor RADIUS usa el atributo ``NAS-Port-Id``, se cambiará el nombre de los túneles ppp." @@ -6688,6 +7516,10 @@ msgstr "Si el tamaño actual de la cola es mayor que **límite de cola**, los pa msgid "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" msgstr "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +#: ../../configuration/firewall/index.rst:83 +msgid "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +msgstr "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" + #: ../../configuration/firewall/index.rst:26 msgid "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" msgstr "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" @@ -6705,7 +7537,7 @@ msgstr "Si el par mapeado estáticamente ejecuta Cisco IOS, especifique la palab msgid "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." msgstr "Si el sistema detecta un dispositivo inalámbrico no configurado, se agregará automáticamente al árbol de configuración, especificando cualquier configuración detectada (por ejemplo, su dirección MAC) y configurado para ejecutarse en modo de monitor." -#: ../../configuration/service/conntrack-sync.rst:126 +#: ../../configuration/service/conntrack-sync.rst:135 msgid "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" msgstr "Si la tabla está vacía y tiene un mensaje de advertencia, significa que conntrack no está habilitado. Para habilitar conntrack, simplemente cree una NAT o una regla de firewall. :cfgcmd:`establecer la acción establecida de la política de estado del cortafuegos aceptar`" @@ -6713,7 +7545,7 @@ msgstr "Si la tabla está vacía y tiene un mensaje de advertencia, significa qu msgid "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." msgstr "Si no hay direcciones libres pero hay direcciones IP abandonadas, el servidor DHCP intentará reclamar una dirección IP abandonada independientemente del valor del tiempo de concesión de abandono." -#: ../../configuration/vpn/site2site_ipsec.rst:241 +#: ../../configuration/vpn/site2site_ipsec.rst:244 msgid "If there is SNAT rules on eth1, need to add exclude rule" msgstr "Si hay reglas SNAT en eth1, debe agregar una regla de exclusión" @@ -6726,14 +7558,21 @@ msgstr "Si este comando se invoca desde el modo de configuración con el prefijo msgid "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." msgstr "Si esto está configurado, el agente de retransmisión insertará la ID de la interfaz. Esta opción se establece automáticamente si se utilizan más de una interfaz de escucha." -#: ../../configuration/protocols/bgp.rst:768 +#: ../../configuration/protocols/bgp.rst:790 msgid "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." msgstr "Si esta opción está habilitada, se omite la verificación ya seleccionada, donde se prefieren las rutas eBGP ya seleccionadas." -#: ../../configuration/vpn/sstp.rst:183 +#: ../../configuration/vpn/sstp.rst:189 msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." msgstr "Si se especifica esta opción y es mayor que 0, el módulo PPP enviará pings LCP de la solicitud de eco cada `<interval> ` segundos." +#: ../../configuration/service/pppoe-server.rst:484 +#: ../../configuration/vpn/l2tp.rst:438 +#: ../../configuration/vpn/pptp.rst:362 +#: ../../configuration/vpn/sstp.rst:396 +msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." +msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." + #: ../../_include/interface-ip.txt:75 msgid "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." msgstr "Si esta opción no está configurada (predeterminada), los paquetes de difusión entrantes dirigidos por IP no se reenviarán." @@ -6750,11 +7589,11 @@ msgstr "Si no se establece este parámetro, el tiempo de espera predeterminado e msgid "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." msgstr "Si este parámetro no se establece o es 0, un enlace bajo demanda no se desactivará cuando esté inactivo y después del establecimiento inicial de la conexión. Se mantendrá para siempre." -#: ../../configuration/system/login.rst:270 +#: ../../configuration/system/login.rst:274 msgid "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "Si no se establece, las conexiones entrantes al servidor RADIUS utilizarán la dirección de interfaz más cercana que apunta hacia el servidor, lo que lo hace propenso a errores, por ejemplo, en redes OSPF cuando falla un enlace y se toma una ruta de respaldo." -#: ../../configuration/system/login.rst:339 +#: ../../configuration/system/login.rst:343 msgid "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "Si no se establece, las conexiones entrantes al servidor TACACS utilizarán la dirección de interfaz más cercana que apunta hacia el servidor, lo que lo hace propenso a errores, por ejemplo, en redes OSPF cuando falla un enlace y se toma una ruta de respaldo." @@ -6774,10 +7613,14 @@ msgstr "Si es un hacker o quiere intentarlo por su cuenta, admitimos pasar las o msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "Si está configurando un VRF con fines de administración, actualmente no hay forma de forzar el tráfico DNS del sistema a través de un VRF específico." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "Si es nuevo en estas tecnologías de seguridad de enrutamiento, existe una `excelente guía de RPKI`_ de NLnet Labs que lo pondrá al día rápidamente. Su documentación explica todo, desde lo que es RPKI hasta su implementación en producción. También tiene algo de `ayuda y guía operativa`_ que incluye "¿Qué puedo hacer si mi ruta tiene un estado Inválido?"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "Si usted es responsable de las direcciones globales asignadas a su red, asegúrese de que sus prefijos tengan ROA asociados para evitar que RPKI no los encuentre. Para la mayoría de los ASN, esto implicará la publicación de ROA a través de su :abbr:`RIR (Registro Regional de Internet)` (RIPE NCC, APNIC, ARIN, LACNIC o AFRINIC), y es algo que se recomienda hacer cada vez que planee anunciar direcciones en el DFZ." @@ -6786,10 +7629,17 @@ msgstr "Si usted es responsable de las direcciones globales asignadas a su red, msgid "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." msgstr "Si está utilizando FQ-CoDel integrado en Shaper_ y tiene velocidades elevadas (100 Mbit y más), puede considerar aumentar `quantum` a 8000 o más para que el planificador ahorre CPU." -#: ../../configuration/vpn/l2tp.rst:165 +#: ../../configuration/service/ipoe-server.rst:146 +#: ../../configuration/service/pppoe-server.rst:108 +#: ../../configuration/vpn/l2tp.rst:151 msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." msgstr "Si usa OSPF como IGP, siempre se usa la interfaz más cercana conectada al servidor RADIUS. Con VyOS 1.2, puede vincular todas las solicitudes RADIUS salientes a una única IP de origen, por ejemplo, la interfaz de bucle invertido." +#: ../../configuration/vpn/pptp.rst:91 +#: ../../configuration/vpn/sstp.rst:124 +msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." + #: ../../configuration/interfaces/openvpn.rst:306 msgid "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." msgstr "Si cambia los algoritmos de cifrado y hash predeterminados, asegúrese de que los extremos local y remoto tengan configuraciones coincidentes; de lo contrario, el túnel no aparecerá." @@ -6813,6 +7663,10 @@ msgstr "Si habilita esto, probablemente querrá establecer el factor de diversid msgid "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." msgstr "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." +#: ../../configuration/vpn/ipsec.rst:483 +msgid "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." +msgstr "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." + #: ../../configuration/interfaces/bonding.rst:312 msgid "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." msgstr "Si ejecuta esto en un entorno virtual como EVE-NG, debe asegurarse de que su NIC de VyOS esté configurada para usar el controlador e1000. Usar el controlador predeterminado ``virtio-net-pci`` o ``vmxnet3`` no funcionará. Los mensajes ICMP no se procesarán correctamente. Son visibles en el cable virtual, pero no llegarán completamente a la pila de redes." @@ -6849,10 +7703,26 @@ msgstr "Si solo desea verificar si la cuenta de usuario está habilitada y puede msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." msgstr "Si establece un atributo RADIUS personalizado, debe definirlo en ambos diccionarios en el servidor y el cliente RADIUS, que es el enrutador vyos en nuestro ejemplo." +#: ../../configuration/service/ipoe-server.rst:215 +#: ../../configuration/service/pppoe-server.rst:177 +#: ../../configuration/vpn/l2tp.rst:220 +#: ../../configuration/vpn/pptp.rst:160 +#: ../../configuration/vpn/sstp.rst:193 +msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." +msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." + #: ../../configuration/system/console.rst:41 msgid "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." msgstr "Si usa convertidores de USB a serie para conectarse a su dispositivo VyOS, tenga en cuenta que la mayoría de ellos usan emulación de software sin control de flujo. Esto significa que debe comenzar con una velocidad de transmisión común (probablemente 9600 baudios) ya que, de lo contrario, probablemente no pueda conectarse al dispositivo utilizando velocidades de transmisión de alta velocidad, ya que su convertidor en serie simplemente no puede procesar esta velocidad de datos." +#: ../../configuration/vpn/sstp.rst:482 +msgid "If you use a self-signed certificate, do not forget to install CA on the client side." +msgstr "If you use a self-signed certificate, do not forget to install CA on the client side." + +#: ../../configuration/vpn/ipsec.rst:538 +msgid "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." +msgstr "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." + #: ../../configuration/system/flow-accounting.rst:140 msgid "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." msgstr "Si desea cambiar el número máximo de flujos, que se rastrean simultáneamente, puede hacerlo con este comando (predeterminado 8192)." @@ -6861,7 +7731,7 @@ msgstr "Si desea cambiar el número máximo de flujos, que se rastrean simultán msgid "If you want to disable a rule but let it in the configuration." msgstr "Si desea deshabilitar una regla pero dejarla en la configuración." -#: ../../configuration/system/login.rst:294 +#: ../../configuration/system/login.rst:298 msgid "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." msgstr "Si desea que los usuarios administradores se autentiquen a través de RADIUS, es esencial que envíe el atributo ``Cisco-AV-Pair shell:priv-lvl=15``. Sin el atributo, solo obtendrá usuarios del sistema normales y sin privilegios." @@ -6873,7 +7743,7 @@ msgstr "Si desea utilizar las listas negras existentes, primero debe crear/desca msgid "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." msgstr "Si desea que su enrutador reenvíe las solicitudes DHCP a un servidor DHCP externo, puede configurar el sistema para que actúe como un agente de retransmisión DHCP. El agente de retransmisión DHCP funciona con direcciones IPv4 e IPv6." -#: ../../configuration/protocols/bgp.rst:760 +#: ../../configuration/protocols/bgp.rst:782 msgid "Ignore AS_PATH length when selecting a route" msgstr "Ignorar la longitud de AS_PATH al seleccionar una ruta" @@ -6885,7 +7755,7 @@ msgstr "Ignorar las fallas de la interfaz principal de VRRP" msgid "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" msgstr "Afortunadamente, la imagen se tomó prestada de https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG, que está bajo la licencia de documentación libre GNU" -#: ../../configuration/vpn/site2site_ipsec.rst:279 +#: ../../configuration/vpn/site2site_ipsec.rst:282 msgid "Imagine the following topology" msgstr "Imagine la siguiente topología" @@ -6893,11 +7763,35 @@ msgstr "Imagine la siguiente topología" msgid "Immediate" msgstr "Inmediato" -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/pki/index.rst:254 +msgid "Import files to PKI format" +msgstr "Import files to PKI format" + +#: ../../configuration/pki/index.rst:265 +msgid "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." +msgstr "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." + +#: ../../configuration/pki/index.rst:280 +msgid "Import the OpenVPN shared secret stored in file to the VyOS CLI." +msgstr "Import the OpenVPN shared secret stored in file to the VyOS CLI." + +#: ../../configuration/pki/index.rst:271 +msgid "Import the certificate from the file to VyOS CLI." +msgstr "Import the certificate from the file to VyOS CLI." + +#: ../../configuration/pki/index.rst:275 +msgid "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." + +#: ../../configuration/pki/index.rst:261 +msgid "Import the public CA certificate from the defined file to VyOS CLI." +msgstr "Import the public CA certificate from the defined file to VyOS CLI." + +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Los prefijos importados durante la validación pueden tener valores:" -#: ../../configuration/protocols/static.rst:158 +#: ../../configuration/protocols/static.rst:191 msgid "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." msgstr "En las redes del Protocolo de Internet versión 6 (IPv6), la funcionalidad de ARP la proporciona el Protocolo de descubrimiento de vecinos (NDP)." @@ -6905,7 +7799,7 @@ msgstr "En las redes del Protocolo de Internet versión 6 (IPv6), la funcionalid msgid "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." msgstr "En Priority Queue no definimos clases con un número de identificación de clase sin sentido, sino con un número de prioridad de clase (1-7). Cuanto menor sea el número, mayor es la prioridad." -#: ../../configuration/vpn/ipsec.rst:117 +#: ../../configuration/vpn/ipsec.rst:120 msgid "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." msgstr "En VyOS, los atributos ESP se especifican a través de grupos ESP. Se pueden especificar varias propuestas en un solo grupo." @@ -6937,7 +7831,7 @@ msgstr "En una configuración mínima, se debe proporcionar lo siguiente:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "En un contexto de encabezado de VLAN múltiple, por conveniencia, el término "etiqueta de VLAN" o simplemente "etiqueta" para abreviar se usa a menudo en lugar de "802.1q_ encabezado de VLAN". QinQ permite múltiples etiquetas VLAN en un marco de Ethernet; juntas, estas etiquetas constituyen una pila de etiquetas. Cuando se usa en el contexto de una trama Ethernet, una trama QinQ es una trama que tiene 2 encabezados VLAN 802.1q_ (doble etiqueta)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "En pocas palabras, la implementación actual proporciona las siguientes características:" @@ -6945,7 +7839,7 @@ msgstr "En pocas palabras, la implementación actual proporciona las siguientes msgid "In addition, you can specify many other parameters to get BGP information:" msgstr "Además, puede especificar muchos otros parámetros para obtener información de BGP:" -#: ../../configuration/system/login.rst:301 +#: ../../configuration/system/login.rst:305 msgid "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." msgstr "Además de :abbr:`RADIUS (Servicio de usuario de marcación de autenticación remota)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` también se puede encontrar en implementaciones grandes." @@ -6953,12 +7847,16 @@ msgstr "Además de :abbr:`RADIUS (Servicio de usuario de marcación de autentica msgid "In addition to displaying flow accounting information locally, one can also exported them to a collection server." msgstr "Además de mostrar la información de contabilidad de flujo localmente, también se puede exportar a un servidor de recopilación." -#: ../../configuration/pki/index.rst:144 -#: ../../configuration/pki/index.rst:159 +#: ../../configuration/pki/index.rst:146 +#: ../../configuration/pki/index.rst:161 #: ../../configuration/pki/pki_cli_import_help.txt:1 msgid "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." msgstr "Además del comando anterior, la salida está en un formato que se puede usar para importar directamente la clave a la CLI de VyOS simplemente copiando y pegando la salida del modo de operación al modo de configuración." +#: ../../configuration/interfaces/pppoe.rst:388 +msgid "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." +msgstr "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." + #: ../../configuration/service/broadcast-relay.rst:48 msgid "In addition you can also disable the whole service without the need to remove it from the current configuration." msgstr "Además también puedes deshabilitar todo el servicio sin necesidad de eliminarlo de la configuración actual." @@ -7003,7 +7901,7 @@ msgstr "In firewall bridge rules, the action can be:" msgid "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." msgstr "En general, el protocolo OSPF requiere un área de red troncal (área 0) para ser coherente y estar completamente conectado. Es decir, cualquier enrutador de área de red troncal debe tener una ruta a cualquier otro enrutador de área de red troncal. Además, cada ABR debe tener un enlace al área de red troncal. Sin embargo, no siempre es posible tener un enlace físico a un área de red troncal. En este caso entre dos ABR (uno de ellos tiene enlace al área de backbone) en el área (no área stub) se organiza un enlace virtual." -#: ../../configuration/system/login.rst:236 +#: ../../configuration/system/login.rst:240 msgid "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." msgstr "En implementaciones grandes, no es razonable configurar cada usuario individualmente en cada sistema. VyOS admite el uso de servidores :abbr:`RADIUS (Remote Authentication Dial-In User Service)` como backend para la autenticación de usuarios." @@ -7011,7 +7909,7 @@ msgstr "En implementaciones grandes, no es razonable configurar cada usuario ind msgid "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." msgstr "Para que la información de contabilidad de flujo se recopile y muestre para una interfaz, la interfaz debe estar configurada para la contabilidad de flujo." -#: ../../configuration/service/dhcp-server.rst:161 +#: ../../configuration/service/dhcp-server.rst:211 msgid "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." msgstr "Para que el servidor DHCP primario y secundario mantengan sus tablas de arrendamiento sincronizadas, deben poder comunicarse entre sí en el puerto TCP 647. Si tiene reglas de firewall vigentes, ajústelas en consecuencia." @@ -7023,7 +7921,7 @@ msgstr "Para que el sistema use y complete nombres de host no calificados, se pu msgid "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." msgstr "Para permitir que LDP en el enrutador local intercambie anuncios de etiquetas con otros enrutadores, se establecerá una sesión TCP entre los enrutadores detectados automáticamente y asignados estáticamente. LDP intentará establecer una sesión TCP con la **dirección de transporte** de otros enrutadores. Por lo tanto, para que LDP funcione correctamente, asegúrese de que la dirección de transporte se muestre en la tabla de enrutamiento y esté accesible para el tráfico en todo momento." -#: ../../configuration/protocols/bgp.rst:820 +#: ../../configuration/protocols/bgp.rst:842 msgid "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." msgstr "Para controlar y modificar la información de enrutamiento que se intercambia entre pares, puede usar el mapa de rutas, la lista de filtros, la lista de prefijos, la lista de distribución." @@ -7039,7 +7937,7 @@ msgstr "Para que VyOS Traffic Control funcione, debe seguir 2 pasos:" msgid "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." msgstr "Para tener control total y hacer uso de múltiples direcciones IP públicas estáticas, su VyOS deberá iniciar la conexión PPPoE y controlarla. Para que este método funcione, tendrá que descubrir cómo hacer que su módem/enrutador DSL cambie a un modo puente para que solo actúe como un dispositivo transceptor DSL para conectarse entre el enlace Ethernet de su VyOS y el cable del teléfono. Una vez que su transceptor DSL esté en modo puente, no debería obtener ninguna dirección IP. Asegúrese de conectarse al puerto Ethernet 1 si su transceptor DSL tiene un interruptor, ya que algunos de ellos solo funcionan de esta manera." -#: ../../configuration/service/dhcp-server.rst:623 +#: ../../configuration/service/dhcp-server.rst:684 msgid "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." msgstr "Para asignar direcciones IPv6 específicas a hosts específicos, se pueden crear asignaciones estáticas. El siguiente ejemplo explica el proceso." @@ -7055,6 +7953,10 @@ msgstr "Para separar el tráfico, Fair Queue utiliza un clasificador basado en l msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "Para usar TSO/LRO con adaptadores VMXNET3, también se debe habilitar la opción de descarga SG." @@ -7079,6 +7981,10 @@ msgstr "En nuestro ejemplo, usamos el nombre de clave ``openvpn-1`` al que harem msgid "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" msgstr "En nuestro ejemplo, reenviaremos el tráfico del servidor web a un servidor web interno en 192.168.0.100. El tráfico HTTP utiliza el protocolo TCP en el puerto 80. Para conocer otros números de puerto comunes, consulte: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" +#: ../../configuration/vpn/ipsec.rst:411 +msgid "In our example the certificate name is called vyos:" +msgstr "In our example the certificate name is called vyos:" + #: ../../configuration/trafficpolicy/index.rst:906 msgid "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." msgstr "En principio, los valores deben ser :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." @@ -7123,7 +8029,11 @@ msgstr "En el caso de que desee aplicar algún tipo de **modelado** a su tráfic msgid "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." msgstr "En el comando anterior establecemos el tipo de política con la que vamos a trabajar y el nombre que elegimos para ella; una clase (para que podamos diferenciar algo de tráfico) y un número identificable para esa clase; luego configuramos una regla de coincidencia (o filtro) y un nombre para ella." -#: ../../configuration/service/pppoe-server.rst:259 +#: ../../configuration/vpn/ipsec.rst:564 +msgid "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." +msgstr "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." + +#: ../../configuration/service/pppoe-server.rst:333 msgid "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." msgstr "En el ejemplo anterior, las primeras 499 sesiones se conectan sin demora. Los paquetes PADO se retrasarán 50 ms para la conexión de 500 a 999, este truco permite que otros servidores PPPoE envíen PADO más rápido y los clientes se conectarán a otros servidores. El último comando dice que este servidor PPPoE puede servir solo a 3000 clientes." @@ -7131,7 +8041,7 @@ msgstr "En el ejemplo anterior, las primeras 499 sesiones se conectan sin demora msgid "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" msgstr "En el ejemplo utilizado para la configuración de inicio rápido anterior, demostramos la siguiente configuración:" -#: ../../configuration/system/login.rst:399 +#: ../../configuration/system/login.rst:403 msgid "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." msgstr "En el siguiente ejemplo, tanto `User1` como `User2` podrán acceder a VyOS mediante SSH como usuario ``vyos`` utilizando sus propias claves. El 'Usuario 1' está restringido para que solo pueda conectarse desde una única dirección IP. Además, si se desea iniciar sesión con contraseña para el usuario ``vyos``, se requiere un código de clave 2FA/MFA además de la contraseña." @@ -7151,7 +8061,7 @@ msgstr "En el siguiente ejemplo podemos ver una configuración básica de multid msgid "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." msgstr "En el futuro se espera que este sea un protocolo muy útil (aunque hay `otras propuestas`_)." -#: ../../configuration/highavailability/index.rst:400 +#: ../../configuration/highavailability/index.rst:410 msgid "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" msgstr "En el siguiente ejemplo todo el tráfico destinado a ``203.0.113.1`` y puerto ``8280`` protocolo TCP se equilibra entre 2 servidores reales ``192.0.2.11`` y ``192.0.2.12`` al puerto ``80 ``" @@ -7175,7 +8085,7 @@ msgstr "En este ejemplo, usamos **masquerade** como dirección de traducción en msgid "In this example, we will be using the example Quick Start configuration above as a starting point." msgstr "En este ejemplo, utilizaremos el ejemplo de configuración de inicio rápido anterior como punto de partida." -#: ../../configuration/highavailability/index.rst:430 +#: ../../configuration/highavailability/index.rst:440 msgid "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." msgstr "En este ejemplo todo el tráfico destinado a los puertos "80, 2222, 8888" protocolo TCP marca al fwmark "111" y balanceado entre 2 servidores reales. Se requiere el puerto "0" si se utilizan múltiples puertos." @@ -7191,7 +8101,7 @@ msgstr "En este ejemplo, usaremos el caso más complicado: una configuración en msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "En este método, el módem/enrutador DSL se conecta al ISP por usted con sus credenciales preprogramadas en el dispositivo. Esto le da una dirección :rfc:`1918`, como ``192.168.1.0/24`` por defecto." -#: ../../configuration/service/dns.rst:165 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "En este escenario:" @@ -7255,7 +8165,7 @@ msgstr "Aumente la longitud máxima de MPDU a 7991 o 11454 octetos (3895 octetos msgid "Indication" msgstr "Indicación" -#: ../../configuration/service/dhcp-server.rst:64 +#: ../../configuration/service/dhcp-server.rst:80 msgid "Individual Client Subnet" msgstr "Subred de cliente individual" @@ -7319,6 +8229,10 @@ msgstr "Intel® QAT" msgid "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" msgstr "Interconecte el VRF global con vrf "rojo" usando el par veth10 <-> veth 11" +#: ../../configuration/service/ids.rst:96 +msgid "Interface **eth0** used to connect to upstream." +msgstr "Interface **eth0** used to connect to upstream." + #: ../../configuration/protocols/isis.rst:146 #: ../../configuration/protocols/ospf.rst:356 #: ../../configuration/protocols/ospf.rst:1139 @@ -7329,7 +8243,7 @@ msgstr "Configuración de la interfaz" msgid "Interface Groups" msgstr "Interface Groups" -#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:87 msgid "Interface Routes" msgstr "Rutas de interfaz" @@ -7367,7 +8281,7 @@ msgid "Interface weight" msgstr "Peso de la interfaz" #: ../../configuration/interfaces/index.rst:3 -#: ../../configuration/vrf/index.rst:71 +#: ../../configuration/vrf/index.rst:90 msgid "Interfaces" msgstr "Interfaces" @@ -7388,10 +8302,18 @@ msgstr "Interfaces que participan en el proceso de retransmisión DHCP. Si se ut msgid "Interfaces whose DHCP client nameservers to forward requests to." msgstr "Interfaces a cuyos servidores de nombres de cliente DHCP se reenvían las solicitudes." +#: ../../configuration/service/ids.rst:105 +msgid "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." +msgstr "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." + #: ../../configuration/system/flow-accounting.rst:70 msgid "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" msgstr "Internamente, en los procesos de contabilidad de flujo existe un búfer para el intercambio de datos entre el proceso central y los complementos (cada destino de exportación es un complemento separado). Si tiene altos niveles de tráfico o notó algunos problemas con los registros perdidos o si detiene la exportación, puede intentar aumentar el tamaño del búfer predeterminado (10 MiB) con el siguiente comando:" +#: ../../configuration/vpn/ipsec.rst:374 +msgid "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." +msgstr "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:6 msgid "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." msgstr "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." @@ -7412,7 +8334,7 @@ msgstr "Intervalo en milisegundos" msgid "Interval in minutes between updates (default: 60)" msgstr "Intervalo en minutos entre actualizaciones (predeterminado: 60)" -#: ../../configuration/protocols/bgp.rst:906 +#: ../../configuration/protocols/bgp.rst:928 msgid "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." msgstr "La introducción de reflectores de ruta elimina la necesidad de la malla completa. Cuando configura un reflector de ruta, debe decirle al enrutador si el otro enrutador IBGP es un cliente o no. Un cliente es un enrutador IBGP al que el reflector de ruta "reflejará" las rutas, el no cliente es solo un vecino IBGP normal. El mecanismo de los reflectores de ruta se describe en :rfc:`4456` y se actualiza en :rfc:`7606`." @@ -7432,11 +8354,11 @@ msgstr "Es más lento que IPsec debido a la mayor sobrecarga del protocolo y al msgid "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" msgstr "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" -#: ../../configuration/system/option.rst:111 +#: ../../configuration/system/option.rst:141 msgid "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." msgstr "Deshabilita las páginas grandes transparentes y el equilibrio NUMA automático. También utiliza cpupower para establecer el regulador cpufreq de rendimiento y solicita un valor de cpu_dma_latency de 1. También establece los tiempos de busy_read y busy_poll en 50 us, y tcp_fastopen en 3." -#: ../../configuration/system/option.rst:102 +#: ../../configuration/system/option.rst:132 msgid "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." msgstr "Habilita páginas grandes transparentes y utiliza cpupower para configurar el regulador cpufreq de rendimiento. También establece ``kernel.sched_min_granularity_ns`` en 10 uss, ``kernel.sched_wakeup_granularity_ns`` en 15 uss y ``vm.dirty_ratio`` en 40%." @@ -7457,11 +8379,11 @@ msgstr "Ayuda pensar en la sintaxis como: (ver más abajo). El 'conjunto de msgid "It is compatible with Cisco (R) AnyConnect (R) clients." msgstr "Es compatible con clientes Cisco (R) AnyConnect (R)." -#: ../../configuration/service/dhcp-server.rst:590 +#: ../../configuration/service/dhcp-server.rst:649 msgid "It is connected to ``eth1``" msgstr "Está conectado a ``eth1``" -#: ../../configuration/system/login.rst:42 +#: ../../configuration/system/login.rst:46 msgid "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." msgstr "Se recomienda encarecidamente utilizar la autenticación de clave SSH. De forma predeterminada, solo hay un usuario (``vyos``), y puede asignar cualquier número de claves a ese usuario. Puede generar una clave ssh con el comando ``ssh-keygen`` en su máquina local, que (de forma predeterminada) la guardará como ``~/.ssh/id_rsa.pub``." @@ -7477,26 +8399,31 @@ msgstr "It is important to note that when creating firewall rules, the DNAT tran msgid "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." msgstr "Es importante tener en cuenta que al crear reglas de firewall, la traducción de DNAT se produce **antes** de que el tráfico atraviese el firewall. En otras palabras, la dirección de destino ya se tradujo a 192.168.0.100." -#: ../../configuration/vrf/index.rst:505 +#: ../../configuration/vrf/index.rst:524 msgid "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." msgstr "No es suficiente configurar solo un L3VPN VRF, sino que también se deben mantener los L3VPN VRF. Para el mantenimiento de L3VPN VRF, se implementan los siguientes comandos operativos." -#: ../../configuration/vrf/index.rst:113 +#: ../../configuration/vrf/index.rst:132 msgid "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." msgstr "No es suficiente configurar solo un VRF, sino que también se deben mantener los VRF. Para el mantenimiento de VRF, se aplican los siguientes comandos operativos." -#: ../../configuration/interfaces/bridge.rst:136 +#: ../../configuration/interfaces/bridge.rst:145 msgid "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" msgstr "No es válido usar la opción `vif 1` para puentes que reconocen VLAN porque los puentes que reconocen VLAN asumen que todos los paquetes sin etiqueta pertenecen al miembro VLAN 1 predeterminado y que la ID de VLAN de la interfaz principal del puente siempre es 1" -#: ../../configuration/system/login.rst:93 +#: ../../configuration/system/login.rst:97 msgid "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." msgstr "Es posible mejorar la seguridad de la autenticación mediante el uso de la función :abbr:`2FA (Autenticación de dos factores)`/:abbr:`MFA (Autenticación de múltiples factores)` junto con :abbr:`OTP (One-Time-Pad) ` en VyOS. :abbr:`2FA (autenticación de dos factores)`/:abbr:`MFA (autenticación de múltiples factores)` se configura de forma independiente para cada usuario. Si se configura una clave OTP para un usuario, 2FA/MFA se habilita automáticamente para ese usuario en particular. Si un usuario no tiene una clave OTP configurada, no hay verificación 2FA/MFA para ese usuario." -#: ../../configuration/vrf/index.rst:496 +#: ../../configuration/vrf/index.rst:515 msgid "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." msgstr "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." +#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:132 +msgid "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." +msgstr "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." + #: ../../configuration/service/conntrack-sync.rst:30 msgid "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" msgstr "Es posible usar Multicast o Unicast para sincronizar el tráfico de seguimiento. La mayoría de los ejemplos a continuación muestran multidifusión, pero la unidifusión se puede especificar usando el teclado "peer" después de la interfaz específica, como en el siguiente ejemplo:" @@ -7517,7 +8444,7 @@ msgstr "Utiliza un modelo estocástico para clasificar los paquetes entrantes en msgid "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." msgstr "Se combinará con el prefijo delegado y el sla-id para formar una dirección de interfaz completa. El valor predeterminado es utilizar la dirección EUI-64 de la interfaz." -#: ../../configuration/vrf/index.rst:220 +#: ../../configuration/vrf/index.rst:239 msgid "Join a given VRF. This will open a new subshell within the specified VRF." msgstr "Únete a un VRF dado. Esto abrirá una nueva subcapa dentro del VRF especificado." @@ -7529,15 +8456,19 @@ msgstr "Salta a una regla diferente en este mapa de ruta en un partido." msgid "Juniper EX Switch" msgstr "Interruptor Juniper EX" +#: ../../configuration/system/option.rst:31 +msgid "Kernel" +msgstr "Núcleo" + #: ../../configuration/system/syslog.rst:112 msgid "Kernel messages" msgstr "Mensajes del núcleo" -#: ../../configuration/system/login.rst:40 +#: ../../configuration/system/login.rst:44 msgid "Key Based Authentication" msgstr "Autenticación basada en clave" -#: ../../configuration/pki/index.rst:30 +#: ../../configuration/pki/index.rst:32 msgid "Key Generation" msgstr "Generación de claves" @@ -7545,7 +8476,7 @@ msgstr "Generación de claves" msgid "Key Management" msgstr "Gestión de claves" -#: ../../configuration/vpn/site2site_ipsec.rst:383 +#: ../../configuration/vpn/site2site_ipsec.rst:386 msgid "Key Parameters:" msgstr "Parámetros clave:" @@ -7557,11 +8488,15 @@ msgstr "Puntos clave:" msgid "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." msgstr "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." -#: ../../configuration/pki/index.rst:167 +#: ../../configuration/vpn/ipsec.rst:381 +msgid "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." +msgstr "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." + +#: ../../configuration/pki/index.rst:169 msgid "Key usage (CLI)" msgstr "Uso de claves (CLI)" -#: ../../configuration/system/option.rst:58 +#: ../../configuration/system/option.rst:88 msgid "Keyboard Layout" msgstr "Diseño del teclado" @@ -7574,7 +8509,7 @@ msgstr "pares de llaves" msgid "Keyword" msgstr "Palabra clave" -#: ../../configuration/vpn/l2tp.rst:4 +#: ../../configuration/vpn/l2tp.rst:5 msgid "L2TP" msgstr "L2TP" @@ -7606,7 +8541,7 @@ msgstr "L2TPv3 se describe en :rfc:`3931`." msgid "L2TPv3 options" msgstr "Opciones L2TPv3" -#: ../../configuration/vrf/index.rst:399 +#: ../../configuration/vrf/index.rst:418 msgid "L3VPN VRFs" msgstr "L3VPN VRF" @@ -7635,7 +8570,7 @@ msgstr "LLDP realiza funciones similares a varios protocolos propietarios, como msgid "LNS (L2TP Network Server)" msgstr "LNS (servidor de red L2TP)" -#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/l2tp.rst:272 msgid "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgstr "Los LNS se utilizan a menudo para conectarse a un LAC (concentrador de acceso L2TP)." @@ -7643,15 +8578,19 @@ msgstr "Los LNS se utilizan a menudo para conectarse a un LAC (concentrador de a msgid "Label Distribution Protocol" msgstr "Protocolo de distribución de etiquetas" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunneling Protocol Version 3 es un estándar IETF relacionado con L2TP que se puede utilizar como un protocolo alternativo a :ref:`mpls` para la encapsulación del tráfico de comunicaciones multiprotocolo de Capa 2 a través de redes IP. Al igual que L2TP, L2TPv3 proporciona un servicio de pseudocable, pero está escalado para adaptarse a los requisitos del operador." -#: ../../configuration/service/dhcp-server.rst:593 +#: ../../configuration/service/dhcp-server.rst:652 msgid "Lease time will be left at the default value which is 24 hours" msgstr "El tiempo de concesión se dejará en el valor predeterminado, que es de 24 horas." -#: ../../configuration/service/dhcp-server.rst:336 +#: ../../configuration/service/dhcp-server.rst:392 msgid "Lease timeout in seconds (default: 86400)" msgstr "Tiempo de espera de arrendamiento en segundos (predeterminado: 86400)" @@ -7683,7 +8622,7 @@ msgstr "Deje que el demonio SNMP escuche solo en la dirección IP 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Supongamos la siguiente topología:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Equilibrio de nivel 4" @@ -7699,19 +8638,23 @@ msgstr "Vida útil en días; el valor predeterminado es 365" msgid "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" msgstr "La vida útil se reduce según la cantidad de segundos desde el último RA; utilícelo junto con un prefijo DHCPv6-PD" -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/vpn/ipsec.rst:535 +msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." +msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limite los algoritmos de cifrado permitidos utilizados durante el protocolo de enlace SSL/TLS" -#: ../../configuration/system/login.rst:112 +#: ../../configuration/system/login.rst:116 msgid "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." msgstr "Limite los inicios de sesión a `<limit> ` por cada ``rate-time`` segundos. El límite de frecuencia debe estar entre 1 y 10 intentos." -#: ../../configuration/system/login.rst:118 +#: ../../configuration/system/login.rst:122 msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limite los inicios de sesión a ``rate-limit`` intentos por cada `<seconds> `. El tiempo de tasa debe estar entre 15 y 600 segundos." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limite el número máximo de conexiones" @@ -7723,7 +8666,7 @@ msgstr "limitador" msgid "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." msgstr "Limiter es una de esas políticas que usa clases_ (Ingress qdisc es en realidad una política sin clases, pero los filtros funcionan en ella)." -#: ../../configuration/system/login.rst:381 +#: ../../configuration/system/login.rst:385 msgid "Limits" msgstr "Límites" @@ -7767,7 +8710,7 @@ msgstr "Lista de algoritmos admitidos: ``diffie-hellman-group1-sha1``, ``diffie- msgid "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" msgstr "Lista de cifrados compatibles: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr`` ``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" -#: ../../configuration/policy/route-map.rst:362 +#: ../../configuration/policy/route-map.rst:365 msgid "List of well-known communities" msgstr "Lista de comunidades conocidas" @@ -7775,7 +8718,7 @@ msgstr "Lista de comunidades conocidas" msgid "Listen for DHCP requests on interface ``eth1``." msgstr "Escuche las solicitudes de DHCP en la interfaz ``eth1``." -#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:137 msgid "Lists VRFs that have been created" msgstr "Enumera los VRF que se han creado" @@ -7784,10 +8727,14 @@ msgid "Load-balancing" msgstr "Balanceo de carga" #: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Algoritmos de equilibrio de carga que se utilizarán para distribuir solicitudes entre los servidores disponibles" -#: ../../configuration/highavailability/index.rst:347 +#: ../../configuration/highavailability/index.rst:357 msgid "Load-balancing schedule algorithm:" msgstr "Algoritmo de programación de equilibrio de carga:" @@ -7795,11 +8742,11 @@ msgstr "Algoritmo de programación de equilibrio de carga:" msgid "Load Balance" msgstr "Load Balance" -#: ../../configuration/service/pppoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:317 msgid "Load Balancing" msgstr "Balanceo de carga" -#: ../../configuration/system/login.rst:422 +#: ../../configuration/system/login.rst:426 msgid "Load the container image in op-mode." msgstr "Cargue la imagen del contenedor en modo operativo." @@ -7816,7 +8763,11 @@ msgstr "Configuración local:" msgid "Local Configuration - Annotated:" msgstr "Configuración local - Anotada:" -#: ../../configuration/service/dhcp-server.rst:143 +#: ../../configuration/service/dhcp-server.rst:192 +msgid "Local IP `<address>` used when communicating to the HA peer." +msgstr "Local IP `<address>` used when communicating to the HA peer." + +#: ../../configuration/service/dhcp-server.rst:177 msgid "Local IP `<address>` used when communicating to the failover peer." msgstr "IP local`<address> ` utilizado cuando se comunica con el compañero de conmutación por error." @@ -7848,11 +8799,11 @@ msgstr "Cuenta de usuario local" msgid "Local path that includes the known hosts file." msgstr "Ruta local que incluye el archivo de hosts conocidos." -#: ../../configuration/protocols/rpki.rst:145 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Ruta local que incluye el archivo de clave privada del enrutador." -#: ../../configuration/protocols/rpki.rst:149 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Ruta local que incluye el archivo de clave pública del enrutador." @@ -7864,7 +8815,7 @@ msgstr "Ruta local" msgid "Locally connect to serial port identified by `<device>`." msgstr "Conéctese localmente al puerto serie identificado por `<device> `." -#: ../../configuration/policy/route-map.rst:273 +#: ../../configuration/policy/route-map.rst:276 msgid "Locally significant administrative distance." msgstr "Distancia administrativa localmente significativa." @@ -7918,11 +8869,11 @@ msgstr "El inicio de sesión en un host remoto deja intacta la configuración de msgid "Login/User Management" msgstr "Inicio de sesión/Administración de usuarios" -#: ../../configuration/system/login.rst:363 +#: ../../configuration/system/login.rst:367 msgid "Login Banner" msgstr "Bandera de inicio de sesión" -#: ../../configuration/system/login.rst:383 +#: ../../configuration/system/login.rst:387 msgid "Login limits" msgstr "Límites de inicio de sesión" @@ -7981,7 +8932,7 @@ msgstr "Opciones MACsec" msgid "MDI power" msgstr "Potencia MDI" -#: ../../configuration/system/login.rst:91 +#: ../../configuration/system/login.rst:95 msgid "MFA/2FA authentication using OTP (one time passwords)" msgstr "Autenticación MFA/2FA usando OTP (contraseñas de un solo uso)" @@ -8024,11 +8975,11 @@ msgstr "Main structure VyOS firewall cli is shown next:" msgid "Main structure is shown next:" msgstr "Main structure is shown next:" -#: ../../configuration/service/pppoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:303 msgid "Maintenance mode" msgstr "Modo de mantenimiento" -#: ../../configuration/service/conntrack-sync.rst:107 +#: ../../configuration/service/conntrack-sync.rst:116 msgid "Make sure conntrack is enabled by running and show connection tracking table." msgstr "Asegúrese de que conntrack esté habilitado al ejecutar y mostrar la tabla de seguimiento de conexiones." @@ -8048,7 +8999,7 @@ msgstr "Configuraciones obligatorias" msgid "Manual Neighbor Configuration" msgstr "Configuración manual de vecinos" -#: ../../configuration/pki/index.rst:336 +#: ../../configuration/pki/index.rst:367 msgid "Manually trigger certificate renewal. This will be done twice a day." msgstr "Manually trigger certificate renewal. This will be done twice a day." @@ -8056,15 +9007,19 @@ msgstr "Manually trigger certificate renewal. This will be done twice a day." msgid "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." msgstr "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." -#: ../../configuration/vpn/sstp.rst:223 +#: ../../configuration/service/ipoe-server.rst:166 +#: ../../configuration/service/pppoe-server.rst:128 +#: ../../configuration/vpn/l2tp.rst:171 +#: ../../configuration/vpn/pptp.rst:111 +#: ../../configuration/vpn/sstp.rst:144 msgid "Mark RADIUS server as offline for this given `<time>` in seconds." msgstr "Marque el servidor RADIUS como fuera de línea para este `<time> ` en segundos." -#: ../../configuration/pki/index.rst:206 +#: ../../configuration/pki/index.rst:208 msgid "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." msgstr "Marque la clave privada de las CA como protegida con contraseña. Se le pide al usuario la contraseña cuando se hace referencia a la clave." -#: ../../configuration/pki/index.rst:244 +#: ../../configuration/pki/index.rst:246 msgid "Mark the private key as password protected. User is asked for the password when the key is referenced." msgstr "Marque la clave privada como protegida con contraseña. Se le pide al usuario la contraseña cuando se hace referencia a la clave." @@ -8076,7 +9031,7 @@ msgstr "Haga coincidir grandes comunidades BGP." msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." msgstr "Haga coincidir las direcciones IP en función de su geolocalización. Más información: `coincidencia geoip<https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching> `_." -#: ../../configuration/firewall/ipv4.rst:440 +#: ../../configuration/firewall/ipv4.rst:463 #: ../../configuration/firewall/ipv6.rst:447 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." @@ -8089,17 +9044,21 @@ msgstr "Coincide con el resultado de la validación de RPKI." msgid "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." msgstr "Coincidir con un criterio de protocolo. Un número de protocolo o un nombre que se define en: ``/etc/protocols``. Los nombres especiales son ``all`` para todos los protocolos y ``tcp_udp`` para paquetes basados en tcp y udp. El ``!`` niega el protocolo seleccionado." -#: ../../configuration/firewall/ipv4.rst:773 +#: ../../configuration/firewall/ipv4.rst:796 #: ../../configuration/firewall/ipv6.rst:783 msgid "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." msgstr "Coincidir con un criterio de protocolo. Un número de protocolo o un nombre que se define aquí: ``/etc/protocols``. Los nombres especiales son ``all`` para todos los protocolos y ``tcp_udp`` para paquetes basados en tcp y udp. El ``!`` niega el protocolo seleccionado." -#: ../../configuration/firewall/ipv4.rst:831 +#: ../../configuration/firewall/ipv4.rst:854 #: ../../configuration/firewall/ipv6.rst:840 msgid "Match against the state of a packet." msgstr "Comparar con el estado de un paquete." -#: ../../configuration/firewall/ipv4.rst:620 +#: ../../configuration/firewall/ipv4.rst:336 +msgid "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." +msgstr "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." + +#: ../../configuration/firewall/ipv4.rst:643 #: ../../configuration/firewall/ipv6.rst:630 msgid "Match based on dscp value." msgstr "Coincidencia basada en el valor de dscp." @@ -8108,16 +9067,16 @@ msgstr "Coincidencia basada en el valor de dscp." msgid "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." msgstr "Coincidencia basada en criterios de valor de dscp. Se admiten múltiples valores de 0 a 63 y rangos." -#: ../../configuration/firewall/ipv4.rst:631 +#: ../../configuration/firewall/ipv4.rst:654 #: ../../configuration/firewall/ipv6.rst:641 msgid "Match based on fragment criteria." msgstr "Coincidencia basada en criterios de fragmentos." -#: ../../configuration/firewall/ipv4.rst:642 +#: ../../configuration/firewall/ipv4.rst:665 msgid "Match based on icmp code and type." msgstr "Match based on icmp code and type." -#: ../../configuration/firewall/ipv4.rst:653 +#: ../../configuration/firewall/ipv4.rst:676 msgid "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." msgstr "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." @@ -8147,18 +9106,18 @@ msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:239 -#: ../../configuration/firewall/ipv4.rst:663 +#: ../../configuration/firewall/ipv4.rst:686 #: ../../configuration/firewall/ipv6.rst:673 msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:248 -#: ../../configuration/firewall/ipv4.rst:674 +#: ../../configuration/firewall/ipv4.rst:697 #: ../../configuration/firewall/ipv6.rst:684 msgid "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:707 +#: ../../configuration/firewall/ipv4.rst:730 #: ../../configuration/firewall/ipv6.rst:717 msgid "Match based on ipsec criteria." msgstr "Coincidencia basada en criterios de ipsec." @@ -8168,35 +9127,35 @@ msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:256 -#: ../../configuration/firewall/ipv4.rst:684 +#: ../../configuration/firewall/ipv4.rst:707 #: ../../configuration/firewall/ipv6.rst:694 msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:265 -#: ../../configuration/firewall/ipv4.rst:695 +#: ../../configuration/firewall/ipv4.rst:718 #: ../../configuration/firewall/ipv6.rst:705 msgid "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:750 +#: ../../configuration/firewall/ipv4.rst:773 #: ../../configuration/firewall/ipv6.rst:760 #: ../../configuration/policy/route.rst:176 msgid "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." msgstr "Coincidencia basada en criterios de longitud de paquete. Se admiten varios valores de 1 a 65535 y rangos." -#: ../../configuration/firewall/ipv4.rst:762 +#: ../../configuration/firewall/ipv4.rst:785 #: ../../configuration/firewall/ipv6.rst:772 #: ../../configuration/policy/route.rst:184 msgid "Match based on packet type criteria." msgstr "Coincidencia basada en criterios de tipo de paquete." -#: ../../configuration/firewall/ipv4.rst:729 +#: ../../configuration/firewall/ipv4.rst:752 #: ../../configuration/firewall/ipv6.rst:739 msgid "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" msgstr "Coincidencia basada en la tasa promedio máxima, especificada como **entero/unidad**. Por ejemplo **5/minutos**" -#: ../../configuration/firewall/ipv4.rst:718 +#: ../../configuration/firewall/ipv4.rst:741 #: ../../configuration/firewall/ipv6.rst:728 msgid "Match based on the maximum number of packets to allow in excess of rate." msgstr "Coincidencia basada en el número máximo de paquetes que se permiten por encima de la tasa." @@ -8209,7 +9168,7 @@ msgstr "Match based on vlan ID. Range is also supported." msgid "Match based on vlan priority(pcp). Range is also supported." msgstr "Match based on vlan priority(pcp). Range is also supported." -#: ../../configuration/firewall/ipv4.rst:801 +#: ../../configuration/firewall/ipv4.rst:824 #: ../../configuration/firewall/ipv6.rst:810 msgid "Match bases on recently seen sources." msgstr "Coincide con las bases de las fuentes vistas recientemente." @@ -8224,7 +9183,7 @@ msgstr "Criterios de coincidencia basados en la marca de conexión." msgid "Match criteria based on nat connection status." msgstr "Criterios de coincidencia basados en el estado de la conexión nacional." -#: ../../configuration/firewall/ipv4.rst:345 +#: ../../configuration/firewall/ipv4.rst:368 #: ../../configuration/firewall/ipv6.rst:345 msgid "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." msgstr "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." @@ -8237,6 +9196,14 @@ msgstr "Match criteria based on source and/or destination mac-address." msgid "Match domain name" msgstr "Coincidencia de nombre de dominio" +#: ../../configuration/service/ipoe-server.rst:382 +#: ../../configuration/service/pppoe-server.rst:571 +#: ../../configuration/vpn/l2tp.rst:506 +#: ../../configuration/vpn/pptp.rst:430 +#: ../../configuration/vpn/sstp.rst:464 +msgid "Match firewall mark value" +msgstr "Match firewall mark value" + #: ../../configuration/firewall/ipv6.rst:894 #: ../../configuration/policy/route.rst:234 msgid "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." @@ -8250,12 +9217,12 @@ msgstr "Coincide con la preferencia local." msgid "Match route metric." msgstr "Coincidir con la métrica de la ruta." -#: ../../configuration/firewall/ipv4.rst:885 +#: ../../configuration/firewall/ipv4.rst:908 #: ../../configuration/policy/route.rst:229 msgid "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." msgstr "Igualar el tiempo de vida del parámetro, donde 'eq' significa 'igual'; 'gt' significa 'mayor que' y 'lt' significa 'menor que'." -#: ../../configuration/firewall/ipv4.rst:906 +#: ../../configuration/firewall/ipv4.rst:929 #: ../../configuration/firewall/ipv6.rst:915 msgid "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." msgstr "Coincidencia cuando se ve la cantidad de conexiones 'recuento' dentro de 'tiempo'. Estos criterios coincidentes se pueden utilizar para bloquear los intentos de fuerza bruta." @@ -8275,11 +9242,24 @@ msgstr "Tráfico coincidente" msgid "Maximum A-MSDU length 3839 (default) or 7935 octets" msgstr "Longitud máxima de A-MSDU 3839 (predeterminado) o 7935 octetos" +#: ../../configuration/vpn/l2tp.rst:492 +#: ../../configuration/vpn/pptp.rst:416 +msgid "Maximum Transmission Unit (MTU) (default: **1436**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1436**)" + +#: ../../configuration/service/pppoe-server.rst:538 +msgid "Maximum Transmission Unit (MTU) (default: **1492**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1492**)" + +#: ../../configuration/vpn/sstp.rst:450 +msgid "Maximum Transmission Unit (MTU) (default: **1500**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1500**)" + #: ../../configuration/service/dns.rst:108 msgid "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." msgstr "Número máximo de entradas de caché de DNS. 1 millón por núcleo de CPU generalmente será suficiente para la mayoría de las instalaciones." -#: ../../configuration/vpn/sstp.rst:159 +#: ../../configuration/vpn/sstp.rst:165 msgid "Maximum number of IPv4 nameservers" msgstr "Número máximo de servidores de nombres IPv4" @@ -8287,6 +9267,14 @@ msgstr "Número máximo de servidores de nombres IPv4" msgid "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." msgstr "Número máximo de procesos de autenticación para generar. Si comienza con muy pocos Squid, tendrá que esperar a que procesen una acumulación de verificaciones de credenciales, lo que lo ralentizará. Cuando las verificaciones de contraseña se realizan a través de una red (lenta), es probable que necesite muchos procesos de autenticación." +#: ../../configuration/service/ipoe-server.rst:372 +#: ../../configuration/service/pppoe-server.rst:542 +#: ../../configuration/vpn/l2tp.rst:496 +#: ../../configuration/vpn/pptp.rst:420 +#: ../../configuration/vpn/sstp.rst:454 +msgid "Maximum number of concurrent session start attempts" +msgstr "Maximum number of concurrent session start attempts" + #: ../../configuration/interfaces/wireless.rst:77 msgid "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." msgstr "Número máximo de estaciones permitidas en la tabla de estaciones. Las nuevas estaciones serán rechazadas una vez que la tabla de estaciones esté llena. IEEE 802.11 tiene un límite de 2007 ID de asociación diferentes, por lo que este número no debe ser mayor." @@ -8295,7 +9283,11 @@ msgstr "Número máximo de estaciones permitidas en la tabla de estaciones. Las msgid "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." msgstr "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." -#: ../../configuration/vpn/sstp.rst:250 +#: ../../configuration/service/ipoe-server.rst:190 +#: ../../configuration/service/pppoe-server.rst:152 +#: ../../configuration/vpn/l2tp.rst:195 +#: ../../configuration/vpn/pptp.rst:135 +#: ../../configuration/vpn/sstp.rst:168 msgid "Maximum number of tries to send Access-Request/Accounting-Request queries" msgstr "Número máximo de intentos para enviar consultas de Solicitud de acceso/Solicitud de contabilidad" @@ -8311,7 +9303,7 @@ msgstr "Medio" msgid "Member Interfaces" msgstr "Interfaces de miembros" -#: ../../configuration/interfaces/bridge.rst:196 +#: ../../configuration/interfaces/bridge.rst:205 msgid "Member interfaces `eth1` and VLAN 10 on interface `eth2`" msgstr "Interfaces miembro `eth1` y VLAN 10 en la interfaz `eth2`" @@ -8323,6 +9315,10 @@ msgstr "Mensajes generados internamente por syslogd" msgid "Metris version, the default is ``2``" msgstr "Versión Metris, el valor predeterminado es ``2``" +#: ../../configuration/vpn/ipsec.rst:510 +msgid "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/service/router-advert.rst:1 msgid "Min and max intervals between unsolicited multicast RAs" msgstr "Intervalos mínimos y máximos entre RA de multidifusión no solicitados" @@ -8351,7 +9347,12 @@ msgstr "Modify the time that pim will register suppress a FHR will send register msgid "Monitor, the system passively monitors any kind of wireless traffic" msgstr "Monitor, el sistema monitorea pasivamente cualquier tipo de tráfico inalámbrico" +#: ../../configuration/service/ipoe-server.rst:390 #: ../../configuration/service/monitoring.rst:2 +#: ../../configuration/service/pppoe-server.rst:583 +#: ../../configuration/vpn/l2tp.rst:518 +#: ../../configuration/vpn/pptp.rst:442 +#: ../../configuration/vpn/sstp.rst:538 msgid "Monitoring" msgstr "Supervisión" @@ -8371,7 +9372,7 @@ msgstr "Most operating systems include native client support for IPsec IKEv2 VPN msgid "Mount a volume into the container" msgstr "Montar un volumen en el contenedor." -#: ../../configuration/service/dhcp-server.rst:235 +#: ../../configuration/service/dhcp-server.rst:291 msgid "Multi" msgstr "Multi" @@ -8383,7 +9384,7 @@ msgstr "El servidor multicliente es el modo OpenVPN más popular en los enrutado msgid "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." msgstr "multihogar. En un entorno de red de alojamiento múltiple, el dispositivo NAT66 se conecta a una red interna y se conecta simultáneamente a diferentes redes externas. La traducción de direcciones se puede configurar en cada interfaz del lado de la red externa del dispositivo NAT66 para convertir la misma dirección de red interna en diferentes direcciones de red externa y realizar la asignación de la misma dirección interna a varias direcciones externas." -#: ../../configuration/service/dhcp-server.rst:359 +#: ../../configuration/service/dhcp-server.rst:415 msgid "Multi: can be specified multiple times." msgstr "Multi: se puede especificar varias veces." @@ -8423,12 +9424,11 @@ msgstr "Los receptores de multidifusión hablarán IGMP con su enrutador local, msgid "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." msgstr "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." -#: ../../configuration/service/dhcp-server.rst:54 -#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:108 msgid "Multiple DNS servers can be defined." msgstr "Se pueden definir varios servidores DNS." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Se pueden proporcionar múltiples instancias de almacenamiento en caché de RPKI y necesitan una preferencia en la que se utilizan sus conjuntos de resultados." @@ -8441,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Se pueden especificar varios alias por nombre de host." @@ -8460,16 +9464,16 @@ msgstr "Se pueden especificar varias interfaces." msgid "Multiple networks/client IP addresses can be configured." msgstr "Se pueden configurar múltiples redes/direcciones IP de clientes." -#: ../../configuration/system/login.rst:248 -#: ../../configuration/system/login.rst:317 +#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:321 msgid "Multiple servers can be specified." msgstr "Se pueden especificar varios servidores." -#: ../../configuration/service/dns.rst:374 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Se pueden utilizar múltiples servicios por interfaz. ¡Simplemente especifique tantos servicios por interfaz como desee!" -#: ../../configuration/firewall/ipv4.rst:494 +#: ../../configuration/firewall/ipv4.rst:517 #: ../../configuration/firewall/ipv6.rst:500 msgid "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" msgstr "Se pueden especificar varios puertos de origen como una lista separada por comas. La lista completa también se puede "negar" usando ``!``. Por ejemplo:" @@ -8487,22 +9491,22 @@ msgstr "Varios usuarios pueden conectarse al mismo dispositivo serie, pero solo msgid "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." msgstr "Las extensiones multiprotocolo permiten que BGP transporte información de enrutamiento para múltiples protocolos de capa de red. BGP admite un identificador de familia de direcciones (AFI) para IPv4 e IPv6." -#: ../../configuration/service/dhcp-server.rst:241 -#: ../../configuration/service/dhcp-server.rst:247 -#: ../../configuration/service/dhcp-server.rst:252 -#: ../../configuration/service/dhcp-server.rst:272 -#: ../../configuration/service/dhcp-server.rst:287 -#: ../../configuration/service/dhcp-server.rst:292 #: ../../configuration/service/dhcp-server.rst:297 -#: ../../configuration/service/dhcp-server.rst:302 -#: ../../configuration/service/dhcp-server.rst:307 -#: ../../configuration/service/dhcp-server.rst:327 -#: ../../configuration/service/dhcp-server.rst:332 -#: ../../configuration/service/dhcp-server.rst:337 +#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:308 +#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:358 +#: ../../configuration/service/dhcp-server.rst:363 +#: ../../configuration/service/dhcp-server.rst:383 +#: ../../configuration/service/dhcp-server.rst:388 +#: ../../configuration/service/dhcp-server.rst:393 msgid "N" msgstr "norte" -#: ../../configuration/highavailability/index.rst:363 +#: ../../configuration/highavailability/index.rst:373 #: ../../configuration/nat/index.rst:5 msgid "NAT" msgstr "NAT" @@ -8523,6 +9527,10 @@ msgstr "NAT64" msgid "NAT64 client configuration:" msgstr "NAT64 client configuration:" +#: ../../configuration/service/router-advert.rst:84 +msgid "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." +msgstr "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." + #: ../../configuration/nat/nat64.rst:44 msgid "NAT64 server configuration:" msgstr "NAT64 server configuration:" @@ -8587,7 +9595,15 @@ msgstr "NTP proporciona una advertencia de cualquier ajuste de segundo bisiesto msgid "Name Server" msgstr "Nombre del servidor" -#: ../../configuration/service/dhcp-server.rst:356 +#: ../../configuration/vpn/sstp.rst:84 +msgid "Name of installed certificate authority certificate." +msgstr "Name of installed certificate authority certificate." + +#: ../../configuration/vpn/sstp.rst:88 +msgid "Name of installed server certificate." +msgstr "Name of installed server certificate." + +#: ../../configuration/service/dhcp-server.rst:412 msgid "Name of static mapping" msgstr "Nombre del mapeo estático" @@ -8595,11 +9611,11 @@ msgstr "Nombre del mapeo estático" msgid "Name of the single table Only if set group-metrics single-table." msgstr "Nombre de la tabla única Solo si se establece una tabla única de métricas de grupo." -#: ../../configuration/service/dhcp-server.rst:296 +#: ../../configuration/service/dhcp-server.rst:352 msgid "Name or IPv4 address of TFTP server" msgstr "Nombre o dirección IPv4 del servidor TFTP" -#: ../../configuration/service/dhcp-server.rst:281 +#: ../../configuration/service/dhcp-server.rst:337 msgid "NetBIOS over TCP/IP name server" msgstr "Servidor de nombres NetBIOS sobre TCP/IP" @@ -8677,6 +9693,10 @@ msgstr "Estación de administración de red (NMS): software que se ejecuta en el msgid "Network news subsystem" msgstr "Subsistema de noticias de la red" +#: ../../configuration/service/ids.rst:87 +msgid "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" +msgstr "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" + #: ../../configuration/service/monitoring.rst:47 msgid "Networks allowed to query this server" msgstr "Redes permitidas para consultar este servidor" @@ -8693,11 +9713,11 @@ msgstr "Interfaz de siguiente salto para la ruta" msgid "Next it is necessary to configure 2FA for OpenConnect:" msgstr "A continuación es necesario configurar 2FA para OpenConnect:" -#: ../../configuration/policy/route-map.rst:279 +#: ../../configuration/policy/route-map.rst:282 msgid "Nexthop IP address." msgstr "Dirección IP de NextHop." -#: ../../configuration/policy/route-map.rst:298 +#: ../../configuration/policy/route-map.rst:301 msgid "Nexthop IPv6 address." msgstr "Dirección IPv6 del próximo salto." @@ -8705,6 +9725,22 @@ msgstr "Dirección IPv6 del próximo salto." msgid "Nexthop IPv6 address to match." msgstr "Dirección IPv6 de Nexthop para que coincida." +#: ../../configuration/system/ip.rst:47 +#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/vrf/index.rst:71 +msgid "Nexthop Tracking" +msgstr "Nexthop Tracking" + +#: ../../configuration/system/ip.rst:49 +#: ../../configuration/system/ipv6.rst:45 +#: ../../configuration/vrf/index.rst:73 +msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." + +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No existe ROA que cubra ese prefijo. Desafortunadamente, este es el caso de aproximadamente el 80% de los prefijos IPv4 que se anunciaron en :abbr:`DFZ (zona libre por defecto)` a principios de 2020." @@ -8713,7 +9749,7 @@ msgstr "No existe ROA que cubra ese prefijo. Desafortunadamente, este es el caso msgid "No VLAN tagging required by your ISP." msgstr "Su ISP no requiere etiquetado de VLAN." -#: ../../configuration/protocols/bgp.rst:707 +#: ../../configuration/protocols/bgp.rst:729 msgid "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." msgstr "Ninguna ruta se suprime indefinidamente. Maximum-suppress-time define el tiempo máximo que se puede suprimir una ruta antes de que se vuelva a anunciar." @@ -8753,7 +9789,7 @@ msgstr "Note: certificate names don't matter, we use 'openvpn-local' and 'openvp msgid "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." msgstr "Tenga en cuenta que la eliminación del archivo de registro no impide que el sistema registre eventos. Si usa este comando mientras el sistema está registrando eventos, los eventos de registro antiguos se eliminarán, pero los eventos posteriores a la operación de eliminación se registrarán en el archivo nuevo. Para eliminar el archivo por completo, primero elimine el registro en el archivo usando el comando system syslog :ref:`custom-file` y luego elimine el archivo." -#: ../../configuration/vpn/ipsec.rst:294 +#: ../../configuration/vpn/ipsec.rst:298 #: ../../configuration/vpn/rsa-keys.rst:35 msgid "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." msgstr "Tenga en cuenta el comando con la clave pública (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." @@ -8762,11 +9798,11 @@ msgstr "Tenga en cuenta el comando con la clave pública (set pki key-pair ipsec msgid "Notice" msgstr "Aviso" -#: ../../configuration/service/conntrack-sync.rst:194 +#: ../../configuration/service/conntrack-sync.rst:203 msgid "Now configure conntrack-sync service on ``router1`` **and** ``router2``" msgstr "Ahora configure el servicio conntrack-sync en ``router1`` **y** ``router2``" -#: ../../configuration/vpn/ipsec.rst:297 +#: ../../configuration/vpn/ipsec.rst:301 msgid "Now the noted public keys should be entered on the opposite routers." msgstr "Ahora las claves públicas anotadas deben ingresarse en los enrutadores opuestos." @@ -8786,7 +9822,7 @@ msgstr "Ahora al conectarse al usuario primero se le pedirá la contraseña y lu msgid "Now you are ready to setup IPsec. The key points:" msgstr "Ahora está listo para configurar IPsec. Los puntos clave:" -#: ../../configuration/vpn/ipsec.rst:311 +#: ../../configuration/vpn/ipsec.rst:315 msgid "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." msgstr "Ahora está listo para configurar IPsec. Deberá usar una identificación en lugar de una dirección para el compañero." @@ -8794,6 +9830,10 @@ msgstr "Ahora está listo para configurar IPsec. Deberá usar una identificació msgid "Number of antennas on this card" msgstr "Número de antenas en esta tarjeta" +#: ../../configuration/service/dns.rst:166 +msgid "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." +msgstr "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." + #: ../../configuration/system/syslog.rst:231 msgid "Number of lines to be displayed, default 10" msgstr "Número de líneas que se mostrarán, por defecto 10" @@ -8822,7 +9862,7 @@ msgstr "OSPFv2 (IPv4)" msgid "OSPFv3 (IPv6)" msgstr "OSPFv3 (IPv6)" -#: ../../configuration/system/login.rst:141 +#: ../../configuration/system/login.rst:145 msgid "OTP-key generation" msgstr "Generación de claves OTP" @@ -8830,7 +9870,7 @@ msgstr "Generación de claves OTP" msgid "Offloading" msgstr "Descarga" -#: ../../configuration/service/dhcp-server.rst:245 +#: ../../configuration/service/dhcp-server.rst:301 msgid "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" msgstr "Desplazamiento de la subred del cliente en segundos desde el tiempo universal coordinado (UTC)" @@ -8842,7 +9882,7 @@ msgstr "A menudo necesitamos integrar una política en otra. Es posible hacerlo msgid "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." msgstr "A menudo, también tendrá que configurar su tráfico *predeterminado* de la misma manera que lo hace con una clase. *Predeterminado* puede considerarse una clase ya que se comporta así. Contiene todo el tráfico que no coincide con ninguna de las clases definidas, por lo que es como una clase abierta, una clase sin filtros coincidentes." -#: ../../configuration/service/conntrack-sync.rst:211 +#: ../../configuration/service/conntrack-sync.rst:220 msgid "On active router run:" msgstr "En el enrutador activo, ejecute:" @@ -8858,7 +9898,7 @@ msgstr "En velocidades bajas (por debajo de 40 Mbit), es posible que desee ajust msgid "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." msgstr "En la mayoría de los escenarios, no es necesario cambiar parámetros específicos y basta con usar la configuración predeterminada. Pero hay casos en los que se necesita una configuración adicional." -#: ../../configuration/service/conntrack-sync.rst:242 +#: ../../configuration/service/conntrack-sync.rst:251 msgid "On standby router run:" msgstr "En el enrutador en espera, ejecute:" @@ -8866,34 +9906,34 @@ msgstr "En el enrutador en espera, ejecute:" msgid "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." msgstr "En sistemas con múltiples enlaces ascendentes y rutas redundantes, es una buena idea usar una dirección dedicada para la gestión y los protocolos de enrutamiento dinámico. Sin embargo, asignar esa dirección a un enlace físico es arriesgado: si ese enlace se cae, esa dirección se volverá inaccesible. Una solución común es asignar la dirección de administración a un bucle invertido o una interfaz ficticia y anunciar esa dirección a través de todos los enlaces físicos, de modo que sea accesible a través de cualquiera de ellos. Dado que en los sistemas basados en Linux, solo puede haber una interfaz de bucle invertido, es mejor usar una interfaz ficticia para ese propósito, ya que se pueden agregar, eliminar y activar y desactivar de forma independiente." -#: ../../configuration/vpn/ipsec.rst:181 -#: ../../configuration/vpn/ipsec.rst:239 -#: ../../configuration/vpn/ipsec.rst:299 +#: ../../configuration/vpn/ipsec.rst:185 +#: ../../configuration/vpn/ipsec.rst:243 +#: ../../configuration/vpn/ipsec.rst:303 #: ../../configuration/vpn/rsa-keys.rst:40 msgid "On the LEFT:" msgstr "A la izquierda:" -#: ../../configuration/vpn/ipsec.rst:314 +#: ../../configuration/vpn/ipsec.rst:318 #: ../../configuration/vpn/rsa-keys.rst:59 msgid "On the LEFT (static address):" msgstr "A la IZQUIERDA (dirección estática):" -#: ../../configuration/vpn/ipsec.rst:221 +#: ../../configuration/vpn/ipsec.rst:225 msgid "On the RIGHT, setup by analogy and swap local and remote addresses." msgstr "A la DERECHA, configure por analogía e intercambie direcciones locales y remotas." -#: ../../configuration/vpn/ipsec.rst:250 -#: ../../configuration/vpn/ipsec.rst:305 +#: ../../configuration/vpn/ipsec.rst:254 +#: ../../configuration/vpn/ipsec.rst:309 #: ../../configuration/vpn/rsa-keys.rst:46 msgid "On the RIGHT:" msgstr "A la derecha:" -#: ../../configuration/vpn/ipsec.rst:339 +#: ../../configuration/vpn/ipsec.rst:343 #: ../../configuration/vpn/rsa-keys.rst:84 msgid "On the RIGHT (dynamic address):" msgstr "A la DERECHA (dirección dinámica):" -#: ../../configuration/service/conntrack-sync.rst:207 +#: ../../configuration/service/conntrack-sync.rst:216 msgid "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" msgstr "En el enrutador activo, debe tener información en el caché interno de conntrack-sync. El mismo número de conexiones activas actuales debe mostrarse en el caché externo del enrutador en espera" @@ -8921,11 +9961,11 @@ msgstr "Una vez que una clase tiene un filtro configurado, también tendrás que msgid "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." msgstr "Una vez que se ha encontrado un vecino, la entrada se considera válida al menos durante este tiempo específico. La validez de una entrada se extenderá si recibe comentarios positivos de los protocolos de nivel superior." -#: ../../configuration/protocols/bgp.rst:702 +#: ../../configuration/protocols/bgp.rst:724 msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Una vez que se impone una penalización a una ruta, la penalización se reduce a la mitad cada vez que transcurre una cantidad de tiempo predefinida (tiempo de vida media). Cuando las penalizaciones acumuladas caen por debajo de un umbral predefinido (valor de reutilización), la ruta se desactiva y se vuelve a agregar a la tabla de enrutamiento BGP." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Una vez que se crea una política de tráfico, puede aplicarla a una interfaz:" @@ -8957,6 +9997,10 @@ msgstr "Una vez que se establecen las reglas de coincidencia para una clase, pue msgid "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." msgstr "Una vez que el usuario está conectado, la sesión del usuario utiliza los límites establecidos y se puede mostrar a través de 'mostrar sesiones del servidor pppoe'." +#: ../../configuration/service/pppoe-server.rst:285 +msgid "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." +msgstr "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." + #: ../../configuration/vpn/openconnect.rst:257 msgid "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." msgstr "Una vez que haya realizado los cambios anteriores, puede crear un archivo de configuración en el directorio /config/auth/ocserv/config-per-user que coincida con el nombre de usuario de un usuario que haya creado, por ejemplo, "tst". Ahora, al iniciar sesión con el usuario "tst", se cargarán las opciones de configuración que configuró en este archivo." @@ -8965,11 +10009,15 @@ msgstr "Una vez que haya realizado los cambios anteriores, puede crear un archiv msgid "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." msgstr "Una vez que tenga un dispositivo Ethernet conectado, es decir, `eth0`, puede configurarlo para abrir la sesión PPPoE para usted y su transceptor DSL (módem/enrutador) simplemente actúa para traducir sus mensajes de una manera que vDSL/aDSL entienda." -#: ../../configuration/vpn/sstp.rst:307 +#: ../../configuration/vpn/sstp.rst:478 msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Una vez que haya configurado su servidor SSTP, llega el momento de realizar algunas pruebas básicas. El cliente de Linux utilizado para las pruebas se llama sstpc_. sstpc_ requiere un archivo de configuración/par de PPP." -#: ../../configuration/protocols/rpki.rst:183 +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + +#: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Una vez que sus enrutadores estén configurados para rechazar prefijos no válidos para RPKI, puede probar si la configuración funciona correctamente utilizando la herramienta experimental `RIPE Labs RPKI Test`_." @@ -9001,7 +10049,7 @@ msgstr "Solo se admite VRRP. Opción requerida." msgid "Only allow certain IP addresses or prefixes to access the https webserver." msgstr "Only allow certain IP addresses or prefixes to access the https webserver." -#: ../../configuration/firewall/ipv4.rst:459 +#: ../../configuration/firewall/ipv4.rst:482 #: ../../configuration/firewall/ipv6.rst:466 msgid "Only in the source criteria, you can specify a mac-address." msgstr "Solo en los criterios de origen, puede especificar una dirección MAC." @@ -9022,7 +10070,7 @@ msgstr "Solo solicite una dirección del servidor PPPoE pero no instale ninguna msgid "Only request an address from the SSTP server but do not install any default route." msgstr "Solo solicite una dirección del servidor SSTP pero no instale ninguna ruta predeterminada." -#: ../../configuration/system/login.rst:51 +#: ../../configuration/system/login.rst:55 msgid "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." msgstr "Solo se utiliza el tipo (``ssh-rsa``) y la clave (``AAAB3N...``). Tenga en cuenta que la clave generalmente tendrá varios cientos de caracteres y deberá copiarla y pegarla. Algunos emuladores de terminal pueden dividir esto accidentalmente en varias líneas. Ojo cuando lo pegues que solo pega como una sola línea. La tercera parte es simplemente un identificador y es para su propia referencia." @@ -9030,7 +10078,7 @@ msgstr "Solo se utiliza el tipo (``ssh-rsa``) y la clave (``AAAB3N...``). Tenga msgid "Only works with a VXLAN device with external flag set." msgstr "Only works with a VXLAN device with external flag set." -#: ../../configuration/highavailability/index.rst:457 +#: ../../configuration/highavailability/index.rst:467 msgid "Op-mode check virtual-server status" msgstr "Comprobar el estado del servidor virtual en modo operativo" @@ -9055,7 +10103,7 @@ msgid "OpenConnect supports a subset of it's configuration options to be applied msgstr "OpenConnect admite un subconjunto de sus opciones de configuración que se aplicarán por usuario/grupo, para fines de configuración nos referimos a esta funcionalidad como "Configuración basada en identidad". El siguiente `Manual del servidor OpenConnect <https://ocserv.gitlab.io/www/manual.html#:~:text=Configuration%20files%20that% 20will%20be%20applied%20per%20user%20connection%20or%0A%23%20per%20group> `_ describe el conjunto de opciones de configuración que están permitidas. Esto se puede aprovechar para aplicar diferentes conjuntos de configuraciones a diferentes usuarios o grupos de usuarios." #: ../../configuration/interfaces/openvpn.rst:7 -#: ../../configuration/pki/index.rst:117 +#: ../../configuration/pki/index.rst:119 msgid "OpenVPN" msgstr "OpenVPN" @@ -9097,7 +10145,7 @@ msgstr "Modos de funcionamiento" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -9105,23 +10153,23 @@ msgstr "Modos de funcionamiento" #: ../../configuration/interfaces/virtual-ethernet.rst:55 #: ../../configuration/interfaces/wireless.rst:416 #: ../../configuration/interfaces/wwan.rst:79 -#: ../../configuration/pki/index.rst:290 +#: ../../configuration/pki/index.rst:321 #: ../../configuration/protocols/igmp-proxy.rst:73 -#: ../../configuration/protocols/static.rst:183 -#: ../../configuration/service/conntrack-sync.rst:103 +#: ../../configuration/protocols/static.rst:216 +#: ../../configuration/service/conntrack-sync.rst:112 #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:195 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 #: ../../configuration/service/webproxy.rst:330 #: ../../configuration/system/default-route.rst:25 #: ../../configuration/system/flow-accounting.rst:175 -#: ../../configuration/vrf/index.rst:111 -#: ../../configuration/vrf/index.rst:323 -#: ../../configuration/vrf/index.rst:503 +#: ../../configuration/vrf/index.rst:130 +#: ../../configuration/vrf/index.rst:342 +#: ../../configuration/vrf/index.rst:522 msgid "Operation" msgstr "Operación" @@ -9131,17 +10179,17 @@ msgid "Operation-mode" msgstr "Operation-mode" #: ../../configuration/firewall/bridge.rst:284 -#: ../../configuration/firewall/ipv4.rst:954 +#: ../../configuration/firewall/ipv4.rst:977 #: ../../configuration/firewall/ipv6.rst:962 msgid "Operation-mode Firewall" msgstr "Cortafuegos en modo operativo" -#: ../../configuration/container/index.rst:143 +#: ../../configuration/container/index.rst:179 msgid "Operation Commands" msgstr "Comandos de operación" -#: ../../configuration/service/dhcp-server.rst:412 -#: ../../configuration/service/dhcp-server.rst:664 +#: ../../configuration/service/dhcp-server.rst:471 +#: ../../configuration/service/dhcp-server.rst:725 #: ../../configuration/system/acceleration.rst:42 msgid "Operation Mode" msgstr "Modo de operación" @@ -9151,12 +10199,12 @@ msgid "Operation mode of wireless radio." msgstr "Modo de funcionamiento de la radio inalámbrica." #: ../../configuration/interfaces/wireguard.rst:338 -#: ../../configuration/protocols/bfd.rst:94 -#: ../../configuration/protocols/bfd.rst:175 +#: ../../configuration/protocols/bfd.rst:101 +#: ../../configuration/protocols/bfd.rst:182 msgid "Operational Commands" msgstr "Comandos operativos" -#: ../../configuration/protocols/bgp.rst:950 +#: ../../configuration/protocols/bgp.rst:972 #: ../../configuration/protocols/mpls.rst:218 #: ../../configuration/protocols/ospf.rst:609 #: ../../configuration/protocols/ospf.rst:1268 @@ -9164,8 +10212,8 @@ msgstr "Comandos operativos" msgid "Operational Mode Commands" msgstr "Comandos de modo operativo" -#: ../../configuration/system/ip.rst:47 -#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/system/ip.rst:60 +#: ../../configuration/system/ipv6.rst:56 msgid "Operational commands" msgstr "Comandos operativos" @@ -9177,11 +10225,11 @@ msgstr "Opción" msgid "Option 43 for UniFI" msgstr "Opción 43 para UniFI" -#: ../../configuration/service/dhcp-server.rst:234 +#: ../../configuration/service/dhcp-server.rst:290 msgid "Option description" msgstr "Descripción de la opción" -#: ../../configuration/service/dhcp-server.rst:232 +#: ../../configuration/service/dhcp-server.rst:288 msgid "Option number" msgstr "Número de opción" @@ -9211,7 +10259,7 @@ msgstr "Opcional" msgid "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." msgstr "Opcional, si desea habilitar las cargas, de lo contrario, el servidor TFTP actuará como un servidor de solo lectura." -#: ../../configuration/system/login.rst:107 +#: ../../configuration/system/login.rst:111 msgid "Optional/default settings" msgstr "Configuraciones opcionales/predeterminadas" @@ -9231,12 +10279,11 @@ msgstr "Opcionalmente, establezca una dirección IPv4 o IPv6 estática específi #: ../../configuration/interfaces/openvpn.rst:631 #: ../../configuration/service/dhcp-relay.rst:53 #: ../../configuration/service/dhcp-relay.rst:160 -#: ../../configuration/service/dhcp-server.rst:224 -#: ../../configuration/vpn/sstp.rst:230 +#: ../../configuration/service/dhcp-server.rst:280 msgid "Options" msgstr "Opciones" -#: ../../configuration/vpn/ipsec.rst:159 +#: ../../configuration/vpn/ipsec.rst:162 msgid "Options (Global IPsec settings) Attributes" msgstr "Opciones (Configuración IPsec global) Atributos" @@ -9252,11 +10299,15 @@ msgstr "O, por ejemplo, ftp, `eliminar módulos de control de seguimiento del si msgid "Or **binary** prefixes." msgstr "O prefijos **binarios**." +#: ../../configuration/service/conntrack-sync.rst:107 +msgid "Order conntrackd to request a complete conntrack table resync against the other node at startup." +msgstr "Order conntrackd to request a complete conntrack table resync against the other node at startup." + #: ../../configuration/protocols/ospf.rst:73 msgid "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." msgstr "Genere un LSA AS-Externo (tipo 5) que describa una ruta predeterminada en todas las áreas con capacidad de enrutamiento externo, de la métrica y el tipo de métrica especificados. Si se proporciona la palabra clave :cfgcmd:`always`, siempre se anuncia el valor predeterminado, incluso cuando no hay un valor predeterminado presente en la tabla de enrutamiento. El argumento :cfgcmd:`route-map` especifica anunciar la ruta predeterminada si se cumple el mapa de ruta." -#: ../../configuration/service/pppoe-server.rst:238 +#: ../../configuration/service/pppoe-server.rst:312 msgid "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." msgstr "Se pueden usar otros atributos, pero deben estar en uno de los diccionarios en */usr/share/accel-ppp/radius*." @@ -9325,15 +10376,15 @@ msgstr "Resumen de grupos definidos. Verá el tipo, los miembros y dónde se usa msgid "PBR multiple uplinks" msgstr "Enlaces ascendentes múltiples PBR" -#: ../../configuration/vrf/index.rst:244 +#: ../../configuration/vrf/index.rst:263 msgid "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" msgstr "PC1 está en el VRF ``predeterminado`` y actúa como, por ejemplo, un "servidor de archivos"" -#: ../../configuration/vrf/index.rst:245 +#: ../../configuration/vrf/index.rst:264 msgid "PC2 is in VRF ``blue`` which is the development department" msgstr "PC2 está en VRF ``azul`` que es el departamento de desarrollo" -#: ../../configuration/vrf/index.rst:246 +#: ../../configuration/vrf/index.rst:265 msgid "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." msgstr "PC3 y PC4 están conectados a un dispositivo puente en el enrutador ``R1`` que está en VRF ``rojo``. Digamos que este es el departamento de recursos humanos." @@ -9369,7 +10420,7 @@ msgstr "PIM – Protocol Independent Multicast" msgid "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." msgstr "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." -#: ../../configuration/pki/index.rst:7 +#: ../../configuration/pki/index.rst:9 msgid "PKI" msgstr "PKI" @@ -9377,7 +10428,14 @@ msgstr "PKI" msgid "PPDU" msgstr "PPDU" -#: ../../configuration/vpn/sstp.rst:174 +#: ../../configuration/service/pppoe-server.rst:453 +#: ../../configuration/vpn/l2tp.rst:407 +#: ../../configuration/vpn/pptp.rst:331 +#: ../../configuration/vpn/sstp.rst:365 +msgid "PPP Advanced Options" +msgstr "PPP Advanced Options" + +#: ../../configuration/vpn/sstp.rst:180 msgid "PPP Settings" msgstr "Configuración de APP" @@ -9393,7 +10451,7 @@ msgstr "Servidor PPPoE" msgid "PPPoE options" msgstr "Opciones de PPPoE" -#: ../../configuration/vpn/pptp.rst:4 +#: ../../configuration/vpn/pptp.rst:5 msgid "PPTP-Server" msgstr "Servidor PPTP" @@ -9401,19 +10459,23 @@ msgstr "Servidor PPTP" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "El equilibrio basado en paquetes puede conducir a un mejor equilibrio entre las interfaces cuando los paquetes fuera de servicio no son un problema. El equilibrio basado en paquetes se puede configurar para una regla de equilibrio con:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Es posible que las redes particularmente grandes deseen ejecutar su propia autoridad de certificación RPKI y servidor de publicación en lugar de publicar ROA a través de su RIR. Este es un tema mucho más allá del alcance de la documentación de VyOS. Considere leer sobre Krill_ si este es un agujero de conejo que necesita o si desea sumergirse especialmente." +#: ../../configuration/service/dhcp-server.rst:65 +msgid "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" +msgstr "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" + #: ../../configuration/interfaces/bridge.rst:60 msgid "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." msgstr "Ruta `<cost> ` valor para el protocolo de árbol de expansión. Cada interfaz en un puente podría tener una velocidad diferente y este valor se usa para decidir qué enlace usar. Las interfaces más rápidas deberían tener costos más bajos." -#: ../../configuration/vpn/sstp.rst:166 +#: ../../configuration/vpn/sstp.rst:172 msgid "Path to `<file>` pointing to the certificate authority certificate." msgstr "Ruta a `<file> ` apuntando al certificado de la autoridad certificadora." -#: ../../configuration/vpn/sstp.rst:170 +#: ../../configuration/vpn/sstp.rst:176 msgid "Path to `<file>` pointing to the servers certificate (public portion)." msgstr "Ruta a `<file> ` apuntando al certificado del servidor (parte pública)." @@ -9457,11 +10519,15 @@ msgstr "Por defecto, VyOSs tiene habilitado un registro de syslog mínimo que se msgid "Per default every packet is sampled (that is, the sampling rate is 1)." msgstr "De forma predeterminada, se muestrean todos los paquetes (es decir, la tasa de muestreo es 1)." -#: ../../configuration/service/pppoe-server.rst:323 +#: ../../configuration/service/pppoe-server.rst:556 msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "De manera predeterminada, la sesión de usuario se reemplaza si una segunda solicitud de autenticación tiene éxito. Dichas solicitudes de sesión se pueden denegar o permitir por completo, lo que permitiría múltiples sesiones para un usuario en el último caso. Si se deniega, la segunda sesión se rechaza incluso si la autenticación tiene éxito, el usuario debe finalizar su primera sesión y luego puede volver a autenticarse." -#: ../../configuration/system/option.rst:78 +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + +#: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Rendimiento" @@ -9469,11 +10535,11 @@ msgstr "Rendimiento" msgid "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." msgstr "Periódicamente, el puente raíz y los puentes designados envían un paquete de saludo. Los paquetes de saludo se utilizan para comunicar información sobre la topología en toda la red de área local con puente." -#: ../../configuration/vrf/index.rst:197 +#: ../../configuration/vrf/index.rst:216 msgid "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." msgstr "El comando ping se puede interrumpir en cualquier momento usando ``<Ctrl> +c``. A continuación se muestra una breve estadística." -#: ../../configuration/vrf/index.rst:183 +#: ../../configuration/vrf/index.rst:202 msgid "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." msgstr "Ping utiliza el datagrama ECHO_REQUEST obligatorio del protocolo ICMP para obtener un ICMP ECHO_RESPONSE de un host o puerta de enlace. Los datagramas ECHO_REQUEST (pings) tendrán un encabezado IP e ICMP, seguido de "struct timeval" y un número arbitrario de bytes de relleno utilizados para completar el paquete." @@ -9497,7 +10563,7 @@ msgstr "Please, refer to appropiate section for more information about firewall msgid "Please, refer to appropriate section for more information about firewall configuration:" msgstr "Please, refer to appropriate section for more information about firewall configuration:" -#: ../../configuration/service/ipoe-server.rst:23 +#: ../../configuration/service/ipoe-server.rst:21 msgid "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." msgstr "Tenga en cuenta que, debido a un error ascendente, los cambios/confirmaciones de configuración reiniciarán el demonio ppp y restablecerán las sesiones IPoE existentes para que entren en vigencia." @@ -9513,7 +10579,7 @@ msgstr "Consulte la documentación de :ref:`ipsec` para ver las opciones individ msgid "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." msgstr "Consulte la documentación de :ref:`tunnel-interface` para conocer las opciones individuales relacionadas con los túneles." -#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:420 msgid "Please see the :ref:`dhcp-dns-quick-start` configuration." msgstr "Consulte la configuración de :ref:`dhcp-dns-quick-start`." @@ -9566,12 +10632,16 @@ msgid "Port Groups" msgstr "Grupos de puertos" #: ../../configuration/interfaces/bonding.rst:282 -#: ../../configuration/interfaces/bridge.rst:179 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/bridge.rst:188 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Espejo de puerto (SPAN)" -#: ../../configuration/vpn/sstp.rst:242 +#: ../../configuration/service/ipoe-server.rst:182 +#: ../../configuration/service/pppoe-server.rst:144 +#: ../../configuration/vpn/l2tp.rst:187 +#: ../../configuration/vpn/pptp.rst:127 +#: ../../configuration/vpn/sstp.rst:160 msgid "Port for Dynamic Authorization Extension server (DM/CoA)" msgstr "Puerto para servidor de extensión de autorización dinámica (DM/CoA)" @@ -9656,7 +10726,7 @@ msgstr "Preferencia asociada con el enrutador predeterminado" msgid "Prefix Conversion" msgstr "Conversión de prefijo" -#: ../../configuration/service/dhcp-server.rst:564 +#: ../../configuration/service/dhcp-server.rst:623 msgid "Prefix Delegation" msgstr "Prefijo Delegación" @@ -9696,11 +10766,11 @@ msgstr "Prefijo para emparejar contra." msgid "Prefixes" msgstr "prefijos" -#: ../../configuration/policy/route-map.rst:212 +#: ../../configuration/policy/route-map.rst:215 msgid "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." msgstr "Anteponga el último número de AS existente (el ASN más a la izquierda) a AS_PATH." -#: ../../configuration/policy/route-map.rst:207 +#: ../../configuration/policy/route-map.rst:210 msgid "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." msgstr "Anteponga la cadena dada de números AS al AS_PATH del NLRI de la ruta BGP." @@ -9708,11 +10778,11 @@ msgstr "Anteponga la cadena dada de números AS al AS_PATH del NLRI de la ruta B msgid "Principle of SNMP Communication" msgstr "Principio de comunicación SNMP" -#: ../../configuration/vrf/index.rst:532 +#: ../../configuration/vrf/index.rst:551 msgid "Print a summary of neighbor connections for the specified AFI/SAFI combination." msgstr "Imprima un resumen de las conexiones vecinas para la combinación AFI/SAFI especificada." -#: ../../configuration/vrf/index.rst:511 +#: ../../configuration/vrf/index.rst:530 msgid "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." msgstr "Imprime rutas IPV4 o IPV6 activas anunciadas a través de VPN SAFI." @@ -9733,6 +10803,10 @@ msgstr "Priority Queue, como otras políticas sin configuración, solo es útil msgid "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." msgstr "Arp de proxy de VLAN privada. Básicamente, permita que el proxy arp responda a la misma interfaz (desde la cual se recibió la solicitud/solicitud de ARP)." +#: ../../configuration/vpn/ipsec.rst:544 +msgid "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." +msgstr "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." + #: ../../configuration/service/monitoring.rst:38 msgid "Prometheus-client" msgstr "Prometheus-cliente" @@ -9841,11 +10915,11 @@ msgstr "Opciones de pseudo Ethernet/MACVLAN" msgid "Publish a port for the container." msgstr "Publique un puerto para el contenedor." -#: ../../configuration/container/index.rst:147 +#: ../../configuration/container/index.rst:183 msgid "Pull a new image for container" msgstr "Obtener una nueva imagen para el contenedor" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -9875,7 +10949,7 @@ msgstr "R1:" msgid "R1 has 192.0.2.1/24 & 2001:db8::1/64" msgstr "R1 tiene 192.0.2.1/24 y 2001:db8::1/64" -#: ../../configuration/vrf/index.rst:248 +#: ../../configuration/vrf/index.rst:267 msgid "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" msgstr "R1 se administra a través de una red fuera de banda que reside en VRF ``mgmt``" @@ -9887,12 +10961,11 @@ msgstr "R2:" msgid "R2 has 192.0.2.2/24 & 2001:db8::2/64" msgstr "R2 tiene 192.0.2.2/24 y 2001:db8::2/64" -#: ../../configuration/system/login.rst:234 -#: ../../configuration/vpn/sstp.rst:207 +#: ../../configuration/system/login.rst:238 msgid "RADIUS" msgstr "Radio" -#: ../../configuration/service/ipoe-server.rst:111 +#: ../../configuration/service/ipoe-server.rst:112 msgid "RADIUS Setup" msgstr "Configuración de RADIO" @@ -9900,6 +10973,14 @@ msgstr "Configuración de RADIO" msgid "RADIUS advanced features" msgstr "Funciones avanzadas de RADIUS" +#: ../../configuration/service/ipoe-server.rst:158 +#: ../../configuration/service/pppoe-server.rst:120 +#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/vpn/pptp.rst:103 +#: ../../configuration/vpn/sstp.rst:136 +msgid "RADIUS advanced options" +msgstr "RADIUS advanced options" + #: ../../configuration/vpn/l2tp.rst:139 msgid "RADIUS authentication" msgstr "autenticación RADIUS" @@ -9916,11 +10997,15 @@ msgstr "RADIUS proporciona las direcciones IP del ejemplo anterior a través de msgid "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" msgstr "Servidor RADIUS en ``192.168.3.10`` con secreto compartido ``VyOSPassword``" -#: ../../configuration/system/login.rst:266 +#: ../../configuration/system/login.rst:270 msgid "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." msgstr "Los servidores RADIUS podrían fortalecerse al permitir que solo se conecten ciertas direcciones IP. A partir de esto, se puede configurar la dirección de origen de cada consulta RADIUS." -#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/service/ipoe-server.rst:144 +#: ../../configuration/service/pppoe-server.rst:106 +#: ../../configuration/vpn/l2tp.rst:149 +#: ../../configuration/vpn/pptp.rst:89 +#: ../../configuration/vpn/sstp.rst:122 msgid "RADIUS source address" msgstr "dirección de origen RADIUS" @@ -9928,7 +11013,7 @@ msgstr "dirección de origen RADIUS" msgid "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." msgstr "RFC 3768 define una dirección MAC virtual para cada enrutador virtual VRRP. Esta dirección MAC del enrutador virtual se utilizará como fuente en todos los mensajes VRRP periódicos enviados por el nodo activo. Cuando se establece la opción de compatibilidad con rfc3768, se crea una nueva interfaz VRRP, a la que se asignan automáticamente la dirección MAC y la dirección IP virtual." -#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:312 msgid "RFC 868 time server IPv4 address" msgstr "Dirección IPv4 del servidor horario RFC 868" @@ -9970,8 +11055,8 @@ msgstr "Random-Detect podría ser útil para el tráfico pesado. Un uso de este #: ../../configuration/protocols/static.rst:37 #: ../../configuration/protocols/static.rst:57 -#: ../../configuration/protocols/static.rst:84 -#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:107 +#: ../../configuration/protocols/static.rst:127 msgid "Range is 1 to 255, default is 1." msgstr "El rango es de 1 a 255, el valor predeterminado es 1." @@ -10016,15 +11101,15 @@ msgstr "Se volvió a generar la porción de clave pública/privada que SSH usa p msgid "Reachable Time" msgstr "Tiempo alcanzable" -#: ../../configuration/highavailability/index.rst:388 +#: ../../configuration/highavailability/index.rst:398 msgid "Real server" msgstr "servidor real" -#: ../../configuration/highavailability/index.rst:389 +#: ../../configuration/highavailability/index.rst:399 msgid "Real server IP address and port" msgstr "Puerto y dirección IP del servidor real" -#: ../../configuration/highavailability/index.rst:404 +#: ../../configuration/highavailability/index.rst:414 msgid "Real server is auto-excluded if port check with this server fail." msgstr "El servidor real se excluye automáticamente si falla la verificación del puerto con este servidor." @@ -10032,7 +11117,11 @@ msgstr "El servidor real se excluye automáticamente si falla la verificación d msgid "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." msgstr "Recibir tráfico de conexiones creadas por el servidor también está equilibrado. Cuando el sistema local envía una solicitud de ARP, el controlador de vinculación copia y guarda la información de IP del par del paquete ARP. Cuando llega la respuesta ARP del par, se recupera su dirección de hardware y el controlador de enlace inicia una respuesta ARP para este par asignándola a uno de los esclavos en el enlace. Un resultado problemático de usar la negociación ARP para equilibrar es que cada vez que se transmite una solicitud ARP, se usa la dirección de hardware del enlace. Por lo tanto, los pares aprenden la dirección de hardware del enlace y el equilibrio del tráfico de recepción colapsa al esclavo actual. Esto se maneja mediante el envío de actualizaciones (Respuestas ARP) a todos los pares con su dirección de hardware asignada individualmente, de modo que el tráfico se redistribuya. El tráfico de recepción también se redistribuye cuando se agrega un nuevo esclavo al enlace y cuando se reactiva un esclavo inactivo. La carga de recepción se distribuye secuencialmente (todo el mundo) entre el grupo de esclavos de mayor velocidad en el enlace." -#: ../../configuration/vpn/l2tp.rst:205 +#: ../../configuration/service/ipoe-server.rst:227 +#: ../../configuration/service/pppoe-server.rst:189 +#: ../../configuration/vpn/l2tp.rst:232 +#: ../../configuration/vpn/pptp.rst:172 +#: ../../configuration/vpn/sstp.rst:205 msgid "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." msgstr "Los atributos de RADIUS recibidos tienen una prioridad más alta que los parámetros definidos en la configuración de la CLI; consulte la explicación a continuación." @@ -10040,7 +11129,11 @@ msgstr "Los atributos de RADIUS recibidos tienen una prioridad más alta que los msgid "Recommended for larger installations." msgstr "Recomendado para instalaciones más grandes." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirigir HTTP a HTTPS" @@ -10068,11 +11161,11 @@ msgstr "Configuración de redistribución" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancia y carga compartida. Hay varios dispositivos NAT66 en el borde de una red IPv6 a otra red IPv6. La ruta a través del dispositivo NAT66 a otra red IPv6 forma una ruta equivalente y el tráfico se puede compartir en carga en estos dispositivos NAT66. En este caso, puede configurar las mismas reglas de traducción de direcciones de origen en estos dispositivos NAT66, de modo que cualquier dispositivo NAT66 pueda manejar el tráfico IPv6 entre diferentes sitios." -#: ../../configuration/service/dns.rst:278 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Registre el registro DNS ``example.vyos.io`` en el servidor DNS ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -10147,7 +11240,11 @@ msgstr "Nombre del depósito ``InfluxDB`` remoto" msgid "Remote database name." msgstr "Nombre de la base de datos remota." -#: ../../configuration/service/dhcp-server.rst:147 +#: ../../configuration/service/dhcp-server.rst:196 +msgid "Remote peer IP `<address>` of the second DHCP server in this HA cluster." +msgstr "Remote peer IP `<address>` of the second DHCP server in this HA cluster." + +#: ../../configuration/service/dhcp-server.rst:181 msgid "Remote peer IP `<address>` of the second DHCP server in this failover cluster." msgstr "IP de par remoto `<address> ` del segundo servidor DHCP en este clúster de conmutación por error." @@ -10159,7 +11256,10 @@ msgstr "Puerto remoto" msgid "Remote transmission interval will be multiplied by this value" msgstr "El intervalo de transmisión remota se multiplicará por este valor" -#: ../../configuration/vpn/l2tp.rst:216 +#: ../../configuration/service/pppoe-server.rst:217 +#: ../../configuration/vpn/l2tp.rst:260 +#: ../../configuration/vpn/pptp.rst:200 +#: ../../configuration/vpn/sstp.rst:233 msgid "Renaming clients interfaces by RADIUS" msgstr "Cambio de nombre de las interfaces de los clientes por RADIUS" @@ -10179,7 +11279,10 @@ msgstr "Solicite solo una dirección temporal y no forme una asociación IA_NA ( msgid "Requests are forwarded through ``eth2`` as the `upstream interface`" msgstr "Las solicitudes se reenvían a través de ``eth2`` como la `interfaz ascendente`" -#: ../../configuration/vpn/sstp.rst:95 +#: ../../configuration/service/pppoe-server.rst:442 +#: ../../configuration/vpn/l2tp.rst:396 +#: ../../configuration/vpn/pptp.rst:320 +#: ../../configuration/vpn/sstp.rst:354 msgid "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." msgstr "Requiera que el par se autentique usando uno de los siguientes protocolos: pap, chap, mschap, mschap-v2." @@ -10191,12 +11294,12 @@ msgstr "Requisitos" msgid "Requirements:" msgstr "Requisitos:" -#: ../../configuration/firewall/ipv4.rst:926 +#: ../../configuration/firewall/ipv4.rst:949 #: ../../configuration/firewall/ipv6.rst:935 msgid "Requirements to enable synproxy:" msgstr "Requirements to enable synproxy:" -#: ../../configuration/protocols/bgp.rst:1064 +#: ../../configuration/protocols/bgp.rst:1086 #: ../../configuration/protocols/mpls.rst:248 msgid "Reset" msgstr "Reiniciar" @@ -10205,11 +11308,11 @@ msgstr "Reiniciar" msgid "Reset OpenVPN" msgstr "Restablecer OpenVPN" -#: ../../configuration/system/ipv6.rst:150 +#: ../../configuration/system/ipv6.rst:163 msgid "Reset commands" msgstr "Restablecer comandos" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Restablece la base de datos de caché de reenvío de DNS local. Puede restablecer la memoria caché para todas las entradas o solo para las entradas de un dominio específico." @@ -10225,7 +11328,7 @@ msgstr "Reinicie el servicio de retransmisión DHCP" msgid "Restart DHCPv6 relay agent immediately." msgstr "Reinicie el agente de retransmisión DHCPv6 inmediatamente." -#: ../../configuration/container/index.rst:167 +#: ../../configuration/container/index.rst:203 msgid "Restart a given container" msgstr "Reiniciar un contenedor dado" @@ -10233,7 +11336,7 @@ msgstr "Reiniciar un contenedor dado" msgid "Restart mDNS repeater service." msgstr "Restart mDNS repeater service." -#: ../../configuration/service/dhcp-server.rst:428 +#: ../../configuration/service/dhcp-server.rst:487 msgid "Restart the DHCP server" msgstr "Reinicie el servidor DHCP" @@ -10245,7 +11348,7 @@ msgstr "Reinicie el proceso de proxy IGMP." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Reinicie el proceso del demonio SSH, la sesión actual no se ve afectada, solo se reinicia el demonio en segundo plano." -#: ../../configuration/service/dns.rst:204 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Reinicia el proceso de recurso de DNS. Esto también invalida el caché de reenvío de DNS local." @@ -10263,11 +11366,11 @@ msgstr "Resultados en:" msgid "Retransmit Timer" msgstr "Temporizador de retransmisión" -#: ../../configuration/service/conntrack-sync.rst:140 +#: ../../configuration/service/conntrack-sync.rst:149 msgid "Retrieve current statistics of connection tracking subsystem." msgstr "Recuperar estadísticas actuales del subsistema de seguimiento de conexiones." -#: ../../configuration/service/conntrack-sync.rst:173 +#: ../../configuration/service/conntrack-sync.rst:182 msgid "Retrieve current status of connection tracking subsystem." msgstr "Recuperar el estado actual del subsistema de seguimiento de conexiones." @@ -10287,15 +11390,15 @@ msgstr "ronda robin" msgid "Route Aggregation Configuration" msgstr "Configuración de agregación de rutas" -#: ../../configuration/protocols/bgp.rst:682 +#: ../../configuration/protocols/bgp.rst:704 msgid "Route Dampening" msgstr "Amortiguación de ruta" -#: ../../configuration/protocols/bgp.rst:1189 +#: ../../configuration/protocols/bgp.rst:1211 msgid "Route Filtering" msgstr "Filtrado de rutas" -#: ../../configuration/protocols/bgp.rst:818 +#: ../../configuration/protocols/bgp.rst:840 msgid "Route Filtering Configuration" msgstr "Configuración de filtrado de rutas" @@ -10311,7 +11414,7 @@ msgstr "Política de mapa de ruta" msgid "Route Redistribution" msgstr "Redistribución de rutas" -#: ../../configuration/protocols/bgp.rst:904 +#: ../../configuration/protocols/bgp.rst:926 msgid "Route Reflector Configuration" msgstr "Configuración del reflector de ruta" @@ -10319,7 +11422,7 @@ msgstr "Configuración del reflector de ruta" msgid "Route Selection" msgstr "Selección de ruta" -#: ../../configuration/protocols/bgp.rst:737 +#: ../../configuration/protocols/bgp.rst:759 msgid "Route Selection Configuration" msgstr "Configuración de selección de ruta" @@ -10327,11 +11430,11 @@ msgstr "Configuración de selección de ruta" msgid "Route and Route6 Policy" msgstr "Política de rutas y rutas6" -#: ../../configuration/protocols/bgp.rst:690 +#: ../../configuration/protocols/bgp.rst:712 msgid "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." msgstr "La amortiguación de ruta que se describe en :rfc:`2439` le permite identificar rutas que fallan y regresan repetidamente. Si la amortiguación de ruta está habilitada, una ruta inestable acumula penalizaciones cada vez que la ruta falla y regresa. Si las penalizaciones acumuladas superan un umbral, la ruta ya no se anuncia. Esta es la supresión de ruta. Las rutas que han sido suprimidas se vuelven a ingresar en la tabla de enrutamiento solo cuando el monto de su penalización cae por debajo de un umbral." -#: ../../configuration/protocols/bgp.rst:1191 +#: ../../configuration/protocols/bgp.rst:1213 msgid "Route filter can be applied using a route-map:" msgstr "El filtro de ruta se puede aplicar usando un mapa de ruta:" @@ -10339,7 +11442,7 @@ msgstr "El filtro de ruta se puede aplicar usando un mapa de ruta:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "El mapa de rutas es un comando poderoso que brinda a los administradores de red una herramienta muy útil y flexible para la manipulación del tráfico." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Los mapas de ruta se pueden configurar para que coincidan con un estado de validación de RPKI específico. Esto permite la creación de políticas locales, que manejan las rutas BGP en función del resultado de la validación del origen del prefijo." @@ -10363,7 +11466,7 @@ msgstr "Vida útil del enrutador" msgid "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." msgstr "El enrutador recibe solicitudes de clientes DHCP en ``eth1`` y las retransmite al servidor en 10.0.1.4 en ``eth2``." -#: ../../configuration/vrf/index.rst:425 +#: ../../configuration/vrf/index.rst:444 msgid "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" msgstr "Las rutas exportadas desde un VRF de unidifusión a la VPN RIB deben aumentarse con dos parámetros:" @@ -10375,7 +11478,7 @@ msgstr "Rutas en el Nodo 2:" msgid "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." msgstr "Las rutas que se envían desde el proveedor, rs-server o el rol local del par (o si las recibe el cliente, rs-client o el rol local del par) se marcarán con un nuevo atributo Solo para el cliente (OTC)." -#: ../../configuration/protocols/bgp.rst:662 +#: ../../configuration/protocols/bgp.rst:684 #: ../../configuration/protocols/ospf.rst:92 #: ../../configuration/protocols/rip.rst:64 #: ../../configuration/protocols/static.rst:39 @@ -10391,7 +11494,7 @@ msgstr "Las rutas con este atributo solo se pueden enviar a su vecino si su func msgid "Routine" msgstr "Rutina" -#: ../../configuration/vrf/index.rst:82 +#: ../../configuration/vrf/index.rst:101 msgid "Routing" msgstr "Enrutamiento" @@ -10404,16 +11507,16 @@ msgid "Rule-Sets" msgstr "Conjuntos de reglas" #: ../../configuration/firewall/bridge.rst:287 -#: ../../configuration/firewall/ipv4.rst:957 +#: ../../configuration/firewall/ipv4.rst:980 #: ../../configuration/firewall/ipv6.rst:965 msgid "Rule-set overview" msgstr "Descripción general del conjunto de reglas" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "La regla 10 hace coincidir las solicitudes con el nombre de dominio ``node1.example.com`` reenvía al backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "La regla 10 hace coincidir las solicitudes con la ruta URL exacta ``/.well-known/xxx`` y redirige a la ubicación ``/certs/``." @@ -10421,11 +11524,11 @@ msgstr "La regla 10 hace coincidir las solicitudes con la ruta URL exacta ``/.we msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "La regla 20 coincide con las solicitudes con rutas URL que terminan en ``/mail`` o la ruta exacta ``/email/bar`` redirige a la ubicación ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "La regla 20 hace coincidir las solicitudes con el nombre de dominio ``node2.example.com`` reenvía al backend ``bk-api-02``" @@ -10447,7 +11550,7 @@ msgstr "Las reglas permiten controlar y enrutar el tráfico entrante a un backen msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Se crearán reglas para :ref:`source-nat` y :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:391 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Correr detrás de NAT" @@ -10511,7 +11614,7 @@ msgstr "SNMPv3 (versión 3 del protocolo SNMP) introdujo una gran cantidad de nu msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "La duplicación del puerto SPAN puede copiar el tráfico entrante/saliente de la interfaz a la interfaz especificada; normalmente la interfaz se puede conectar a algún equipo especial, como un sistema de control de comportamiento, un sistema de detección de intrusiones y un recolector de tráfico, y puede copiar todo el tráfico relacionado desde este puerto. El beneficio de duplicar el tráfico es que la aplicación está aislada del tráfico de origen y, por lo tanto, el procesamiento de la aplicación no afecta el tráfico ni el rendimiento del sistema." -#: ../../configuration/protocols/rpki.rst:127 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -10520,11 +11623,11 @@ msgstr "SSH" msgid "SSH :ref:`ssh_key_based_authentication`" msgstr "SSH :ref:`ssh_key_based_authentication`" -#: ../../configuration/system/login.rst:57 +#: ../../configuration/system/login.rst:61 msgid "SSH :ref:`ssh_operation`" msgstr "SSH :ref:`operación_ssh`" -#: ../../configuration/system/option.rst:44 +#: ../../configuration/system/option.rst:74 msgid "SSH client" msgstr "cliente SSH" @@ -10532,7 +11635,7 @@ msgstr "cliente SSH" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH proporciona un canal seguro a través de una red no segura en una arquitectura cliente-servidor, conectando una aplicación de cliente SSH con un servidor SSH. Las aplicaciones comunes incluyen inicio de sesión de línea de comandos remotos y ejecución de comandos remotos, pero cualquier servicio de red puede protegerse con SSH. La especificación del protocolo distingue entre dos versiones principales, denominadas SSH-1 y SSH-2." -#: ../../configuration/protocols/rpki.rst:137 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "Nombre de usuario SSH para establecer una conexión SSH con el servidor de caché." @@ -10544,8 +11647,11 @@ msgstr "SSH se diseñó como reemplazo de Telnet y de los protocolos de shell re msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID que se utilizará en tramas de administración IEEE 802.11" +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 -#: ../../configuration/vpn/sstp.rst:162 msgid "SSL Certificates" msgstr "Certificados SSL" @@ -10609,7 +11715,44 @@ msgstr "El escaneo no es compatible con todos los controladores inalámbricos y msgid "Script execution" msgstr "Ejecución de guiones" +#: ../../configuration/service/ipoe-server.rst:299 +#: ../../configuration/service/pppoe-server.rst:417 +#: ../../configuration/vpn/l2tp.rst:361 +#: ../../configuration/vpn/pptp.rst:285 +#: ../../configuration/vpn/sstp.rst:319 +msgid "Script to run before session interface comes up" +msgstr "Script to run before session interface comes up" + +#: ../../configuration/service/ipoe-server.rst:291 +#: ../../configuration/service/pppoe-server.rst:409 +#: ../../configuration/vpn/l2tp.rst:353 +#: ../../configuration/vpn/pptp.rst:277 +#: ../../configuration/vpn/sstp.rst:311 +msgid "Script to run when session interface changed by RADIUS CoA handling" +msgstr "Script to run when session interface changed by RADIUS CoA handling" + +#: ../../configuration/service/ipoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:413 +#: ../../configuration/vpn/l2tp.rst:357 +#: ../../configuration/vpn/pptp.rst:281 +#: ../../configuration/vpn/sstp.rst:315 +msgid "Script to run when session interface going to terminate" +msgstr "Script to run when session interface going to terminate" + +#: ../../configuration/service/ipoe-server.rst:303 +#: ../../configuration/service/pppoe-server.rst:421 +#: ../../configuration/vpn/l2tp.rst:365 +#: ../../configuration/vpn/pptp.rst:289 +#: ../../configuration/vpn/sstp.rst:323 +msgid "Script to run when session interface is completely configured and started" +msgstr "Script to run when session interface is completely configured and started" + #: ../../configuration/highavailability/index.rst:299 +#: ../../configuration/service/ipoe-server.rst:287 +#: ../../configuration/service/pppoe-server.rst:405 +#: ../../configuration/vpn/l2tp.rst:349 +#: ../../configuration/vpn/pptp.rst:273 +#: ../../configuration/vpn/sstp.rst:307 msgid "Scripting" msgstr "secuencias de comandos" @@ -10617,7 +11760,15 @@ msgstr "secuencias de comandos" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." -#: ../../configuration/vpn/sstp.rst:246 +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + +#: ../../configuration/service/ipoe-server.rst:186 +#: ../../configuration/service/pppoe-server.rst:148 +#: ../../configuration/vpn/l2tp.rst:191 +#: ../../configuration/vpn/pptp.rst:131 +#: ../../configuration/vpn/sstp.rst:164 msgid "Secret for Dynamic Authorization Extension server (DM/CoA)" msgstr "Secreto para el servidor de extensión de autorización dinámica (DM/CoA)" @@ -10634,7 +11785,7 @@ msgstr "Mensajes de seguridad/autenticación" msgid "See :rfc:`7761#section-4.1` for details." msgstr "See :rfc:`7761#section-4.1` for details." -#: ../../configuration/system/ip.rst:52 +#: ../../configuration/system/ip.rst:65 msgid "See below the different parameters available for the IPv4 **show** command:" msgstr "Vea a continuación los diferentes parámetros disponibles para el comando IPv4 **show**:" @@ -10670,7 +11821,7 @@ msgstr "Select TLS version used." msgid "Select cipher suite used for cryptographic operations. This setting is mandatory." msgstr "Seleccione el conjunto de cifrado utilizado para operaciones criptográficas. Esta configuración es obligatoria." -#: ../../configuration/vrf/index.rst:468 +#: ../../configuration/vrf/index.rst:487 msgid "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." msgstr "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." @@ -10694,6 +11845,10 @@ msgstr "Envíe todas las consultas DNS al servidor DNS IPv4/IPv6 especificado en msgid "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." msgstr "Envíe SSID vacío en balizas e ignore los marcos de solicitud de sondeo que no especifican el SSID completo, es decir, requieren que las estaciones conozcan el SSID." +#: ../../configuration/vpn/l2tp.rst:276 +msgid "Sent to the client (LAC) in the Host-Name attribute" +msgstr "Sent to the client (LAC) in the Host-Name attribute" + #: ../../configuration/system/console.rst:5 msgid "Serial Console" msgstr "Consola serie" @@ -10703,7 +11858,6 @@ msgid "Serial interfaces can be any interface which is directly connected to the msgstr "Las interfaces seriales pueden ser cualquier interfaz que esté directamente conectada a la CPU o al conjunto de chips (principalmente conocida como interfaz ttyS en Linux) o cualquier otro convertidor USB a serial (chips basados en Prolific PL2303 o FTDI FT232/FT4232)." #: ../../configuration/interfaces/openvpn.rst:325 -#: ../../configuration/vpn/sstp.rst:210 msgid "Server" msgstr "Servidor" @@ -10711,7 +11865,7 @@ msgstr "Servidor" msgid "Server:" msgstr "Servidor:" -#: ../../configuration/pki/index.rst:210 +#: ../../configuration/pki/index.rst:212 msgid "Server Certificate" msgstr "Certificado de servidor" @@ -10723,7 +11877,7 @@ msgstr "Configuración del servidor" msgid "Server Side" msgstr "Lado del servidor" -#: ../../configuration/service/ipoe-server.rst:156 +#: ../../configuration/service/ipoe-server.rst:157 msgid "Server configuration" msgstr "Configuración del servidor" @@ -10748,19 +11902,19 @@ msgstr "Establecer la dirección IPv4 o la dirección IPv6 del par BFD" msgid "Set BGP community-list to exactly match." msgstr "Configure la lista de la comunidad BGP para que coincida exactamente." -#: ../../configuration/policy/route-map.rst:318 +#: ../../configuration/policy/route-map.rst:321 msgid "Set BGP local preference attribute." msgstr "Establezca el atributo de preferencia local de BGP." -#: ../../configuration/policy/route-map.rst:336 +#: ../../configuration/policy/route-map.rst:339 msgid "Set BGP origin code." msgstr "Establezca el código de origen BGP." -#: ../../configuration/policy/route-map.rst:341 +#: ../../configuration/policy/route-map.rst:344 msgid "Set BGP originator ID attribute." msgstr "Establezca el atributo de ID del originador de BGP." -#: ../../configuration/policy/route-map.rst:359 +#: ../../configuration/policy/route-map.rst:362 msgid "Set BGP weight attribute" msgstr "Establecer atributo de peso BGP" @@ -10776,7 +11930,7 @@ msgstr "Establezca los criterios de coincidencia de entrada de IPSec, donde:" msgid "Set IP fragment match, where:" msgstr "Establecer coincidencia de fragmentos de IP, donde:" -#: ../../configuration/policy/route-map.rst:331 +#: ../../configuration/policy/route-map.rst:334 msgid "Set OSPF external metric-type." msgstr "Establezca el tipo de métrica externa de OSPF." @@ -10796,12 +11950,16 @@ msgstr "Establezca la regla SNAT 30 para que solo lleguen paquetes NAT de la red msgid "Set SSL certeficate <name> for service <name>" msgstr "Establecer certificado SSL<name> para servicio<name>" -#: ../../configuration/firewall/ipv4.rst:918 +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate <name> for service <name>" +msgstr "Set SSL certificate <name> for service <name>" + +#: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:280 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Establecer TTL a 300 segundos" @@ -10813,6 +11971,10 @@ msgstr "Establecer interfaz de túnel virtual" msgid "Set a container description" msgstr "Establecer una descripción de contenedor" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -10825,7 +11987,7 @@ msgstr "Establezca un destino y/o un puerto de origen. Entrada aceptada:" msgid "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." msgstr "Establezca un alias descriptivo y legible por humanos para esta conexión. El alias se utiliza, por ejemplo, con el comando :opcmd:`show interfaces` o herramientas de supervisión basadas en SNMP." -#: ../../configuration/system/login.rst:387 +#: ../../configuration/system/login.rst:391 msgid "Set a limit on the maximum number of concurrent logged-in users on the system." msgstr "Establezca un límite en el número máximo de usuarios conectados simultáneamente en el sistema." @@ -10833,7 +11995,7 @@ msgstr "Establezca un límite en el número máximo de usuarios conectados simul msgid "Set a meaningful description." msgstr "Establezca una descripción significativa." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Establezca una clave API con nombre. Cada clave tiene los mismos permisos completos en el sistema." @@ -10860,15 +12022,56 @@ msgstr "Establezca la acción para la política del mapa de rutas." msgid "Set action to take on entries matching this rule." msgstr "Establezca la acción a realizar en las entradas que coincidan con esta regla." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Establecer una API-KEY es la configuración mínima para obtener un punto final de API que funcione." -#: ../../configuration/vpn/sstp.rst:100 +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + +#: ../../configuration/service/ipoe-server.rst:60 +#: ../../configuration/service/ipoe-server.rst:88 +#: ../../configuration/service/pppoe-server.rst:38 +#: ../../configuration/vpn/l2tp.rst:26 +#: ../../configuration/vpn/pptp.rst:27 +#: ../../configuration/vpn/sstp.rst:53 msgid "Set authentication backend. The configured authentication backend is used for all queries." msgstr "Establecer backend de autenticación. El backend de autenticación configurado se utiliza para todas las consultas." -#: ../../configuration/container/index.rst:117 +#: ../../configuration/container/index.rst:122 msgid "Set container capabilities or permissions." msgstr "Establecer capacidades o permisos de contenedor." @@ -10880,6 +12083,19 @@ msgstr "Establezca la demora entre los mensajes ARP gratuitos enviados en una in msgid "Set delay for second set of gratuitous ARPs after transition to MASTER." msgstr "Establezca la demora para el segundo conjunto de ARP gratuitos después de la transición a MAESTRO." +#: ../../configuration/service/ipoe-server.rst:356 +#: ../../configuration/service/pppoe-server.rst:522 +#: ../../configuration/vpn/l2tp.rst:476 +#: ../../configuration/vpn/pptp.rst:400 +#: ../../configuration/vpn/sstp.rst:434 +msgid "Set description." +msgstr "Set description." + +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 +msgid "Set description `<text>` for dynamic DNS service being configured." +msgstr "Set description `<text>` for dynamic DNS service being configured." + #: ../../configuration/policy/as-path-list.rst:21 msgid "Set description for as-path-list policy." msgstr "Establezca la descripción de la política como lista de rutas." @@ -10956,7 +12172,7 @@ msgstr "Configure eth1 para que sea la interfaz de escucha para el relé DHCPv6. msgid "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." msgstr "Establezca el tiempo de ejecución en el formato común cron_time. Un cron`<spec> ` de ``30 */6 * * *`` ejecutaría `<task> ` en el minuto 30 después de cada 6 horas." -#: ../../configuration/policy/route-map.rst:251 +#: ../../configuration/policy/route-map.rst:254 msgid "Set extcommunity bandwidth" msgstr "Establecer el ancho de banda de la comunidad externa" @@ -11025,6 +12241,10 @@ msgstr "Establezca el número máximo de paquetes en exceso de la tasa." msgid "Set minimum time interval for refreshing gratuitous ARPs while MASTER." msgstr "Establezca un intervalo de tiempo mínimo para actualizar ARP gratuitos mientras es MAESTRO." +#: ../../configuration/vpn/l2tp.rst:72 +msgid "Set mode for IPsec authentication between VyOS and L2TP clients." +msgstr "Set mode for IPsec authentication between VyOS and L2TP clients." + #: ../../configuration/highavailability/index.rst:285 msgid "Set number of gratuitous ARP messages to send at a time after transition to MASTER." msgstr "Establezca el número de mensajes ARP gratuitos para enviar a la vez después de la transición a MAESTRO." @@ -11055,7 +12275,11 @@ msgstr "Establecer modificaciones de paquetes: punto de código de servicios dif msgid "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." msgstr "Establezca parámetros para hacer coincidir las fuentes vistas recientemente. Esta coincidencia podría usarse viendo el conteo (la dirección de origen se vio más de <1-255> veces) y/o el tiempo (la dirección de origen se vio en los últimos <0-4294967295> segundos)." -#: ../../configuration/policy/route-map.rst:350 +#: ../../configuration/vpn/l2tp.rst:76 +msgid "Set predefined shared secret phrase." +msgstr "Set predefined shared secret phrase." + +#: ../../configuration/policy/route-map.rst:353 msgid "Set prefixes to table." msgstr "Establecer prefijos en la tabla." @@ -11063,7 +12287,7 @@ msgstr "Establecer prefijos en la tabla." msgid "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." msgstr "Configure el proxy para todas las conexiones iniciadas por VyOS, incluidos HTTP, HTTPS y FTP (ftp anónimo)." -#: ../../configuration/policy/route-map.rst:260 +#: ../../configuration/policy/route-map.rst:263 msgid "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Establezca el valor objetivo de la ruta en formato ``<0-65535:0-4294967295>`` o ``<IP:0-65535> ``." @@ -11080,7 +12304,7 @@ msgstr "Establezca la acción de la regla para descartar." msgid "Set service to bind on IP address, by default listen on any IPv4 and IPv6" msgstr "Configure el servicio para que se vincule a la dirección IP, por defecto escuche en cualquier IPv4 e IPv6" -#: ../../configuration/policy/route-map.rst:265 +#: ../../configuration/policy/route-map.rst:268 msgid "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Establezca el valor del sitio de origen en formato ``<0-65535:0-4294967295>`` o ``<IP:0-65535> ``." @@ -11096,7 +12320,7 @@ msgstr "Establezca alguna métrica para las rutas aprendidas de un vecino en par msgid "Set source-address to your local IP (LAN)." msgstr "Establezca la dirección de origen en su IP local (LAN)." -#: ../../configuration/policy/route-map.rst:346 +#: ../../configuration/policy/route-map.rst:349 msgid "Set source IP/IPv6 address for route." msgstr "Configure la dirección IP/IPv6 de origen para la ruta." @@ -11105,7 +12329,7 @@ msgstr "Configure la dirección IP/IPv6 de origen para la ruta." msgid "Set source address or prefix to match." msgstr "Establezca la dirección de origen o el prefijo para que coincida." -#: ../../configuration/policy/route-map.rst:354 +#: ../../configuration/policy/route-map.rst:357 msgid "Set tag value for routing protocol." msgstr "Establezca el valor de la etiqueta para el protocolo de enrutamiento." @@ -11113,8 +12337,8 @@ msgstr "Establezca el valor de la etiqueta para el protocolo de enrutamiento." msgid "Set the \"recursion desired\" bit in requests to the upstream nameserver." msgstr "Establezca el bit "recursividad deseada" en las solicitudes al servidor de nombres ascendente." -#: ../../configuration/policy/route-map.rst:290 -#: ../../configuration/policy/route-map.rst:303 +#: ../../configuration/policy/route-map.rst:293 +#: ../../configuration/policy/route-map.rst:306 msgid "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." msgstr "Establezca la dirección BGP nexthop en la dirección del par. Para un mapa de ruta entrante, esto significa que se usa la dirección IP de nuestro compañero. Para un mapa de ruta saliente, esto significa que nuestra dirección IP se usa para establecer el emparejamiento con nuestro vecino." @@ -11175,6 +12399,10 @@ msgstr "Establezca el bloque local de enrutamiento de segmentos, es decir, el ra msgid "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." msgstr "Establezca el bloque local de enrutamiento de segmento, es decir, el rango de etiqueta bajo utilizado por MPLS para almacenar la etiqueta en la FIB de MPLS para el SID de prefijo. Tenga en cuenta que el tamaño del bloque no puede exceder 65535.Bloque local de enrutamiento de segmento, el comando negativo siempre desarma ambos." +#: ../../configuration/container/index.rst:99 +msgid "Set the User ID or Group ID of the container" +msgstr "Set the User ID or Group ID of the container" + #: ../../configuration/protocols/pim.rst:147 msgid "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." @@ -11183,6 +12411,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Establezca el nivel de registro ``sshd``. El valor predeterminado es ``info``." @@ -11195,6 +12427,14 @@ msgstr "Establecer la dirección del puerto backend" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Establezca la dirección del servidor backend al que se reenviará el tráfico entrante" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Establezca la versión de VRRP predeterminada que se utilizará. El valor predeterminado es 2, pero las instancias de IPv6 siempre usarán la versión 3." @@ -11231,6 +12471,10 @@ msgstr "Establezca la configuración global para paquetes no válidos." msgid "Set the global setting for related connections." msgstr "Establezca la configuración global para las conexiones relacionadas." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Configure el puerto de escucha de la API local, esto no tiene ningún efecto en el servidor web. El valor predeterminado es el puerto 8080" @@ -11247,6 +12491,10 @@ msgstr "Establezca la longitud máxima de relleno A-MPDU pre-EOF que la estació msgid "Set the maximum number of TCP half-open connections." msgstr "Establezca el número máximo de conexiones TCP semiabiertas." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Establezca el nombre de la entrada PKI SSL :abbr:`CA (Autoridad de certificación)` utilizada para la autenticación del lado remoto. Si se especifica un certificado de CA intermedio, todos los certificados de CA principales que existen en la PKI, como la CA raíz o las CA intermedias adicionales, se utilizarán automáticamente durante la validación del certificado para garantizar que la cadena de confianza completa esté disponible." @@ -11255,11 +12503,11 @@ msgstr "Establezca el nombre de la entrada PKI SSL :abbr:`CA (Autoridad de certi msgid "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." msgstr "Establezca el nombre del par de claves del cliente x509 utilizado para autenticarse en el sistema 802.1x. Todos los certificados de CA principales del certificado de cliente, como las CA intermedias y raíz, se enviarán como parte del protocolo de enlace EAP-TLS." -#: ../../configuration/interfaces/bridge.rst:148 +#: ../../configuration/interfaces/bridge.rst:157 msgid "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" msgstr "Establezca el indicador de ID de VLAN nativa de la interfaz. Cuando un paquete de datos sin una etiqueta VLAN ingresa al puerto, el paquete de datos se verá obligado a agregar una etiqueta de una identificación de VLAN específica. Cuando la bandera de identificación de vlan fluye, la etiqueta de la identificación de vlan se eliminará" -#: ../../configuration/policy/route-map.rst:284 +#: ../../configuration/policy/route-map.rst:287 msgid "Set the next-hop as unchanged. Pass through the route-map without changing its value" msgstr "Establece el siguiente salto como sin cambios. Pase por el mapa de ruta sin cambiar su valor" @@ -11271,7 +12519,15 @@ msgstr "Establezca el número máximo de intentos de retransmisión de TCP." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Establezca la cantidad de fallas de verificación de estado antes de que una interfaz se marque como no disponible, el rango de número es 1 a 10, predeterminado 1. O establezca la cantidad de verificaciones de estado exitosas antes de que una interfaz se vuelva a agregar al grupo de interfaces, el rango de número es 1 a 10, por defecto 1." -#: ../../configuration/system/login.rst:84 +#: ../../configuration/protocols/rpki.rst:119 +msgid "Set the number of seconds the router waits until retrying to connect to the cache server." +msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." + +#: ../../configuration/protocols/rpki.rst:112 +msgid "Set the number of seconds the router waits until the router expires the cache." +msgstr "Set the number of seconds the router waits until the router expires the cache." + +#: ../../configuration/system/login.rst:88 msgid "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." msgstr "Configure las opciones para esta clave pública. Consulte la página de manual de ssh ``authorized_keys`` para obtener detalles sobre lo que puede especificar aquí. Para colocar un carácter ``"`` en el campo de opciones, use ``"``, por ejemplo ``from="10.0.0.0/24"`` para restringir desde dónde se puede conectar el usuario cuando usa esta tecla." @@ -11291,11 +12547,11 @@ msgstr "Set the peer's key used to receive (RX) traffic" msgid "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." msgstr "Establezca el id. de sesión del par, que es un valor entero de 32 bits asignado a la sesión por el par. El valor utilizado debe coincidir con el valor de session_id que se utiliza en el par." -#: ../../configuration/container/index.rst:98 +#: ../../configuration/container/index.rst:103 msgid "Set the restart behavior of the container." msgstr "Establezca el comportamiento de reinicio del contenedor." -#: ../../configuration/policy/route-map.rst:323 +#: ../../configuration/policy/route-map.rst:326 msgid "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." msgstr "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." @@ -11307,6 +12563,10 @@ msgstr "Configure la tabla de enrutamiento para reenviar paquetes." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Establezca la identificación de la sesión, que es un valor entero de 32 bits. Identifica de forma única la sesión que se está creando. El valor utilizado debe coincidir con el valor peer_session_id que se utiliza en el par." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Establece el tamaño de la tabla hash. La tabla hash de seguimiento de conexiones hace que la búsqueda en la tabla de seguimiento de conexiones sea más rápida. La tabla hash utiliza "cubos" para registrar entradas en la tabla de seguimiento de conexiones." @@ -11328,15 +12588,27 @@ msgstr "Establezca el tiempo de espera en segundos para un protocolo o estado en msgid "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." msgstr "Establezca la identificación del túnel, que es un valor entero de 32 bits. Identifica de forma exclusiva el túnel en el que se creará la sesión." -#: ../../configuration/firewall/ipv4.rst:922 +#: ../../configuration/firewall/ipv4.rst:945 #: ../../configuration/firewall/ipv6.rst:931 msgid "Set the window scale factor for TCP window scaling" msgstr "Set the window scale factor for TCP window scaling" -#: ../../configuration/system/login.rst:124 +#: ../../configuration/system/login.rst:128 msgid "Set window of concurrently valid codes." msgstr "Establecer ventana de códigos válidos concurrentemente." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Establece el nombre de la imagen en el registro del concentrador" @@ -11357,7 +12629,7 @@ msgstr "Establece la identificación única para esta interfaz vxlan. No estoy s msgid "Setting VRRP group priority" msgstr "Configuración de la prioridad del grupo VRRP" -#: ../../configuration/service/dhcp-server.rst:231 +#: ../../configuration/service/dhcp-server.rst:287 msgid "Setting name" msgstr "Nombre del ajuste" @@ -11389,7 +12661,16 @@ msgstr "Setting up certificates:" msgid "Setting up tunnel:" msgstr "Setting up tunnel:" -#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/system/option.rst:42 +#: ../../configuration/system/option.rst:53 +msgid "Setting will only become active with the next reboot!" +msgstr "Setting will only become active with the next reboot!" + +#: ../../configuration/service/dhcp-server.rst:429 +msgid "Setup DHCP HA for network 192.0.2.0/24" +msgstr "Setup DHCP HA for network 192.0.2.0/24" + +#: ../../configuration/service/dhcp-server.rst:413 msgid "Setup DHCP failover for network 192.0.2.0/24" msgstr "Configurar la conmutación por error de DHCP para la red 192.0.2.0/24" @@ -11397,15 +12678,19 @@ msgstr "Configurar la conmutación por error de DHCP para la red 192.0.2.0/24" msgid "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." msgstr "Configure la contraseña cifrada para el nombre de usuario dado. Esto es útil para transferir una contraseña cifrada de un sistema a otro." -#: ../../configuration/system/login.rst:262 +#: ../../configuration/system/login.rst:266 msgid "Setup the `<timeout>` in seconds when querying the RADIUS server." msgstr "Configure el `<timeout> ` en segundos al consultar el servidor RADIUS." -#: ../../configuration/system/login.rst:331 +#: ../../configuration/system/login.rst:335 msgid "Setup the `<timeout>` in seconds when querying the TACACS server." msgstr "Configure el `<timeout> ` en segundos al consultar el servidor TACACS." -#: ../../configuration/service/dns.rst:327 +#: ../../configuration/service/dns.rst:430 +msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." +msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:341 msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." @@ -11413,11 +12698,11 @@ msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS p msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." msgstr "Configure el nombre de host DNS dinámico `<hostname> ` asociado con el proveedor DynDNS identificado por `<service> ` cuando la dirección IP en la interfaz `<interface> ` cambios." -#: ../../configuration/system/option.rst:31 +#: ../../configuration/system/option.rst:61 msgid "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." msgstr "Varios comandos utilizan cURL para iniciar transferencias. Configure la dirección IPv4/IPv6 de origen local utilizada para todas las operaciones de cURL." -#: ../../configuration/system/option.rst:36 +#: ../../configuration/system/option.rst:66 msgid "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." msgstr "Varios comandos utilizan curl para iniciar transferencias. Configure la interfaz de origen local utilizada para todas las operaciones CURL." @@ -11445,25 +12730,25 @@ msgstr "Capacidades GI cortas para 20 y 40 MHz" msgid "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." msgstr "Se puede permitir que las ráfagas cortas excedan el límite. En la creación, el tráfico de Rate-Control se almacena con tokens que corresponden a la cantidad de tráfico que se puede explotar de una sola vez. Los tokens llegan a un ritmo constante, hasta que el balde está lleno." -#: ../../configuration/vrf/index.rst:488 +#: ../../configuration/vrf/index.rst:507 msgid "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." msgstr "Sintaxis de acceso directo para especificar la fuga automática de vrf VRFNAME al VRF actual utilizando la VPN RIB como intermediario. El RD y el RT se derivan automáticamente y no deben especificarse explícitamente para los VRF de origen o de destino." -#: ../../configuration/protocols/bgp.rst:953 +#: ../../configuration/protocols/bgp.rst:975 #: ../../configuration/protocols/mpls.rst:225 msgid "Show" msgstr "Espectáculo" -#: ../../configuration/service/dhcp-server.rst:416 +#: ../../configuration/service/dhcp-server.rst:475 msgid "Show DHCP server daemon log file" msgstr "Mostrar el archivo de registro del demonio del servidor DHCP" -#: ../../configuration/service/dhcp-server.rst:668 +#: ../../configuration/service/dhcp-server.rst:729 msgid "Show DHCPv6 server daemon log file" msgstr "Mostrar el archivo de registro del demonio del servidor DHCPv6" #: ../../configuration/firewall/bridge.rst:306 -#: ../../configuration/firewall/ipv4.rst:1115 +#: ../../configuration/firewall/ipv4.rst:1138 #: ../../configuration/firewall/ipv6.rst:1138 msgid "Show Firewall log" msgstr "Mostrar registro de cortafuegos" @@ -11528,27 +12813,27 @@ msgstr "Mostrar modelo de módulo WWAN." msgid "Show WWAN module signal strength." msgstr "Muestra la intensidad de la señal del módulo WWAN." -#: ../../configuration/container/index.rst:163 +#: ../../configuration/container/index.rst:199 msgid "Show a list available container networks" msgstr "Mostrar una lista de redes de contenedores disponibles" -#: ../../configuration/pki/index.rst:297 +#: ../../configuration/pki/index.rst:328 msgid "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." msgstr "Muestra una lista de los certificados :abbr:`CA (Autoridad de certificación)` instalados." -#: ../../configuration/pki/index.rst:332 +#: ../../configuration/pki/index.rst:363 msgid "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." msgstr "Muestra una lista de las :abbr:`CRL (Lista de revocación de certificados)` instaladas." -#: ../../configuration/pki/index.rst:315 +#: ../../configuration/pki/index.rst:346 msgid "Show a list of installed certificates" msgstr "Mostrar una lista de certificados instalados" -#: ../../configuration/protocols/bfd.rst:98 +#: ../../configuration/protocols/bfd.rst:105 msgid "Show all BFD peers" msgstr "Mostrar todos los compañeros de BFD" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Mostrar las funciones de descarga disponibles en ` dado<interface> `" @@ -11556,23 +12841,23 @@ msgstr "Mostrar las funciones de descarga disponibles en ` dado<interface> `" msgid "Show binded qat device interrupts to certain core." msgstr "Muestra las interrupciones del dispositivo qat vinculadas a cierto núcleo." -#: ../../configuration/interfaces/bridge.rst:283 +#: ../../configuration/interfaces/bridge.rst:292 msgid "Show bridge `<name>` fdb displays the current forwarding table:" msgstr "Mostrar puente `<name> ` fdb muestra la tabla de reenvío actual:" -#: ../../configuration/interfaces/bridge.rst:310 +#: ../../configuration/interfaces/bridge.rst:319 msgid "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." msgstr "Mostrar puente `<name> ` mdb muestra la tabla actual de miembros del grupo de multidifusión. La tabla se rellena automáticamente mediante la indagación de IGMP y MLD en el controlador del puente." #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." msgstr "Muestra información breve de la interfaz." -#: ../../configuration/system/ipv6.rst:46 +#: ../../configuration/system/ipv6.rst:59 msgid "Show commands" msgstr "Mostrar comandos" @@ -11584,11 +12869,11 @@ msgstr "Muestra los puertos seriales configurados y su respectiva configuración msgid "Show connection data of load balanced traffic:" msgstr "Mostrar datos de conexión del tráfico con equilibrio de carga:" -#: ../../configuration/service/conntrack-sync.rst:132 +#: ../../configuration/service/conntrack-sync.rst:141 msgid "Show connection syncing external cache entries" msgstr "Mostrar conexión sincronizando entradas de caché externas" -#: ../../configuration/service/conntrack-sync.rst:136 +#: ../../configuration/service/conntrack-sync.rst:145 msgid "Show connection syncing internal cache entries" msgstr "Mostrar conexión sincronizando entradas de caché interna" @@ -11610,7 +12895,7 @@ msgstr "Mostrar información detallada sobre los enlaces físicos subyacentes en #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -11642,7 +12927,7 @@ msgstr "Mostrar información general sobre la interfaz específica de WireGuard" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Mostrar información sobre el servicio Wireguard. También muestra el último apretón de manos." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Mostrar información sobre el ` físico<interface> `" @@ -11654,44 +12939,44 @@ msgstr "Show list of IPs currently blocked by SSH dynamic-protection." msgid "Show logs for mDNS repeater service." msgstr "Show logs for mDNS repeater service." -#: ../../configuration/container/index.rst:159 +#: ../../configuration/container/index.rst:195 msgid "Show logs from a given container" msgstr "Mostrar registros de un contenedor dado" -#: ../../configuration/service/dhcp-server.rst:420 +#: ../../configuration/service/dhcp-server.rst:479 msgid "Show logs from all DHCP client processes." msgstr "Muestra los registros de todos los procesos del cliente DHCP." -#: ../../configuration/service/dhcp-server.rst:672 +#: ../../configuration/service/dhcp-server.rst:733 msgid "Show logs from all DHCPv6 client processes." msgstr "Muestra registros de todos los procesos de cliente DHCPv6." -#: ../../configuration/service/dhcp-server.rst:424 +#: ../../configuration/service/dhcp-server.rst:483 msgid "Show logs from specific `interface` DHCP client process." msgstr "Muestra los registros del proceso de cliente DHCP de `interfaz` específico." -#: ../../configuration/service/dhcp-server.rst:676 +#: ../../configuration/service/dhcp-server.rst:737 msgid "Show logs from specific `interface` DHCPv6 client process." msgstr "Muestra los registros del proceso de cliente DHCPv6 de `interfaz` específico." -#: ../../configuration/pki/index.rst:311 +#: ../../configuration/pki/index.rst:342 msgid "Show only information for specified Certificate Authority." msgstr "Mostrar solo información para la autoridad de certificación especificada." -#: ../../configuration/pki/index.rst:328 +#: ../../configuration/pki/index.rst:359 msgid "Show only information for specified certificate." msgstr "Mostrar solo información para el certificado especificado." -#: ../../configuration/service/dhcp-server.rst:478 -#: ../../configuration/service/dhcp-server.rst:699 +#: ../../configuration/service/dhcp-server.rst:537 +#: ../../configuration/service/dhcp-server.rst:760 msgid "Show only leases in the specified pool." msgstr "Mostrar solo arrendamientos en el grupo especificado." -#: ../../configuration/service/dhcp-server.rst:708 +#: ../../configuration/service/dhcp-server.rst:769 msgid "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" msgstr "Mostrar solo arrendamientos con el estado especificado. Estados posibles: abandonado, activo, todo, copia de seguridad, caducado, libre, liberado, restablecer (predeterminado = activo)" -#: ../../configuration/service/dhcp-server.rst:496 +#: ../../configuration/service/dhcp-server.rst:555 msgid "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" msgstr "Mostrar solo arrendamientos con el estado especificado. Estados posibles: todo, activo, libre, caducado, liberado, abandonado, restablecer, copia de seguridad (predeterminado = activo)" @@ -11703,23 +12988,23 @@ msgstr "Muestra la entrada de la tabla de enrutamiento para la ruta predetermina msgid "Show specific MACsec interface information" msgstr "Mostrar información específica de la interfaz MACsec" -#: ../../configuration/vpn/site2site_ipsec.rst:221 +#: ../../configuration/vpn/site2site_ipsec.rst:224 msgid "Show status of new setup:" msgstr "Mostrar el estado de la nueva configuración:" -#: ../../configuration/service/dhcp-server.rst:447 +#: ../../configuration/service/dhcp-server.rst:506 msgid "Show statuses of all active leases:" msgstr "Mostrar estados de todas las concesiones activas:" -#: ../../configuration/service/dhcp-server.rst:465 +#: ../../configuration/service/dhcp-server.rst:524 msgid "Show statuses of all active leases granted by local (this server) or remote (failover server):" msgstr "Show statuses of all active leases granted by local (this server) or remote (failover server):" -#: ../../configuration/service/dhcp-server.rst:432 +#: ../../configuration/service/dhcp-server.rst:491 msgid "Show the DHCP server statistics:" msgstr "Mostrar las estadísticas del servidor DHCP:" -#: ../../configuration/service/dhcp-server.rst:443 +#: ../../configuration/service/dhcp-server.rst:502 msgid "Show the DHCP server statistics for the specified pool." msgstr "Muestra las estadísticas del servidor DHCP para el grupo especificado." @@ -11731,11 +13016,11 @@ msgstr "Muestra el registro del servidor de la consola." msgid "Show the full config uploaded to the QAT device." msgstr "Muestra la configuración completa cargada en el dispositivo QAT." -#: ../../configuration/container/index.rst:151 +#: ../../configuration/container/index.rst:187 msgid "Show the list of all active containers." msgstr "Muestra la lista de todos los contenedores activos." -#: ../../configuration/container/index.rst:155 +#: ../../configuration/container/index.rst:191 msgid "Show the local container images." msgstr "Muestra las imágenes del contenedor local." @@ -11747,7 +13032,7 @@ msgstr "Muestra los registros de un conjunto de reglas específico." msgid "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." -#: ../../configuration/firewall/ipv4.rst:1125 +#: ../../configuration/firewall/ipv4.rst:1148 msgid "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." @@ -11760,15 +13045,15 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "mostrar la ruta" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Mostrar información del transceptor de los módulos de complemento, por ejemplo, SFP+, QSFP" -#: ../../configuration/protocols/bfd.rst:179 +#: ../../configuration/protocols/bfd.rst:186 msgid "Showing BFD monitored static routes" msgstr "Mostrando rutas estáticas monitoreadas por BFD" -#: ../../configuration/service/dhcp-server.rst:684 +#: ../../configuration/service/dhcp-server.rst:745 msgid "Shows status of all assigned leases:" msgstr "Muestra el estado de todos los arrendamientos asignados:" @@ -11796,7 +13081,7 @@ msgstr "Tarjeta miniPCIe (LTE) Sierra Wireless AirPrime MC7455" msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" msgstr "Sierra Wireless AirPrime MC7710 tarjeta miniPCIe (LTE)" -#: ../../configuration/vpn/site2site_ipsec.rst:427 +#: ../../configuration/vpn/site2site_ipsec.rst:430 msgid "Similar combinations are applicable for the dead-peer-detection." msgstr "Se aplican combinaciones similares para la detección de pares muertos." @@ -11828,6 +13113,14 @@ msgstr "Dado que se trata de una configuración de oficinas centrales y sucursal msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." msgstr "Dado que el servidor RADIUS sería un único punto de falla, se pueden configurar varios servidores RADIUS y se utilizarán posteriormente." +#: ../../configuration/service/ipoe-server.rst:131 +#: ../../configuration/service/pppoe-server.rst:93 +#: ../../configuration/vpn/l2tp.rst:136 +#: ../../configuration/vpn/pptp.rst:76 +#: ../../configuration/vpn/sstp.rst:109 +msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" +msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" + #: ../../configuration/service/mdns.rst:13 msgid "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Dado que el protocolo mDNS envía los registros AA en el propio paquete, el repetidor no necesita falsificar la dirección de origen. En cambio, la dirección de origen es la de la interfaz que repite el paquete." @@ -11836,6 +13129,10 @@ msgstr "Dado que el protocolo mDNS envía los registros AA en el propio paquete, msgid "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." +#: ../../configuration/service/ids.rst:98 +msgid "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" +msgstr "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" + #: ../../configuration/interfaces/vxlan.rst:157 msgid "Single VXLAN device (SVD)" msgstr "Single VXLAN device (SVD)" @@ -11857,7 +13154,7 @@ msgstr "El modo sitio a sitio es compatible con x.509 pero no lo requiere y tamb msgid "Site to Site VPN" msgstr "VPN de sitio a sitio" -#: ../../configuration/pki/index.rst:275 +#: ../../configuration/pki/index.rst:306 msgid "Size of the RSA key." msgstr "Size of the RSA key." @@ -11865,6 +13162,10 @@ msgstr "Size of the RSA key." msgid "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." msgstr "La selección de esclavos para el tráfico saliente se realiza de acuerdo con la política hash de transmisión, que se puede cambiar de la política XOR simple predeterminada a través de la opción :cfgcmd:`hash-policy`, documentada a continuación." +#: ../../configuration/service/ids.rst:110 +msgid "So, firewall configuration needed for this setup:" +msgstr "So, firewall configuration needed for this setup:" + #: ../../configuration/nat/nat44.rst:554 msgid "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." msgstr "Entonces, en nuestra política de firewall, queremos permitir el tráfico que ingresa en la interfaz externa, con destino al puerto TCP 80 y la dirección IP de 192.168.0.100." @@ -11885,7 +13186,14 @@ msgstr "Algunos ISP por defecto solo delegan un prefijo /64. Para solicitar un t msgid "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." msgstr "Algunos entornos de TI requieren el uso de un proxy para conectarse a Internet. Sin esta configuración, las actualizaciones de VyOS no podrían instalarse directamente mediante el comando :opcmd:`add system image` (:ref:`update_vyos`)." -#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/service/ipoe-server.rst:140 +#: ../../configuration/service/pppoe-server.rst:102 +#: ../../configuration/vpn/pptp.rst:85 +#: ../../configuration/vpn/sstp.rst:118 +msgid "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." +msgstr "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." + +#: ../../configuration/vpn/l2tp.rst:145 msgid "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." msgstr "Algunos servidores RADIUS_ utilizan una lista de control de acceso que permite o deniega consultas, asegúrese de agregar su enrutador VyOS a la lista de clientes permitidos." @@ -11893,6 +13201,10 @@ msgstr "Algunos servidores RADIUS_ utilizan una lista de control de acceso que p msgid "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." msgstr "Algunos proveedores de servicios de aplicaciones (ASP) operan una puerta de enlace VPN para proporcionar acceso a sus recursos internos y requieren que una organización de conexión traduzca todo el tráfico a la red del proveedor de servicios a una dirección de origen proporcionada por el ASP." +#: ../../configuration/container/index.rst:171 +msgid "Some container registries require credentials to be used." +msgstr "Some container registries require credentials to be used." + #: ../../configuration/firewall/general-legacy.rst:38 msgid "Some firewall settings are global and have an affect on the whole system." msgstr "Algunas configuraciones de firewall son globales y tienen un efecto en todo el sistema." @@ -11933,11 +13245,11 @@ msgstr "Algunos usuarios tienden a conectar sus dispositivos móviles mediante W msgid "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." msgstr "A veces, las líneas de opción en la configuración de OpenVPN generada requieren comillas. Esto se hace a través de un truco en nuestro generador de configuración. Puede pasar comillas usando la instrucción ``"``." -#: ../../configuration/service/dhcp-server.rst:703 +#: ../../configuration/service/dhcp-server.rst:764 msgid "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" msgstr "Ordene la salida por la clave especificada. Claves posibles: expira, iaid_duid, ip, last_comm, pool, restante, estado, tipo (predeterminado = ip)" -#: ../../configuration/service/dhcp-server.rst:491 +#: ../../configuration/service/dhcp-server.rst:550 msgid "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" msgstr "Ordene la salida por la clave especificada. Claves posibles: ip, dirección_de_hardware, estado, inicio, fin, restante, grupo, nombre de host (predeterminado = ip)" @@ -11949,7 +13261,16 @@ msgstr "Dirección de la fuente" msgid "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." msgstr "Dirección IP de origen utilizada para la capa subyacente de VXLAN. Esto es obligatorio cuando se usa VXLAN a través de L2VPN/EVPN." -#: ../../configuration/vpn/sstp.rst:268 +#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:208 +#: ../../configuration/service/pppoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:170 +#: ../../configuration/vpn/l2tp.rst:157 +#: ../../configuration/vpn/l2tp.rst:213 +#: ../../configuration/vpn/pptp.rst:97 +#: ../../configuration/vpn/pptp.rst:153 +#: ../../configuration/vpn/sstp.rst:130 +#: ../../configuration/vpn/sstp.rst:186 msgid "Source IPv4 address used in all RADIUS server queires." msgstr "Dirección IPv4 de origen utilizada en todas las consultas del servidor RADIUS." @@ -11961,11 +13282,11 @@ msgstr "Reglas NAT de origen" msgid "Source Prefix" msgstr "Prefijo de origen" -#: ../../configuration/system/login.rst:276 +#: ../../configuration/system/login.rst:280 msgid "Source all connections to the RADIUS servers from given VRF `<name>`." msgstr "Fuente todas las conexiones a los servidores RADIUS de VRF dado `<name> `." -#: ../../configuration/system/login.rst:345 +#: ../../configuration/system/login.rst:349 msgid "Source all connections to the TACACS servers from given VRF `<name>`." msgstr "Fuente todas las conexiones a los servidores TACACS de VRF dado `<name> `." @@ -11973,7 +13294,7 @@ msgstr "Fuente todas las conexiones a los servidores TACACS de VRF dado `<name> msgid "Source protocol to match." msgstr "Protocolo de origen para que coincida." -#: ../../configuration/vpn/ipsec.rst:225 +#: ../../configuration/vpn/ipsec.rst:229 msgid "Source tunnel from dummy interface" msgstr "Source tunnel from dummy interface" @@ -12001,15 +13322,48 @@ msgstr "Configuración de ahorro de energía de multiplexación espacial (SMPS)" msgid "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." msgstr "Especificar nhs hace que todos los paquetes de multidifusión se repitan en cada próximo salto configurado estáticamente." -#: ../../configuration/vpn/sstp.rst:238 +#: ../../configuration/service/ipoe-server.rst:178 +#: ../../configuration/service/pppoe-server.rst:140 +#: ../../configuration/vpn/l2tp.rst:183 +#: ../../configuration/vpn/pptp.rst:123 +#: ../../configuration/vpn/sstp.rst:156 msgid "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" msgstr "Especifica la dirección IP para el servidor de extensión de autorización dinámica (DM/CoA)" -#: ../../configuration/vpn/sstp.rst:194 +#: ../../configuration/service/pppoe-server.rst:470 +#: ../../configuration/vpn/l2tp.rst:424 +#: ../../configuration/vpn/pptp.rst:348 +#: ../../configuration/vpn/sstp.rst:382 +msgid "Specifies IPv4 negotiation preference." +msgstr "Specifies IPv4 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:345 +#: ../../configuration/vpn/l2tp.rst:289 +#: ../../configuration/vpn/pptp.rst:213 +#: ../../configuration/vpn/sstp.rst:247 +msgid "Specifies IPv6 negotiation preference." +msgstr "Specifies IPv6 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:552 +msgid "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" +msgstr "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" + +#: ../../configuration/service/pppoe-server.rst:502 +#: ../../configuration/vpn/l2tp.rst:456 +#: ../../configuration/vpn/pptp.rst:380 +#: ../../configuration/vpn/sstp.rst:414 +msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." +msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." + +#: ../../configuration/vpn/sstp.rst:200 msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." msgstr "Especifica la preferencia de negociación :abbr:`MPPE (Microsoft Point-to-Point Encryption)`." -#: ../../configuration/vrf/index.rst:477 +#: ../../configuration/service/ipoe-server.rst:81 +msgid "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." +msgstr "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." + +#: ../../configuration/vrf/index.rst:496 msgid "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." msgstr "Especifica un mapa de ruta opcional que se aplicará a las rutas importadas o exportadas entre el VRF de unidifusión actual y la VPN." @@ -12017,6 +13371,13 @@ msgstr "Especifica un mapa de ruta opcional que se aplicará a las rutas importa msgid "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." msgstr "Especifica una red ascendente `<interface> ` del que responde `<server> ` y otros agentes de relevo serán aceptados." +#: ../../configuration/service/pppoe-server.rst:388 +#: ../../configuration/vpn/l2tp.rst:332 +#: ../../configuration/vpn/pptp.rst:256 +#: ../../configuration/vpn/sstp.rst:290 +msgid "Specifies fixed or random interface identifier for IPv6. By default is fixed." +msgstr "Specifies fixed or random interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:173 msgid "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." msgstr "Especifica durante cuánto tiempo squid asume que un par de nombre de usuario:contraseña validado externamente es válido; en otras palabras, con qué frecuencia se llama al programa auxiliar para ese usuario. Configure este valor bajo para forzar la revalidación con contraseñas de corta duración." @@ -12025,15 +13386,36 @@ msgstr "Especifica durante cuánto tiempo squid asume que un par de nombre de us msgid "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." msgstr "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." +#: ../../configuration/service/pppoe-server.rst:462 +#: ../../configuration/vpn/l2tp.rst:416 +#: ../../configuration/vpn/pptp.rst:340 +#: ../../configuration/vpn/sstp.rst:374 +msgid "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." +msgstr "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." + #: ../../configuration/interfaces/bonding.rst:40 msgid "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" msgstr "Especifica una de las políticas de vinculación. El valor predeterminado es 802.3ad. Los valores posibles son:" +#: ../../configuration/service/pppoe-server.rst:396 +#: ../../configuration/vpn/l2tp.rst:340 +#: ../../configuration/vpn/pptp.rst:264 +#: ../../configuration/vpn/sstp.rst:298 +msgid "Specifies peer interface identifier for IPv6. By default is fixed." +msgstr "Specifies peer interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:81 msgid "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." msgstr "Especifica la dirección de escucha del servicio proxy. La dirección de escucha es la dirección IP en la que el servicio de proxy web escucha las solicitudes de los clientes." -#: ../../configuration/vpn/sstp.rst:110 +#: ../../configuration/service/ipoe-server.rst:348 +msgid "Specifies relay agent IP addre" +msgstr "Specifies relay agent IP addre" + +#: ../../configuration/service/pppoe-server.rst:70 +#: ../../configuration/vpn/l2tp.rst:52 +#: ../../configuration/vpn/pptp.rst:54 +#: ../../configuration/vpn/sstp.rst:79 msgid "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." msgstr "Especifica un solo `<gateway> ` Dirección IP que se usará como dirección local de las interfaces PPP." @@ -12057,7 +13439,7 @@ msgstr "Especifica los algoritmos :abbr:`MAC (Código de autenticación de mensa msgid "Specifies the base DN under which the users are located." msgstr "Especifica el DN base bajo el cual se ubican los usuarios." -#: ../../configuration/service/dhcp-server.rst:239 +#: ../../configuration/service/dhcp-server.rst:295 msgid "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." msgstr "Especifica la máscara de subred de los clientes según RFC 950. Si no se establece, se utiliza la declaración de subred." @@ -12094,22 +13476,33 @@ msgstr "Especifica el puerto `<port> ` en el que escuchará el puerto SSTP (pred msgid "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." msgstr "Especifica el ámbito de protección (también conocido como nombre de dominio) que se debe informar al cliente para el esquema de autenticación. Por lo general, es parte del texto que el usuario verá cuando se le solicite su nombre de usuario y contraseña." -#: ../../configuration/vrf/index.rst:452 +#: ../../configuration/vrf/index.rst:471 msgid "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." msgstr "Especifica la lista de destino de ruta que se adjuntará a una ruta (exportación) o la lista de destino de ruta para comparar (importar) al exportar/importar entre el VRF de unidifusión actual y VPN. RTLIST es una lista separada por espacios de ruta- objetivos, que son valores de comunidad extendida de BGP, tal como se describe en Atributo de comunidades extendidas." -#: ../../configuration/vrf/index.rst:445 +#: ../../configuration/vrf/index.rst:464 msgid "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." msgstr "Especifica el distintivo de ruta que se agregará a una ruta exportada desde el VRF de unidifusión actual a VPN." -#: ../../configuration/vpn/sstp.rst:281 +#: ../../configuration/service/ipoe-server.rst:224 +#: ../../configuration/service/pppoe-server.rst:186 +#: ../../configuration/vpn/l2tp.rst:229 +#: ../../configuration/vpn/pptp.rst:169 +#: ../../configuration/vpn/sstp.rst:202 msgid "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." msgstr "Especifica el diccionario del proveedor, el diccionario debe estar en /usr/share/accel-ppp/radius." -#: ../../configuration/vpn/sstp.rst:188 +#: ../../configuration/vpn/sstp.rst:194 msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." msgstr "Especifica el tiempo de espera en segundos para esperar cualquier actividad del compañero. Si se especifica esta opción, se activa la función de eco lcp adaptativo y no se utiliza "lcp-echo-failure"." +#: ../../configuration/service/pppoe-server.rst:490 +#: ../../configuration/vpn/l2tp.rst:444 +#: ../../configuration/vpn/pptp.rst:368 +#: ../../configuration/vpn/sstp.rst:402 +msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." +msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." + #: ../../configuration/interfaces/vxlan.rst:77 msgid "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." msgstr "Especifica si se debe utilizar un plano de control externo (por ejemplo, BGP L2VPN/EVPN) o el FDB interno." @@ -12122,28 +13515,47 @@ msgstr "Specifies whether the VXLAN device is capable of vni filtering." msgid "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." msgstr "Especifica si este enrutador de borde NSSA traducirá incondicionalmente LSA de tipo 7 a LSA de tipo 5. Cuando el rol es Siempre, los LSA de tipo 7 se traducen a LSA de tipo 5 independientemente del estado del traductor de otros enrutadores de borde NSSA. Cuando el rol es Candidato, este enrutador participa en la elección del traductor para determinar si realizará las tareas de traducción. Cuando el rol es Nunca, este enrutador nunca traducirá LSA de tipo 7 a LSA de tipo 5." -#: ../../configuration/vpn/sstp.rst:272 +#: ../../configuration/service/ipoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:217 +#: ../../configuration/vpn/pptp.rst:157 +#: ../../configuration/vpn/sstp.rst:190 msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." msgstr "Especifica qué atributo del servidor RADIUS contiene la información de límite de velocidad. El atributo predeterminado es `Filter-Id`." +#: ../../configuration/service/pppoe-server.rst:174 +msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." +msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." + +#: ../../configuration/service/ipoe-server.rst:344 +msgid "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." +msgstr "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." + #: ../../configuration/service/ssh.rst:45 msgid "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." msgstr "Especifique la dirección de escucha IPv4/IPv6 del servidor SSH. Se pueden definir varias direcciones." -#: ../../configuration/firewall/ipv4.rst:401 +#: ../../configuration/service/ids.rst:51 +msgid "Specify IPv4 and/or IPv6 networks that should be protected/monitored." +msgstr "Specify IPv4 and/or IPv6 networks that should be protected/monitored." + +#: ../../configuration/service/ids.rst:38 +msgid "Specify IPv4 and/or IPv6 networks which are going to be excluded." +msgstr "Specify IPv4 and/or IPv6 networks which are going to be excluded." + +#: ../../configuration/firewall/ipv4.rst:424 #: ../../configuration/firewall/ipv6.rst:408 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." msgstr "Especifique un nombre de dominio completo como comparador de origen/destino. Asegúrese de que el enrutador pueda resolver dicha consulta DNS." -#: ../../configuration/service/dhcp-server.rst:550 +#: ../../configuration/service/dhcp-server.rst:609 msgid "Specify a NIS+ server address for DHCPv6 clients." msgstr "Especifique una dirección de servidor NIS+ para clientes DHCPv6." -#: ../../configuration/service/dhcp-server.rst:545 +#: ../../configuration/service/dhcp-server.rst:604 msgid "Specify a NIS server address for DHCPv6 clients." msgstr "Especifique una dirección de servidor NIS para clientes DHCPv6." -#: ../../configuration/service/dhcp-server.rst:555 +#: ../../configuration/service/dhcp-server.rst:614 msgid "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." msgstr "Especifique un servidor :abbr:`SIP (protocolo de inicio de sesión)` por dirección IPv6 de nombre de dominio completo para todos los clientes DHCPv6." @@ -12167,6 +13579,14 @@ msgstr "Especifique un AS alternativo para este proceso BGP al interactuar con e msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Especifique un puerto TCP alternativo en el que escuche el servidor ldap si no es el puerto LDAP predeterminado 389." +#: ../../configuration/service/dns.rst:348 +msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." +msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." + +#: ../../configuration/service/ipoe-server.rst:339 +msgid "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" +msgstr "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" + #: ../../configuration/service/ntp.rst:84 #: ../../configuration/service/ssh.rst:110 #: ../../configuration/system/syslog.rst:79 @@ -12181,11 +13601,11 @@ msgstr "Especifique nexthop en la ruta al destino, ``ipv4-address`` se puede est msgid "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." msgstr "Especifique una ruta estática en la tabla de enrutamiento enviando todo el tráfico no local a la dirección nexthop `<address> `." -#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:249 msgid "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." msgstr "Especifique la IP `<address> ` del usuario del servidor RADIUS con el secreto previamente compartido dado en `<secret> `." -#: ../../configuration/system/login.rst:314 +#: ../../configuration/system/login.rst:318 msgid "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." msgstr "Especifique la IP `<address> ` del usuario del servidor TACACS con el secreto previamente compartido dado en `<secret> `." @@ -12205,7 +13625,7 @@ msgstr "Especifique el valor del identificador del agregador de nivel de sitio ( msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Especifique la dirección de la interfaz utilizada localmente en la interfaz a la que se ha delegado el prefijo. El ID debe ser un entero decimal." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Especifique la versión mínima requerida de TLS 1.2 o 1.3" @@ -12225,7 +13645,7 @@ msgstr "Especificar los sistemas `<timezone> ` como la Región/Ubicación que me msgid "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" msgstr "Especifique el intervalo de tiempo cuando `<task> ` debe ejecutarse. El intervalo se especifica como número con uno de los siguientes sufijos:" -#: ../../configuration/service/dns.rst:269 +#: ../../configuration/service/dns.rst:283 msgid "Specify timeout / update interval to check if IP address changed." msgstr "Specify timeout / update interval to check if IP address changed." @@ -12233,6 +13653,10 @@ msgstr "Specify timeout / update interval to check if IP address changed." msgid "Specify timeout interval for keepalive message in seconds." msgstr "Especifique el intervalo de tiempo de espera para el mensaje de actividad en segundos." +#: ../../configuration/service/ipoe-server.rst:97 +msgid "Specify where interface is shared by multiple users or it is vlan-per-user." +msgstr "Specify where interface is shared by multiple users or it is vlan-per-user." + #: ../../configuration/interfaces/vxlan.rst:191 msgid "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." msgstr "Spine1 es un enrutador Cisco IOS que ejecuta la versión 15.4, Leaf2 y Leaf3 son cada uno un enrutador VyOS que ejecuta 1.2." @@ -12250,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ es un proxy web HTTP de almacenamiento en caché y reenvío. Tiene una amplia variedad de usos, incluida la aceleración de un servidor web al almacenar en caché solicitudes repetidas, almacenar en caché web, DNS y otras búsquedas de redes informáticas para un grupo de personas que comparten recursos de red y ayudar a la seguridad al filtrar el tráfico. Aunque se usa principalmente para HTTP y FTP, Squid incluye soporte limitado para varios otros protocolos, incluidos Internet Gopher, SSL, [6] TLS y HTTPS. Squid no es compatible con el protocolo SOCKS." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -12285,7 +13713,7 @@ msgstr "A partir de VyOS 1.2, se proporciona una funcionalidad de repetidor :abb msgid "Static" msgstr "Estático" -#: ../../configuration/service/dhcp-server.rst:189 +#: ../../configuration/service/dhcp-server.rst:245 msgid "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." msgstr "Dirección IP DHCP estática asignada al host identificado por `<description> `. La dirección IP debe estar dentro de `<subnet> ` que está definido pero puede estar fuera del rango dinámico creado con :cfgcmd:`set service dhcp-server shared-network-name<name> subred<subnet> rango<n> `. Si no se especifica una dirección IP, se utiliza una IP del grupo dinámico." @@ -12313,13 +13741,13 @@ msgstr "El enrutamiento estático u otros protocolos de enrutamiento dinámico s msgid "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." msgstr "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." -#: ../../configuration/service/dhcp-server.rst:174 -#: ../../configuration/service/dhcp-server.rst:621 +#: ../../configuration/service/dhcp-server.rst:224 +#: ../../configuration/service/dhcp-server.rst:682 msgid "Static mappings" msgstr "Mapeos estáticos" -#: ../../configuration/service/dhcp-server.rst:460 -#: ../../configuration/service/dhcp-server.rst:694 +#: ../../configuration/service/dhcp-server.rst:519 +#: ../../configuration/service/dhcp-server.rst:755 msgid "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." msgstr "Las asignaciones estáticas no se muestran. Para mostrar todos los estados, utilice ``show dhcp server leases state all``." @@ -12384,7 +13812,7 @@ msgstr "Las versiones compatibles de RIP son:" msgid "Supports as HELPER for configured grace period." msgstr "Se admite como AYUDANTE durante el período de gracia configurado." -#: ../../configuration/vpn/ipsec.rst:178 +#: ../../configuration/vpn/ipsec.rst:182 msgid "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" msgstr "Suponga que el enrutador IZQUIERDO tiene la dirección externa 192.0.2.10 en su interfaz eth0 y el enrutador DERECHO es 203.0.113.45" @@ -12404,17 +13832,17 @@ msgstr "Synamic instruye a reenviar a todos los compañeros con los que tenemos msgid "Sync groups" msgstr "Sincronizar grupos" -#: ../../configuration/firewall/ipv4.rst:911 +#: ../../configuration/firewall/ipv4.rst:934 #: ../../configuration/firewall/ipv6.rst:920 msgid "Synproxy" msgstr "Synproxy" -#: ../../configuration/firewall/ipv4.rst:912 +#: ../../configuration/firewall/ipv4.rst:935 #: ../../configuration/firewall/ipv6.rst:921 msgid "Synproxy connections" msgstr "Synproxy connections" -#: ../../configuration/firewall/ipv4.rst:929 +#: ../../configuration/firewall/ipv4.rst:952 #: ../../configuration/firewall/ipv6.rst:938 msgid "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" msgstr "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" @@ -12484,23 +13912,23 @@ msgstr "Identificador del sistema: ``1921.6800.1002``: para los identificadores msgid "System is unusable - a panic condition" msgstr "El sistema no se puede usar: una condición de pánico" -#: ../../configuration/system/login.rst:299 +#: ../../configuration/system/login.rst:303 msgid "TACACS+" msgstr "TACACS+" -#: ../../configuration/system/login.rst:418 +#: ../../configuration/system/login.rst:422 msgid "TACACS Example" msgstr "Ejemplo de TACACS" -#: ../../configuration/system/login.rst:305 +#: ../../configuration/system/login.rst:309 msgid "TACACS is defined in :rfc:`8907`." msgstr "TACACS se define en :rfc:`8907`." -#: ../../configuration/system/login.rst:335 +#: ../../configuration/system/login.rst:339 msgid "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." msgstr "Los servidores TACACS podrían fortalecerse al permitir que solo se conecten ciertas direcciones IP. A partir de esto se puede configurar la dirección de origen de cada consulta TACACS." -#: ../../configuration/protocols/static.rst:140 +#: ../../configuration/protocols/static.rst:173 #: ../../configuration/system/flow-accounting.rst:83 msgid "TBD" msgstr "Por determinar" @@ -12553,19 +13981,23 @@ msgstr "Indicar a los hosts que utilicen el protocolo administrado (con estado) msgid "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" msgstr "Indicar a los hosts que utilicen el protocolo con estado administrado (es decir, DHCP) para la configuración automática" -#: ../../configuration/vpn/sstp.rst:227 +#: ../../configuration/service/ipoe-server.rst:170 +#: ../../configuration/service/pppoe-server.rst:132 +#: ../../configuration/vpn/l2tp.rst:175 +#: ../../configuration/vpn/pptp.rst:115 +#: ../../configuration/vpn/sstp.rst:148 msgid "Temporary disable this RADIUS server." msgstr "Deshabilite temporalmente este servidor RADIUS." -#: ../../configuration/system/login.rst:258 +#: ../../configuration/system/login.rst:262 msgid "Temporary disable this RADIUS server. It won't be queried." msgstr "Deshabilite temporalmente este servidor RADIUS. No será consultado." -#: ../../configuration/system/login.rst:327 +#: ../../configuration/system/login.rst:331 msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Deshabilite temporalmente este servidor TACACS. No será consultado." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminar SSL" @@ -12589,7 +14021,7 @@ msgstr "Pruebe la desconexión dada la interfaz orientada a la conexión. `<inte msgid "Test from the IPv6 only client:" msgstr "Test from the IPv6 only client:" -#: ../../configuration/vpn/sstp.rst:305 +#: ../../configuration/vpn/sstp.rst:374 msgid "Testing SSTP" msgstr "Prueba de SSTP" @@ -12601,7 +14033,7 @@ msgstr "Pruebas y Validación" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Gracias a este descubrimiento, cualquier tráfico posterior entre PC4 y PC5 no utilizará la dirección de multidifusión entre las hojas, ya que ambas saben detrás de qué hoja están conectadas las PC. Esto ahorra tráfico, ya que se envían menos paquetes de multidifusión y se reduce la carga en la red, lo que mejora la escalabilidad cuando se agregan más hojas." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "Así es como es posible hacer el llamado "formado de entrada"." @@ -12617,11 +14049,11 @@ msgstr "El monitor ARP funciona comprobando periódicamente los dispositivos esc msgid "The ASP has documented their IPSec requirements:" msgstr "El ASP ha documentado sus requisitos de IPSec:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "El enrutador BGP puede conectarse a uno o más servidores de caché RPKI para recibir el prefijo validado para las asignaciones AS de origen. La conmutación por error avanzada se puede implementar mediante sockets de servidor con diferentes valores de preferencia." -#: ../../configuration/vrf/index.rst:94 +#: ../../configuration/vrf/index.rst:113 msgid "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." msgstr "La configuración de CLI es la misma que se menciona en los artículos anteriores. La única diferencia es que cada protocolo de enrutamiento utilizado debe tener el prefijo `vrf name<name> `comando." @@ -12645,7 +14077,7 @@ msgstr "El DN y la contraseña para enlazar mientras se realizan búsquedas. Com msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "La política FQ-CoDel distribuye el tráfico en 1024 colas FIFO e intenta brindar un buen servicio entre todas ellas. También trata de mantener corta la longitud de todas las colas." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "El servicio HTTP escucha en el puerto TCP 80." @@ -12661,7 +14093,7 @@ msgstr "La tarjeta Intel AX200 no funciona de fábrica en modo AP, consulte http msgid "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." msgstr "El OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, una vez llamado, contendrá la salida de la extensión." -#: ../../configuration/vpn/pptp.rst:6 +#: ../../configuration/vpn/pptp.rst:7 msgid "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." msgstr "El Protocolo de tunelización punto a punto (PPTP_) se implementó en VyOS solo para compatibilidad con versiones anteriores. PPTP tiene muchos problemas de seguridad bien conocidos y debe usar una de las muchas otras implementaciones nuevas de VPN." @@ -12697,23 +14129,27 @@ msgstr "El número de puerto UDP utilizado por su aplicación. Es obligatorio pa msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "La especificación VXLAN fue creada originalmente por VMware, Arista Networks y Cisco. Otros patrocinadores de la tecnología VXLAN incluyen Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent y Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "El reenviador DNS de VyOS no requiere un servidor DNS ascendente. Puede servir como un servidor DNS recursivo completo, pero también puede reenviar consultas a servidores DNS ascendentes configurables. Al no configurar ningún servidor DNS ascendente, también evita que el proveedor de su servidor DNS ascendente lo rastree." -#: ../../configuration/service/dns.rst:173 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "El reenviador de DNS de VyOS solo aceptará solicitudes de búsqueda de las subredes LAN: 192.168.1.0/24 y 2001:db8::/64" -#: ../../configuration/service/dns.rst:171 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "El reenviador de DNS de VyOS solo escuchará solicitudes en las direcciones de interfaz eth1 (LAN): 192.168.1.254 para IPv4 y 2001:db8::ffff para IPv6" -#: ../../configuration/service/dns.rst:175 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "El reenviador de DNS de VyOS pasará búsquedas inversas para las zonas 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa al servidor ascendente." -#: ../../configuration/pki/index.rst:254 +#: ../../configuration/pki/index.rst:285 msgid "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." msgstr "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." @@ -12758,10 +14194,26 @@ msgstr "La ``dirección`` se puede configurar en la interfaz VRRP o no en la int msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "El parámetro ``dirección`` puede ser una dirección IPv4 o IPv6, pero no puede mezclar IPv4 e IPv6 en el mismo grupo, y deberá crear grupos con diferentes VRID especialmente para IPv4 e IPv6. Si desea utilizar la dirección IPv4 + IPv6, puede utilizar la opción ``dirección-excluida``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "El servicio ``http`` se reduce en el puerto 80 y fuerza los redireccionamientos de HTTP a HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "El servicio ``https`` escucha en el puerto 443 con el backend `bk-default` para manejar el tráfico HTTPS. Utiliza un certificado llamado ``cert`` para la terminación de SSL." @@ -12770,11 +14222,15 @@ msgstr "El servicio ``https`` escucha en el puerto 443 con el backend `bk-defaul msgid "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." msgstr "La directiva ``persistent-tunnel`` nos permitirá configurar atributos relacionados con el túnel, como la política de firewall, como lo haríamos en cualquier interfaz de red normal." -#: ../../configuration/vpn/l2tp.rst:176 +#: ../../configuration/service/ipoe-server.rst:154 +#: ../../configuration/service/pppoe-server.rst:116 +#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/vpn/pptp.rst:99 +#: ../../configuration/vpn/sstp.rst:132 msgid "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." msgstr "La ``dirección de origen`` debe configurarse en una de las interfaces de VyOS. La mejor práctica sería una interfaz de bucle invertido o ficticia." -#: ../../configuration/interfaces/bridge.rst:270 +#: ../../configuration/interfaces/bridge.rst:279 msgid "The `show bridge` operational command can be used to display configured bridges:" msgstr "El comando operativo `show bridge` se puede utilizar para mostrar los puentes configurados:" @@ -12787,11 +14243,11 @@ msgstr "El directorio anterior y la configuración predeterminada deben ser un d msgid "The action can be :" msgstr "The action can be :" -#: ../../configuration/pki/index.rst:271 +#: ../../configuration/pki/index.rst:302 msgid "The address the server listens to during http-01 challenge" msgstr "The address the server listens to during http-01 challenge" -#: ../../configuration/protocols/bgp.rst:775 +#: ../../configuration/protocols/bgp.rst:797 msgid "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." msgstr "La ventaja de esto es que la selección de ruta (en este punto) será más determinista. La desventaja es que algunos o incluso un enrutador de ID más bajo pueden atraer todo el tráfico a rutas iguales debido a esta verificación. Puede aumentar la posibilidad de oscilación MED o IGP, a menos que se hayan tomado otras medidas para evitarlas. El comportamiento exacto será sensible al iBGP y la topología de reflexión." @@ -12803,7 +14259,7 @@ msgstr "El bloque de direcciones asignado es 100.64.0.0/10." msgid "The amount of Duplicate Address Detection probes to send." msgstr "The amount of Duplicate Address Detection probes to send." -#: ../../configuration/protocols/bgp.rst:835 +#: ../../configuration/protocols/bgp.rst:857 msgid "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." msgstr "Los atributos :cfgcmd:`prefix-list` y :cfgcmd:`distribute-list` se excluyen mutuamente, y solo se puede aplicar un comando (distribute-list o prefix-list) a cada dirección de entrada o salida para un vecino en particular." @@ -12819,15 +14275,19 @@ msgstr "La dirección IP a la que se hace referencia a continuación `192.0.2.1` msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "La interfaz de vinculación proporciona un método para agregar múltiples interfaces de red en una única interfaz lógica "vinculada", o LAG, o ether-channel, o port-channel. El comportamiento de las interfaces vinculadas depende del modo; en términos generales, los modos proporcionan servicios de equilibrio de carga o de espera activa. Además, se puede realizar la supervisión de la integridad del enlace." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "El caso de la conformación de ingreso" -#: ../../configuration/service/pppoe-server.rst:385 +#: ../../configuration/service/pppoe-server.rst:644 +msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." +msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." + +#: ../../configuration/service/pppoe-server.rst:644 msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." msgstr "El cliente, una vez autenticado con éxito, recibirá una dirección IPv4 y una dirección IPv6 /64 para terminar el extremo pppoe en el lado del cliente y una subred /56 para uso interno del cliente." -#: ../../configuration/service/ipoe-server.rst:90 +#: ../../configuration/service/ipoe-server.rst:91 msgid "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." msgstr "Los clientes :abbr:`CPE (Customer Premises Equipment)` ahora pueden comunicarse a través de IPv4 o IPv6. Todos los dispositivos detrás de ``2001:db8::a00:27ff:fe2f:d806/64`` pueden usar direcciones de ``2001:db8:1::/56`` y pueden comunicarse globalmente sin necesidad de reglas NAT." @@ -12839,7 +14299,7 @@ msgstr "El comando :opcmd:`show interfaces wireguard wg01 public-key` mostrará msgid "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." msgstr "El comando también genera una configuración recortada que se puede copiar/pegar en la CLI de VyOS si es necesario. El `` suministrado<name> `` en la CLI se convertirá en el nombre del par en el fragmento." -#: ../../configuration/service/pppoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:305 msgid "The command below enables it, assuming the RADIUS connection has been setup and is working." msgstr "El siguiente comando lo habilita, suponiendo que la conexión RADIUS se haya configurado y esté funcionando." @@ -12855,9 +14315,9 @@ msgstr "El comando pon TESTUNNEL establece el túnel PPTP al sistema remoto." msgid "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" msgstr "Las computadoras en una red interna pueden usar cualquiera de las direcciones reservadas por la :abbr:`IANA (Autoridad de Números Asignados en Internet)` para direccionamiento privado (ver :rfc:`1918`). Estas direcciones IP reservadas no están en uso en Internet, por lo que una máquina externa no las enrutará directamente. Las siguientes direcciones están reservadas para uso privado:" -#: ../../configuration/service/dhcp-server.rst:210 -#: ../../configuration/service/dhcp-server.rst:601 -#: ../../configuration/service/dhcp-server.rst:644 +#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:661 +#: ../../configuration/service/dhcp-server.rst:705 msgid "The configuration will look as follows:" msgstr "La configuración se verá de la siguiente manera:" @@ -12881,6 +14341,10 @@ msgstr "La tabla de seguimiento de conexiones contiene una entrada para cada con msgid "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" msgstr "El atributo actual 'Filter-Id' se usa de forma predeterminada y se puede configurar dentro de RADIUS:" +#: ../../configuration/service/pppoe-server.rst:299 +msgid "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" +msgstr "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" + #: ../../configuration/service/ntp.rst:29 msgid "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." msgstr "El protocolo actual es la versión 4 (NTPv4), que es un estándar propuesto como se documenta en :rfc:`5905`. Es retrocompatible con la versión 3, especificada en :rfc:`1305`." @@ -12905,7 +14369,11 @@ msgstr "El nombre de host predeterminado utilizado es `vyos`." msgid "The default is 1492." msgstr "The default is 1492." -#: ../../configuration/service/dhcp-server.rst:526 +#: ../../configuration/interfaces/bridge.rst:140 +msgid "The default is ``802.1q``." +msgstr "The default is ``802.1q``." + +#: ../../configuration/service/dhcp-server.rst:585 msgid "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." msgstr "El tiempo de concesión predeterminado para las concesiones de DHCPv6 es de 24 horas. Esto se puede cambiar proporcionando un ``tiempo predeterminado``, ``tiempo máximo`` y ``tiempo mínimo``. Todos los valores deben proporcionarse en segundos." @@ -12925,7 +14393,7 @@ msgstr "El valor por defecto corresponde a 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "El valor predeterminado es 0. Esto hará que se afirme el operador (para el modo 802.3ad) siempre que haya un agregador activo, independientemente de la cantidad de enlaces disponibles en ese agregador." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "El valor predeterminado es 300 segundos." @@ -12937,7 +14405,15 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/service/dhcp-server.rst:99 +#: ../../configuration/protocols/rpki.rst:122 +msgid "The default value is 600 seconds." +msgstr "The default value is 600 seconds." + +#: ../../configuration/protocols/rpki.rst:115 +msgid "The default value is 7200 seconds." +msgstr "The default value is 7200 seconds." + +#: ../../configuration/service/dhcp-server.rst:115 msgid "The default value is 86400 seconds which corresponds to one day." msgstr "El valor predeterminado es 86400 segundos que corresponde a un día." @@ -12957,17 +14433,21 @@ msgstr "El puerto de destino utilizado para crear una interfaz VXLAN en Linux ti msgid "The device can only receive packets with VNIs configured in the VNI filtering table." msgstr "The device can only receive packets with VNIs configured in the VNI filtering table." -#: ../../configuration/service/dhcp-server.rst:165 +#: ../../configuration/service/dhcp-server.rst:215 +msgid "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." +msgstr "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." + +#: ../../configuration/service/dhcp-server.rst:199 msgid "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." msgstr "El diálogo entre los socios de conmutación por error no está encriptado ni autenticado. Dado que la mayoría de los servidores DHCP existen dentro de la Intranet segura de una organización, esto sería una sobrecarga innecesaria. Sin embargo, si tiene pares de conmutación por error DHCP cuyas comunicaciones atraviesan redes inseguras, le recomendamos que considere el uso de túneles VPN entre ellos para garantizar que la asociación de conmutación por error sea inmune a la interrupción (accidental o de otro tipo) a través de terceros." #: ../../configuration/service/dhcp-server.rst:31 -#: ../../configuration/service/dhcp-server.rst:124 +#: ../../configuration/service/dhcp-server.rst:140 msgid "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." msgstr "El parámetro de nombre de dominio debe ser el nombre de dominio que se agregará al nombre de host del cliente para formar un nombre de dominio completo (FQDN) (Opción 015 de DHCP)." #: ../../configuration/service/dhcp-server.rst:40 -#: ../../configuration/service/dhcp-server.rst:131 +#: ../../configuration/service/dhcp-server.rst:147 msgid "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." msgstr "El parámetro de nombre de dominio debe ser el nombre de dominio utilizado al completar la solicitud de DNS donde no se pasa FQDN completo. Esta opción se puede dar varias veces si necesita varios dominios de búsqueda (Opción 119 de DHCP)." @@ -12987,15 +14467,19 @@ msgstr "El proxy Squid incorporado puede usar LDAP para autenticar a los usuario msgid "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." msgstr "El ejemplo anterior usa 192.0.2.2 como dirección IP externa. Un LAC normalmente requiere una contraseña de autenticación, que se establece en la configuración de ejemplo en ``lns shared-secret 'secret'``. Esta configuración requiere que se deshabilite el Protocolo de control de compresión (CCP), el comando ``set vpn l2tp remote-access ccp-disable`` lo logra." -#: ../../configuration/service/pppoe-server.rst:369 +#: ../../configuration/service/pppoe-server.rst:627 +msgid "The example below covers a dual-stack configuration." +msgstr "The example below covers a dual-stack configuration." + +#: ../../configuration/service/pppoe-server.rst:627 msgid "The example below covers a dual-stack configuration via pppoe-server." msgstr "El siguiente ejemplo cubre una configuración de doble pila a través del servidor pppoe." -#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/service/pppoe-server.rst:606 msgid "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." msgstr "El siguiente ejemplo usa ACN como nombre de concentrador de acceso, asigna una dirección del grupo 10.1.1.100-111, termina en el extremo local 10.1.1.1 y atiende solicitudes solo en eth1." -#: ../../configuration/service/ipoe-server.rst:35 +#: ../../configuration/service/ipoe-server.rst:34 msgid "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." msgstr "La configuración de ejemplo a continuación asignará una IP al cliente en la interfaz entrante eth2 con la dirección mac del cliente 08:00:27:2f:d8:06. Se ignorarán otras solicitudes de detección de DHCP, a menos que el mac del cliente se haya habilitado en la configuración." @@ -13023,7 +14507,7 @@ msgstr "El motor reserva la primera IP en la red del contenedor y no se puede us msgid "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." msgstr "La primera dirección del parámetro ``client-subnet``, se utilizará como puerta de enlace predeterminada. Las sesiones conectadas se pueden verificar a través del comando ``show ipoe-server sessions``." -#: ../../configuration/vpn/ipsec.rst:174 +#: ../../configuration/vpn/ipsec.rst:178 msgid "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." msgstr "La primera y posiblemente más limpia opción es hacer que su política IPsec coincida con los paquetes GRE entre las direcciones externas de sus enrutadores. Esta es la mejor opción si ambos enrutadores tienen direcciones externas estáticas." @@ -13039,14 +14523,18 @@ msgstr "The first ip address is the RP's address and the second value is the mat msgid "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." msgstr "La primera solicitud de registro se envía a la dirección de transmisión del protocolo y la dirección del protocolo real del servidor se detecta dinámicamente a partir de la primera respuesta de registro." -#: ../../configuration/vpn/sstp.rst:311 +#: ../../configuration/vpn/sstp.rst:484 msgid "The following PPP configuration tests MSCHAP-v2:" msgstr "La siguiente configuración de PPP prueba MSCHAP-v2:" -#: ../../configuration/system/login.rst:143 +#: ../../configuration/system/login.rst:147 msgid "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" msgstr "El siguiente comando se puede usar para generar la clave OTP, así como los comandos CLI para configurarlos:" +#: ../../configuration/protocols/bgp.rst:664 +msgid "The following command uses the explicit-null label value for all the BGP instances." +msgstr "The following command uses the explicit-null label value for all the BGP instances." + #: ../../configuration/interfaces/openvpn.rst:708 msgid "The following commands let you check tunnel status." msgstr "Los siguientes comandos le permiten verificar el estado del túnel." @@ -13059,11 +14547,11 @@ msgstr "Los siguientes comandos le permiten restablecer OpenVPN." msgid "The following commands translate to \"--net host\" when the container is created" msgstr "Los siguientes comandos se traducen a "--net host" cuando se crea el contenedor" -#: ../../configuration/vrf/index.rst:101 +#: ../../configuration/vrf/index.rst:120 msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "Se requerirían los siguientes comandos para establecer opciones para un protocolo de enrutamiento dinámico dado dentro de un vrf dado:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "La siguiente configuración demuestra cómo usar VyOS para lograr un equilibrio de carga basado en el nombre de dominio." @@ -13079,10 +14567,22 @@ msgstr "La siguiente configuración en VyOS se aplica a todos los siguientes pro msgid "The following configuration reverse-proxy terminate SSL." msgstr "La siguiente configuración de proxy inverso termina SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "La siguiente configuración asignará un prefijo /64 de una delegación /56 a eth0. La dirección IPv6 asignada a eth0 será<prefix> ::ffff/64. Si no conoce el tamaño del prefijo que se le delegó, comience con sla-len 0." +#: ../../configuration/interfaces/pppoe.rst:383 +msgid "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." +msgstr "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." + #: ../../configuration/policy/examples.rst:155 msgid "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." msgstr "El siguiente ejemplo permite que VyOS use :abbr:`PBR (enrutamiento basado en políticas)` para el tráfico, que se originó en el propio enrutador. Esa solución para múltiples ISP y enrutadores VyOS responderá desde la misma interfaz en la que se recibió el paquete. Además, se utiliza, si queremos que un túnel VPN sea a través de un proveedor y el segundo a través de otro." @@ -13095,7 +14595,7 @@ msgstr "El siguiente ejemplo crea un WAP. Al configurar múltiples interfaces WA msgid "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." msgstr "El siguiente ejemplo se basa en una tarjeta miniPCIe Sierra Wireless MC7710 (solo el factor de forma en realidad ejecuta UBS) y Deutsche Telekom como ISP. La tarjeta se ensambla en un :ref:`pc-engines-apu4`." -#: ../../configuration/vrf/index.rst:237 +#: ../../configuration/vrf/index.rst:256 msgid "The following example topology was built using EVE-NG." msgstr "La siguiente topología de ejemplo se creó utilizando EVE-NG." @@ -13140,7 +14640,7 @@ msgstr "El tiempo de retardo de reenvío es el tiempo que se pasa en cada uno de msgid "The generated configuration will look like:" msgstr "La configuración generada se verá así:" -#: ../../configuration/pki/index.rst:107 +#: ../../configuration/pki/index.rst:109 msgid "The generated parameters are then output to the console." msgstr "Los parámetros generados luego se envían a la consola." @@ -13168,7 +14668,7 @@ msgstr "El nombre de host puede tener hasta 63 caracteres. Un nombre de host deb msgid "The hostname or IP address of the master" msgstr "El nombre de host o la dirección IP del maestro" -#: ../../configuration/service/dhcp-server.rst:632 +#: ../../configuration/service/dhcp-server.rst:693 msgid "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." msgstr "El identificador es el DUID del dispositivo: lista hexadecimal separada por dos puntos (como se usa en la opción dhcpv6.client-id de isc-dhcp). Si el dispositivo ya tiene una concesión dinámica del servidor DHCPv6, su DUID se puede encontrar con ``show service dhcpv6 server leases``. El DUID comienza en el 5.° octeto (después de los 4.° dos puntos) de IAID_DUID." @@ -13212,7 +14712,7 @@ msgstr "The legacy and zone-based firewall configuration options is not longer s msgid "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." msgstr "El limitador realiza una vigilancia de entrada básica de los flujos de tráfico. Se pueden definir múltiples clases de tráfico y se pueden aplicar límites de tráfico a cada clase. Aunque el vigilante utiliza internamente un mecanismo de cubeta de fichas, no tiene la capacidad de retrasar un paquete como lo hace un mecanismo de modelado. El tráfico que excede los límites de ancho de banda definidos se elimina directamente. También se puede configurar una ráfaga máxima permitida." -#: ../../configuration/policy/route-map.rst:255 +#: ../../configuration/policy/route-map.rst:258 msgid "The link bandwidth extended community is encoded as non-transitive" msgstr "La comunidad ampliada del ancho de banda del enlace se codifica como no transitiva" @@ -13240,6 +14740,10 @@ msgstr "The main points regarding this packet flow and terminology used in VyOS msgid "The main structure VyOS firewall cli is shown next:" msgstr "The main structure VyOS firewall cli is shown next:" +#: ../../configuration/firewall/index.rst:92 +msgid "The main structure of the VyOS firewall CLI is shown next:" +msgstr "The main structure of the VyOS firewall CLI is shown next:" + #: ../../configuration/interfaces/bonding.rst:271 msgid "The maximum number of targets that can be specified is 16. The default value is no IP address." msgstr "El número máximo de destinos que se pueden especificar es 16. El valor predeterminado es ninguna dirección IP." @@ -13248,7 +14752,7 @@ msgstr "El número máximo de destinos que se pueden especificar es 16. El valor msgid "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." msgstr "El significado de Class ID no es el mismo para todos los tipos de póliza. Normalmente, las pólizas solo necesitan un número sin sentido para identificar una clase (ID de clase), pero eso no se aplica a todas las pólizas. El número de una clase en una Priority Queue no solo la identifica, también define su prioridad." -#: ../../configuration/interfaces/bridge.rst:230 +#: ../../configuration/interfaces/bridge.rst:239 msgid "The member interface `eth1` is a trunk that allows VLAN 10 to pass" msgstr "La interfaz miembro `eth1` es un enlace troncal que permite que la VLAN 10 pase" @@ -13268,15 +14772,19 @@ msgstr "La aplicación más visible del protocolo es para el acceso a cuentas sh msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "El grupo de multidifusión utilizado por todas las hojas para esta extensión de vlan. Tiene que ser igual en todas las hojas que tenga esta interfaz." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "El nombre del servicio puede ser diferente, en este ejemplo es solo por conveniencia." +#: ../../configuration/service/dns.rst:171 +msgid "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." +msgstr "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." + #: ../../configuration/service/dhcp-server.rst:13 msgid "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." msgstr "La topología de red se declara mediante el nombre de red compartida y las declaraciones de subred. El servicio DHCP puede servir a múltiples redes compartidas, y cada red compartida tiene 1 o más subredes. Cada subred debe estar presente en una interfaz. Se puede declarar un rango dentro de una subred para definir un conjunto de direcciones dinámicas. Se pueden definir múltiples rangos y pueden contener huecos. Las asignaciones estáticas se pueden configurar para asignar direcciones "estáticas" a los clientes en función de su dirección MAC." -#: ../../configuration/service/conntrack-sync.rst:188 +#: ../../configuration/service/conntrack-sync.rst:197 msgid "The next example is a simple configuration of conntrack-sync." msgstr "El siguiente ejemplo es una configuración simple de conntrack-sync." @@ -13324,7 +14832,7 @@ msgstr "La interfaz saliente para realizar la traducción en" msgid "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." msgstr "El nombre del compañero debe ser alfanumérico y puede tener un guión o un guión bajo como caracteres especiales. Es puramente informativo." -#: ../../configuration/vpn/ipsec.rst:235 +#: ../../configuration/vpn/ipsec.rst:239 msgid "The peer names RIGHT and LEFT are used as informational text." msgstr "Los nombres de pares DERECHO e IZQUIERDO se utilizan como texto informativo." @@ -13332,7 +14840,7 @@ msgstr "Los nombres de pares DERECHO e IZQUIERDO se utilizan como texto informat msgid "The peer with lower priority will become the key server and start distributing SAKs." msgstr "El par con menor prioridad se convertirá en el servidor de claves y comenzará a distribuir SAK." -#: ../../configuration/vrf/index.rst:181 +#: ../../configuration/vrf/index.rst:200 msgid "The ping command is used to test whether a network host is reachable or not." msgstr "El comando ping se usa para probar si un host de red es accesible o no." @@ -13344,19 +14852,19 @@ msgstr "La popular herramienta ``dig`` de Unix/Linux establece el bit AD en la c msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "El prefijo y el ASN que lo originaron coinciden con un ROA firmado. Estos son probablemente anuncios de ruta confiables." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "El prefijo o la longitud del prefijo y el ASN que lo originó no coincide con ningún ROA existente. Esto podría ser el resultado de un secuestro de prefijo, o simplemente una configuración incorrecta, pero probablemente debería tratarse como anuncios de ruta no confiables." -#: ../../configuration/service/dhcp-server.rst:375 +#: ../../configuration/service/dhcp-server.rst:432 msgid "The primary DHCP server uses address `192.168.189.252`" msgstr "El servidor DHCP primario usa la dirección `192.168.189.252`" -#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:208 msgid "The primary and secondary statements determines whether the server is primary or secondary." msgstr "Las sentencias principal y secundaria determinan si el servidor es principal o secundario." @@ -13368,11 +14876,11 @@ msgstr "La opción principal solo es válida para el modo de copia de seguridad msgid "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." msgstr "La prioridad debe ser un número entero de 1 a 255. Un valor de prioridad más alto aumenta la precedencia del enrutador en las elecciones de maestro." -#: ../../configuration/service/dhcp-server.rst:539 +#: ../../configuration/service/dhcp-server.rst:598 msgid "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" msgstr "El procedimiento para especificar un dominio :abbr:`NIS+ (Network Information Service Plus)` es similar al del dominio NIS:" -#: ../../configuration/vrf/index.rst:222 +#: ../../configuration/vrf/index.rst:241 msgid "The prompt is adjusted to reflect this change in both config and op-mode." msgstr "El indicador se ajusta para reflejar este cambio tanto en la configuración como en el modo operativo." @@ -13400,7 +14908,7 @@ msgstr "La dirección IP pública del lado local de la VPN será 198.51.100.10." msgid "The public IP address of the remote side of the VPN will be 203.0.113.11." msgstr "La dirección IP pública del lado remoto de la VPN será 203.0.113.11." -#: ../../configuration/service/ipoe-server.rst:130 +#: ../../configuration/service/ipoe-server.rst:131 #: ../../configuration/vpn/l2tp.rst:120 msgid "The rate-limit is set in kbit/sec." msgstr "El límite de velocidad se establece en kbit/seg." @@ -13421,6 +14929,10 @@ msgstr "El sitio remoto tendrá una subred de 10.1.0.0/16." msgid "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." msgstr "El usuario remoto usará el cliente openconnect para conectarse al enrutador y recibirá una dirección IP de un grupo VPN, lo que le permitirá acceso total a la red." +#: ../../configuration/service/dns.rst:161 +msgid "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." +msgstr "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." + #: ../../configuration/interfaces/openvpn.rst:458 msgid "The required config file may look like this:" msgstr "El archivo de configuración requerido puede verse así:" @@ -13465,7 +14977,7 @@ msgstr "La contabilidad de sFlow basada en hsflowd https://sflow.net/" msgid "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." msgstr "Las mismas opciones de configuración se aplican cuando la configuración basada en identidad está configurada en modo de grupo, excepto que el modo de grupo solo se puede usar con la autenticación RADIUS." -#: ../../configuration/vpn/ipsec.rst:227 +#: ../../configuration/vpn/ipsec.rst:231 msgid "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." msgstr "Sin embargo, el esquema anterior no funciona cuando uno de los enrutadores tiene una dirección externa dinámica. La solución alternativa clásica para esto es configurar una dirección en una interfaz de bucle invertido y usarla como dirección de origen para el túnel GRE, luego configurar una política IPsec para que coincida con esas direcciones de bucle invertido." @@ -13473,7 +14985,7 @@ msgstr "Sin embargo, el esquema anterior no funciona cuando uno de los enrutador msgid "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." msgstr "El filtro de búsqueda puede contener hasta 15 ocurrencias de %s que serán reemplazadas por el nombre de usuario, como en "uid=%s" para los directorios :rfc:`2037`. Para obtener una descripción detallada de la sintaxis del filtro de búsqueda LDAP, consulte :rfc:`2254`." -#: ../../configuration/service/dhcp-server.rst:376 +#: ../../configuration/service/dhcp-server.rst:433 msgid "The secondary DHCP server uses address `192.168.189.253`" msgstr "El servidor DHCP secundario usa la dirección `192.168.189.253`" @@ -13533,11 +15045,14 @@ msgstr "El tipo puede ser el siguiente: asbr-summary, external, network, nssa-ex msgid "The ultimate goal of classifying traffic is to give each class a different treatment." msgstr "El objetivo final de clasificar el tráfico es dar a cada clase un tratamiento diferente." -#: ../../configuration/service/ipoe-server.rst:18 +#: ../../configuration/service/ipoe-server.rst:16 msgid "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." msgstr "El uso de IPoE soluciona la desventaja de que PPP no es adecuado para la entrega de multidifusión a múltiples usuarios. Por lo general, IPoE utiliza el Protocolo de configuración dinámica de host y el Protocolo de autenticación extensible para brindar la misma funcionalidad que PPPoE, pero de una manera menos robusta." -#: ../../configuration/vpn/l2tp.rst:221 +#: ../../configuration/service/pppoe-server.rst:222 +#: ../../configuration/vpn/l2tp.rst:265 +#: ../../configuration/vpn/pptp.rst:205 +#: ../../configuration/vpn/sstp.rst:238 msgid "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." msgstr "El valor del atributo ``NAS-Port-Id`` debe tener menos de 16 caracteres; de lo contrario, no se cambiará el nombre de la interfaz." @@ -13549,7 +15064,11 @@ msgstr "La opción ID de clase de proveedor se puede utilizar para solicitar una msgid "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." msgstr "Los dispositivos veth son dispositivos Ethernet virtuales. Pueden actuar como túneles entre espacios de nombres de red para crear un puente a un dispositivo de red físico en otro espacio de nombres o VRF, pero también se pueden usar como dispositivos de red independientes." -#: ../../configuration/system/login.rst:138 +#: ../../configuration/service/router-advert.rst:86 +msgid "The well known NAT64 prefix is ``64:ff9b::/96``" +msgstr "The well known NAT64 prefix is ``64:ff9b::/96``" + +#: ../../configuration/system/login.rst:142 msgid "The window size must be between 1 and 21." msgstr "El tamaño de la ventana debe estar entre 1 y 21." @@ -13557,6 +15076,10 @@ msgstr "El tamaño de la ventana debe estar entre 1 y 21." msgid "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." msgstr "El cliente inalámbrico (solicitante) se autentica contra el servidor RADIUS (servidor de autenticación) utilizando un método :abbr:`EAP (Protocolo de autenticación extensible)` configurado en el servidor RADIUS. La función WAP (también conocida como autenticador) es enviar todos los mensajes de autenticación entre el solicitante y el servidor de autenticación configurado, por lo que el servidor RADIUS es responsable de autenticar a los usuarios." +#: ../../configuration/service/ids.rst:125 +msgid "Then, FastNetMon configuration:" +msgstr "Then, FastNetMon configuration:" + #: ../../configuration/nat/nat44.rst:621 msgid "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." msgstr "Luego, se crea una regla SNAT correspondiente al tráfico saliente NAT para la IP interna a una IP externa reservada. Esto dedica una dirección IP externa a una dirección IP interna y es útil para protocolos que no tienen la noción de puertos, como GRE." @@ -13596,7 +15119,7 @@ msgstr "There are a lot of matching criteria against which the packet can be tes msgid "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." msgstr "Hay muchas opciones de criterios coincidentes disponibles, tanto para ``policy route`` como para ``policy route6``. Estas opciones se enumeran en esta sección." -#: ../../configuration/system/ipv6.rst:92 +#: ../../configuration/system/ipv6.rst:105 msgid "There are different parameters for getting prefix-list information:" msgstr "Hay diferentes parámetros para obtener información de la lista de prefijos:" @@ -13612,7 +15135,7 @@ msgstr "Hay muchos parámetros que podrá usar para hacer coincidir el tráfico msgid "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" msgstr "Hay varias versiones disponibles para los datos de NetFlow. el `<version> El ` utilizado en los datos de flujo exportados se puede configurar aquí. Se admiten las siguientes versiones:" -#: ../../configuration/service/ipoe-server.rst:153 +#: ../../configuration/service/ipoe-server.rst:154 msgid "There are rate-limited and non rate-limited users (MACs)" msgstr "Hay usuarios con y sin límite de velocidad (MAC)" @@ -13628,7 +15151,7 @@ msgstr "Hay tres modos de operación para una interfaz inalámbrica:" msgid "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" msgstr "Hay dos tipos de administradores de red que se ocupan de BGP, los que han creado un incidente y/o interrupción internacional y los que mienten." -#: ../../configuration/protocols/bgp.rst:896 +#: ../../configuration/protocols/bgp.rst:918 msgid "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" msgstr "Hay dos formas que nos ayudan a mitigar el requisito de malla completa de BGP en una red:" @@ -13757,7 +15280,7 @@ msgstr "Este comando permite emparejamientos entre pares eBGP conectados directa msgid "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." msgstr "Este comando permite que se establezcan sesiones con vecinos eBGP cuando están a varios saltos de distancia. Cuando el vecino no está conectado directamente y esta perilla no está habilitada, la sesión no se establecerá. El rango de número de saltos es de 1 a 255. Este comando es mutuamente excluyente con :cfgcmd:`ttl-security hops`." -#: ../../configuration/protocols/bgp.rst:812 +#: ../../configuration/protocols/bgp.rst:834 msgid "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." msgstr "Este comando permite que el enrutador prefiera la ruta al prefijo especificado aprendido a través de IGP a través del enlace de puerta trasera en lugar de una ruta al mismo prefijo aprendido a través de EBGP." @@ -13814,19 +15337,19 @@ msgstr "Este comando le permite seleccionar un concentrador de acceso específic msgid "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." msgstr "Este comando aplica el mapa de ruta para desactivar de forma selectiva los prefijos suprimidos por el resumen." -#: ../../configuration/protocols/bgp.rst:867 +#: ../../configuration/protocols/bgp.rst:889 msgid "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." msgstr "Este comando aplica los filtros de la lista de acceso de ruta AS nombrados en<name> al vecino BGP especificado para restringir la información de enrutamiento que BGP aprende y/o anuncia. Los argumentos :cfgcmd:`export` y :cfgcmd:`import` especifican la dirección en la que se aplica la lista de acceso de ruta AS." -#: ../../configuration/protocols/bgp.rst:843 +#: ../../configuration/protocols/bgp.rst:865 msgid "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." msgstr "Este comando aplica los filtros de la lista de acceso nombrados en<number> al vecino BGP especificado para restringir la información de enrutamiento que BGP aprende y/o anuncia. Los argumentos :cfgcmd:`export` y :cfgcmd:`import` especifican la dirección en la que se aplican las listas de acceso." -#: ../../configuration/protocols/bgp.rst:851 +#: ../../configuration/protocols/bgp.rst:873 msgid "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." msgstr "Este comando aplica los filtros de lista prfefix nombrados en<name> al vecino BGP especificado para restringir la información de enrutamiento que BGP aprende y/o anuncia. Los argumentos :cfgcmd:`export` y :cfgcmd:`import` especifican la dirección en la que se aplica la lista de prefijos." -#: ../../configuration/protocols/bgp.rst:859 +#: ../../configuration/protocols/bgp.rst:881 msgid "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." msgstr "Este comando aplica el mapa de ruta nombrado en<name> al vecino BGP especificado para controlar y modificar la información de enrutamiento que se intercambia entre pares. Los argumentos :cfgcmd:`export` y :cfgcmd:`import` especifican la dirección en la que se aplica el mapa de ruta." @@ -13854,7 +15377,7 @@ msgstr "Este comando se puede usar para filtrar la ruta RIP usando listas de pre msgid "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." msgstr "Este comando se puede usar con el comando anterior para establecer la distancia RIP predeterminada en el valor especificado cuando la dirección IP de origen de la ruta coincide con el prefijo especificado y la lista de acceso especificada." -#: ../../configuration/protocols/bgp.rst:652 +#: ../../configuration/protocols/bgp.rst:674 msgid "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." msgstr "Este comando cambia el valor de distancia de BGP. Los argumentos son los valores de distancia para rutas externas, rutas internas y rutas locales respectivamente. El rango de distancia es de 1 a 255." @@ -13878,7 +15401,7 @@ msgstr "Este comando cambia el valor de distancia de OSPFv3 globalmente. El rang msgid "This command change the distance value of RIP. The distance range is 1 to 255." msgstr "Este comando cambia el valor de distancia de RIP. El rango de distancia es de 1 a 255." -#: ../../configuration/protocols/bgp.rst:638 +#: ../../configuration/protocols/bgp.rst:650 msgid "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." msgstr "Este comando cambia el comportamiento de eBGP de FRR. De manera predeterminada, FRR habilita la funcionalidad :rfc:`8212` que afecta la forma en que se anuncian las rutas eBGP, es decir, no se anuncian rutas en las sesiones de eBGP sin algún tipo de política/mapa de ruta de salida en su lugar. En VyOS, sin embargo, tenemos esta función RFC deshabilitada de forma predeterminada para que podamos preservar la compatibilidad con versiones anteriores de VyOS. Con esta opción se puede habilitar la funcionalidad :rfc:`8212` para operar." @@ -13954,23 +15477,23 @@ msgstr "Este comando define los parámetros coincidentes para la regla de la lis msgid "This command defines the IS-IS router behavior:" msgstr "Este comando define el comportamiento del enrutador IS-IS:" -#: ../../configuration/protocols/bgp.rst:720 +#: ../../configuration/protocols/bgp.rst:742 msgid "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." msgstr "Este comando define el importe de la penalización acumulada en el que se vuelve a anunciar la ruta. El rango de penalización es de 1 a 20000." -#: ../../configuration/protocols/bgp.rst:726 +#: ../../configuration/protocols/bgp.rst:748 msgid "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." msgstr "Este comando define la cantidad de penalización acumulada en la que se suprime la ruta. El rango de penalización es de 1 a 20000." -#: ../../configuration/protocols/bgp.rst:713 +#: ../../configuration/protocols/bgp.rst:735 msgid "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." msgstr "Este comando define la cantidad de tiempo en minutos después de la cual una penalización se reduce a la mitad. El rango del temporizador es de 10 a 45 minutos." -#: ../../configuration/protocols/bgp.rst:595 +#: ../../configuration/protocols/bgp.rst:601 msgid "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." msgstr "Este comando define el número máximo de rutas paralelas que puede soportar el BGP. Para que BGP utilice la segunda ruta, los siguientes atributos deben coincidir: peso, preferencia local, ruta AS (tanto el número AS como la longitud de la ruta AS), código de origen, MED, métrica IGP. Además, la dirección del siguiente salto para cada ruta debe ser diferente." -#: ../../configuration/protocols/bgp.rst:732 +#: ../../configuration/protocols/bgp.rst:754 msgid "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." msgstr "Este comando define el tiempo máximo en minutos que se suprime una ruta. El rango del temporizador es de 1 a 255 minutos." @@ -13997,7 +15520,7 @@ msgstr "Este comando deshabilita la verificación del valor de MTU en los paquet msgid "This command disables it." msgstr "Este comando lo desactiva." -#: ../../configuration/protocols/bgp.rst:607 +#: ../../configuration/protocols/bgp.rst:619 msgid "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." msgstr "Este comando deshabilita la reflexión de ruta entre clientes de reflectores de ruta. De forma predeterminada, no se requiere que los clientes de un reflector de ruta estén completamente mallados y las rutas de un cliente se reflejan a otros clientes. Sin embargo, si los clientes están completamente en malla, no se requiere la reflexión de ruta. En este caso, use el comando :cfgcmd:`no-client-to-client-reflection` para deshabilitar la reflexión de cliente a cliente." @@ -14009,23 +15532,23 @@ msgstr "Este comando deshabilita el horizonte dividido en la interfaz. De forma msgid "This command disables the load sharing across multiple LFA backups." msgstr "This command disables the load sharing across multiple LFA backups." -#: ../../configuration/protocols/bgp.rst:1009 +#: ../../configuration/protocols/bgp.rst:1031 msgid "This command displays BGP dampened routes." msgstr "Este comando muestra las rutas amortiguadas de BGP." -#: ../../configuration/protocols/bgp.rst:1032 +#: ../../configuration/protocols/bgp.rst:1054 msgid "This command displays BGP received-routes that are accepted after filtering." msgstr "Este comando muestra las rutas recibidas de BGP que se aceptan después del filtrado." -#: ../../configuration/protocols/bgp.rst:1022 +#: ../../configuration/protocols/bgp.rst:1044 msgid "This command displays BGP routes advertised to a neighbor." msgstr "Este comando muestra las rutas BGP anunciadas a un vecino." -#: ../../configuration/protocols/bgp.rst:1017 +#: ../../configuration/protocols/bgp.rst:1039 msgid "This command displays BGP routes allowed by the specified AS Path access list." msgstr "Este comando muestra las rutas BGP permitidas por la lista de acceso de AS Path especificada." -#: ../../configuration/protocols/bgp.rst:1026 +#: ../../configuration/protocols/bgp.rst:1048 msgid "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." msgstr "Este comando muestra las rutas BGP que se originan en el vecino BGP especificado antes de que se aplique la política de entrada. Para usar este comando, la reconfiguración suave entrante debe estar habilitada." @@ -14052,11 +15575,11 @@ msgstr "Este comando muestra una tabla de resumen con el contenido de una base d msgid "This command displays a table of paths to area boundary and autonomous system boundary routers." msgstr "Este comando muestra una tabla de rutas a los enrutadores de límite de área y de sistema autónomo." -#: ../../configuration/protocols/bgp.rst:957 +#: ../../configuration/protocols/bgp.rst:979 msgid "This command displays all entries in BGP routing table." msgstr "Este comando muestra todas las entradas en la tabla de enrutamiento BGP." -#: ../../configuration/protocols/bgp.rst:1036 +#: ../../configuration/protocols/bgp.rst:1058 msgid "This command displays dampened routes received from BGP neighbor." msgstr "Este comando muestra las rutas amortiguadas recibidas del vecino BGP." @@ -14064,27 +15587,27 @@ msgstr "Este comando muestra las rutas amortiguadas recibidas del vecino BGP." msgid "This command displays external information redistributed into OSPFv3" msgstr "Este comando muestra información externa redistribuida en OSPFv3" -#: ../../configuration/protocols/bgp.rst:1040 +#: ../../configuration/protocols/bgp.rst:1062 msgid "This command displays information about BGP routes whose AS path matches the specified regular expression." msgstr "Este comando muestra información sobre rutas BGP cuya ruta AS coincide con la expresión regular especificada." -#: ../../configuration/protocols/bgp.rst:1013 +#: ../../configuration/protocols/bgp.rst:1035 msgid "This command displays information about flapping BGP routes." msgstr "Este comando muestra información sobre las rutas BGP fluctuantes." -#: ../../configuration/protocols/bgp.rst:977 +#: ../../configuration/protocols/bgp.rst:999 msgid "This command displays information about the particular entry in the BGP routing table." msgstr "Este comando muestra información sobre la entrada particular en la tabla de enrutamiento BGP." -#: ../../configuration/protocols/bgp.rst:1004 +#: ../../configuration/protocols/bgp.rst:1026 msgid "This command displays routes that are permitted by the BGP community list." msgstr "Este comando muestra las rutas permitidas por la lista de la comunidad BGP." -#: ../../configuration/protocols/bgp.rst:997 +#: ../../configuration/protocols/bgp.rst:1019 msgid "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." msgstr "Este comando muestra rutas que pertenecen a comunidades BGP específicas. El valor válido es un número de comunidad en el rango de 1 a 4294967200, o AA:NN (sistema autónomo-número de comunidad/número de 2 bytes), sin exportación, como local o sin publicidad." -#: ../../configuration/protocols/bgp.rst:993 +#: ../../configuration/protocols/bgp.rst:1015 msgid "This command displays routes with classless interdomain routing (CIDR)." msgstr "Este comando muestra rutas con enrutamiento entre dominios sin clases (CIDR)." @@ -14126,7 +15649,7 @@ msgstr "Este comando muestra el estado de los vecinos." msgid "This command displays the neighbors status for a neighbor on the specified interface." msgstr "Este comando muestra el estado de los vecinos de un vecino en la interfaz especificada." -#: ../../configuration/protocols/bgp.rst:1045 +#: ../../configuration/protocols/bgp.rst:1067 msgid "This command displays the status of all BGP connections." msgstr "Este comando muestra el estado de todas las conexiones BGP." @@ -14134,7 +15657,7 @@ msgstr "Este comando muestra el estado de todas las conexiones BGP." msgid "This command enable/disables summarisation for the configured address range." msgstr "Este comando habilita/deshabilita el resumen para el rango de direcciones configurado." -#: ../../configuration/protocols/bgp.rst:603 +#: ../../configuration/protocols/bgp.rst:615 msgid "This command enable logging neighbor up/down changes and reset reason." msgstr "Este comando permite registrar los cambios de vecinos arriba/abajo y restablecer el motivo." @@ -14174,7 +15697,7 @@ msgstr "Este comando permite enviar marcas de tiempo con cada mensaje Hello e IH msgid "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." msgstr "Este comando habilita la compatibilidad con TLV de nombre de host dinámico. Asignación dinámica de nombres de host determinada como se describe en :rfc:`2763`, Mecanismo de intercambio de nombres de host dinámicos para IS-IS." -#: ../../configuration/protocols/bgp.rst:875 +#: ../../configuration/protocols/bgp.rst:897 msgid "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." msgstr "Este comando habilita la capacidad ORF (descrita en :rfc:`5291`) en el enrutador local y habilita el anuncio de la capacidad ORF al par BGP especificado. La palabra clave :cfgcmd:`receive` configura un enrutador para anunciar capacidades de recepción ORF. La palabra clave :cfgcmd:`send` configura un enrutador para anunciar capacidades de envío de ORF. Para anunciar un filtro de un remitente, debe crear una lista de prefijos de IP para el par BGP especificado aplicado en la desviación entrante." @@ -14198,7 +15721,7 @@ msgstr "Este comando genera una ruta predeterminada en el RIP." msgid "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "Este comando brinda una breve descripción general del estado de una interfaz inalámbrica específica. El identificador de la interfaz inalámbrica puede oscilar entre wlan0 y wlan999." -#: ../../configuration/protocols/bgp.rst:632 +#: ../../configuration/protocols/bgp.rst:644 msgid "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." msgstr "Este comando va de la mano con el comando listen range para limitar la cantidad de vecinos BGP que pueden conectarse al enrutador local. El rango límite es de 1 a 5000." @@ -14241,7 +15764,7 @@ msgstr "Este comando se utiliza para anunciar redes IPv4 o IPv6." msgid "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." msgstr "Este comando se utiliza para recuperar información sobre WAP dentro del alcance de su interfaz inalámbrica. Este comando es útil en interfaces inalámbricas configuradas en modo estación." -#: ../../configuration/protocols/bgp.rst:620 +#: ../../configuration/protocols/bgp.rst:632 msgid "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." msgstr "Este comando es útil si se desea aflojar el requisito de que BGP tenga vecinos estrictamente definidos. Específicamente, lo que está permitido es que el enrutador local escuche un rango de direcciones IPv4 o IPv6 definidas por un prefijo y acepte mensajes abiertos de BGP. Cuando una conexión TCP (y, posteriormente, un mensaje abierto BGP) dentro de este rango intenta conectarse al enrutador local, el enrutador local responderá y se conectará con los parámetros definidos dentro del grupo de pares. Se debe definir un grupo de pares para cada rango que se enumera. Si no se define ningún grupo de pares, un error le impedirá confirmar la configuración." @@ -14253,15 +15776,15 @@ msgstr "Este comando modifica el valor de la métrica predeterminada (conteo de msgid "This command override AS number of the originating router with the local AS number." msgstr "Este comando anula el número de AS del enrutador de origen con el número de AS local." -#: ../../configuration/protocols/bgp.rst:885 +#: ../../configuration/protocols/bgp.rst:907 msgid "This command prevents from sending back prefixes learned from the neighbor." msgstr "Este comando evita que se devuelvan los prefijos aprendidos del vecino." -#: ../../configuration/protocols/bgp.rst:804 +#: ../../configuration/protocols/bgp.rst:826 msgid "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." msgstr "Este comando permite comparar diferentes valores MED que anuncian los vecinos en el mismo AS para la selección de rutas. Cuando este comando está habilitado, las rutas de un mismo sistema autónomo se agrupan y se comparan las mejores entradas de cada grupo." -#: ../../configuration/protocols/bgp.rst:741 +#: ../../configuration/protocols/bgp.rst:763 msgid "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." msgstr "Este comando permite comparar los MED en las rutas, incluso cuando se recibieron de diferentes ASes vecinos. Establecer esta opción hace que el orden de preferencia de las rutas sea más definido y debería eliminar las oscilaciones inducidas por MED." @@ -14297,19 +15820,19 @@ msgstr "Este comando redistribuye la información de enrutamiento desde el orige msgid "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." msgstr "Este comando elimina el ASN privado de las rutas que se anuncian al par configurado. Elimina solo los ASN privados en las rutas anunciadas a los pares EBGP." -#: ../../configuration/protocols/bgp.rst:1068 +#: ../../configuration/protocols/bgp.rst:1090 msgid "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "Este comando restablece las conexiones BGP a la dirección IP vecina especificada. Con el argumento :cfgcmd:`soft`, este comando inicia un restablecimiento parcial. Si no especifica las opciones :cfgcmd:`in` o :cfgcmd:`out`, se activan la reconfiguración suave tanto de entrada como de salida." -#: ../../configuration/protocols/bgp.rst:1088 +#: ../../configuration/protocols/bgp.rst:1110 msgid "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "Este comando restablece las conexiones BGP al grupo de pares especificado. Con el argumento :cfgcmd:`soft`, este comando inicia un restablecimiento parcial. Si no especifica las opciones :cfgcmd:`in` o :cfgcmd:`out`, se activan la reconfiguración suave tanto de entrada como de salida." -#: ../../configuration/protocols/bgp.rst:1075 +#: ../../configuration/protocols/bgp.rst:1097 msgid "This command resets all BGP connections of given router." msgstr "Este comando restablece todas las conexiones BGP del enrutador dado." -#: ../../configuration/protocols/bgp.rst:1084 +#: ../../configuration/protocols/bgp.rst:1106 msgid "This command resets all external BGP peers of given router." msgstr "Este comando restablece todos los pares BGP externos del enrutador dado." @@ -14389,7 +15912,7 @@ msgstr "Este comando establece el número de segundos para el valor del temporiz msgid "This command sets old-style (ISO 10589) or new style packet formats:" msgstr "Este comando establece formatos de paquetes de estilo antiguo (ISO 10589) o de estilo nuevo:" -#: ../../configuration/protocols/bgp.rst:944 +#: ../../configuration/protocols/bgp.rst:966 msgid "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." msgstr "Este comando establece otras confederaciones<nsubasn> como miembros del sistema autónomo especificado por :cfgcmd:`identificador de confederación<asn> `." @@ -14401,7 +15924,7 @@ msgstr "Este comando establece un bit de sobrecarga para evitar cualquier tráfi msgid "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." msgstr "Este comando establece la prioridad de la interfaz para la elección de :abbr:`DIS (Sistema intermedio designado)`. El rango de prioridad es de 0 a 127." -#: ../../configuration/protocols/bgp.rst:659 +#: ../../configuration/protocols/bgp.rst:681 msgid "This command sets the administrative distance for a particular route. The distance range is 1 to 255." msgstr "Este comando establece la distancia administrativa para una ruta en particular. El rango de distancia es de 1 a 255." @@ -14461,7 +15984,7 @@ msgstr "Este comando NO debe configurarse normalmente." msgid "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "Este comando muestra tanto el estado como las estadísticas de la interfaz inalámbrica especificada. El identificador de la interfaz inalámbrica puede oscilar entre wlan0 y wlan999." -#: ../../configuration/protocols/bgp.rst:938 +#: ../../configuration/protocols/bgp.rst:960 msgid "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." msgstr "Este comando especifica un identificador de confederación BGP.<asn> es el número del sistema autónomo que incluye internamente múltiples sistemas subautónomos (una confederación)." @@ -14517,11 +16040,11 @@ msgstr "Este comando especifica los atributos que se mantendrán sin cambios par msgid "This command specifies circuit type for interface:" msgstr "Este comando especifica el tipo de circuito para la interfaz:" -#: ../../configuration/protocols/bgp.rst:920 +#: ../../configuration/protocols/bgp.rst:942 msgid "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." msgstr "Este comando especifica el ID de clúster que identifica una colección de reflectores de ruta y sus clientes, y los reflectores de ruta lo utilizan para evitar bucles. De forma predeterminada, la identificación del clúster se establece en el valor de identificación del enrutador BGP, pero se puede establecer en un valor arbitrario de 32 bits." -#: ../../configuration/protocols/bgp.rst:671 +#: ../../configuration/protocols/bgp.rst:693 msgid "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." msgstr "Este comando especifica el tiempo de espera en segundos. El rango del temporizador es de 4 a 65535. El valor predeterminado es 180 segundos. Si establece el valor en 0, VyOS no retendrá las rutas." @@ -14530,7 +16053,7 @@ msgstr "Este comando especifica el tiempo de espera en segundos. El rango del te msgid "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." msgstr "Este comando especifica la interfaz como pasiva. La interfaz pasiva anuncia su dirección, pero no ejecuta el protocolo OSPF (no se forman adyacencias y no se generan paquetes de saludo)." -#: ../../configuration/protocols/bgp.rst:677 +#: ../../configuration/protocols/bgp.rst:699 msgid "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." msgstr "Este comando especifica el tiempo de actividad en segundos. El temporizador puede oscilar entre 4 y 65535. El valor predeterminado es 60 segundos." @@ -14558,15 +16081,15 @@ msgstr "Este comando especifica el tipo de métrica para las rutas redistribuida msgid "This command specifies network type to Point-to-Point. The default network type is broadcast." msgstr "Este comando especifica el tipo de red Punto a punto. El tipo de red predeterminado es de difusión." -#: ../../configuration/protocols/bgp.rst:784 +#: ../../configuration/protocols/bgp.rst:806 msgid "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." msgstr "Este comando especifica que BGP considera el MED al comparar rutas originadas en diferentes sub-AS dentro de la confederación a la que pertenece este hablante de BGP. El estado predeterminado, donde no se considera el atributo MED." -#: ../../configuration/protocols/bgp.rst:754 +#: ../../configuration/protocols/bgp.rst:776 msgid "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." msgstr "Este comando especifica que el proceso de decisión de BGP debe considerar caminos de igual longitud AS_PATH candidatos para el cálculo de caminos múltiples. Sin la perilla, el AS_PATH completo debe coincidir para el cálculo de rutas múltiples." -#: ../../configuration/protocols/bgp.rst:791 +#: ../../configuration/protocols/bgp.rst:813 msgid "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." msgstr "Este comando especifica que una ruta con MED siempre se considera mejor que una ruta sin MED al hacer que el atributo MED faltante tenga un valor de infinito. El estado predeterminado, donde se considera que el atributo MED faltante tiene un valor de cero." @@ -14582,7 +16105,7 @@ msgstr "Este comando especifica que se debe usar autenticación de contraseña s msgid "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." msgstr "Este comando especifica que el atributo de comunidad no debe enviarse en actualizaciones de ruta a un par. Por defecto se envía el atributo de comunidad." -#: ../../configuration/protocols/bgp.rst:748 +#: ../../configuration/protocols/bgp.rst:770 msgid "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." msgstr "Este comando especifica que la longitud de los conjuntos y secuencias de rutas de la confederación debe tenerse en cuenta durante el proceso de decisión de la mejor ruta de BGP." @@ -14622,7 +16145,7 @@ msgstr "Este comando especifica el costo de recepción base para esta interfaz. msgid "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." msgstr "Este comando especifica el factor de caída para el promedio móvil exponencial de muestras RTT, en unidades de 1/256. Los valores más altos descartan las muestras antiguas más rápido. El valor predeterminado es 42." -#: ../../configuration/protocols/bgp.rst:799 +#: ../../configuration/protocols/bgp.rst:821 msgid "This command specifies the default local preference value. The local preference range is 0 to 4294967295." msgstr "Este comando especifica el valor de preferencia local predeterminado. El rango de preferencia local es de 0 a 4294967295." @@ -14634,7 +16157,7 @@ msgstr "Este comando especifica el valor de métrica predeterminado de las rutas msgid "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." msgstr "Este comando especifica el temporizador de recolección de basura. Al expirar el temporizador de recolección de elementos no utilizados, la ruta finalmente se elimina de la tabla de enrutamiento. El intervalo de tiempo es de 5 a 2147483647. El valor predeterminado es de 120 segundos." -#: ../../configuration/protocols/bgp.rst:916 +#: ../../configuration/protocols/bgp.rst:938 msgid "This command specifies the given neighbor as route reflector client." msgstr "Este comando especifica al vecino dado como cliente reflector de ruta." @@ -14658,7 +16181,7 @@ msgstr "Este comando especifica el RTT mínimo, en milisegundos, a partir del cu msgid "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." msgstr "Este comando especifica el intervalo mínimo de anuncio de ruta para el par. El valor del intervalo es de 0 a 600 segundos, siendo el intervalo de publicidad predeterminado 0." -#: ../../configuration/protocols/bgp.rst:589 +#: ../../configuration/protocols/bgp.rst:595 msgid "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." msgstr "Este comando especifica el ID del enrutador. Si no se especifica la ID del enrutador, utilizará la dirección IP de interfaz más alta." @@ -14714,7 +16237,7 @@ msgstr "Este comando resume las rutas dentro del área desde el área especifica msgid "This command to ensure not advertise the summary lsa for the matched external LSAs." msgstr "Este comando garantiza que no se anuncie el lsa resumido para los LSA externos coincidentes." -#: ../../configuration/protocols/bgp.rst:1079 +#: ../../configuration/protocols/bgp.rst:1101 msgid "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." msgstr "Este comando se usa para borrar la información de atenuación de la ruta BGP y para desactivar las rutas suprimidas." @@ -14763,7 +16286,7 @@ msgstr "Este comando generará una ruta predeterminada en la base de datos L2." msgid "This command will give an overview of a rule in a single rule-set" msgstr "Este comando brindará una descripción general de una regla en un solo conjunto de reglas" -#: ../../configuration/firewall/ipv4.rst:1091 +#: ../../configuration/firewall/ipv4.rst:1114 msgid "This command will give an overview of a rule in a single rule-set, plus information for default action." msgstr "This command will give an overview of a rule in a single rule-set, plus information for default action." @@ -14771,7 +16294,7 @@ msgstr "This command will give an overview of a rule in a single rule-set, plus msgid "This command will give an overview of a rule in a single rule-set." msgstr "Este comando le dará una descripción general de una regla en un solo conjunto de reglas." -#: ../../configuration/firewall/ipv4.rst:1072 +#: ../../configuration/firewall/ipv4.rst:1095 #: ../../configuration/firewall/ipv6.rst:1088 msgid "This command will give an overview of a single rule-set." msgstr "Este comando le dará una visión general de un solo conjunto de reglas." @@ -14792,11 +16315,19 @@ msgstr "Este comando crea un puente que se usa para vincular el tráfico en eth1 msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "Este comando especifica la máquina de estados finitos (FSM) destinada a controlar el tiempo de ejecución de los cálculos SPF en respuesta a eventos IGP. El proceso descrito en :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "Esta configuración habilita el proxy inverso TCP para el servicio "my-tcp-api". Las conexiones TCP entrantes en el puerto 8888 se equilibrarán en la carga de los servidores backend (srv01 y srv02) mediante el algoritmo de equilibrio de carga por turnos." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "Esta configuración escucha en el puerto 80 y redirige las solicitudes entrantes a HTTPS:" @@ -14804,15 +16335,23 @@ msgstr "Esta configuración escucha en el puerto 80 y redirige las solicitudes e msgid "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." msgstr "Esta configuración modifica el comportamiento de la sentencia de red. Si tiene esto configurado, la red subyacente debe existir en la tabla de enrutamiento." -#: ../../configuration/service/dhcp-server.rst:76 -#: ../../configuration/service/dhcp-server.rst:520 +#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:579 msgid "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." msgstr "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." -#: ../../configuration/service/dhcp-server.rst:58 +#: ../../configuration/service/dhcp-server.rst:74 msgid "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." msgstr "Este parámetro de configuración permite que el servidor DHCP escuche las solicitudes DHCP enviadas a la dirección especificada. Solo es útil de manera realista para un servidor cuyos únicos clientes se alcanzan a través de unidifusión, como a través de agentes de retransmisión DHCP." +#: ../../configuration/service/dhcp-server.rst:58 +msgid "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" + +#: ../../configuration/service/dhcp-server.rst:154 +msgid "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" + #: ../../configuration/trafficpolicy/index.rst:628 msgid "This could be helpful if you want to test how an application behaves under certain network conditions." msgstr "Esto podría ser útil si desea probar cómo se comporta una aplicación en determinadas condiciones de red." @@ -14825,7 +16364,7 @@ msgstr "Esto crea una política de ruta denominada FILTRO-WEB con una regla para msgid "This defaults to 10000." msgstr "Esto por defecto es 10000." -#: ../../configuration/system/login.rst:254 +#: ../../configuration/system/login.rst:258 msgid "This defaults to 1812." msgstr "Esto por defecto es 1812." @@ -14833,7 +16372,7 @@ msgstr "Esto por defecto es 1812." msgid "This defaults to 2007." msgstr "Esto por defecto es 2007." -#: ../../configuration/service/dns.rst:271 +#: ../../configuration/service/dns.rst:285 msgid "This defaults to 300 seconds." msgstr "This defaults to 300 seconds." @@ -14841,7 +16380,7 @@ msgstr "This defaults to 300 seconds." msgid "This defaults to 30 seconds." msgstr "Esto por defecto es de 30 segundos." -#: ../../configuration/system/login.rst:323 +#: ../../configuration/system/login.rst:327 msgid "This defaults to 49." msgstr "Esto por defecto es 49." @@ -14857,7 +16396,7 @@ msgstr "Esto por defecto es UDP" msgid "This defaults to both 1.2 and 1.3." msgstr "This defaults to both 1.2 and 1.3." -#: ../../configuration/pki/index.rst:283 +#: ../../configuration/pki/index.rst:314 msgid "This defaults to https://acme-v02.api.letsencrypt.org/directory" msgstr "This defaults to https://acme-v02.api.letsencrypt.org/directory" @@ -14893,15 +16432,27 @@ msgstr "Esto establece nuestra regla Port Forward, pero si creamos una política msgid "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." msgstr "Este ejemplo muestra cómo apuntar una abrazadera MSS (en nuestro ejemplo a 1360 bytes) a una IP de destino específica." +#: ../../configuration/vpn/ipsec.rst:392 +msgid "This example uses CACert as certificate authority." +msgstr "This example uses CACert as certificate authority." + +#: ../../configuration/vpn/ipsec.rst:386 +msgid "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." +msgstr "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." + +#: ../../configuration/protocols/bfd.rst:64 +msgid "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." +msgstr "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." + #: ../../configuration/protocols/ospf.rst:476 msgid "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." msgstr "Esta característica resume los LSA externos originados (Tipo 5 y Tipo 7). La ruta resumida se originará en nombre de todos los LSA externos coincidentes." -#: ../../configuration/service/dns.rst:404 +#: ../../configuration/service/dns.rst:418 msgid "This functionality is controlled by adding the following configuration:" msgstr "This functionality is controlled by adding the following configuration:" -#: ../../configuration/firewall/ipv4.rst:376 +#: ../../configuration/firewall/ipv4.rst:399 #: ../../configuration/firewall/ipv6.rst:378 msgid "This functions for both individual addresses and address groups." msgstr "Esto funciona tanto para direcciones individuales como para grupos de direcciones." @@ -14930,11 +16481,11 @@ msgstr "Esto le indica a opennhrp que responda con respuestas autorizadas en las msgid "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." msgstr "Este es un escenario común en el que tanto :ref:`source-nat` como :ref:`destination-nat` se configuran al mismo tiempo. Se usa comúnmente cuando los hosts internos (privados) necesitan establecer una conexión con recursos externos y los sistemas externos necesitan acceder a recursos internos (privados)." -#: ../../configuration/service/dhcp-server.rst:82 +#: ../../configuration/service/dhcp-server.rst:98 msgid "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." msgstr "Este es un parámetro de configuración para `<subnet> `, diciendo que como parte de la respuesta, dígale al cliente que se puede acceder a la puerta de enlace predeterminada en `<address> `." -#: ../../configuration/service/dhcp-server.rst:89 +#: ../../configuration/service/dhcp-server.rst:105 msgid "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." msgstr "Este es un parámetro de configuración para la subred, que dice que, como parte de la respuesta, dígale al cliente que el servidor DNS se puede encontrar en `<address> `." @@ -14946,13 +16497,13 @@ msgstr "Este es un comando obligatorio. Establece la expresión regular para que msgid "This is a mandatory command. Sets the full path to the script. The script file must be executable." msgstr "Este es un comando obligatorio. Establece la ruta completa al script. El archivo de script debe ser ejecutable." -#: ../../configuration/pki/index.rst:261 -#: ../../configuration/pki/index.rst:267 +#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:298 msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:117 -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "Esta es una configuración obligatoria." @@ -15015,11 +16566,14 @@ msgstr "Este es el modelo de LCD utilizado en su sistema." #: ../../configuration/service/dhcp-server.rst:35 #: ../../configuration/service/dhcp-server.rst:44 -#: ../../configuration/service/dhcp-server.rst:51 msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." msgstr "Este es el parámetro de configuración para toda la definición de red compartida. Todas las subredes heredarán este elemento de configuración si no se especifica localmente." -#: ../../configuration/service/dhcp-server.rst:197 +#: ../../configuration/service/dhcp-server.rst:51 +msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." +msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." + +#: ../../configuration/service/dhcp-server.rst:253 msgid "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." msgstr "Este es el equivalente del bloque host en dhcpd.conf de isc-dhcpd." @@ -15031,7 +16585,7 @@ msgstr "Este es el nombre de la interfaz física utilizada para conectarse a su msgid "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" msgstr "Esta es la política que requiere los menores recursos para la misma cantidad de tráfico. Pero ** muy probablemente no lo necesite ya que no puede obtener mucho de él. A veces se usa solo para habilitar el registro.**" -#: ../../configuration/service/dhcp-server.rst:195 +#: ../../configuration/service/dhcp-server.rst:251 msgid "This is useful, for example, in combination with hostfile update." msgstr "Esto es útil, por ejemplo, en combinación con la actualización del archivo de host." @@ -15064,7 +16618,7 @@ msgstr "Este modo proporciona balanceo de carga y tolerancia a fallas." msgid "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." msgstr "Esta opción agrega el elemento Restricción de energía cuando corresponde y se agrega el elemento País. El control de potencia de transmisión requiere el elemento de restricción de potencia." -#: ../../configuration/service/dhcp-server.rst:119 +#: ../../configuration/service/dhcp-server.rst:135 msgid "This option can be specified multiple times." msgstr "Esta opción se puede especificar varias veces." @@ -15088,7 +16642,7 @@ msgstr "This option is used by some DHCP clients as a way for users to specify i msgid "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." msgstr "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." -#: ../../configuration/system/login.rst:390 +#: ../../configuration/system/login.rst:394 msgid "This option must be used with ``timeout`` option." msgstr "Esta opción debe usarse con la opción ``timeout``." @@ -15101,7 +16655,7 @@ msgstr "Esta opción solo afecta al modo 802.3ad." msgid "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." msgstr "Esta opción especifica un retraso en segundos antes de que se inicien las instancias de vrrp después de que se inicia keepalived." -#: ../../configuration/pki/index.rst:277 +#: ../../configuration/pki/index.rst:308 msgid "This options defaults to 2048" msgstr "This options defaults to 2048" @@ -15131,12 +16685,12 @@ msgstr "This required setting defines the action of the current rule. If action msgid "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" msgstr "Esto requiere dos archivos, uno para crear el dispositivo (XXX.netdev) y otro para configurar la red en el dispositivo (XXX.network)" -#: ../../configuration/interfaces/bridge.rst:208 -#: ../../configuration/interfaces/bridge.rst:244 +#: ../../configuration/interfaces/bridge.rst:217 +#: ../../configuration/interfaces/bridge.rst:253 msgid "This results in the active configuration:" msgstr "Esto da como resultado la configuración activa:" -#: ../../configuration/service/dhcp-server.rst:68 +#: ../../configuration/service/dhcp-server.rst:84 msgid "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." msgstr "Esto dice que este dispositivo es el único servidor DHCP para esta red. Si otros dispositivos intentan ofrecer arrendamientos de DHCP, esta máquina enviará 'DHCPNAK' a cualquier dispositivo que intente solicitar una dirección IP que no sea válida para esta red." @@ -15219,11 +16773,19 @@ msgstr "Esta es la cola más simple posible que puede aplicar a su tráfico. El msgid "This topology was built using GNS3." msgstr "Esta topología se construyó utilizando GNS3." +#: ../../configuration/system/option.rst:38 +msgid "This will add the following option to the Kernel commandline:" +msgstr "This will add the following option to the Kernel commandline:" + +#: ../../configuration/system/option.rst:48 +msgid "This will add the following two options to the Kernel commandline:" +msgstr "This will add the following two options to the Kernel commandline:" + #: ../../configuration/interfaces/ethernet.rst:9 msgid "This will be the most widely used interface on a router carrying traffic to the real world." msgstr "Esta será la interfaz más utilizada en un enrutador que lleve tráfico al mundo real." -#: ../../configuration/protocols/static.rst:171 +#: ../../configuration/protocols/static.rst:204 msgid "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." msgstr "Esto configurará una entrada ARP estática siempre resolviendo `<address> ` a `<mac> ` para la interfaz `<interface> `." @@ -15231,7 +16793,7 @@ msgstr "Esto configurará una entrada ARP estática siempre resolviendo `<addres msgid "This will match TCP traffic with source port 80." msgstr "Esto hará coincidir el tráfico TCP con el puerto de origen 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" msgstr "Esto generará la siguiente entrada de configuración ddclient_:" @@ -15239,7 +16801,7 @@ msgstr "Esto generará la siguiente entrada de configuración ddclient_:" msgid "This will show you a basic firewall overview" msgstr "Esto le mostrará una descripción general básica del firewall" -#: ../../configuration/firewall/ipv4.rst:961 +#: ../../configuration/firewall/ipv4.rst:984 msgid "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" msgstr "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" @@ -15255,17 +16817,17 @@ msgstr "This will show you a basic summary of zones configuration." msgid "This will show you a rule-set statistic since the last boot." msgstr "Esto le mostrará una estadística de conjunto de reglas desde el último arranque." -#: ../../configuration/firewall/ipv4.rst:1112 +#: ../../configuration/firewall/ipv4.rst:1135 #: ../../configuration/firewall/ipv6.rst:1135 msgid "This will show you a statistic of all rule-sets since the last boot." msgstr "Esto le mostrará una estadística de todos los conjuntos de reglas desde el último arranque." -#: ../../configuration/firewall/ipv4.rst:1016 +#: ../../configuration/firewall/ipv4.rst:1039 #: ../../configuration/firewall/ipv6.rst:1032 msgid "This will show you a summary of rule-sets and groups" msgstr "Esto le mostrará un resumen de conjuntos de reglas y grupos." -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "Esta solución le permite aplicar una política de modelado al tráfico de entrada al redirigirlo primero a una interfaz virtual intermedia ("Bloque funcional intermedio"_). Allí, en esa interfaz virtual, podrá aplicar cualquiera de las políticas que funcionan para el tráfico saliente, por ejemplo, una de configuración." @@ -15301,29 +16863,49 @@ msgstr "Tiempo en segundos que el prefijo seguirá siendo preferido (por defecto msgid "Time in seconds that the prefix will remain valid (default: 30 days)" msgstr "Tiempo en segundos que el prefijo seguirá siendo válido (predeterminado: 30 días)" +#: ../../configuration/service/router-advert.rst:1 +msgid "Time in seconds that the prefix will remain valid (default: 65528 seconds)" +msgstr "Time in seconds that the prefix will remain valid (default: 65528 seconds)" + #: ../../configuration/service/webproxy.rst:177 msgid "Time is in minutes and defaults to 60." msgstr "El tiempo es en minutos y el valor predeterminado es 60." -#: ../../configuration/firewall/ipv4.rst:874 +#: ../../configuration/firewall/ipv4.rst:897 #: ../../configuration/firewall/ipv6.rst:883 #: ../../configuration/policy/route.rst:225 msgid "Time to match the defined rule." msgstr "Tiempo para hacer coincidir la regla definida." +#: ../../configuration/service/ipoe-server.rst:368 +#: ../../configuration/service/pppoe-server.rst:534 +#: ../../configuration/vpn/l2tp.rst:488 +#: ../../configuration/vpn/pptp.rst:412 +#: ../../configuration/vpn/sstp.rst:446 +msgid "Timeout in seconds" +msgstr "Timeout in seconds" + #: ../../configuration/protocols/failover.rst:24 msgid "Timeout in seconds between health target checks." msgstr "Tiempo de espera en segundos entre comprobaciones de objetivos de estado." -#: ../../configuration/vpn/sstp.rst:234 +#: ../../configuration/service/ipoe-server.rst:174 +#: ../../configuration/service/pppoe-server.rst:136 +#: ../../configuration/vpn/l2tp.rst:179 +#: ../../configuration/vpn/pptp.rst:119 +#: ../../configuration/vpn/sstp.rst:152 msgid "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" msgstr "Tiempo de espera para esperar la respuesta de los paquetes de actualización provisional. (predeterminado 3 segundos)" -#: ../../configuration/vpn/sstp.rst:254 +#: ../../configuration/service/ipoe-server.rst:194 +#: ../../configuration/service/pppoe-server.rst:156 +#: ../../configuration/vpn/l2tp.rst:199 +#: ../../configuration/vpn/pptp.rst:139 +#: ../../configuration/vpn/sstp.rst:172 msgid "Timeout to wait response from server (seconds)" msgstr "Tiempo de espera para esperar la respuesta del servidor (segundos)" -#: ../../configuration/protocols/bgp.rst:667 +#: ../../configuration/protocols/bgp.rst:689 #: ../../configuration/protocols/isis.rst:257 msgid "Timers" msgstr "Temporizadores" @@ -15332,7 +16914,7 @@ msgstr "Temporizadores" msgid "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" msgstr "Para activar el puente compatible con VLAN, debe activar esta configuración para usar la configuración de VLAN para el puente" -#: ../../configuration/vpn/l2tp.rst:58 +#: ../../configuration/vpn/l2tp.rst:108 msgid "To allow VPN-clients access via your external address, a NAT rule is required:" msgstr "Para permitir el acceso de clientes VPN a través de su dirección externa, se requiere una regla NAT:" @@ -15344,7 +16926,7 @@ msgstr "To allow listing additional custom domain, for example ``openthread.thre msgid "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" msgstr "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" -#: ../../configuration/vpn/site2site_ipsec.rst:257 +#: ../../configuration/vpn/site2site_ipsec.rst:260 msgid "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" msgstr "Para permitir que el tráfico pase a los clientes, debe agregar las siguientes reglas. (si usó la configuración predeterminada en la parte superior de esta página)" @@ -15442,11 +17024,11 @@ msgstr "Para configurar syslog, debe cambiar al modo de configuración." msgid "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." msgstr "Para configurar su pantalla LCD, primero debe identificar el hardware utilizado y la conectividad de la pantalla con su sistema. Puede ser cualquier puerto serie (`ttySxx`) o serie a través de USB o incluso interfaces de puerto paralelo antiguas." -#: ../../configuration/service/ipoe-server.rst:98 +#: ../../configuration/service/ipoe-server.rst:99 msgid "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." msgstr "Para crear VLAN por usuario durante el tiempo de ejecución, se requieren las siguientes configuraciones por interfaz. El ID de VLAN y el rango de VLAN pueden estar presentes en la configuración al mismo tiempo." -#: ../../configuration/system/login.rst:377 +#: ../../configuration/system/login.rst:381 msgid "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." msgstr "Para crear una nueva línea en su mensaje de inicio de sesión, debe escapar del carácter de nueva línea usando ``\\\\n``." @@ -15462,11 +17044,11 @@ msgstr "Para crear la tabla de enrutamiento 100 y agregar una nueva puerta de en msgid "To define a zone setup either one with interfaces or a local zone." msgstr "Para definir una configuración de zona, ya sea una con interfaces o una zona local." -#: ../../configuration/service/router-advert.rst:75 +#: ../../configuration/service/router-advert.rst:101 msgid "To disable advertisements without deleting the configuration:" msgstr "Para deshabilitar los anuncios sin borrar la configuración:" -#: ../../configuration/system/login.rst:190 +#: ../../configuration/system/login.rst:194 msgid "To display the configured OTP user key, use the command:" msgstr "Para mostrar la clave de usuario OTP configurada, use el comando:" @@ -15483,7 +17065,11 @@ msgstr "Para habilitar/deshabilitar el soporte auxiliar para un vecino específi msgid "To enable MLD reports and query on interfaces `eth0` and `eth1`:" msgstr "To enable MLD reports and query on interfaces `eth0` and `eth1`:" -#: ../../configuration/vpn/l2tp.rst:141 +#: ../../configuration/service/ipoe-server.rst:116 +#: ../../configuration/service/pppoe-server.rst:78 +#: ../../configuration/vpn/l2tp.rst:121 +#: ../../configuration/vpn/pptp.rst:61 +#: ../../configuration/vpn/sstp.rst:94 msgid "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." msgstr "Para habilitar la autenticación basada en RADIUS, el modo de autenticación debe cambiarse dentro de la configuración. Las configuraciones anteriores, como los usuarios locales, todavía existen dentro de la configuración, sin embargo, no se usan si el modo se ha cambiado de local a radio. Una vez que vuelva a ser local, volverá a utilizar todas las cuentas locales." @@ -15491,7 +17077,7 @@ msgstr "Para habilitar la autenticación basada en RADIUS, el modo de autenticac msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "Para habilitar la configuración del ancho de banda a través de RADIUS, la opción de límite de velocidad debe estar habilitada." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "Para habilitar los mensajes de depuración. Disponible a través de :opcmd:`show log` o :opcmd:`monitor log`" @@ -15511,6 +17097,10 @@ msgstr "To enable the HTTP security headers in the configuration file, use the c msgid "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" msgstr "Para excluir el tráfico del equilibrio de carga, el tráfico que coincida con una regla de exclusión no se equilibra, sino que se enruta a través de la tabla de enrutamiento del sistema:" +#: ../../configuration/vpn/l2tp.rst:282 +msgid "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." +msgstr "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." + #: ../../configuration/service/snmp.rst:216 msgid "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." msgstr "Para ampliar la funcionalidad del agente SNMP, se pueden ejecutar secuencias de comandos personalizadas cada vez que se llama al agente. Esto se puede lograr usando ``comandos de extensión arbitrarios``. El primer paso es crear un script funcional, por supuesto, luego subirlo a su instancia de VyOS mediante el comando ``scp your_script.sh vyos@your_router:/config/user-data``. Una vez que se carga el script, debe configurarse mediante el siguiente comando." @@ -15527,11 +17117,15 @@ msgstr "Para generar la CA, la clave privada del servidor y los certificados, se msgid "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." msgstr "Para que funcione como un punto de acceso con esta configuración, deberá configurar un servidor DHCP para que funcione con esa red. Por supuesto, también puede unir la interfaz inalámbrica con cualquier puente configurado (:ref:`bridge-interface`) en el sistema." -#: ../../configuration/service/dhcp-server.rst:566 +#: ../../configuration/service/dhcp-server.rst:625 msgid "To hand out individual prefixes to your clients the following configuration is used:" msgstr "Para repartir prefijos individuales a sus clientes se utiliza la siguiente configuración:" -#: ../../configuration/highavailability/index.rst:336 +#: ../../configuration/vpn/ipsec.rst:405 +msgid "To import it from the filesystem use:" +msgstr "To import it from the filesystem use:" + +#: ../../configuration/highavailability/index.rst:346 msgid "To know more about scripting, check the :ref:`command-scripting` section." msgstr "Para saber más acerca de las secuencias de comandos, consulte la sección :ref:`command-scripting`." @@ -15539,7 +17133,7 @@ msgstr "Para saber más acerca de las secuencias de comandos, consulte la secci msgid "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" msgstr "Para escuchar los paquetes mDNS `eth0` y `eth1` y también repetir los paquetes recibidos en `eth0` a `eth1` (y viceversa), utilice los siguientes comandos:" -#: ../../configuration/protocols/static.rst:161 +#: ../../configuration/protocols/static.rst:194 msgid "To manipulate or display ARP_ table entries, the following commands are implemented." msgstr "Para manipular o mostrar las entradas de la tabla ARP_, se implementan los siguientes comandos." @@ -15552,7 +17146,7 @@ msgstr "Para realizar un apagado ordenado, se debe emitir el comando de nivel EX msgid "To request a /56 prefix from your ISP use:" msgstr "Para solicitar un prefijo /56 de su ISP, use:" -#: ../../configuration/service/dhcp-server.rst:680 +#: ../../configuration/service/dhcp-server.rst:741 msgid "To restart the DHCPv6 server" msgstr "Para reiniciar el servidor DHCPv6" @@ -15568,7 +17162,7 @@ msgstr "Para configurar una regla NAT de destino, debemos recopilar:" msgid "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" msgstr "Para actualizar el firmware, VyOS también envía el binario `qmi-firmware-update`. Para actualizar el firmware de, por ejemplo, un módulo Sierra Wireless MC7710 al firmware provisto en el archivo ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use el siguiente comando:" -#: ../../configuration/service/ipoe-server.rst:113 +#: ../../configuration/service/ipoe-server.rst:114 msgid "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." msgstr "Para usar un servidor RADIUS para la autenticación y la configuración del ancho de banda, se puede usar la siguiente configuración de ejemplo." @@ -15576,7 +17170,7 @@ msgstr "Para usar un servidor RADIUS para la autenticación y la configuración msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." msgstr "Para usar un servidor Radius, debe cambiar al modo de autenticación RADIUS y luego configurarlo." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." msgstr "Para utilizar dicho servicio, se debe definir un nombre de usuario, contraseña, uno o varios nombres de host, protocolo y servidor." @@ -15596,6 +17190,10 @@ msgstr "Topología:" msgid "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" msgstr "Topología: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" +#: ../../configuration/service/ipoe-server.rst:433 +msgid "Toubleshooting" +msgstr "Toubleshooting" + #: ../../configuration/highavailability/index.rst:171 msgid "Track" msgstr "Pista" @@ -15644,7 +17242,7 @@ msgstr "Traffic from multicast sources will go to the Rendezvous Point, and rece msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." msgstr "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." -#: ../../configuration/firewall/ipv4.rst:928 +#: ../../configuration/firewall/ipv4.rst:951 #: ../../configuration/firewall/ipv6.rst:937 msgid "Traffic must be symmetric" msgstr "Traffic must be symmetric" @@ -15653,11 +17251,11 @@ msgstr "Traffic must be symmetric" msgid "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" msgstr "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" -#: ../../configuration/highavailability/index.rst:322 +#: ../../configuration/highavailability/index.rst:332 msgid "Transition scripts" msgstr "Guiones de transición" -#: ../../configuration/highavailability/index.rst:324 +#: ../../configuration/highavailability/index.rst:334 msgid "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" msgstr "Los scripts de transición pueden ayudarlo a implementar varias correcciones, como iniciar y detener servicios, o incluso modificar la configuración de VyOS en la transición de VRRP. Esta configuración hará que el proceso VRRP ejecute ``/config/scripts/vrrp-fail.sh`` con el argumento ``Foo`` cuando falla VRRP, y ``/config/scripts/vrrp-master.sh`` cuando el enrutador se convierte en el maestro:" @@ -15667,6 +17265,8 @@ msgstr "Proxy transparente" #: ../../configuration/interfaces/openvpn.rst:701 #: ../../configuration/interfaces/tunnel.rst:227 +#: ../../configuration/vpn/pptp.rst:484 +#: ../../configuration/vpn/sstp.rst:580 msgid "Troubleshooting" msgstr "Solución de problemas" @@ -15682,6 +17282,10 @@ msgstr "Túnel" msgid "Tunnel keys" msgstr "llaves de tunel" +#: ../../configuration/vpn/l2tp.rst:280 +msgid "Tunnel password used to authenticate the client (LAC)" +msgstr "Tunnel password used to authenticate the client (LAC)" + #: ../../configuration/loadbalancing/wan.rst:257 msgid "Two environment variables are available:" msgstr "Hay dos variables de entorno disponibles:" @@ -15714,15 +17318,15 @@ msgstr "Retransmisión de difusión UDP" msgid "UDP mode works better with NAT:" msgstr "El modo UDP funciona mejor con NAT:" -#: ../../configuration/vpn/l2tp.rst:34 +#: ../../configuration/vpn/l2tp.rst:84 msgid "UDP port 1701 for IPsec" msgstr "Puerto UDP 1701 para IPsec" -#: ../../configuration/vpn/l2tp.rst:39 +#: ../../configuration/vpn/l2tp.rst:89 msgid "UDP port 4500 (NAT-T)" msgstr "Puerto UDP 4500 (NAT-T)" -#: ../../configuration/vpn/l2tp.rst:32 +#: ../../configuration/vpn/l2tp.rst:82 msgid "UDP port 500 (IKE)" msgstr "Puerto UDP 500 (IKE)" @@ -15746,6 +17350,10 @@ msgstr "Los convertidores de USB a serie manejarán la mayor parte de su trabajo msgid "UUCP subsystem" msgstr "subsistema UUCP" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "unidifusión" @@ -15778,11 +17386,11 @@ msgstr "Se pueden configurar hasta siete colas -definidas como clases_ con difer msgid "Update" msgstr "Actualizar" -#: ../../configuration/container/index.rst:171 +#: ../../configuration/container/index.rst:207 msgid "Update container image" msgstr "Actualizar la imagen del contenedor" -#: ../../configuration/firewall/ipv4.rst:1175 +#: ../../configuration/firewall/ipv4.rst:1198 #: ../../configuration/firewall/ipv6.rst:1191 msgid "Update geoip database" msgstr "Actualizar base de datos geoip" @@ -15791,14 +17399,21 @@ msgstr "Actualizar base de datos geoip" msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." msgstr "Las actualizaciones de los servidores de caché RPKI se aplican directamente y la selección de ruta se actualiza en consecuencia. (La reconfiguración suave debe estar habilitada para que esto funcione)." -#: ../../configuration/vpn/sstp.rst:90 +#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/vpn/l2tp.rst:391 +#: ../../configuration/vpn/pptp.rst:315 +#: ../../configuration/vpn/sstp.rst:349 msgid "Upload bandwidth limit in kbit/s for `<user>`." msgstr "Sube el límite de ancho de banda en kbit/s para `<user> `." +#: ../../configuration/service/ipoe-server.rst:325 +msgid "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." +msgstr "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." + #: ../../configuration/loadbalancing/wan.rst:209 msgid "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" msgstr "Tras la recepción de un paquete entrante, cuando se envía una respuesta, es posible que desee asegurarse de que sale de la misma interfaz que el de entrada. Esto se puede lograr habilitando conexiones pegajosas en el balanceo de carga:" @@ -15816,7 +17431,7 @@ msgstr "Usar el protocolo 802.11n" msgid "Use CA certificate from PKI subsystem" msgstr "Use CA certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:365 +#: ../../configuration/service/dns.rst:379 msgid "Use DynDNS as your preferred provider:" msgstr "Utilice DynDNS como su proveedor preferido:" @@ -15848,31 +17463,35 @@ msgstr "Use `eliminar módulos de seguimiento del sistema` para desactivar todos msgid "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." msgstr "Utilice una conexión LDAP persistente. Normalmente, la conexión LDAP solo se abre mientras se valida un nombre de usuario para preservar los recursos en el servidor LDAP. Esta opción hace que la conexión LDAP se mantenga abierta, lo que permite reutilizarla para posteriores validaciones de usuarios." -#: ../../configuration/firewall/ipv4.rst:515 +#: ../../configuration/firewall/ipv4.rst:538 #: ../../configuration/firewall/ipv6.rst:525 msgid "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." msgstr "Utilice un grupo de direcciones específico. Anteponga el carácter ``!`` para los criterios de coincidencia invertidos." -#: ../../configuration/firewall/ipv4.rst:578 +#: ../../configuration/firewall/ipv4.rst:601 #: ../../configuration/firewall/ipv6.rst:588 msgid "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." msgstr "Utilice un grupo de dominio específico. Anteponga el carácter ``!`` para los criterios de coincidencia invertidos." -#: ../../configuration/firewall/ipv4.rst:599 +#: ../../configuration/firewall/ipv4.rst:622 #: ../../configuration/firewall/ipv6.rst:609 msgid "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." msgstr "Utilice un grupo Mac específico. Anteponga el carácter ``!`` para los criterios de coincidencia invertidos." -#: ../../configuration/firewall/ipv4.rst:536 +#: ../../configuration/firewall/ipv4.rst:559 #: ../../configuration/firewall/ipv6.rst:546 msgid "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." msgstr "Utilice un grupo de red específico. Anteponga el carácter ``!`` para los criterios de coincidencia invertidos." -#: ../../configuration/firewall/ipv4.rst:557 +#: ../../configuration/firewall/ipv4.rst:580 #: ../../configuration/firewall/ipv6.rst:567 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." msgstr "Utilice un grupo de puertos específico. Anteponga el carácter ``!`` para los criterios de coincidencia invertidos." +#: ../../configuration/service/dhcp-server.rst:430 +msgid "Use active-active HA mode." +msgstr "Use active-active HA mode." + #: ../../configuration/nat/nat44.rst:259 msgid "Use address `masquerade` (the interfaces primary address) on rule 30" msgstr "Use la dirección `masquerade` (la dirección principal de la interfaz) en la regla 30" @@ -15885,7 +17504,7 @@ msgstr "Utilice un certificado autofirmado generado automáticamente" msgid "Use any local address, configured on any interface if this is not set." msgstr "Use cualquier dirección local, configurada en cualquier interfaz si no está configurada." -#: ../../configuration/service/dns.rst:279 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" msgstr "Use el archivo de clave de autenticación en ``/config/auth/my.key``" @@ -15893,10 +17512,14 @@ msgstr "Use el archivo de clave de autenticación en ``/config/auth/my.key``" msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:408 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." msgstr "Usar configurado `<url> ` para determinar su dirección IP. ddclient_ cargará `<url> ` e intenta extraer su dirección IP de la respuesta." +#: ../../configuration/service/dns.rst:462 +msgid "Use deSEC (dedyn.io) as your preferred provider:" +msgstr "Use deSEC (dedyn.io) as your preferred provider:" + #: ../../configuration/firewall/general-legacy.rst:478 msgid "Use inverse-match to match anything except the given country-codes." msgstr "Use la coincidencia inversa para hacer coincidir cualquier cosa excepto los códigos de país dados." @@ -15905,7 +17528,7 @@ msgstr "Use la coincidencia inversa para hacer coincidir cualquier cosa excepto msgid "Use local socket for API" msgstr "Usar socket local para API" -#: ../../configuration/vpn/sstp.rst:288 +#: ../../configuration/vpn/sstp.rst:357 msgid "Use local user `foo` with password `bar`" msgstr "Use el usuario local `foo` con la contraseña `bar`" @@ -15913,7 +17536,7 @@ msgstr "Use el usuario local `foo` con la contraseña `bar`" msgid "Use tab completion to get a list of categories." msgstr "Utilice la función de completar con tabulación para obtener una lista de categorías." -#: ../../configuration/system/option.rst:53 +#: ../../configuration/system/option.rst:83 msgid "Use the address of the specified interface on the local machine as the source address of the connection." msgstr "Utilice la dirección de la interfaz especificada en la máquina local como la dirección de origen de la conexión." @@ -15925,7 +17548,7 @@ msgstr "Utilice la siguiente topología para crear una red aislada basada en nat msgid "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." msgstr "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." -#: ../../configuration/system/option.rst:48 +#: ../../configuration/system/option.rst:78 msgid "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." msgstr "Utilice la dirección especificada en la máquina local como la dirección de origen de la conexión. Solo es útil en sistemas con más de una dirección." @@ -15957,10 +17580,26 @@ msgstr "Use este comando PIM para modificar el valor de tiempo de espera (31-600 msgid "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Utilice este comando para configurar el grupo de direcciones IPv6 desde el cual un cliente PPPoE obtendrá un prefijo IPv6 de su longitud definida (máscara) para terminar el extremo PPPoE a su lado. La longitud de la máscara se puede configurar de 48 a 128 bits, el valor predeterminado es 64." -#: ../../configuration/vpn/sstp.rst:137 +#: ../../configuration/service/ipoe-server.rst:261 +msgid "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/service/pppoe-server.rst:355 +msgid "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/pptp.rst:223 +msgid "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/sstp.rst:257 msgid "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Utilice este comando para configurar el grupo de direcciones IPv6 desde el cual un cliente SSTP obtendrá un prefijo IPv6 de su longitud definida (máscara) para terminar el punto final SSTP en su lado. La longitud de la máscara se puede configurar de 48 a 128 bits, el valor predeterminado es 64." +#: ../../configuration/vpn/l2tp.rst:299 +msgid "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + #: ../../configuration/service/pppoe-server.rst:93 msgid "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." msgstr "Utilice este comando para cada grupo de direcciones IP de cliente que desee definir. Las direcciones de este grupo se proporcionarán a los clientes PPPoE. Debe utilizar la notación CIDR." @@ -16005,7 +17644,7 @@ msgstr "Utilice este comando para verificar el estado del túnel para las interf msgid "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." msgstr "Utilice este comando para verificar el estado del túnel para las interfaces de sitio a sitio de OpenVPN." -#: ../../configuration/system/ipv6.rst:154 +#: ../../configuration/system/ipv6.rst:167 msgid "Use this command to clear Border Gateway Protocol statistics or status." msgstr "Utilice este comando para borrar las estadísticas o el estado del protocolo de puerta de enlace fronteriza." @@ -16013,16 +17652,32 @@ msgstr "Utilice este comando para borrar las estadísticas o el estado del proto msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Utilice este comando para configurar la delegación de prefijos de DHCPv6 (RFC3633). Tendrá que configurar su grupo de IPv6 y la longitud del prefijo de delegación. Desde el conjunto de IPv6 definido, distribuirá redes de la longitud definida (prefijo de delegación). La longitud del prefijo de delegación se puede establecer entre 32 y 64 bits." -#: ../../configuration/vpn/sstp.rst:146 +#: ../../configuration/service/ipoe-server.rst:269 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/service/pppoe-server.rst:363 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/pptp.rst:231 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/sstp.rst:265 msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Utilice este comando para configurar la delegación de prefijos de DHCPv6 (RFC3633) en SSTP. Tendrá que configurar su grupo de IPv6 y la longitud del prefijo de delegación. Desde el conjunto de IPv6 definido, distribuirá redes de la longitud definida (prefijo de delegación). La longitud del prefijo de delegación se puede establecer entre 32 y 64 bits." +#: ../../configuration/vpn/l2tp.rst:307 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + #: ../../configuration/service/pppoe-server.rst:120 msgid "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." msgstr "Utilice este comando para configurar Extensiones de autorización dinámicas para RADIUS para que pueda desconectar sesiones de forma remota y cambiar algunos parámetros de autenticación." -#: ../../configuration/protocols/static.rst:112 -#: ../../configuration/protocols/static.rst:125 +#: ../../configuration/protocols/static.rst:146 +#: ../../configuration/protocols/static.rst:159 msgid "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." msgstr "Utilice este comando para configurar una ruta de "agujero negro" en el enrutador. Una ruta de agujero negro es una ruta para la cual el sistema descarta silenciosamente los paquetes que coinciden. Esto evita que las redes filtren interfaces públicas, pero no evita que se utilicen como una ruta más específica dentro de su red." @@ -16226,6 +17881,10 @@ msgstr "Utilice este comando para controlar la cantidad máxima de rutas de igua msgid "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." msgstr "Utilice este comando para crear una política Fair-Queue y asígnele un nombre. Se basa en Stochastic Fairness Queuing y se puede aplicar al tráfico saliente." +#: ../../configuration/vpn/l2tp.rst:68 +msgid "Use this command to define IPsec interface." +msgstr "Use this command to define IPsec interface." + #: ../../configuration/trafficpolicy/index.rst:425 msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." msgstr "Utilice este comando para definir una política de Fair-Queue, basada en Stochastic Fairness Queueing, y establezca la cantidad máxima de paquetes permitidos para esperar en la cola. Cualquier otro paquete será descartado." @@ -16234,8 +17893,19 @@ msgstr "Utilice este comando para definir una política de Fair-Queue, basada en msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." msgstr "Utilice este comando para definir una política de Fair-Queue, basada en Stochastic Fairness Queueing, y establezca la cantidad de segundos en los que ocurrirá una nueva perturbación del algoritmo de cola (máximo 4294967295)." -#: ../../configuration/service/pppoe-server.rst:81 -#: ../../configuration/vpn/sstp.rst:132 +#: ../../configuration/service/ipoe-server.rst:277 +#: ../../configuration/service/pppoe-server.rst:371 +#: ../../configuration/vpn/l2tp.rst:315 +#: ../../configuration/vpn/pptp.rst:239 +#: ../../configuration/vpn/sstp.rst:273 +msgid "Use this command to define default IPv6 address pool name." +msgstr "Use this command to define default IPv6 address pool name." + +#: ../../configuration/service/ipoe-server.rst:77 +#: ../../configuration/service/pppoe-server.rst:61 +#: ../../configuration/vpn/l2tp.rst:48 +#: ../../configuration/vpn/pptp.rst:50 +#: ../../configuration/vpn/sstp.rst:75 msgid "Use this command to define default address pool name." msgstr "Use this command to define default address pool name." @@ -16255,15 +17925,31 @@ msgstr "Utilice este comando para definir en la interfaz seleccionada si elige l msgid "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +#: ../../configuration/service/ipoe-server.rst:70 +msgid "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + #: ../../configuration/service/pppoe-server.rst:73 msgid "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." msgstr "Utilice este comando para definir la primera dirección IP de un conjunto de direcciones que se proporcionarán a los clientes PPPoE. Debe estar dentro de una subred /24." -#: ../../configuration/vpn/sstp.rst:121 +#: ../../configuration/vpn/pptp.rst:43 +msgid "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/vpn/sstp.rst:68 msgid "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." -#: ../../configuration/service/pppoe-server.rst:42 +#: ../../configuration/vpn/l2tp.rst:41 +msgid "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:54 +msgid "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:65 msgid "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." msgstr "Utilice este comando para definir la interfaz que utilizará el servidor PPPoE para escuchar a los clientes PPPoE." @@ -16283,8 +17969,11 @@ msgstr "Utilice este comando para definir el número máximo de entradas que se msgid "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." msgstr "Utilice este comando para definir el número máximo de entradas que se mantendrán en la caché de vecinos (1024, 2048, 4096, 8192, 16384, 32768)." -#: ../../configuration/service/pppoe-server.rst:77 -#: ../../configuration/vpn/sstp.rst:128 +#: ../../configuration/service/ipoe-server.rst:332 +#: ../../configuration/service/pppoe-server.rst:450 +#: ../../configuration/vpn/l2tp.rst:404 +#: ../../configuration/vpn/pptp.rst:328 +#: ../../configuration/vpn/sstp.rst:362 msgid "Use this command to define the next address pool name." msgstr "Use this command to define the next address pool name." @@ -16352,7 +18041,7 @@ msgstr "Use this command to enable PIMv6 in the selected interface so that it ca msgid "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." msgstr "Utilice este comando para habilitar la adquisición de direcciones IPv6 mediante la configuración automática sin estado (SLAAC)." -#: ../../configuration/service/pppoe-server.rst:236 +#: ../../configuration/service/pppoe-server.rst:310 msgid "Use this command to enable bandwidth shaping via RADIUS." msgstr "Utilice este comando para habilitar la configuración del ancho de banda a través de RADIUS." @@ -16364,7 +18053,7 @@ msgstr "Utilice este comando para habilitar el Protocolo de resolución de direc msgid "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." msgstr "Utilice este comando para habilitar sesiones LDP dirigidas al enrutador local. El enrutador entonces responderá a cualquier sesión que intente conectarse a él que no sea un tipo de conexión TCP de enlace local." -#: ../../configuration/service/pppoe-server.rst:249 +#: ../../configuration/service/pppoe-server.rst:323 msgid "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." msgstr "Use este comando para habilitar el retraso de los paquetes PADO (Oferta de descubrimiento activo PPPoE), que se puede usar como un mecanismo de equilibrio de sesión con otros servidores PPPoE." @@ -16386,7 +18075,7 @@ msgstr "Use this command to enable the logging of the default action on custom c msgid "Use this command to enable the logging of the default action on the specified chain." msgstr "Use this command to enable the logging of the default action on the specified chain." -#: ../../configuration/system/ipv6.rst:165 +#: ../../configuration/system/ipv6.rst:178 msgid "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." msgstr "Utilice este comando para vaciar la caché de rutas IPv6 del kernel. Se puede agregar una dirección para vaciarla solo para esa ruta." @@ -16394,11 +18083,11 @@ msgstr "Utilice este comando para vaciar la caché de rutas IPv6 del kernel. Se msgid "Use this command to get an overview of a zone." msgstr "Utilice este comando para obtener una descripción general de una zona." -#: ../../configuration/system/ipv6.rst:120 +#: ../../configuration/system/ipv6.rst:133 msgid "Use this command to get information about OSPFv3." msgstr "Utilice este comando para obtener información sobre OSPFv3." -#: ../../configuration/system/ipv6.rst:142 +#: ../../configuration/system/ipv6.rst:155 msgid "Use this command to get information about the RIPNG protocol" msgstr "Use este comando para obtener información sobre el protocolo RIPNG" @@ -16410,10 +18099,22 @@ msgstr "Utilice este comando para indicarle al sistema que establezca una conexi msgid "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." msgstr "Utilice este comando para vincular la conexión PPPoE a una interfaz física. Cada conexión PPPoE debe establecerse a través de una interfaz física. Las interfaces pueden ser interfaces Ethernet normales, VIF o interfaces/VIF de vinculación." -#: ../../configuration/service/pppoe-server.rst:311 +#: ../../configuration/service/ipoe-server.rst:394 +msgid "Use this command to locally check the active sessions in the IPoE server." +msgstr "Use this command to locally check the active sessions in the IPoE server." + +#: ../../configuration/service/pppoe-server.rst:587 msgid "Use this command to locally check the active sessions in the PPPoE server." msgstr "Utilice este comando para verificar localmente las sesiones activas en el servidor PPPoE." +#: ../../configuration/vpn/pptp.rst:446 +msgid "Use this command to locally check the active sessions in the PPTP server." +msgstr "Use this command to locally check the active sessions in the PPTP server." + +#: ../../configuration/vpn/sstp.rst:542 +msgid "Use this command to locally check the active sessions in the SSTP server." +msgstr "Use this command to locally check the active sessions in the SSTP server." + #: ../../configuration/protocols/igmp.rst:104 msgid "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." msgstr "Use este comando para configurar manualmente un punto de encuentro para PIM para que los mensajes de unión se puedan enviar allí. Establezca la dirección del punto Rendevouz y el prefijo correspondiente de los rangos de grupo cubiertos. Estos valores deben compartirse con todos los enrutadores que participan en la red PIM." @@ -16427,7 +18128,7 @@ msgstr "Utilice este comando para no instalar servidores de nombres DNS anunciad msgid "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." msgstr "Utilice este comando para preferir IPv4 para la conexión de transporte de pares TCP para LDP cuando las direcciones LDP IPv4 e IPv6 están configuradas en la misma interfaz." -#: ../../configuration/system/ipv6.rst:160 +#: ../../configuration/system/ipv6.rst:173 msgid "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." msgstr "Utilice este comando para restablecer la memoria caché del Protocolo de descubrimiento de vecinos IPv6 para una dirección o interfaz." @@ -16467,7 +18168,7 @@ msgstr "Use este comando para ver la información de saludo de descubrimiento" msgid "Use this command to see the Label Information Base." msgstr "Utilice este comando para ver la Base de información de etiquetas." -#: ../../configuration/service/pppoe-server.rst:26 +#: ../../configuration/service/pppoe-server.rst:33 msgid "Use this command to set a name for this PPPoE-server access concentrator." msgstr "Utilice este comando para establecer un nombre para este concentrador de acceso al servidor PPPoE." @@ -16511,31 +18212,31 @@ msgstr "Utilice este comando para configurar el nombre de usuario para autentica msgid "Use this command to show IPv6 Border Gateway Protocol information." msgstr "Utilice este comando para mostrar la información del protocolo de puerta de enlace de borde IPv6." -#: ../../configuration/system/ipv6.rst:50 +#: ../../configuration/system/ipv6.rst:63 msgid "Use this command to show IPv6 Neighbor Discovery Protocol information." msgstr "Utilice este comando para mostrar la información del Protocolo de detección de vecinos IPv6." -#: ../../configuration/system/ipv6.rst:58 +#: ../../configuration/system/ipv6.rst:71 msgid "Use this command to show IPv6 forwarding status." msgstr "Utilice este comando para mostrar el estado de reenvío de IPv6." -#: ../../configuration/system/ipv6.rst:54 +#: ../../configuration/system/ipv6.rst:67 msgid "Use this command to show IPv6 multicast group membership." msgstr "Utilice este comando para mostrar la pertenencia al grupo de multidifusión IPv6." -#: ../../configuration/system/ipv6.rst:62 +#: ../../configuration/system/ipv6.rst:75 msgid "Use this command to show IPv6 routes." msgstr "Utilice este comando para mostrar rutas IPv6." -#: ../../configuration/system/ipv6.rst:105 +#: ../../configuration/system/ipv6.rst:118 msgid "Use this command to show all IPv6 access lists" msgstr "Use este comando para mostrar todas las listas de acceso de IPv6" -#: ../../configuration/system/ipv6.rst:90 +#: ../../configuration/system/ipv6.rst:103 msgid "Use this command to show all IPv6 prefix lists" msgstr "Use este comando para mostrar todas las listas de prefijos de IPv6" -#: ../../configuration/system/ipv6.rst:146 +#: ../../configuration/system/ipv6.rst:159 msgid "Use this command to show the status of the RIPNG protocol" msgstr "Use este comando para mostrar el estado del protocolo RIPNG" @@ -16595,6 +18296,14 @@ msgstr "Se utiliza para bloquear dominios específicos por parte del Proxy. Espe msgid "User-level messages" msgstr "Mensajes a nivel de usuario" +#: ../../configuration/service/ipoe-server.rst:250 +#: ../../configuration/service/pppoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:255 +#: ../../configuration/vpn/pptp.rst:195 +#: ../../configuration/vpn/sstp.rst:228 +msgid "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." +msgstr "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." + #: ../../configuration/policy/examples.rst:18 msgid "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." msgstr "Usando 'reconfiguración suave' obtenemos la actualización de la política sin rebotar al vecino." @@ -16603,19 +18312,23 @@ msgstr "Usando 'reconfiguración suave' obtenemos la actualización de l msgid "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." msgstr "Usar **openvpn-option -renega-sec** puede ser complicado. Esta opción se utiliza para renegociar el canal de datos después de n segundos. Cuando se usa tanto en el servidor como en el cliente, el valor más bajo activará la renegociación. Si lo establece en 0 en un lado de la conexión (para deshabilitarlo), el valor elegido en el otro lado determinará cuándo ocurrirá la renegociación." -#: ../../configuration/protocols/bgp.rst:900 +#: ../../configuration/protocols/bgp.rst:922 msgid "Using BGP confederation" msgstr "Uso de la confederación BGP" -#: ../../configuration/protocols/bgp.rst:899 +#: ../../configuration/protocols/bgp.rst:921 msgid "Using BGP route-reflectors" msgstr "Uso de reflectores de ruta BGP" -#: ../../configuration/interfaces/bridge.rst:225 +#: ../../configuration/interfaces/bridge.rst:234 msgid "Using VLAN aware Bridge" msgstr "Uso de puente con reconocimiento de VLAN" -#: ../../configuration/interfaces/bridge.rst:266 +#: ../../configuration/vpn/sstp.rst:29 +msgid "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" +msgstr "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" + +#: ../../configuration/interfaces/bridge.rst:275 msgid "Using the operation mode command to view Bridge Information" msgstr "Uso del comando de modo de operación para ver la información del puente" @@ -16645,18 +18358,22 @@ msgstr "Frecuencia central del canal operativo VHT - frecuencia central 2 (para #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 msgid "VLAN" msgstr "VLAN" +#: ../../configuration/service/pppoe-server.rst:232 +msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." +msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." + #: ../../configuration/service/pppoe-server.rst:163 msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." msgstr "Accel-ppp puede crear VLAN sobre la marcha mediante el uso de un módulo Kernel llamado `vlan_mon`, que supervisa las VLAN entrantes y crea la VLAN necesaria si es necesario y está permitido. VyOS admite el uso de ID de VLAN o rangos completos, ambos valores se pueden definir al mismo tiempo para una interfaz." -#: ../../configuration/interfaces/bridge.rst:231 +#: ../../configuration/interfaces/bridge.rst:240 msgid "VLAN 10 on member interface `eth2` (ACCESS mode)" msgstr "VLAN 10 en la interfaz de miembro `eth2` (modo ACCESO)" @@ -16664,10 +18381,14 @@ msgstr "VLAN 10 en la interfaz de miembro `eth2` (modo ACCESO)" msgid "VLAN Example" msgstr "Ejemplo de VLAN" -#: ../../configuration/interfaces/bridge.rst:134 +#: ../../configuration/interfaces/bridge.rst:143 msgid "VLAN Options" msgstr "Opciones de VLAN" +#: ../../configuration/service/ipoe-server.rst:315 +msgid "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" +msgstr "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" + #: ../../configuration/service/lldp.rst:28 msgid "VLAN name" msgstr "nombre de VLAN" @@ -16688,32 +18409,32 @@ msgstr "Los clientes VPN solicitarán parámetros de configuración, opcionalmen msgid "VRF" msgstr "VRF" -#: ../../configuration/vrf/index.rst:411 +#: ../../configuration/vrf/index.rst:430 msgid "VRF Route Leaking" msgstr "Fuga de ruta VRF" -#: ../../configuration/vrf/index.rst:283 +#: ../../configuration/vrf/index.rst:302 msgid "VRF and NAT" msgstr "VRF and NAT" -#: ../../configuration/vrf/index.rst:380 +#: ../../configuration/vrf/index.rst:399 msgid "VRF blue routing table" msgstr "Tabla de enrutamiento azul VRF" -#: ../../configuration/vrf/index.rst:347 +#: ../../configuration/vrf/index.rst:366 msgid "VRF default routing table" msgstr "Tabla de enrutamiento por defecto de VRF" -#: ../../configuration/vrf/index.rst:363 +#: ../../configuration/vrf/index.rst:382 msgid "VRF red routing table" msgstr "Tabla de enrutamiento rojo VRF" -#: ../../configuration/vrf/index.rst:235 -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:254 +#: ../../configuration/vrf/index.rst:261 msgid "VRF route leaking" msgstr "Fuga de ruta VRF" -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:261 msgid "VRF topology example" msgstr "Ejemplo de topología VRF" @@ -16769,11 +18490,19 @@ msgstr "Los valores válidos son 0..255." msgid "Value" msgstr "Valor" -#: ../../configuration/vpn/sstp.rst:263 +#: ../../configuration/service/ipoe-server.rst:203 +#: ../../configuration/service/pppoe-server.rst:165 +#: ../../configuration/vpn/l2tp.rst:208 +#: ../../configuration/vpn/pptp.rst:148 +#: ../../configuration/vpn/sstp.rst:181 msgid "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." msgstr "Valor para enviar al servidor RADIUS en el atributo NAS-IP-Address y para que coincida con las solicitudes de DM/CoA. También el servidor DM/CoA se vinculará a esa dirección." -#: ../../configuration/vpn/sstp.rst:258 +#: ../../configuration/service/ipoe-server.rst:198 +#: ../../configuration/service/pppoe-server.rst:160 +#: ../../configuration/vpn/l2tp.rst:203 +#: ../../configuration/vpn/pptp.rst:143 +#: ../../configuration/vpn/sstp.rst:176 msgid "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." msgstr "Valor para enviar al servidor RADIUS en el atributo NAS-Identifier y para que coincida con las solicitudes de DM/CoA." @@ -16795,11 +18524,11 @@ msgstr "Verify that connections are hitting the rule on both sides:" msgid "Version" msgstr "Versión" -#: ../../configuration/highavailability/index.rst:339 +#: ../../configuration/highavailability/index.rst:349 msgid "Virtual-server" msgstr "Servidor virtual" -#: ../../configuration/highavailability/index.rst:398 +#: ../../configuration/highavailability/index.rst:408 msgid "Virtual-server can be configured with VRRP virtual address or without VRRP." msgstr "El servidor virtual se puede configurar con dirección virtual VRRP o sin VRRP." @@ -16807,7 +18536,7 @@ msgstr "El servidor virtual se puede configurar con dirección virtual VRRP o si msgid "Virtual Ethernet" msgstr "Ethernet virtuales" -#: ../../configuration/highavailability/index.rst:342 +#: ../../configuration/highavailability/index.rst:352 msgid "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." msgstr "El servidor virtual permite equilibrar la carga del destino del tráfico virtual-address:port entre varios servidores reales." @@ -16823,11 +18552,11 @@ msgstr "VyOS 1.1 admite el inicio de sesión como usuario ``root``. Esto se elim msgid "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." msgstr "VyOS 1.3 (equuleus) es compatible con DHCPv6-PD (:rfc:`3633`). La delegación de prefijos de DHCPv6 es compatible con la mayoría de los ISP que proporcionan IPv6 nativo para consumidores en redes fijas." -#: ../../configuration/vrf/index.rst:84 +#: ../../configuration/vrf/index.rst:103 msgid "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." msgstr "VyOS 1.4 (sagitta) introdujo soporte de enrutamiento dinámico para VRF." -#: ../../configuration/pki/index.rst:9 +#: ../../configuration/pki/index.rst:11 msgid "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." msgstr "VyOS 1.4 cambió la forma en que se almacenan las claves de cifrado o los certificados en el sistema. En la era anterior a VyOS 1.4, los certificados se almacenaban en /config y cada servicio hacía referencia a un archivo. Eso hizo que copiar una configuración en ejecución del sistema A al sistema B fuera un poco más difícil, ya que tenía que copiar los archivos y sus permisos a mano." @@ -16839,7 +18568,7 @@ msgstr "VyOS 1.4 usa chrony en lugar de ntpd (consulte :vytask:`T3008`), que ya msgid "VyOS Arista EOS setup" msgstr "Configuración de VyOS Arista EOS" -#: ../../configuration/vpn/ipsec.rst:120 +#: ../../configuration/vpn/ipsec.rst:123 msgid "VyOS ESP group has the next options:" msgstr "El grupo VyOS ESP tiene las siguientes opciones:" @@ -16883,10 +18612,14 @@ msgstr "VyOS SNMP admite tanto IPv4 como IPv6." msgid "VyOS also comes with a build in SSTP server, see :ref:`sstp`." msgstr "VyOS también viene con un servidor SSTP integrado, consulte :ref:`sstp`." -#: ../../configuration/service/dhcp-server.rst:504 +#: ../../configuration/service/dhcp-server.rst:563 msgid "VyOS also provides DHCPv6 server functionality which is described in this section." msgstr "VyOS también proporciona la funcionalidad del servidor DHCPv6 que se describe en esta sección." +#: ../../configuration/vpn/ipsec.rst:474 +msgid "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." +msgstr "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:127 msgid "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." msgstr "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." @@ -16928,11 +18661,15 @@ msgstr "VyOS facilita la multidifusión IP al admitir **Modo disperso PIM**, **I msgid "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/ids.rst:17 +msgid "VyOS includes the FastNetMon Community Edition." +msgstr "VyOS includes the FastNetMon Community Edition." + +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS puede actualizar un registro DNS remoto cuando una interfaz obtiene una nueva dirección IP. Para hacerlo, VyOS incluye ddclient_, un script de Perl escrito para este único propósito." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS también puede usar cualquier servicio que dependa de los protocolos compatibles con ddclient." @@ -16952,15 +18689,15 @@ msgstr "VyOS hace uso de Linux `netfilter<https://netfilter.org/> `_ para el fil msgid "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" msgstr "VyOS hace uso de :abbr:`FRR (Free Range Routing)` y nos gustaría agradecerles por su esfuerzo." -#: ../../configuration/pki/index.rst:21 +#: ../../configuration/pki/index.rst:23 msgid "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." msgstr "VyOS ahora no solo puede administrar certificados emitidos por autoridades de certificación de terceros, sino que también puede actuar como una CA por sí solo. Puede crear su propia CA raíz y firmar claves con ella haciendo uso de algunos comandos simples de modo operativo." -#: ../../configuration/pki/index.rst:35 +#: ../../configuration/pki/index.rst:37 msgid "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." msgstr "VyOS ahora también tiene la capacidad de crear CA, claves, Diffie-Hellman y otros pares de claves desde un comando de nivel operativo de fácil acceso." -#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:323 msgid "VyOS operational mode commands are not only available for generating keys but also to display them." msgstr "Los comandos del modo operativo VyOS no solo están disponibles para generar claves, sino también para mostrarlas." @@ -16972,6 +18709,10 @@ msgstr "VyOS proporciona una API HTTP. Puede usarlo para ejecutar comandos de mo msgid "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." msgstr "VyOS proporciona infraestructura de DNS para redes pequeñas. Está diseñado para ser liviano y tener una huella pequeña, adecuado para enrutadores y firewalls con recursos limitados. Para esto utilizamos el recursor PowerDNS." +#: ../../configuration/service/dhcp-server.rst:172 +msgid "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" +msgstr "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:144 msgid "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." msgstr "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." @@ -16996,10 +18737,14 @@ msgstr "VyOS proporciona comandos de políticas exclusivamente para el filtrado msgid "VyOS provides some operational commands on OpenVPN." msgstr "VyOS proporciona algunos comandos operativos en OpenVPN." -#: ../../configuration/service/dhcp-server.rst:138 +#: ../../configuration/service/dhcp-server.rst:172 msgid "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." msgstr "VyOS proporciona soporte para conmutación por error de DHCP. La conmutación por error de DHCP debe configurarse explícitamente mediante las siguientes declaraciones." +#: ../../configuration/pki/index.rst:255 +msgid "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." +msgstr "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." + #: ../../configuration/loadbalancing/reverse-proxy.rst:8 msgid "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." msgstr "El proxy inverso de VyOS es un equilibrador y servidor proxy que proporciona alta disponibilidad, equilibrio de carga y proxy para aplicaciones basadas en TCP (nivel 4) y HTTP (nivel 7)." @@ -17020,6 +18765,10 @@ msgstr "VyOS supports both MLD version 1 and version 2 (which allows source-spec msgid "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." msgstr "VyOS admite la contabilidad de flujo para el tráfico IPv4 e IPv6. El sistema actúa como un exportador de flujo y puede usarlo con cualquier colector compatible." +#: ../../configuration/vpn/ipsec.rst:452 +msgid "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." +msgstr "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." + #: ../../configuration/system/updates.rst:5 msgid "VyOS supports online checking for updates" msgstr "VyOS supports online checking for updates" @@ -17060,11 +18809,11 @@ msgstr "VyOS usa la opción `mirror` para configurar la duplicación de puertos. msgid "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utiliza `accel-ppp`_ para proporcionar la funcionalidad del servidor PPPoE. Se puede utilizar con autenticación local o un servidor RADIUS conectado." -#: ../../configuration/service/ipoe-server.rst:9 +#: ../../configuration/service/ipoe-server.rst:7 msgid "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." msgstr "VyOS utiliza `accel-ppp`_ para proporcionar la funcionalidad del servidor :abbr:`IPoE (Protocolo de Internet sobre Ethernet). Se puede usar con autenticación local (dirección mac) o un servidor RADIUS conectado." -#: ../../configuration/vpn/l2tp.rst:6 +#: ../../configuration/vpn/l2tp.rst:7 msgid "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utiliza accel-ppp_ para proporcionar la funcionalidad del servidor L2TP. Se puede utilizar con autenticación local o un servidor RADIUS conectado." @@ -17076,7 +18825,7 @@ msgstr "VyOS utiliza accel-ppp_ para proporcionar la funcionalidad del servidor msgid "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." msgstr "El Equilibrio de carga WAN no debe usarse cuando se usa/necesita el protocolo de enrutamiento dinámico. Esta característica crea tablas de enrutamiento personalizadas y reglas de firewall, lo que hace que su uso sea incompatible con los protocolos de enrutamiento." -#: ../../configuration/vpn/site2site_ipsec.rst:164 +#: ../../configuration/vpn/site2site_ipsec.rst:167 msgid "WAN interface on `eth1`" msgstr "Interfaz WAN en `eth1`" @@ -17117,7 +18866,7 @@ msgstr "We'll configure OpenVPN using self-signed certificates, and then discuss msgid "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." msgstr "Usaremos los grupos IKE y ESP creados anteriormente para esta VPN. Debido a que necesitamos acceso a 2 subredes diferentes en el lado lejano, necesitaremos dos túneles diferentes. Si cambió los nombres del grupo ESP y del grupo IKE en el paso anterior, asegúrese de usar los nombres correctos aquí también." -#: ../../configuration/vpn/ipsec.rst:232 +#: ../../configuration/vpn/ipsec.rst:236 msgid "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." msgstr "Suponemos que el enrutador IZQUIERDO tiene una dirección estática 192.0.2.10 en eth0 y el enrutador DERECHO tiene una dirección dinámica en eth0." @@ -17129,11 +18878,15 @@ msgstr "No podemos admitir todas las pantallas desde el principio. Si falta su t msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "También podemos crear los certificados usando Cerbort, que es un cliente fácil de usar que obtiene un certificado de Let's Encrypt, una autoridad de certificación abierta lanzada por EFF, Mozilla y otros, y lo implementa en un servidor web." -#: ../../configuration/protocols/rpki.rst:158 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "Podemos construir mapas de ruta para importar basados en estos estados. Aquí hay una configuración simple de RPKI, donde `routinator` es el servidor de "caché" de validación de RPKI con ip `192.0.2.1`:" -#: ../../configuration/protocols/bgp.rst:1249 +#: ../../configuration/vpn/ipsec.rst:456 +msgid "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." +msgstr "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." + +#: ../../configuration/protocols/bgp.rst:1271 msgid "We could expand on this and also deny link local and multicast in the rule 20 action deny." msgstr "Podríamos ampliar esto y también denegar enlace local y multidifusión en la acción denegar de la regla 20." @@ -17145,6 +18898,10 @@ msgstr "No tenemos nodos CLI para cada opción de OpenVPN. Si falta una opción, msgid "We don't recomend to use arguments. Using environments is more preffereble." msgstr "No recomendamos usar argumentos. El uso de entornos es más preferible." +#: ../../configuration/vpn/ipsec.rst:506 +msgid "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." +msgstr "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." + #: ../../configuration/interfaces/wireguard.rst:148 msgid "We listen on port 51820" msgstr "Escuchamos en el puerto 51820" @@ -17153,7 +18910,7 @@ msgstr "Escuchamos en el puerto 51820" msgid "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" msgstr "Necesitamos generar el certificado que autentica a los usuarios que intentan acceder al recurso de red a través de los túneles SSL VPN. Los siguientes comandos crearán certificados autofirmados y se almacenarán en la configuración:" -#: ../../configuration/system/option.rst:85 +#: ../../configuration/system/option.rst:115 msgid "We now utilize `tuned` for dynamic resource balancing based on profiles." msgstr "Ahora utilizamos `tuned` para el equilibrio dinámico de recursos basado en perfiles." @@ -17169,7 +18926,7 @@ msgstr "Solo necesitamos un solo paso para esta interfaz:" msgid "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" msgstr "Enrutamos todo el tráfico de la red 192.168.2.0/24 a la interfaz `wg01`" -#: ../../configuration/system/login.rst:420 +#: ../../configuration/system/login.rst:424 msgid "We use a vontainer providing the TACACS serve rin this example." msgstr "Usamos un contenedor que proporciona el servicio TACACS en este ejemplo." @@ -17177,7 +18934,7 @@ msgstr "Usamos un contenedor que proporciona el servicio TACACS en este ejemplo. msgid "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." msgstr "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." -#: ../../configuration/service/dhcp-server.rst:331 +#: ../../configuration/service/dhcp-server.rst:387 msgid "Web Proxy Autodiscovery (WPAD) URL" msgstr "URL de detección automática de proxy web (WPAD)" @@ -17201,15 +18958,19 @@ msgstr "Cuando LDP esté funcionando, podrá ver la información de la etiqueta msgid "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." msgstr "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." -#: ../../configuration/vrf/index.rst:73 +#: ../../configuration/vrf/index.rst:92 msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "Cuando se utilizan VRF, no solo es obligatorio crear un VRF, sino que también es necesario asignar el VRF a una interfaz." -#: ../../configuration/service/dns.rst:354 +#: ../../configuration/service/dns.rst:445 +msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." +msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." + +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." msgstr "Cuando se utiliza un proveedor DynDNS ``personalizado``, el `<server> ` Debe especificarse a dónde se envían las solicitudes de actualización." -#: ../../configuration/service/dns.rst:347 +#: ../../configuration/service/dns.rst:361 msgid "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." msgstr "Cuando se utiliza un proveedor DynDNS ``personalizado``, el protocolo utilizado para comunicarse con el proveedor debe especificarse en ``<protocol> `. Consulte el asistente de finalización incorporado para conocer los protocolos disponibles." @@ -17225,7 +18986,11 @@ msgstr "Cuando se vuelve a conectar un enlace o un nuevo esclavo se une al enlac msgid "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." msgstr "Cuando se va a enviar un paquete, tendrá que pasar por esa cola, por lo que el paquete se colocará al final de la misma. Cuando el paquete lo atraviese por completo, se eliminará de la cola, vaciando su lugar en la cola y, finalmente, se entregará a la NIC para que se envíe realmente." -#: ../../configuration/protocols/bgp.rst:684 +#: ../../configuration/protocols/bgp.rst:589 +msgid "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." +msgstr "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." + +#: ../../configuration/protocols/bgp.rst:706 msgid "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." msgstr "Cuando falla una ruta, se envía una actualización de enrutamiento para retirar la ruta de las tablas de enrutamiento de la red. Cuando se vuelve a habilitar la ruta, también se anuncia el cambio en la disponibilidad. Una ruta que falla y regresa continuamente requiere una gran cantidad de tráfico de red para actualizar la red sobre el estado de la ruta." @@ -17237,7 +19002,7 @@ msgstr "Al agregar la función de intercambio de información de enrutamiento IP msgid "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." msgstr "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." -#: ../../configuration/service/pppoe-server.rst:169 +#: ../../configuration/service/pppoe-server.rst:238 msgid "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." msgstr "Cuando está configurado, PPPoE creará las VLAN necesarias cuando sea necesario. Una vez que se haya cancelado la sesión del usuario y ya no se necesite la VLAN, VyOS la eliminará nuevamente." @@ -17271,17 +19036,21 @@ msgstr "Al eliminar la cola, cada depósito de hash con datos se consulta de for msgid "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." msgstr "Cuando diseñe su conjunto de reglas NAT, deje algo de espacio entre las reglas consecutivas para una extensión posterior. Su conjunto de reglas podría comenzar con los números 10, 20, 30. De este modo, más tarde puede ampliar el conjunto de reglas y colocar nuevas reglas entre las existentes." -#: ../../configuration/vrf/index.rst:188 +#: ../../configuration/vrf/index.rst:207 msgid "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." msgstr "Al realizar el aislamiento de fallas con ping, primero debe ejecutarlo en el host local para verificar que la interfaz de red local esté activa y funcionando. Luego, continúe con los hosts y las puertas de enlace más adelante en el camino hacia su destino. Se calculan el tiempo de ida y vuelta y las estadísticas de pérdida de paquetes." -#: ../../configuration/pki/index.rst:176 -#: ../../configuration/pki/index.rst:219 +#: ../../configuration/vpn/ipsec.rst:529 +msgid "When first connecting to the new VPN the user is prompted to enter proper credentials." +msgstr "When first connecting to the new VPN the user is prompted to enter proper credentials." + +#: ../../configuration/pki/index.rst:178 +#: ../../configuration/pki/index.rst:221 msgid "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "Al cargar el certificado, debe eliminar manualmente las etiquetas ``-----BEGIN CERTIFICATE-----`` y ``-----END CERTIFICATE-----``. Además, el certificado/clave debe presentarse en una sola línea sin saltos de línea (``\\n``), esto se puede hacer usando el siguiente comando de shell:" -#: ../../configuration/pki/index.rst:197 -#: ../../configuration/pki/index.rst:235 +#: ../../configuration/pki/index.rst:199 +#: ../../configuration/pki/index.rst:237 msgid "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "Al cargar el certificado, debe quitar manualmente las etiquetas ``-----BEGIN KEY-----`` y ``-----END KEY-----``. Además, el certificado/clave debe presentarse en una sola línea sin saltos de línea (``\\n``), esto se puede hacer usando el siguiente comando de shell:" @@ -17325,7 +19094,7 @@ msgstr "Cuando se configura, la interfaz está habilitada para "marcar bajo msgid "When specified, this should be the only keyword for the interface." msgstr "Cuando se especifica, esta debe ser la única palabra clave para la interfaz." -#: ../../configuration/system/option.rst:60 +#: ../../configuration/system/option.rst:90 msgid "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." msgstr "Al iniciar un sistema VyOS en vivo (el CD de instalación), el diseño del teclado configurado se establece de forma predeterminada en EE. UU. Como esto puede no ser adecuado para todos los casos de uso, puede ajustar el diseño del teclado usado en la consola del sistema." @@ -17334,7 +19103,7 @@ msgstr "Al iniciar un sistema VyOS en vivo (el CD de instalación), el diseño d msgid "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." msgstr "Cuando el servidor DHCP está considerando asignar dinámicamente una dirección IP a un cliente, primero envía una solicitud de eco ICMP (un ping) a la dirección asignada. Espera un segundo y, si no se escucha ninguna respuesta de eco ICMP, asigna la dirección." -#: ../../configuration/vpn/site2site_ipsec.rst:416 +#: ../../configuration/vpn/site2site_ipsec.rst:419 msgid "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." msgstr "Cuando la opción de acción de cierre se establece en los pares, el tipo de conexión de cada par debe considerarse cuidadosamente. Por ejemplo, si la opción está configurada en ambos pares, ambos intentarán iniciar y mantener abiertas varias copias de cada SA secundario. Esto podría conducir a la inestabilidad del dispositivo o la utilización de la CPU/memoria." @@ -17346,6 +19115,10 @@ msgstr "Cuando se establece el comando anterior, VyOS responderá a todas las so msgid "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." msgstr "Cuando se establece el comando anterior, VyOS no responderá ninguna solicitud de eco ICMP dirigida a sí mismo, sin importar de dónde provenga o si se aplican reglas más específicas para aceptarlas." +#: ../../configuration/highavailability/index.rst:321 +msgid "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" +msgstr "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" + #: ../../_include/interface-address-with-dhcp.txt:14 msgid "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" msgstr "Cuando se utiliza DHCP para recuperar la dirección IPv4 y si se necesitan personalizaciones locales, deberían ser posibles mediante los ganchos de entrada y salida proporcionados. Los directorios de enlace son:" @@ -17366,6 +19139,10 @@ msgstr "Cuando se usa NAT para una gran cantidad de sistemas host, se recomienda msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "Cuando se utiliza SSH, el archivo de hosts conocidos, el archivo de clave privada y el archivo de clave pública son opciones obligatorias." +#: ../../configuration/protocols/rpki.rst:161 +msgid "When using SSH, private-key-file and public-key-file are mandatory options." +msgstr "When using SSH, private-key-file and public-key-file are mandatory options." + #: ../../configuration/vpn/openconnect.rst:222 msgid "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" msgstr "Cuando utilice una contraseña de un solo uso basada en el tiempo (TOTP) (OTP HOTP-time), asegúrese de que la hora en el servidor y el generador de tokens OTP estén sincronizados por NTP." @@ -17450,12 +19227,23 @@ msgstr "Se registrarán solo los paquetes/flujos en la dirección **entrante** e msgid "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" msgstr "Caerá `<shared-network-name> _` del registro DNS del cliente, usando solo el nombre de declaración de host y el dominio: `<hostname> .<domain-name> `" +#: ../../configuration/vpn/ipsec.rst:501 +msgid "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." +msgstr "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." + +#: ../../configuration/service/pppoe-server.rst:579 +#: ../../configuration/vpn/l2tp.rst:514 +#: ../../configuration/vpn/pptp.rst:438 +#: ../../configuration/vpn/sstp.rst:472 +msgid "Windows Internet Name Service (WINS) servers propagated to client" +msgstr "Windows Internet Name Service (WINS) servers propagated to client" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:147 msgid "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." msgstr "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/interfaces/wireguard.rst:7 -#: ../../configuration/pki/index.rst:132 +#: ../../configuration/pki/index.rst:134 msgid "WireGuard" msgstr "Guardia de alambre" @@ -17521,20 +19309,24 @@ msgid "With this command, you can specify how the URL path should be matched aga msgstr "Con este comando, puede especificar cómo debe coincidir la ruta de URL con las solicitudes entrantes." #: ../../configuration/firewall/index.rst:166 +msgid "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." +msgstr "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." + +#: ../../configuration/firewall/index.rst:166 msgid "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." msgstr "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." -#: ../../configuration/service/dhcp-server.rst:257 -#: ../../configuration/service/dhcp-server.rst:262 -#: ../../configuration/service/dhcp-server.rst:267 -#: ../../configuration/service/dhcp-server.rst:277 -#: ../../configuration/service/dhcp-server.rst:282 -#: ../../configuration/service/dhcp-server.rst:312 -#: ../../configuration/service/dhcp-server.rst:317 -#: ../../configuration/service/dhcp-server.rst:322 -#: ../../configuration/service/dhcp-server.rst:342 -#: ../../configuration/service/dhcp-server.rst:347 -#: ../../configuration/service/dhcp-server.rst:357 +#: ../../configuration/service/dhcp-server.rst:313 +#: ../../configuration/service/dhcp-server.rst:318 +#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:338 +#: ../../configuration/service/dhcp-server.rst:368 +#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/service/dhcp-server.rst:378 +#: ../../configuration/service/dhcp-server.rst:398 +#: ../../configuration/service/dhcp-server.rst:403 +#: ../../configuration/service/dhcp-server.rst:413 msgid "Y" msgstr "y" @@ -17542,7 +19334,7 @@ msgstr "y" msgid "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." msgstr "Siempre aplica un conjunto de reglas a una zona desde otra zona, se recomienda crear un conjunto de reglas para cada par de zonas." -#: ../../configuration/system/login.rst:365 +#: ../../configuration/system/login.rst:369 msgid "You are able to set post-login or pre-login banner messages to display certain information for this system." msgstr "Puede configurar mensajes de banner posteriores o previos al inicio de sesión para mostrar cierta información para este sistema." @@ -17558,11 +19350,15 @@ msgstr "También puede configurar el intervalo de tiempo para la preferencia con msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "También puede definir valores de tiempo de espera personalizados para aplicar a un subconjunto específico de conexiones, según un paquete y un selector de flujo. Para hacer esto, debe crear una regla que defina el paquete y el selector de flujo." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" msgstr "También puede mantener actualizadas diferentes zonas DNS. Simplemente cree un nuevo nodo de configuración: `` establezca la interfaz dinámica de dns del servicio<interface> rfc2136<other-service-name> ``" -#: ../../configuration/system/ipv6.rst:107 +#: ../../configuration/service/router-advert.rst:58 +msgid "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." +msgstr "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." + +#: ../../configuration/system/ipv6.rst:120 msgid "You can also specify which IPv6 access-list should be shown:" msgstr "También puede especificar qué lista de acceso de IPv6 se debe mostrar:" @@ -17578,7 +19374,7 @@ msgstr "También puede usar otros atributos para identificar al cliente para la msgid "You can also write a description for a filter:" msgstr "También puede escribir una descripción para un filtro:" -#: ../../configuration/system/login.rst:78 +#: ../../configuration/system/login.rst:82 msgid "You can assign multiple keys to the same user by using a unique identifier per SSH key." msgstr "Puede asignar varias claves al mismo usuario utilizando un identificador único por clave SSH." @@ -17614,7 +19410,7 @@ msgstr "Puede crear múltiples interfaces VLAN en una interfaz física. El rango msgid "You can disable a VRRP group with ``disable`` option:" msgstr "Puede deshabilitar un grupo VRRP con la opción ``deshabilitar``:" -#: ../../configuration/system/ipv6.rst:122 +#: ../../configuration/system/ipv6.rst:135 msgid "You can get more specific OSPFv3 information by using the parameters shown below:" msgstr "Puede obtener información OSPFv3 más específica utilizando los parámetros que se muestran a continuación:" @@ -17626,15 +19422,15 @@ msgstr "No puede asignar la misma declaración de ips permitidas a varios pares msgid "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" msgstr "No puede ejecutar esto en una configuración VRRP, si se lanzan múltiples repetidores mDNS en una subred, experimentará la muerte de la tormenta de paquetes mDNS." -#: ../../configuration/vpn/sstp.rst:332 +#: ../../configuration/vpn/sstp.rst:505 msgid "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." msgstr "Ahora puede "marcar" al interlocutor con el siguiente comando: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." -#: ../../configuration/system/login.rst:443 +#: ../../configuration/system/login.rst:447 msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "Ahora puede usar SSH en su sistema usando admin/admin como un usuario predeterminado suministrado desde el contenedor ``lfkeitel/tacacs_plus:latest``." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "Solo puede aplicar una política por interfaz y dirección, pero puede reutilizar una política en diferentes interfaces y direcciones:" @@ -17642,7 +19438,7 @@ msgstr "Solo puede aplicar una política por interfaz y dirección, pero puede r msgid "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" msgstr "Puede ejecutar el servicio de retransmisión de difusión UDP en varios enrutadores conectados a una subred. **NO** Hay una tormenta de paquetes de retransmisión de difusión UDP." -#: ../../configuration/service/dhcp-server.rst:176 +#: ../../configuration/service/dhcp-server.rst:226 msgid "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." msgstr "Puede especificar una asignación de DHCP estática por host. Necesitará la dirección MAC de la estación y la dirección IP deseada. La dirección debe estar dentro de la definición de subred pero puede estar fuera de la declaración de rango." @@ -17718,6 +19514,10 @@ msgstr "También necesitará la clave pública de su par, así como la(s) red(es msgid "Your ISPs modem is connected to port ``eth0`` of your VyOS box." msgstr "El módem de su ISP está conectado al puerto ``eth0`` de su caja VyOS." +#: ../../configuration/service/router-advert.rst:110 +msgid "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" +msgstr "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" + #: ../../configuration/system/ip.rst:31 #: ../../configuration/system/ipv6.rst:27 #: ../../configuration/vrf/index.rst:44 @@ -17758,7 +19558,7 @@ msgstr "(Esto puede ser útil cuando un servicio al que se llama tiene muchas di msgid ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." msgstr ":abbr:`AFI (identificador de autoridad de la familia de direcciones)` - ``49`` El valor 49 de AFI es lo que IS-IS usa para el direccionamiento privado." -#: ../../configuration/protocols/static.rst:152 +#: ../../configuration/protocols/static.rst:185 msgid ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." msgstr ":abbr:`ARP (Protocolo de resolución de direcciones)` es un protocolo de comunicación que se utiliza para descubrir la dirección de la capa de enlace, como una dirección MAC, asociada con una dirección de capa de Internet determinada, normalmente una dirección IPv4. Este mapeo es una función crítica en el conjunto de protocolos de Internet. ARP fue definido en 1982 por :rfc:`826`, que es el estándar de Internet STD 37." @@ -17798,11 +19598,11 @@ msgstr ":abbr:`GENEVE (encapsulación de virtualización de red genérica)` admi msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (o IPIP/IPsec, SIT/IPsec, o cualquier otro protocolo de túnel sin estado sobre IPsec) es la forma habitual de proteger el tráfico dentro de un túnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Descarga de recepción genérica)` es el complemento de GSO. Idealmente, cualquier cuadro ensamblado por GRO debe segmentarse para crear una secuencia idéntica de cuadros usando GSO, y cualquier secuencia de cuadros segmentados por GSO debe poder volver a ensamblarse al original por GRO. La única excepción a esto es la ID de IPv4 en el caso de que el bit DF esté configurado para un encabezado IP determinado. Si el valor de la ID de IPv4 no se incrementa secuencialmente, se modificará para que sea así cuando una trama ensamblada a través de GRO se segmente a través de GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (descarga de segmentación genérica)` es una descarga de software pura que está destinada a tratar los casos en los que los controladores de dispositivos no pueden realizar las descargas descritas anteriormente. Lo que ocurre en GSO es que un skbuff determinado tendrá sus datos desglosados en múltiples skbuffs que se han redimensionado para que coincidan con el MSS proporcionado a través de skb_shinfo()->gso_size." @@ -17818,7 +19618,7 @@ msgstr ":abbr:`IPSec (IP Security)`: demasiados RFC para enumerar, pero comience msgid ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." msgstr ":abbr:`IS-IS (Sistema intermedio a sistema intermedio)` es un protocolo de puerta de enlace interior (IGP) de estado de enlace que se describe en ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS ejecuta el algoritmo de ruta más corta primero (SPF) de Dijkstra para crear una base de datos de la topología de la red y, a partir de esa base de datos, determinar la mejor ruta (es decir, el costo más bajo) a un destino. Los sistemas intermedios (el nombre de los enrutadores) intercambian información de topología con sus vecinos conectados directamente. IS-IS se ejecuta directamente en la capa de enlace de datos (Capa 2). Las direcciones IS-IS se denominan :abbr:`NET (Títulos de entidad de red)` y pueden tener de 8 a 20 bytes de largo, pero generalmente tienen 10 bytes de largo. La base de datos en árbol que se crea con IS-IS es similar a la que se crea con OSPF en que las rutas elegidas deben ser similares. Las comparaciones con OSPF son inevitables y, a menudo, son razonables con respecto a la forma en que una red responderá con IGP." -#: ../../configuration/vrf/index.rst:401 +#: ../../configuration/vrf/index.rst:420 msgid ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." msgstr ":abbr:`L3VPN VRF (redes privadas virtuales de capa 3)` bgpd es compatible con IPv4 RFC 4364 e IPv6 RFC 4659. Las rutas L3VPN y sus etiquetas VRF MPLS asociadas se pueden distribuir a los vecinos VPN SAFI de forma predeterminada, es decir, no VRF , instancia de BGP. Las etiquetas VRF MPLS se alcanzan mediante etiquetas MPLS centrales que se distribuyen mediante unidifusión etiquetada LDP o BGP. bgpd también es compatible con la fuga de rutas entre VRF." @@ -17830,6 +19630,10 @@ msgstr ":abbr:`LDP (protocolo de distribución de etiquetas)` es un protocolo de msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Protocolo de descubrimiento de capa de enlace)` es un protocolo de capa de enlace independiente del proveedor en el conjunto de protocolos de Internet que utilizan los dispositivos de red para anunciar su identidad, capacidades y vecinos en una red de área local IEEE 802, principalmente Ethernet cableada. El IEEE se refiere formalmente al protocolo como Descubrimiento de conectividad de control de acceso a estaciones y medios especificado en IEEE 802.1AB e IEEE 802.3-2012, sección 6, cláusula 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (protocolo de acuerdo de clave MACsec)` se utiliza para sincronizar claves entre pares individuales." @@ -17890,7 +19694,11 @@ msgstr ":abbr:`RIP (Protocolo de información de enrutamiento)` es un protocolo msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Infraestructura de clave pública de recursos)` es un marco :abbr:`PKI (Infraestructura de clave pública)` diseñado para asegurar la infraestructura de enrutamiento de Internet. Asocia los anuncios de ruta BGP con el :abbr:`ASN (Número de sistema autónomo)` de origen correcto que los enrutadores BGP pueden usar para verificar cada ruta con la correspondiente :abbr:`ROA (Autorización de origen de ruta)` para verificar su validez. RPKI se describe en :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` es lógicamente una implementación de software de :abbr:`RSS (Receive Side Scaling)`. Al estar en el software, necesariamente se llama más adelante en la ruta de datos. Mientras que RSS selecciona la cola y, por lo tanto, la CPU que ejecutará el controlador de interrupciones de hardware, RPS selecciona la CPU para realizar el procesamiento del protocolo por encima del controlador de interrupciones. Esto se logra colocando el paquete en la cola de trabajos pendientes de la CPU deseada y activando la CPU para su procesamiento. RPS tiene algunas ventajas sobre RSS:" @@ -18010,43 +19818,43 @@ msgstr ":última corrección:2021-07-12" msgid ":opcmd:`generate pki wireguard key-pair`." msgstr ":opcmd:`generar par de claves pki wireguard`." -#: ../../configuration/vrf/index.rst:88 +#: ../../configuration/vrf/index.rst:107 msgid ":ref:`routing-bgp`" msgstr ":ref:`enrutamiento-bgp`" -#: ../../configuration/vrf/index.rst:104 +#: ../../configuration/vrf/index.rst:123 msgid ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" msgstr ":ref:`routing-bgp`: ``establecer nombre vrf<name> protocolos bgp ...``" -#: ../../configuration/vrf/index.rst:89 +#: ../../configuration/vrf/index.rst:108 msgid ":ref:`routing-isis`" msgstr ":ref:`enrutamiento-isis`" -#: ../../configuration/vrf/index.rst:105 +#: ../../configuration/vrf/index.rst:124 msgid ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" msgstr ":ref:`routing-isis`: ``establecer nombre vrf<name> protocolos isis ...``" -#: ../../configuration/vrf/index.rst:90 +#: ../../configuration/vrf/index.rst:109 msgid ":ref:`routing-ospf`" msgstr ":ref:`enrutamiento-ospf`" -#: ../../configuration/vrf/index.rst:106 +#: ../../configuration/vrf/index.rst:125 msgid ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" msgstr ":ref:`routing-ospf`: ``establecer nombre vrf<name> protocolos ospf ...``" -#: ../../configuration/vrf/index.rst:91 +#: ../../configuration/vrf/index.rst:110 msgid ":ref:`routing-ospfv3`" msgstr ":ref:`enrutamiento-ospfv3`" -#: ../../configuration/vrf/index.rst:107 +#: ../../configuration/vrf/index.rst:126 msgid ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" msgstr ":ref:`routing-ospfv3`: ``establecer nombre vrf<name> protocolos ospfv3 ...``" -#: ../../configuration/vrf/index.rst:92 +#: ../../configuration/vrf/index.rst:111 msgid ":ref:`routing-static`" msgstr ":ref:`enrutamiento-estático`" -#: ../../configuration/vrf/index.rst:108 +#: ../../configuration/vrf/index.rst:127 msgid ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" msgstr ":ref:`routing-static`: ``establecer nombre vrf<name> protocolos estáticos ...``" @@ -18054,7 +19862,7 @@ msgstr ":ref:`routing-static`: ``establecer nombre vrf<name> protocolos estátic msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` estados: El cliente PUEDE optar por proporcionar explícitamente el identificador a través de la opción 'identificador de cliente'. Si el cliente proporciona un 'identificador de cliente', el cliente DEBE usar el mismo 'identificador de cliente' en todos los mensajes subsiguientes, y el servidor DEBE usar ese identificador para identificar al cliente." -#: ../../configuration/service/dns.rst:230 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Basado" @@ -18062,7 +19870,7 @@ msgstr ":rfc:`2136` Basado" msgid ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." msgstr ":rfc:`2328`, el sucesor de :rfc:`1583`, sugiere de acuerdo con la sección G.2 (cambios) en la sección 16.4.1 un cambio en el algoritmo de preferencia de ruta que evita posibles bucles de enrutamiento que eran posibles en el antiguo versión de OSPFv2. Más específicamente, exige que las rutas entre áreas y la ruta troncal dentro del área ahora tengan la misma preferencia, pero aún se prefieran a las rutas externas." -#: ../../configuration/pki/index.rst:15 +#: ../../configuration/pki/index.rst:17 msgid ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." msgstr ":vytask:`T3642` describe un nuevo subsistema CLI que sirve como "almacén de certificados" para todos los servicios que requieren cualquier tipo de clave(s) de cifrado. En resumen, los certificados públicos y privados ahora se almacenan en formato PKCS#8 en la CLI de VyOS normal. Las claves ahora pueden agregarse, editarse y eliminarse mediante los comandos regulares de la CLI establecer/editar/eliminar." @@ -18082,23 +19890,27 @@ msgstr "`3. Agregue una ruta completa al script`_" msgid "`4. Add optional parameters`_" msgstr "`4. Añadir parámetros opcionales`_" -#: ../../configuration/service/dhcp-server.rst:154 +#: ../../configuration/service/dhcp-server.rst:203 msgid "`<name>` must be identical on both sides!" msgstr "`<name> ` debe ser idéntico en ambos lados!" -#: ../../configuration/pki/index.rst:202 +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + +#: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ cola -n +2 ca.clave | cabeza -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:181 +#: ../../configuration/pki/index.rst:183 msgid "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ cola -n +2 ca.pem | cabeza -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:240 +#: ../../configuration/pki/index.rst:242 msgid "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" msgstr "``$ cola -n +2 clave.cert | cabeza -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:224 +#: ../../configuration/pki/index.rst:226 msgid "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ cola -n +2 cert.pem | cabeza -n -1 | tr -d '\\n'``" @@ -18202,14 +20014,26 @@ msgstr "``802.3ad`` - Agregación de enlaces dinámicos IEEE 802.3ad. Crea grupo msgid "``9600`` - 9600 bps" msgstr "``9600`` - 9600 bps" -#: ../../configuration/vpn/ipsec.rst:149 +#: ../../configuration/vpn/ipsec.rst:152 msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` define un grupo Diffie-Hellman para PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Limitaciones conocidas:``" +#: ../../configuration/service/ipoe-server.rst:247 +#: ../../configuration/service/pppoe-server.rst:209 +#: ../../configuration/vpn/l2tp.rst:252 +#: ../../configuration/vpn/pptp.rst:192 +#: ../../configuration/vpn/sstp.rst:225 +msgid "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." +msgstr "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." + #: ../../configuration/loadbalancing/wan.rst:259 msgid "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" msgstr "``WLB_INTERFACE_NAME=[interfacename]``: Interfaz a monitorear" @@ -18226,11 +20050,11 @@ msgstr "``a`` - 802.11a - 54 Mbits/seg" msgid "``ac`` - 802.11ac - 1300 Mbits/sec" msgstr "``ac`` - 802.11ac - 1300 Mbits/seg" -#: ../../configuration/policy/route-map.rst:375 +#: ../../configuration/policy/route-map.rst:378 msgid "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" msgstr "``accept-own-nexthop`` - Las comunidades conocidas valoran accept-own-nexthop 0xFFFF0008" -#: ../../configuration/policy/route-map.rst:368 +#: ../../configuration/policy/route-map.rst:371 msgid "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" msgstr "``accept-own`` - Valor de comunidades conocidas ACCEPT_OWN 0xFFFF0001" @@ -18256,7 +20080,7 @@ msgstr "``active-backup`` - Política de copia de seguridad activa: solo un escl msgid "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." msgstr "``equilibrio de carga adaptativo`` - Equilibrio de carga adaptativo: incluye equilibrio de carga de transmisión y equilibrio de carga de recepción para el tráfico IPV4, y no requiere ningún soporte de conmutador especial. El equilibrio de carga de recepción se logra mediante la negociación ARP. El controlador de vinculación intercepta las respuestas ARP enviadas por el sistema local al salir y sobrescribe la dirección de hardware de origen con la dirección de hardware única de uno de los esclavos en el vínculo, de modo que diferentes pares usen diferentes direcciones de hardware para el servidor." -#: ../../configuration/vpn/ipsec.rst:96 +#: ../../configuration/vpn/ipsec.rst:98 msgid "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" msgstr "Uso ``agresivo`` Modo agresivo para intercambios de claves en el protocolo IKEv1 El modo agresivo es mucho más inseguro en comparación con el modo principal;" @@ -18268,11 +20092,19 @@ msgstr "``todas disponibles`` todas las direcciones de destino de verificación msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``cualquiera disponible`` cualquiera de las direcciones de destino de verificación debe estar disponible para pasar esta verificación" -#: ../../configuration/vpn/site2site_ipsec.rst:385 +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + +#: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id``: la identificación de IKE se utiliza para la validación de los dispositivos del mismo nivel de VPN durante la negociación de IKE. Si no configura la identidad local/remota, el dispositivo utiliza la dirección IPv4 o IPv6 que corresponde al par local/remoto de forma predeterminada. En ciertas configuraciones de red (como la interfaz ipsec con dirección dinámica o detrás de NAT), la ID de IKE recibida del par no coincide con la puerta de enlace IKE configurada en el dispositivo. Esto puede conducir a una falla de validación de Fase 1. Por lo tanto, asegúrese de configurar la identificación local/remota explícitamente y asegúrese de que la identificación IKE sea la misma que la identidad remota configurada en el dispositivo par." #: ../../configuration/vpn/site2site_ipsec.rst:18 +msgid "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" +msgstr "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" + +#: ../../configuration/vpn/site2site_ipsec.rst:18 msgid "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" msgstr "``autenticación``: configure la autenticación entre VyOS y un par remoto. Subopciones:" @@ -18292,11 +20124,11 @@ msgstr "``begin`` Coincide con el comienzo de la ruta de la URL" msgid "``bgp`` - Border Gateway Protocol (BGP)" msgstr "``bgp`` - Protocolo de puerta de enlace fronteriza (BGP)" -#: ../../configuration/vpn/site2site_ipsec.rst:147 +#: ../../configuration/vpn/site2site_ipsec.rst:150 msgid "``bind`` - select a VTI interface to bind to this peer;" msgstr "``bind``: seleccione una interfaz VTI para vincular a este par;" -#: ../../configuration/policy/route-map.rst:376 +#: ../../configuration/policy/route-map.rst:379 msgid "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" msgstr "``blackhole`` - Las comunidades conocidas valoran BLACKHOLE 0xFFFF029A" @@ -18312,6 +20144,10 @@ msgstr "``ráfaga``: Número de paquetes permitidos para sobrepasar el límite d msgid "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" msgstr "``ca-cert-file`` - Archivo de certificado de CA. Uso para autenticar pares remotos;" +#: ../../configuration/vpn/site2site_ipsec.rst:61 +msgid "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" +msgstr "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" + #: ../../configuration/service/lldp.rst:65 msgid "``cdp`` - Listen for CDP for Cisco routers/switches" msgstr "``cdp`` - Escuche CDP para enrutadores/conmutadores Cisco" @@ -18320,6 +20156,14 @@ msgstr "``cdp`` - Escuche CDP para enrutadores/conmutadores Cisco" msgid "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" msgstr "``cert-file``: archivo de certificado, que se usará para autenticar el enrutador local en el par remoto;" +#: ../../configuration/vpn/site2site_ipsec.rst:64 +msgid "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" +msgstr "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" + +#: ../../configuration/vpn/ipsec.rst:66 +msgid "``clear`` closes the CHILD_SA and does not take further action (default);" +msgstr "``clear`` closes the CHILD_SA and does not take further action (default);" + #: ../../configuration/vpn/ipsec.rst:65 msgid "``clear`` set action to clear;" msgstr "``borrar`` establece la acción para borrar;" @@ -18328,11 +20172,15 @@ msgstr "``borrar`` establece la acción para borrar;" msgid "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." msgstr "``cierre-acción = ninguno | claro | espera | restart`` - define la acción a tomar si el par remoto cierra inesperadamente un CHILD_SA (ver arriba para el significado de los valores). No se debe usar una acción de cierre si el par usa reautenticación o identificadores únicos." +#: ../../configuration/vpn/site2site_ipsec.rst:414 +msgid "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +msgstr "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." + #: ../../configuration/vpn/ipsec.rst:47 msgid "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" msgstr "``close-action`` define la acción a realizar si el par remoto cierra inesperadamente un CHILD_SA:" -#: ../../configuration/vpn/ipsec.rst:122 +#: ../../configuration/vpn/ipsec.rst:125 msgid "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." msgstr "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." @@ -18344,7 +20192,7 @@ msgstr "``compresión`` si se propone la compresión de contenido IPComp en la c msgid "``connected`` - Connected routes (directly attached subnet or host)" msgstr "``conectado`` - Rutas conectadas (subred o host conectado directamente)" -#: ../../configuration/vpn/site2site_ipsec.rst:72 +#: ../../configuration/vpn/site2site_ipsec.rst:69 msgid "``connection-type`` - how to handle this connection process. Possible variants:" msgstr "``tipo de conexión``: cómo manejar este proceso de conexión. Posibles variantes:" @@ -18366,39 +20214,43 @@ msgstr "``d`` - Intervalo de ejecución en días" msgid "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." msgstr "``acción de detección de pares muertos = borrar | espera | reiniciar``: los mensajes de notificación R_U_THERE (IKEv1) o los mensajes INFORMATIVOS vacíos (IKEv2) se envían periódicamente para verificar la actividad del par IPsec. Los valores borrar, mantener y reiniciar activan DPD y determinan la acción a realizar en un tiempo de espera. Con ``clear`` la conexión se cierra sin que se realicen más acciones. ``hold`` instala una política de captura, que capturará el tráfico coincidente e intentará renegociar la conexión a pedido. ``reiniciar`` activará inmediatamente un intento de renegociar la conexión." +#: ../../configuration/vpn/site2site_ipsec.rst:403 +msgid "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +msgstr "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." + #: ../../configuration/vpn/ipsec.rst:56 msgid "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" msgstr "``dead-peer-detection`` controla el uso del protocolo Dead Peer Detection (DPD, RFC 3706) donde los mensajes de notificación R_U_THERE (IKEv1) o mensajes INFORMATIVOS vacíos (IKEv2) se envían periódicamente para verificar la vivacidad del IPsec par:" -#: ../../configuration/vpn/site2site_ipsec.rst:88 +#: ../../configuration/vpn/site2site_ipsec.rst:85 msgid "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" msgstr "``default-esp-group``: grupo ESP que se utilizará de forma predeterminada para el cifrado de tráfico. Puede ser sobrescrito por configuraciones individuales para enlace de interfaz de túnel o VTI;" -#: ../../configuration/vpn/site2site_ipsec.rst:92 +#: ../../configuration/vpn/site2site_ipsec.rst:89 msgid "``description`` - description for this peer;" msgstr "``description`` - descripción de este par;" -#: ../../configuration/vpn/ipsec.rst:101 +#: ../../configuration/vpn/ipsec.rst:103 msgid "``dh-group`` dh-group;" msgstr "``grupo-dh'' grupo-dh;" -#: ../../configuration/vpn/site2site_ipsec.rst:23 +#: ../../configuration/vpn/site2site_ipsec.rst:24 msgid "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" msgstr "``dhcp-interface`` - ID para la autenticación generada dinámicamente desde la dirección DHCP;" -#: ../../configuration/vpn/site2site_ipsec.rst:94 +#: ../../configuration/vpn/site2site_ipsec.rst:91 msgid "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" msgstr "``dhcp-interface``: use una dirección IP, recibida de DHCP para la conexión IPSec con este par, en lugar de ``local-address``;" -#: ../../configuration/vpn/ipsec.rst:88 +#: ../../configuration/vpn/ipsec.rst:90 msgid "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." msgstr "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." -#: ../../configuration/vpn/site2site_ipsec.rst:396 +#: ../../configuration/vpn/site2site_ipsec.rst:399 msgid "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." msgstr "``disable-route-autoinstall``: esta opción, cuando se configura, deshabilita las rutas instaladas en la tabla predeterminada 220 para ipsec de sitio a sitio. Se utiliza sobre todo con la configuración de VTI." -#: ../../configuration/vpn/ipsec.rst:162 +#: ../../configuration/vpn/ipsec.rst:166 msgid "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" msgstr "``disable-route-autoinstall`` No instala automáticamente rutas a redes remotas;" @@ -18406,7 +20258,7 @@ msgstr "``disable-route-autoinstall`` No instala automáticamente rutas a redes msgid "``disable`` - disable this tunnel;" msgstr "``disable`` - deshabilita este túnel;" -#: ../../configuration/vpn/ipsec.rst:147 +#: ../../configuration/vpn/ipsec.rst:150 msgid "``disable`` Disable PFS;" msgstr "``deshabilitar`` Deshabilitar PFS;" @@ -18424,15 +20276,15 @@ msgstr "``deshabilitar`` deshabilitar MOBIKE;" msgid "``drop``: drop the packet." msgstr "``drop``: drop the packet." -#: ../../configuration/system/login.rst:71 +#: ../../configuration/system/login.rst:75 msgid "``ecdsa-sha2-nistp256``" msgstr "``ecdsa-sha2-nistp256``" -#: ../../configuration/system/login.rst:72 +#: ../../configuration/system/login.rst:76 msgid "``ecdsa-sha2-nistp384``" msgstr "``ecdsa-sha2-nistp384``" -#: ../../configuration/system/login.rst:73 +#: ../../configuration/system/login.rst:77 msgid "``ecdsa-sha2-nistp521``" msgstr "``ecdsa-sha2-nistp521``" @@ -18440,7 +20292,7 @@ msgstr "``ecdsa-sha2-nistp521``" msgid "``edp`` - Listen for EDP for Extreme routers/switches" msgstr "``edp`` - Escuche EDP para enrutadores/conmutadores extremos" -#: ../../configuration/vpn/ipsec.rst:145 +#: ../../configuration/vpn/ipsec.rst:148 msgid "``enable`` Inherit Diffie-Hellman group from IKE group (default);" msgstr "``habilitar`` Hereda el grupo Diffie-Hellman del grupo IKE (predeterminado);" @@ -18452,11 +20304,11 @@ msgstr "``habilitar`` habilitar la compresión IPComp;" msgid "``enable`` enable MOBIKE (default for IKEv2);" msgstr "``habilitar`` habilitar MOBIKE (predeterminado para IKEv2);" -#: ../../configuration/vpn/ipsec.rst:103 +#: ../../configuration/vpn/ipsec.rst:105 msgid "``encryption`` encryption algorithm;" msgstr "Algoritmo de cifrado ``encryption``;" -#: ../../configuration/vpn/ipsec.rst:153 +#: ../../configuration/vpn/ipsec.rst:156 msgid "``encryption`` encryption algorithm (default 128 bit AES-CBC);" msgstr "Algoritmo de cifrado ``encryption`` (AES-CBC predeterminado de 128 bits);" @@ -18468,7 +20320,7 @@ msgstr "``end`` Coincide con el final de la ruta de la URL." msgid "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" msgstr "``esp-group`` - define el grupo ESP para cifrar el tráfico, definido por este túnel;" -#: ../../configuration/vpn/site2site_ipsec.rst:149 +#: ../../configuration/vpn/site2site_ipsec.rst:152 msgid "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." msgstr "``esp-group``: define el grupo ESP para encriptar el tráfico, pasa esta interfaz VTI." @@ -18488,11 +20340,11 @@ msgstr "``archivo`` - ruta al archivo clave;" msgid "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Permitir carga útil de ID de proveedor de FlexVPN (solo IKEv2). Envíe la carga útil del ID del proveedor de Cisco FlexVPN (solo IKEv2), que se requiere para que los dispositivos de la marca Cisco permitan negociar un selector de tráfico local (desde el punto de vista de strongSwan) que no es la dirección IP virtual asignada si dicha dirección es solicitada por Cisne fuerte. El envío del Id. de proveedor de Cisco FlexVPN evita que el par limite el selector de tráfico local del iniciador y le permite, por ejemplo, negociar un TS de 0.0.0.0/0 == 0.0.0.0/0 en su lugar. Esto se probó con una plantilla de Cisco de "modo túnel ipsec ipv4", pero también debería funcionar para la encapsulación GRE;" -#: ../../configuration/vpn/ipsec.rst:164 +#: ../../configuration/vpn/ipsec.rst:168 msgid "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/site2site_ipsec.rst:97 +#: ../../configuration/vpn/site2site_ipsec.rst:94 msgid "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" msgstr "``force-udp-encapsulation`` - fuerza la encapsulación de ESP en datagramas UDP. Útil en caso de que entre el lado local y el remoto haya un cortafuegos o NAT, que no permite pasar paquetes ESP sin formato entre ellos;" @@ -18500,7 +20352,7 @@ msgstr "``force-udp-encapsulation`` - fuerza la encapsulación de ESP en datagra msgid "``g`` - 802.11g - 54 Mbits/sec (default)" msgstr "``g`` - 802.11g - 54 Mbits/seg (predeterminado)" -#: ../../configuration/policy/route-map.rst:367 +#: ../../configuration/policy/route-map.rst:370 msgid "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" msgstr "``graceful-shutdown`` - Comunidades conocidas valoran GRACEFUL_SHUTDOWN 0xFFFF0000" @@ -18508,11 +20360,11 @@ msgstr "``graceful-shutdown`` - Comunidades conocidas valoran GRACEFUL_SHUTDOWN msgid "``h`` - Execution interval in hours" msgstr "``h`` - Intervalo de ejecución en horas" -#: ../../configuration/vpn/ipsec.rst:105 +#: ../../configuration/vpn/ipsec.rst:107 msgid "``hash`` hash algorithm." msgstr "Algoritmo hash ``hash``." -#: ../../configuration/vpn/ipsec.rst:155 +#: ../../configuration/vpn/ipsec.rst:158 msgid "``hash`` hash algorithm (default sha1)." msgstr "Algoritmo hash ``hash`` (sha1 por defecto)." @@ -18536,23 +20388,23 @@ msgstr "``ht40-`` - Tanto 20 MHz como 40 MHz con canal secundario debajo del can msgid "``hvc0`` - Xen console" msgstr "``hvc0`` - Consola Xen" -#: ../../configuration/vpn/site2site_ipsec.rst:25 +#: ../../configuration/vpn/site2site_ipsec.rst:26 msgid "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" msgstr "``id`` - ID estáticos para la autenticación. En general dirección local y remota``<x.x.x.x> ``, ``<h:h:h:h:h:h:h:h> `` o ``%cualquiera``;" -#: ../../configuration/vpn/site2site_ipsec.rst:101 +#: ../../configuration/vpn/site2site_ipsec.rst:98 msgid "``ike-group`` - IKE group to use for key exchanges;" msgstr "``ike-group`` - Grupo IKE para usar en intercambios de claves;" -#: ../../configuration/vpn/ipsec.rst:82 +#: ../../configuration/vpn/ipsec.rst:84 msgid "``ikev1`` use IKEv1 for Key Exchange;" msgstr "``ikev1`` utiliza IKEv1 para el intercambio de claves;" -#: ../../configuration/vpn/site2site_ipsec.rst:103 +#: ../../configuration/vpn/site2site_ipsec.rst:100 msgid "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" msgstr "``ikev2-reauth``: vuelve a autenticar a un par remoto durante el proceso de cambio de clave. Solo se puede usar con IKEv2. Cree un nuevo IKE_SA desde cero e intente recrear todas las IPsec SA;" -#: ../../configuration/vpn/ipsec.rst:73 +#: ../../configuration/vpn/ipsec.rst:75 msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." @@ -18560,7 +20412,7 @@ msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticat msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" msgstr "``ikev2-reauth`` si el cambio de clave de un IKE_SA también debería volver a autenticar al par. En IKEv1, la reautenticación siempre se realiza:" -#: ../../configuration/vpn/ipsec.rst:84 +#: ../../configuration/vpn/ipsec.rst:86 msgid "``ikev2`` use IKEv2 for Key Exchange;" msgstr "``ikev2`` utiliza IKEv2 para el intercambio de claves;" @@ -18568,23 +20420,27 @@ msgstr "``ikev2`` utiliza IKEv2 para el intercambio de claves;" msgid "``in``: Ruleset for forwarded packets on an inbound interface" msgstr "``in``: conjunto de reglas para paquetes reenviados en una interfaz de entrada" -#: ../../configuration/vpn/site2site_ipsec.rst:75 +#: ../../configuration/vpn/site2site_ipsec.rst:72 msgid "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" msgstr "``iniciar``: realiza la conexión inicial con el par remoto inmediatamente después de la configuración y después del arranque. En este modo, la conexión no se reiniciará en caso de desconexión, por lo tanto, debe usarse solo junto con DPD u otros métodos de seguimiento de sesión;" -#: ../../configuration/vpn/ipsec.rst:166 +#: ../../configuration/system/option.rst:50 +msgid "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" +msgstr "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" + +#: ../../configuration/vpn/ipsec.rst:170 msgid "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" msgstr "``interfaz`` Nombre de interfaz a utilizar. El nombre de la interfaz en la que se deben instalar las direcciones IP virtuales. Si no se especifica, las direcciones se instalarán en la interfaz de salida;" -#: ../../configuration/pki/index.rst:148 +#: ../../configuration/pki/index.rst:150 msgid "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." msgstr "``interfaz`` se usa para que el comando VyOS CLI identifique la interfaz de WireGuard donde se usará esta clave privada." -#: ../../configuration/policy/route-map.rst:366 +#: ../../configuration/policy/route-map.rst:369 msgid "``internet`` - Well-known communities value 0" msgstr "``internet`` - Comunidades conocidas valor 0" -#: ../../configuration/vpn/ipsec.rst:69 +#: ../../configuration/vpn/ipsec.rst:71 msgid "``interval`` keep-alive interval in seconds <2-86400> (default 30);" msgstr "``interval`` intervalo de actividad en segundos <2-86400> (predeterminado 30);" @@ -18602,7 +20458,7 @@ msgstr "``jump``: jump to another custom chain." msgid "``kernel`` - Kernel routes" msgstr "``kernel`` - Rutas del núcleo" -#: ../../configuration/vpn/ipsec.rst:78 +#: ../../configuration/vpn/ipsec.rst:80 msgid "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" msgstr "``intercambio de claves`` qué protocolo debe usarse para inicializar la conexión. Si no se establece, ambos protocolos se manejan y las conexiones usarán IKEv2 al iniciarse, pero aceptarán cualquier versión de protocolo al responder:" @@ -18610,7 +20466,11 @@ msgstr "``intercambio de claves`` qué protocolo debe usarse para inicializar la msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``clave``: una clave privada, que se utilizará para autenticar el enrutador local en el par remoto:" -#: ../../configuration/system/option.rst:107 +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + +#: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: un perfil de servidor centrado en reducir la latencia de la red. Este perfil favorece el rendimiento sobre el ahorro de energía configurando ``intel_pstate`` y ``min_perf_pct=100``." @@ -18622,19 +20482,19 @@ msgstr "``least-connection`` Distributes requests to the server with the fewest msgid "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" msgstr "``least-connection`` Distribuye las solicitudes al servidor con la menor cantidad de conexiones activas" -#: ../../configuration/vpn/ipsec.rst:125 +#: ../../configuration/vpn/ipsec.rst:128 msgid "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" msgstr "``life-bytes`` ESP vida en bytes <1024-26843545600000>. Número de bytes transmitidos a través de IPsec SA antes de que caduque;" -#: ../../configuration/vpn/ipsec.rst:128 +#: ../../configuration/vpn/ipsec.rst:131 msgid "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" msgstr "``life-packets`` ESP vida en paquetes <1000-26843545600000>. Número de paquetes transmitidos a través de IPsec SA antes de que caduque;" -#: ../../configuration/vpn/ipsec.rst:131 +#: ../../configuration/vpn/ipsec.rst:134 msgid "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" msgstr "Vida útil de ESP ``lifetime`` en segundos <30-86400> (predeterminado 3600). Cuánto tiempo debe durar una instancia particular de una conexión (un conjunto de claves de encriptación/autenticación para paquetes de usuario), desde la negociación exitosa hasta el vencimiento;" -#: ../../configuration/vpn/ipsec.rst:86 +#: ../../configuration/vpn/ipsec.rst:88 msgid "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" @@ -18642,22 +20502,26 @@ msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgid "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" msgstr "Vida útil de ``lifetime`` IKE en segundos <30-86400> (predeterminado 28800);" -#: ../../configuration/policy/route-map.rst:373 +#: ../../configuration/policy/route-map.rst:376 msgid "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" msgstr "``llgr-stale`` - Comunidades conocidas valoran LLGR_STALE 0xFFFF0006" -#: ../../configuration/vpn/site2site_ipsec.rst:107 +#: ../../configuration/vpn/site2site_ipsec.rst:104 msgid "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" msgstr "``local-address``: dirección IP local para la conexión IPSec con este par. Si se define ``cualquiera``, entonces se usará una dirección IP que se configuró en la interfaz con la ruta predeterminada;" -#: ../../configuration/policy/route-map.rst:363 +#: ../../configuration/policy/route-map.rst:366 msgid "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" msgstr "``local-as`` - Comunidades conocidas valoran NO_EXPORT_SUBCONFED 0xFFFFFF03" -#: ../../configuration/vpn/site2site_ipsec.rst:31 +#: ../../configuration/vpn/site2site_ipsec.rst:32 msgid "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" msgstr "``local-id`` - ID para el enrutador VyOS local. Si se define, durante la autenticación se enviará al par remoto;" +#: ../../configuration/vpn/site2site_ipsec.rst:50 +msgid "``local-key`` - name of PKI key-pair with local private key" +msgstr "``local-key`` - name of PKI key-pair with local private key" + #: ../../configuration/firewall/general-legacy.rst:753 msgid "``local``: Ruleset for packets destined for this router" msgstr "``local``: conjunto de reglas para paquetes destinados a este enrutador" @@ -18674,7 +20538,7 @@ msgstr "``m`` - Intervalo de ejecución en minutos" msgid "``main`` Routing table used by VyOS and other interfaces not participating in PBR" msgstr "Tabla de enrutamiento ``principal`` utilizada por VyOS y otras interfaces que no participan en PBR" -#: ../../configuration/vpn/ipsec.rst:93 +#: ../../configuration/vpn/ipsec.rst:95 msgid "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" msgstr "``main`` utiliza el modo principal para intercambios de claves en el protocolo IKEv1 (predeterminado recomendado);" @@ -18682,19 +20546,23 @@ msgstr "``main`` utiliza el modo principal para intercambios de claves en el pro msgid "``message``: Full message that has triggered the script." msgstr "``mensaje``: Mensaje completo que ha disparado el script." +#: ../../configuration/system/option.rst:40 +msgid "``mitigations=off``" +msgstr "``mitigations=off``" + #: ../../configuration/vpn/ipsec.rst:92 msgid "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" msgstr "``mobike`` habilita el soporte de MOBIKE. MOBIKE solo está disponible para IKEv2:" -#: ../../configuration/vpn/site2site_ipsec.rst:35 +#: ../../configuration/vpn/site2site_ipsec.rst:36 msgid "``mode`` - mode for authentication between VyOS and remote peer:" msgstr "``mode`` - modo de autenticación entre VyOS y el par remoto:" -#: ../../configuration/vpn/ipsec.rst:91 +#: ../../configuration/vpn/ipsec.rst:93 msgid "``mode`` IKEv1 Phase 1 Mode Selection:" msgstr "``modo`` IKEv1 Selección de modo de fase 1:" -#: ../../configuration/vpn/ipsec.rst:136 +#: ../../configuration/vpn/ipsec.rst:139 msgid "``mode`` the type of the connection:" msgstr "``modo`` el tipo de conexión:" @@ -18758,19 +20626,19 @@ msgstr "``net.ipv6.conf.all.accept_redirects``" msgid "``net.ipv6.conf.all.accept_source_route``" msgstr "``net.ipv6.conf.all.accept_source_route``" -#: ../../configuration/policy/route-map.rst:364 +#: ../../configuration/policy/route-map.rst:367 msgid "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" msgstr "``no-advertise`` - Comunidades conocidas valoran NO_ADVERTISE 0xFFFFFF02" -#: ../../configuration/policy/route-map.rst:365 +#: ../../configuration/policy/route-map.rst:368 msgid "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" msgstr "``no-export`` - Comunidades conocidas valoran NO_EXPORT 0xFFFFFF01" -#: ../../configuration/policy/route-map.rst:374 +#: ../../configuration/policy/route-map.rst:377 msgid "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" msgstr "``no-llgr`` - Comunidades conocidas valoran NO_LLGR 0xFFFF0007" -#: ../../configuration/policy/route-map.rst:377 +#: ../../configuration/policy/route-map.rst:380 msgid "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" msgstr "``no-peer`` - Las comunidades conocidas valoran NOPEER 0xFFFFFF04" @@ -18782,7 +20650,7 @@ msgstr "``no`` deshabilita la reautenticación del host remoto durante un cambio msgid "``none`` - Execution interval in minutes" msgstr "``none`` - Intervalo de ejecución en minutos" -#: ../../configuration/vpn/site2site_ipsec.rst:85 +#: ../../configuration/vpn/site2site_ipsec.rst:82 msgid "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." msgstr "``none``: carga solo la conexión, que luego puede iniciarse manualmente o usarse como una configuración de respuesta." @@ -18798,7 +20666,7 @@ msgstr "``noselect`` marca el servidor como no utilizado, excepto para fines de msgid "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" msgstr "``nts`` habilita Network Time Security (NTS) para el servidor como se especifica en :rfc:`8915`" -#: ../../configuration/vpn/ipsec.rst:160 +#: ../../configuration/vpn/ipsec.rst:164 msgid "``options``" msgstr "``opciones``" @@ -18814,11 +20682,19 @@ msgstr "``ospfv3`` - Abrir primero la ruta más corta (IPv6) (OSPFv3)" msgid "``out``: Ruleset for forwarded packets on an outbound interface" msgstr "``out``: conjunto de reglas para paquetes reenviados en una interfaz de salida" +#: ../../configuration/vpn/site2site_ipsec.rst:54 +msgid "``passphrase`` - local private key passphrase" +msgstr "``passphrase`` - local private key passphrase" + +#: ../../configuration/vpn/site2site_ipsec.rst:67 +msgid "``passphrase`` - private key passphrase, if needed." +msgstr "``passphrase`` - private key passphrase, if needed." + #: ../../configuration/vpn/site2site_ipsec.rst:70 msgid "``password`` - passphrase private key, if needed." msgstr "``contraseña``: clave privada de frase de contraseña, si es necesario." -#: ../../configuration/pki/index.rst:163 +#: ../../configuration/pki/index.rst:165 msgid "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." msgstr "``peer`` se usa para que el comando VyOS CLI identifique el par de WireGuard donde se usará este secreto." @@ -18826,7 +20702,7 @@ msgstr "``peer`` se usa para que el comando VyOS CLI identifique el par de WireG msgid "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." msgstr "``período``: Ventana de tiempo para el cálculo de la tasa. Valores posibles: ``segundo`` (un segundo), ``minuto`` (un minuto), ``hora`` (una hora). El valor predeterminado es ``segundo``." -#: ../../configuration/vpn/ipsec.rst:142 +#: ../../configuration/vpn/ipsec.rst:145 msgid "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" msgstr "``pfs`` si se desea Perfect Forward Secrecy de claves en el canal de codificación de la conexión y define un grupo Diffie-Hellman para PFS:" @@ -18835,11 +20711,11 @@ msgid "``pool`` mobilizes persistent client mode association with a number of re msgstr "``pool`` moviliza la asociación del modo de cliente persistente con varios servidores remotos." #: ../../configuration/vpn/site2site_ipsec.rst:126 -#: ../../configuration/vpn/site2site_ipsec.rst:136 +#: ../../configuration/vpn/site2site_ipsec.rst:139 msgid "``port`` - define port. Have effect only when used together with ``prefix``;" msgstr "``puerto`` - define puerto. Tiene efecto solo cuando se usa junto con ``prefijo``;" -#: ../../configuration/vpn/site2site_ipsec.rst:37 +#: ../../configuration/vpn/site2site_ipsec.rst:38 msgid "``pre-shared-secret`` - use predefined shared secret phrase;" msgstr "``pre-shared-secret``: utiliza una frase secreta compartida predefinida;" @@ -18851,27 +20727,35 @@ msgstr "``prefer`` marca el servidor como preferido. En igualdad de condiciones, msgid "``prefix`` - IP network at local side." msgstr "``prefijo`` - Red IP en el lado local." -#: ../../configuration/vpn/site2site_ipsec.rst:138 +#: ../../configuration/vpn/site2site_ipsec.rst:141 msgid "``prefix`` - IP network at remote side." msgstr "``prefijo`` - Red IP en el lado remoto." -#: ../../configuration/vpn/ipsec.rst:107 +#: ../../configuration/vpn/ipsec.rst:109 msgid "``prf`` pseudo-random function." msgstr "Función pseudoaleatoria ``prf``." -#: ../../configuration/vpn/ipsec.rst:151 +#: ../../configuration/vpn/site2site_ipsec.rst:130 +msgid "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" +msgstr "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" + +#: ../../configuration/system/option.rst:51 +msgid "``processor.max_cstate=1`` Limit processor to maximum C-state 1" +msgstr "``processor.max_cstate=1`` Limit processor to maximum C-state 1" + +#: ../../configuration/vpn/ipsec.rst:154 msgid "``proposal`` ESP-group proposal with number <1-65535>:" msgstr "``Propuesta`` Propuesta del grupo ESP con número <1-65535>:" -#: ../../configuration/vpn/ipsec.rst:99 +#: ../../configuration/vpn/ipsec.rst:101 msgid "``proposal`` the list of proposals and their parameters:" msgstr "``propuesta`` la lista de propuestas y sus parámetros:" -#: ../../configuration/vpn/site2site_ipsec.rst:130 +#: ../../configuration/vpn/site2site_ipsec.rst:133 msgid "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" msgstr "``protocolo``: defina el protocolo para el tráfico de coincidencias, que debe cifrarse y enviarse a este par;" -#: ../../configuration/vpn/site2site_ipsec.rst:21 +#: ../../configuration/vpn/site2site_ipsec.rst:22 msgid "``psk`` - Preshared secret key name:" msgstr "``psk`` - Nombre de la clave secreta precompartida:" @@ -18890,7 +20774,7 @@ msgstr "``tasa``: Número de paquetes. Predeterminado 5." msgid "``reject``: reject the packet." msgstr "``reject``: reject the packet." -#: ../../configuration/vpn/site2site_ipsec.rst:111 +#: ../../configuration/vpn/site2site_ipsec.rst:108 msgid "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." msgstr "``remote-address``: dirección IP remota o nombre de host para la conexión IPSec. La dirección IPv4 o IPv6 se usa cuando un par tiene una dirección IP estática pública. El nombre de host es un nombre DNS que podría usarse cuando un par tiene una dirección IP pública y un nombre DNS, pero una dirección IP podría cambiarse de vez en cuando." @@ -18898,10 +20782,18 @@ msgstr "``remote-address``: dirección IP remota o nombre de host para la conexi msgid "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" msgstr "``remote-id``: defina una ID para el par remoto, en lugar de usar el nombre o la dirección del par. Útil en caso de que el par remoto esté detrás de NAT o si se usa el ``modo x509``;" -#: ../../configuration/vpn/site2site_ipsec.rst:133 +#: ../../configuration/vpn/site2site_ipsec.rst:52 +msgid "``remote-key`` - name of PKI key-pair with remote public key" +msgstr "``remote-key`` - name of PKI key-pair with remote public key" + +#: ../../configuration/vpn/site2site_ipsec.rst:136 msgid "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" msgstr "``remote``: defina el destino remoto para el tráfico de coincidencias, que debe cifrarse y enviarse a este par:" +#: ../../configuration/vpn/site2site_ipsec.rst:113 +msgid "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" +msgstr "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" + #: ../../configuration/loadbalancing/reverse-proxy.rst:64 msgid "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" msgstr "``req-ssl-sni`` Coincidencia de solicitud de indicación de nombre de servidor SSL (SNI)" @@ -18910,10 +20802,14 @@ msgstr "``req-ssl-sni`` Coincidencia de solicitud de indicación de nombre de se msgid "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" msgstr "``resp-time``: el tiempo máximo de respuesta para ping en segundos. Rango 1...30, predeterminado 5" -#: ../../configuration/vpn/site2site_ipsec.rst:80 +#: ../../configuration/vpn/site2site_ipsec.rst:77 msgid "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." msgstr "``responder``: no intenta iniciar una conexión con un compañero remoto. En este modo, la sesión de IPSec se establecerá solo después de que la inicie un par remoto. Podría ser útil cuando no hay conectividad directa con el par debido a un firewall o NAT en el medio del lado local y remoto." +#: ../../configuration/vpn/ipsec.rst:68 +msgid "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" +msgstr "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" + #: ../../configuration/vpn/ipsec.rst:54 #: ../../configuration/vpn/ipsec.rst:67 msgid "``restart`` set action to restart;" @@ -18941,19 +20837,19 @@ msgstr "``round-robin`` - Política de round-robin: transmite paquetes en orden msgid "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" msgstr "``round-robin`` Distribuye solicitudes de manera circular, enviando secuencialmente cada solicitud al siguiente servidor en línea" -#: ../../configuration/policy/route-map.rst:369 +#: ../../configuration/policy/route-map.rst:372 msgid "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" msgstr "``route-filter-translated-v4`` - Comunidades conocidas valoran ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" -#: ../../configuration/policy/route-map.rst:371 +#: ../../configuration/policy/route-map.rst:374 msgid "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" msgstr "``route-filter-translated-v6`` - Comunidades conocidas valoran ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" -#: ../../configuration/policy/route-map.rst:370 +#: ../../configuration/policy/route-map.rst:373 msgid "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" msgstr "``route-filter-v4`` - Comunidades conocidas valoran ROUTE_FILTER_v4 0xFFFF0003" -#: ../../configuration/policy/route-map.rst:372 +#: ../../configuration/policy/route-map.rst:375 msgid "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" msgstr "``route-filter-v6`` - Comunidades conocidas valoran ROUTE_FILTER_v6 0xFFFF0005" @@ -18961,11 +20857,19 @@ msgstr "``route-filter-v6`` - Comunidades conocidas valoran ROUTE_FILTER_v6 0xFF msgid "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa-key-name``: clave RSA compartida para la autenticación. La clave debe definirse en la sección ``set vpn rsa-keys``;" +#: ../../configuration/vpn/site2site_ipsec.rst:48 +msgid "``rsa`` - options for RSA authentication mode:" +msgstr "``rsa`` - options for RSA authentication mode:" + +#: ../../configuration/vpn/site2site_ipsec.rst:40 +msgid "``rsa`` - use simple shared RSA key." +msgstr "``rsa`` - use simple shared RSA key." + #: ../../configuration/vpn/site2site_ipsec.rst:39 msgid "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa``: use una clave RSA compartida simple. La clave debe definirse en la sección ``set vpn rsa-keys``;" -#: ../../configuration/vpn/site2site_ipsec.rst:27 +#: ../../configuration/vpn/site2site_ipsec.rst:28 msgid "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" msgstr "``secret`` - secreto compartido predefinido. Se usa si está configurado el modo ``pre-shared-secret``;" @@ -18978,10 +20882,13 @@ msgid "``set firewall ipv4 forward filter ...``." msgstr "``set firewall ipv4 forward filter ...``." #: ../../configuration/firewall/index.rst:54 -#: ../../configuration/firewall/index.rst:72 msgid "``set firewall ipv4 input filter ...``." msgstr "``set firewall ipv4 input filter ...``." +#: ../../configuration/firewall/index.rst:72 +msgid "``set firewall ipv4 output filter ...``." +msgstr "``set firewall ipv4 output filter ...``." + #: ../../configuration/firewall/index.rst:63 msgid "``set firewall ipv6 forward filter ...``." msgstr "``set firewall ipv6 forward filter ...``." @@ -19010,19 +20917,19 @@ msgstr "``sonmp`` - Escuche SONMP para enrutadores/conmutadores de Nortel" msgid "``source-address`` Distributes requests based on the source IP address of the client" msgstr "``source-address`` Distribuye las solicitudes en función de la dirección IP de origen del cliente" -#: ../../configuration/system/login.rst:74 +#: ../../configuration/system/login.rst:78 msgid "``ssh-dss``" msgstr "``ssh-dss``" -#: ../../configuration/system/login.rst:75 +#: ../../configuration/system/login.rst:79 msgid "``ssh-ed25519``" msgstr "``ssh-ed25519``" -#: ../../configuration/system/login.rst:49 +#: ../../configuration/system/login.rst:53 msgid "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" msgstr "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB usuario@host.ejemplo.com``" -#: ../../configuration/system/login.rst:76 +#: ../../configuration/system/login.rst:80 msgid "``ssh-rsa``" msgstr "``ssh-rsa''" @@ -19034,6 +20941,10 @@ msgstr "``ssl-fc-sni-end`` SSL frontend coincide con el final de la conexión No msgid "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" msgstr "``ssl-fc-sni`` Conexión de frontend SSL Nombre del servidor Coincidencia de indicación" +#: ../../configuration/vpn/ipsec.rst:54 +msgid "``start`` tries to immediately re-create the CHILD_SA;" +msgstr "``start`` tries to immediately re-create the CHILD_SA;" + #: ../../configuration/policy/route-map.rst:173 msgid "``static`` - Statically configured routes" msgstr "``static`` - Rutas configuradas estáticamente" @@ -19042,6 +20953,18 @@ msgstr "``static`` - Rutas configuradas estáticamente" msgid "``station`` - Connects to another access point" msgstr "``estación`` - Se conecta a otro punto de acceso" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -19083,22 +21006,34 @@ msgstr "``test-script``: un script definido por el usuario debe devolver 0 para msgid "``threshold``: ``below`` or ``above`` the specified rate limit." msgstr "``umbral``: ``por debajo`` o ``por encima`` del límite de velocidad especificado." -#: ../../configuration/system/option.rst:97 +#: ../../configuration/system/option.rst:127 msgid "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." msgstr "``rendimiento``: un perfil de servidor centrado en mejorar el rendimiento de la red. Este perfil favorece el rendimiento sobre el ahorro de energía configurando ``intel_pstate`` y ``max_perf_pct=100`` y aumentando los tamaños de búfer de red del núcleo." -#: ../../configuration/vpn/ipsec.rst:71 +#: ../../configuration/vpn/ipsec.rst:73 msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` tiempo de espera de actividad en segundos <2-86400> (predeterminado 120) solo IKEv1" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Equilibrio de carga de transmisión adaptable: vinculación de canales que no requiere ningún soporte de conmutador especial." -#: ../../configuration/vpn/ipsec.rst:140 +#: ../../configuration/vpn/ipsec.rst:143 msgid "``transport`` transport mode;" msgstr "``transporte`` modo de transporte;" +#: ../../configuration/vpn/ipsec.rst:63 +msgid "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" +msgstr "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" + +#: ../../configuration/vpn/ipsec.rst:52 +msgid "``trap`` installs a trap policy for the CHILD_SA;" +msgstr "``trap`` installs a trap policy for the CHILD_SA;" + #: ../../configuration/loadbalancing/wan.rst:179 msgid "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" msgstr "``ttl-limit``: Para la prueba de límite UDP TTL, se debe especificar el límite de conteo de saltos. El límite debe ser más corto que la longitud de la ruta, se necesita un mensaje de tiempo caducado de ICMP para que se devuelva para una prueba exitosa. predeterminado 1" @@ -19115,7 +21050,7 @@ msgstr "``ttyUSBX`` - Nombre del dispositivo serie USB" msgid "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" msgstr "``tunnel``: defina los criterios para que el tráfico coincida con el cifrado y envíelo a un par:" -#: ../../configuration/vpn/ipsec.rst:138 +#: ../../configuration/vpn/ipsec.rst:141 msgid "``tunnel`` tunnel mode (default);" msgstr "modo túnel ``tunnel`` (predeterminado);" @@ -19123,11 +21058,11 @@ msgstr "modo túnel ``tunnel`` (predeterminado);" msgid "``type``: Specify the type of test. type can be ping, ttl or a user defined script" msgstr "``tipo``: Especifique el tipo de prueba. el tipo puede ser ping, ttl o un script definido por el usuario" -#: ../../configuration/vpn/site2site_ipsec.rst:51 +#: ../../configuration/vpn/site2site_ipsec.rst:56 msgid "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" msgstr "``use-x509-id``: use la identificación local del certificado x509. No se puede usar cuando se define ``id``;" -#: ../../configuration/vpn/site2site_ipsec.rst:152 +#: ../../configuration/vpn/site2site_ipsec.rst:155 msgid "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." msgstr "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." @@ -19135,7 +21070,7 @@ msgstr "``virtual-address`` - Defines a virtual IP address which is requested by msgid "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." msgstr "``virtual-ip`` Permitir la instalación de direcciones IP virtuales. Lista separada por comas de direcciones IP virtuales para solicitar en cargas útiles de configuración IKEv2 o configuración de modo IKEv1. Las direcciones comodín 0.0.0.0 y :: solicitan una dirección arbitraria, se pueden definir direcciones específicas. Sin embargo, el respondedor puede devolver una dirección diferente o ninguna." -#: ../../configuration/vpn/ipsec.rst:168 +#: ../../configuration/vpn/ipsec.rst:172 msgid "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." @@ -19143,11 +21078,27 @@ msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated l msgid "``vnc`` - Virtual Network Control (VNC)" msgstr "``vnc`` - Control de red virtual (VNC)" -#: ../../configuration/vpn/site2site_ipsec.rst:140 +#: ../../configuration/vpn/site2site_ipsec.rst:143 msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti``: utiliza una interfaz VTI para el cifrado del tráfico. Cualquier tráfico que se envíe a la interfaz VTI se cifrará y se enviará a este par. El uso de VTI hace que la configuración de IPSec sea mucho más flexible y fácil en situaciones complejas, y permite agregar/eliminar dinámicamente redes remotas, accesibles a través de un par, ya que en este modo el enrutador no necesita crear SA/política adicional para cada red remota:" -#: ../../configuration/vpn/site2site_ipsec.rst:54 +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + +#: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - opciones para el modo de autenticación x509:" @@ -19163,10 +21114,26 @@ msgstr "``xor-hash`` - Política XOR: transmisión basada en la política hash d msgid "``yes`` enable remote host re-authentication during an IKE rekey;" msgstr "``yes`` habilita la reautenticación del host remoto durante un cambio de clave IKE;" -#: ../../configuration/system/option.rst:39 +#: ../../configuration/service/ntp.rst:90 +msgid "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." +msgstr "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." + +#: ../../configuration/service/ntp.rst:94 +msgid "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." +msgstr "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." + +#: ../../configuration/system/option.rst:69 msgid "`source-address` and `source-interface` can not be used at the same time." msgstr "`source-address` y `source-interface` no se pueden usar al mismo tiempo." +#: ../../configuration/service/ntp.rst:102 +msgid "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." +msgstr "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." + +#: ../../configuration/service/ntp.rst:107 +msgid "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" +msgstr "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" + #: ../../configuration/protocols/rpki.rst:12 msgid "`tweet by EvilMog`_, 2020-02-21" msgstr "`tweet de EvilMog`_, 2020-02-21" @@ -19194,7 +21161,7 @@ msgstr "Alerta" msgid "all" msgstr "todo" -#: ../../configuration/vrf/index.rst:428 +#: ../../configuration/vrf/index.rst:447 msgid "an RD / RTLIST" msgstr "un RD / RTLIST" @@ -19234,23 +21201,23 @@ msgstr "bgpd" msgid "bonding" msgstr "unión" -#: ../../configuration/service/dhcp-server.rst:305 +#: ../../configuration/service/dhcp-server.rst:361 msgid "boot-size" msgstr "tamaño de bota" -#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:354 msgid "bootfile-name" msgstr "bootfile-name" -#: ../../configuration/service/dhcp-server.rst:300 +#: ../../configuration/service/dhcp-server.rst:356 msgid "bootfile-name, filename" msgstr "bootfile-name, nombre de archivo" -#: ../../configuration/service/dhcp-server.rst:288 +#: ../../configuration/service/dhcp-server.rst:344 msgid "bootfile-server" msgstr "servidor de archivos de arranque" -#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:359 msgid "bootfile-size" msgstr "tamaño del archivo de arranque" @@ -19258,7 +21225,7 @@ msgstr "tamaño del archivo de arranque" msgid "bridge" msgstr "Puente" -#: ../../configuration/service/dhcp-server.rst:236 +#: ../../configuration/service/dhcp-server.rst:292 msgid "client-prefix-length" msgstr "cliente-prefijo-longitud" @@ -19286,15 +21253,19 @@ msgstr "cron" msgid "daemon" msgstr "demonio" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ tiene otra forma de determinar la dirección IP de WAN. Esto es controlado por:" -#: ../../configuration/service/dns.rst:218 +#: ../../configuration/service/dns.rst:232 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ utiliza dos métodos para actualizar un registro DNS. El primero enviará actualizaciones directamente al demonio DNS, de conformidad con :rfc:`2136`. El segundo implica un servicio de terceros, como DynDNS.com o cualquier otro sitio web similar. Este método utiliza solicitudes HTTP para transmitir la nueva dirección IP. Puede configurar ambos en VyOS." -#: ../../configuration/service/dns.rst:413 +#: ../../configuration/service/dns.rst:299 +msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." +msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." + +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in `<pattern>`." msgstr "ddclient_ omitirá cualquier dirección ubicada antes de la cadena establecida en `<pattern> `." @@ -19306,7 +21277,7 @@ msgstr "Depurar" msgid "decrement-lifetime" msgstr "decremento-vida útil" -#: ../../configuration/service/dhcp-server.rst:335 +#: ../../configuration/service/dhcp-server.rst:391 msgid "default-lease-time, max-lease-time" msgstr "tiempo de arrendamiento predeterminado, tiempo de arrendamiento máximo" @@ -19318,7 +21289,7 @@ msgstr "vida útil predeterminada" msgid "default-preference" msgstr "preferencia predeterminada" -#: ../../configuration/service/dhcp-server.rst:248 +#: ../../configuration/service/dhcp-server.rst:304 msgid "default-router" msgstr "enrutador predeterminado" @@ -19330,15 +21301,15 @@ msgstr "umbral mínimo predeterminado" msgid "deprecate-prefix" msgstr "prefijo obsoleto" -#: ../../configuration/highavailability/index.rst:354 +#: ../../configuration/highavailability/index.rst:364 msgid "destination-hashing" msgstr "hash de destino" -#: ../../configuration/service/dhcp-server.rst:285 +#: ../../configuration/service/dhcp-server.rst:341 msgid "dhcp-server-identifier" msgstr "dhcp-servidor-identificador" -#: ../../configuration/highavailability/index.rst:364 +#: ../../configuration/highavailability/index.rst:374 msgid "direct" msgstr "Directo" @@ -19356,17 +21327,17 @@ msgstr "deshabilitar: sin validación de fuente" msgid "dnssl" msgstr "DNSSL" -#: ../../configuration/service/dhcp-server.rst:263 -#: ../../configuration/service/dhcp-server.rst:265 +#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:321 msgid "domain-name" msgstr "nombre de dominio" -#: ../../configuration/service/dhcp-server.rst:260 +#: ../../configuration/service/dhcp-server.rst:316 msgid "domain-name-servers" msgstr "servidores de nombres de dominio" -#: ../../configuration/service/dhcp-server.rst:318 -#: ../../configuration/service/dhcp-server.rst:320 +#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:376 msgid "domain-search" msgstr "búsqueda de dominio" @@ -19402,11 +21373,11 @@ msgstr "ethernet" msgid "exact-match: exact match of the network prefixes." msgstr "coincidencia exacta: coincidencia exacta de los prefijos de red." -#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:399 msgid "exclude" msgstr "Excluir" -#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:404 msgid "failover" msgstr "conmutación por error" @@ -19418,8 +21389,8 @@ msgstr "rápido: solicite al socio que transmita LACPDU cada 1 segundo" msgid "file <file name>" msgstr "archivo<file name>" -#: ../../configuration/protocols/bgp.rst:826 -#: ../../configuration/protocols/bgp.rst:832 +#: ../../configuration/protocols/bgp.rst:848 +#: ../../configuration/protocols/bgp.rst:854 msgid "filter-list" msgstr "lista de filtros" @@ -19431,6 +21402,10 @@ msgstr "ftp" msgid "full - always use full-duplex" msgstr "completo: utilice siempre dúplex completo" +#: ../../configuration/service/router-advert.rst:16 +msgid "geneve" +msgstr "geneve" + #: ../../configuration/interfaces/ethernet.rst:32 msgid "half - always use half-duplex" msgstr "medio - siempre use medio dúplex" @@ -19443,7 +21418,7 @@ msgstr "límite de salto" msgid "host: single host IP address to match." msgstr "host: dirección IP de host único para hacer coincidir." -#: ../../configuration/system/option.rst:89 +#: ../../configuration/system/option.rst:119 msgid "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" msgstr "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" @@ -19467,7 +21442,7 @@ msgstr "información" msgid "interval" msgstr "Intervalo" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "INVÁLIDO" @@ -19475,8 +21450,8 @@ msgstr "INVÁLIDO" msgid "inverse-match: network/netmask to match (requires network be defined)." msgstr "coincidencia inversa: red/máscara de red para coincidir (requiere que se defina la red)." -#: ../../configuration/service/dhcp-server.rst:268 -#: ../../configuration/service/dhcp-server.rst:270 +#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:326 msgid "ip-forwarding" msgstr "reenvío de ip" @@ -19484,10 +21459,18 @@ msgstr "reenvío de ip" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "se puede usar con cualquier NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "no aumenta la tasa de interrupción del dispositivo de hardware (aunque sí introduce interrupciones entre procesadores (IPI))." @@ -19496,7 +21479,7 @@ msgstr "no aumenta la tasa de interrupción del dispositivo de hardware (aunque msgid "kern" msgstr "núcleo" -#: ../../configuration/service/router-advert.rst:16 +#: ../../configuration/service/router-advert.rst:17 msgid "l2tpv3" msgstr "L2TPv3" @@ -19504,27 +21487,27 @@ msgstr "L2TPv3" msgid "ldpd" msgstr "ldpd" -#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:389 msgid "lease" msgstr "Alquiler" -#: ../../configuration/highavailability/index.rst:351 +#: ../../configuration/highavailability/index.rst:361 msgid "least-connection" msgstr "mínima conexión" -#: ../../configuration/vpn/site2site_ipsec.rst:275 +#: ../../configuration/vpn/site2site_ipsec.rst:278 msgid "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" msgstr "izquierda local_ip: 192.168.0.10 # VPN Gateway, detrás del dispositivo NAT" -#: ../../configuration/vpn/site2site_ipsec.rst:167 +#: ../../configuration/vpn/site2site_ipsec.rst:170 msgid "left local_ip: `198.51.100.3` # server side WAN IP" msgstr "left local_ip: `198.51.100.3` # IP WAN del lado del servidor" -#: ../../configuration/vpn/site2site_ipsec.rst:276 +#: ../../configuration/vpn/site2site_ipsec.rst:279 msgid "left public_ip:172.18.201.10" msgstr "izquierda public_ip:172.18.201.10" -#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:168 msgid "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" msgstr "subred izquierda: `192.168.0.0/24` site1, lado del servidor (es decir, localidad, en realidad no hay roles de cliente o servidor)" @@ -19592,7 +21575,7 @@ msgstr "uso local 5 (local5)" msgid "local use 7 (local7)" msgstr "uso local 7 (local7)" -#: ../../configuration/highavailability/index.rst:355 +#: ../../configuration/highavailability/index.rst:365 msgid "locality-based-least-connection" msgstr "conexión mínima basada en la localidad" @@ -19666,12 +21649,12 @@ msgstr "más información relacionada con IGP - :ref:`routing-isis`" msgid "more information related IGP - :ref:`routing-ospf`" msgstr "más información relacionada con IGP - :ref:`routing-ospf`" -#: ../../configuration/service/dhcp-server.rst:258 +#: ../../configuration/service/dhcp-server.rst:314 #: ../../configuration/service/router-advert.rst:1 msgid "name-server" msgstr "nombre del servidor" -#: ../../configuration/service/dhcp-server.rst:280 +#: ../../configuration/service/dhcp-server.rst:336 msgid "netbios-name-servers" msgstr "servidores de nombres netbios" @@ -19687,7 +21670,7 @@ msgstr "red: red/máscara de red para hacer coincidir (requiere que se defina la msgid "news" msgstr "Novedades" -#: ../../configuration/service/dhcp-server.rst:290 +#: ../../configuration/service/dhcp-server.rst:346 msgid "next-server" msgstr "próximo servidor" @@ -19699,7 +21682,7 @@ msgstr "sin-bandera-autonoma" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "Extraviado" @@ -19711,11 +21694,11 @@ msgstr "Aviso" msgid "ntp" msgstr "NTP" -#: ../../configuration/service/dhcp-server.rst:273 +#: ../../configuration/service/dhcp-server.rst:329 msgid "ntp-server" msgstr "servidor ntp" -#: ../../configuration/service/dhcp-server.rst:275 +#: ../../configuration/service/dhcp-server.rst:331 msgid "ntp-servers" msgstr "servidores ntp" @@ -19723,7 +21706,7 @@ msgstr "servidores ntp" msgid "one rule with a LAN (inbound-interface) and the WAN (interface)." msgstr "una regla con una LAN (interfaz de entrada) y la WAN (interfaz)." -#: ../../configuration/service/router-advert.rst:17 +#: ../../configuration/service/router-advert.rst:18 msgid "openvpn" msgstr "OpenVPN" @@ -19763,8 +21746,8 @@ msgstr "política extcommunity-list" msgid "policy large-community-list" msgstr "política lista-comunidad-grande" -#: ../../configuration/service/dhcp-server.rst:313 -#: ../../configuration/service/dhcp-server.rst:315 +#: ../../configuration/service/dhcp-server.rst:369 +#: ../../configuration/service/dhcp-server.rst:371 msgid "pop-server" msgstr "servidor pop" @@ -19772,17 +21755,17 @@ msgstr "servidor pop" msgid "preferred-lifetime" msgstr "preferido de por vida" -#: ../../configuration/protocols/bgp.rst:827 -#: ../../configuration/protocols/bgp.rst:831 +#: ../../configuration/protocols/bgp.rst:849 +#: ../../configuration/protocols/bgp.rst:853 msgid "prefix-list, distribute-list" msgstr "lista de prefijos, lista de distribución" -#: ../../configuration/service/router-advert.rst:18 +#: ../../configuration/service/router-advert.rst:19 msgid "pseudo-ethernet" msgstr "pseudo-ethernet" -#: ../../configuration/service/dhcp-server.rst:338 -#: ../../configuration/service/dhcp-server.rst:340 +#: ../../configuration/service/dhcp-server.rst:394 +#: ../../configuration/service/dhcp-server.rst:396 msgid "range" msgstr "Distancia" @@ -19790,7 +21773,7 @@ msgstr "Distancia" msgid "reachable-time" msgstr "tiempo alcanzable" -#: ../../configuration/system/ip.rst:82 +#: ../../configuration/system/ip.rst:95 msgid "reset commands" msgstr "Restablecer comandos" @@ -19798,7 +21781,7 @@ msgstr "Restablecer comandos" msgid "retrans-timer" msgstr "retrans-temporizador" -#: ../../configuration/service/dhcp-server.rst:325 +#: ../../configuration/service/dhcp-server.rst:381 msgid "rfc3442-static-route, windows-static-route" msgstr "rfc3442-ruta-estática, ruta-estática-windows" @@ -19806,15 +21789,15 @@ msgstr "rfc3442-ruta-estática, ruta-estática-windows" msgid "rfc3768-compatibility" msgstr "compatibilidad con rfc3768" -#: ../../configuration/vpn/site2site_ipsec.rst:277 +#: ../../configuration/vpn/site2site_ipsec.rst:280 msgid "right local_ip: 172.18.202.10 # right side WAN IP" msgstr "right local_ip: 172.18.202.10 # IP WAN del lado derecho" -#: ../../configuration/vpn/site2site_ipsec.rst:169 +#: ../../configuration/vpn/site2site_ipsec.rst:172 msgid "right local_ip: `203.0.113.2` # remote office side WAN IP" msgstr "right local_ip: `203.0.113.2` # IP WAN del lado de la oficina remota" -#: ../../configuration/vpn/site2site_ipsec.rst:168 +#: ../../configuration/vpn/site2site_ipsec.rst:171 msgid "right subnet: `10.0.0.0/24` site2,remote office side" msgstr "subred derecha: `10.0.0.0/24` site2, lado de la oficina remota" @@ -19822,16 +21805,16 @@ msgstr "subred derecha: `10.0.0.0/24` site2, lado de la oficina remota" msgid "ripd" msgstr "ripd" -#: ../../configuration/highavailability/index.rst:349 +#: ../../configuration/highavailability/index.rst:359 msgid "round-robin" msgstr "todos contra todos" -#: ../../configuration/protocols/bgp.rst:825 -#: ../../configuration/protocols/bgp.rst:833 +#: ../../configuration/protocols/bgp.rst:847 +#: ../../configuration/protocols/bgp.rst:855 msgid "route-map" msgstr "mapa de ruta" -#: ../../configuration/service/dhcp-server.rst:250 +#: ../../configuration/service/dhcp-server.rst:306 msgid "routers" msgstr "enrutadores" @@ -19848,7 +21831,7 @@ msgstr "sFlow es una tecnología que permite monitorear el tráfico de la red me msgid "security" msgstr "Seguridad" -#: ../../configuration/service/dhcp-server.rst:283 +#: ../../configuration/service/dhcp-server.rst:339 msgid "server-identifier" msgstr "identificador de servidor" @@ -19865,11 +21848,11 @@ msgstr "establecer una dirección de destino y/o de origen. Entrada aceptada:" msgid "sha256 Hashes" msgstr "sha256 hash" -#: ../../configuration/system/ip.rst:50 +#: ../../configuration/system/ip.rst:63 msgid "show commands" msgstr "Mostrar comandos" -#: ../../configuration/service/dhcp-server.rst:289 +#: ../../configuration/service/dhcp-server.rst:345 msgid "siaddr" msgstr "ver" @@ -19877,16 +21860,20 @@ msgstr "ver" msgid "slow: Request partner to transmit LACPDUs every 30 seconds" msgstr "lento: solicite al socio que transmita LACPDU cada 30 segundos" -#: ../../configuration/service/dhcp-server.rst:308 -#: ../../configuration/service/dhcp-server.rst:310 +#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:366 msgid "smtp-server" msgstr "servidor SMTP" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "Los filtros de software se pueden agregar fácilmente al hash sobre nuevos protocolos," -#: ../../configuration/highavailability/index.rst:353 +#: ../../configuration/highavailability/index.rst:363 msgid "source-hashing" msgstr "fuente-hashing" @@ -19898,11 +21885,11 @@ msgstr "habla01-habla04" msgid "spoke05" msgstr "habló05" -#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:409 msgid "static-mapping" msgstr "mapeo estático" -#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:379 msgid "static-route" msgstr "ruta estática" @@ -19912,7 +21899,7 @@ msgstr "ruta estática" msgid "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." msgstr "estricto: cada paquete entrante se prueba con la FIB y si la interfaz no es la mejor ruta inversa, la verificación del paquete fallará. Por defecto, los paquetes fallidos se descartan." -#: ../../configuration/service/dhcp-server.rst:238 +#: ../../configuration/service/dhcp-server.rst:294 msgid "subnet-mask" msgstr "máscara de subred" @@ -19928,8 +21915,8 @@ msgstr "cola" msgid "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." msgstr "tc_ es una poderosa herramienta para el control de tráfico que se encuentra en el kernel de Linux. Sin embargo, su configuración a menudo se considera una tarea engorrosa. Afortunadamente, VyOS facilita el trabajo a través de su CLI, mientras usa ``tc`` como backend." -#: ../../configuration/service/dhcp-server.rst:293 -#: ../../configuration/service/dhcp-server.rst:295 +#: ../../configuration/service/dhcp-server.rst:349 +#: ../../configuration/service/dhcp-server.rst:351 msgid "tftp-server-name" msgstr "nombre-servidor-tftp" @@ -19938,21 +21925,21 @@ msgstr "nombre-servidor-tftp" msgid "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." msgstr "esta opción permite configurar prefix-sid en SR. El 'no-php-flag' significa que NO hay aparición de penúltimo salto que permite que el nodo SR solicite a su vecino que no haga estallar la etiqueta. El indicador 'explícito-nulo' permite que el nodo SR solicite a su vecino que envíe un paquete IP con la etiqueta EXPLÍCITO-NULO. La opción 'n-flag-clear' se puede usar para borrar explícitamente el indicador de nodo que está configurado de forma predeterminada para los SID de prefijo asociados a las direcciones de bucle invertido. Esta opción es necesaria para configurar Anycast-SID." -#: ../../configuration/service/dhcp-server.rst:242 -#: ../../configuration/service/dhcp-server.rst:244 +#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:300 msgid "time-offset" msgstr "desplazamiento de tiempo" -#: ../../configuration/service/dhcp-server.rst:253 +#: ../../configuration/service/dhcp-server.rst:309 msgid "time-server" msgstr "contemporizador" -#: ../../configuration/service/dhcp-server.rst:255 +#: ../../configuration/service/dhcp-server.rst:311 msgid "time-servers" msgstr "servidores de tiempo" -#: ../../configuration/highavailability/index.rst:365 -#: ../../configuration/service/router-advert.rst:19 +#: ../../configuration/highavailability/index.rst:375 +#: ../../configuration/service/router-advert.rst:20 msgid "tunnel" msgstr "Túnel" @@ -19972,7 +21959,7 @@ msgstr "usuario" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "Válido" @@ -19984,7 +21971,7 @@ msgstr "vida útil válida" msgid "veth interfaces need to be created in pairs - it's called the peer name" msgstr "Las interfaces veth deben crearse en pares: se llama el nombre del par" -#: ../../configuration/service/router-advert.rst:20 +#: ../../configuration/service/router-advert.rst:21 msgid "vxlan" msgstr "VXLAN" @@ -19996,11 +21983,11 @@ msgstr "Advertencia" msgid "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." msgstr "describimos la configuración SR ISIS / SR OSPF usando 2 conectados con ellos para compartir información de etiquetas." -#: ../../configuration/highavailability/index.rst:352 +#: ../../configuration/highavailability/index.rst:362 msgid "weighted-least-connection" msgstr "conexión ponderada mínima" -#: ../../configuration/highavailability/index.rst:350 +#: ../../configuration/highavailability/index.rst:360 msgid "weighted-round-robin" msgstr "round-robin ponderado" @@ -20008,15 +21995,15 @@ msgstr "round-robin ponderado" msgid "while a *byte* is written as a single **b**." msgstr "mientras que un *byte* se escribe como una sola **b**." -#: ../../configuration/service/dhcp-server.rst:278 +#: ../../configuration/service/dhcp-server.rst:334 msgid "wins-server" msgstr "gana-servidor" -#: ../../configuration/service/router-advert.rst:21 +#: ../../configuration/service/router-advert.rst:22 msgid "wireguard" msgstr "Guardia de alambre" -#: ../../configuration/service/router-advert.rst:22 +#: ../../configuration/service/router-advert.rst:23 msgid "wireless" msgstr "inalámbrico" @@ -20024,15 +22011,15 @@ msgstr "inalámbrico" msgid "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." msgstr "con :cfgcmd:`establecer la aceleración del sistema qat` en ambos sistemas aumenta el ancho de banda." -#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:384 msgid "wpad-url" msgstr "wpad-url" -#: ../../configuration/service/dhcp-server.rst:330 +#: ../../configuration/service/dhcp-server.rst:386 msgid "wpad-url, wpad-url code 252 = text" msgstr "wpad-url, wpad-url código 252 = texto" -#: ../../configuration/service/router-advert.rst:23 +#: ../../configuration/service/router-advert.rst:24 msgid "wwan" msgstr "WWAN" diff --git a/docs/_locale/es/contributing.pot b/docs/_locale/es/contributing.pot index 07b516ff..606d81e2 100644 --- a/docs/_locale/es/contributing.pot +++ b/docs/_locale/es/contributing.pot @@ -72,6 +72,18 @@ msgstr "Un buen método para escribir mensajes de confirmación es echar un vist msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "Se pueden configurar varios indicadores para cambiar el comportamiento de VyOS en tiempo de ejecución. Estas banderas se pueden alternar usando variables de entorno o creando archivos." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "Un resumen único y breve de la confirmación (se recomiendan 50 caracteres o menos, sin exceder los 80 caracteres) que contenga un prefijo del componente cambiado y la referencia de Phabricator_ correspondiente, por ejemplo, ``snmp: T1111:`` o ``ethernet: T2222:` ` - se pueden concatenar múltiples componentes como en ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Los acrónimos también **deben** escribirse en mayúscula para distingu msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Agregue un archivo al índice de Git usando ``git add myfile``, o para un directorio completo: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Agregar una o más direcciones IP" @@ -155,6 +167,14 @@ msgstr "Cualquier paquete "modificado" puede hacer referencia a una ve msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Cualquier paquete en el directorio de paquetes se agregará a la iso durante la compilación, reemplazando a los anteriores. Asegúrese de eliminarlos (tanto los directorios de origen como los paquetes deb creados) si desea crear una iso a partir de paquetes puramente ascendentes." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "Como Smoketests alterará la configuración del sistema y usted está conectado de forma remota, puede perder su conexión con el sistema." @@ -207,6 +227,10 @@ msgstr "Malo: radio (a menos que se trate de la distancia entre el centro de un msgid "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." msgstr "Ser valiente y ejecutar los últimos lanzamientos continuos a veces desencadenará errores debido a los casos de esquina que pasamos por alto en nuestro diseño. Esos errores deben archivarse a través de Phabricator_ pero puede ayudarnos a reducir el problema. Inicie sesión en su sistema VyOS y cambie al modo de configuración escribiendo ``configure``. Ahora vuelva a cargar su configuración de arranque simplemente escribiendo ``cargar`` seguido de retorno." +#: ../../contributing/debugging.rst:160 +msgid "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +msgstr "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." + #: ../../contributing/debugging.rst:170 msgid "Boot Timing" msgstr "Temporización de arranque" @@ -215,6 +239,10 @@ msgstr "Temporización de arranque" msgid "Bug Report/Issue" msgstr "Informe de error/problema" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Construir" @@ -299,7 +327,7 @@ msgstr "Las definiciones de comandos son puramente declarativas y no pueden cont msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Confirma los cambios llamando a ``git commit``. Utilice un título de compromiso significativo (lea arriba) y no olvide hacer referencia al ID de Phabricator_." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Pruebas de carga de configuración" @@ -327,7 +355,7 @@ msgstr "Integración continua" msgid "Customize" msgstr "personalizar" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "Cliente DHCP y delegación de prefijos DHCPv6" @@ -436,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "¡Cada conjunto de cambios debe ser consistente (autocontenido)! No corrija varios errores en una sola confirmación. Si ya trabajó en varias correcciones en el mismo archivo, use `git add --patch` para agregar solo las partes relacionadas con el problema en su próxima confirmación." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "Ejemplo:" @@ -469,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Solicitud de función" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "firmware" @@ -574,11 +610,15 @@ msgstr "Horrible: "Tiempo de espera de conexión TCP"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Horrible: "algoritmo de frobnicación"." -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "¿Cómo podemos reproducir este Bug?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "Opciones de IP e IPv6" @@ -602,14 +642,30 @@ msgstr "Si un verbo es esencial, mantenlo. Por ejemplo, en el texto de ayuda de msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "Si corresponde, se debe hacer una referencia a una confirmación anterior que vincule bien esas confirmaciones al navegar por el historial: ``Después de confirmar abcd12ef ("snmp: este es un titular"), falta una declaración de importación de Python, arrojando la siguiente excepción: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "Si no hay una referencia de Phabricator_ en las confirmaciones de su solicitud de extracción, debemos pedirle que modifique el mensaje de confirmación. De lo contrario tendremos que rechazarlo." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "Si es lo suficientemente valiente como para crear una imagen ISO que contenga cualquier paquete modificado de nuestra organización GitHub, este es el lugar para estar." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "Si actualiza su kernel o incluye nuevos controladores, es posible que necesite un nuevo firmware. Cree un nuevo paquete ``vyos-linux-firmware`` con los scripts auxiliares incluidos." @@ -622,7 +678,7 @@ msgstr "En un gran sistema, como VyOS, que se compone de múltiples componentes, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "Además, esto también ayuda al navegar por el código base de GitHub en un dispositivo móvil si eres un científico loco." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "Para abrir un informe de error/solicitud de funciones, debe crear una cuenta en VyOS Phabricator_. En el lado izquierdo del proyecto específico (VyOS 1.2 o VyOS 1.3) encontrará enlaces rápidos para abrir un informe de error/solicitud de funciones." @@ -686,10 +742,14 @@ msgstr "QAT de Intel" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Pruebas basadas en interfaz" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Problemas/solicitudes de funciones" @@ -702,6 +762,10 @@ msgstr "Se encuentran problemas o errores en cualquier proyecto de software. VyO msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "Es un programa Ada y requiere GNAT y gprbuild para compilar, las dependencias se especifican correctamente, así que solo siga las sugerencias de debuild." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "También es posible configurar la depuración utilizando variables de entorno. En ese caso, el nombre será (en mayúsculas) VYOS_FEATURE_DEBUG." @@ -758,7 +822,7 @@ msgstr "Núcleo de Linux" msgid "Live System" msgstr "Sistema en vivo" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "Tamaño de la PERSONA" @@ -766,11 +830,11 @@ msgstr "Tamaño de la PERSONA" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Realice sus cambios y guárdelos. Haga lo siguiente para todos los archivos de cambios para registrarlos en su confirmación de Git creada:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Ejecución manual de prueba de humo" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Prueba de carga de configuración manual" @@ -847,7 +911,7 @@ msgstr "Ahora está preparado con dos nuevos alias ``vybld`` y ``vybld_crux`` pa msgid "Old concept/syntax" msgstr "Viejo concepto/sintaxis" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "Por otro lado, como cada prueba está contenida en su propio archivo, siempre se puede ejecutar una sola prueba de humo a mano simplemente ejecutando los scripts de prueba de Python." @@ -859,7 +923,7 @@ msgstr "Una vez que haya instalado las dependencias requeridas, puede continuar msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Una vez que ejecutes ``show xyz`` y tu condición se active, deberías ingresar al depurador de python:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "Uno no está obligado a cargar todas las configuraciones una tras otra, sino que también puede cargar configuraciones de prueba individuales por su cuenta." @@ -884,6 +948,10 @@ msgid "Our StrongSWAN build differs from the upstream:" msgstr "Nuestra construcción StrongSWAN difiere de la anterior:" #: ../../contributing/testing.rst:20 +msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." +msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." + +#: ../../contributing/testing.rst:20 msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." msgstr "Nuestro sistema `VyOS CI`_ se basa en Jenkins y crea todos nuestros paquetes necesarios para VyOS 1.2 a 1.4. Además de la compilación del paquete, existe el trabajo vyos-build que compila y prueba la imagen ISO de VyOS que se publica después de una prueba de manejo exitosa." @@ -895,7 +963,7 @@ msgstr "Nuestro código se divide en varios módulos. VyOS se compone de varios msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Nuestros scripts de modo operativo utilizan el módulo python-vici, que no está incluido en la compilación de Debian y no es muy fácil de integrar en esa compilación. Por esta razón, debianizamos ese módulo a mano ahora, usando este procedimiento:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Nuestras pruebas de humo no solo prueban demonios y servicios, sino que también verifican si lo que configuramos para una interfaz funciona. Por lo tanto, existe una base común clasificada denominada: ``base_interfaces_test.py`` que contiene todo el código común que admite una interfaz y se prueba." @@ -924,11 +992,15 @@ msgstr "Envíe sus parches utilizando la conocida solicitud de extracción de Gi msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." msgstr "Utilice la siguiente plantilla como un buen punto de partida cuando desarrolle nuevos módulos o incluso reescriba un montón de código en el nuevo estilo de interfaz XML/Pyhon." -#: ../../contributing/testing.rst:104 +#: ../../contributing/development.rst:254 +msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." +msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." + +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "Descripción del puerto" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Deshabilitar puerto" @@ -952,7 +1024,11 @@ msgstr "requisitos previos" msgid "Priorities" msgstr "Prioridades" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Proporcione tanta información como pueda" @@ -984,7 +1060,7 @@ msgstr "Justificación: este parece ser el estándar no escrito en las CLI de di msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Las versiones recientes usan el framework ``vyos.frr``. La clase Python se encuentra dentro de nuestro ``vyos-1x:python/vyos/frr.py``. Viene con un depurador integrado de depuración/(estilo de impresión) como lo hace vyos.ifconfig." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Reportar un error" @@ -1017,6 +1093,10 @@ msgstr "Smoketests ejecuta comandos predefinidos de la CLI de VyOS y verifica si msgid "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." msgstr "Entonces, si planea crear su propia imagen ISO personalizada y no quiere utilizar nuestras pruebas de humo, asegúrese de tener instalado el paquete `vyos-1x-smoketest`." +#: ../../contributing/testing.rst:45 +msgid "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +msgstr "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." + #: ../../contributing/build-vyos.rst:202 msgid "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." msgstr "Algunos paquetes de VyOS (a saber, vyos-1x) vienen con pruebas de tiempo de compilación que verifican que algunas de las llamadas de la biblioteca interna funcionan como se esperaba. Estas pruebas se realizan a través del módulo Unittest de Python. Si desea compilar el paquete ``vyos-1x`` (que es nuestro paquete de desarrollo principal), debe iniciar su contenedor Docker con el siguiente argumento: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0 ``, de lo contrario esas pruebas fallarán." @@ -1025,7 +1105,7 @@ msgstr "Algunos paquetes de VyOS (a saber, vyos-1x) vienen con pruebas de tiempo msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Algunas abreviaturas se escriben tradicionalmente en mayúsculas y minúsculas. Generalmente, si contiene palabras "over" o "version", la letra **debe** estar en minúscula. Si hay una ortografía aceptada (especialmente si está definida por un RFC u otro estándar), **debe** seguirse." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Algunas de las configuraciones tienen condiciones previas que deben cumplirse. Lo más probable es que incluyan la generación de claves criptográficas antes de que se pueda aplicar la configuración; de lo contrario, obtendrá un error de confirmación. Si está interesado en cómo se cumplen esas condiciones previas, consulte el repositorio vyos-build_ y el archivo ``scripts/check-qemu-install``." @@ -1061,6 +1141,14 @@ msgstr "Suponga que desea realizar un cambio en la secuencia de comandos webprox msgid "System Startup" msgstr "Puesta en marcha del sistema" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "El procesador de plantillas **debe** usarse para generar archivos de configuración. El formato de cadena incorporado **puede** usarse para formatos simples orientados a líneas donde cada línea es independiente, como las reglas de iptables. El procesador de plantillas **debe** usarse para formatos estructurados de varias líneas, como los que usa ISC DHCPd." @@ -1121,11 +1209,15 @@ msgstr "La función ``verify()`` toma su representación interna de la configura msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "La finalización de bash (o mejor vbash) en VyOS se define en *templates*. Las plantillas son archivos de texto (llamados ``node.def``) almacenados en un árbol de directorios. Los nombres de los directorios definen los nombres de los comandos y los archivos de plantilla definen el comportamiento de los comandos. Antes de VyOS 1.2 (crux), estos archivos se creaban a mano. Después de un complejo proceso de rediseño, la nueva plantilla de estilo se genera automáticamente a partir de un archivo de entrada XML." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "El proceso de compilación debe crearse en un sistema de archivos local; la compilación en recursos compartidos SMB o NFS hará que el contenedor no se compile correctamente. VirtualBox Drive Share tampoco es una opción, ya que las operaciones de dispositivos de bloque no están implementadas y la unidad siempre se monta como "nodev"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "Todas las configuraciones se derivan de los sistemas de producción y no solo pueden actuar como un caso de prueba, sino también como referencia si se desea habilitar una característica determinada. Las configuraciones se pueden encontrar aquí: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1145,7 +1237,7 @@ msgstr "El procesador de plantillas predeterminado para el código VyOS es Jinja msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "La forma más fácil de compilar su paquete es con el contenedor :ref:`build_docker` mencionado anteriormente, que incluye todas las dependencias requeridas para todos los paquetes relacionados con VyOS." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "Toda la prueba está controlada por la secuencia de comandos contenedora principal ``/usr/bin/vyos-configtest`` que se comporta de la misma manera que la secuencia de comandos principal de smoketest. Escanea la carpeta en busca de posibles archivos de configuración y emite un comando de ``cargar`` uno tras otro." @@ -1185,7 +1277,7 @@ msgstr "Las razones más obvias podrían ser:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "El repositorio original está en https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "La otra parte de nuestras pruebas se llama "pruebas de carga de configuración". Las pruebas de carga de configuración cargarán, uno tras otro, archivos de configuración arbitrarios para probar si los scripts de migración de configuración funcionan según lo diseñado y si un conjunto determinado de funcionalidad aún se puede cargar con una nueva imagen ISO de VyOS." @@ -1198,6 +1290,10 @@ msgid "The package ends up in deb_dist dir." msgstr "El paquete termina en el directorio deb_dist." #: ../../contributing/debugging.rst:148 +msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" +msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" + +#: ../../contributing/debugging.rst:148 msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" msgstr "La razón es que el backend de migración de configuración se reescribe y usa una nueva forma de "cadena mágica" que se aplica a pedido cuando se ejecuta la migración de configuración real en el arranque. Cuando no ejecuta migradores individuales para realizar pruebas, debe convertir la "cadena mágica" por su cuenta:" @@ -1245,6 +1341,10 @@ msgstr "Hay extensiones para, por ejemplo, VIM (xmllint) que le ayudarán a obte msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "Hay dos banderas disponibles para ayudar en la depuración de scripts de configuración. Dado que los problemas de carga de la configuración se manifestarán durante el arranque, los indicadores se pasan como parámetros de arranque del kernel." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "Esta ISO se puede personalizar con la siguiente lista de opciones de configuración. La lista completa y actual se puede generar con ``./build-vyos-image --help``:" @@ -1261,6 +1361,10 @@ msgstr "Este capítulo enumera esas excepciones y le brinda una breve descripci msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "Esto se hace utilizando el paquete ``systemd-bootchart`` que ahora está instalado de forma predeterminada en la rama VyOS 1.3 (equuleus). La configuración también está versionada, por lo que obtenemos resultados comparables. ``systemd-bootchart`` se configura usando este archivo: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "Esto significa que el archivo en cuestión (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) se encuentra en el paquete ``vyatta-webproxy`` que se puede encontrar aquí: https://github. com/vyos/vyatta-webproxy" @@ -1285,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "Esto lo guiará a través del proceso de creación de una imagen ISO de VyOS con Docker_. Este proceso ha sido probado en instalaciones limpias de Debian Jessie, Stretch y Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "Esto limitará la prueba de interfaz `bond` para usar solo `eth1` y `eth2` como puertos miembro." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Esas pruebas comunes consisten en:" @@ -1314,10 +1418,18 @@ msgid "To debug issues in priorities or to see what's going on in the background msgstr "Para depurar problemas en las prioridades o para ver lo que sucede en segundo plano, puede usar el script ``/opt/vyatta/sbin/priority.pl`` que enumera el orden de ejecución de los scripts." #: ../../contributing/build-vyos.rst:373 +msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" +msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" + +#: ../../contributing/build-vyos.rst:373 msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" msgstr "Para depurar el proceso de compilación y obtener información adicional sobre cuál podría ser la causa principal, debe usar `chroot` para cambiar al directorio de compilación. Esto se explica en el siguiente procedimiento paso a paso:" #: ../../contributing/debugging.rst:182 +msgid "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" +msgstr "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" + +#: ../../contributing/debugging.rst:182 msgid "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" msgstr "Para habilitar la representación gráfica del tiempo de arranque, cambie la línea de comandos del Kernel y agregue la siguiente cadena: ``init=/usr/lib/systemd/systemd-bootchart``" @@ -1325,6 +1437,10 @@ msgstr "Para habilitar la representación gráfica del tiempo de arranque, cambi msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "Para habilitar la depuración simplemente ejecute: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "Para garantizar una apariencia uniforme y mejorar la legibilidad, debemos seguir un conjunto de pautas de manera constante." @@ -1385,7 +1501,7 @@ msgstr "Los comandos útiles son:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLAN (QinQ y 802.1q regular)" @@ -1409,6 +1525,10 @@ msgstr "Plataformas de virtualización" msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." msgstr "VyOS CLI tiene que ver con las prioridades. Cada nodo CLI tiene un archivo ``node.def`` correspondiente y posiblemente un script adjunto que se ejecuta cuando el nodo está presente. Los nodos pueden tener una prioridad, y en el arranque del sistema, o cualquier otro "commit" a la configuración, todos los scripts se ejecutan de menor a mayor prioridad. Esto es bueno ya que da un comportamiento determinista." +#: ../../contributing/debugging.rst:190 +msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." +msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." + #: ../../contributing/build-vyos.rst:168 msgid "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." msgstr "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." @@ -1425,6 +1545,10 @@ msgstr "VyOS utiliza Jenkins_ como nuestro servicio de integración continua (CI msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "Nuevamente hacemos uso de un script de ayuda y algunos parches para que la compilación funcione. Simplemente ejecute el siguiente comando:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "Nos diferenciamos en dos pruebas independientes, ambas ejecutadas en paralelo por dos instancias QEmu separadas que se inician a través de ``make test`` y ``make testc`` desde el repositorio vyos-build_." @@ -1441,6 +1565,10 @@ msgstr "Ahora necesitamos montar algunos sistemas de archivos volátiles requeri msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "Solo aceptamos correcciones de errores en paquetes que no sean https://github.com/vyos/vyos-1x, ya que ninguna funcionalidad nueva debe usar las plantillas de estilo antiguo (``node.def`` y el código Perl/BASH. Use el nuevo estilo XML /Python en su lugar." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "Qué/por qué/cómo se ha cambiado algo hace que la vida de todos sea más fácil cuando se trabaja con `git bisect`" @@ -1485,6 +1613,10 @@ msgstr "Cuando pueda verificar que en realidad se trata de un error, dedique alg msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "Cuando está trabajando en la configuración de la interfaz y tampoco quiere probar si las pruebas de humo pasan, normalmente perdería la conexión SSH remota a su :abbr:`DUT (Dispositivo bajo prueba)`. Para manejar este problema, algunas de las pruebas basadas en interfaz se pueden llamar con una variable de entorno de antemano para limitar la cantidad de interfaces utilizadas en la prueba. De forma predeterminada, se utilizan todas las interfaces, por ejemplo, todas las interfaces Ethernet." +#: ../../contributing/testing.rst:112 +msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." + #: ../../contributing/issues-features.rst:21 msgid "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." msgstr "Cuando crea que ha encontrado un error, siempre es una buena idea verificar el problema antes de abrir una solicitud de error." @@ -1493,7 +1625,7 @@ msgstr "Cuando crea que ha encontrado un error, siempre es una buena idea verifi msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "Cuando desea que un desarrollador corrija un error que encontró, ayudarlos a reproducir el problema es beneficioso para todos. Asegúrese de incluir información sobre el hardware que está utilizando, los comandos que estaba ejecutando y cualquier otra actividad que haya estado realizando en ese momento. Esta información adicional puede ser muy útil." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "¿Qué versión de VyOS estás usando? ``ejecutar versión show``" @@ -1538,6 +1670,10 @@ msgstr "Puede escribir ``ayuda`` para obtener una descripción general de los co msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "¿Tiene una idea de cómo mejorar VyOS o necesita una función específica de la que se beneficiarían todos los usuarios de VyOS? Para enviar una solicitud de función, busque Phabricator_ si ya hay una solicitud pendiente. Puede mejorarlo o, si no encuentra uno, crear uno nuevo usando el enlace rápido en el lado izquierdo debajo del proyecto específico." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1546,10 +1682,27 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "Tiene sus propios paquetes `*.deb` de kernel personalizados en la carpeta `packages` pero olvidó crear todos los módulos fuera del árbol necesarios como Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "Ahora debería ver un seguimiento de Python que nos ayudará a manejar el problema, adjúntelo a la tarea Phabricator_." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + +#: ../../contributing/debugging.rst:166 +msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." + #: ../../contributing/development.rst:146 msgid "You then can proceed with cloning your fork or add a new remote to your local repository:" msgstr "Luego puede continuar con la clonación de su bifurcación o agregar un nuevo control remoto a su repositorio local:" @@ -1558,7 +1711,7 @@ msgstr "Luego puede continuar con la clonación de su bifurcación o agregar un msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Su secuencia de comandos de configuración o secuencia de comandos de modo de operación, que también está escrita en Python3, debe tener un salto de línea de 80 caracteres. Esto parece un poco extraño hoy en día, pero como algunas personas también trabajan de forma remota o programan usando vi(m), este es un buen estándar en el que espero podamos confiar." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." @@ -1666,6 +1819,10 @@ msgstr "cometer:expresión:" msgid "contine execution using ``cont``" msgstr "contiene ejecución usando ``cont''" +#: ../../contributing/debugging.rst:128 +msgid "continue execution using ``cont``" +msgstr "continue execution using ``cont``" + #: ../../contributing/development.rst:675 msgid "default:" msgstr "por defecto:" diff --git a/docs/_locale/es/copyright.pot b/docs/_locale/es/copyright.pot index c7befa5e..59ccc312 100644 --- a/docs/_locale/es/copyright.pot +++ b/docs/_locale/es/copyright.pot @@ -13,8 +13,12 @@ msgid "Copyright Notice" msgstr "Aviso de copyright" #: ../../copyright.md:3 +msgid "Copyright (C) 2018-2023 VyOS maintainers and contributors" +msgstr "Copyright (C) 2018-2023 Mantenedores y colaboradores de VyOS" + +#: ../../copyright.md:3 msgid "Copyright (C) 2018-2024 VyOS maintainers and contributors" -msgstr "Copyright (C) 2018-2024 Mantenedores y colaboradores de VyOS" +msgstr "Copyright (C) 2018-2024 VyOS maintainers and contributors" #: ../../copyright.md:9 msgid "Permission is granted to copy and distribute modified versions of this manual under the conditions for verbatim copying, provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one." diff --git a/docs/_locale/es/documentation.pot b/docs/_locale/es/documentation.pot index 57889977..e4c20974 100644 --- a/docs/_locale/es/documentation.pot +++ b/docs/_locale/es/documentation.pot @@ -8,27 +8,47 @@ msgstr "" "Language: es\n" "Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" -#: ../../documentation.rst:239 +#: ../../documentation.rst:216 msgid "16bit ASN: ``64496 - 64511``" msgstr "ASN de 16 bits: ``64496 - 64511``" -#: ../../documentation.rst:240 +#: ../../documentation.rst:84 +msgid "1. Theoretical information" +msgstr "1. Theoretical information" + +#: ../../documentation.rst:92 +msgid "2. Configuration description" +msgstr "2. Configuration description" + +#: ../../documentation.rst:217 msgid "32bit ASN: ``65536 - 65551``" msgstr "ASN de 32 bits: ``65536 - 65551``" -#: ../../documentation.rst:182 +#: ../../documentation.rst:99 +msgid "3. Configuration examples" +msgstr "3. Configuration examples" + +#: ../../documentation.rst:105 +msgid "4. Known issues" +msgstr "4. Known issues" + +#: ../../documentation.rst:113 +msgid "5. Debugging" +msgstr "5. Debugging" + +#: ../../documentation.rst:159 msgid "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." msgstr "Se utilizará un complemento para generar una etiqueta de referencia para cada titular. Para hacer referencia a una página o una sección en la documentación, use el comando ``:ref:``." -#: ../../documentation.rst:103 +#: ../../documentation.rst:408 msgid "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." msgstr "Agregue archivos modificados al índice de Git ``$ git add path/to/filename`` o agregue todos los archivos no preparados ``$ git add .``. Todos los archivos agregados al índice de Git serán parte de usted después de la confirmación de Git." -#: ../../documentation.rst:229 +#: ../../documentation.rst:206 msgid "Address space" msgstr "Espacio de dirección" -#: ../../documentation.rst:390 +#: ../../documentation.rst:58 msgid "All RST files must follow the same TOC Level syntax and have to start with" msgstr "Todos los archivos RST deben seguir la misma sintaxis de nivel de TOC y deben comenzar con" @@ -36,7 +56,7 @@ msgstr "Todos los archivos RST deben seguir la misma sintaxis de nivel de TOC y msgid "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." msgstr "Sigue una sección opcional. Algunos comandos tienen requisitos como hardware compatible (por ejemplo, Wifi) o algunos comandos que debe configurar antes. Por ejemplo, se recomienda establecer un mapa de ruta antes de configurar BGP." -#: ../../documentation.rst:53 +#: ../../documentation.rst:51 msgid "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." msgstr "Y por último, recuerda que los archivos reStructuredText no son exclusivamente para generar HTML y PDF. Deben ser legibles por humanos y fáciles de leer desde una consola." @@ -48,23 +68,23 @@ msgstr "Algo más" msgid "Anything else that is not a configuration or an operation command has no predefined structure." msgstr "Cualquier otra cosa que no sea una configuración o un comando de operación no tiene una estructura predefinida." -#: ../../documentation.rst:257 +#: ../../documentation.rst:234 msgid "Autolinter" msgstr "Filtro automático" -#: ../../documentation.rst:94 +#: ../../documentation.rst:399 msgid "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." msgstr "Verifique sus cambios creando localmente la documentación ``$ make livehtml``. Sphinx construirá los archivos html en la carpeta ``docs/_build``. Le proporcionamos un contenedor Docker para una experiencia de usuario fácil de usar. Consulta el archivo README.md_ de este repositorio." -#: ../../documentation.rst:123 +#: ../../documentation.rst:428 msgid "Check your configured remote repositories:" msgstr "Verifique sus repositorios remotos configurados:" -#: ../../documentation.rst:78 +#: ../../documentation.rst:383 msgid "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" msgstr "Clone fork a la máquina local, luego cambie a ese directorio ``$ cd vyos-documentation``" -#: ../../documentation.rst:107 +#: ../../documentation.rst:412 msgid "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." msgstr "Confirma tus cambios con el mensaje ``$ git commit -m "<commit message> "`` o use ``$ git commit -v`` para iniciar su editor configurado. Puede escribir un mensaje de confirmación. Nuevamente, siéntase cómodo sin reglas (:ref:`prepare_commit`)." @@ -72,55 +92,67 @@ msgstr "Confirma tus cambios con el mensaje ``$ git commit -m "<commit mess msgid "Configuration mode pages" msgstr "Páginas del modo de configuración" -#: ../../documentation.rst:84 +#: ../../documentation.rst:389 msgid "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" msgstr "Crea una nueva rama para tu trabajo, usa un nombre descriptivo de tu trabajo: ``$ git checkout -b<branch-name> ``" -#: ../../documentation.rst:180 +#: ../../documentation.rst:157 msgid "Cross-References" msgstr "Referencias cruzadas" -#: ../../documentation.rst:268 +#: ../../documentation.rst:245 msgid "Custom Sphinx-doc Markup" msgstr "Marcado personalizado de Sphinx-doc" -#: ../../documentation.rst:270 +#: ../../documentation.rst:247 msgid "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." msgstr "Se han desarrollado comandos personalizados para escribir la documentación. Siéntase cómodo con esos comandos, ya que esto facilita la forma en que representamos la documentación." -#: ../../documentation.rst:45 +#: ../../documentation.rst:94 +msgid "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." +msgstr "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." + +#: ../../documentation.rst:115 +msgid "Described procedures for debugging a service:" +msgstr "Described procedures for debugging a service:" + +#: ../../documentation.rst:43 msgid "Don't forget to update ``index.rst`` when adding a new node." msgstr "No olvide actualizar ``index.rst`` al agregar un nuevo nodo." -#: ../../documentation.rst:259 +#: ../../documentation.rst:236 msgid "Each GitHub pull request is automatically linted to check the address space and line length." msgstr "Cada solicitud de extracción de GitHub se filtra automáticamente para verificar el espacio de direcciones y la longitud de la línea." -#: ../../documentation.rst:252 +#: ../../documentation.rst:81 +msgid "Each page must contain the following parts:" +msgstr "Each page must contain the following parts:" + +#: ../../documentation.rst:229 msgid "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." msgstr "Excepto en ``.. code-block::`` porque usa la etiqueta html ``<pre> `` y presenta el mismo formato de línea del primer archivo de origen." -#: ../../documentation.rst:292 +#: ../../documentation.rst:269 msgid "For an inline configuration level command, use ``:cfgcmd:``" msgstr "Para un comando de nivel de configuración en línea, use ``:cfgcmd:``" -#: ../../documentation.rst:328 +#: ../../documentation.rst:305 msgid "For an inline operational level command, use ``:opcmd:``" msgstr "Para un comando de nivel operativo en línea, use ``:opcmd:``" -#: ../../documentation.rst:186 +#: ../../documentation.rst:163 msgid "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." msgstr "Por ejemplo, desea hacer referencia al título **VLAN** en la página **ethernet.rst**. El complemento genera la etiqueta en función del título y la ruta del archivo." -#: ../../documentation.rst:405 +#: ../../documentation.rst:70 msgid "For example:" msgstr "Por ejemplo:" -#: ../../documentation.rst:76 +#: ../../documentation.rst:381 msgid "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" msgstr "Fork este proyecto en GitHub https://github.com/vyos/vyos-documentation/fork" -#: ../../documentation.rst:58 +#: ../../documentation.rst:363 msgid "Forking Workflow" msgstr "Flujo de trabajo de bifurcación" @@ -128,6 +160,10 @@ msgstr "Flujo de trabajo de bifurcación" msgid "Formating and Sphinxmarkup" msgstr "Formateo y Sphinxmarkup" +#: ../../documentation.rst:127 +msgid "Formatting and Sphinxmarkup" +msgstr "Formatting and Sphinxmarkup" + #: ../../documentation.rst:432 msgid "General concepts for troubleshooting and detailed process descriptions belong here." msgstr "Los conceptos generales para la solución de problemas y las descripciones detalladas del proceso pertenecen aquí." @@ -140,7 +176,11 @@ msgstr "Pautas" msgid "If there some troubleshooting guides related to the commands. Explain it in the next optional part." msgstr "Si hay algunas guías de solución de problemas relacionadas con los comandos. Explícalo en la siguiente parte opcional." -#: ../../documentation.rst:143 +#: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "Si también desea actualizar su bifurcación en GitHub, use lo siguiente: ``$ git push origin master``" @@ -152,43 +192,43 @@ msgstr "Si está dispuesto a contribuir con nuestra documentación, esta es la g msgid "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." msgstr "A diferencia de enviar parches de código, no es necesario que abra una tarea Phabricator_ antes de enviar una solicitud de extracción a la documentación." -#: ../../documentation.rst:417 +#: ../../documentation.rst:75 msgid "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." msgstr "En la parte de configuración de la página, se deben documentar todas las opciones de configuración posibles. Utilice ``.. cfgcmd::`` descrito anteriormente." -#: ../../documentation.rst:50 +#: ../../documentation.rst:48 msgid "Indent with two spaces." msgstr "Sangría con dos espacios." -#: ../../documentation.rst:81 +#: ../../documentation.rst:386 msgid "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" msgstr "Instale los requisitos ``$ pip install -r requirements.txt`` (o algo similar)" -#: ../../documentation.rst:49 +#: ../../documentation.rst:47 msgid "Leave a newline before and after a header." msgstr "Deje una nueva línea antes y después de un encabezado." -#: ../../documentation.rst:250 +#: ../../documentation.rst:227 msgid "Limit all lines to a maximum of 80 characters." msgstr "Limite todas las líneas a un máximo de 80 caracteres." -#: ../../documentation.rst:248 +#: ../../documentation.rst:225 msgid "Line length" msgstr "Longitud de la línea" -#: ../../documentation.rst:87 +#: ../../documentation.rst:392 msgid "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." msgstr "Realice todos sus cambios; tenga en cuenta nuestras reglas de confirmación (:ref:`prepare_commit`). Esto se aplica principalmente a los mensajes de confirmación adecuados que describen su cambio (cómo y por qué). Consulte la documentación de Sphinx-doc_ o reStructuredText_ si no está familiarizado con él. Esto se utiliza para escribir nuestros documentos. Se pueden obtener directivas adicionales sobre cómo escribir en RST en reStructuredTextDirectives_." -#: ../../documentation.rst:242 +#: ../../documentation.rst:219 msgid "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" msgstr "Direcciones MAC de multidifusión: ``90-10-00`` a ``90-10-FF``" -#: ../../documentation.rst:231 +#: ../../documentation.rst:208 msgid "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" msgstr "Tenga en cuenta los siguientes RFC (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` y :rfc:`7042`), que describen las direcciones IP públicas reservadas y los números de sistema autónomo para la documentación:" -#: ../../documentation.rst:118 +#: ../../documentation.rst:423 msgid "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" msgstr "Una vez que se hayan aprobado las solicitudes de extracción, es posible que también desee actualizar localmente su repositorio bifurcado. Primero tendrás que agregar un segundo control remoto llamado `upstream` que apunta a nuestro repositorio principal. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" @@ -200,39 +240,43 @@ msgstr "Los comandos del modo de operación que no encajan en un comando del mod msgid "Operation mode pages" msgstr "Páginas del modo de funcionamiento" -#: ../../documentation.rst:385 +#: ../../documentation.rst:56 msgid "Page content" msgstr "Contenido de página" -#: ../../documentation.rst:244 +#: ../../documentation.rst:221 msgid "Please do not use other public address space." msgstr "Por favor, no utilice otro espacio de megafonía pública." -#: ../../documentation.rst:47 +#: ../../documentation.rst:101 +msgid "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." +msgstr "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." + +#: ../../documentation.rst:45 msgid "Properly quote commands, filenames and brief code snippets with double backticks." msgstr "Cita correctamente comandos, nombres de archivos y breves fragmentos de código con doble tilde." -#: ../../documentation.rst:112 +#: ../../documentation.rst:417 msgid "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" msgstr "Envía confirmaciones a tu proyecto de GitHub: ``$ git push -u origin<branch-name> ``" -#: ../../documentation.rst:420 +#: ../../documentation.rst:78 msgid "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." msgstr "El comando de operación relacionado debe documentarse en la siguiente parte del artículo. Utilice ``::opcmd..`` para estos comandos." -#: ../../documentation.rst:262 +#: ../../documentation.rst:239 msgid "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." msgstr "A veces es necesario proporcionar direcciones IP reales como en los :ref:`ejemplos`. Para esto, utilice la sintaxis de comentarios de sphinx ``.. stop_vyoslinter`` para detener el linter y ``.. start_vyoslinter`` para comenzar." -#: ../../documentation.rst:147 +#: ../../documentation.rst:124 msgid "Style Guide" msgstr "Guía de estilo" -#: ../../documentation.rst:114 +#: ../../documentation.rst:419 msgid "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." msgstr "Enviar solicitud de extracción. En GitHub, visite el repositorio principal y debería ver un banner que sugiere realizar una solicitud de extracción. Rellena el formulario y describe lo que haces." -#: ../../documentation.rst:153 +#: ../../documentation.rst:130 msgid "TOC Level" msgstr "Nivel de COT" @@ -240,7 +284,7 @@ msgstr "Nivel de COT" msgid "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." msgstr "Eche un vistazo a la página :doc:`/documentation` para obtener una explicación compleja del proceso de documentación." -#: ../../documentation.rst:60 +#: ../../documentation.rst:365 msgid "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." msgstr "El flujo de trabajo de bifurcación es fundamentalmente diferente de otros flujos de trabajo populares de Git. En lugar de usar un único repositorio del lado del servidor para que actúe como base de código "central", le da a cada desarrollador su propio repositorio del lado del servidor. Esto significa que cada colaborador no tiene uno, sino dos repositorios Git: uno local privado y uno público del lado del servidor." @@ -248,7 +292,7 @@ msgstr "El flujo de trabajo de bifurcación es fundamentalmente diferente de otr msgid "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." msgstr "El artículo comienza con una breve introducción sobre el comando o la tecnología. Incluya algunos enlaces útiles o información básica." -#: ../../documentation.rst:401 +#: ../../documentation.rst:66 msgid "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." msgstr "La carpeta del modo de configuración y los artículos cubren el nivel específico de los comandos. El nivel exacto depende del comando. Esto debería proporcionar estabilidad a las URL utilizadas en el foro o publicación de blog." @@ -260,51 +304,59 @@ msgstr "La documentación tiene 3 tipos diferentes de páginas. El mismo tipo de msgid "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." msgstr "La fuente de documentación se mantiene en el repositorio de Git en https://github.com/vyos/vyos-documentation y puede seguir las instrucciones en README.md_ para compilar y probar sus cambios." -#: ../../documentation.rst:41 +#: ../../documentation.rst:39 msgid "The following is a quick summary of the rules:" msgstr "El siguiente es un breve resumen de las reglas:" -#: ../../documentation.rst:66 +#: ../../documentation.rst:371 msgid "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." msgstr "La principal ventaja del flujo de trabajo de bifurcación es que las contribuciones se pueden integrar sin la necesidad de que todos presionen a un solo repositorio central. Los desarrolladores ingresan a sus propios repositorios del lado del servidor, y solo el mantenedor del proyecto puede ingresar al repositorio oficial. Esto permite que el mantenedor acepte compromisos de cualquier desarrollador sin darles acceso de escritura a la base de código oficial." -#: ../../documentation.rst:199 +#: ../../documentation.rst:176 msgid "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." msgstr "El complemento advertirá en la compilación si un título tiene un nombre duplicado en el mismo documento. Para evitar esta advertencia, debe colocar un enlace personalizado en la parte superior del título." +#: ../../documentation.rst:86 +msgid "Theoretical information required for users to understand the next document sections:" +msgstr "Theoretical information required for users to understand the next document sections:" + #: ../../documentation.rst:35 msgid "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." msgstr "Hay algunas cosas a tener en cuenta al contribuir con la documentación, en aras de la coherencia y la legibilidad." -#: ../../documentation.rst:299 +#: ../../documentation.rst:107 +msgid "This section must contain a list of:" +msgstr "This section must contain a list of:" + +#: ../../documentation.rst:276 msgid "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." msgstr "Para extraer un valor predeterminado de las definiciones XML, agregue una directiva ``:defaultvalue:`` a ``.. cfgcmd::``. Para tener esta función localmente, el submódulo vyos-1x debe inicializarse antes. Tenga en cuenta que no debe actualizar el submódulo en su PR." -#: ../../documentation.rst:337 +#: ../../documentation.rst:314 msgid "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." msgstr "Para minimizar la redundancia, existe una directiva de inclusión especial. Incluye un archivo txt y reemplaza ``{{ var0 }}`` - ``{{ var9 }}`` con el valor correcto." -#: ../../documentation.rst:46 +#: ../../documentation.rst:44 msgid "Try not to exceed 80 characters per line, but don't break URLs over this." msgstr "Trate de no exceder los 80 caracteres por línea, pero no rompa las URL por esto." -#: ../../documentation.rst:241 +#: ../../documentation.rst:218 msgid "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" msgstr "Direcciones MAC de unidifusión: ``00-53-00`` a ``00-53-FF``" -#: ../../documentation.rst:73 +#: ../../documentation.rst:378 msgid "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." msgstr "Las actualizaciones de nuestra documentación deben enviarse mediante una solicitud de extracción de GitHub. Esto requiere que ya tengas una cuenta de GitHub." -#: ../../documentation.rst:43 +#: ../../documentation.rst:41 msgid "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." msgstr "Usa inglés americano en todo momento. Siempre es una buena idea pasar el texto por un corrector gramatical y ortográfico, como `Grammarly`_." -#: ../../documentation.rst:48 +#: ../../documentation.rst:46 msgid "Use literal blocks for longer snippets." msgstr "Use bloques literales para fragmentos más largos." -#: ../../documentation.rst:99 +#: ../../documentation.rst:404 msgid "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." msgstr "Vea los archivos modificados llamando a ``$ git status``. Obtendrá una descripción general de todos los archivos modificados por usted. Puede agregar archivos individuales al Índice de Git en el siguiente paso." @@ -312,35 +364,39 @@ msgstr "Vea los archivos modificados llamando a ``$ git status``. Obtendrá una msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." msgstr "La documentación de VyOS está escrita en reStructuredText y generada para leer las páginas de Docs con Sphinx, según la tradición de Python, así como archivos PDF para uso sin conexión a través de LaTeX. Damos la bienvenida a todo tipo de contribuciones a la documentación. No solo nuevas adiciones sino también correcciones a la documentación existente." +#: ../../documentation.rst:20 +msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." + #: ../../documentation.rst:9 msgid "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." msgstr "Alentamos a todos los usuarios de VyOS a que nos ayuden a mejorar nuestra documentación, ya que tenemos un déficit como la mayoría de los proyectos de software. Esto no solo te ayuda a ti cuando lees, sino también a todos los demás." -#: ../../documentation.rst:155 +#: ../../documentation.rst:132 msgid "We use the following syntax for Headlines." msgstr "Usamos la siguiente sintaxis para Titulares." -#: ../../documentation.rst:277 +#: ../../documentation.rst:254 msgid "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." msgstr "Al documentar los comandos CLI, use la directiva ``.. cfgcmd::`` para todos los comandos del modo de configuración. Se debe agregar una explicación del comando descrito debajo de esta declaración. Reemplace todos los contenidos variables con<value> o algo similar." -#: ../../documentation.rst:316 +#: ../../documentation.rst:293 msgid "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." msgstr "Al documentar los comandos de nivel operativo, utilice la directiva ``.. opcmd::``. Se debe agregar una explicación del comando descrito debajo de esta declaración." -#: ../../documentation.rst:51 +#: ../../documentation.rst:49 msgid "When in doubt, follow the style of existing documentation." msgstr "En caso de duda, siga el estilo de la documentación existente." -#: ../../documentation.rst:375 +#: ../../documentation.rst:352 msgid "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." msgstr "Cuando se hace referencia a las tareas de VyOS Phabricator, hay un comando de Sphinx Markup personalizado llamado ``vytask`` que se convierte automáticamente en una URL de Phabricator adecuada. Esto se usa mucho en la sección :ref:`release-notes`." -#: ../../documentation.rst:319 +#: ../../documentation.rst:296 msgid "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "Con esos comandos personalizados, es posible representarlos de una manera más descriptiva en el manual HTML/PDF resultante." -#: ../../documentation.rst:282 +#: ../../documentation.rst:259 msgid "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "Con esos comandos personalizados, será posible representarlos de una manera más descriptiva en el manual HTML/PDF resultante." @@ -352,66 +408,98 @@ msgstr "Escribir documentación" msgid "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." msgstr "Puede instalar Sphinx (y TeX Live para la salida en PDF) y compilar la documentación localmente, o usar Dockerfile_ para compilarla en un contenedor." -#: ../../documentation.rst:133 +#: ../../documentation.rst:29 +msgid "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." +msgstr "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." + +#: ../../documentation.rst:438 msgid "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." msgstr "Tu repositorio remoto en Github se llama ``origin``, mientras que el repositorio original que has bifurcado se llama ``upstream``. Ahora puede actualizar localmente su repositorio bifurcado." -#: ../../documentation.rst:235 +#: ../../documentation.rst:212 msgid "``192.0.2.0/24``" msgstr "``192.0.2.0/24``" -#: ../../documentation.rst:236 +#: ../../documentation.rst:213 msgid "``198.51.100.0/24``" msgstr "``198.51.100.0/24``" -#: ../../documentation.rst:238 +#: ../../documentation.rst:215 msgid "``2001:db8::/32``" msgstr "``2001:db8::/32``" -#: ../../documentation.rst:237 +#: ../../documentation.rst:214 msgid "``203.0.113.0/24``" msgstr "``203.0.113.0/24``" -#: ../../documentation.rst:194 +#: ../../documentation.rst:171 msgid "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" msgstr "``:ref:`Revisar VLAN<configuration/interfaces/ethernet:vlan> ``" -#: ../../documentation.rst:190 +#: ../../documentation.rst:167 msgid "``:ref:`configuration/interfaces/ethernet:vlan``" msgstr "``:ref:`configuración/interfaces/ethernet:vlan``" -#: ../../documentation.rst:407 +#: ../../documentation.rst:72 msgid "``set firewall zone`` is written in ``firewall/zone.rst``" msgstr "``establecer zona de firewall`` está escrito en ``firewall/zone.rst``" -#: ../../documentation.rst:408 +#: ../../documentation.rst:73 msgid "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" msgstr "``establecer interfaces ethernet`` está escrito en ``interfaces/ethernet.rst``" -#: ../../documentation.rst:275 +#: ../../documentation.rst:88 +msgid "a simple explanation of what is this page about, why or when it is required to be used" +msgstr "a simple explanation of what is this page about, why or when it is required to be used" + +#: ../../documentation.rst:252 msgid "cfgcmd" msgstr "cfgcmd" -#: ../../documentation.rst:335 +#: ../../documentation.rst:312 msgid "cmdinclude" msgstr "cmincluir" -#: ../../documentation.rst:197 +#: ../../documentation.rst:174 msgid "handle build errors" msgstr "manejar errores de compilación" -#: ../../documentation.rst:314 +#: ../../documentation.rst:117 +msgid "how to collect logs or other debugging information (like `show` commands output)" +msgstr "how to collect logs or other debugging information (like `show` commands output)" + +#: ../../documentation.rst:118 +msgid "how to read and what to search for in logs and collected information" +msgstr "how to read and what to search for in logs and collected information" + +#: ../../documentation.rst:109 +msgid "known issues or potential problems for the service or use case" +msgstr "known issues or potential problems for the service or use case" + +#: ../../documentation.rst:291 msgid "opcmd" msgstr "opcmd" -#: ../../documentation.rst:346 +#: ../../documentation.rst:89 +msgid "references to standards, RFCs" +msgstr "references to standards, RFCs" + +#: ../../documentation.rst:323 msgid "the content of interface-address.txt looks like this" msgstr "el contenido de interface-address.txt se ve así" -#: ../../documentation.rst:192 +#: ../../documentation.rst:169 msgid "to use an alternative hyperlink use it this way:" msgstr "para usar un hipervínculo alternativo, úselo de esta manera:" -#: ../../documentation.rst:373 +#: ../../documentation.rst:350 msgid "vytask" msgstr "vytarea" + +#: ../../documentation.rst:119 +msgid "what are indicators of good and bad states in debugging outputs" +msgstr "what are indicators of good and bad states in debugging outputs" + +#: ../../documentation.rst:110 +msgid "workarounds for known issues (if any exist)" +msgstr "workarounds for known issues (if any exist)" diff --git a/docs/_locale/es/installation.pot b/docs/_locale/es/installation.pot index 8d2d1d2d..d77d4e6e 100644 --- a/docs/_locale/es/installation.pot +++ b/docs/_locale/es/installation.pot @@ -212,6 +212,10 @@ msgstr "Agregue una o más rutas para las redes que desea pasar a través de la msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." msgstr "Almacenamiento adicional. Puede eliminar el almacenamiento adicional ``/dev/sdb``. El primer dispositivo raíz será ``/dev/xvda``. Puedes mantener este paso." +#: ../../installation/cloud/aws.rst:27 +msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." +msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." + #: ../../installation/vyos-on-baremetal.rst:394 msgid "Advanced > Serial Port Console Redirection > Console Redirection Settings:" msgstr "Avanzado > Redirección de consola de puerto serie > Configuración de redirección de consola:" @@ -465,6 +469,10 @@ msgstr "Clientes (donde se instalará VyOS) con una NIC habilitada para PXE" msgid "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." msgstr "CloudWatchAgentServerRole es demasiado permisivo y debe usarse para la creación e implementación de una configuración única. Es por eso que después de completar el paso n.º 3, se recomienda encarecidamente reemplazar la función CloudWatchAgentAdminRole de la instancia con CloudWatchAgentServerRole." +#: ../../installation/cloud/aws.rst:88 +msgid "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +msgstr "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." + #: ../../installation/cloud/aws.rst:82 msgid "CloudWatch SSM Configuration creation" msgstr "Creación de la configuración de CloudWatch SSM" @@ -1303,6 +1311,10 @@ msgstr "Requisitos" msgid "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." msgstr "Recupere una configuración existente del agente de CloudWatch del almacén de parámetros :abbr:`SSM (Administrador de sistemas)`." +#: ../../installation/cloud/aws.rst:69 +msgid "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +msgstr "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." + #: ../../installation/install.rst:74 msgid "Rolling Release" msgstr "Liberación rodante" diff --git a/docs/_locale/es/quick-start.pot b/docs/_locale/es/quick-start.pot index 1b96a369..9d700757 100644 --- a/docs/_locale/es/quick-start.pot +++ b/docs/_locale/es/quick-start.pot @@ -101,6 +101,10 @@ msgid "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAG msgstr "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:" #: ../../quick-start.rst:243 +msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." +msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." + +#: ../../quick-start.rst:243 msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." @@ -292,6 +296,10 @@ msgstr "To make firewall configuration easier, we can create groups of interface msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." +#: ../../quick-start.rst:164 +msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." +msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." + #: ../../quick-start.rst:90 msgid "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" msgstr "VyOS servirá como un recurso de DNS completo, reemplazando la necesidad de utilizar Google, Cloudflare u otros servidores DNS públicos (lo cual es bueno para la privacidad)" diff --git a/docs/_locale/ja/LC_MESSAGES/automation.mo b/docs/_locale/ja/LC_MESSAGES/automation.mo Binary files differindex 65013926..bc935ab3 100644 --- a/docs/_locale/ja/LC_MESSAGES/automation.mo +++ b/docs/_locale/ja/LC_MESSAGES/automation.mo diff --git a/docs/_locale/ja/LC_MESSAGES/cli.mo b/docs/_locale/ja/LC_MESSAGES/cli.mo Binary files differindex 778da5ed..2f10af5f 100644 --- a/docs/_locale/ja/LC_MESSAGES/cli.mo +++ b/docs/_locale/ja/LC_MESSAGES/cli.mo diff --git a/docs/_locale/ja/LC_MESSAGES/configexamples.mo b/docs/_locale/ja/LC_MESSAGES/configexamples.mo Binary files differindex 195ef913..0ecc0ca9 100644 --- a/docs/_locale/ja/LC_MESSAGES/configexamples.mo +++ b/docs/_locale/ja/LC_MESSAGES/configexamples.mo diff --git a/docs/_locale/ja/LC_MESSAGES/configuration.mo b/docs/_locale/ja/LC_MESSAGES/configuration.mo Binary files differindex 34b220ee..04847737 100644 --- a/docs/_locale/ja/LC_MESSAGES/configuration.mo +++ b/docs/_locale/ja/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/ja/LC_MESSAGES/contributing.mo b/docs/_locale/ja/LC_MESSAGES/contributing.mo Binary files differindex aa7a51ea..341fabc9 100644 --- a/docs/_locale/ja/LC_MESSAGES/contributing.mo +++ b/docs/_locale/ja/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/ja/LC_MESSAGES/copyright.mo b/docs/_locale/ja/LC_MESSAGES/copyright.mo Binary files differindex fe27b843..f66932e4 100644 --- a/docs/_locale/ja/LC_MESSAGES/copyright.mo +++ b/docs/_locale/ja/LC_MESSAGES/copyright.mo diff --git a/docs/_locale/ja/LC_MESSAGES/documentation.mo b/docs/_locale/ja/LC_MESSAGES/documentation.mo Binary files differindex 9de91eff..e4e815cd 100644 --- a/docs/_locale/ja/LC_MESSAGES/documentation.mo +++ b/docs/_locale/ja/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/ja/LC_MESSAGES/installation.mo b/docs/_locale/ja/LC_MESSAGES/installation.mo Binary files differindex ba53282d..e1550d51 100644 --- a/docs/_locale/ja/LC_MESSAGES/installation.mo +++ b/docs/_locale/ja/LC_MESSAGES/installation.mo diff --git a/docs/_locale/ja/LC_MESSAGES/quick-start.mo b/docs/_locale/ja/LC_MESSAGES/quick-start.mo Binary files differindex ce5e4e11..8ef16a91 100644 --- a/docs/_locale/ja/LC_MESSAGES/quick-start.mo +++ b/docs/_locale/ja/LC_MESSAGES/quick-start.mo diff --git a/docs/_locale/ja/automation.pot b/docs/_locale/ja/automation.pot index 027ac9ff..741a317b 100644 --- a/docs/_locale/ja/automation.pot +++ b/docs/_locale/ja/automation.pot @@ -8,55 +8,100 @@ msgstr "" "Language: ja\n" "Plural-Forms: nplurals=1; plural=0;\n" +#: ../../automation/terraform/index.rst:15 +msgid "# terraformAZ # terraformvSphere # terraformGoogle" +msgstr "# terraformAZ # terraformvSphere # terraformGoogle" + +#: ../../automation/vyos-terraform.rst:707 +msgid "#az login" +msgstr "#az login" + +#: ../../automation/vyos-terraform.rst:261 +#: ../../automation/vyos-terraform.rst:283 +#: ../../automation/vyos-terraform.rst:711 +#: ../../automation/vyos-terraform.rst:731 +#: ../../automation/vyos-terraform.rst:1008 +#: ../../automation/vyos-terraform.rst:1029 +msgid "#cd /your folder" +msgstr "#cd /your folder" + +#: ../../automation/vyos-terraform.rst:287 +#: ../../automation/vyos-terraform.rst:735 +#: ../../automation/vyos-terraform.rst:1033 +msgid "#terraform apply" +msgstr "#terraform apply" + +#: ../../automation/vyos-terraform.rst:263 +#: ../../automation/vyos-terraform.rst:713 +#: ../../automation/vyos-terraform.rst:1010 +msgid "#terraform init" +msgstr "#terraform init" + +#: ../../automation/vyos-terraform.rst:285 +#: ../../automation/vyos-terraform.rst:733 +#: ../../automation/vyos-terraform.rst:1031 +msgid "#terraform plan" +msgstr "#terraform plan" + +#: ../../automation/vyos-terraform.rst:289 +#: ../../automation/vyos-terraform.rst:737 +#: ../../automation/vyos-terraform.rst:1035 +msgid "#yes" +msgstr "#yes" + +#: ../../automation/cloud-init.rst:366 +msgid "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." +msgstr "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." + #: ../../automation/cloud-init.rst:363 msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." msgstr "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." -#: ../../automation/cloud-init.rst:305 +#: ../../automation/cloud-init.rst:308 msgid "**meta-data**: empty file (required)." msgstr "**meta-data**: empty file (required)." -#: ../../automation/cloud-init.rst:300 +#: ../../automation/cloud-init.rst:303 msgid "**network-config**: file that will indicate to avoid dhcp client on first interface." msgstr "**network-config**: file that will indicate to avoid dhcp client on first interface." -#: ../../automation/cloud-init.rst:333 +#: ../../automation/cloud-init.rst:336 msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface." msgstr "**network-config** file only has configuration that disables the automatic dhcp client on first interface." -#: ../../automation/cloud-init.rst:303 +#: ../../automation/cloud-init.rst:306 msgid "**user-data**: includes vyos-commands." msgstr "**user-data**: includes vyos-commands." -#: ../../automation/cloud-init.rst:314 +#: ../../automation/cloud-init.rst:317 msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" msgstr "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" -#: ../../automation/vyos-api.rst:322 +#: ../../automation/vyos-api.rst:355 msgid "/config-file" msgstr "/config-file" -#: ../../automation/vyos-api.rst:265 +#: ../../automation/vyos-api.rst:298 msgid "/configure" msgstr "/configure" -#: ../../automation/vyos-api.rst:246 +#: ../../automation/vyos-api.rst:278 msgid "/generate" msgstr "/generate" -#: ../../automation/vyos-api.rst:184 +#: ../../automation/vyos-api.rst:216 msgid "/image" msgstr "/image" -#: ../../automation/vyos-api.rst:165 +#: ../../automation/vyos-api.rst:197 msgid "/poweroff" msgstr "/poweroff" -#: ../../automation/vyos-api.rst:147 +#: ../../automation/vyos-api.rst:179 msgid "/reboot" msgstr "/reboot" -#: ../../automation/vyos-api.rst:129 +#: ../../automation/vyos-api.rst:161 msgid "/reset" msgstr "/reset" @@ -64,19 +109,276 @@ msgstr "/reset" msgid "/retrieve" msgstr "/retrieve" -#: ../../automation/vyos-api.rst:222 +#: ../../automation/vyos-api.rst:254 msgid "/show" msgstr "/show" +#: ../../automation/vyos-terraform.rst:993 +msgid "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" +msgstr "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:61 +msgid "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/vyos-terraform.rst:692 +msgid "1.1 Create an account with Azure" +msgstr "1.1 Create an account with Azure" + +#: ../../automation/vyos-terraform.rst:243 +msgid "1.2 Create a key pair and download your .pem key" +msgstr "1.2 Create a key pair and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:63 +msgid "1.2 Create a key pair_ and download your .pem key" +msgstr "1.2 Create a key pair_ and download your .pem key" + +#: ../../automation/vyos-terraform.rst:245 +msgid "1.3 Create a security group for the new VyOS instance" +msgstr "1.3 Create a security group for the new VyOS instance" + +#: ../../automation/terraform/terraformAWS.rst:70 +msgid "1.3 Create a security group_ for the new VyOS instance and open all traffic" +msgstr "1.3 Create a security group_ for the new VyOS instance and open all traffic" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/terraform/terraformAWS.rst:266 +msgid "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." +msgstr "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." + +#: ../../automation/terraform/terraformvSphere.rst:23 +msgid "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" +msgstr "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:77 +#: ../../automation/terraform/terraformAZ.rst:54 +#: ../../automation/terraform/terraformGoogle.rst:76 +#: ../../automation/terraform/terraformvSphere.rst:53 +msgid "1 Create an UNIX instance whenever you want (local, cloud, and so on)" +msgstr "1 Create an UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:54 +#: ../../automation/terraform/terraformAZ.rst:26 +#: ../../automation/terraform/terraformGoogle.rst:52 +#: ../../automation/terraform/terraformvSphere.rst:29 +msgid "1 Create an UNIX or Windows instance" +msgstr "1 Create an UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:29 +msgid "1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/terraform/terraformAZ.rst:21 +msgid "1 Create an account with Azure" +msgstr "1 Create an account with Azure" + +#: ../../automation/terraform/terraformGoogle.rst:22 +msgid "1 Create an account with google cloud and a new project" +msgstr "1 Create an account with google cloud and a new project" + +#: ../../automation/terraform/terraformGoogle.rst:344 +msgid "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." +msgstr "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." + +#: ../../automation/terraform/terraformAWS.rst:86 +msgid "2.1 Create a0 UNIX or Windows instance" +msgstr "2.1 Create a0 UNIX or Windows instance" + +#: ../../automation/vyos-terraform.rst:250 +#: ../../automation/vyos-terraform.rst:697 +#: ../../automation/vyos-terraform.rst:998 +msgid "2.1 Create a UNIX or Windows instance" +msgstr "2.1 Create a UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:88 +msgid "2.2 Download and install Terraform" +msgstr "2.2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:90 +msgid "2.3 Create the folder for example /root/awsterraform" +msgstr "2.3 Create the folder for example /root/awsterraform" + +#: ../../automation/vyos-terraform.rst:254 +msgid "2.3 Create the folder for example ../awsvyos/" +msgstr "2.3 Create the folder for example ../awsvyos/" + +#: ../../automation/vyos-terraform.rst:701 +msgid "2.3 Create the folder for example ../azvyos/" +msgstr "2.3 Create the folder for example ../azvyos/" + +#: ../../automation/vyos-terraform.rst:1002 +msgid "2.3 Create the folder for example ../vsphere/" +msgstr "2.3 Create the folder for example ../vsphere/" + +#: ../../automation/vyos-terraform.rst:1004 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project" + +#: ../../automation/vyos-terraform.rst:703 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" + +#: ../../automation/terraform/terraformAWS.rst:96 +msgid "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" +msgstr "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" + +#: ../../automation/vyos-terraform.rst:256 +msgid "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" +msgstr "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" + +#: ../../automation/vyos-terraform.rst:705 +msgid "2.5 Login with Azure using the command" +msgstr "2.5 Login with Azure using the command" + +#: ../../automation/terraform/terraformAWS.rst:98 +msgid "2.5 Type the commands :" +msgstr "2.5 Type the commands :" + +#: ../../automation/terraform/terraformAZ.rst:44 +msgid "2.6 Type the commands :" +msgstr "2.6 Type the commands :" + +#: ../../automation/terraform/terraformAWS.rst:31 +msgid "2 Create a key pair_ and download your .pem key" +msgstr "2 Create a key pair_ and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:79 +#: ../../automation/terraform/terraformAZ.rst:56 +#: ../../automation/terraform/terraformGoogle.rst:78 +#: ../../automation/terraform/terraformvSphere.rst:55 +msgid "2 Download and install Ansible" +msgstr "2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:56 +#: ../../automation/terraform/terraformAZ.rst:28 +#: ../../automation/terraform/terraformGoogle.rst:54 +#: ../../automation/terraform/terraformvSphere.rst:31 +msgid "2 Download and install Terraform" +msgstr "2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:270 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" + +#: ../../automation/terraform/terraformGoogle.rst:347 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" + +#: ../../automation/vyos-terraform.rst:268 +#: ../../automation/vyos-terraform.rst:718 +#: ../../automation/vyos-terraform.rst:1016 +msgid "3.1 Create a UNIX instance" +msgstr "3.1 Create a UNIX instance" + +#: ../../automation/terraform/terraformAWS.rst:109 +msgid "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" +msgstr "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:111 +msgid "3.2 Download and install Ansible" +msgstr "3.2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:113 +msgid "3.3 Create the folder for example /root/aws/" +msgstr "3.3 Create the folder for example /root/aws/" + +#: ../../automation/vyos-terraform.rst:722 +msgid "3.3 Create the folder for example /root/az/" +msgstr "3.3 Create the folder for example /root/az/" + +#: ../../automation/vyos-terraform.rst:1020 +msgid "3.3 Create the folder for example /root/vsphere/" +msgstr "3.3 Create the folder for example /root/vsphere/" + +#: ../../automation/vyos-terraform.rst:274 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" + +#: ../../automation/vyos-terraform.rst:724 +#: ../../automation/vyos-terraform.rst:1022 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" + +#: ../../automation/terraform/terraformAWS.rst:115 +msgid "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAWS.rst:81 +msgid "3 Create the folder for example /root/aws/" +msgstr "3 Create the folder for example /root/aws/" + +#: ../../automation/terraform/terraformAWS.rst:58 +msgid "3 Create the folder for example /root/awsterraform" +msgstr "3 Create the folder for example /root/awsterraform" + +#: ../../automation/terraform/terraformAZ.rst:58 +msgid "3 Create the folder for example /root/az/" +msgstr "3 Create the folder for example /root/az/" + +#: ../../automation/terraform/terraformAZ.rst:30 +msgid "3 Create the folder for example /root/azvyos/" +msgstr "3 Create the folder for example /root/azvyos/" + +#: ../../automation/terraform/terraformGoogle.rst:56 +msgid "3 Create the folder for example /root/google" +msgstr "3 Create the folder for example /root/google" + +#: ../../automation/terraform/terraformGoogle.rst:80 +msgid "3 Create the folder for example /root/google/" +msgstr "3 Create the folder for example /root/google/" + +#: ../../automation/terraform/terraformvSphere.rst:33 +msgid "3 Create the folder for example /root/vsphereterraform" +msgstr "3 Create the folder for example /root/vsphereterraform" + +#: ../../automation/terraform/terraformvSphere.rst:57 +msgid "3 Create the folder for example /root/vsphereterraform/" +msgstr "3 Create the folder for example /root/vsphereterraform/" + +#: ../../automation/terraform/terraformAWS.rst:123 +msgid "4.1 Type the commands on your Terrafom instance:" +msgstr "4.1 Type the commands on your Terrafom instance:" + +#: ../../automation/terraform/terraformAWS.rst:83 +msgid "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAZ.rst:60 +msgid "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" +msgstr "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" + +#: ../../automation/terraform/terraformGoogle.rst:82 +msgid "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" +msgstr "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" + +#: ../../automation/terraform/terraformvSphere.rst:59 +msgid "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" +msgstr "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" + #: ../../automation/vyos-api.rst:41 msgid "API Endpoints" msgstr "API Endpoints" +#: ../../automation/terraform/terraformAWS.rst:26 +msgid "AWS" +msgstr "AWS" + +#: ../../automation/vyos-terraform.rst:233 +msgid "AWS_terraform_ansible_single_vyos_instance" +msgstr "AWS_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:273 +msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." + #: ../../automation/cloud-init.rst:270 msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." -#: ../../automation/cloud-init.rst:63 +#: ../../automation/cloud-init.rst:64 msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." msgstr "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." @@ -84,7 +386,7 @@ msgstr "A cloud-config document is written in YAML. The file must begin with ``# msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." msgstr "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." -#: ../../automation/cloud-init.rst:82 +#: ../../automation/cloud-init.rst:83 msgid "A single-quote symbol is not allowed inside command or value." msgstr "A single-quote symbol is not allowed inside command or value." @@ -92,18 +394,53 @@ msgstr "A single-quote symbol is not allowed inside command or value." msgid "Accept minion key" msgstr "Accept minion key" +#: ../../automation/terraform/terraformAWS.rst:255 +msgid "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformAZ.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformGoogle.rst:333 +msgid "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformvSphere.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/cloud-init.rst:92 +msgid "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." +msgstr "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." + #: ../../automation/vyos-api.rst:15 msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." msgstr "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." -#: ../../automation/cloud-init.rst:115 +#: ../../automation/terraform/terraformAWS.rst:539 +#: ../../automation/terraform/terraformAZ.rst:484 +#: ../../automation/terraform/terraformGoogle.rst:705 +#: ../../automation/terraform/terraformvSphere.rst:397 +msgid "All files about the article can be found here_" +msgstr "All files about the article can be found here_" + +#: ../../automation/cloud-init.rst:119 msgid "All of these can be overridden using the configuration in user-data." msgstr "All of these can be overridden using the configuration in user-data." -#: ../../automation/cloud-init.rst:256 +#: ../../automation/terraform/terraformAWS.rst:267 +msgid "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/cloud-init.rst:259 msgid "Also, this lab considers:" msgstr "Also, this lab considers:" +#: ../../automation/terraform/terraformAWS.rst:74 +#: ../../automation/terraform/terraformAZ.rst:51 +#: ../../automation/terraform/terraformGoogle.rst:73 +#: ../../automation/terraform/terraformvSphere.rst:50 #: ../../automation/vyos-ansible.rst:6 msgid "Ansible" msgstr "Ansible" @@ -121,7 +458,16 @@ msgstr "At this step we can get some op-mode information from VyOS nodes:" msgid "Authentication" msgstr "Authentication" -#: ../../automation/cloud-init.rst:241 +#: ../../automation/terraform/terraformAZ.rst:19 +msgid "Azure" +msgstr "Azure" + +#: ../../automation/vyos-terraform.rst:684 +#: ../../automation/vyos-terraform.rst:985 +msgid "Azure_terraform_ansible_single_vyos_instance" +msgstr "Azure_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:244 msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." msgstr "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." @@ -145,11 +491,11 @@ msgstr "Check that salt master can communicate with minions" msgid "Cloud-config modules" msgstr "Cloud-config modules" -#: ../../automation/cloud-init.rst:420 +#: ../../automation/cloud-init.rst:423 msgid "Cloud-init `network-config-docs`_." msgstr "Cloud-init `network-config-docs`_." -#: ../../automation/cloud-init.rst:239 +#: ../../automation/cloud-init.rst:242 msgid "Cloud-init on Proxmox" msgstr "Cloud-init on Proxmox" @@ -157,7 +503,7 @@ msgstr "Cloud-init on Proxmox" msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." msgstr "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." -#: ../../automation/cloud-init.rst:120 +#: ../../automation/cloud-init.rst:124 msgid "Command Execution at Initial Boot" msgstr "Command Execution at Initial Boot" @@ -165,11 +511,11 @@ msgstr "Command Execution at Initial Boot" msgid "Command Scripting" msgstr "Command Scripting" -#: ../../automation/cloud-init.rst:356 +#: ../../automation/cloud-init.rst:359 msgid "Command for generating ``seed.iso``" msgstr "Command for generating ``seed.iso``" -#: ../../automation/cloud-init.rst:78 +#: ../../automation/cloud-init.rst:79 msgid "Commands requirements:" msgstr "Commands requirements:" @@ -186,51 +532,55 @@ msgstr "Configuration" msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" msgstr "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" -#: ../../automation/vyos-pyvyos.rst:94 +#: ../../automation/vyos-pyvyos.rst:102 msgid "Configure, then Delete Object" msgstr "Configure, then Delete Object" -#: ../../automation/vyos-pyvyos.rst:141 +#: ../../automation/vyos-pyvyos.rst:149 msgid "Configure, then Load File" msgstr "Configure, then Load File" -#: ../../automation/vyos-pyvyos.rst:101 +#: ../../automation/vyos-pyvyos.rst:109 msgid "Configure, then Save" msgstr "Configure, then Save" -#: ../../automation/vyos-pyvyos.rst:108 +#: ../../automation/vyos-pyvyos.rst:116 msgid "Configure, then Save File" msgstr "Configure, then Save File" -#: ../../automation/vyos-pyvyos.rst:68 +#: ../../automation/vyos-pyvyos.rst:76 msgid "Configure, then Set" msgstr "Configure, then Set" -#: ../../automation/vyos-pyvyos.rst:85 +#: ../../automation/vyos-pyvyos.rst:93 msgid "Configure, then Show Object" msgstr "Configure, then Show Object" -#: ../../automation/vyos-pyvyos.rst:77 +#: ../../automation/vyos-pyvyos.rst:85 msgid "Configure, then Show a Single Object Value" msgstr "Configure, then Show a Single Object Value" +#: ../../automation/terraform/index.rst:5 +msgid "Content" +msgstr "Content" + #: ../../automation/vyos-napalm.rst:89 msgid "Content of commands.conf" msgstr "Content of commands.conf" -#: ../../automation/cloud-init.rst:337 +#: ../../automation/cloud-init.rst:340 msgid "Content of network-config file:" msgstr "Content of network-config file:" -#: ../../automation/cloud-init.rst:351 +#: ../../automation/cloud-init.rst:354 msgid "Create seed.iso" msgstr "Create seed.iso" -#: ../../automation/cloud-init.rst:189 +#: ../../automation/cloud-init.rst:193 msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." msgstr "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." -#: ../../automation/cloud-init.rst:368 +#: ../../automation/cloud-init.rst:371 msgid "Creating the VM" msgstr "Creating the VM" @@ -238,10 +588,38 @@ msgstr "Creating the VM" msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." msgstr "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." -#: ../../automation/cloud-init.rst:113 +#: ../../automation/cloud-init.rst:117 msgid "DHCP on first Ethernet interface if no network configuration is provided." msgstr "DHCP on first Ethernet interface if no network configuration is provided." +#: ../../automation/terraform/terraformAWS.rst:6 +msgid "Deploying VyOS in the AWS cloud" +msgstr "Deploying VyOS in the AWS cloud" + +#: ../../automation/terraform/terraformAZ.rst:6 +msgid "Deploying VyOS in the Azure cloud" +msgstr "Deploying VyOS in the Azure cloud" + +#: ../../automation/terraform/terraformGoogle.rst:6 +msgid "Deploying VyOS in the google cloud" +msgstr "Deploying VyOS in the google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:6 +msgid "Deploying VyOS in the vSphere infrastructure" +msgstr "Deploying VyOS in the vSphere infrastructure" + +#: ../../automation/terraform/terraformAWS.rst:39 +msgid "Deploying vyos in the AWS cloud" +msgstr "Deploying vyos in the AWS cloud" + +#: ../../automation/vyos-terraform.rst:299 +msgid "Deploying vyos in the Azure cloud" +msgstr "Deploying vyos in the Azure cloud" + +#: ../../automation/vyos-terraform.rst:742 +msgid "Deploying vyos in the Vsphere infrastructia" +msgstr "Deploying vyos in the Vsphere infrastructia" + #: ../../automation/vyos-netmiko.rst:12 msgid "Example" msgstr "Example" @@ -274,10 +652,46 @@ msgstr "Executing pre-hooks/post-hooks Scripts" msgid "File contents" msgstr "File contents" -#: ../../automation/cloud-init.rst:284 +#: ../../automation/terraform/terraformAWS.rst:476 +msgid "File contents of Ansible for AWS" +msgstr "File contents of Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:426 +msgid "File contents of Ansible for Azure" +msgstr "File contents of Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:651 +msgid "File contents of Ansible for google cloud" +msgstr "File contents of Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:338 +msgid "File contents of Ansible for vSphere" +msgstr "File contents of Ansible for vSphere" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "File contents of Terrafom for AWS" +msgstr "File contents of Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:93 +msgid "File contents of Terrafom for Azure" +msgstr "File contents of Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:375 +msgid "File contents of Terrafom for google cloud" +msgstr "File contents of Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:96 +msgid "File contents of Terrafom for vSphere" +msgstr "File contents of Terrafom for vSphere" + +#: ../../automation/cloud-init.rst:287 msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" msgstr "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" +#: ../../automation/cloud-init.rst:350 +msgid "Finally, file **meta-data** has no content, but it's required." +msgstr "Finally, file **meta-data** has no content, but it's required." + #: ../../automation/cloud-init.rst:347 msgid "Finaly, file **meta-data** has no content, but it's required." msgstr "Finaly, file **meta-data** has no content, but it's required." @@ -290,11 +704,15 @@ msgstr "For configuration/upgrade management issues, modification of this script msgid "For configuration and enabling the API see :ref:`http-api`" msgstr "For configuration and enabling the API see :ref:`http-api`" +#: ../../automation/vyos-api.rst:130 +msgid "For example, check an existing path:" +msgstr "For example, check an existing path:" + #: ../../automation/vyos-api.rst:109 msgid "For example, get the addresses of a ``dum0`` interface." msgstr "For example, get the addresses of a ``dum0`` interface." -#: ../../automation/vyos-api.rst:226 +#: ../../automation/vyos-api.rst:258 msgid "For example, show which images are installed." msgstr "For example, show which images are installed." @@ -302,19 +720,27 @@ msgstr "For example, show which images are installed." msgid "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." msgstr "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." -#: ../../automation/cloud-init.rst:411 +#: ../../automation/cloud-init.rst:221 +msgid "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." +msgstr "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." + +#: ../../automation/cloud-init.rst:414 msgid "From cli or GUI, power on VM, and after it boots, verify configuration" msgstr "From cli or GUI, power on VM, and after it boots, verify configuration" -#: ../../automation/vyos-pyvyos.rst:123 +#: ../../automation/terraform/terraformvyos.rst:26 +msgid "General commands that we will use for running Terraform scripts" +msgstr "General commands that we will use for running Terraform scripts" + +#: ../../automation/vyos-pyvyos.rst:131 msgid "Generate Object" msgstr "Generate Object" -#: ../../automation/cloud-init.rst:268 +#: ../../automation/cloud-init.rst:271 msgid "Generate qcow image" msgstr "Generate qcow image" -#: ../../automation/vyos-pyvyos.rst:24 +#: ../../automation/vyos-pyvyos.rst:32 msgid "Getting Started" msgstr "Getting Started" @@ -322,27 +748,47 @@ msgstr "Getting Started" msgid "Here is a simple example:" msgstr "Here is a simple example:" -#: ../../automation/cloud-init.rst:91 +#: ../../automation/cloud-init.rst:95 msgid "Here is an example cloud-config that appends configuration at the time of first boot." msgstr "Here is an example cloud-config that appends configuration at the time of first boot." -#: ../../automation/cloud-init.rst:377 +#: ../../automation/terraform/terraformAWS.rst:23 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" + +#: ../../automation/terraform/terraformAZ.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" + +#: ../../automation/vyos-terraform.rst:987 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" + +#: ../../automation/terraform/terraformGoogle.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" + +#: ../../automation/terraform/terraformvSphere.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" + +#: ../../automation/cloud-init.rst:380 msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." msgstr "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." -#: ../../automation/cloud-init.rst:81 +#: ../../automation/cloud-init.rst:82 msgid "If command ends in a value, it must be inside single quotes." msgstr "If command ends in a value, it must be inside single quotes." -#: ../../automation/cloud-init.rst:250 +#: ../../automation/cloud-init.rst:253 msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." msgstr "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." -#: ../../automation/cloud-init.rst:225 +#: ../../automation/cloud-init.rst:228 msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." msgstr "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." -#: ../../automation/cloud-init.rst:153 +#: ../../automation/cloud-init.rst:157 msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." msgstr "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." @@ -350,11 +796,11 @@ msgstr "If you need to gather information from linux commands to configure VyOS, msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." msgstr "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." -#: ../../automation/vyos-pyvyos.rst:27 +#: ../../automation/vyos-pyvyos.rst:35 msgid "Importing and Disabling Warnings for verify=False" msgstr "Importing and Disabling Warnings for verify=False" -#: ../../automation/cloud-init.rst:298 +#: ../../automation/cloud-init.rst:301 msgid "In Proxmox server three files are going to be used for this setup:" msgstr "In Proxmox server three files are going to be used for this setup:" @@ -362,23 +808,39 @@ msgstr "In Proxmox server three files are going to be used for this setup:" msgid "In VyOS, by default, enables only two modules:" msgstr "In VyOS, by default, enables only two modules:" -#: ../../automation/cloud-init.rst:307 +#: ../../automation/terraform/terraformAWS.rst:17 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." + +#: ../../automation/cloud-init.rst:310 msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" msgstr "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" -#: ../../automation/cloud-init.rst:274 +#: ../../automation/cloud-init.rst:277 msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" msgstr "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" -#: ../../automation/cloud-init.rst:71 +#: ../../automation/cloud-init.rst:72 msgid "Initial Configuration" msgstr "Initial Configuration" -#: ../../automation/vyos-pyvyos.rst:47 +#: ../../automation/vyos-pyvyos.rst:55 msgid "Initializing a VyDevice Object" msgstr "Initializing a VyDevice Object" -#: ../../automation/cloud-init.rst:180 +#: ../../automation/cloud-init.rst:184 msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." msgstr "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." @@ -386,7 +848,7 @@ msgstr "Injecting configuration data is not limited to cloud platforms. Users ca msgid "Install ``napalm-vyos`` module" msgstr "Install ``napalm-vyos`` module" -#: ../../automation/vyos-pyvyos.rst:15 +#: ../../automation/vyos-pyvyos.rst:23 msgid "Installation" msgstr "Installation" @@ -398,11 +860,20 @@ msgstr "It is possible to configure VyOS via netmiko_ proxy module. It requires msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." msgstr "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." +#: ../../automation/terraform/terraformAWS.rst:282 +#: ../../automation/terraform/terraformGoogle.rst:359 +msgid "Make sure that Ansible is pinging from Terrafom." +msgstr "Make sure that Ansible is pinging from Terrafom." + +#: ../../automation/terraform/terraformGoogle.rst:345 +msgid "Make sure that you have opened access to the instance in the security group." +msgstr "Make sure that you have opened access to the instance in the security group." + #: ../../automation/cloud-init.rst:20 msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." msgstr "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." -#: ../../automation/cloud-init.rst:244 +#: ../../automation/cloud-init.rst:247 msgid "Most important keys that needs to be considered:" msgstr "Most important keys that needs to be considered:" @@ -410,6 +881,10 @@ msgstr "Most important keys that needs to be considered:" msgid "Napalm" msgstr "Napalm" +#: ../../automation/terraform/terraformvyos.rst:13 +msgid "Need to install_ Terraform" +msgstr "Need to install_ Terraform" + #: ../../automation/vyos-netmiko.rst:6 msgid "Netmiko" msgstr "Netmiko" @@ -418,31 +893,37 @@ msgstr "Netmiko" msgid "Netmiko-proxy" msgstr "Netmiko-proxy" +#: ../../automation/terraform/terraformAWS.rst:-1 +#: ../../automation/terraform/terraformGoogle.rst:-1 +msgid "Network Topology Diagram" +msgstr "Network Topology Diagram" + #: ../../automation/cloud-init.rst:24 msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." msgstr "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." -#: ../../automation/cloud-init.rst:248 +#: ../../automation/cloud-init.rst:251 msgid "Networking configurations shouldn't be passed in user-data file." msgstr "Networking configurations shouldn't be passed in user-data file." -#: ../../automation/cloud-init.rst:178 +#: ../../automation/cloud-init.rst:182 msgid "NoCloud" msgstr "NoCloud" #: ../../automation/index.rst:6 +#: ../../automation/terraform/index.rst:6 msgid "Nornir" msgstr "Nornir" -#: ../../automation/cloud-init.rst:131 +#: ../../automation/cloud-init.rst:135 msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." msgstr "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." -#: ../../automation/cloud-init.rst:370 +#: ../../automation/cloud-init.rst:373 msgid "Notes for this particular example, that may need to be modified in other setups:" msgstr "Notes for this particular example, that may need to be modified in other setups:" -#: ../../automation/cloud-init.rst:287 +#: ../../automation/cloud-init.rst:290 msgid "Now, that file needs to be copied to proxmox server:" msgstr "Now, that file needs to be copied to proxmox server:" @@ -450,15 +931,15 @@ msgstr "Now, that file needs to be copied to proxmox server:" msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" msgstr "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" -#: ../../automation/cloud-init.rst:390 +#: ../../automation/cloud-init.rst:393 msgid "On proxmox server:" msgstr "On proxmox server:" -#: ../../automation/cloud-init.rst:353 +#: ../../automation/cloud-init.rst:356 msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." msgstr "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." -#: ../../automation/cloud-init.rst:80 +#: ../../automation/cloud-init.rst:81 msgid "One command per line." msgstr "One command per line." @@ -487,7 +968,7 @@ msgstr "Please take a look at the Contributing Guide for our :ref:`documentation msgid "Postconfig on boot" msgstr "Postconfig on boot" -#: ../../automation/cloud-init.rst:409 +#: ../../automation/cloud-init.rst:412 msgid "Power on VM and verifications" msgstr "Power on VM and verifications" @@ -495,15 +976,31 @@ msgstr "Power on VM and verifications" msgid "Preconfig on boot" msgstr "Preconfig on boot" -#: ../../automation/cloud-init.rst:296 +#: ../../automation/terraform/terraformAWS.rst:21 +msgid "Preparation steps for deploying VyOS on AWS" +msgstr "Preparation steps for deploying VyOS on AWS" + +#: ../../automation/terraform/terraformAZ.rst:14 +msgid "Preparation steps for deploying VyOS on Azure" +msgstr "Preparation steps for deploying VyOS on Azure" + +#: ../../automation/terraform/terraformGoogle.rst:14 +msgid "Preparation steps for deploying VyOS on google" +msgstr "Preparation steps for deploying VyOS on google" + +#: ../../automation/terraform/terraformvSphere.rst:14 +msgid "Preparation steps for deploying VyOS on vSphere" +msgstr "Preparation steps for deploying VyOS on vSphere" + +#: ../../automation/cloud-init.rst:299 msgid "Prepare cloud-init files" msgstr "Prepare cloud-init files" -#: ../../automation/cloud-init.rst:258 +#: ../../automation/cloud-init.rst:261 msgid "Proxmox IP address: **192.168.0.253/24**" msgstr "Proxmox IP address: **192.168.0.253/24**" -#: ../../automation/cloud-init.rst:422 +#: ../../automation/cloud-init.rst:425 msgid "Proxmox `Cloud-init-Support`_." msgstr "Proxmox `Cloud-init-Support`_." @@ -515,18 +1012,22 @@ msgstr "PyVyOS" msgid "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." msgstr "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." -#: ../../automation/cloud-init.rst:416 +#: ../../automation/cloud-init.rst:419 msgid "References" msgstr "References" -#: ../../automation/cloud-init.rst:263 +#: ../../automation/cloud-init.rst:266 msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." msgstr "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." -#: ../../automation/vyos-pyvyos.rst:132 +#: ../../automation/vyos-pyvyos.rst:140 msgid "Reset Object" msgstr "Reset Object" +#: ../../automation/vyos-terraform.rst:22 +msgid "Run Terraform" +msgstr "Run Terraform" + #: ../../automation/vyos-ansible.rst:80 msgid "Run ansible" msgstr "Run ansible" @@ -543,7 +1044,7 @@ msgstr "Run configuration commands" msgid "Run operational commands" msgstr "Run operational commands" -#: ../../automation/cloud-init.rst:111 +#: ../../automation/cloud-init.rst:115 msgid "SSH is configured on port 22." msgstr "SSH is configured on port 22." @@ -555,11 +1056,11 @@ msgstr "Salt" msgid "Salt master configuration:" msgstr "Salt master configuration:" -#: ../../automation/vyos-api.rst:344 +#: ../../automation/vyos-api.rst:377 msgid "Save a running configuration to a file." msgstr "Save a running configuration to a file." -#: ../../automation/vyos-api.rst:326 +#: ../../automation/vyos-api.rst:359 msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." msgstr "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." @@ -571,7 +1072,7 @@ msgstr "Script vyos-napalm.py" msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." msgstr "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." -#: ../../automation/vyos-pyvyos.rst:115 +#: ../../automation/vyos-pyvyos.rst:123 msgid "Show Object" msgstr "Show Object" @@ -579,7 +1080,42 @@ msgstr "Show Object" msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." msgstr "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." -#: ../../automation/cloud-init.rst:260 +#: ../../automation/command-scripting.rst:52 +msgid "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." + +#: ../../automation/terraform/terraformAWS.rst:537 +msgid "Sourse files for AWS from GIT" +msgstr "Sourse files for AWS from GIT" + +#: ../../automation/terraform/terraformAZ.rst:482 +msgid "Sourse files for Azure from GIT" +msgstr "Sourse files for Azure from GIT" + +#: ../../automation/terraform/terraformGoogle.rst:703 +msgid "Sourse files for google cloud from GIT" +msgstr "Sourse files for google cloud from GIT" + +#: ../../automation/terraform/terraformvSphere.rst:395 +msgid "Sourse files for vSphere from GIT" +msgstr "Sourse files for vSphere from GIT" + +#: ../../automation/terraform/terraformAWS.rst:88 +#: ../../automation/terraform/terraformAZ.rst:63 +#: ../../automation/terraform/terraformGoogle.rst:87 +#: ../../automation/terraform/terraformvSphere.rst:62 +msgid "Start" +msgstr "Start" + +#: ../../automation/terraform/terraformGoogle.rst:101 +msgid "Start creating a google cloud instance and check the result" +msgstr "Start creating a google cloud instance and check the result" + +#: ../../automation/terraform/terraformAWS.rst:102 +msgid "Start creating an AWS instance and check the result" +msgstr "Start creating an AWS instance and check the result" + +#: ../../automation/cloud-init.rst:263 msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." msgstr "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." @@ -591,14 +1127,80 @@ msgstr "Structure of /srv/salt:" msgid "Structure of files" msgstr "Structure of files" -#: ../../automation/cloud-init.rst:107 +#: ../../automation/vyos-terraform.rst:166 +#: ../../automation/vyos-terraform.rst:624 +msgid "Structure of files Ansible" +msgstr "Structure of files Ansible" + +#: ../../automation/terraform/terraformAWS.rst:463 +msgid "Structure of files Ansible for AWS" +msgstr "Structure of files Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:414 +msgid "Structure of files Ansible for Azure" +msgstr "Structure of files Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:639 +msgid "Structure of files Ansible for google cloud" +msgstr "Structure of files Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:326 +msgid "Structure of files Ansible for vSphere" +msgstr "Structure of files Ansible for vSphere" + +#: ../../automation/vyos-terraform.rst:38 +#: ../../automation/vyos-terraform.rst:302 +#: ../../automation/vyos-terraform.rst:745 +msgid "Structure of files Terrafom" +msgstr "Structure of files Terrafom" + +#: ../../automation/terraform/terraformAWS.rst:285 +msgid "Structure of files Terrafom for AWS" +msgstr "Structure of files Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:83 +msgid "Structure of files Terrafom for Azure" +msgstr "Structure of files Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:362 +msgid "Structure of files Terrafom for google cloud" +msgstr "Structure of files Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:84 +msgid "Structure of files Terrafom for vSphere" +msgstr "Structure of files Terrafom for vSphere" + +#: ../../automation/terraform/terraformvyos.rst:15 +msgid "Structure of files in the standard Terraform project:" +msgstr "Structure of files in the standard Terraform project:" + +#: ../../automation/cloud-init.rst:111 msgid "System Defaults/Fallbacks" msgstr "System Defaults/Fallbacks" -#: ../../automation/vyos-api.rst:301 +#: ../../automation/terraform/terraformAWS.rst:51 +#: ../../automation/terraform/terraformAZ.rst:23 +#: ../../automation/terraform/terraformGoogle.rst:49 +#: ../../automation/terraform/terraformvSphere.rst:26 +msgid "Terraform" +msgstr "Terraform" + +#: ../../automation/terraform/terraformAWS.rst:302 +msgid "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" +msgstr "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" + +#: ../../automation/terraform/terraformvyos.rst:6 +msgid "Terraform for VyOS" +msgstr "Terraform for VyOS" + +#: ../../automation/vyos-api.rst:334 msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." msgstr "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." +#: ../../automation/terraform/terraformGoogle.rst:41 +msgid "The .JSON file download automaticly after creating and will look like:" +msgstr "The .JSON file download automaticly after creating and will look like:" + #: ../../automation/command-scripting.rst:197 msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." @@ -607,23 +1209,23 @@ msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called o msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." msgstr "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." -#: ../../automation/vyos-api.rst:224 +#: ../../automation/vyos-api.rst:256 msgid "The ``/show`` endpoint is to show everything in the operational mode." msgstr "The ``/show`` endpoint is to show everything in the operational mode." -#: ../../automation/vyos-api.rst:248 +#: ../../automation/vyos-api.rst:280 msgid "The ``generate`` endpoint run a ``generate`` command." msgstr "The ``generate`` endpoint run a ``generate`` command." -#: ../../automation/vyos-api.rst:131 +#: ../../automation/vyos-api.rst:163 msgid "The ``reset`` endpoint run a ``reset`` command." msgstr "The ``reset`` endpoint run a ``reset`` command." -#: ../../automation/cloud-init.rst:84 +#: ../../automation/cloud-init.rst:85 msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." msgstr "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." -#: ../../automation/cloud-init.rst:88 +#: ../../automation/cloud-init.rst:89 msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." msgstr "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." @@ -640,23 +1242,23 @@ msgstr "The default file looks like this:" msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below." msgstr "The easiest way to configure the system via user-data is the Cloud-config syntax described below." -#: ../../automation/vyos-api.rst:324 +#: ../../automation/vyos-api.rst:357 msgid "The endpoint ``/config-file`` is to save or load a configuration." msgstr "The endpoint ``/config-file`` is to save or load a configuration." -#: ../../automation/cloud-init.rst:156 +#: ../../automation/cloud-init.rst:160 msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." msgstr "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." -#: ../../automation/cloud-init.rst:136 +#: ../../automation/cloud-init.rst:140 msgid "The following example shows how to execute commands after the initial configuration." msgstr "The following example shows how to execute commands after the initial configuration." -#: ../../automation/cloud-init.rst:74 +#: ../../automation/cloud-init.rst:75 msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." msgstr "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." -#: ../../automation/cloud-init.rst:197 +#: ../../automation/cloud-init.rst:201 msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." msgstr "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." @@ -664,7 +1266,7 @@ msgstr "The seed.iso file can be attached to the virtual machine. As an example, msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." msgstr "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." -#: ../../automation/cloud-init.rst:109 +#: ../../automation/cloud-init.rst:113 msgid "These are the VyOS defaults and fallbacks." msgstr "These are the VyOS defaults and fallbacks." @@ -676,11 +1278,11 @@ msgstr "This section needs improvements, examples and explanations." msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." msgstr "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." -#: ../../automation/vyos-api.rst:360 +#: ../../automation/vyos-api.rst:393 msgid "To Load a configuration file." msgstr "To Load a configuration file." -#: ../../automation/vyos-api.rst:186 +#: ../../automation/vyos-api.rst:218 msgid "To add or delete an image, use the ``/image`` endpoint." msgstr "To add or delete an image, use the ``/image`` endpoint." @@ -688,6 +1290,10 @@ msgstr "To add or delete an image, use the ``/image`` endpoint." msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" msgstr "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" +#: ../../automation/vyos-api.rst:128 +msgid "To check existence of a configuration path, use the ``exists`` operation." +msgstr "To check existence of a configuration path, use the ``exists`` operation." + #: ../../automation/vyos-api.rst:48 msgid "To get the whole configuration, pass an empty list to the ``path`` field" msgstr "To get the whole configuration, pass an empty list to the ``path`` field" @@ -696,7 +1302,7 @@ msgstr "To get the whole configuration, pass an empty list to the ``path`` field msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." msgstr "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." -#: ../../automation/vyos-api.rst:149 +#: ../../automation/vyos-api.rst:181 msgid "To initiate a reboot use the ``reboot`` endpoint." msgstr "To initiate a reboot use the ``reboot`` endpoint." @@ -708,14 +1314,23 @@ msgstr "To make sure that a script is not accidentally called without the ``vyat msgid "To only get a part of the configuration, for example ``system syslog``." msgstr "To only get a part of the configuration, for example ``system syslog``." -#: ../../automation/vyos-api.rst:167 +#: ../../automation/vyos-api.rst:199 msgid "To power off the system use the ``poweroff`` endpoint." msgstr "To power off the system use the ``poweroff`` endpoint." -#: ../../automation/cloud-init.rst:223 +#: ../../automation/cloud-init.rst:226 +#: ../../automation/terraform/terraformAWS.rst:264 +#: ../../automation/terraform/terraformGoogle.rst:342 msgid "Troubleshooting" msgstr "Troubleshooting" +#: ../../automation/terraform/terraformAWS.rst:91 +#: ../../automation/terraform/terraformAZ.rst:66 +#: ../../automation/terraform/terraformGoogle.rst:90 +#: ../../automation/terraform/terraformvSphere.rst:65 +msgid "Type the commands on your Terrafom instance:" +msgstr "Type the commands on your Terrafom instance:" + #: ../../automation/command-scripting.rst:39 msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." msgstr "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." @@ -725,10 +1340,14 @@ msgid "User-data" msgstr "User-data" #: ../../automation/cloud-init.rst:28 +msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." + +#: ../../automation/cloud-init.rst:28 msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." -#: ../../automation/vyos-pyvyos.rst:35 +#: ../../automation/vyos-pyvyos.rst:43 msgid "Using API Response Class" msgstr "Using API Response Class" @@ -736,18 +1355,26 @@ msgstr "Using API Response Class" msgid "Using PyVyOS" msgstr "Using PyVyOS" -#: ../../automation/cloud-init.rst:373 +#: ../../automation/vyos-pyvyos.rst:73 +msgid "Using pyvyos" +msgstr "Using pyvyos" + +#: ../../automation/cloud-init.rst:376 msgid "VM ID: in this example, VM ID used is 555." msgstr "VM ID: in this example, VM ID used is 555." -#: ../../automation/cloud-init.rst:381 +#: ../../automation/cloud-init.rst:384 msgid "VM Resources: these parameters can be modified as needed." msgstr "VM Resources: these parameters can be modified as needed." -#: ../../automation/cloud-init.rst:375 +#: ../../automation/cloud-init.rst:378 msgid "VM Storage: ``local`` volume is used." msgstr "VM Storage: ``local`` volume is used." +#: ../../automation/vyos-terraform.rst:991 +msgid "Vsphere" +msgstr "Vsphere" + #: ../../automation/vyos-api.rst:7 msgid "VyOS API" msgstr "VyOS API" @@ -756,7 +1383,11 @@ msgstr "VyOS API" msgid "VyOS Automation" msgstr "VyOS Automation" -#: ../../automation/cloud-init.rst:418 +#: ../../automation/terraform/index.rst:3 +msgid "VyOS Terraform" +msgstr "VyOS Terraform" + +#: ../../automation/cloud-init.rst:421 msgid "VyOS `cloud-init-docs`_." msgstr "VyOS `cloud-init-docs`_." @@ -764,7 +1395,7 @@ msgstr "VyOS `cloud-init-docs`_." msgid "VyOS cloud-init" msgstr "VyOS cloud-init" -#: ../../automation/cloud-init.rst:246 +#: ../../automation/cloud-init.rst:249 msgid "VyOS configuration commands are defined in user-data file." msgstr "VyOS configuration commands are defined in user-data file." @@ -784,6 +1415,18 @@ msgstr "VyOS supports configuration via ansible. Need to install ``ansible`` and msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." msgstr "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." +#: ../../automation/vyos-terraform.rst:8 +msgid "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" +msgstr "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" + +#: ../../automation/terraform/terraformvyos.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." + +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." + #: ../../automation/command-scripting.rst:8 msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts." msgstr "VyOS supports executing configuration and operational commands non-interactively from shell scripts." @@ -796,7 +1439,7 @@ msgstr "VyOS supports op-mode and configuration via salt_." msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." msgstr "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." -#: ../../automation/cloud-init.rst:122 +#: ../../automation/cloud-init.rst:126 msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." msgstr "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." @@ -804,7 +1447,7 @@ msgstr "VyOS supports the execution of operational commands and linux commands a msgid "We need 2 files, commands.conf and script itself." msgstr "We need 2 files, commands.conf and script itself." -#: ../../automation/cloud-init.rst:184 +#: ../../automation/cloud-init.rst:188 msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." msgstr "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." @@ -816,6 +1459,34 @@ msgstr "Will return:" msgid "With the ``retrieve`` endpoint you get parts or the whole configuration." msgstr "With the ``retrieve`` endpoint you get parts or the whole configuration." +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAWS.rst:40 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/vyos-terraform.rst:300 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." + +#: ../../automation/vyos-terraform.rst:743 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." + #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and support op-mode data:" msgstr "Without proxy it requires VyOS minion configuration and support op-mode data:" @@ -828,27 +1499,31 @@ msgstr "Without proxy it requires VyOS minion configuration and supports op-mode msgid "You can install PyVyOS using pip:" msgstr "You can install PyVyOS using pip:" -#: ../../automation/vyos-api.rst:267 +#: ../../automation/vyos-pyvyos.rst:25 +msgid "You can install pyvyos using pip:" +msgstr "You can install pyvyos using pip:" + +#: ../../automation/vyos-api.rst:300 msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." msgstr "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." -#: ../../automation/vyos-api.rst:286 +#: ../../automation/vyos-api.rst:319 msgid "``delete`` a single command" msgstr "``delete`` a single command" -#: ../../automation/cloud-init.rst:383 +#: ../../automation/cloud-init.rst:386 msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" msgstr "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" -#: ../../automation/vyos-api.rst:270 +#: ../../automation/vyos-api.rst:303 msgid "``set`` a single command" msgstr "``set`` a single command" -#: ../../automation/cloud-init.rst:55 +#: ../../automation/cloud-init.rst:56 msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." msgstr "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." -#: ../../automation/cloud-init.rst:112 +#: ../../automation/cloud-init.rst:116 msgid "``vyos``/``vyos`` credentials if no others specified by data source." msgstr "``vyos``/``vyos`` credentials if no others specified by data source." @@ -856,19 +1531,39 @@ msgstr "``vyos``/``vyos`` credentials if no others specified by data source." msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." msgstr "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." -#: ../../automation/vyos-api.rst:188 +#: ../../automation/vyos-pyvyos.rst:12 +msgid "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." +msgstr "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." + +#: ../../automation/vyos-pyvyos.rst:15 +msgid "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." +msgstr "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." + +#: ../../automation/vyos-pyvyos.rst:17 +msgid "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." +msgstr "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." + +#: ../../automation/vyos-api.rst:220 msgid "add an image" msgstr "add an image" +#: ../../automation/terraform/terraformAWS.rst:560 +msgid "all" +msgstr "all" + +#: ../../automation/terraform/terraformAWS.rst:478 +#: ../../automation/terraform/terraformAZ.rst:428 +#: ../../automation/terraform/terraformGoogle.rst:653 +#: ../../automation/terraform/terraformvSphere.rst:340 #: ../../automation/vyos-ansible.rst:26 msgid "ansible.cfg" msgstr "ansible.cfg" -#: ../../automation/cloud-init.rst:61 +#: ../../automation/cloud-init.rst:62 msgid "cloud-config file format" msgstr "cloud-config file format" -#: ../../automation/cloud-init.rst:229 +#: ../../automation/cloud-init.rst:232 msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" @@ -876,10 +1571,21 @@ msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in msgid "commands.txt" msgstr "commands.txt" -#: ../../automation/vyos-api.rst:205 +#: ../../automation/vyos-api.rst:237 msgid "delete an image, for example ``1.3-rolling-202006070117``" msgstr "delete an image, for example ``1.3-rolling-202006070117``" +#: ../../automation/terraform/terraformGoogle.rst:19 +msgid "google cloud" +msgstr "google cloud" + +#: ../../automation/terraform/terraformAWS.rst:528 +#: ../../automation/terraform/terraformAZ.rst:470 +#: ../../automation/terraform/terraformGoogle.rst:693 +#: ../../automation/terraform/terraformvSphere.rst:381 +msgid "group_vars/all" +msgstr "group_vars/all" + #: ../../automation/vyos-ansible.rst:42 msgid "hosts" msgstr "hosts" @@ -892,18 +1598,90 @@ msgstr "id_rsa_docker.pub. Needs to declare only public key exactly." msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." msgstr "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." +#: ../../automation/terraform/terraformAWS.rst:495 +#: ../../automation/terraform/terraformAZ.rst:438 +#: ../../automation/terraform/terraformGoogle.rst:662 +#: ../../automation/terraform/terraformvSphere.rst:350 +msgid "instance.yml" +msgstr "instance.yml" + +#: ../../automation/vyos-terraform.rst:313 +#: ../../automation/vyos-terraform.rst:758 +msgid "main.tf" +msgstr "main.tf" + #: ../../automation/vyos-ansible.rst:56 msgid "main.yml" msgstr "main.yml" +#: ../../automation/terraform/terraformGoogle.rst:84 +msgid "mykey.json you have to get using step 2 of the google cloud" +msgstr "mykey.json you have to get using step 2 of the google cloud" + +#: ../../automation/terraform/terraformAWS.rst:488 +msgid "mykey.pem" +msgstr "mykey.pem" + +#: ../../automation/terraform/terraformAWS.rst:85 +msgid "mykey.pem you have to get using step 1.2" +msgstr "mykey.pem you have to get using step 1.2" + +#: ../../automation/vyos-pyvyos.rst:6 +msgid "pyvyos" +msgstr "pyvyos" + +#: ../../automation/vyos-pyvyos.rst:8 +msgid "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." +msgstr "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." + #: ../../automation/vyos-salt.rst:141 msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" msgstr "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" #: ../../automation/index.rst:7 +#: ../../automation/terraform/index.rst:7 msgid "startup scripts" msgstr "startup scripts" +#: ../../automation/terraform/terraformAWS.rst:452 +#: ../../automation/terraform/terraformAZ.rst:405 +#: ../../automation/terraform/terraformGoogle.rst:623 +#: ../../automation/terraform/terraformvSphere.rst:307 +msgid "terraform.tfvars" +msgstr "terraform.tfvars" + #: ../../automation/vyos-salt.rst:131 msgid "top.sls" msgstr "top.sls" + +#: ../../automation/terraform/terraformvSphere.rst:20 +msgid "vSphere" +msgstr "vSphere" + +#: ../../automation/terraform/terraformAWS.rst:415 +#: ../../automation/terraform/terraformAZ.rst:298 +#: ../../automation/terraform/terraformGoogle.rst:538 +#: ../../automation/terraform/terraformvSphere.rst:239 +msgid "var.tf" +msgstr "var.tf" + +#: ../../automation/vyos-terraform.rst:516 +#: ../../automation/vyos-terraform.rst:899 +msgid "variables.tf" +msgstr "variables.tf" + +#: ../../automation/terraform/terraformAWS.rst:439 +#: ../../automation/terraform/terraformvSphere.rst:223 +msgid "versions.tf" +msgstr "versions.tf" + +#: ../../automation/vyos-api.rst:145 +msgid "versus a non-existent path:" +msgstr "versus a non-existent path:" + +#: ../../automation/terraform/terraformAWS.rst:300 +#: ../../automation/terraform/terraformAZ.rst:95 +#: ../../automation/terraform/terraformGoogle.rst:377 +#: ../../automation/terraform/terraformvSphere.rst:98 +msgid "vyos.tf" +msgstr "vyos.tf" diff --git a/docs/_locale/ja/cli.pot b/docs/_locale/ja/cli.pot index 09dede28..66a82fac 100644 --- a/docs/_locale/ja/cli.pot +++ b/docs/_locale/ja/cli.pot @@ -28,23 +28,23 @@ msgstr "**Working configuration** is the one that is currently being modified in msgid "A VyOS system has three major types of configurations:" msgstr "A VyOS system has three major types of configurations:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Access opmode from config mode" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Add comment as an annotation to a configuration node." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "All changes in the working config will thus be lost." @@ -52,7 +52,7 @@ msgstr "All changes in the working config will thus be lost." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." @@ -72,11 +72,11 @@ msgstr "By default, the configuration is displayed in a hierarchy like the above msgid "Command Line Interface" msgstr "Command Line Interface" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Compare configurations" @@ -92,11 +92,11 @@ msgstr "Configuration Overview" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copy a configuration element." @@ -104,7 +104,7 @@ msgstr "Copy a configuration element." msgid "Editing the configuration" msgstr "Editing the configuration" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Example:" @@ -124,11 +124,11 @@ msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ` msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Get a collection of all the set commands required which led to the running configuration." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Local Archive" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Managing configurations" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." @@ -164,31 +164,31 @@ msgstr "Operational mode allows for commands to perform operational system tasks msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Remote Archive" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Rename a configuration element." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restore Default" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Rollback Changes" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Rollback to revision N (currently requires reboot)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Saving and loading manually" @@ -200,11 +200,11 @@ msgstr "See the configuration section of this document for more information on c msgid "Seeing and navigating the configuration" msgstr "Seeing and navigating the configuration" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Show commit revision difference." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" @@ -228,11 +228,15 @@ msgstr "The :cfgcmd:`show` command within configuration mode will show the worki msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:656 +msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." +msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." + +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." @@ -248,11 +252,11 @@ msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd: msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "The number of revisions don't affect the commit-archive." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." @@ -264,7 +268,7 @@ msgstr "These commands are also relative to the level you are inside and only re msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``." @@ -276,7 +280,7 @@ msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this a msgid "To enter configuration mode use the ``configure`` command:" msgstr "To enter configuration mode use the ``configure`` command:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." @@ -284,11 +288,11 @@ msgstr "To remove an existing comment from your current configuration, specify a msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." @@ -296,15 +300,15 @@ msgstr "Use this command to preserve configuration changes upon reboot. By defau msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Use this command to set the value of a parameter or to create a new element." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use this command to spot what the differences are between different configurations." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "View all existing revisions on the local system." @@ -320,15 +324,19 @@ msgstr "View the current active configuration in JSON format." msgid "View the current active configuration in readable JSON format." msgstr "View the current active configuration in readable JSON format." +#: ../../cli.rst:855 +msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." +msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." + #: ../../cli.rst:852 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS lets you compare different configurations." @@ -340,6 +348,10 @@ msgstr "VyOS makes use of a unified configuration file for the entire system's c msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +#: ../../cli.rst:561 +msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." + #: ../../cli.rst:340 msgid "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." msgstr "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." @@ -348,7 +360,7 @@ msgstr "When entering the configuration mode you are navigating inside a tree st msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "When inside configuration mode you are not directly able to execute operational commands." @@ -356,7 +368,7 @@ msgstr "When inside configuration mode you are not directly able to execute oper msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" @@ -372,15 +384,15 @@ msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "You can also rename config subtrees:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." @@ -388,19 +400,23 @@ msgstr "You can rollback configuration changes using the rollback command. This msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." @@ -408,19 +424,19 @@ msgstr "You will be asked if you want to continue. If you accept, you will have msgid "``b`` will scroll back one page" msgstr "``b`` will scroll back one page" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user>:<passwd>@<host>/<dir>``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -436,11 +452,11 @@ msgstr "``q`` key can be used to cancel output" msgid "``return`` will scroll down one line" msgstr "``return`` will scroll down one line" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" @@ -448,7 +464,7 @@ msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" msgid "``space`` will scroll down one page" msgstr "``space`` will scroll down one page" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host>/<dir>``" diff --git a/docs/_locale/ja/configexamples.pot b/docs/_locale/ja/configexamples.pot index f577a4de..b9bec753 100644 --- a/docs/_locale/ja/configexamples.pot +++ b/docs/_locale/ja/configexamples.pot @@ -272,7 +272,7 @@ msgstr "A brief excursion into VRFs: This has been one of the longest-standing f msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." msgstr "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." -#: ../../configexamples/index.rst:37 +#: ../../configexamples/index.rst:38 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." msgstr "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." @@ -318,6 +318,14 @@ msgstr "Active Directory on Windows server" msgid "Add (temporary) default route" msgstr "Add (temporary) default route" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -351,6 +359,10 @@ msgid "After configured all the VRFs involved in this topology we take a deeper msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on msgid "Allow DHCPv6 packets for router" msgstr "Allow DHCPv6 packets for router" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -572,6 +592,10 @@ msgid "Basic Setup (via console)" msgstr "Basic Setup (via console)" #: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + +#: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -656,11 +680,19 @@ msgstr "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." msgstr "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." +#: ../../configexamples/lac-lns.rst:96 +msgid "Client" +msgstr "Client" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:94 msgid "Client configuration" msgstr "Client configuration" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -704,7 +736,7 @@ msgstr "Configuration 'dcsp' and shaper using QoS" msgid "Configuration Blueprints" msgstr "Configuration Blueprints" -#: ../../configexamples/index.rst:30 +#: ../../configexamples/index.rst:31 msgid "Configuration Blueprints (autotest)" msgstr "Configuration Blueprints (autotest)" @@ -717,6 +749,7 @@ msgid "Configuration of basic firewall in one site, in order to:" msgstr "Configuration of basic firewall in one site, in order to:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113 +#: ../../configexamples/lac-lns.rst:29 #: ../../configexamples/pppoe-ipv6-basic.rst:26 msgid "Configurations" msgstr "Configurations" @@ -885,7 +918,7 @@ msgstr "Dynamic routing used between CE and PE nodes and eBGP peering establishe msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." msgstr "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." -#: ../../configexamples/index.rst:34 +#: ../../configexamples/index.rst:35 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." msgstr "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." @@ -1008,6 +1041,10 @@ msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1213,6 +1250,10 @@ msgid "In the end, you will end up with something like this config. I took out e msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." #: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + +#: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1252,6 +1293,14 @@ msgstr "In this example two LAN interfaces exist in different subnets instead of msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." msgstr "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." +#: ../../configexamples/lac-lns.rst:17 +msgid "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." +msgstr "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." + +#: ../../configexamples/lac-lns.rst:98 +msgid "In this lab we use Windows PPPoE client." +msgstr "In this lab we use Windows PPPoE client." + #: ../../configexamples/zone-policy.rst:50 msgid "Inbound WAN connect to DMZ host." msgstr "Inbound WAN connect to DMZ host." @@ -1265,6 +1314,14 @@ msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Information about prefix-sid and label-operation from VyOS" #: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + +#: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1345,6 +1402,10 @@ msgstr "L3VPN configuration parameters table:" msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" msgstr "L3VPN for Hub-and-Spoke connectivity with VyOS" +#: ../../configexamples/lac-lns.rst:32 +msgid "LAC" +msgstr "LAC" + #: ../../configexamples/zone-policy.rst:392 msgid "LAN, WAN, DMZ, local and TUN (tunnel)" msgstr "LAN, WAN, DMZ, local and TUN (tunnel)" @@ -1389,6 +1450,10 @@ msgstr "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." msgid "LAN can access DMZ resources." msgstr "LAN can access DMZ resources." +#: ../../configexamples/lac-lns.rst:72 +msgid "LNS" +msgstr "LNS" + #: ../../configexamples/l3vpn-hub-and-spoke.rst:551 msgid "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" @@ -1398,6 +1463,10 @@ msgid "Let’s say we have a requirement to have multiple networks." msgstr "Let’s say we have a requirement to have multiple networks." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1433,9 +1502,22 @@ msgid "Masquerade Traffic originating from 10.200.201.0/24 that is heading out t msgstr "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:254 +#: ../../configexamples/lac-lns.rst:106 msgid "Monitoring" msgstr "Monitoring" +#: ../../configexamples/lac-lns.rst:117 +msgid "Monitoring on LAC side" +msgstr "Monitoring on LAC side" + +#: ../../configexamples/lac-lns.rst:108 +msgid "Monitoring on LNS side" +msgstr "Monitoring on LNS side" + +#: ../../configexamples/lac-lns.rst:140 +msgid "Monitoring on RADIUS Server side" +msgstr "Monitoring on RADIUS Server side" + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162 msgid "Multiple LAN/DMZ Setup" msgstr "Multiple LAN/DMZ Setup" @@ -1456,6 +1538,7 @@ msgstr "Native IPv4 and IPv6" msgid "Network Cabling" msgstr "Network Cabling" +#: ../../configexamples/lac-lns.rst:21 #: ../../configexamples/pppoe-ipv6-basic.rst:18 msgid "Network Topology" msgstr "Network Topology" @@ -1463,6 +1546,7 @@ msgstr "Network Topology" #: ../../configexamples/ansible.rst:-1 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:-1 #: ../../configexamples/l3vpn-hub-and-spoke.rst:-1 +#: ../../configexamples/lac-lns.rst:-1 #: ../../configexamples/nmp.rst:-1 #: ../../configexamples/pppoe-ipv6-basic.rst:-1 #: ../../configexamples/qos.rst:-1 @@ -1655,6 +1739,10 @@ msgstr "PPPoE IPv6 Basic Setup for Home Network" msgid "PPPoE Setup" msgstr "PPPoE Setup" +#: ../../configexamples/lac-lns.rst:7 +msgid "PPPoE over L2TP" +msgstr "PPPoE over L2TP" + #: ../../configexamples/segment-routing-isis.rst:255 msgid "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" msgstr "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" @@ -1692,6 +1780,10 @@ msgid "Priorities" msgstr "Priorities" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2046,7 +2138,7 @@ msgstr "The lab I built is using a VRF (called **mgmt**) to provide out-of-band msgid "The lab was built using EVE-NG." msgstr "The lab was built using EVE-NG." -#: ../../configexamples/index.rst:32 +#: ../../configexamples/index.rst:33 msgid "The next pages contains automatic full tested configuration examples." msgstr "The next pages contains automatic full tested configuration examples." @@ -2054,7 +2146,7 @@ msgstr "The next pages contains automatic full tested configuration examples." msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." msgstr "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." -#: ../../configexamples/index.rst:40 +#: ../../configexamples/index.rst:41 msgid "The process will do the following steps:" msgstr "The process will do the following steps:" @@ -2123,6 +2215,10 @@ msgid "This chapter contains various configuration examples:" msgstr "This chapter contains various configuration examples:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2130,6 +2226,10 @@ msgstr "This configuration example and the requirments consists on:" msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." msgstr "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." +#: ../../configexamples/lac-lns.rst:9 +msgid "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." +msgstr "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." + #: ../../configexamples/pppoe-ipv6-basic.rst:9 msgid "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." msgstr "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." @@ -2166,6 +2266,10 @@ msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to A msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." @@ -2210,6 +2314,10 @@ msgstr "This section describes verification commands for MPLS/BGP/LDP protocols msgid "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." msgstr "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." +#: ../../configexamples/lac-lns.rst:91 +msgid "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." +msgstr "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." + #: ../../configexamples/autotest/Wireguard/Wireguard.rst:10 msgid "This simple structure show how to connect two offices. One remote branch and the central office." msgstr "This simple structure show how to connect two offices. One remote branch and the central office." @@ -2580,6 +2688,10 @@ msgstr "When you have both routers up, you should be able to establish a connect msgid "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" msgstr "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" +#: ../../configexamples/lac-lns.rst:-1 +msgid "Window PPPoE Client Configuration" +msgstr "Window PPPoE Client Configuration" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:13 msgid "Windows Server 2019 with a running Active Directory" msgstr "Windows Server 2019 with a running Active Directory" @@ -2713,15 +2825,15 @@ msgstr "compute3 - Port 11 of each switch" msgid "compute3 (VMware ESXi 6.5)" msgstr "compute3 (VMware ESXi 6.5)" -#: ../../configexamples/index.rst:43 +#: ../../configexamples/index.rst:44 msgid "configure each host in the lab" msgstr "configure each host in the lab" -#: ../../configexamples/index.rst:42 +#: ../../configexamples/index.rst:43 msgid "create the lab on a eve-ng server" msgstr "create the lab on a eve-ng server" -#: ../../configexamples/index.rst:44 +#: ../../configexamples/index.rst:45 msgid "do some defined tests" msgstr "do some defined tests" @@ -2742,7 +2854,7 @@ msgstr "extended community and remote label of specific destination" msgid "first the PCA" msgstr "first the PCA" -#: ../../configexamples/index.rst:46 +#: ../../configexamples/index.rst:47 msgid "generate the documentation and include files" msgstr "generate the documentation and include files" @@ -2754,7 +2866,7 @@ msgstr "green uses local routing table id and VNI 4000" msgid "information between PE and CE:" msgstr "information between PE and CE:" -#: ../../configexamples/index.rst:45 +#: ../../configexamples/index.rst:46 msgid "optional do an upgrade to a higher version and do step 3 again." msgstr "optional do an upgrade to a higher version and do step 3 again." @@ -2770,7 +2882,7 @@ msgstr "router2 (Random 1RU machine with 4 NICs)" msgid "save the output to a file and import it in nearly all openvpn clients." msgstr "save the output to a file and import it in nearly all openvpn clients." -#: ../../configexamples/index.rst:47 +#: ../../configexamples/index.rst:48 msgid "shutdown and destroy the lab, if there is no error" msgstr "shutdown and destroy the lab, if there is no error" diff --git a/docs/_locale/ja/configuration.pot b/docs/_locale/ja/configuration.pot index cf365560..3518562b 100644 --- a/docs/_locale/ja/configuration.pot +++ b/docs/_locale/ja/configuration.pot @@ -76,12 +76,20 @@ msgstr "**9** - NetFlow version 9 (default)" msgid "**AS path length check**" msgstr "**AS path length check**" +#: ../../configuration/service/dhcp-server.rst:175 +msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." +msgstr "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." + +#: ../../configuration/service/dhcp-server.rst:178 +msgid "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." +msgstr "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." + #: ../../configuration/protocols/bgp.rst:106 msgid "**Already-selected external check**" msgstr "**Already-selected external check**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Applies to:** Inbound traffic." @@ -97,6 +105,7 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Applies to:** Outbound traffic." @@ -168,9 +177,11 @@ msgstr "**Documentation under development**" msgid "**Ethernet (protocol, destination address or source address)**" msgstr "**Ethernet (protocol, destination address or source address)**" -#: ../../configuration/service/dhcp-server.rst:200 -#: ../../configuration/service/dhcp-server.rst:587 -#: ../../configuration/service/dhcp-server.rst:626 +#: ../../configuration/service/dhcp-server.rst:63 +#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:646 +#: ../../configuration/service/dhcp-server.rst:687 msgid "**Example:**" msgstr "**Example:**" @@ -269,11 +280,11 @@ msgstr "**Input**: stage where traffic destined for the router itself can be fil msgid "**Interface name**" msgstr "**Interface name**" -#: ../../configuration/vpn/site2site_ipsec.rst:303 +#: ../../configuration/vpn/site2site_ipsec.rst:306 msgid "**LEFT**" msgstr "**LEFT**" -#: ../../configuration/vpn/site2site_ipsec.rst:287 +#: ../../configuration/vpn/site2site_ipsec.rst:290 msgid "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" msgstr "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" @@ -309,11 +320,11 @@ msgstr "**MED check**" msgid "**Multi-path check**" msgstr "**Multi-path check**" -#: ../../configuration/protocols/bgp.rst:1193 +#: ../../configuration/protocols/bgp.rst:1215 msgid "**Node1:**" msgstr "**Node1:**" -#: ../../configuration/protocols/bgp.rst:1221 +#: ../../configuration/protocols/bgp.rst:1243 msgid "**Node2:**" msgstr "**Node2:**" @@ -326,10 +337,10 @@ msgid "**Node 1**" msgstr "**Node 1**" #: ../../configuration/protocols/babel.rst:192 -#: ../../configuration/protocols/bgp.rst:1103 -#: ../../configuration/protocols/bgp.rst:1130 -#: ../../configuration/protocols/bgp.rst:1148 -#: ../../configuration/protocols/bgp.rst:1176 +#: ../../configuration/protocols/bgp.rst:1125 +#: ../../configuration/protocols/bgp.rst:1152 +#: ../../configuration/protocols/bgp.rst:1170 +#: ../../configuration/protocols/bgp.rst:1198 #: ../../configuration/protocols/isis.rst:341 #: ../../configuration/protocols/isis.rst:416 #: ../../configuration/protocols/isis.rst:457 @@ -350,10 +361,10 @@ msgid "**Node 2**" msgstr "**Node 2**" #: ../../configuration/protocols/babel.rst:202 -#: ../../configuration/protocols/bgp.rst:1114 #: ../../configuration/protocols/bgp.rst:1136 -#: ../../configuration/protocols/bgp.rst:1160 +#: ../../configuration/protocols/bgp.rst:1158 #: ../../configuration/protocols/bgp.rst:1182 +#: ../../configuration/protocols/bgp.rst:1204 #: ../../configuration/protocols/isis.rst:352 #: ../../configuration/protocols/isis.rst:432 #: ../../configuration/protocols/isis.rst:511 @@ -384,6 +395,10 @@ msgid "**Output**: stage where traffic that is originated by the router itself c msgstr "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:65 +msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" @@ -411,7 +426,7 @@ msgstr "**Prerouting**: several actions can be done in this stage, and currently msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" -#: ../../configuration/service/dhcp-server.rst:391 +#: ../../configuration/service/dhcp-server.rst:448 msgid "**Primary**" msgstr "**Primary**" @@ -423,6 +438,10 @@ msgstr "**Queueing discipline** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Queueing discipline:** Deficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Queueing discipline:** Generalized Random Early Drop." @@ -481,11 +500,11 @@ msgstr "**RADIUS based IP pools (Framed-IP-Address)**" msgid "**RADIUS sessions management DM/CoA**" msgstr "**RADIUS sessions management DM/CoA**" -#: ../../configuration/vpn/site2site_ipsec.rst:343 +#: ../../configuration/vpn/site2site_ipsec.rst:346 msgid "**RIGHT**" msgstr "**RIGHT**" -#: ../../configuration/vpn/site2site_ipsec.rst:293 +#: ../../configuration/vpn/site2site_ipsec.rst:296 msgid "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" @@ -521,15 +540,15 @@ msgstr "**SW1**" msgid "**SW2**" msgstr "**SW2**" -#: ../../configuration/service/dhcp-server.rst:400 +#: ../../configuration/service/dhcp-server.rst:458 msgid "**Secondary**" msgstr "**Secondary**" -#: ../../configuration/vpn/ipsec.rst:261 +#: ../../configuration/vpn/ipsec.rst:265 msgid "**Setting up IPSec**" msgstr "**Setting up IPSec**" -#: ../../configuration/vpn/ipsec.rst:237 +#: ../../configuration/vpn/ipsec.rst:241 msgid "**Setting up the GRE tunnel**" msgstr "**Setting up the GRE tunnel**" @@ -566,6 +585,10 @@ msgstr "**VyOS Router:**" msgid "**Weight check**" msgstr "**Weight check**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" @@ -575,11 +598,25 @@ msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 1 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" msgstr "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" +#: ../../configuration/service/pppoe-server.rst:474 +#: ../../configuration/vpn/l2tp.rst:428 +#: ../../configuration/vpn/pptp.rst:352 +#: ../../configuration/vpn/sstp.rst:386 +msgid "**allow** - Negotiate IPv4 only if client requests (Default value)" +msgstr "**allow** - Negotiate IPv4 only if client requests (Default value)" + +#: ../../configuration/service/pppoe-server.rst:349 +#: ../../configuration/vpn/l2tp.rst:293 +#: ../../configuration/vpn/pptp.rst:217 +#: ../../configuration/vpn/sstp.rst:251 +msgid "**allow** - Negotiate IPv6 only if client requests" +msgstr "**allow** - Negotiate IPv6 only if client requests" + #: ../../configuration/container/index.rst:38 msgid "**allow-host-networks** cannot be used with **network**" msgstr "**allow-host-networks** cannot be used with **network**" -#: ../../configuration/container/index.rst:102 +#: ../../configuration/container/index.rst:107 msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" msgstr "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" @@ -595,6 +632,10 @@ msgstr "**application**: analyzes received flow data in the context of intrusion msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." msgstr "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." +#: ../../configuration/service/ids.rst:90 +msgid "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." +msgstr "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." + #: ../../configuration/protocols/ospf.rst:435 msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." @@ -603,6 +644,13 @@ msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." +#: ../../configuration/service/pppoe-server.rst:401 +#: ../../configuration/vpn/l2tp.rst:345 +#: ../../configuration/vpn/pptp.rst:269 +#: ../../configuration/vpn/sstp.rst:303 +msgid "**calling-sid** - Calculate interface identifier from calling-station-id." +msgstr "**calling-sid** - Calculate interface identifier from calling-station-id." + #: ../../configuration/protocols/ospf.rst:121 msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." msgstr "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." @@ -619,7 +667,28 @@ msgstr "**default** – this area will be used for shortcutting only if ABR doe msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." msgstr "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." -#: ../../configuration/vpn/sstp.rst:199 +#: ../../configuration/service/pppoe-server.rst:566 +msgid "**deny**: Deny second session authorization." +msgstr "**deny**: Deny second session authorization." + +#: ../../configuration/service/pppoe-server.rst:475 +#: ../../configuration/vpn/l2tp.rst:429 +#: ../../configuration/vpn/pptp.rst:353 +#: ../../configuration/vpn/sstp.rst:387 +msgid "**deny** - Do not negotiate IPv4" +msgstr "**deny** - Do not negotiate IPv4" + +#: ../../configuration/service/pppoe-server.rst:350 +#: ../../configuration/vpn/l2tp.rst:294 +#: ../../configuration/vpn/pptp.rst:218 +#: ../../configuration/vpn/sstp.rst:252 +msgid "**deny** - Do not negotiate IPv6 (default value)" +msgstr "**deny** - Do not negotiate IPv6 (default value)" + +#: ../../configuration/service/pppoe-server.rst:507 +#: ../../configuration/vpn/l2tp.rst:461 +#: ../../configuration/vpn/pptp.rst:385 +#: ../../configuration/vpn/sstp.rst:419 msgid "**deny** - deny mppe" msgstr "**deny** - deny mppe" @@ -635,6 +704,10 @@ msgstr "**dhcp** interface address is received by DHCP from a DHCP server on thi msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." +#: ../../configuration/service/pppoe-server.rst:565 +msgid "**disable**: Disables session control." +msgstr "**disable**: Disables session control." + #: ../../configuration/service/dhcp-relay.rst:75 msgid "**discard:** Received packets which already contain relay information will be discarded." msgstr "**discard:** Received packets which already contain relay information will be discarded." @@ -667,6 +740,17 @@ msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It co msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." +#: ../../configuration/service/pppoe-server.rst:400 +#: ../../configuration/vpn/l2tp.rst:344 +#: ../../configuration/vpn/pptp.rst:268 +#: ../../configuration/vpn/sstp.rst:302 +msgid "**ipv4-addr** - Calculate interface identifier from IPv4 address." +msgstr "**ipv4-addr** - Calculate interface identifier from IPv4 address." + +#: ../../configuration/service/ipoe-server.rst:91 +msgid "**l2**: It means that clients are on same network where interface is.**(default)**" +msgstr "**l2**: It means that clients are on same network where interface is.**(default)**" + #: ../../configuration/interfaces/bonding.rst:161 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" msgstr "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" @@ -707,10 +791,18 @@ msgstr "**level-2-only** - Act as an area (Level 2) router only." msgid "**level-2-only** - Level-2 only adjacencies are formed" msgstr "**level-2-only** - Level-2 only adjacencies are formed" -#: ../../configuration/vpn/sstp.rst:105 +#: ../../configuration/service/ipoe-server.rst:65 +#: ../../configuration/service/pppoe-server.rst:43 +#: ../../configuration/vpn/l2tp.rst:31 +#: ../../configuration/vpn/pptp.rst:32 +#: ../../configuration/vpn/sstp.rst:58 msgid "**local**: All authentication queries are handled locally." msgstr "**local**: All authentication queries are handled locally." +#: ../../configuration/service/ipoe-server.rst:93 +msgid "**local**: It means that client are behind some router." +msgstr "**local**: It means that client are behind some router." + #: ../../configuration/interfaces/wireguard.rst:140 msgid "**local side - commands**" msgstr "**local side - commands**" @@ -719,34 +811,55 @@ msgstr "**local side - commands**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**narrow** - Use old style of TLVs with narrow metric." -#: ../../configuration/container/index.rst:119 +#: ../../configuration/container/index.rst:124 msgid "**net-admin**: Network operations (interface, firewall, routing tables)" msgstr "**net-admin**: Network operations (interface, firewall, routing tables)" -#: ../../configuration/container/index.rst:120 +#: ../../configuration/container/index.rst:125 msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" msgstr "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" -#: ../../configuration/container/index.rst:121 +#: ../../configuration/container/index.rst:126 msgid "**net-raw**: Permission to create raw network sockets" msgstr "**net-raw**: Permission to create raw network sockets" -#: ../../configuration/container/index.rst:100 +#: ../../configuration/container/index.rst:105 msgid "**no**: Do not restart containers on exit" msgstr "**no**: Do not restart containers on exit" +#: ../../configuration/service/ipoe-server.rst:66 +msgid "**noauth**: Authentication disabled" +msgstr "**noauth**: Authentication disabled" + +#: ../../configuration/service/pppoe-server.rst:44 +#: ../../configuration/vpn/pptp.rst:33 +msgid "**noauth**: Authentication disabled." +msgstr "**noauth**: Authentication disabled." + #: ../../configuration/service/dns.rst:66 msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." -#: ../../configuration/container/index.rst:101 +#: ../../configuration/container/index.rst:106 msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires `<value>`." +msgstr "**order** Rule order. Requires `<value>`." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." @@ -755,10 +868,35 @@ msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It config msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." -#: ../../configuration/vpn/sstp.rst:198 +#: ../../configuration/service/pppoe-server.rst:473 +#: ../../configuration/vpn/l2tp.rst:427 +#: ../../configuration/vpn/pptp.rst:351 +#: ../../configuration/vpn/sstp.rst:385 +msgid "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" + +#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/vpn/l2tp.rst:292 +#: ../../configuration/vpn/pptp.rst:216 +#: ../../configuration/vpn/sstp.rst:250 +msgid "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" + +#: ../../configuration/vpn/sstp.rst:204 msgid "**prefer** - ask client for mppe, if it rejects don't fail" msgstr "**prefer** - ask client for mppe, if it rejects don't fail" +#: ../../configuration/service/pppoe-server.rst:506 +#: ../../configuration/vpn/l2tp.rst:460 +#: ../../configuration/vpn/pptp.rst:384 +#: ../../configuration/vpn/sstp.rst:418 +msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" + +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." @@ -771,39 +909,99 @@ msgstr "**process-no-validate** In this mode the recursor acts as a \"security a msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." -#: ../../configuration/vpn/sstp.rst:103 +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + +#: ../../configuration/service/ipoe-server.rst:63 +#: ../../configuration/service/pppoe-server.rst:41 +#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/vpn/pptp.rst:30 +#: ../../configuration/vpn/sstp.rst:56 msgid "**radius**: All authentication queries are handled by a configured RADIUS server." msgstr "**radius**: All authentication queries are handled by a configured RADIUS server." +#: ../../configuration/service/pppoe-server.rst:391 +#: ../../configuration/service/pppoe-server.rst:398 +#: ../../configuration/vpn/l2tp.rst:335 +#: ../../configuration/vpn/l2tp.rst:342 +#: ../../configuration/vpn/pptp.rst:259 +#: ../../configuration/vpn/pptp.rst:266 +#: ../../configuration/vpn/sstp.rst:293 +#: ../../configuration/vpn/sstp.rst:300 +msgid "**random** - Random interface identifier for IPv6" +msgstr "**random** - Random interface identifier for IPv6" + +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires `<value>`." +msgstr "**regexp** Regular expression. Requires `<value>`." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**remote side - commands**" +#: ../../configuration/service/pppoe-server.rst:567 +msgid "**replace**: Terminate first session when second is authorized **(default)**" +msgstr "**replace**: Terminate first session when second is authorized **(default)**" + #: ../../configuration/service/dhcp-relay.rst:81 msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." -#: ../../configuration/vpn/sstp.rst:197 +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + +#: ../../configuration/service/pppoe-server.rst:472 +#: ../../configuration/vpn/l2tp.rst:426 +#: ../../configuration/vpn/pptp.rst:350 +#: ../../configuration/vpn/sstp.rst:384 +msgid "**require** - Require IPv4 negotiation" +msgstr "**require** - Require IPv4 negotiation" + +#: ../../configuration/service/pppoe-server.rst:347 +#: ../../configuration/vpn/l2tp.rst:291 +#: ../../configuration/vpn/pptp.rst:215 +#: ../../configuration/vpn/sstp.rst:249 +msgid "**require** - Require IPv6 negotiation" +msgstr "**require** - Require IPv6 negotiation" + +#: ../../configuration/service/pppoe-server.rst:505 +#: ../../configuration/vpn/l2tp.rst:459 +#: ../../configuration/vpn/pptp.rst:383 +#: ../../configuration/vpn/sstp.rst:417 msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**right**" -#: ../../configuration/container/index.rst:122 +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires `<value>`." +msgstr "**service** Service type. Requires `<value>`." + +#: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" +#: ../../configuration/service/ipoe-server.rst:99 +msgid "**shared**: Multiple clients share the same network. **(default)**" +msgstr "**shared**: Multiple clients share the same network. **(default)**" + #: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." msgstr "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." -#: ../../configuration/container/index.rst:123 +#: ../../configuration/container/index.rst:128 msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" msgstr "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" -#: ../../configuration/container/index.rst:124 +#: ../../configuration/container/index.rst:129 msgid "**sys-time**: Permission to set system clock" msgstr "**sys-time**: Permission to set system clock" @@ -819,10 +1017,25 @@ msgstr "**upstream:** The upstream network interface is the outgoing interface w msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." msgstr "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." +#: ../../configuration/service/ipoe-server.rst:100 +msgid "**vlan**: One VLAN per client." +msgstr "**vlan**: One VLAN per client." + #: ../../configuration/protocols/isis.rst:102 msgid "**wide** - Use new style of TLVs to carry wider metric." msgstr "**wide** - Use new style of TLVs to carry wider metric." +#: ../../configuration/service/pppoe-server.rst:392 +#: ../../configuration/service/pppoe-server.rst:399 +#: ../../configuration/vpn/l2tp.rst:336 +#: ../../configuration/vpn/l2tp.rst:343 +#: ../../configuration/vpn/pptp.rst:260 +#: ../../configuration/vpn/pptp.rst:267 +#: ../../configuration/vpn/sstp.rst:294 +#: ../../configuration/vpn/sstp.rst:301 +msgid "**x:x:x:x** - Specify interface identifier for IPv6" +msgstr "**x:x:x:x** - Specify interface identifier for IPv6" + #: ../../configuration/protocols/bgp.rst:143 msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." msgstr "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." @@ -887,7 +1100,7 @@ msgstr "0 if not defined, which means no refreshing." msgid "0 if not defined." msgstr "0 if not defined." -#: ../../configuration/service/dhcp-server.rst:237 +#: ../../configuration/service/dhcp-server.rst:293 #: ../../configuration/system/syslog.rst:114 #: ../../configuration/system/syslog.rst:173 #: ../../configuration/trafficpolicy/index.rst:801 @@ -950,7 +1163,7 @@ msgstr "10 - 10 MBit/s" msgid "11" msgstr "11" -#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:375 msgid "119" msgstr "119" @@ -960,11 +1173,11 @@ msgstr "119" msgid "12" msgstr "12" -#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:380 msgid "121, 249" msgstr "121, 249" -#: ../../configuration/service/dhcp-server.rst:304 +#: ../../configuration/service/dhcp-server.rst:360 #: ../../configuration/system/syslog.rst:138 #: ../../configuration/trafficpolicy/index.rst:870 msgid "13" @@ -976,7 +1189,7 @@ msgstr "13" msgid "14" msgstr "14" -#: ../../configuration/service/dhcp-server.rst:264 +#: ../../configuration/service/dhcp-server.rst:320 #: ../../configuration/system/syslog.rst:142 #: ../../configuration/trafficpolicy/index.rst:866 msgid "15" @@ -1000,7 +1213,7 @@ msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" msgid "18" msgstr "18" -#: ../../configuration/service/dhcp-server.rst:269 +#: ../../configuration/service/dhcp-server.rst:325 #: ../../configuration/system/syslog.rst:150 msgid "19" msgstr "19" @@ -1025,7 +1238,7 @@ msgstr "1: Enable DAD (default)" msgid "1 if not defined." msgstr "1 if not defined." -#: ../../configuration/service/dhcp-server.rst:243 +#: ../../configuration/service/dhcp-server.rst:299 #: ../../configuration/system/syslog.rst:116 #: ../../configuration/system/syslog.rst:178 #: ../../configuration/trafficpolicy/index.rst:799 @@ -1059,7 +1272,7 @@ msgstr "25000 - 25 GBit/s" msgid "2500 - 2.5 GBit/s" msgstr "2500 - 2.5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:329 +#: ../../configuration/service/dhcp-server.rst:385 msgid "252" msgstr "252" @@ -1087,7 +1300,7 @@ msgstr "2. Since this is the first packet, connection status of this connection, msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." -#: ../../configuration/service/dhcp-server.rst:249 +#: ../../configuration/service/dhcp-server.rst:305 #: ../../configuration/system/syslog.rst:118 #: ../../configuration/system/syslog.rst:181 #: ../../configuration/trafficpolicy/index.rst:797 @@ -1115,7 +1328,7 @@ msgstr "38" msgid "3. Add a full path to the script" msgstr "3. Add a full path to the script" -#: ../../configuration/service/dhcp-server.rst:254 +#: ../../configuration/service/dhcp-server.rst:310 #: ../../configuration/system/syslog.rst:120 #: ../../configuration/system/syslog.rst:183 #: ../../configuration/trafficpolicy/index.rst:795 @@ -1131,11 +1344,11 @@ msgstr "40000 - 40 GBit/s" msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." -#: ../../configuration/service/dhcp-server.rst:274 +#: ../../configuration/service/dhcp-server.rst:330 msgid "42" msgstr "42" -#: ../../configuration/service/dhcp-server.rst:279 +#: ../../configuration/service/dhcp-server.rst:335 msgid "44" msgstr "44" @@ -1166,7 +1379,7 @@ msgstr "50000 - 50 GBit/s" msgid "5000 - 5 GBit/s" msgstr "5000 - 5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:284 +#: ../../configuration/service/dhcp-server.rst:340 msgid "54" msgstr "54" @@ -1179,7 +1392,7 @@ msgstr "5. Second packet for this connection is received by the router. Since co msgid "5 if not defined." msgstr "5 if not defined." -#: ../../configuration/service/dhcp-server.rst:259 +#: ../../configuration/service/dhcp-server.rst:315 #: ../../configuration/system/syslog.rst:124 #: ../../configuration/system/syslog.rst:189 #: ../../configuration/trafficpolicy/index.rst:791 @@ -1187,7 +1400,7 @@ msgstr "5 if not defined." msgid "6" msgstr "6" -#: ../../configuration/service/dhcp-server.rst:294 +#: ../../configuration/service/dhcp-server.rst:350 msgid "66" msgstr "66" @@ -1195,11 +1408,11 @@ msgstr "66" msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic." -#: ../../configuration/service/dhcp-server.rst:299 +#: ../../configuration/service/dhcp-server.rst:355 msgid "67" msgstr "67" -#: ../../configuration/service/dhcp-server.rst:309 +#: ../../configuration/service/dhcp-server.rst:365 msgid "69" msgstr "69" @@ -1222,7 +1435,7 @@ msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defin msgid "7" msgstr "7" -#: ../../configuration/service/dhcp-server.rst:314 +#: ../../configuration/service/dhcp-server.rst:370 msgid "70" msgstr "70" @@ -1299,19 +1512,19 @@ msgstr "<x.x.x.x>-<x.x.x.x>: IP range to match." msgid "<x.x.x.x>: IP address to match." msgstr "<x.x.x.x>: IP address to match." -#: ../../configuration/pki/index.rst:252 +#: ../../configuration/pki/index.rst:283 msgid "ACME" msgstr "ACME" -#: ../../configuration/pki/index.rst:281 +#: ../../configuration/pki/index.rst:312 msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" -#: ../../configuration/protocols/static.rst:150 +#: ../../configuration/protocols/static.rst:183 msgid "ARP" msgstr "ARP" @@ -1335,7 +1548,11 @@ msgstr "A *bit* is written as **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." -#: ../../configuration/protocols/bgp.rst:929 +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + +#: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" @@ -1351,7 +1568,7 @@ msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by msgid "A Rule-Set can be applied to every interface:" msgstr "A Rule-Set can be applied to every interface:" -#: ../../configuration/service/dhcp-server.rst:561 +#: ../../configuration/service/dhcp-server.rst:620 msgid "A SNTP server address can be specified for DHCPv6 clients." msgstr "A SNTP server address can be specified for DHCPv6 clients." @@ -1363,11 +1580,11 @@ msgstr "A VRF device is created with an associated route table. Network interfac msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." -#: ../../configuration/service/dhcp-server.rst:533 +#: ../../configuration/service/dhcp-server.rst:592 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." @@ -1379,11 +1596,15 @@ msgstr "A basic configuration requires a tunnel source (source-address), a tunne msgid "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." -#: ../../configuration/interfaces/bridge.rst:195 -#: ../../configuration/interfaces/bridge.rst:229 +#: ../../configuration/interfaces/bridge.rst:204 +#: ../../configuration/interfaces/bridge.rst:238 msgid "A bridge named `br100`" msgstr "A bridge named `br100`" +#: ../../configuration/container/index.rst:144 +msgid "A brief description what this network is all about." +msgstr "A brief description what this network is all about." + #: ../../configuration/trafficpolicy/index.rst:147 msgid "A class can have multiple match filters:" msgstr "A class can have multiple match filters:" @@ -1396,7 +1617,11 @@ msgstr "A common example is the case of some policies which, in order to be effe msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" msgstr "A complete LDAP auth OpenVPN configuration could look like the following example:" -#: ../../configuration/vpn/sstp.rst:335 +#: ../../configuration/service/ids.rst:84 +msgid "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" +msgstr "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" + +#: ../../configuration/vpn/sstp.rst:508 msgid "A connection attempt will be shown as:" msgstr "A connection attempt will be shown as:" @@ -1420,7 +1645,7 @@ msgstr "A domain name is the label (name) assigned to a computer network and is msgid "A dummy interface for the provider-assigned IP;" msgstr "A dummy interface for the provider-assigned IP;" -#: ../../configuration/highavailability/index.rst:426 +#: ../../configuration/highavailability/index.rst:436 msgid "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." @@ -1428,7 +1653,7 @@ msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availabi msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." -#: ../../configuration/service/dhcp-server.rst:152 +#: ../../configuration/service/dhcp-server.rst:201 msgid "A generic `<name>` referencing this sync service." msgstr "A generic `<name>` referencing this sync service." @@ -1436,11 +1661,11 @@ msgstr "A generic `<name>` referencing this sync service." msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." msgstr "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." -#: ../../configuration/pki/index.rst:189 +#: ../../configuration/pki/index.rst:191 msgid "A human readable description what this CA is about." msgstr "A human readable description what this CA is about." -#: ../../configuration/pki/index.rst:228 +#: ../../configuration/pki/index.rst:230 msgid "A human readable description what this certificate is about." msgstr "A human readable description what this certificate is about." @@ -1448,6 +1673,10 @@ msgstr "A human readable description what this certificate is about." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." @@ -1456,7 +1685,7 @@ msgstr "A managed device is a network node that implements an SNMP interface tha msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." msgstr "A match filter can contain multiple criteria and will match traffic if all those criteria are true." -#: ../../configuration/protocols/bfd.rst:138 +#: ../../configuration/protocols/bfd.rst:145 msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." msgstr "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." @@ -1476,7 +1705,7 @@ msgstr "A packet rate limit can be set for a rule to apply the rule to traffic a msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." -#: ../../configuration/protocols/bgp.rst:698 +#: ../../configuration/protocols/bgp.rst:720 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." msgstr "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." @@ -1488,7 +1717,7 @@ msgstr "A physical interface is required to connect this MACsec instance to. Tra msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" -#: ../../configuration/firewall/ipv4.rst:485 +#: ../../configuration/firewall/ipv4.rst:508 #: ../../configuration/firewall/ipv6.rst:491 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." @@ -1526,11 +1755,11 @@ msgstr "A segment ID that contains an IP address prefix calculated by an IGP in msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." -#: ../../configuration/service/dhcp-server.rst:589 +#: ../../configuration/service/dhcp-server.rst:648 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" -#: ../../configuration/protocols/bgp.rst:1146 +#: ../../configuration/protocols/bgp.rst:1168 msgid "A simple BGP configuration via IPv6." msgstr "A simple BGP configuration via IPv6." @@ -1538,7 +1767,7 @@ msgstr "A simple BGP configuration via IPv6." msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." msgstr "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." -#: ../../configuration/protocols/bgp.rst:1101 +#: ../../configuration/protocols/bgp.rst:1123 msgid "A simple eBGP configuration:" msgstr "A simple eBGP configuration:" @@ -1602,7 +1831,7 @@ msgstr "A very small buffer will soon start dropping packets." msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." -#: ../../configuration/service/dns.rst:397 +#: ../../configuration/service/dns.rst:411 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." msgstr "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." @@ -1622,6 +1851,21 @@ msgstr "Accept SSH connections for the given `<device>` on TCP port `<port>`. Af msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." msgstr "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." +#: ../../configuration/service/pppoe-server.rst:384 +#: ../../configuration/vpn/l2tp.rst:328 +#: ../../configuration/vpn/pptp.rst:252 +#: ../../configuration/vpn/sstp.rst:286 +msgid "Accept peer interface identifier. By default is not defined." +msgstr "Accept peer interface identifier. By default is not defined." + +#: ../../configuration/service/ipoe-server.rst:364 +#: ../../configuration/service/pppoe-server.rst:530 +#: ../../configuration/vpn/l2tp.rst:484 +#: ../../configuration/vpn/pptp.rst:408 +#: ../../configuration/vpn/sstp.rst:442 +msgid "Acceptable rate of connections (e.g. 1/min, 60/sec)" +msgstr "Acceptable rate of connections (e.g. 1/min, 60/sec)" + #: ../../configuration/policy/access-list.rst:3 msgid "Access List Policy" msgstr "Access List Policy" @@ -1665,7 +1909,7 @@ msgstr "Add Power Constraint element to Beacon and Probe Response frames." msgid "Add a forwarding rule matching UDP port on your internet router." msgstr "Add a forwarding rule matching UDP port on your internet router." -#: ../../configuration/container/index.rst:113 +#: ../../configuration/container/index.rst:118 msgid "Add a host device to the container." msgstr "Add a host device to the container." @@ -1693,11 +1937,11 @@ msgstr "Add new port to SSL-ports acl. Ports included by default in SSL-ports ac msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" msgstr "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" -#: ../../configuration/policy/route-map.rst:221 +#: ../../configuration/policy/route-map.rst:224 msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" msgstr "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" -#: ../../configuration/policy/route-map.rst:236 +#: ../../configuration/policy/route-map.rst:239 msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" @@ -1705,11 +1949,11 @@ msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0 msgid "Add policy route matching VLAN source addresses" msgstr "Add policy route matching VLAN source addresses" -#: ../../configuration/pki/index.rst:217 +#: ../../configuration/pki/index.rst:219 msgid "Add public key portion for the certificate named `name` to the VyOS CLI." msgstr "Add public key portion for the certificate named `name` to the VyOS CLI." -#: ../../configuration/pki/index.rst:193 +#: ../../configuration/pki/index.rst:195 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." msgstr "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." @@ -1717,11 +1961,11 @@ msgstr "Add the CAs private key to the VyOS CLI. This should never leave the sys msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." -#: ../../configuration/pki/index.rst:232 +#: ../../configuration/pki/index.rst:234 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." msgstr "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." -#: ../../configuration/pki/index.rst:174 +#: ../../configuration/pki/index.rst:176 msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." @@ -1729,7 +1973,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -1765,11 +2009,11 @@ msgstr "Address Families" msgid "Address Groups" msgstr "Address Groups" -#: ../../configuration/service/dhcp-server.rst:592 +#: ../../configuration/service/dhcp-server.rst:651 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." -#: ../../configuration/service/dhcp-server.rst:582 +#: ../../configuration/service/dhcp-server.rst:641 msgid "Address pools" msgstr "Address pools" @@ -1777,14 +2021,30 @@ msgstr "Address pools" msgid "Address to listen for HTTPS requests" msgstr "Address to listen for HTTPS requests" -#: ../../configuration/container/index.rst:136 +#: ../../configuration/container/index.rst:160 +msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." +msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." + +#: ../../configuration/container/index.rst:141 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." -#: ../../configuration/protocols/bgp.rst:647 +#: ../../configuration/protocols/bgp.rst:669 msgid "Administrative Distance" msgstr "Administrative Distance" +#: ../../configuration/service/ipoe-server.rst:335 +msgid "Advanced Interface Options" +msgstr "Advanced Interface Options" + +#: ../../configuration/service/ipoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:425 +#: ../../configuration/vpn/l2tp.rst:369 +#: ../../configuration/vpn/pptp.rst:293 +#: ../../configuration/vpn/sstp.rst:327 +msgid "Advanced Options" +msgstr "Advanced Options" + #: ../../configuration/nat/nat44.rst:301 msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." msgstr "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." @@ -1797,7 +2057,11 @@ msgstr "Advantages of OpenVPN are:" msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" msgstr "Advertise DNS server per https://tools.ietf.org/html/rfc6106" -#: ../../configuration/service/router-advert.rst:53 +#: ../../configuration/service/router-advert.rst:78 +msgid "Advertising a NAT64 Prefix" +msgstr "Advertising a NAT64 Prefix" + +#: ../../configuration/service/router-advert.rst:54 msgid "Advertising a Prefix" msgstr "Advertising a Prefix" @@ -1805,7 +2069,7 @@ msgstr "Advertising a Prefix" msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" -#: ../../configuration/vrf/index.rst:325 +#: ../../configuration/vrf/index.rst:344 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." @@ -1813,10 +2077,18 @@ msgstr "After committing the configuration we can verify all leaked routes are i msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." -#: ../../configuration/pki/index.rst:212 +#: ../../configuration/vpn/ipsec.rst:418 +msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." +msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." + +#: ../../configuration/pki/index.rst:214 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." msgstr "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." +#: ../../configuration/vpn/ipsec.rst:399 +msgid "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." +msgstr "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." + #: ../../configuration/service/snmp.rst:39 msgid "Agent - software which runs on managed devices" msgstr "Agent - software which runs on managed devices" @@ -1825,7 +2097,7 @@ msgstr "Agent - software which runs on managed devices" msgid "Alert" msgstr "Alert" -#: ../../configuration/highavailability/index.rst:346 +#: ../../configuration/highavailability/index.rst:356 msgid "Algorithm" msgstr "Algorithm" @@ -1833,7 +2105,7 @@ msgstr "Algorithm" msgid "Aliases" msgstr "Aliases" -#: ../../configuration/service/dns.rst:167 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" @@ -1861,7 +2133,7 @@ msgstr "All interfaces used for the DHCP relay must be configured. This includes msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -#: ../../configuration/service/dns.rst:169 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" @@ -1897,7 +2169,11 @@ msgstr "All traffic to and from an interface within a zone is permitted." msgid "All tunnel sessions can be checked via:" msgstr "All tunnel sessions can be checked via:" -#: ../../configuration/vpn/l2tp.rst:209 +#: ../../configuration/service/ipoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:193 +#: ../../configuration/vpn/l2tp.rst:236 +#: ../../configuration/vpn/pptp.rst:176 +#: ../../configuration/vpn/sstp.rst:209 msgid "Allocation clients ip addresses by RADIUS" msgstr "Allocation clients ip addresses by RADIUS" @@ -1913,7 +2189,11 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -#: ../../configuration/service/dns.rst:359 +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -1933,13 +2213,13 @@ msgstr "Allow this BFD peer to not be directly connected" msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." -#: ../../configuration/firewall/ipv4.rst:812 +#: ../../configuration/firewall/ipv4.rst:835 #: ../../configuration/firewall/ipv6.rst:821 #: ../../configuration/system/conntrack.rst:199 msgid "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." -#: ../../configuration/interfaces/bridge.rst:162 +#: ../../configuration/interfaces/bridge.rst:171 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." msgstr "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." @@ -1947,11 +2227,11 @@ msgstr "Allows specific VLAN IDs to pass through the bridge member interface. Th msgid "Allows to define URL path matching rules for a specific service." msgstr "Allows to define URL path matching rules for a specific service." -#: ../../configuration/protocols/static.rst:69 +#: ../../configuration/protocols/static.rst:92 msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." -#: ../../configuration/protocols/static.rst:89 +#: ../../configuration/protocols/static.rst:112 msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." @@ -1977,11 +2257,11 @@ msgstr "Also, for those who haven't updated to newer version, legacy documentati msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." msgstr "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." -#: ../../configuration/protocols/static.rst:138 +#: ../../configuration/protocols/static.rst:171 msgid "Alternate Routing Tables" msgstr "Alternate Routing Tables" -#: ../../configuration/protocols/static.rst:142 +#: ../../configuration/protocols/static.rst:175 msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." msgstr "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." @@ -1989,7 +2269,7 @@ msgstr "Alternate routing tables are used with policy based routing by utilizing msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" -#: ../../configuration/service/dhcp-server.rst:116 +#: ../../configuration/service/dhcp-server.rst:132 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." @@ -2037,7 +2317,7 @@ msgstr "An agent is a network-management software module that resides on a manag msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" -#: ../../configuration/firewall/ipv4.rst:373 +#: ../../configuration/firewall/ipv4.rst:396 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." @@ -2062,7 +2342,7 @@ msgstr "An basic introduction to zone-based firewalls can be found `here <https: #: ../../configuration/interfaces/tunnel.rst:71 #: ../../configuration/interfaces/tunnel.rst:93 #: ../../configuration/interfaces/tunnel.rst:194 -#: ../../configuration/system/login.rst:195 +#: ../../configuration/system/login.rst:199 msgid "An example:" msgstr "An example:" @@ -2070,11 +2350,11 @@ msgstr "An example:" msgid "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" msgstr "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" -#: ../../configuration/interfaces/bridge.rst:227 +#: ../../configuration/interfaces/bridge.rst:236 msgid "An example of creating a VLAN-aware bridge is as follows:" msgstr "An example of creating a VLAN-aware bridge is as follows:" -#: ../../configuration/system/login.rst:149 +#: ../../configuration/system/login.rst:153 msgid "An example of key generation:" msgstr "An example of key generation:" @@ -2102,6 +2382,10 @@ msgstr "And base chain for traffic generated by the router is ``set firewall ipv msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" +#: ../../configuration/service/ids.rst:138 +msgid "And content of the script:" +msgstr "And content of the script:" + #: ../../configuration/policy/route.rst:76 msgid "And for ipv6:" msgstr "And for ipv6:" @@ -2114,7 +2398,7 @@ msgstr "And next, some configuration example where groups are used:" msgid "And op-mode commands:" msgstr "And op-mode commands:" -#: ../../configuration/system/ip.rst:84 +#: ../../configuration/system/ip.rst:97 msgid "And the different IPv4 **reset** commands available:" msgstr "And the different IPv4 **reset** commands available:" @@ -2131,6 +2415,10 @@ msgstr "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT con msgid "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." msgstr "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." +#: ../../configuration/vpn/ipsec.rst:549 +msgid "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/vrf/index.rst:52 #: ../../configuration/vrf/index.rst:62 msgid "Apply a route-map filter to routes for the specified protocol." @@ -2156,7 +2444,7 @@ msgstr "Applying a Rule-Set to a Zone" msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Applying a traffic policy" @@ -2221,11 +2509,15 @@ msgstr "As a result, the processing of each packet becomes more efficient, poten msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." msgstr "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." +#: ../../configuration/vpn/ipsec.rst:523 +msgid "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." +msgstr "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." + #: ../../configuration/firewall/flowtables.rst:109 msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." -#: ../../configuration/system/option.rst:80 +#: ../../configuration/system/option.rst:110 msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." msgstr "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." @@ -2265,7 +2557,7 @@ msgstr "As the example image below shows, the device was configured with rules b msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." msgstr "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." -#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/l2tp.rst:86 msgid "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" msgstr "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" @@ -2301,7 +2593,7 @@ msgstr "Assign `<member>` interface to bridge `<interface>`. A completion helper msgid "Assign a specific backend to a rule" msgstr "Assign a specific backend to a rule" -#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:98 msgid "Assign interface identified by `<interface>` to VRF named `<name>`." msgstr "Assign interface identified by `<interface>` to VRF named `<name>`." @@ -2309,15 +2601,18 @@ msgstr "Assign interface identified by `<interface>` to VRF named `<name>`." msgid "Assign member interfaces to PortChannel" msgstr "Assign member interfaces to PortChannel" -#: ../../configuration/vpn/sstp.rst:80 +#: ../../configuration/service/pppoe-server.rst:437 +#: ../../configuration/vpn/l2tp.rst:381 +#: ../../configuration/vpn/pptp.rst:305 +#: ../../configuration/vpn/sstp.rst:339 msgid "Assign static IP address to `<user>` account." msgstr "Assign static IP address to `<user>` account." -#: ../../configuration/service/dhcp-server.rst:97 +#: ../../configuration/service/dhcp-server.rst:113 msgid "Assign the IP address to this machine for `<time>` seconds." msgstr "Assign the IP address to this machine for `<time>` seconds." -#: ../../configuration/system/login.rst:62 +#: ../../configuration/system/login.rst:66 msgid "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." msgstr "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." @@ -2401,7 +2696,15 @@ msgstr "Attaches user-defined network to a container. Only one network must be s msgid "Authentication" msgstr "Authentication" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/service/ipoe-server.rst:310 +#: ../../configuration/service/pppoe-server.rst:428 +#: ../../configuration/vpn/l2tp.rst:372 +#: ../../configuration/vpn/pptp.rst:296 +#: ../../configuration/vpn/sstp.rst:330 +msgid "Authentication Advanced Options" +msgstr "Authentication Advanced Options" + +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Authentication (EAPoL)" @@ -2433,15 +2736,19 @@ msgstr "Authentication token" msgid "Authentication – to verify that the message is from a valid source." msgstr "Authentication – to verify that the message is from a valid source." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "Authorization token" -#: ../../configuration/service/pppoe-server.rst:159 +#: ../../configuration/service/pppoe-server.rst:228 msgid "Automatic VLAN Creation" msgstr "Automatic VLAN Creation" -#: ../../configuration/service/ipoe-server.rst:96 +#: ../../configuration/service/ipoe-server.rst:97 msgid "Automatic VLAN creation" msgstr "Automatic VLAN creation" @@ -2469,7 +2776,7 @@ msgstr "Azure-data-explorer" msgid "BFD" msgstr "BFD" -#: ../../configuration/protocols/bfd.rst:136 +#: ../../configuration/protocols/bfd.rst:143 msgid "BFD Static Route Monitoring" msgstr "BFD Static Route Monitoring" @@ -2505,7 +2812,7 @@ msgstr "BGP Example" msgid "BGP Router Configuration" msgstr "BGP Router Configuration" -#: ../../configuration/protocols/bgp.rst:888 +#: ../../configuration/protocols/bgp.rst:910 msgid "BGP Scaling Configuration" msgstr "BGP Scaling Configuration" @@ -2517,7 +2824,7 @@ msgstr "BGP aggregator attribute: AS number or IP address of an aggregation." msgid "BGP as-path list to match." msgstr "BGP as-path list to match." -#: ../../configuration/policy/route-map.rst:216 +#: ../../configuration/policy/route-map.rst:219 msgid "BGP atomic aggregate attribute." msgstr "BGP atomic aggregate attribute." @@ -2533,11 +2840,11 @@ msgstr "BGP extended community to match." msgid "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" msgstr "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" -#: ../../configuration/protocols/bgp.rst:890 +#: ../../configuration/protocols/bgp.rst:912 msgid "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." msgstr "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." -#: ../../configuration/vrf/index.rst:413 +#: ../../configuration/vrf/index.rst:432 msgid "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." msgstr "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." @@ -2557,6 +2864,10 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Balance algorithms:" @@ -2565,22 +2876,24 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" -#: ../../configuration/service/ipoe-server.rst:122 -#: ../../configuration/service/pppoe-server.rst:182 -#: ../../configuration/vpn/l2tp.rst:113 +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + +#: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "Bandwidth Shaping" -#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/ipoe-server.rst:129 #: ../../configuration/vpn/l2tp.rst:118 msgid "Bandwidth Shaping for local users" msgstr "Bandwidth Shaping for local users" -#: ../../configuration/service/pppoe-server.rst:184 +#: ../../configuration/service/pppoe-server.rst:253 msgid "Bandwidth rate limits can be set for local users or RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users or RADIUS based attributes." @@ -2588,7 +2901,7 @@ msgstr "Bandwidth rate limits can be set for local users or RADIUS based attribu msgid "Bandwidth rate limits can be set for local users or via RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users or via RADIUS based attributes." -#: ../../configuration/service/ipoe-server.rst:124 +#: ../../configuration/service/ipoe-server.rst:125 msgid "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." @@ -2640,7 +2953,7 @@ msgstr "Because an aggregator cannot be active without at least one available li msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." @@ -2648,7 +2961,11 @@ msgstr "Before enabling any hardware segmentation offload a corresponding softwa msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." -#: ../../configuration/vpn/site2site_ipsec.rst:422 +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" + +#: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." @@ -2672,6 +2989,10 @@ msgstr "Bidirectional NAT" msgid "Binary value" msgstr "Binary value" +#: ../../configuration/container/index.rst:153 +msgid "Bind container network to a given VRF instance." +msgstr "Bind container network to a given VRF instance." + #: ../../configuration/protocols/bfd.rst:39 msgid "Bind listener to specific interface/address, mandatory for IPv6" msgstr "Bind listener to specific interface/address, mandatory for IPv6" @@ -2680,7 +3001,7 @@ msgstr "Bind listener to specific interface/address, mandatory for IPv6" msgid "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." msgstr "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." -#: ../../configuration/protocols/static.rst:108 +#: ../../configuration/protocols/static.rst:142 msgid "Blackhole" msgstr "Blackhole" @@ -2708,11 +3029,11 @@ msgstr "Bond / Link Aggregation" msgid "Bond options" msgstr "Bond options" -#: ../../configuration/service/dhcp-server.rst:306 +#: ../../configuration/service/dhcp-server.rst:362 msgid "Boot image length in 512-octet blocks" msgstr "Boot image length in 512-octet blocks" -#: ../../configuration/service/dhcp-server.rst:301 +#: ../../configuration/service/dhcp-server.rst:357 msgid "Bootstrap file name" msgstr "Bootstrap file name" @@ -2752,8 +3073,8 @@ msgstr "Bridge Options" msgid "Bridge Rules" msgstr "Bridge Rules" -#: ../../configuration/interfaces/bridge.rst:198 -#: ../../configuration/interfaces/bridge.rst:233 +#: ../../configuration/interfaces/bridge.rst:207 +#: ../../configuration/interfaces/bridge.rst:242 msgid "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" msgstr "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" @@ -2761,6 +3082,14 @@ msgstr "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" msgid "Bridge maximum aging `<time>` in seconds (default: 20)." msgstr "Bridge maximum aging `<time>` in seconds (default: 20)." +#: ../../configuration/service/ipoe-server.rst:360 +#: ../../configuration/service/pppoe-server.rst:526 +#: ../../configuration/vpn/l2tp.rst:480 +#: ../../configuration/vpn/pptp.rst:404 +#: ../../configuration/vpn/sstp.rst:438 +msgid "Burst count" +msgstr "Burst count" + #: ../../configuration/interfaces/pppoe.rst:41 msgid "Business Users" msgstr "Business Users" @@ -2777,15 +3106,15 @@ msgstr "By default, FRR will bring up peering with minimal common capability for msgid "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." msgstr "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." -#: ../../configuration/system/login.rst:126 +#: ../../configuration/system/login.rst:130 msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." -#: ../../configuration/service/dns.rst:393 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." @@ -2794,6 +3123,10 @@ msgstr "By default, enabling RPKI does not change best path selection. In partic msgid "By default, it supports both planned and unplanned outages." msgstr "By default, it supports both planned and unplanned outages." +#: ../../configuration/protocols/bgp.rst:661 +msgid "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." +msgstr "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." + #: ../../configuration/service/https.rst:45 msgid "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." msgstr "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." @@ -2839,7 +3172,11 @@ msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead c msgid "Bypassing the webproxy" msgstr "Bypassing the webproxy" -#: ../../configuration/pki/index.rst:170 +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + +#: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (Certificate Authority)" @@ -2860,20 +3197,20 @@ msgstr "Capability Negotiation" msgid "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." msgstr "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." -#: ../../configuration/pki/index.rst:33 +#: ../../configuration/pki/index.rst:35 msgid "Certificate Authority (CA)" msgstr "Certificate Authority (CA)" -#: ../../configuration/pki/index.rst:185 +#: ../../configuration/pki/index.rst:187 msgid "Certificate revocation list in PEM format." msgstr "Certificate revocation list in PEM format." -#: ../../configuration/pki/index.rst:63 +#: ../../configuration/pki/index.rst:65 #: ../../configuration/vpn/sstp.rst:27 msgid "Certificates" msgstr "Certificates" -#: ../../configuration/system/option.rst:66 +#: ../../configuration/system/option.rst:96 msgid "Change system keyboard layout to given language." msgstr "Change system keyboard layout to given language." @@ -2889,7 +3226,7 @@ msgstr "Changes in BGP policies require the BGP session to be cleared. Clearing msgid "Changes to the NAT system only affect newly established connections. Already established connections are not affected." msgstr "Changes to the NAT system only affect newly established connections. Already established connections are not affected." -#: ../../configuration/system/option.rst:70 +#: ../../configuration/system/option.rst:100 msgid "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." msgstr "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." @@ -2909,11 +3246,11 @@ msgstr "Check if the Intel® QAT device is up and ready to do the job." msgid "Check status" msgstr "Check status" -#: ../../configuration/system/ipv6.rst:64 +#: ../../configuration/system/ipv6.rst:77 msgid "Check the many parameters available for the `show ipv6 route` command:" msgstr "Check the many parameters available for the `show ipv6 route` command:" -#: ../../configuration/service/pppoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:315 msgid "Checking connections" msgstr "Checking connections" @@ -2945,11 +3282,11 @@ msgstr "Class treatment" msgid "Classes" msgstr "Classes" -#: ../../configuration/service/dhcp-server.rst:326 +#: ../../configuration/service/dhcp-server.rst:382 msgid "Classless static route" msgstr "Classless static route" -#: ../../configuration/policy/route-map.rst:269 +#: ../../configuration/policy/route-map.rst:272 msgid "Clear all BGP extcommunities." msgstr "Clear all BGP extcommunities." @@ -2973,7 +3310,15 @@ msgstr "Client Authentication" msgid "Client Configuration" msgstr "Client Configuration" -#: ../../configuration/vpn/sstp.rst:289 +#: ../../configuration/service/ipoe-server.rst:328 +#: ../../configuration/service/pppoe-server.rst:446 +#: ../../configuration/vpn/l2tp.rst:400 +#: ../../configuration/vpn/pptp.rst:324 +#: ../../configuration/vpn/sstp.rst:358 +msgid "Client IP Pool Advanced Options" +msgstr "Client IP Pool Advanced Options" + +#: ../../configuration/vpn/sstp.rst:358 msgid "Client IP addresses will be provided from pool `192.0.2.0/25`" msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" @@ -2981,15 +3326,15 @@ msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" msgid "Client Side" msgstr "Client Side" -#: ../../configuration/service/ipoe-server.rst:184 +#: ../../configuration/service/ipoe-server.rst:186 msgid "Client configuration" msgstr "Client configuration" -#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:322 msgid "Client domain name" msgstr "Client domain name" -#: ../../configuration/service/dhcp-server.rst:321 +#: ../../configuration/service/dhcp-server.rst:377 msgid "Client domain search" msgstr "Client domain search" @@ -3001,7 +3346,7 @@ msgstr "Client isolation can be used to prevent low-level bridging of frames bet msgid "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" msgstr "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" -#: ../../configuration/service/dhcp-server.rst:514 +#: ../../configuration/service/dhcp-server.rst:573 msgid "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." msgstr "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." @@ -3019,11 +3364,11 @@ msgstr "Command completion can be used to list available time zones. The adjustm msgid "Command for disabling a rule but keep it in the configuration." msgstr "Command for disabling a rule but keep it in the configuration." -#: ../../configuration/vrf/index.rst:128 +#: ../../configuration/vrf/index.rst:147 msgid "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." msgstr "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." -#: ../../configuration/firewall/ipv4.rst:1179 +#: ../../configuration/firewall/ipv4.rst:1202 #: ../../configuration/firewall/ipv6.rst:1195 msgid "Command used to update GeoIP database and firewall sets." msgstr "Command used to update GeoIP database and firewall sets." @@ -3032,7 +3377,7 @@ msgstr "Command used to update GeoIP database and firewall sets." msgid "Commands" msgstr "Commands" -#: ../../configuration/service/dhcp-server.rst:379 +#: ../../configuration/service/dhcp-server.rst:436 msgid "Common configuration, valid for both primary and secondary node." msgstr "Common configuration, valid for both primary and secondary node." @@ -3059,7 +3404,7 @@ msgstr "Common interface configuration" msgid "Common parameters" msgstr "Common parameters" -#: ../../configuration/protocols/bgp.rst:927 +#: ../../configuration/protocols/bgp.rst:949 msgid "Confederation Configuration" msgstr "Confederation Configuration" @@ -3098,28 +3443,28 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/policy/local-route.rst:9 #: ../../configuration/policy/prefix-list.rst:16 #: ../../configuration/policy/route-map.rst:10 -#: ../../configuration/protocols/bfd.rst:143 +#: ../../configuration/protocols/bfd.rst:150 #: ../../configuration/protocols/bgp.rst:164 #: ../../configuration/protocols/igmp-proxy.rst:14 #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 #: ../../configuration/service/dhcp-relay.rst:19 #: ../../configuration/service/dhcp-relay.rst:137 #: ../../configuration/service/dhcp-server.rst:22 -#: ../../configuration/service/dhcp-server.rst:510 +#: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:227 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 -#: ../../configuration/service/ipoe-server.rst:28 +#: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 #: ../../configuration/service/mdns.rst:19 #: ../../configuration/service/ntp.rst:40 -#: ../../configuration/service/pppoe-server.rst:17 +#: ../../configuration/service/router-advert.rst:28 #: ../../configuration/service/salt-minion.rst:25 #: ../../configuration/service/ssh.rst:36 #: ../../configuration/service/tftp-server.rst:14 @@ -3127,18 +3472,18 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/system/default-route.rst:12 #: ../../configuration/system/flow-accounting.rst:43 #: ../../configuration/system/lcd.rst:17 -#: ../../configuration/system/login.rst:241 -#: ../../configuration/system/login.rst:310 +#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:314 #: ../../configuration/system/sflow.rst:12 #: ../../configuration/system/updates.rst:8 #: ../../configuration/vpn/dmvpn.rst:38 #: ../../configuration/vpn/dmvpn.rst:182 #: ../../configuration/vpn/openconnect.rst:21 -#: ../../configuration/vpn/sstp.rst:65 +#: ../../configuration/vpn/sstp.rst:40 #: ../../configuration/vrf/index.rst:16 -#: ../../configuration/vrf/index.rst:253 -#: ../../configuration/vrf/index.rst:288 -#: ../../configuration/vrf/index.rst:436 +#: ../../configuration/vrf/index.rst:272 +#: ../../configuration/vrf/index.rst:307 +#: ../../configuration/vrf/index.rst:455 msgid "Configuration" msgstr "Configuration" @@ -3148,8 +3493,8 @@ msgstr "Configuration" #: ../../configuration/protocols/pim6.rst:78 #: ../../configuration/protocols/rip.rst:239 #: ../../configuration/protocols/segment-routing.rst:187 -#: ../../configuration/system/login.rst:279 -#: ../../configuration/system/login.rst:350 +#: ../../configuration/system/login.rst:283 +#: ../../configuration/system/login.rst:354 msgid "Configuration Example" msgstr "Configuration Example" @@ -3171,7 +3516,7 @@ msgstr "Configuration Options" msgid "Configuration commands covered in this section:" msgstr "Configuration commands covered in this section:" -#: ../../configuration/vpn/ipsec.rst:284 +#: ../../configuration/vpn/ipsec.rst:288 msgid "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" msgstr "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" @@ -3183,7 +3528,7 @@ msgstr "Configuration commands will display. Note the command with the public ke msgid "Configuration example:" msgstr "Configuration example:" -#: ../../configuration/vrf/index.rst:430 +#: ../../configuration/vrf/index.rst:449 msgid "Configuration for these exported routes must, at a minimum, specify these two parameters." msgstr "Configuration for these exported routes must, at a minimum, specify these two parameters." @@ -3191,15 +3536,19 @@ msgstr "Configuration for these exported routes must, at a minimum, specify thes msgid "Configuration of :ref:`routing-static`" msgstr "Configuration of :ref:`routing-static`" -#: ../../configuration/service/dhcp-server.rst:371 +#: ../../configuration/service/dhcp-server.rst:427 +msgid "Configuration of a DHCP HA pair:" +msgstr "Configuration of a DHCP HA pair:" + +#: ../../configuration/service/dhcp-server.rst:411 msgid "Configuration of a DHCP failover pair" msgstr "Configuration of a DHCP failover pair" -#: ../../configuration/vrf/index.rst:438 +#: ../../configuration/vrf/index.rst:457 msgid "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." msgstr "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." -#: ../../configuration/protocols/static.rst:166 +#: ../../configuration/protocols/static.rst:199 #: ../../configuration/system/conntrack.rst:12 msgid "Configure" msgstr "Configure" @@ -3208,11 +3557,11 @@ msgstr "Configure" msgid "Configure BFD" msgstr "Configure BFD" -#: ../../configuration/service/dns.rst:258 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `<record>` which should be updated. This can be set multiple times." msgstr "Configure DNS `<record>` which should be updated. This can be set multiple times." -#: ../../configuration/service/dns.rst:253 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `<zone>` to be updated." msgstr "Configure DNS `<zone>` to be updated." @@ -3230,15 +3579,27 @@ msgstr "Configure Graceful Restart :rfc:`3623` helper support. By default, helpe msgid "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." msgstr "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." +#: ../../configuration/service/ids.rst:69 +msgid "Configure ICMP threshold parameters." +msgstr "Configure ICMP threshold parameters." + #: ../../configuration/service/dhcp-relay.rst:40 msgid "Configure IP address of the DHCP `<server>` which will handle the relayed packets." msgstr "Configure IP address of the DHCP `<server>` which will handle the relayed packets." -#: ../../configuration/vpn/sstp.rst:214 +#: ../../configuration/service/ipoe-server.rst:162 +#: ../../configuration/service/pppoe-server.rst:124 +#: ../../configuration/vpn/l2tp.rst:167 +#: ../../configuration/vpn/pptp.rst:107 +#: ../../configuration/vpn/sstp.rst:140 msgid "Configure RADIUS `<server>` and its required port for authentication requests." msgstr "Configure RADIUS `<server>` and its required port for authentication requests." -#: ../../configuration/vpn/sstp.rst:218 +#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/pppoe-server.rst:90 +#: ../../configuration/vpn/l2tp.rst:133 +#: ../../configuration/vpn/pptp.rst:73 +#: ../../configuration/vpn/sstp.rst:106 msgid "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." msgstr "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." @@ -3246,23 +3607,39 @@ msgstr "Configure RADIUS `<server>` and its required shared `<secret>` for commu msgid "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." msgstr "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." +#: ../../configuration/service/ids.rst:74 +msgid "Configure TCP threshold parameters" +msgstr "Configure TCP threshold parameters" + +#: ../../configuration/service/ids.rst:79 +msgid "Configure UDP threshold parameters" +msgstr "Configure UDP threshold parameters" + #: ../../_include/interface-mtu.txt:4 msgid "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." msgstr "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." -#: ../../configuration/system/login.rst:375 +#: ../../configuration/system/login.rst:379 msgid "Configure `<message>` which is shown after user has logged in to the system." msgstr "Configure `<message>` which is shown after user has logged in to the system." -#: ../../configuration/system/login.rst:370 +#: ../../configuration/system/login.rst:374 msgid "Configure `<message>` which is shown during SSH connect and before a user is logged in." msgstr "Configure `<message>` which is shown during SSH connect and before a user is logged in." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:440 +msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:355 msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." -#: ../../configuration/service/dns.rst:334 +#: ../../configuration/service/dns.rst:435 +msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:348 msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." @@ -3274,13 +3651,13 @@ msgstr "Configure a URL that contains information about images." msgid "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." msgstr "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." -#: ../../configuration/protocols/bfd.rst:154 -#: ../../configuration/protocols/bfd.rst:167 +#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:174 msgid "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." msgstr "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." -#: ../../configuration/protocols/bfd.rst:148 -#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:155 +#: ../../configuration/protocols/bfd.rst:168 msgid "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." msgstr "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." @@ -3304,6 +3681,10 @@ msgstr "Configure agent IP address associated with this interface." msgid "Configure aggregation delay timer interval." msgstr "Configure aggregation delay timer interval." +#: ../../configuration/service/ids.rst:24 +msgid "Configure alert script that will be executed when an attack is detected." +msgstr "Configure alert script that will be executed when an attack is detected." + #: ../../configuration/vpn/openconnect.rst:285 msgid "Configure an accounting server and enable accounting with:" msgstr "Configure an accounting server and enable accounting with:" @@ -3328,6 +3709,10 @@ msgstr "Configure backend `<name>` mode TCP or HTTP" msgid "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" msgstr "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" +#: ../../configuration/service/ids.rst:33 +msgid "Configure direction for processing traffic." +msgstr "Configure direction for processing traffic." + #: ../../configuration/service/console-server.rst:49 msgid "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." msgstr "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." @@ -3336,6 +3721,14 @@ msgstr "Configure either one or two stop bits. This defaults to one stop bits if msgid "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." msgstr "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." +#: ../../configuration/service/ids.rst:64 +msgid "Configure general threshold parameters." +msgstr "Configure general threshold parameters." + +#: ../../configuration/service/ids.rst:28 +msgid "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." +msgstr "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." + #: ../../configuration/interfaces/bridge.rst:46 msgid "Configure individual bridge port `<priority>`." msgstr "Configure individual bridge port `<priority>`." @@ -3353,6 +3746,14 @@ msgstr "Configure interface-specific Host/Router behaviour. If set, the interfac msgid "Configure interface `<interface>` with one or more interface addresses." msgstr "Configure interface `<interface>` with one or more interface addresses." +#: ../../configuration/service/ids.rst:42 +msgid "Configure listen interface for mirroring traffic." +msgstr "Configure listen interface for mirroring traffic." + +#: ../../configuration/service/ids.rst:55 +msgid "Configure local IPv4 address to listen for sflow." +msgstr "Configure local IPv4 address to listen for sflow." + #: ../../configuration/service/snmp.rst:148 msgid "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" msgstr "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" @@ -3369,7 +3770,7 @@ msgstr "Configure next-hop `<address>` for an IPv4 static route. Multiple static msgid "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." msgstr "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." -#: ../../configuration/system/option.rst:95 +#: ../../configuration/system/option.rst:125 msgid "Configure one of the predefined system performance profiles." msgstr "Configure one of the predefined system performance profiles." @@ -3381,7 +3782,7 @@ msgstr "Configure one or more attributes to the given NTP server." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure optional TTL value on the given resource record. This defaults to 600 seconds." @@ -3405,6 +3806,10 @@ msgstr "Configure port mirroring for `interface` outbound traffic and copy the t msgid "Configure port number of remote VXLAN endpoint." msgstr "Configure port number of remote VXLAN endpoint." +#: ../../configuration/service/ids.rst:59 +msgid "Configure port number to be used for sflow conection. Default port is 6343." +msgstr "Configure port number to be used for sflow conection. Default port is 6343." + #: ../../configuration/system/syslog.rst:73 msgid "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." msgstr "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." @@ -3413,6 +3818,14 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3429,7 +3842,7 @@ msgstr "Configure service `<name>` mode TCP or HTTP" msgid "Configure service `<name>` to use the backend <name>" msgstr "Configure service `<name>` to use the backend <name>" -#: ../../configuration/system/login.rst:394 +#: ../../configuration/system/login.rst:398 msgid "Configure session timeout after which the user will be logged out." msgstr "Configure session timeout after which the user will be logged out." @@ -3445,7 +3858,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:247 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." msgstr "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." @@ -3457,18 +3870,22 @@ msgstr "Configure the IPv4 or IPv6 listen address of the TFTP server. Multiple I msgid "Configure the connection tracking protocol helper modules. All modules are enable by default." msgstr "Configure the connection tracking protocol helper modules. All modules are enable by default." -#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:256 msgid "Configure the discrete port under which the RADIUS server can be reached." msgstr "Configure the discrete port under which the RADIUS server can be reached." -#: ../../configuration/system/login.rst:321 +#: ../../configuration/system/login.rst:325 msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." +#: ../../configuration/service/ids.rst:46 +msgid "Configure traffic capture mode." +msgstr "Configure traffic capture mode." + #: ../../_include/interface-mac.txt:4 msgid "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." msgstr "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." @@ -3489,10 +3906,54 @@ msgstr "Configured value" msgid "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." msgstr "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." +#: ../../configuration/service/ipoe-server.rst:27 +msgid "Configuring IPoE Server" +msgstr "Configuring IPoE Server" + +#: ../../configuration/vpn/l2tp.rst:57 +msgid "Configuring IPsec" +msgstr "Configuring IPsec" + +#: ../../configuration/vpn/l2tp.rst:12 +msgid "Configuring L2TP Server" +msgstr "Configuring L2TP Server" + +#: ../../configuration/vpn/l2tp.rst:270 +msgid "Configuring LNS (L2TP Network Server)" +msgstr "Configuring LNS (L2TP Network Server)" + +#: ../../configuration/service/pppoe-server.rst:18 +msgid "Configuring PPPoE Server" +msgstr "Configuring PPPoE Server" + +#: ../../configuration/vpn/pptp.rst:13 +msgid "Configuring PPTP Server" +msgstr "Configuring PPTP Server" + #: ../../configuration/vpn/openconnect.rst:279 msgid "Configuring RADIUS accounting" msgstr "Configuring RADIUS accounting" +#: ../../configuration/service/ipoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:76 +#: ../../configuration/vpn/l2tp.rst:119 +#: ../../configuration/vpn/pptp.rst:59 +#: ../../configuration/vpn/sstp.rst:92 +msgid "Configuring RADIUS authentication" +msgstr "Configuring RADIUS authentication" + +#: ../../configuration/vpn/sstp.rst:24 +msgid "Configuring SSTP Server" +msgstr "Configuring SSTP Server" + +#: ../../configuration/vpn/sstp.rst:476 +msgid "Configuring SSTP client" +msgstr "Configuring SSTP client" + +#: ../../configuration/vpn/ipsec.rst:494 +msgid "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." +msgstr "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." + #: ../../configuration/service/tftp-server.rst:39 msgid "Configuring a listen-address is essential for the service to work." msgstr "Configuring a listen-address is essential for the service to work." @@ -3502,11 +3963,15 @@ msgstr "Configuring a listen-address is essential for the service to work." msgid "Connect/Disconnect" msgstr "Connect/Disconnect" -#: ../../configuration/vpn/sstp.rst:155 +#: ../../configuration/service/ipoe-server.rst:376 +#: ../../configuration/service/pppoe-server.rst:546 +#: ../../configuration/vpn/l2tp.rst:500 +#: ../../configuration/vpn/pptp.rst:424 +#: ../../configuration/vpn/sstp.rst:458 msgid "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." msgstr "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." -#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:143 msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -3514,6 +3979,10 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +#: ../../configuration/protocols/rpki.rst:141 +msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." + #: ../../configuration/system/conntrack.rst:4 msgid "Conntrack" msgstr "Conntrack" @@ -3542,7 +4011,7 @@ msgstr "Console" msgid "Console Server" msgstr "Console Server" -#: ../../configuration/container/index.rst:106 +#: ../../configuration/container/index.rst:111 msgid "Constrain the memory available to the container." msgstr "Constrain the memory available to the container." @@ -3550,6 +4019,14 @@ msgstr "Constrain the memory available to the container." msgid "Container" msgstr "Container" +#: ../../configuration/container/index.rst:136 +msgid "Container Networks" +msgstr "Container Networks" + +#: ../../configuration/container/index.rst:156 +msgid "Container Registry" +msgstr "Container Registry" + #: ../../configuration/system/conntrack.rst:65 msgid "Contrack Timeouts" msgstr "Contrack Timeouts" @@ -3578,11 +4055,11 @@ msgstr "Creat community-list policy identified by name <text>." msgid "Creat extcommunity-list policy identified by name <text>." msgstr "Creat extcommunity-list policy identified by name <text>." -#: ../../configuration/service/dhcp-server.rst:104 +#: ../../configuration/service/dhcp-server.rst:120 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." -#: ../../configuration/service/dhcp-server.rst:110 +#: ../../configuration/service/dhcp-server.rst:126 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." @@ -3590,11 +4067,22 @@ msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are take msgid "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" msgstr "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" -#: ../../configuration/vpn/sstp.rst:70 +#: ../../configuration/service/pppoe-server.rst:49 +#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/pptp.rst:38 +#: ../../configuration/vpn/sstp.rst:63 msgid "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." msgstr "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." -#: ../../configuration/interfaces/bridge.rst:190 +#: ../../configuration/service/dhcp-server.rst:160 +msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." + +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + +#: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Create a basic bridge" @@ -3606,7 +4094,11 @@ msgstr "Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using msgid "Create a load balancing rule, it can be a number between 1 and 9999:" msgstr "Create a load balancing rule, it can be a number between 1 and 9999:" -#: ../../configuration/service/dhcp-server.rst:183 +#: ../../configuration/service/dhcp-server.rst:239 +msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." +msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." + +#: ../../configuration/service/dhcp-server.rst:233 msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." @@ -3614,31 +4106,31 @@ msgstr "Create a new DHCP static mapping named `<description>` which is valid fo msgid "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." msgstr "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." -#: ../../configuration/pki/index.rst:40 -#: ../../configuration/pki/index.rst:45 +#: ../../configuration/pki/index.rst:42 +#: ../../configuration/pki/index.rst:47 msgid "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." msgstr "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." -#: ../../configuration/pki/index.rst:67 -#: ../../configuration/pki/index.rst:71 +#: ../../configuration/pki/index.rst:69 +#: ../../configuration/pki/index.rst:73 msgid "Create a new public/private keypair and output the certificate on the console." msgstr "Create a new public/private keypair and output the certificate on the console." -#: ../../configuration/pki/index.rst:89 -#: ../../configuration/pki/index.rst:94 +#: ../../configuration/pki/index.rst:91 +#: ../../configuration/pki/index.rst:96 msgid "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." msgstr "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." -#: ../../configuration/pki/index.rst:77 -#: ../../configuration/pki/index.rst:82 +#: ../../configuration/pki/index.rst:79 +#: ../../configuration/pki/index.rst:84 msgid "Create a new self-signed certificate. The public/private is then shown on the console." msgstr "Create a new self-signed certificate. The public/private is then shown on the console." -#: ../../configuration/pki/index.rst:52 +#: ../../configuration/pki/index.rst:54 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." -#: ../../configuration/pki/index.rst:57 +#: ../../configuration/pki/index.rst:59 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." @@ -3686,10 +4178,15 @@ msgstr "Create named `<alias>` for the configured static mapping for `<hostname> msgid "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." msgstr "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." -#: ../../configuration/service/dns.rst:234 +#: ../../configuration/service/dns.rst:248 msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." msgstr "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 +msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." + #: ../../configuration/system/login.rst:21 msgid "Create new system user with username `<name>` and real-name specified by `<string>`." msgstr "Create new system user with username `<name>` and real-name specified by `<string>`." @@ -3698,15 +4195,19 @@ msgstr "Create new system user with username `<name>` and real-name specified by msgid "Create service `<name>` to listen on <port>" msgstr "Create service `<name>` to listen on <port>" -#: ../../configuration/container/index.rst:132 +#: ../../configuration/container/index.rst:140 msgid "Creates a named container network" msgstr "Creates a named container network" +#: ../../configuration/service/ipoe-server.rst:55 +msgid "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" +msgstr "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" + #: ../../configuration/vpn/dmvpn.rst:83 msgid "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." msgstr "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." -#: ../../configuration/interfaces/bridge.rst:192 +#: ../../configuration/interfaces/bridge.rst:201 msgid "Creating a bridge interface is very simple. In this example, we will have:" msgstr "Creating a bridge interface is very simple. In this example, we will have:" @@ -3722,6 +4223,10 @@ msgstr "Creating a traffic policy" msgid "Creating rules for using flow tables:" msgstr "Creating rules for using flow tables:" +#: ../../configuration/container/index.rst:173 +msgid "Credentials can be defined here and will only be used when adding a container image to the system." +msgstr "Credentials can be defined here and will only be used when adding a container image to the system." + #: ../../configuration/system/syslog.rst:178 msgid "Critical" msgstr "Critical" @@ -3754,7 +4259,7 @@ msgstr "Cur Hop Limit" msgid "Currently does not do much as caching is not implemented." msgstr "Currently does not do much as caching is not implemented." -#: ../../configuration/vrf/index.rst:86 +#: ../../configuration/vrf/index.rst:105 msgid "Currently dynamic routing is supported for the following protocols:" msgstr "Currently dynamic routing is supported for the following protocols:" @@ -3778,7 +4283,7 @@ msgstr "Custom firewall chains can be created, with commands ``set firewall ipv4 msgid "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." msgstr "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." -#: ../../configuration/highavailability/index.rst:373 +#: ../../configuration/highavailability/index.rst:383 msgid "Custom health-check script allows checking real-server availability" msgstr "Custom health-check script allows checking real-server availability" @@ -3794,6 +4299,14 @@ msgstr "DCO can be enabled for both new and existing tunnels,VyOS adds an option msgid "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." msgstr "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." +#: ../../configuration/service/ids.rst:5 +msgid "DDoS Protection" +msgstr "DDoS Protection" + +#: ../../configuration/service/dhcp-server.rst:181 +msgid "DHCP High Availability must be configured explicitly by the following statements on both servers:" +msgstr "DHCP High Availability must be configured explicitly by the following statements on both servers:" + #: ../../configuration/service/dhcp-relay.rst:5 msgid "DHCP Relay" msgstr "DHCP Relay" @@ -3802,15 +4315,15 @@ msgstr "DHCP Relay" msgid "DHCP Server" msgstr "DHCP Server" -#: ../../configuration/service/dhcp-server.rst:351 +#: ../../configuration/service/dhcp-server.rst:407 msgid "DHCP failover parameters" msgstr "DHCP failover parameters" -#: ../../configuration/service/dhcp-server.rst:341 +#: ../../configuration/service/dhcp-server.rst:397 msgid "DHCP lease range" msgstr "DHCP lease range" -#: ../../configuration/service/dhcp-server.rst:377 +#: ../../configuration/service/dhcp-server.rst:434 msgid "DHCP range spans from `192.168.189.10` - `192.168.189.250`" msgstr "DHCP range spans from `192.168.189.10` - `192.168.189.250`" @@ -3822,7 +4335,7 @@ msgstr "DHCP relay example" msgid "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." msgstr "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." -#: ../../configuration/service/dhcp-server.rst:584 +#: ../../configuration/service/dhcp-server.rst:643 msgid "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." msgstr "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." @@ -3887,11 +4400,11 @@ msgstr "DNS name servers" msgid "DNS search list to advertise" msgstr "DNS search list to advertise" -#: ../../configuration/service/dhcp-server.rst:261 +#: ../../configuration/service/dhcp-server.rst:317 msgid "DNS server IPv4 address" msgstr "DNS server IPv4 address" -#: ../../configuration/service/dhcp-server.rst:591 +#: ../../configuration/service/dhcp-server.rst:650 msgid "DNS server is located at ``2001:db8::ffff``" msgstr "DNS server is located at ``2001:db8::ffff``" @@ -3903,7 +4416,7 @@ msgstr "DSCP values as per :rfc:`2474` and :rfc:`4595`:" msgid "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" msgstr "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" -#: ../../configuration/firewall/ipv4.rst:444 +#: ../../configuration/firewall/ipv4.rst:467 #: ../../configuration/firewall/ipv6.rst:451 msgid "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." msgstr "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." @@ -3940,15 +4453,18 @@ msgstr "Default Gateway/Route" msgid "Default Router Preference" msgstr "Default Router Preference" -#: ../../configuration/vpn/sstp.rst:201 +#: ../../configuration/service/pppoe-server.rst:509 +#: ../../configuration/vpn/l2tp.rst:463 +#: ../../configuration/vpn/pptp.rst:387 +#: ../../configuration/vpn/sstp.rst:421 msgid "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." msgstr "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." -#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:431 msgid "Default gateway and DNS server is at `192.0.2.254`" msgstr "Default gateway and DNS server is at `192.0.2.254`" -#: ../../configuration/container/index.rst:108 +#: ../../configuration/container/index.rst:113 msgid "Default is 512 MB. Use 0 MB for unlimited memory." msgstr "Default is 512 MB. Use 0 MB for unlimited memory." @@ -3976,7 +4492,7 @@ msgstr "Defaults to 'uid'" msgid "Defaults to 225.0.0.50." msgstr "Defaults to 225.0.0.50." -#: ../../configuration/system/option.rst:68 +#: ../../configuration/system/option.rst:98 msgid "Defaults to ``us``." msgstr "Defaults to ``us``." @@ -3988,6 +4504,10 @@ msgstr "Define Conection Timeouts" msgid "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." msgstr "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." +#: ../../configuration/container/index.rst:148 +msgid "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." +msgstr "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." + #: ../../configuration/firewall/groups.rst:52 msgid "Define a IPv4 or IPv6 Network group." msgstr "Define a IPv4 or IPv6 Network group." @@ -4040,6 +4560,10 @@ msgstr "Define different modes for sending replies in response to received ARP r msgid "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." msgstr "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." +#: ../../configuration/service/ntp.rst:88 +msgid "Define how to handle leaf-seonds." +msgstr "Define how to handle leaf-seonds." + #: ../../configuration/firewall/flowtables.rst:71 msgid "Define interfaces to be used in the flowtable." msgstr "Define interfaces to be used in the flowtable." @@ -4068,7 +4592,11 @@ msgstr "Define log group to send message to. Only applicable if rule log is enab msgid "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." msgstr "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/service/dhcp-server.rst:187 +msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" +msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" + +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Define the time interval to update the local cache" @@ -4080,7 +4608,11 @@ msgstr "Define the zone as a local zone. A local zone has no interfaces and will msgid "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/interfaces/bridge.rst:135 +msgid "Define used ethertype of bridge interface." +msgstr "Define used ethertype of bridge interface." + +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." @@ -4092,26 +4624,51 @@ msgstr "Defines alternate sources for multicasting and IGMP data. The network ad msgid "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." msgstr "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." -#: ../../configuration/protocols/static.rst:120 -#: ../../configuration/protocols/static.rst:133 +#: ../../configuration/protocols/static.rst:154 +#: ../../configuration/protocols/static.rst:167 msgid "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +#: ../../configuration/service/pppoe-server.rst:496 +#: ../../configuration/vpn/l2tp.rst:450 +#: ../../configuration/vpn/pptp.rst:374 +#: ../../configuration/vpn/sstp.rst:408 +msgid "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." +msgstr "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." + #: ../../configuration/protocols/static.rst:34 #: ../../configuration/protocols/static.rst:54 -#: ../../configuration/protocols/static.rst:81 -#: ../../configuration/protocols/static.rst:101 +#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:124 msgid "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +#: ../../configuration/service/pppoe-server.rst:515 +#: ../../configuration/vpn/l2tp.rst:469 +#: ../../configuration/vpn/pptp.rst:393 +#: ../../configuration/vpn/sstp.rst:427 +msgid "Defines preferred MRU. By default is not defined." +msgstr "Defines preferred MRU. By default is not defined." + #: ../../configuration/protocols/failover.rst:31 msgid "Defines protocols for checking ARP, ICMP, TCP" msgstr "Defines protocols for checking ARP, ICMP, TCP" -#: ../../configuration/vpn/sstp.rst:178 +#: ../../configuration/vpn/sstp.rst:184 msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." +#: ../../configuration/service/pppoe-server.rst:479 +#: ../../configuration/vpn/l2tp.rst:433 +#: ../../configuration/vpn/pptp.rst:357 +#: ../../configuration/vpn/sstp.rst:391 +msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." + +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):" @@ -4120,15 +4677,15 @@ msgstr "Defines the specified device as a system console. Available console devi msgid "Defining Peers" msgstr "Defining Peers" -#: ../../configuration/service/dhcp-server.rst:579 +#: ../../configuration/service/dhcp-server.rst:638 msgid "Delegate prefixes from the range indicated by the start and stop qualifier." msgstr "Delegate prefixes from the range indicated by the start and stop qualifier." -#: ../../configuration/policy/route-map.rst:231 +#: ../../configuration/policy/route-map.rst:234 msgid "Delete BGP communities matching the community-list." msgstr "Delete BGP communities matching the community-list." -#: ../../configuration/policy/route-map.rst:246 +#: ../../configuration/policy/route-map.rst:249 msgid "Delete BGP communities matching the large-community-list." msgstr "Delete BGP communities matching the large-community-list." @@ -4136,11 +4693,15 @@ msgstr "Delete BGP communities matching the large-community-list." msgid "Delete Logs" msgstr "Delete Logs" -#: ../../configuration/policy/route-map.rst:226 +#: ../../configuration/container/index.rst:211 +msgid "Delete a particular container image based on it's image ID. You can also delete all container images at once." +msgstr "Delete a particular container image based on it's image ID. You can also delete all container images at once." + +#: ../../configuration/policy/route-map.rst:229 msgid "Delete all BGP communities" msgstr "Delete all BGP communities" -#: ../../configuration/policy/route-map.rst:241 +#: ../../configuration/policy/route-map.rst:244 msgid "Delete all BGP large-communities" msgstr "Delete all BGP large-communities" @@ -4205,15 +4766,37 @@ msgstr "Devices evaluating whether an IPv4 address is public must be updated to msgid "Different NAT Types" msgstr "Different NAT Types" -#: ../../configuration/pki/index.rst:100 +#: ../../configuration/pki/index.rst:102 msgid "Diffie-Hellman parameters" msgstr "Diffie-Hellman parameters" +#: ../../configuration/service/ids.rst:93 +msgid "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." +msgstr "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." + +#: ../../configuration/system/option.rst:46 +msgid "Disable CPU power saving mechanisms also known as C states." +msgstr "Disable CPU power saving mechanisms also known as C states." + +#: ../../configuration/service/pppoe-server.rst:457 +#: ../../configuration/vpn/l2tp.rst:411 +#: ../../configuration/vpn/pptp.rst:335 +#: ../../configuration/vpn/sstp.rst:369 +msgid "Disable Compression Control Protocol (CCP). CCP is enabled by default." +msgstr "Disable Compression Control Protocol (CCP). CCP is enabled by default." + #: ../../configuration/protocols/pim6.rst:37 msgid "Disable MLD reports and query on the interface." msgstr "Disable MLD reports and query on the interface." -#: ../../configuration/vpn/sstp.rst:75 +#: ../../configuration/system/login.rst:39 +msgid "Disable (lock) account. User will not be able to log in." +msgstr "Disable (lock) account. User will not be able to log in." + +#: ../../configuration/service/pppoe-server.rst:432 +#: ../../configuration/vpn/l2tp.rst:376 +#: ../../configuration/vpn/pptp.rst:300 +#: ../../configuration/vpn/sstp.rst:334 msgid "Disable `<user>` account." msgstr "Disable `<user>` account." @@ -4221,11 +4804,23 @@ msgstr "Disable `<user>` account." msgid "Disable a BFD peer" msgstr "Disable a BFD peer" -#: ../../configuration/container/index.rst:128 +#: ../../configuration/container/index.rst:133 msgid "Disable a container." msgstr "Disable a container." -#: ../../configuration/firewall/ipv4.rst:930 +#: ../../configuration/container/index.rst:166 +msgid "Disable a given container registry" +msgstr "Disable a given container registry" + +#: ../../configuration/system/option.rst:35 +msgid "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." +msgstr "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." + +#: ../../configuration/service/conntrack-sync.rst:103 +msgid "Disable connection logging via Syslog." +msgstr "Disable connection logging via Syslog." + +#: ../../configuration/firewall/ipv4.rst:953 #: ../../configuration/firewall/ipv6.rst:939 msgid "Disable conntrack loose track option" msgstr "Disable conntrack loose track option" @@ -4242,7 +4837,11 @@ msgstr "Disable dhcpv6-relay service." msgid "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." msgstr "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." -#: ../../configuration/protocols/bgp.rst:616 +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." + +#: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Disable immediate session reset if peer's connected link goes down." @@ -4254,6 +4853,10 @@ msgstr "Disable password based authentication. Login via SSH keys only. This har msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." @@ -4286,11 +4889,15 @@ msgstr "Disabled by default - no kernel module loaded." msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." -#: ../../configuration/protocols/static.rst:76 +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + +#: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Disables interface-based IPv4 static route." -#: ../../configuration/protocols/static.rst:96 +#: ../../configuration/protocols/static.rst:119 msgid "Disables interface-based IPv6 static route." msgstr "Disables interface-based IPv6 static route." @@ -4306,7 +4913,7 @@ msgstr "Disables web filtering without discarding configuration." msgid "Disables web proxy transparent mode at a listening address." msgstr "Disables web proxy transparent mode at a listening address." -#: ../../configuration/service/router-advert.rst:73 +#: ../../configuration/service/router-advert.rst:99 msgid "Disabling Advertisements" msgstr "Disabling Advertisements" @@ -4326,11 +4933,11 @@ msgstr "Disadvantages are:" msgid "Disassociate stations based on excessive transmission failures or other indications of connection loss." msgstr "Disassociate stations based on excessive transmission failures or other indications of connection loss." -#: ../../configuration/vrf/index.rst:142 +#: ../../configuration/vrf/index.rst:161 msgid "Display IPv4 routing table for VRF identified by `<name>`." msgstr "Display IPv4 routing table for VRF identified by `<name>`." -#: ../../configuration/vrf/index.rst:161 +#: ../../configuration/vrf/index.rst:180 msgid "Display IPv6 routing table for VRF identified by `<name>`." msgstr "Display IPv6 routing table for VRF identified by `<name>`." @@ -4338,7 +4945,7 @@ msgstr "Display IPv6 routing table for VRF identified by `<name>`." msgid "Display Logs" msgstr "Display Logs" -#: ../../configuration/system/login.rst:188 +#: ../../configuration/system/login.rst:192 msgid "Display OTP key for user" msgstr "Display OTP key for user" @@ -4346,11 +4953,11 @@ msgstr "Display OTP key for user" msgid "Display all authorization attempts of the specified image" msgstr "Display all authorization attempts of the specified image" -#: ../../configuration/protocols/static.rst:200 +#: ../../configuration/protocols/static.rst:233 msgid "Display all known ARP table entries on a given interface only (`eth1`):" msgstr "Display all known ARP table entries on a given interface only (`eth1`):" -#: ../../configuration/protocols/static.rst:188 +#: ../../configuration/protocols/static.rst:221 msgid "Display all known ARP table entries spanning across all interfaces" msgstr "Display all known ARP table entries spanning across all interfaces" @@ -4382,7 +4989,7 @@ msgstr "Displays information about all neighbors discovered via LLDP." msgid "Displays queue information for a PPPoE interface." msgstr "Displays queue information for a PPPoE interface." -#: ../../configuration/vrf/index.rst:213 +#: ../../configuration/vrf/index.rst:232 msgid "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." msgstr "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." @@ -4390,14 +4997,32 @@ msgstr "Displays the route packets taken to a network host utilizing VRF instanc msgid "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." msgstr "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." +#: ../../configuration/system/ip.rst:55 +#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:85 +msgid "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + +#: ../../configuration/system/ipv6.rst:51 +msgid "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + #: ../../_include/interface-ipv6.txt:37 msgid "Do not assign a link-local IPv6 address to this interface." msgstr "Do not assign a link-local IPv6 address to this interface." -#: ../../configuration/trafficpolicy/index.rst:1208 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + +#: ../../configuration/protocols/bgp.rst:609 +msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." +msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." + #: ../../configuration/service/dns.rst:103 msgid "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." msgstr "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." @@ -4426,7 +5051,7 @@ msgstr "Domain name(s) for which to obtain certificate" msgid "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." msgstr "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." -#: ../../configuration/pki/index.rst:259 +#: ../../configuration/pki/index.rst:290 msgid "Domain names to apply, multiple domain-names can be specified." msgstr "Domain names to apply, multiple domain-names can be specified." @@ -4435,19 +5060,19 @@ msgstr "Domain names to apply, multiple domain-names can be specified." msgid "Domain search order" msgstr "Domain search order" -#: ../../configuration/pki/index.rst:25 +#: ../../configuration/pki/index.rst:27 msgid "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" msgstr "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" -#: ../../configuration/protocols/bgp.rst:1172 +#: ../../configuration/protocols/bgp.rst:1194 msgid "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -#: ../../configuration/protocols/bgp.rst:1126 +#: ../../configuration/protocols/bgp.rst:1148 msgid "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -#: ../../configuration/vpn/site2site_ipsec.rst:299 +#: ../../configuration/vpn/site2site_ipsec.rst:302 msgid "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." msgstr "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." @@ -4459,10 +5084,17 @@ msgstr "Download/Update complete blacklist" msgid "Download/Update partial blacklist." msgstr "Download/Update partial blacklist." -#: ../../configuration/vpn/sstp.rst:85 +#: ../../configuration/service/pppoe-server.rst:262 +#: ../../configuration/vpn/l2tp.rst:386 +#: ../../configuration/vpn/pptp.rst:310 +#: ../../configuration/vpn/sstp.rst:344 msgid "Download bandwidth limit in kbit/s for `<user>`." msgstr "Download bandwidth limit in kbit/s for `<user>`." +#: ../../configuration/service/ipoe-server.rst:320 +msgid "Download bandwidth limit in kbit/s for user on interface `<interface>`." +msgstr "Download bandwidth limit in kbit/s for user on interface `<interface>`." + #: ../../configuration/policy/route-map.rst:202 msgid "Drop AS-NUMBER from the BGP AS path." msgstr "Drop AS-NUMBER from the BGP AS path." @@ -4479,7 +5111,7 @@ msgstr "Drop rate" msgid "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" msgstr "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" -#: ../../configuration/service/pppoe-server.rst:367 +#: ../../configuration/service/pppoe-server.rst:625 msgid "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" msgstr "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" @@ -4495,19 +5127,23 @@ msgstr "Dummy interface" msgid "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." msgstr "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." -#: ../../configuration/vrf/index.rst:193 +#: ../../configuration/vrf/index.rst:212 msgid "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." msgstr "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." -#: ../../configuration/pki/index.rst:285 +#: ../../configuration/pki/index.rst:316 msgid "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" msgstr "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" +#: ../../configuration/vpn/ipsec.rst:568 +msgid "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." +msgstr "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." + #: ../../configuration/service/ssh.rst:113 msgid "Dynamic-protection" msgstr "Dynamic-protection" -#: ../../configuration/service/dns.rst:212 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "Dynamic DNS" @@ -4519,11 +5155,11 @@ msgstr "EAPoL comes with an identify option. We automatically use the interface msgid "ESP Phase:" msgstr "ESP Phase:" -#: ../../configuration/vpn/ipsec.rst:111 +#: ../../configuration/vpn/ipsec.rst:113 msgid "ESP (Encapsulating Security Payload) Attributes" msgstr "ESP (Encapsulating Security Payload) Attributes" -#: ../../configuration/vpn/ipsec.rst:112 +#: ../../configuration/vpn/ipsec.rst:115 msgid "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" msgstr "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" @@ -4587,7 +5223,7 @@ msgstr "Eenables the Generic Protocol extension (VXLAN-GPE). Currently, this is msgid "Email address to associate with certificate" msgstr "Email address to associate with certificate" -#: ../../configuration/pki/index.rst:265 +#: ../../configuration/pki/index.rst:296 msgid "Email used for registration and recovery contact." msgstr "Email used for registration and recovery contact." @@ -4599,35 +5235,35 @@ msgstr "Embedding one policy into another one" msgid "Emergency" msgstr "Emergency" -#: ../../configuration/protocols/bfd.rst:89 +#: ../../configuration/protocols/bfd.rst:96 msgid "Enable BFD for ISIS on an interface" msgstr "Enable BFD for ISIS on an interface" -#: ../../configuration/protocols/bfd.rst:77 +#: ../../configuration/protocols/bfd.rst:84 msgid "Enable BFD for OSPF on an interface" msgstr "Enable BFD for OSPF on an interface" -#: ../../configuration/protocols/bfd.rst:81 +#: ../../configuration/protocols/bfd.rst:88 msgid "Enable BFD for OSPFv3 on an interface" msgstr "Enable BFD for OSPFv3 on an interface" -#: ../../configuration/protocols/bfd.rst:61 +#: ../../configuration/protocols/bfd.rst:68 msgid "Enable BFD in BGP" msgstr "Enable BFD in BGP" -#: ../../configuration/protocols/bfd.rst:85 +#: ../../configuration/protocols/bfd.rst:92 msgid "Enable BFD in ISIS" msgstr "Enable BFD in ISIS" -#: ../../configuration/protocols/bfd.rst:73 +#: ../../configuration/protocols/bfd.rst:80 msgid "Enable BFD in OSPF" msgstr "Enable BFD in OSPF" -#: ../../configuration/protocols/bfd.rst:69 +#: ../../configuration/protocols/bfd.rst:76 msgid "Enable BFD on a BGP peer group" msgstr "Enable BFD on a BGP peer group" -#: ../../configuration/protocols/bfd.rst:65 +#: ../../configuration/protocols/bfd.rst:72 msgid "Enable BFD on a single BGP neighbor" msgstr "Enable BFD on a single BGP neighbor" @@ -4635,6 +5271,10 @@ msgstr "Enable BFD on a single BGP neighbor" msgid "Enable DHCP failover configuration for this address pool." msgstr "Enable DHCP failover configuration for this address pool." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``" @@ -4651,7 +5291,7 @@ msgstr "Enable IGMP and MLD querier." msgid "Enable IGMP and MLD snooping." msgstr "Enable IGMP and MLD snooping." -#: ../../configuration/service/dhcp-server.rst:271 +#: ../../configuration/service/dhcp-server.rst:327 msgid "Enable IP forwarding on client" msgstr "Enable IP forwarding on client" @@ -4705,7 +5345,7 @@ msgstr "Enable OSPF with Segment Routing (Experimental):" msgid "Enable OSPF with route redistribution of the loopback and default originate:" msgstr "Enable OSPF with route redistribution of the loopback and default originate:" -#: ../../configuration/system/login.rst:103 +#: ../../configuration/system/login.rst:107 msgid "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." @@ -4713,6 +5353,18 @@ msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE msgid "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." msgstr "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." +#: ../../configuration/service/router-advert.rst:82 +msgid "Enable PREF64 option as outlined in :rfc:`8781`." +msgstr "Enable PREF64 option as outlined in :rfc:`8781`." + +#: ../../configuration/service/ipoe-server.rst:386 +#: ../../configuration/service/pppoe-server.rst:575 +#: ../../configuration/vpn/l2tp.rst:510 +#: ../../configuration/vpn/pptp.rst:434 +#: ../../configuration/vpn/sstp.rst:468 +msgid "Enable SNMP" +msgstr "Enable SNMP" + #: ../../configuration/service/lldp.rst:59 msgid "Enable SNMP queries of the LLDP database" msgstr "Enable SNMP queries of the LLDP database" @@ -4721,8 +5373,8 @@ msgstr "Enable SNMP queries of the LLDP database" msgid "Enable SNMP support for an individual routing daemon." msgstr "Enable SNMP support for an individual routing daemon." -#: ../../configuration/interfaces/bridge.rst:197 -#: ../../configuration/interfaces/bridge.rst:232 +#: ../../configuration/interfaces/bridge.rst:206 +#: ../../configuration/interfaces/bridge.rst:241 msgid "Enable STP" msgstr "Enable STP" @@ -4833,15 +5485,23 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." -#: ../../configuration/vrf/index.rst:461 +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + +#: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." -#: ../../configuration/vpn/sstp.rst:277 +#: ../../configuration/service/ipoe-server.rst:220 +#: ../../configuration/service/pppoe-server.rst:182 +#: ../../configuration/vpn/l2tp.rst:225 +#: ../../configuration/vpn/pptp.rst:165 +#: ../../configuration/vpn/sstp.rst:198 msgid "Enables bandwidth shaping via RADIUS." msgstr "Enables bandwidth shaping via RADIUS." -#: ../../configuration/vrf/index.rst:483 +#: ../../configuration/vrf/index.rst:502 msgid "Enables import or export of routes between the current unicast VRF and VPN." msgstr "Enables import or export of routes between the current unicast VRF and VPN." @@ -4853,6 +5513,10 @@ msgstr "Enables the Generic Protocol extension (VXLAN-GPE). Currently, this is o msgid "Enables the echo transmission mode" msgstr "Enables the echo transmission mode" +#: ../../configuration/system/option.rst:27 +msgid "Enables the root partition auto-extension and resizes to the maximum available space on system boot." +msgstr "Enables the root partition auto-extension and resizes to the maximum available space on system boot." + #: ../../configuration/service/router-advert.rst:27 msgid "Enabling Advertisments" msgstr "Enabling Advertisments" @@ -4873,11 +5537,15 @@ msgstr "Enabling this function increases the risk of bandwidth saturation." msgid "Enforce strict path checking" msgstr "Enforce strict path checking" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Enslave `<member>` interface to bond `<interface>`." -#: ../../configuration/protocols/bgp.rst:764 +#: ../../configuration/protocols/bgp.rst:786 msgid "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." msgstr "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." @@ -4913,6 +5581,10 @@ msgstr "Ethernet flow control is a mechanism for temporarily stopping the transm msgid "Ethernet options" msgstr "Ethernet options" +#: ../../configuration/interfaces/bridge.rst:137 +msgid "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." +msgstr "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." + #: ../../configuration/service/eventhandler.rst:5 msgid "Event Handler" msgstr "Event Handler" @@ -4945,11 +5617,11 @@ msgstr "Every NAT rule has a translation command defined. The address defined fo msgid "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" msgstr "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" -#: ../../configuration/system/login.rst:47 +#: ../../configuration/system/login.rst:51 msgid "Every SSH key comes in three parts:" msgstr "Every SSH key comes in three parts:" -#: ../../configuration/system/login.rst:68 +#: ../../configuration/system/login.rst:72 msgid "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" msgstr "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" @@ -4965,12 +5637,16 @@ msgstr "Every Virtual Ethernet interfaces behaves like a real Ethernet interface msgid "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." msgstr "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." +#: ../../configuration/vpn/ipsec.rst:439 +msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." +msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:98 msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." #: ../../configuration/firewall/bridge.rst:321 -#: ../../configuration/highavailability/index.rst:397 +#: ../../configuration/highavailability/index.rst:407 #: ../../configuration/interfaces/bonding.rst:291 #: ../../configuration/interfaces/l2tpv3.rst:86 #: ../../configuration/interfaces/pppoe.rst:323 @@ -4980,23 +5656,24 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:156 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 -#: ../../configuration/service/conntrack-sync.rst:186 +#: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 -#: ../../configuration/service/dhcp-server.rst:362 -#: ../../configuration/service/dns.rst:160 -#: ../../configuration/service/dns.rst:276 +#: ../../configuration/service/dhcp-server.rst:418 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 -#: ../../configuration/service/ipoe-server.rst:150 +#: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 #: ../../configuration/service/monitoring.rst:134 +#: ../../configuration/service/router-advert.rst:108 #: ../../configuration/service/snmp.rst:94 #: ../../configuration/service/snmp.rst:145 #: ../../configuration/service/tftp-server.rst:47 #: ../../configuration/system/acceleration.rst:58 -#: ../../configuration/system/login.rst:397 +#: ../../configuration/system/login.rst:401 #: ../../configuration/system/name-server.rst:28 #: ../../configuration/system/name-server.rst:63 #: ../../configuration/system/sflow.rst:49 @@ -5005,9 +5682,8 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/trafficpolicy/index.rst:1122 #: ../../configuration/vpn/dmvpn.rst:161 #: ../../configuration/vpn/openconnect.rst:97 -#: ../../configuration/vpn/sstp.rst:286 -#: ../../configuration/vrf/index.rst:99 -#: ../../configuration/vrf/index.rst:232 +#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:251 msgid "Example" msgstr "Example" @@ -5028,16 +5704,18 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../configuration/nat/nat44.rst:425 #: ../../configuration/nat/nat66.rst:78 #: ../../configuration/nat/nat66.rst:96 -#: ../../configuration/protocols/static.rst:174 -#: ../../configuration/service/dns.rst:363 +#: ../../configuration/protocols/static.rst:67 +#: ../../configuration/protocols/static.rst:135 +#: ../../configuration/protocols/static.rst:207 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 #: ../../configuration/service/ssh.rst:200 #: ../../configuration/system/flow-accounting.rst:164 -#: ../../configuration/vpn/l2tp.rst:41 -#: ../../configuration/vpn/site2site_ipsec.rst:162 -#: ../../configuration/vpn/site2site_ipsec.rst:273 +#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:276 #: ../../_include/interface-address-with-dhcp.txt:22 #: ../../_include/interface-address.txt:9 #: ../../_include/interface-description.txt:7 @@ -5105,15 +5783,15 @@ msgstr "Example: Mirror the outbound traffic of `br1` port to `eth3`" msgid "Example: Mirror the outbound traffic of `eth1` port to `eth3`" msgstr "Example: Mirror the outbound traffic of `eth1` port to `eth3`" -#: ../../configuration/interfaces/bridge.rst:166 +#: ../../configuration/interfaces/bridge.rst:175 msgid "Example: Set `eth0` member port to be allowed VLAN 4" msgstr "Example: Set `eth0` member port to be allowed VLAN 4" -#: ../../configuration/interfaces/bridge.rst:172 +#: ../../configuration/interfaces/bridge.rst:181 msgid "Example: Set `eth0` member port to be allowed VLAN 6-8" msgstr "Example: Set `eth0` member port to be allowed VLAN 6-8" -#: ../../configuration/interfaces/bridge.rst:153 +#: ../../configuration/interfaces/bridge.rst:162 msgid "Example: Set `eth0` member port to be native VLAN 2" msgstr "Example: Set `eth0` member port to be native VLAN 2" @@ -5121,13 +5799,12 @@ msgstr "Example: Set `eth0` member port to be native VLAN 2" msgid "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." -#: ../../configuration/container/index.rst:177 -#: ../../configuration/service/https.rst:77 -#: ../../configuration/service/router-advert.rst:80 +#: ../../configuration/container/index.rst:216 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Example Configuration" -#: ../../configuration/service/dns.rst:378 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Example IPv6 only:" @@ -5135,7 +5812,7 @@ msgstr "Example IPv6 only:" msgid "Example Network" msgstr "Example Network" -#: ../../configuration/firewall/ipv4.rst:1130 +#: ../../configuration/firewall/ipv4.rst:1153 #: ../../configuration/firewall/ipv6.rst:1153 msgid "Example Partial Config" msgstr "Example Partial Config" @@ -5156,27 +5833,28 @@ msgstr "Example for configuring a simple L2TP over IPsec VPN for remote access ( msgid "Example of redirection:" msgstr "Example of redirection:" -#: ../../configuration/firewall/ipv4.rst:925 +#: ../../configuration/firewall/ipv4.rst:948 #: ../../configuration/firewall/ipv6.rst:934 msgid "Example synproxy" msgstr "Example synproxy" #: ../../configuration/firewall/groups.rst:145 -#: ../../configuration/interfaces/bridge.rst:187 +#: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 -#: ../../configuration/protocols/bgp.rst:1096 +#: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 #: ../../configuration/protocols/ospf.rst:834 -#: ../../configuration/service/pppoe-server.rst:343 +#: ../../configuration/service/pppoe-server.rst:601 #: ../../configuration/service/webproxy.rst:419 msgid "Examples" msgstr "Examples" #: ../../configuration/nat/nat44.rst:154 -#: ../../configuration/vpn/site2site_ipsec.rst:157 +#: ../../configuration/vpn/site2site_ipsec.rst:160 msgid "Examples:" msgstr "Examples:" @@ -5224,6 +5902,10 @@ msgstr "External DHCPv6 server is at 2001:db8::4" msgid "External Route Summarisation" msgstr "External Route Summarisation" +#: ../../configuration/service/ids.rst:101 +msgid "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" +msgstr "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" + #: ../../configuration/trafficpolicy/index.rst:441 msgid "FQ-CoDel" msgstr "FQ-CoDel" @@ -5274,8 +5956,6 @@ msgstr "Facility Code" #: ../../configuration/loadbalancing/wan.rst:218 #: ../../configuration/protocols/failover.rst:3 -#: ../../configuration/service/dhcp-server.rst:136 -#: ../../configuration/service/dhcp-server.rst:369 msgid "Failover" msgstr "Failover" @@ -5291,6 +5971,10 @@ msgstr "Failover mechanism to use for conntrack-sync." msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Fair Queue" @@ -5303,7 +5987,15 @@ msgstr "Fair Queue is a non-shaping (work-conserving) policy, so it will only be msgid "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." msgstr "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/service/ids.rst:9 +msgid "FastNetMon" +msgstr "FastNetMon" + +#: ../../configuration/service/ids.rst:11 +msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." +msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." + +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Features of the Current Implementation" @@ -5311,11 +6003,15 @@ msgstr "Features of the Current Implementation" msgid "Field" msgstr "Field" -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:325 +msgid "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." +msgstr "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." + +#: ../../configuration/service/dns.rst:255 msgid "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." msgstr "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." -#: ../../configuration/service/pppoe-server.rst:228 +#: ../../configuration/service/pppoe-server.rst:302 msgid "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" msgstr "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" @@ -5404,7 +6100,7 @@ msgstr "Firewall groups represent collections of IP addresses, networks, ports, msgid "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." msgstr "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." -#: ../../configuration/highavailability/index.rst:381 +#: ../../configuration/highavailability/index.rst:391 msgid "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" msgstr "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" @@ -5428,7 +6124,7 @@ msgstr "Firmware Update" msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." -#: ../../configuration/vpn/ipsec.rst:267 +#: ../../configuration/vpn/ipsec.rst:271 msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." @@ -5436,6 +6132,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -5468,6 +6168,10 @@ msgstr "First the OTP keys must be generated and sent to the user and to the con msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." @@ -5492,6 +6196,30 @@ msgstr "Flow Export" msgid "Flow and packet-based balancing" msgstr "Flow and packet-based balancing" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." @@ -5544,15 +6272,15 @@ msgstr "For Hashing:" msgid "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." msgstr "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." -#: ../../configuration/policy/route-map.rst:311 +#: ../../configuration/policy/route-map.rst:314 msgid "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." msgstr "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." -#: ../../configuration/service/pppoe-server.rst:188 +#: ../../configuration/service/pppoe-server.rst:257 msgid "For Local Users" msgstr "For Local Users" -#: ../../configuration/service/pppoe-server.rst:223 +#: ../../configuration/service/pppoe-server.rst:297 msgid "For RADIUS users" msgstr "For RADIUS users" @@ -5592,7 +6320,7 @@ msgstr "For a simple home network using just the ISP's equipment, this is usuall msgid "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." msgstr "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." -#: ../../configuration/system/login.rst:132 +#: ../../configuration/system/login.rst:136 msgid "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." msgstr "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." @@ -5618,7 +6346,7 @@ msgstr "For fragmented TCP or UDP packets and all other IPv4 and IPv6 protocol t msgid "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" msgstr "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" -#: ../../configuration/protocols/bgp.rst:823 +#: ../../configuration/protocols/bgp.rst:845 msgid "For inbound updates the order of preference is:" msgstr "For inbound updates the order of preference is:" @@ -5642,7 +6370,11 @@ msgstr "For latest releases, refer the `firewall (interface-groups) <https://doc msgid "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." msgstr "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." -#: ../../configuration/service/pppoe-server.rst:299 +#: ../../configuration/protocols/bfd.rst:61 +msgid "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." +msgstr "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." + +#: ../../configuration/service/pppoe-server.rst:307 msgid "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." msgstr "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." @@ -5650,7 +6382,7 @@ msgstr "For network maintenance, it's a good idea to direct users to a backup se msgid "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." msgstr "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." -#: ../../configuration/protocols/bgp.rst:829 +#: ../../configuration/protocols/bgp.rst:851 msgid "For outbound updates the order of preference is:" msgstr "For outbound updates the order of preference is:" @@ -5691,11 +6423,11 @@ msgstr "For the :ref:`destination-nat66` rule, the destination address of the pa msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." -#: ../../configuration/container/index.rst:179 +#: ../../configuration/container/index.rst:218 msgid "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." msgstr "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." @@ -5729,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." @@ -5737,7 +6473,7 @@ msgstr "Formally, a virtual link looks like a point-to-point network connecting msgid "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." msgstr "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." -#: ../../configuration/highavailability/index.rst:362 +#: ../../configuration/highavailability/index.rst:372 msgid "Forward method" msgstr "Forward method" @@ -5765,7 +6501,7 @@ msgstr "From a security perspective, it is not recommended to let a third party msgid "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" msgstr "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" -#: ../../configuration/highavailability/index.rst:380 +#: ../../configuration/highavailability/index.rst:390 msgid "Fwmark" msgstr "Fwmark" @@ -5806,6 +6542,11 @@ msgstr "GRE is often seen as a one size fits all solution when it comes to class msgid "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." msgstr "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." +#: ../../configuration/pki/index.rst:123 +#: ../../configuration/pki/index.rst:128 +msgid "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." +msgstr "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." + #: ../../configuration/protocols/isis.rst:25 #: ../../configuration/protocols/ospf.rst:25 #: ../../configuration/protocols/ospf.rst:1081 @@ -5835,18 +6576,18 @@ msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key." msgid "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." -#: ../../configuration/pki/index.rst:153 -#: ../../configuration/pki/index.rst:157 +#: ../../configuration/pki/index.rst:155 +#: ../../configuration/pki/index.rst:159 msgid "Generate a WireGuard pre-shared secret used for peers to communicate." msgstr "Generate a WireGuard pre-shared secret used for peers to communicate." -#: ../../configuration/pki/index.rst:136 -#: ../../configuration/pki/index.rst:141 +#: ../../configuration/pki/index.rst:138 +#: ../../configuration/pki/index.rst:143 msgid "Generate a new WireGuard public/private key portion and output the result to the console." msgstr "Generate a new WireGuard public/private key portion and output the result to the console." -#: ../../configuration/pki/index.rst:104 -#: ../../configuration/pki/index.rst:111 +#: ../../configuration/pki/index.rst:106 +#: ../../configuration/pki/index.rst:113 msgid "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." msgstr "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." @@ -5882,7 +6623,7 @@ msgstr "Get detailed information about LLDP neighbors." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Getting started" @@ -5898,6 +6639,18 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +msgid "Global" +msgstr "Global" + +#: ../../configuration/service/ipoe-server.rst:352 +#: ../../configuration/service/pppoe-server.rst:518 +#: ../../configuration/vpn/l2tp.rst:472 +#: ../../configuration/vpn/pptp.rst:396 +#: ../../configuration/vpn/sstp.rst:430 +msgid "Global Advanced options" +msgstr "Global Advanced options" + #: ../../configuration/firewall/general.rst:84 msgid "Global Options" msgstr "Global Options" @@ -5910,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Global parameters" @@ -5923,6 +6676,10 @@ msgstr "Global settings" msgid "Graceful Restart" msgstr "Graceful Restart" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "Gratuitous ARP" @@ -5947,7 +6704,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "HTTP based services" @@ -5956,10 +6713,14 @@ msgstr "HTTP based services" msgid "HTTP basic authentication username" msgstr "HTTP basic authentication username" -#: ../../configuration/system/option.rst:27 +#: ../../configuration/system/option.rst:57 msgid "HTTP client" msgstr "HTTP client" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "HT (High Throughput) capabilities (802.11n)" @@ -5968,7 +6729,7 @@ msgstr "HT (High Throughput) capabilities (802.11n)" msgid "Hairpin NAT/NAT Reflection" msgstr "Hairpin NAT/NAT Reflection" -#: ../../configuration/service/dhcp-server.rst:573 +#: ../../configuration/service/dhcp-server.rst:632 msgid "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." msgstr "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." @@ -5980,7 +6741,7 @@ msgstr "Handling and monitoring" msgid "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." msgstr "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." -#: ../../configuration/highavailability/index.rst:372 +#: ../../configuration/highavailability/index.rst:382 msgid "Health-check" msgstr "Health-check" @@ -6024,7 +6785,7 @@ msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:" -#: ../../configuration/protocols/rpki.rst:167 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." @@ -6054,6 +6815,11 @@ msgstr "Hewlett-Packard call it Source-Port filtering or port-isolation" msgid "High" msgstr "High" +#: ../../configuration/service/dhcp-server.rst:170 +#: ../../configuration/service/dhcp-server.rst:425 +msgid "High Availability" +msgstr "High Availability" + #: ../../configuration/highavailability/index.rst:6 msgid "High availability" msgstr "High availability" @@ -6074,7 +6840,7 @@ msgstr "Host Information" msgid "Host name" msgstr "Host name" -#: ../../configuration/service/dhcp-server.rst:630 +#: ../../configuration/service/dhcp-server.rst:691 msgid "Host specific mapping shall be named ``client1``" msgstr "Host specific mapping shall be named ``client1``" @@ -6094,7 +6860,7 @@ msgstr "How to configure Event Handler" msgid "How to make it work" msgstr "How to make it work" -#: ../../configuration/vpn/ipsec.rst:263 +#: ../../configuration/vpn/ipsec.rst:267 msgid "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." msgstr "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." @@ -6158,14 +6924,18 @@ msgstr "IKE (Internet Key Exchange) Attributes" msgid "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" msgstr "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" -#: ../../configuration/vpn/site2site_ipsec.rst:160 +#: ../../configuration/vpn/site2site_ipsec.rst:163 msgid "IKEv1" msgstr "IKEv1" -#: ../../configuration/vpn/site2site_ipsec.rst:271 +#: ../../configuration/vpn/site2site_ipsec.rst:274 msgid "IKEv2" msgstr "IKEv2" +#: ../../configuration/vpn/ipsec.rst:372 +msgid "IKEv2 IPSec road-warriors remote-access VPN" +msgstr "IKEv2 IPSec road-warriors remote-access VPN" + #: ../../configuration/system/ip.rst:3 msgid "IP" msgstr "IP" @@ -6198,11 +6968,11 @@ msgstr "IPSec IKE and ESP Groups;" msgid "IPSec IKEv2 Remote Access VPN" msgstr "IPSec IKEv2 Remote Access VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN" msgstr "IPSec IKEv2 site2site VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" msgstr "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" @@ -6218,7 +6988,7 @@ msgstr "IPSec VPN tunnels." msgid "IP address" msgstr "IP address" -#: ../../configuration/service/dhcp-server.rst:202 +#: ../../configuration/service/dhcp-server.rst:258 msgid "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" @@ -6227,19 +6997,19 @@ msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named msgid "IP address ``192.168.2.1/24``" msgstr "IP address ``192.168.2.1/24``" -#: ../../configuration/service/dhcp-server.rst:286 +#: ../../configuration/service/dhcp-server.rst:342 msgid "IP address for DHCP server identifier" msgstr "IP address for DHCP server identifier" -#: ../../configuration/service/dhcp-server.rst:276 +#: ../../configuration/service/dhcp-server.rst:332 msgid "IP address of NTP server" msgstr "IP address of NTP server" -#: ../../configuration/service/dhcp-server.rst:316 +#: ../../configuration/service/dhcp-server.rst:372 msgid "IP address of POP3 server" msgstr "IP address of POP3 server" -#: ../../configuration/service/dhcp-server.rst:311 +#: ../../configuration/service/dhcp-server.rst:367 msgid "IP address of SMTP server" msgstr "IP address of SMTP server" @@ -6255,7 +7025,7 @@ msgstr "IP address of route to match, based on prefix-list." msgid "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." msgstr "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." -#: ../../configuration/service/dhcp-server.rst:346 +#: ../../configuration/service/dhcp-server.rst:402 msgid "IP address to exclude from DHCP lease range" msgstr "IP address to exclude from DHCP lease range" @@ -6295,7 +7065,7 @@ msgstr "IP next-hop of route to match, based on type." msgid "IP precedence as defined in :rfc:`791`:" msgstr "IP precedence as defined in :rfc:`791`:" -#: ../../configuration/vpn/l2tp.rst:33 +#: ../../configuration/vpn/l2tp.rst:83 msgid "IP protocol number 50 (ESP)" msgstr "IP protocol number 50 (ESP)" @@ -6307,19 +7077,19 @@ msgstr "IP route source of route to match, based on access-list." msgid "IP route source of route to match, based on prefix-list." msgstr "IP route source of route to match, based on prefix-list." -#: ../../configuration/service/ipoe-server.rst:7 +#: ../../configuration/service/ipoe-server.rst:5 msgid "IPoE Server" msgstr "IPoE Server" -#: ../../configuration/service/ipoe-server.rst:30 +#: ../../configuration/service/ipoe-server.rst:29 msgid "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." msgstr "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." -#: ../../configuration/service/ipoe-server.rst:13 +#: ../../configuration/service/ipoe-server.rst:11 msgid "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." msgstr "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." -#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:153 msgid "IPoE server will listen on interfaces eth1.50 and eth1.51" msgstr "IPoE server will listen on interfaces eth1.50 and eth1.51" @@ -6327,11 +7097,11 @@ msgstr "IPoE server will listen on interfaces eth1.50 and eth1.51" msgid "IPsec" msgstr "IPsec" -#: ../../configuration/vpn/ipsec.rst:172 +#: ../../configuration/vpn/ipsec.rst:176 msgid "IPsec policy matching GRE" msgstr "IPsec policy matching GRE" -#: ../../configuration/service/pppoe-server.rst:346 +#: ../../configuration/service/pppoe-server.rst:604 msgid "IPv4" msgstr "IPv4" @@ -6343,11 +7113,11 @@ msgstr "IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, msgid "IPv4 Firewall Configuration" msgstr "IPv4 Firewall Configuration" -#: ../../configuration/service/dhcp-server.rst:291 +#: ../../configuration/service/dhcp-server.rst:347 msgid "IPv4 address of next bootstrap server" msgstr "IPv4 address of next bootstrap server" -#: ../../configuration/service/dhcp-server.rst:251 +#: ../../configuration/service/dhcp-server.rst:307 msgid "IPv4 address of router on the client's subnet" msgstr "IPv4 address of router on the client's subnet" @@ -6355,7 +7125,7 @@ msgstr "IPv4 address of router on the client's subnet" msgid "IPv4 or IPv6 source address of NetFlow packets" msgstr "IPv4 or IPv6 source address of NetFlow packets" -#: ../../configuration/protocols/bgp.rst:1099 +#: ../../configuration/protocols/bgp.rst:1121 msgid "IPv4 peering" msgstr "IPv4 peering" @@ -6376,8 +7146,12 @@ msgid "IPv4 server" msgstr "IPv4 server" #: ../../configuration/interfaces/pppoe.rst:244 -#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/service/ipoe-server.rst:256 +#: ../../configuration/service/pppoe-server.rst:341 #: ../../configuration/system/ipv6.rst:3 +#: ../../configuration/vpn/l2tp.rst:286 +#: ../../configuration/vpn/pptp.rst:210 +#: ../../configuration/vpn/sstp.rst:244 msgid "IPv6" msgstr "IPv6" @@ -6385,6 +7159,13 @@ msgstr "IPv6" msgid "IPv6 Access List" msgstr "IPv6 Access List" +#: ../../configuration/service/pppoe-server.rst:381 +#: ../../configuration/vpn/l2tp.rst:325 +#: ../../configuration/vpn/pptp.rst:249 +#: ../../configuration/vpn/sstp.rst:283 +msgid "IPv6 Advanced Options" +msgstr "IPv6 Advanced Options" + #: ../../configuration/interfaces/pppoe.rst:379 msgid "IPv6 DHCPv6-PD Example" msgstr "IPv6 DHCPv6-PD Example" @@ -6417,7 +7198,7 @@ msgstr "IPv6 SLAAC and IA-PD" msgid "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" msgstr "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" -#: ../../configuration/service/dhcp-server.rst:628 +#: ../../configuration/service/dhcp-server.rst:689 msgid "IPv6 address ``2001:db8::101`` shall be statically mapped" msgstr "IPv6 address ``2001:db8::101`` shall be statically mapped" @@ -6434,10 +7215,18 @@ msgid "IPv6 address of route to match, based on specified prefix-length. Note th msgstr "IPv6 address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." #: ../../configuration/service/pppoe-server.rst:270 +msgid "IPv6 client's prefix" +msgstr "IPv6 client's prefix" + +#: ../../configuration/service/pppoe-server.rst:270 msgid "IPv6 client's prefix assignment" msgstr "IPv6 client's prefix assignment" -#: ../../configuration/protocols/bgp.rst:1144 +#: ../../configuration/service/pppoe-server.rst:295 +msgid "IPv6 default client's pool assignment" +msgstr "IPv6 default client's pool assignment" + +#: ../../configuration/protocols/bgp.rst:1166 msgid "IPv6 peering" msgstr "IPv6 peering" @@ -6445,7 +7234,7 @@ msgstr "IPv6 peering" msgid "IPv6 prefix." msgstr "IPv6 prefix." -#: ../../configuration/service/dhcp-server.rst:629 +#: ../../configuration/service/dhcp-server.rst:690 msgid "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" msgstr "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" @@ -6457,7 +7246,7 @@ msgstr "IPv6 relay" msgid "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." msgstr "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." -#: ../../configuration/service/dhcp-server.rst:502 +#: ../../configuration/service/dhcp-server.rst:561 msgid "IPv6 server" msgstr "IPv6 server" @@ -6477,7 +7266,7 @@ msgstr "IS-IS Global Configuration" msgid "IS-IS SR Configuration" msgstr "IS-IS SR Configuration" -#: ../../configuration/service/dhcp-server.rst:233 +#: ../../configuration/service/dhcp-server.rst:289 msgid "ISC-DHCP Option name" msgstr "ISC-DHCP Option name" @@ -6493,7 +7282,7 @@ msgstr "If **max-threshold** is set but **min-threshold is not, then **min-thres msgid "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." msgstr "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." -#: ../../configuration/pki/index.rst:249 +#: ../../configuration/pki/index.rst:251 msgid "If CA is present, this certificate will be included in generated CRLs" msgstr "If CA is present, this certificate will be included in generated CRLs" @@ -6517,7 +7306,11 @@ msgstr "If :cfgcmd:`strict` is set the BGP session won’t become established un msgid "If ``alias`` is set, it can be used instead of the device when connecting." msgstr "If ``alias`` is set, it can be used instead of the device when connecting." -#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/policy/route-map.rst:204 +msgid "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." +msgstr "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." + +#: ../../configuration/vpn/l2tp.rst:79 msgid "If a local firewall policy is in place on your external interface you will need to allow the ports below:" msgstr "If a local firewall policy is in place on your external interface you will need to allow the ports below:" @@ -6530,7 +7323,7 @@ msgstr "If a registry is not specified, Docker.io will be used as the container msgid "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." msgstr "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." -#: ../../configuration/protocols/bgp.rst:771 +#: ../../configuration/protocols/bgp.rst:793 msgid "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." msgstr "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." @@ -6608,7 +7401,7 @@ msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguis msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." @@ -6660,11 +7453,46 @@ msgstr "If the AS-Path for the route has only private ASNs, the private ASNs are msgid "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." msgstr "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." +#: ../../configuration/service/ipoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:205 +#: ../../configuration/vpn/l2tp.rst:248 +#: ../../configuration/vpn/pptp.rst:188 +#: ../../configuration/vpn/sstp.rst:221 +msgid "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:233 +#: ../../configuration/service/pppoe-server.rst:195 +#: ../../configuration/vpn/l2tp.rst:238 +#: ../../configuration/vpn/pptp.rst:178 +#: ../../configuration/vpn/sstp.rst:211 +msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." +msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." + #: ../../configuration/vpn/l2tp.rst:211 msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." -#: ../../configuration/vpn/l2tp.rst:218 +#: ../../configuration/service/ipoe-server.rst:237 +#: ../../configuration/service/pppoe-server.rst:199 +#: ../../configuration/vpn/l2tp.rst:242 +#: ../../configuration/vpn/pptp.rst:182 +#: ../../configuration/vpn/sstp.rst:215 +msgid "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:240 +#: ../../configuration/service/pppoe-server.rst:202 +#: ../../configuration/vpn/l2tp.rst:245 +#: ../../configuration/vpn/pptp.rst:185 +#: ../../configuration/vpn/sstp.rst:218 +msgid "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." + +#: ../../configuration/service/pppoe-server.rst:219 +#: ../../configuration/vpn/l2tp.rst:262 +#: ../../configuration/vpn/pptp.rst:202 +#: ../../configuration/vpn/sstp.rst:235 msgid "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." msgstr "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." @@ -6688,6 +7516,10 @@ msgstr "If the current queue size is larger than **queue-limit**, then packets w msgid "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" msgstr "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +#: ../../configuration/firewall/index.rst:83 +msgid "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +msgstr "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" + #: ../../configuration/firewall/index.rst:26 msgid "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" msgstr "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" @@ -6705,7 +7537,7 @@ msgstr "If the statically mapped peer is running Cisco IOS, specify the cisco ke msgid "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." msgstr "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." -#: ../../configuration/service/conntrack-sync.rst:126 +#: ../../configuration/service/conntrack-sync.rst:135 msgid "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" msgstr "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" @@ -6713,7 +7545,7 @@ msgstr "If the table is empty and you have a warning message, it means conntrack msgid "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." msgstr "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." -#: ../../configuration/vpn/site2site_ipsec.rst:241 +#: ../../configuration/vpn/site2site_ipsec.rst:244 msgid "If there is SNAT rules on eth1, need to add exclude rule" msgstr "If there is SNAT rules on eth1, need to add exclude rule" @@ -6726,14 +7558,21 @@ msgstr "If this command is invoked from configure mode with the ``run`` prefix t msgid "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." msgstr "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." -#: ../../configuration/protocols/bgp.rst:768 +#: ../../configuration/protocols/bgp.rst:790 msgid "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." msgstr "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." -#: ../../configuration/vpn/sstp.rst:183 +#: ../../configuration/vpn/sstp.rst:189 msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." +#: ../../configuration/service/pppoe-server.rst:484 +#: ../../configuration/vpn/l2tp.rst:438 +#: ../../configuration/vpn/pptp.rst:362 +#: ../../configuration/vpn/sstp.rst:396 +msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." +msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." + #: ../../_include/interface-ip.txt:75 msgid "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." msgstr "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." @@ -6750,11 +7589,11 @@ msgstr "If this parameter is not set, the default holdoff time is 30 seconds." msgid "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." msgstr "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." -#: ../../configuration/system/login.rst:270 +#: ../../configuration/system/login.rst:274 msgid "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." -#: ../../configuration/system/login.rst:339 +#: ../../configuration/system/login.rst:343 msgid "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." @@ -6774,10 +7613,14 @@ msgstr "If you are a hacker or want to try on your own we support passing raw Op msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." @@ -6786,10 +7629,17 @@ msgstr "If you are responsible for the global addresses assigned to your network msgid "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." msgstr "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." -#: ../../configuration/vpn/l2tp.rst:165 +#: ../../configuration/service/ipoe-server.rst:146 +#: ../../configuration/service/pppoe-server.rst:108 +#: ../../configuration/vpn/l2tp.rst:151 msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +#: ../../configuration/vpn/pptp.rst:91 +#: ../../configuration/vpn/sstp.rst:124 +msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." + #: ../../configuration/interfaces/openvpn.rst:306 msgid "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." msgstr "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." @@ -6813,6 +7663,10 @@ msgstr "If you enable this, you will probably want to set diversity-factor and c msgid "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." msgstr "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." +#: ../../configuration/vpn/ipsec.rst:483 +msgid "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." +msgstr "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." + #: ../../configuration/interfaces/bonding.rst:312 msgid "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." msgstr "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." @@ -6849,10 +7703,26 @@ msgstr "If you only want to check if the user account is enabled and can authent msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." +#: ../../configuration/service/ipoe-server.rst:215 +#: ../../configuration/service/pppoe-server.rst:177 +#: ../../configuration/vpn/l2tp.rst:220 +#: ../../configuration/vpn/pptp.rst:160 +#: ../../configuration/vpn/sstp.rst:193 +msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." +msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." + #: ../../configuration/system/console.rst:41 msgid "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." msgstr "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." +#: ../../configuration/vpn/sstp.rst:482 +msgid "If you use a self-signed certificate, do not forget to install CA on the client side." +msgstr "If you use a self-signed certificate, do not forget to install CA on the client side." + +#: ../../configuration/vpn/ipsec.rst:538 +msgid "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." +msgstr "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." + #: ../../configuration/system/flow-accounting.rst:140 msgid "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." msgstr "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." @@ -6861,7 +7731,7 @@ msgstr "If you want to change the maximum number of flows, which are tracking si msgid "If you want to disable a rule but let it in the configuration." msgstr "If you want to disable a rule but let it in the configuration." -#: ../../configuration/system/login.rst:294 +#: ../../configuration/system/login.rst:298 msgid "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." msgstr "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." @@ -6873,7 +7743,7 @@ msgstr "If you want to use existing blacklists you have to create/download a dat msgid "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." msgstr "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." -#: ../../configuration/protocols/bgp.rst:760 +#: ../../configuration/protocols/bgp.rst:782 msgid "Ignore AS_PATH length when selecting a route" msgstr "Ignore AS_PATH length when selecting a route" @@ -6885,7 +7755,7 @@ msgstr "Ignore VRRP main interface faults" msgid "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" msgstr "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" -#: ../../configuration/vpn/site2site_ipsec.rst:279 +#: ../../configuration/vpn/site2site_ipsec.rst:282 msgid "Imagine the following topology" msgstr "Imagine the following topology" @@ -6893,11 +7763,35 @@ msgstr "Imagine the following topology" msgid "Immediate" msgstr "Immediate" -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/pki/index.rst:254 +msgid "Import files to PKI format" +msgstr "Import files to PKI format" + +#: ../../configuration/pki/index.rst:265 +msgid "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." +msgstr "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." + +#: ../../configuration/pki/index.rst:280 +msgid "Import the OpenVPN shared secret stored in file to the VyOS CLI." +msgstr "Import the OpenVPN shared secret stored in file to the VyOS CLI." + +#: ../../configuration/pki/index.rst:271 +msgid "Import the certificate from the file to VyOS CLI." +msgstr "Import the certificate from the file to VyOS CLI." + +#: ../../configuration/pki/index.rst:275 +msgid "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." + +#: ../../configuration/pki/index.rst:261 +msgid "Import the public CA certificate from the defined file to VyOS CLI." +msgstr "Import the public CA certificate from the defined file to VyOS CLI." + +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Imported prefixes during the validation may have values:" -#: ../../configuration/protocols/static.rst:158 +#: ../../configuration/protocols/static.rst:191 msgid "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." msgstr "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." @@ -6905,7 +7799,7 @@ msgstr "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP msgid "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." msgstr "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." -#: ../../configuration/vpn/ipsec.rst:117 +#: ../../configuration/vpn/ipsec.rst:120 msgid "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." msgstr "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." @@ -6937,7 +7831,7 @@ msgstr "In a minimal configuration, the following must be provided:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "In a nutshell, the current implementation provides the following features:" @@ -6945,7 +7839,7 @@ msgstr "In a nutshell, the current implementation provides the following feature msgid "In addition, you can specify many other parameters to get BGP information:" msgstr "In addition, you can specify many other parameters to get BGP information:" -#: ../../configuration/system/login.rst:301 +#: ../../configuration/system/login.rst:305 msgid "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." @@ -6953,12 +7847,16 @@ msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service msgid "In addition to displaying flow accounting information locally, one can also exported them to a collection server." msgstr "In addition to displaying flow accounting information locally, one can also exported them to a collection server." -#: ../../configuration/pki/index.rst:144 -#: ../../configuration/pki/index.rst:159 +#: ../../configuration/pki/index.rst:146 +#: ../../configuration/pki/index.rst:161 #: ../../configuration/pki/pki_cli_import_help.txt:1 msgid "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." msgstr "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." +#: ../../configuration/interfaces/pppoe.rst:388 +msgid "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." +msgstr "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." + #: ../../configuration/service/broadcast-relay.rst:48 msgid "In addition you can also disable the whole service without the need to remove it from the current configuration." msgstr "In addition you can also disable the whole service without the need to remove it from the current configuration." @@ -7003,7 +7901,7 @@ msgstr "In firewall bridge rules, the action can be:" msgid "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." msgstr "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." -#: ../../configuration/system/login.rst:236 +#: ../../configuration/system/login.rst:240 msgid "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." msgstr "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." @@ -7011,7 +7909,7 @@ msgstr "In large deployments it is not reasonable to configure each user individ msgid "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." msgstr "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." -#: ../../configuration/service/dhcp-server.rst:161 +#: ../../configuration/service/dhcp-server.rst:211 msgid "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." msgstr "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." @@ -7023,7 +7921,7 @@ msgstr "In order for the system to use and complete unqualified host names, a li msgid "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." msgstr "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." -#: ../../configuration/protocols/bgp.rst:820 +#: ../../configuration/protocols/bgp.rst:842 msgid "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." msgstr "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." @@ -7039,7 +7937,7 @@ msgstr "In order to have VyOS Traffic Control working you need to follow 2 steps msgid "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." msgstr "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." -#: ../../configuration/service/dhcp-server.rst:623 +#: ../../configuration/service/dhcp-server.rst:684 msgid "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." msgstr "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." @@ -7055,6 +7953,10 @@ msgstr "In order to separate traffic, Fair Queue uses a classifier based on sour msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." @@ -7079,6 +7981,10 @@ msgstr "In our example, we used the key name ``openvpn-1`` which we will referen msgid "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" msgstr "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" +#: ../../configuration/vpn/ipsec.rst:411 +msgid "In our example the certificate name is called vyos:" +msgstr "In our example the certificate name is called vyos:" + #: ../../configuration/trafficpolicy/index.rst:906 msgid "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." msgstr "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." @@ -7123,7 +8029,11 @@ msgstr "In the case you want to apply some kind of **shaping** to your **inbound msgid "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." msgstr "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." -#: ../../configuration/service/pppoe-server.rst:259 +#: ../../configuration/vpn/ipsec.rst:564 +msgid "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." +msgstr "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." + +#: ../../configuration/service/pppoe-server.rst:333 msgid "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." msgstr "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." @@ -7131,7 +8041,7 @@ msgstr "In the example above, the first 499 sessions connect without delay. PADO msgid "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" msgstr "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" -#: ../../configuration/system/login.rst:399 +#: ../../configuration/system/login.rst:403 msgid "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." msgstr "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." @@ -7151,7 +8061,7 @@ msgstr "In the following example we can see a basic multicast setup:" msgid "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." msgstr "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." -#: ../../configuration/highavailability/index.rst:400 +#: ../../configuration/highavailability/index.rst:410 msgid "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" msgstr "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" @@ -7175,7 +8085,7 @@ msgstr "In this example, we use **masquerade** as the translation address instea msgid "In this example, we will be using the example Quick Start configuration above as a starting point." msgstr "In this example, we will be using the example Quick Start configuration above as a starting point." -#: ../../configuration/highavailability/index.rst:430 +#: ../../configuration/highavailability/index.rst:440 msgid "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." msgstr "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." @@ -7191,7 +8101,7 @@ msgstr "In this example we will use the most complicated case: a setup where eac msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." -#: ../../configuration/service/dns.rst:165 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "In this scenario:" @@ -7255,7 +8165,7 @@ msgstr "Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octet msgid "Indication" msgstr "Indication" -#: ../../configuration/service/dhcp-server.rst:64 +#: ../../configuration/service/dhcp-server.rst:80 msgid "Individual Client Subnet" msgstr "Individual Client Subnet" @@ -7319,6 +8229,10 @@ msgstr "Intel® QAT" msgid "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" msgstr "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" +#: ../../configuration/service/ids.rst:96 +msgid "Interface **eth0** used to connect to upstream." +msgstr "Interface **eth0** used to connect to upstream." + #: ../../configuration/protocols/isis.rst:146 #: ../../configuration/protocols/ospf.rst:356 #: ../../configuration/protocols/ospf.rst:1139 @@ -7329,7 +8243,7 @@ msgstr "Interface Configuration" msgid "Interface Groups" msgstr "Interface Groups" -#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:87 msgid "Interface Routes" msgstr "Interface Routes" @@ -7367,7 +8281,7 @@ msgid "Interface weight" msgstr "Interface weight" #: ../../configuration/interfaces/index.rst:3 -#: ../../configuration/vrf/index.rst:71 +#: ../../configuration/vrf/index.rst:90 msgid "Interfaces" msgstr "Interfaces" @@ -7388,10 +8302,18 @@ msgstr "Interfaces that participate in the DHCP relay process. If this command i msgid "Interfaces whose DHCP client nameservers to forward requests to." msgstr "Interfaces whose DHCP client nameservers to forward requests to." +#: ../../configuration/service/ids.rst:105 +msgid "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." +msgstr "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." + #: ../../configuration/system/flow-accounting.rst:70 msgid "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" msgstr "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" +#: ../../configuration/vpn/ipsec.rst:374 +msgid "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." +msgstr "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:6 msgid "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." msgstr "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." @@ -7412,7 +8334,7 @@ msgstr "Interval in milliseconds" msgid "Interval in minutes between updates (default: 60)" msgstr "Interval in minutes between updates (default: 60)" -#: ../../configuration/protocols/bgp.rst:906 +#: ../../configuration/protocols/bgp.rst:928 msgid "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." msgstr "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." @@ -7432,11 +8354,11 @@ msgstr "It's slower than IPsec due to higher protocol overhead and the fact it r msgid "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" msgstr "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" -#: ../../configuration/system/option.rst:111 +#: ../../configuration/system/option.rst:141 msgid "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." msgstr "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." -#: ../../configuration/system/option.rst:102 +#: ../../configuration/system/option.rst:132 msgid "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." msgstr "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." @@ -7457,11 +8379,11 @@ msgstr "It helps to think of the syntax as: (see below). The 'rule-set' should b msgid "It is compatible with Cisco (R) AnyConnect (R) clients." msgstr "It is compatible with Cisco (R) AnyConnect (R) clients." -#: ../../configuration/service/dhcp-server.rst:590 +#: ../../configuration/service/dhcp-server.rst:649 msgid "It is connected to ``eth1``" msgstr "It is connected to ``eth1``" -#: ../../configuration/system/login.rst:42 +#: ../../configuration/system/login.rst:46 msgid "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." msgstr "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." @@ -7477,26 +8399,31 @@ msgstr "It is important to note that when creating firewall rules, the DNAT tran msgid "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." msgstr "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." -#: ../../configuration/vrf/index.rst:505 +#: ../../configuration/vrf/index.rst:524 msgid "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." msgstr "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." -#: ../../configuration/vrf/index.rst:113 +#: ../../configuration/vrf/index.rst:132 msgid "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." msgstr "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." -#: ../../configuration/interfaces/bridge.rst:136 +#: ../../configuration/interfaces/bridge.rst:145 msgid "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" msgstr "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" -#: ../../configuration/system/login.rst:93 +#: ../../configuration/system/login.rst:97 msgid "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." msgstr "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." -#: ../../configuration/vrf/index.rst:496 +#: ../../configuration/vrf/index.rst:515 msgid "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." msgstr "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." +#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:132 +msgid "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." +msgstr "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." + #: ../../configuration/service/conntrack-sync.rst:30 msgid "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" msgstr "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" @@ -7517,7 +8444,7 @@ msgstr "It uses a stochastic model to classify incoming packets into different f msgid "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." msgstr "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." -#: ../../configuration/vrf/index.rst:220 +#: ../../configuration/vrf/index.rst:239 msgid "Join a given VRF. This will open a new subshell within the specified VRF." msgstr "Join a given VRF. This will open a new subshell within the specified VRF." @@ -7529,15 +8456,19 @@ msgstr "Jump to a different rule in this route-map on a match." msgid "Juniper EX Switch" msgstr "Juniper EX Switch" +#: ../../configuration/system/option.rst:31 +msgid "Kernel" +msgstr "Kernel" + #: ../../configuration/system/syslog.rst:112 msgid "Kernel messages" msgstr "Kernel messages" -#: ../../configuration/system/login.rst:40 +#: ../../configuration/system/login.rst:44 msgid "Key Based Authentication" msgstr "Key Based Authentication" -#: ../../configuration/pki/index.rst:30 +#: ../../configuration/pki/index.rst:32 msgid "Key Generation" msgstr "Key Generation" @@ -7545,7 +8476,7 @@ msgstr "Key Generation" msgid "Key Management" msgstr "Key Management" -#: ../../configuration/vpn/site2site_ipsec.rst:383 +#: ../../configuration/vpn/site2site_ipsec.rst:386 msgid "Key Parameters:" msgstr "Key Parameters:" @@ -7557,11 +8488,15 @@ msgstr "Key Points:" msgid "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." msgstr "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." -#: ../../configuration/pki/index.rst:167 +#: ../../configuration/vpn/ipsec.rst:381 +msgid "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." +msgstr "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." + +#: ../../configuration/pki/index.rst:169 msgid "Key usage (CLI)" msgstr "Key usage (CLI)" -#: ../../configuration/system/option.rst:58 +#: ../../configuration/system/option.rst:88 msgid "Keyboard Layout" msgstr "Keyboard Layout" @@ -7574,7 +8509,7 @@ msgstr "Keypairs" msgid "Keyword" msgstr "Keyword" -#: ../../configuration/vpn/l2tp.rst:4 +#: ../../configuration/vpn/l2tp.rst:5 msgid "L2TP" msgstr "L2TP" @@ -7606,7 +8541,7 @@ msgstr "L2TPv3 is described in :rfc:`3931`." msgid "L2TPv3 options" msgstr "L2TPv3 options" -#: ../../configuration/vrf/index.rst:399 +#: ../../configuration/vrf/index.rst:418 msgid "L3VPN VRFs" msgstr "L3VPN VRFs" @@ -7635,7 +8570,7 @@ msgstr "LLDP performs functions similar to several proprietary protocols, such a msgid "LNS (L2TP Network Server)" msgstr "LNS (L2TP Network Server)" -#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/l2tp.rst:272 msgid "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." @@ -7643,15 +8578,19 @@ msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgid "Label Distribution Protocol" msgstr "Label Distribution Protocol" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." -#: ../../configuration/service/dhcp-server.rst:593 +#: ../../configuration/service/dhcp-server.rst:652 msgid "Lease time will be left at the default value which is 24 hours" msgstr "Lease time will be left at the default value which is 24 hours" -#: ../../configuration/service/dhcp-server.rst:336 +#: ../../configuration/service/dhcp-server.rst:392 msgid "Lease timeout in seconds (default: 86400)" msgstr "Lease timeout in seconds (default: 86400)" @@ -7683,7 +8622,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -7699,19 +8638,23 @@ msgstr "Lifetime in days; default is 365" msgid "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" msgstr "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/vpn/ipsec.rst:535 +msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." +msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" -#: ../../configuration/system/login.rst:112 +#: ../../configuration/system/login.rst:116 msgid "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." -#: ../../configuration/system/login.rst:118 +#: ../../configuration/system/login.rst:122 msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -7723,7 +8666,7 @@ msgstr "Limiter" msgid "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." msgstr "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." -#: ../../configuration/system/login.rst:381 +#: ../../configuration/system/login.rst:385 msgid "Limits" msgstr "Limits" @@ -7767,7 +8710,7 @@ msgstr "List of supported algorithms: ``diffie-hellman-group1-sha1``, ``diffie-h msgid "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" msgstr "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" -#: ../../configuration/policy/route-map.rst:362 +#: ../../configuration/policy/route-map.rst:365 msgid "List of well-known communities" msgstr "List of well-known communities" @@ -7775,7 +8718,7 @@ msgstr "List of well-known communities" msgid "Listen for DHCP requests on interface ``eth1``." msgstr "Listen for DHCP requests on interface ``eth1``." -#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:137 msgid "Lists VRFs that have been created" msgstr "Lists VRFs that have been created" @@ -7784,10 +8727,14 @@ msgid "Load-balancing" msgstr "Load-balancing" #: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Load-balancing algorithms to be used for distributind requests among the vailable servers" -#: ../../configuration/highavailability/index.rst:347 +#: ../../configuration/highavailability/index.rst:357 msgid "Load-balancing schedule algorithm:" msgstr "Load-balancing schedule algorithm:" @@ -7795,11 +8742,11 @@ msgstr "Load-balancing schedule algorithm:" msgid "Load Balance" msgstr "Load Balance" -#: ../../configuration/service/pppoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:317 msgid "Load Balancing" msgstr "Load Balancing" -#: ../../configuration/system/login.rst:422 +#: ../../configuration/system/login.rst:426 msgid "Load the container image in op-mode." msgstr "Load the container image in op-mode." @@ -7816,7 +8763,11 @@ msgstr "Local Configuration:" msgid "Local Configuration - Annotated:" msgstr "Local Configuration - Annotated:" -#: ../../configuration/service/dhcp-server.rst:143 +#: ../../configuration/service/dhcp-server.rst:192 +msgid "Local IP `<address>` used when communicating to the HA peer." +msgstr "Local IP `<address>` used when communicating to the HA peer." + +#: ../../configuration/service/dhcp-server.rst:177 msgid "Local IP `<address>` used when communicating to the failover peer." msgstr "Local IP `<address>` used when communicating to the failover peer." @@ -7848,11 +8799,11 @@ msgstr "Local User Account" msgid "Local path that includes the known hosts file." msgstr "Local path that includes the known hosts file." -#: ../../configuration/protocols/rpki.rst:145 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Local path that includes the private key file of the router." -#: ../../configuration/protocols/rpki.rst:149 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Local path that includes the public key file of the router." @@ -7864,7 +8815,7 @@ msgstr "Local route" msgid "Locally connect to serial port identified by `<device>`." msgstr "Locally connect to serial port identified by `<device>`." -#: ../../configuration/policy/route-map.rst:273 +#: ../../configuration/policy/route-map.rst:276 msgid "Locally significant administrative distance." msgstr "Locally significant administrative distance." @@ -7918,11 +8869,11 @@ msgstr "Logging to a remote host leaves the local logging configuration intact, msgid "Login/User Management" msgstr "Login/User Management" -#: ../../configuration/system/login.rst:363 +#: ../../configuration/system/login.rst:367 msgid "Login Banner" msgstr "Login Banner" -#: ../../configuration/system/login.rst:383 +#: ../../configuration/system/login.rst:387 msgid "Login limits" msgstr "Login limits" @@ -7981,7 +8932,7 @@ msgstr "MACsec options" msgid "MDI power" msgstr "MDI power" -#: ../../configuration/system/login.rst:91 +#: ../../configuration/system/login.rst:95 msgid "MFA/2FA authentication using OTP (one time passwords)" msgstr "MFA/2FA authentication using OTP (one time passwords)" @@ -8024,11 +8975,11 @@ msgstr "Main structure VyOS firewall cli is shown next:" msgid "Main structure is shown next:" msgstr "Main structure is shown next:" -#: ../../configuration/service/pppoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:303 msgid "Maintenance mode" msgstr "Maintenance mode" -#: ../../configuration/service/conntrack-sync.rst:107 +#: ../../configuration/service/conntrack-sync.rst:116 msgid "Make sure conntrack is enabled by running and show connection tracking table." msgstr "Make sure conntrack is enabled by running and show connection tracking table." @@ -8048,7 +8999,7 @@ msgstr "Mandatory Settings" msgid "Manual Neighbor Configuration" msgstr "Manual Neighbor Configuration" -#: ../../configuration/pki/index.rst:336 +#: ../../configuration/pki/index.rst:367 msgid "Manually trigger certificate renewal. This will be done twice a day." msgstr "Manually trigger certificate renewal. This will be done twice a day." @@ -8056,15 +9007,19 @@ msgstr "Manually trigger certificate renewal. This will be done twice a day." msgid "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." msgstr "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." -#: ../../configuration/vpn/sstp.rst:223 +#: ../../configuration/service/ipoe-server.rst:166 +#: ../../configuration/service/pppoe-server.rst:128 +#: ../../configuration/vpn/l2tp.rst:171 +#: ../../configuration/vpn/pptp.rst:111 +#: ../../configuration/vpn/sstp.rst:144 msgid "Mark RADIUS server as offline for this given `<time>` in seconds." msgstr "Mark RADIUS server as offline for this given `<time>` in seconds." -#: ../../configuration/pki/index.rst:206 +#: ../../configuration/pki/index.rst:208 msgid "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." msgstr "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." -#: ../../configuration/pki/index.rst:244 +#: ../../configuration/pki/index.rst:246 msgid "Mark the private key as password protected. User is asked for the password when the key is referenced." msgstr "Mark the private key as password protected. User is asked for the password when the key is referenced." @@ -8076,7 +9031,7 @@ msgstr "Match BGP large communities." msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." -#: ../../configuration/firewall/ipv4.rst:440 +#: ../../configuration/firewall/ipv4.rst:463 #: ../../configuration/firewall/ipv6.rst:447 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." @@ -8089,17 +9044,21 @@ msgstr "Match RPKI validation result." msgid "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." msgstr "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." -#: ../../configuration/firewall/ipv4.rst:773 +#: ../../configuration/firewall/ipv4.rst:796 #: ../../configuration/firewall/ipv6.rst:783 msgid "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." msgstr "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." -#: ../../configuration/firewall/ipv4.rst:831 +#: ../../configuration/firewall/ipv4.rst:854 #: ../../configuration/firewall/ipv6.rst:840 msgid "Match against the state of a packet." msgstr "Match against the state of a packet." -#: ../../configuration/firewall/ipv4.rst:620 +#: ../../configuration/firewall/ipv4.rst:336 +msgid "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." +msgstr "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." + +#: ../../configuration/firewall/ipv4.rst:643 #: ../../configuration/firewall/ipv6.rst:630 msgid "Match based on dscp value." msgstr "Match based on dscp value." @@ -8108,16 +9067,16 @@ msgstr "Match based on dscp value." msgid "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." msgstr "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." -#: ../../configuration/firewall/ipv4.rst:631 +#: ../../configuration/firewall/ipv4.rst:654 #: ../../configuration/firewall/ipv6.rst:641 msgid "Match based on fragment criteria." msgstr "Match based on fragment criteria." -#: ../../configuration/firewall/ipv4.rst:642 +#: ../../configuration/firewall/ipv4.rst:665 msgid "Match based on icmp code and type." msgstr "Match based on icmp code and type." -#: ../../configuration/firewall/ipv4.rst:653 +#: ../../configuration/firewall/ipv4.rst:676 msgid "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." msgstr "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." @@ -8147,18 +9106,18 @@ msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:239 -#: ../../configuration/firewall/ipv4.rst:663 +#: ../../configuration/firewall/ipv4.rst:686 #: ../../configuration/firewall/ipv6.rst:673 msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:248 -#: ../../configuration/firewall/ipv4.rst:674 +#: ../../configuration/firewall/ipv4.rst:697 #: ../../configuration/firewall/ipv6.rst:684 msgid "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:707 +#: ../../configuration/firewall/ipv4.rst:730 #: ../../configuration/firewall/ipv6.rst:717 msgid "Match based on ipsec criteria." msgstr "Match based on ipsec criteria." @@ -8168,35 +9127,35 @@ msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:256 -#: ../../configuration/firewall/ipv4.rst:684 +#: ../../configuration/firewall/ipv4.rst:707 #: ../../configuration/firewall/ipv6.rst:694 msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:265 -#: ../../configuration/firewall/ipv4.rst:695 +#: ../../configuration/firewall/ipv4.rst:718 #: ../../configuration/firewall/ipv6.rst:705 msgid "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:750 +#: ../../configuration/firewall/ipv4.rst:773 #: ../../configuration/firewall/ipv6.rst:760 #: ../../configuration/policy/route.rst:176 msgid "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." msgstr "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." -#: ../../configuration/firewall/ipv4.rst:762 +#: ../../configuration/firewall/ipv4.rst:785 #: ../../configuration/firewall/ipv6.rst:772 #: ../../configuration/policy/route.rst:184 msgid "Match based on packet type criteria." msgstr "Match based on packet type criteria." -#: ../../configuration/firewall/ipv4.rst:729 +#: ../../configuration/firewall/ipv4.rst:752 #: ../../configuration/firewall/ipv6.rst:739 msgid "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" msgstr "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" -#: ../../configuration/firewall/ipv4.rst:718 +#: ../../configuration/firewall/ipv4.rst:741 #: ../../configuration/firewall/ipv6.rst:728 msgid "Match based on the maximum number of packets to allow in excess of rate." msgstr "Match based on the maximum number of packets to allow in excess of rate." @@ -8209,7 +9168,7 @@ msgstr "Match based on vlan ID. Range is also supported." msgid "Match based on vlan priority(pcp). Range is also supported." msgstr "Match based on vlan priority(pcp). Range is also supported." -#: ../../configuration/firewall/ipv4.rst:801 +#: ../../configuration/firewall/ipv4.rst:824 #: ../../configuration/firewall/ipv6.rst:810 msgid "Match bases on recently seen sources." msgstr "Match bases on recently seen sources." @@ -8224,7 +9183,7 @@ msgstr "Match criteria based on connection mark." msgid "Match criteria based on nat connection status." msgstr "Match criteria based on nat connection status." -#: ../../configuration/firewall/ipv4.rst:345 +#: ../../configuration/firewall/ipv4.rst:368 #: ../../configuration/firewall/ipv6.rst:345 msgid "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." msgstr "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." @@ -8237,6 +9196,14 @@ msgstr "Match criteria based on source and/or destination mac-address." msgid "Match domain name" msgstr "Match domain name" +#: ../../configuration/service/ipoe-server.rst:382 +#: ../../configuration/service/pppoe-server.rst:571 +#: ../../configuration/vpn/l2tp.rst:506 +#: ../../configuration/vpn/pptp.rst:430 +#: ../../configuration/vpn/sstp.rst:464 +msgid "Match firewall mark value" +msgstr "Match firewall mark value" + #: ../../configuration/firewall/ipv6.rst:894 #: ../../configuration/policy/route.rst:234 msgid "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." @@ -8250,12 +9217,12 @@ msgstr "Match local preference." msgid "Match route metric." msgstr "Match route metric." -#: ../../configuration/firewall/ipv4.rst:885 +#: ../../configuration/firewall/ipv4.rst:908 #: ../../configuration/policy/route.rst:229 msgid "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." msgstr "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." -#: ../../configuration/firewall/ipv4.rst:906 +#: ../../configuration/firewall/ipv4.rst:929 #: ../../configuration/firewall/ipv6.rst:915 msgid "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." msgstr "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." @@ -8275,11 +9242,24 @@ msgstr "Matching traffic" msgid "Maximum A-MSDU length 3839 (default) or 7935 octets" msgstr "Maximum A-MSDU length 3839 (default) or 7935 octets" +#: ../../configuration/vpn/l2tp.rst:492 +#: ../../configuration/vpn/pptp.rst:416 +msgid "Maximum Transmission Unit (MTU) (default: **1436**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1436**)" + +#: ../../configuration/service/pppoe-server.rst:538 +msgid "Maximum Transmission Unit (MTU) (default: **1492**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1492**)" + +#: ../../configuration/vpn/sstp.rst:450 +msgid "Maximum Transmission Unit (MTU) (default: **1500**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1500**)" + #: ../../configuration/service/dns.rst:108 msgid "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." msgstr "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." -#: ../../configuration/vpn/sstp.rst:159 +#: ../../configuration/vpn/sstp.rst:165 msgid "Maximum number of IPv4 nameservers" msgstr "Maximum number of IPv4 nameservers" @@ -8287,6 +9267,14 @@ msgstr "Maximum number of IPv4 nameservers" msgid "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." msgstr "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." +#: ../../configuration/service/ipoe-server.rst:372 +#: ../../configuration/service/pppoe-server.rst:542 +#: ../../configuration/vpn/l2tp.rst:496 +#: ../../configuration/vpn/pptp.rst:420 +#: ../../configuration/vpn/sstp.rst:454 +msgid "Maximum number of concurrent session start attempts" +msgstr "Maximum number of concurrent session start attempts" + #: ../../configuration/interfaces/wireless.rst:77 msgid "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." msgstr "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." @@ -8295,7 +9283,11 @@ msgstr "Maximum number of stations allowed in station table. New stations will b msgid "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." msgstr "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." -#: ../../configuration/vpn/sstp.rst:250 +#: ../../configuration/service/ipoe-server.rst:190 +#: ../../configuration/service/pppoe-server.rst:152 +#: ../../configuration/vpn/l2tp.rst:195 +#: ../../configuration/vpn/pptp.rst:135 +#: ../../configuration/vpn/sstp.rst:168 msgid "Maximum number of tries to send Access-Request/Accounting-Request queries" msgstr "Maximum number of tries to send Access-Request/Accounting-Request queries" @@ -8311,7 +9303,7 @@ msgstr "Medium" msgid "Member Interfaces" msgstr "Member Interfaces" -#: ../../configuration/interfaces/bridge.rst:196 +#: ../../configuration/interfaces/bridge.rst:205 msgid "Member interfaces `eth1` and VLAN 10 on interface `eth2`" msgstr "Member interfaces `eth1` and VLAN 10 on interface `eth2`" @@ -8323,6 +9315,10 @@ msgstr "Messages generated internally by syslogd" msgid "Metris version, the default is ``2``" msgstr "Metris version, the default is ``2``" +#: ../../configuration/vpn/ipsec.rst:510 +msgid "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/service/router-advert.rst:1 msgid "Min and max intervals between unsolicited multicast RAs" msgstr "Min and max intervals between unsolicited multicast RAs" @@ -8351,7 +9347,12 @@ msgstr "Modify the time that pim will register suppress a FHR will send register msgid "Monitor, the system passively monitors any kind of wireless traffic" msgstr "Monitor, the system passively monitors any kind of wireless traffic" +#: ../../configuration/service/ipoe-server.rst:390 #: ../../configuration/service/monitoring.rst:2 +#: ../../configuration/service/pppoe-server.rst:583 +#: ../../configuration/vpn/l2tp.rst:518 +#: ../../configuration/vpn/pptp.rst:442 +#: ../../configuration/vpn/sstp.rst:538 msgid "Monitoring" msgstr "Monitoring" @@ -8371,7 +9372,7 @@ msgstr "Most operating systems include native client support for IPsec IKEv2 VPN msgid "Mount a volume into the container" msgstr "Mount a volume into the container" -#: ../../configuration/service/dhcp-server.rst:235 +#: ../../configuration/service/dhcp-server.rst:291 msgid "Multi" msgstr "Multi" @@ -8383,7 +9384,7 @@ msgstr "Multi-client server is the most popular OpenVPN mode on routers. It alwa msgid "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." msgstr "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." -#: ../../configuration/service/dhcp-server.rst:359 +#: ../../configuration/service/dhcp-server.rst:415 msgid "Multi: can be specified multiple times." msgstr "Multi: can be specified multiple times." @@ -8423,12 +9424,11 @@ msgstr "Multicast receivers will talk IGMP to their local router, so, besides ha msgid "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." msgstr "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." -#: ../../configuration/service/dhcp-server.rst:54 -#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:108 msgid "Multiple DNS servers can be defined." msgstr "Multiple DNS servers can be defined." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." @@ -8441,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Multiple aliases can pe specified per host-name." @@ -8460,16 +9464,16 @@ msgstr "Multiple interfaces may be specified." msgid "Multiple networks/client IP addresses can be configured." msgstr "Multiple networks/client IP addresses can be configured." -#: ../../configuration/system/login.rst:248 -#: ../../configuration/system/login.rst:317 +#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:321 msgid "Multiple servers can be specified." msgstr "Multiple servers can be specified." -#: ../../configuration/service/dns.rst:374 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" -#: ../../configuration/firewall/ipv4.rst:494 +#: ../../configuration/firewall/ipv4.rst:517 #: ../../configuration/firewall/ipv6.rst:500 msgid "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" msgstr "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" @@ -8487,22 +9491,22 @@ msgstr "Multiple users can connect to the same serial device but only one is all msgid "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." msgstr "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." -#: ../../configuration/service/dhcp-server.rst:241 -#: ../../configuration/service/dhcp-server.rst:247 -#: ../../configuration/service/dhcp-server.rst:252 -#: ../../configuration/service/dhcp-server.rst:272 -#: ../../configuration/service/dhcp-server.rst:287 -#: ../../configuration/service/dhcp-server.rst:292 #: ../../configuration/service/dhcp-server.rst:297 -#: ../../configuration/service/dhcp-server.rst:302 -#: ../../configuration/service/dhcp-server.rst:307 -#: ../../configuration/service/dhcp-server.rst:327 -#: ../../configuration/service/dhcp-server.rst:332 -#: ../../configuration/service/dhcp-server.rst:337 +#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:308 +#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:358 +#: ../../configuration/service/dhcp-server.rst:363 +#: ../../configuration/service/dhcp-server.rst:383 +#: ../../configuration/service/dhcp-server.rst:388 +#: ../../configuration/service/dhcp-server.rst:393 msgid "N" msgstr "N" -#: ../../configuration/highavailability/index.rst:363 +#: ../../configuration/highavailability/index.rst:373 #: ../../configuration/nat/index.rst:5 msgid "NAT" msgstr "NAT" @@ -8523,6 +9527,10 @@ msgstr "NAT64" msgid "NAT64 client configuration:" msgstr "NAT64 client configuration:" +#: ../../configuration/service/router-advert.rst:84 +msgid "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." +msgstr "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." + #: ../../configuration/nat/nat64.rst:44 msgid "NAT64 server configuration:" msgstr "NAT64 server configuration:" @@ -8587,7 +9595,15 @@ msgstr "NTP supplies a warning of any impending leap second adjustment, but no i msgid "Name Server" msgstr "Name Server" -#: ../../configuration/service/dhcp-server.rst:356 +#: ../../configuration/vpn/sstp.rst:84 +msgid "Name of installed certificate authority certificate." +msgstr "Name of installed certificate authority certificate." + +#: ../../configuration/vpn/sstp.rst:88 +msgid "Name of installed server certificate." +msgstr "Name of installed server certificate." + +#: ../../configuration/service/dhcp-server.rst:412 msgid "Name of static mapping" msgstr "Name of static mapping" @@ -8595,11 +9611,11 @@ msgstr "Name of static mapping" msgid "Name of the single table Only if set group-metrics single-table." msgstr "Name of the single table Only if set group-metrics single-table." -#: ../../configuration/service/dhcp-server.rst:296 +#: ../../configuration/service/dhcp-server.rst:352 msgid "Name or IPv4 address of TFTP server" msgstr "Name or IPv4 address of TFTP server" -#: ../../configuration/service/dhcp-server.rst:281 +#: ../../configuration/service/dhcp-server.rst:337 msgid "NetBIOS over TCP/IP name server" msgstr "NetBIOS over TCP/IP name server" @@ -8677,6 +9693,10 @@ msgstr "Network management station (NMS) - software which runs on the manager" msgid "Network news subsystem" msgstr "Network news subsystem" +#: ../../configuration/service/ids.rst:87 +msgid "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" +msgstr "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" + #: ../../configuration/service/monitoring.rst:47 msgid "Networks allowed to query this server" msgstr "Networks allowed to query this server" @@ -8693,11 +9713,11 @@ msgstr "Next-hop interface for the route" msgid "Next it is necessary to configure 2FA for OpenConnect:" msgstr "Next it is necessary to configure 2FA for OpenConnect:" -#: ../../configuration/policy/route-map.rst:279 +#: ../../configuration/policy/route-map.rst:282 msgid "Nexthop IP address." msgstr "Nexthop IP address." -#: ../../configuration/policy/route-map.rst:298 +#: ../../configuration/policy/route-map.rst:301 msgid "Nexthop IPv6 address." msgstr "Nexthop IPv6 address." @@ -8705,6 +9725,22 @@ msgstr "Nexthop IPv6 address." msgid "Nexthop IPv6 address to match." msgstr "Nexthop IPv6 address to match." +#: ../../configuration/system/ip.rst:47 +#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/vrf/index.rst:71 +msgid "Nexthop Tracking" +msgstr "Nexthop Tracking" + +#: ../../configuration/system/ip.rst:49 +#: ../../configuration/system/ipv6.rst:45 +#: ../../configuration/vrf/index.rst:73 +msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." + +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" @@ -8713,7 +9749,7 @@ msgstr "No ROA exists which covers that prefix. Unfortunately this is the case f msgid "No VLAN tagging required by your ISP." msgstr "No VLAN tagging required by your ISP." -#: ../../configuration/protocols/bgp.rst:707 +#: ../../configuration/protocols/bgp.rst:729 msgid "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." msgstr "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." @@ -8753,7 +9789,7 @@ msgstr "Note: certificate names don't matter, we use 'openvpn-local' and 'openvp msgid "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." msgstr "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." -#: ../../configuration/vpn/ipsec.rst:294 +#: ../../configuration/vpn/ipsec.rst:298 #: ../../configuration/vpn/rsa-keys.rst:35 msgid "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." @@ -8762,11 +9798,11 @@ msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT publi msgid "Notice" msgstr "Notice" -#: ../../configuration/service/conntrack-sync.rst:194 +#: ../../configuration/service/conntrack-sync.rst:203 msgid "Now configure conntrack-sync service on ``router1`` **and** ``router2``" msgstr "Now configure conntrack-sync service on ``router1`` **and** ``router2``" -#: ../../configuration/vpn/ipsec.rst:297 +#: ../../configuration/vpn/ipsec.rst:301 msgid "Now the noted public keys should be entered on the opposite routers." msgstr "Now the noted public keys should be entered on the opposite routers." @@ -8786,7 +9822,7 @@ msgstr "Now when connecting the user will first be asked for the password and th msgid "Now you are ready to setup IPsec. The key points:" msgstr "Now you are ready to setup IPsec. The key points:" -#: ../../configuration/vpn/ipsec.rst:311 +#: ../../configuration/vpn/ipsec.rst:315 msgid "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." msgstr "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." @@ -8794,6 +9830,10 @@ msgstr "Now you are ready to setup IPsec. You'll need to use an ID instead of ad msgid "Number of antennas on this card" msgstr "Number of antennas on this card" +#: ../../configuration/service/dns.rst:166 +msgid "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." +msgstr "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." + #: ../../configuration/system/syslog.rst:231 msgid "Number of lines to be displayed, default 10" msgstr "Number of lines to be displayed, default 10" @@ -8822,7 +9862,7 @@ msgstr "OSPFv2 (IPv4)" msgid "OSPFv3 (IPv6)" msgstr "OSPFv3 (IPv6)" -#: ../../configuration/system/login.rst:141 +#: ../../configuration/system/login.rst:145 msgid "OTP-key generation" msgstr "OTP-key generation" @@ -8830,7 +9870,7 @@ msgstr "OTP-key generation" msgid "Offloading" msgstr "Offloading" -#: ../../configuration/service/dhcp-server.rst:245 +#: ../../configuration/service/dhcp-server.rst:301 msgid "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" msgstr "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" @@ -8842,7 +9882,7 @@ msgstr "Often we need to embed one policy into another one. It is possible to do msgid "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." msgstr "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." -#: ../../configuration/service/conntrack-sync.rst:211 +#: ../../configuration/service/conntrack-sync.rst:220 msgid "On active router run:" msgstr "On active router run:" @@ -8858,7 +9898,7 @@ msgstr "On low rates (below 40Mbit) you may want to tune `quantum` down to somet msgid "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." msgstr "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." -#: ../../configuration/service/conntrack-sync.rst:242 +#: ../../configuration/service/conntrack-sync.rst:251 msgid "On standby router run:" msgstr "On standby router run:" @@ -8866,34 +9906,34 @@ msgstr "On standby router run:" msgid "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." msgstr "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." -#: ../../configuration/vpn/ipsec.rst:181 -#: ../../configuration/vpn/ipsec.rst:239 -#: ../../configuration/vpn/ipsec.rst:299 +#: ../../configuration/vpn/ipsec.rst:185 +#: ../../configuration/vpn/ipsec.rst:243 +#: ../../configuration/vpn/ipsec.rst:303 #: ../../configuration/vpn/rsa-keys.rst:40 msgid "On the LEFT:" msgstr "On the LEFT:" -#: ../../configuration/vpn/ipsec.rst:314 +#: ../../configuration/vpn/ipsec.rst:318 #: ../../configuration/vpn/rsa-keys.rst:59 msgid "On the LEFT (static address):" msgstr "On the LEFT (static address):" -#: ../../configuration/vpn/ipsec.rst:221 +#: ../../configuration/vpn/ipsec.rst:225 msgid "On the RIGHT, setup by analogy and swap local and remote addresses." msgstr "On the RIGHT, setup by analogy and swap local and remote addresses." -#: ../../configuration/vpn/ipsec.rst:250 -#: ../../configuration/vpn/ipsec.rst:305 +#: ../../configuration/vpn/ipsec.rst:254 +#: ../../configuration/vpn/ipsec.rst:309 #: ../../configuration/vpn/rsa-keys.rst:46 msgid "On the RIGHT:" msgstr "On the RIGHT:" -#: ../../configuration/vpn/ipsec.rst:339 +#: ../../configuration/vpn/ipsec.rst:343 #: ../../configuration/vpn/rsa-keys.rst:84 msgid "On the RIGHT (dynamic address):" msgstr "On the RIGHT (dynamic address):" -#: ../../configuration/service/conntrack-sync.rst:207 +#: ../../configuration/service/conntrack-sync.rst:216 msgid "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" msgstr "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" @@ -8921,11 +9961,11 @@ msgstr "Once a class has a filter configured, you will also have to define what msgid "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." msgstr "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." -#: ../../configuration/protocols/bgp.rst:702 +#: ../../configuration/protocols/bgp.rst:724 msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Once a traffic-policy is created, you can apply it to an interface:" @@ -8957,6 +9997,10 @@ msgstr "Once the matching rules are set for a class, you can start configuring h msgid "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." msgstr "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." +#: ../../configuration/service/pppoe-server.rst:285 +msgid "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." +msgstr "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." + #: ../../configuration/vpn/openconnect.rst:257 msgid "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." msgstr "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." @@ -8965,11 +10009,15 @@ msgstr "Once you commit the above changes you can create a config file in the /c msgid "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." -#: ../../configuration/vpn/sstp.rst:307 +#: ../../configuration/vpn/sstp.rst:478 msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." -#: ../../configuration/protocols/rpki.rst:183 +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + +#: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." @@ -9001,7 +10049,7 @@ msgstr "Only VRRP is supported. Required option." msgid "Only allow certain IP addresses or prefixes to access the https webserver." msgstr "Only allow certain IP addresses or prefixes to access the https webserver." -#: ../../configuration/firewall/ipv4.rst:459 +#: ../../configuration/firewall/ipv4.rst:482 #: ../../configuration/firewall/ipv6.rst:466 msgid "Only in the source criteria, you can specify a mac-address." msgstr "Only in the source criteria, you can specify a mac-address." @@ -9022,7 +10070,7 @@ msgstr "Only request an address from the PPPoE server but do not install any def msgid "Only request an address from the SSTP server but do not install any default route." msgstr "Only request an address from the SSTP server but do not install any default route." -#: ../../configuration/system/login.rst:51 +#: ../../configuration/system/login.rst:55 msgid "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." msgstr "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." @@ -9030,7 +10078,7 @@ msgstr "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note t msgid "Only works with a VXLAN device with external flag set." msgstr "Only works with a VXLAN device with external flag set." -#: ../../configuration/highavailability/index.rst:457 +#: ../../configuration/highavailability/index.rst:467 msgid "Op-mode check virtual-server status" msgstr "Op-mode check virtual-server status" @@ -9055,7 +10103,7 @@ msgid "OpenConnect supports a subset of it's configuration options to be applied msgstr "OpenConnect supports a subset of it's configuration options to be applied on a per user/group basis, for configuration purposes we refer to this functionality as \"Identity based config\". The following `OpenConnect Server Manual <https://ocserv.gitlab.io/www/manual.html#:~:text=Configuration%20files%20that% 20will%20be%20applied%20per%20user%20connection%20or%0A%23%20per%20group>`_ outlines the set of configuration options that are allowed. This can be leveraged to apply different sets of configs to different users or groups of users." #: ../../configuration/interfaces/openvpn.rst:7 -#: ../../configuration/pki/index.rst:117 +#: ../../configuration/pki/index.rst:119 msgid "OpenVPN" msgstr "OpenVPN" @@ -9097,7 +10145,7 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -9105,23 +10153,23 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/virtual-ethernet.rst:55 #: ../../configuration/interfaces/wireless.rst:416 #: ../../configuration/interfaces/wwan.rst:79 -#: ../../configuration/pki/index.rst:290 +#: ../../configuration/pki/index.rst:321 #: ../../configuration/protocols/igmp-proxy.rst:73 -#: ../../configuration/protocols/static.rst:183 -#: ../../configuration/service/conntrack-sync.rst:103 +#: ../../configuration/protocols/static.rst:216 +#: ../../configuration/service/conntrack-sync.rst:112 #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:195 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 #: ../../configuration/service/webproxy.rst:330 #: ../../configuration/system/default-route.rst:25 #: ../../configuration/system/flow-accounting.rst:175 -#: ../../configuration/vrf/index.rst:111 -#: ../../configuration/vrf/index.rst:323 -#: ../../configuration/vrf/index.rst:503 +#: ../../configuration/vrf/index.rst:130 +#: ../../configuration/vrf/index.rst:342 +#: ../../configuration/vrf/index.rst:522 msgid "Operation" msgstr "Operation" @@ -9131,17 +10179,17 @@ msgid "Operation-mode" msgstr "Operation-mode" #: ../../configuration/firewall/bridge.rst:284 -#: ../../configuration/firewall/ipv4.rst:954 +#: ../../configuration/firewall/ipv4.rst:977 #: ../../configuration/firewall/ipv6.rst:962 msgid "Operation-mode Firewall" msgstr "Operation-mode Firewall" -#: ../../configuration/container/index.rst:143 +#: ../../configuration/container/index.rst:179 msgid "Operation Commands" msgstr "Operation Commands" -#: ../../configuration/service/dhcp-server.rst:412 -#: ../../configuration/service/dhcp-server.rst:664 +#: ../../configuration/service/dhcp-server.rst:471 +#: ../../configuration/service/dhcp-server.rst:725 #: ../../configuration/system/acceleration.rst:42 msgid "Operation Mode" msgstr "Operation Mode" @@ -9151,12 +10199,12 @@ msgid "Operation mode of wireless radio." msgstr "Operation mode of wireless radio." #: ../../configuration/interfaces/wireguard.rst:338 -#: ../../configuration/protocols/bfd.rst:94 -#: ../../configuration/protocols/bfd.rst:175 +#: ../../configuration/protocols/bfd.rst:101 +#: ../../configuration/protocols/bfd.rst:182 msgid "Operational Commands" msgstr "Operational Commands" -#: ../../configuration/protocols/bgp.rst:950 +#: ../../configuration/protocols/bgp.rst:972 #: ../../configuration/protocols/mpls.rst:218 #: ../../configuration/protocols/ospf.rst:609 #: ../../configuration/protocols/ospf.rst:1268 @@ -9164,8 +10212,8 @@ msgstr "Operational Commands" msgid "Operational Mode Commands" msgstr "Operational Mode Commands" -#: ../../configuration/system/ip.rst:47 -#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/system/ip.rst:60 +#: ../../configuration/system/ipv6.rst:56 msgid "Operational commands" msgstr "Operational commands" @@ -9177,11 +10225,11 @@ msgstr "Option" msgid "Option 43 for UniFI" msgstr "Option 43 for UniFI" -#: ../../configuration/service/dhcp-server.rst:234 +#: ../../configuration/service/dhcp-server.rst:290 msgid "Option description" msgstr "Option description" -#: ../../configuration/service/dhcp-server.rst:232 +#: ../../configuration/service/dhcp-server.rst:288 msgid "Option number" msgstr "Option number" @@ -9211,7 +10259,7 @@ msgstr "Optional" msgid "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." msgstr "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." -#: ../../configuration/system/login.rst:107 +#: ../../configuration/system/login.rst:111 msgid "Optional/default settings" msgstr "Optional/default settings" @@ -9231,12 +10279,11 @@ msgstr "Optionally set a specific static IPv4 or IPv6 address for the container. #: ../../configuration/interfaces/openvpn.rst:631 #: ../../configuration/service/dhcp-relay.rst:53 #: ../../configuration/service/dhcp-relay.rst:160 -#: ../../configuration/service/dhcp-server.rst:224 -#: ../../configuration/vpn/sstp.rst:230 +#: ../../configuration/service/dhcp-server.rst:280 msgid "Options" msgstr "Options" -#: ../../configuration/vpn/ipsec.rst:159 +#: ../../configuration/vpn/ipsec.rst:162 msgid "Options (Global IPsec settings) Attributes" msgstr "Options (Global IPsec settings) Attributes" @@ -9252,11 +10299,15 @@ msgstr "Or, for example ftp, `delete system conntrack modules ftp`." msgid "Or **binary** prefixes." msgstr "Or **binary** prefixes." +#: ../../configuration/service/conntrack-sync.rst:107 +msgid "Order conntrackd to request a complete conntrack table resync against the other node at startup." +msgstr "Order conntrackd to request a complete conntrack table resync against the other node at startup." + #: ../../configuration/protocols/ospf.rst:73 msgid "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." msgstr "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." -#: ../../configuration/service/pppoe-server.rst:238 +#: ../../configuration/service/pppoe-server.rst:312 msgid "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." msgstr "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." @@ -9325,15 +10376,15 @@ msgstr "Overview of defined groups. You see the type, the members, and where the msgid "PBR multiple uplinks" msgstr "PBR multiple uplinks" -#: ../../configuration/vrf/index.rst:244 +#: ../../configuration/vrf/index.rst:263 msgid "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" msgstr "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" -#: ../../configuration/vrf/index.rst:245 +#: ../../configuration/vrf/index.rst:264 msgid "PC2 is in VRF ``blue`` which is the development department" msgstr "PC2 is in VRF ``blue`` which is the development department" -#: ../../configuration/vrf/index.rst:246 +#: ../../configuration/vrf/index.rst:265 msgid "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." msgstr "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." @@ -9369,7 +10420,7 @@ msgstr "PIM – Protocol Independent Multicast" msgid "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." msgstr "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." -#: ../../configuration/pki/index.rst:7 +#: ../../configuration/pki/index.rst:9 msgid "PKI" msgstr "PKI" @@ -9377,7 +10428,14 @@ msgstr "PKI" msgid "PPDU" msgstr "PPDU" -#: ../../configuration/vpn/sstp.rst:174 +#: ../../configuration/service/pppoe-server.rst:453 +#: ../../configuration/vpn/l2tp.rst:407 +#: ../../configuration/vpn/pptp.rst:331 +#: ../../configuration/vpn/sstp.rst:365 +msgid "PPP Advanced Options" +msgstr "PPP Advanced Options" + +#: ../../configuration/vpn/sstp.rst:180 msgid "PPP Settings" msgstr "PPP Settings" @@ -9393,7 +10451,7 @@ msgstr "PPPoE Server" msgid "PPPoE options" msgstr "PPPoE options" -#: ../../configuration/vpn/pptp.rst:4 +#: ../../configuration/vpn/pptp.rst:5 msgid "PPTP-Server" msgstr "PPTP-Server" @@ -9401,19 +10459,23 @@ msgstr "PPTP-Server" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." +#: ../../configuration/service/dhcp-server.rst:65 +msgid "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" +msgstr "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" + #: ../../configuration/interfaces/bridge.rst:60 msgid "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." msgstr "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." -#: ../../configuration/vpn/sstp.rst:166 +#: ../../configuration/vpn/sstp.rst:172 msgid "Path to `<file>` pointing to the certificate authority certificate." msgstr "Path to `<file>` pointing to the certificate authority certificate." -#: ../../configuration/vpn/sstp.rst:170 +#: ../../configuration/vpn/sstp.rst:176 msgid "Path to `<file>` pointing to the servers certificate (public portion)." msgstr "Path to `<file>` pointing to the servers certificate (public portion)." @@ -9457,11 +10519,15 @@ msgstr "Per default VyOSs has minimal syslog logging enabled which is stored and msgid "Per default every packet is sampled (that is, the sampling rate is 1)." msgstr "Per default every packet is sampled (that is, the sampling rate is 1)." -#: ../../configuration/service/pppoe-server.rst:323 +#: ../../configuration/service/pppoe-server.rst:556 msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." -#: ../../configuration/system/option.rst:78 +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + +#: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Performance" @@ -9469,11 +10535,11 @@ msgstr "Performance" msgid "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." msgstr "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." -#: ../../configuration/vrf/index.rst:197 +#: ../../configuration/vrf/index.rst:216 msgid "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." msgstr "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." -#: ../../configuration/vrf/index.rst:183 +#: ../../configuration/vrf/index.rst:202 msgid "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." msgstr "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." @@ -9497,7 +10563,7 @@ msgstr "Please, refer to appropiate section for more information about firewall msgid "Please, refer to appropriate section for more information about firewall configuration:" msgstr "Please, refer to appropriate section for more information about firewall configuration:" -#: ../../configuration/service/ipoe-server.rst:23 +#: ../../configuration/service/ipoe-server.rst:21 msgid "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." msgstr "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." @@ -9513,7 +10579,7 @@ msgstr "Please refer to the :ref:`ipsec` documentation for the individual IPSec msgid "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." msgstr "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." -#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:420 msgid "Please see the :ref:`dhcp-dns-quick-start` configuration." msgstr "Please see the :ref:`dhcp-dns-quick-start` configuration." @@ -9566,12 +10632,16 @@ msgid "Port Groups" msgstr "Port Groups" #: ../../configuration/interfaces/bonding.rst:282 -#: ../../configuration/interfaces/bridge.rst:179 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/bridge.rst:188 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Port Mirror (SPAN)" -#: ../../configuration/vpn/sstp.rst:242 +#: ../../configuration/service/ipoe-server.rst:182 +#: ../../configuration/service/pppoe-server.rst:144 +#: ../../configuration/vpn/l2tp.rst:187 +#: ../../configuration/vpn/pptp.rst:127 +#: ../../configuration/vpn/sstp.rst:160 msgid "Port for Dynamic Authorization Extension server (DM/CoA)" msgstr "Port for Dynamic Authorization Extension server (DM/CoA)" @@ -9656,7 +10726,7 @@ msgstr "Preference associated with the default router" msgid "Prefix Conversion" msgstr "Prefix Conversion" -#: ../../configuration/service/dhcp-server.rst:564 +#: ../../configuration/service/dhcp-server.rst:623 msgid "Prefix Delegation" msgstr "Prefix Delegation" @@ -9696,11 +10766,11 @@ msgstr "Prefix to match against." msgid "Prefixes" msgstr "Prefixes" -#: ../../configuration/policy/route-map.rst:212 +#: ../../configuration/policy/route-map.rst:215 msgid "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." msgstr "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." -#: ../../configuration/policy/route-map.rst:207 +#: ../../configuration/policy/route-map.rst:210 msgid "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." @@ -9708,11 +10778,11 @@ msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's msgid "Principle of SNMP Communication" msgstr "Principle of SNMP Communication" -#: ../../configuration/vrf/index.rst:532 +#: ../../configuration/vrf/index.rst:551 msgid "Print a summary of neighbor connections for the specified AFI/SAFI combination." msgstr "Print a summary of neighbor connections for the specified AFI/SAFI combination." -#: ../../configuration/vrf/index.rst:511 +#: ../../configuration/vrf/index.rst:530 msgid "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." msgstr "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." @@ -9733,6 +10803,10 @@ msgstr "Priority Queue, as other non-shaping policies, is only useful if your ou msgid "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." msgstr "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." +#: ../../configuration/vpn/ipsec.rst:544 +msgid "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." +msgstr "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." + #: ../../configuration/service/monitoring.rst:38 msgid "Prometheus-client" msgstr "Prometheus-client" @@ -9841,11 +10915,11 @@ msgstr "Pseudo Ethernet/MACVLAN options" msgid "Publish a port for the container." msgstr "Publish a port for the container." -#: ../../configuration/container/index.rst:147 +#: ../../configuration/container/index.rst:183 msgid "Pull a new image for container" msgstr "Pull a new image for container" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -9875,7 +10949,7 @@ msgstr "R1:" msgid "R1 has 192.0.2.1/24 & 2001:db8::1/64" msgstr "R1 has 192.0.2.1/24 & 2001:db8::1/64" -#: ../../configuration/vrf/index.rst:248 +#: ../../configuration/vrf/index.rst:267 msgid "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" msgstr "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" @@ -9887,12 +10961,11 @@ msgstr "R2:" msgid "R2 has 192.0.2.2/24 & 2001:db8::2/64" msgstr "R2 has 192.0.2.2/24 & 2001:db8::2/64" -#: ../../configuration/system/login.rst:234 -#: ../../configuration/vpn/sstp.rst:207 +#: ../../configuration/system/login.rst:238 msgid "RADIUS" msgstr "RADIUS" -#: ../../configuration/service/ipoe-server.rst:111 +#: ../../configuration/service/ipoe-server.rst:112 msgid "RADIUS Setup" msgstr "RADIUS Setup" @@ -9900,6 +10973,14 @@ msgstr "RADIUS Setup" msgid "RADIUS advanced features" msgstr "RADIUS advanced features" +#: ../../configuration/service/ipoe-server.rst:158 +#: ../../configuration/service/pppoe-server.rst:120 +#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/vpn/pptp.rst:103 +#: ../../configuration/vpn/sstp.rst:136 +msgid "RADIUS advanced options" +msgstr "RADIUS advanced options" + #: ../../configuration/vpn/l2tp.rst:139 msgid "RADIUS authentication" msgstr "RADIUS authentication" @@ -9916,11 +10997,15 @@ msgstr "RADIUS provides the IP addresses in the example above via Framed-IP-Addr msgid "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" msgstr "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" -#: ../../configuration/system/login.rst:266 +#: ../../configuration/system/login.rst:270 msgid "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." msgstr "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." -#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/service/ipoe-server.rst:144 +#: ../../configuration/service/pppoe-server.rst:106 +#: ../../configuration/vpn/l2tp.rst:149 +#: ../../configuration/vpn/pptp.rst:89 +#: ../../configuration/vpn/sstp.rst:122 msgid "RADIUS source address" msgstr "RADIUS source address" @@ -9928,7 +11013,7 @@ msgstr "RADIUS source address" msgid "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." msgstr "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." -#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:312 msgid "RFC 868 time server IPv4 address" msgstr "RFC 868 time server IPv4 address" @@ -9970,8 +11055,8 @@ msgstr "Random-Detect could be useful for heavy traffic. One use of this algorit #: ../../configuration/protocols/static.rst:37 #: ../../configuration/protocols/static.rst:57 -#: ../../configuration/protocols/static.rst:84 -#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:107 +#: ../../configuration/protocols/static.rst:127 msgid "Range is 1 to 255, default is 1." msgstr "Range is 1 to 255, default is 1." @@ -10016,15 +11101,15 @@ msgstr "Re-generated the public/private keyportion which SSH uses to secure conn msgid "Reachable Time" msgstr "Reachable Time" -#: ../../configuration/highavailability/index.rst:388 +#: ../../configuration/highavailability/index.rst:398 msgid "Real server" msgstr "Real server" -#: ../../configuration/highavailability/index.rst:389 +#: ../../configuration/highavailability/index.rst:399 msgid "Real server IP address and port" msgstr "Real server IP address and port" -#: ../../configuration/highavailability/index.rst:404 +#: ../../configuration/highavailability/index.rst:414 msgid "Real server is auto-excluded if port check with this server fail." msgstr "Real server is auto-excluded if port check with this server fail." @@ -10032,7 +11117,11 @@ msgstr "Real server is auto-excluded if port check with this server fail." msgid "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." msgstr "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." -#: ../../configuration/vpn/l2tp.rst:205 +#: ../../configuration/service/ipoe-server.rst:227 +#: ../../configuration/service/pppoe-server.rst:189 +#: ../../configuration/vpn/l2tp.rst:232 +#: ../../configuration/vpn/pptp.rst:172 +#: ../../configuration/vpn/sstp.rst:205 msgid "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." msgstr "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." @@ -10040,7 +11129,11 @@ msgstr "Received RADIUS attributes have a higher priority than parameters define msgid "Recommended for larger installations." msgstr "Recommended for larger installations." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -10068,11 +11161,11 @@ msgstr "Redistribution Configuration" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." -#: ../../configuration/service/dns.rst:278 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -10147,7 +11240,11 @@ msgstr "Remote ``InfluxDB`` bucket name" msgid "Remote database name." msgstr "Remote database name." -#: ../../configuration/service/dhcp-server.rst:147 +#: ../../configuration/service/dhcp-server.rst:196 +msgid "Remote peer IP `<address>` of the second DHCP server in this HA cluster." +msgstr "Remote peer IP `<address>` of the second DHCP server in this HA cluster." + +#: ../../configuration/service/dhcp-server.rst:181 msgid "Remote peer IP `<address>` of the second DHCP server in this failover cluster." msgstr "Remote peer IP `<address>` of the second DHCP server in this failover cluster." @@ -10159,7 +11256,10 @@ msgstr "Remote port" msgid "Remote transmission interval will be multiplied by this value" msgstr "Remote transmission interval will be multiplied by this value" -#: ../../configuration/vpn/l2tp.rst:216 +#: ../../configuration/service/pppoe-server.rst:217 +#: ../../configuration/vpn/l2tp.rst:260 +#: ../../configuration/vpn/pptp.rst:200 +#: ../../configuration/vpn/sstp.rst:233 msgid "Renaming clients interfaces by RADIUS" msgstr "Renaming clients interfaces by RADIUS" @@ -10179,7 +11279,10 @@ msgstr "Request only a temporary address and not form an IA_NA (Identity Associa msgid "Requests are forwarded through ``eth2`` as the `upstream interface`" msgstr "Requests are forwarded through ``eth2`` as the `upstream interface`" -#: ../../configuration/vpn/sstp.rst:95 +#: ../../configuration/service/pppoe-server.rst:442 +#: ../../configuration/vpn/l2tp.rst:396 +#: ../../configuration/vpn/pptp.rst:320 +#: ../../configuration/vpn/sstp.rst:354 msgid "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." msgstr "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." @@ -10191,12 +11294,12 @@ msgstr "Requirements" msgid "Requirements:" msgstr "Requirements:" -#: ../../configuration/firewall/ipv4.rst:926 +#: ../../configuration/firewall/ipv4.rst:949 #: ../../configuration/firewall/ipv6.rst:935 msgid "Requirements to enable synproxy:" msgstr "Requirements to enable synproxy:" -#: ../../configuration/protocols/bgp.rst:1064 +#: ../../configuration/protocols/bgp.rst:1086 #: ../../configuration/protocols/mpls.rst:248 msgid "Reset" msgstr "Reset" @@ -10205,11 +11308,11 @@ msgstr "Reset" msgid "Reset OpenVPN" msgstr "Reset OpenVPN" -#: ../../configuration/system/ipv6.rst:150 +#: ../../configuration/system/ipv6.rst:163 msgid "Reset commands" msgstr "Reset commands" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." @@ -10225,7 +11328,7 @@ msgstr "Restart DHCP relay service" msgid "Restart DHCPv6 relay agent immediately." msgstr "Restart DHCPv6 relay agent immediately." -#: ../../configuration/container/index.rst:167 +#: ../../configuration/container/index.rst:203 msgid "Restart a given container" msgstr "Restart a given container" @@ -10233,7 +11336,7 @@ msgstr "Restart a given container" msgid "Restart mDNS repeater service." msgstr "Restart mDNS repeater service." -#: ../../configuration/service/dhcp-server.rst:428 +#: ../../configuration/service/dhcp-server.rst:487 msgid "Restart the DHCP server" msgstr "Restart the DHCP server" @@ -10245,7 +11348,7 @@ msgstr "Restart the IGMP proxy process." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." -#: ../../configuration/service/dns.rst:204 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." @@ -10263,11 +11366,11 @@ msgstr "Results in:" msgid "Retransmit Timer" msgstr "Retransmit Timer" -#: ../../configuration/service/conntrack-sync.rst:140 +#: ../../configuration/service/conntrack-sync.rst:149 msgid "Retrieve current statistics of connection tracking subsystem." msgstr "Retrieve current statistics of connection tracking subsystem." -#: ../../configuration/service/conntrack-sync.rst:173 +#: ../../configuration/service/conntrack-sync.rst:182 msgid "Retrieve current status of connection tracking subsystem." msgstr "Retrieve current status of connection tracking subsystem." @@ -10287,15 +11390,15 @@ msgstr "Round Robin" msgid "Route Aggregation Configuration" msgstr "Route Aggregation Configuration" -#: ../../configuration/protocols/bgp.rst:682 +#: ../../configuration/protocols/bgp.rst:704 msgid "Route Dampening" msgstr "Route Dampening" -#: ../../configuration/protocols/bgp.rst:1189 +#: ../../configuration/protocols/bgp.rst:1211 msgid "Route Filtering" msgstr "Route Filtering" -#: ../../configuration/protocols/bgp.rst:818 +#: ../../configuration/protocols/bgp.rst:840 msgid "Route Filtering Configuration" msgstr "Route Filtering Configuration" @@ -10311,7 +11414,7 @@ msgstr "Route Map Policy" msgid "Route Redistribution" msgstr "Route Redistribution" -#: ../../configuration/protocols/bgp.rst:904 +#: ../../configuration/protocols/bgp.rst:926 msgid "Route Reflector Configuration" msgstr "Route Reflector Configuration" @@ -10319,7 +11422,7 @@ msgstr "Route Reflector Configuration" msgid "Route Selection" msgstr "Route Selection" -#: ../../configuration/protocols/bgp.rst:737 +#: ../../configuration/protocols/bgp.rst:759 msgid "Route Selection Configuration" msgstr "Route Selection Configuration" @@ -10327,11 +11430,11 @@ msgstr "Route Selection Configuration" msgid "Route and Route6 Policy" msgstr "Route and Route6 Policy" -#: ../../configuration/protocols/bgp.rst:690 +#: ../../configuration/protocols/bgp.rst:712 msgid "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." msgstr "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." -#: ../../configuration/protocols/bgp.rst:1191 +#: ../../configuration/protocols/bgp.rst:1213 msgid "Route filter can be applied using a route-map:" msgstr "Route filter can be applied using a route-map:" @@ -10339,7 +11442,7 @@ msgstr "Route filter can be applied using a route-map:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." @@ -10363,7 +11466,7 @@ msgstr "Router Lifetime" msgid "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." msgstr "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." -#: ../../configuration/vrf/index.rst:425 +#: ../../configuration/vrf/index.rst:444 msgid "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" msgstr "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" @@ -10375,7 +11478,7 @@ msgstr "Routes on Node 2:" msgid "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." msgstr "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." -#: ../../configuration/protocols/bgp.rst:662 +#: ../../configuration/protocols/bgp.rst:684 #: ../../configuration/protocols/ospf.rst:92 #: ../../configuration/protocols/rip.rst:64 #: ../../configuration/protocols/static.rst:39 @@ -10391,7 +11494,7 @@ msgstr "Routes with this attribute can only be sent to your neighbor if your loc msgid "Routine" msgstr "Routine" -#: ../../configuration/vrf/index.rst:82 +#: ../../configuration/vrf/index.rst:101 msgid "Routing" msgstr "Routing" @@ -10404,16 +11507,16 @@ msgid "Rule-Sets" msgstr "Rule-Sets" #: ../../configuration/firewall/bridge.rst:287 -#: ../../configuration/firewall/ipv4.rst:957 +#: ../../configuration/firewall/ipv4.rst:980 #: ../../configuration/firewall/ipv6.rst:965 msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -10421,11 +11524,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -10447,7 +11550,7 @@ msgstr "Rules allow to control and route incoming traffic to specific backend ba msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:391 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Running Behind NAT" @@ -10511,7 +11614,7 @@ msgstr "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new s msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." -#: ../../configuration/protocols/rpki.rst:127 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -10520,11 +11623,11 @@ msgstr "SSH" msgid "SSH :ref:`ssh_key_based_authentication`" msgstr "SSH :ref:`ssh_key_based_authentication`" -#: ../../configuration/system/login.rst:57 +#: ../../configuration/system/login.rst:61 msgid "SSH :ref:`ssh_operation`" msgstr "SSH :ref:`ssh_operation`" -#: ../../configuration/system/option.rst:44 +#: ../../configuration/system/option.rst:74 msgid "SSH client" msgstr "SSH client" @@ -10532,7 +11635,7 @@ msgstr "SSH client" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." -#: ../../configuration/protocols/rpki.rst:137 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "SSH username to establish an SSH connection to the cache server." @@ -10544,8 +11647,11 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 -#: ../../configuration/vpn/sstp.rst:162 msgid "SSL Certificates" msgstr "SSL Certificates" @@ -10609,7 +11715,44 @@ msgstr "Scanning is not supported on all wireless drivers and wireless hardware. msgid "Script execution" msgstr "Script execution" +#: ../../configuration/service/ipoe-server.rst:299 +#: ../../configuration/service/pppoe-server.rst:417 +#: ../../configuration/vpn/l2tp.rst:361 +#: ../../configuration/vpn/pptp.rst:285 +#: ../../configuration/vpn/sstp.rst:319 +msgid "Script to run before session interface comes up" +msgstr "Script to run before session interface comes up" + +#: ../../configuration/service/ipoe-server.rst:291 +#: ../../configuration/service/pppoe-server.rst:409 +#: ../../configuration/vpn/l2tp.rst:353 +#: ../../configuration/vpn/pptp.rst:277 +#: ../../configuration/vpn/sstp.rst:311 +msgid "Script to run when session interface changed by RADIUS CoA handling" +msgstr "Script to run when session interface changed by RADIUS CoA handling" + +#: ../../configuration/service/ipoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:413 +#: ../../configuration/vpn/l2tp.rst:357 +#: ../../configuration/vpn/pptp.rst:281 +#: ../../configuration/vpn/sstp.rst:315 +msgid "Script to run when session interface going to terminate" +msgstr "Script to run when session interface going to terminate" + +#: ../../configuration/service/ipoe-server.rst:303 +#: ../../configuration/service/pppoe-server.rst:421 +#: ../../configuration/vpn/l2tp.rst:365 +#: ../../configuration/vpn/pptp.rst:289 +#: ../../configuration/vpn/sstp.rst:323 +msgid "Script to run when session interface is completely configured and started" +msgstr "Script to run when session interface is completely configured and started" + #: ../../configuration/highavailability/index.rst:299 +#: ../../configuration/service/ipoe-server.rst:287 +#: ../../configuration/service/pppoe-server.rst:405 +#: ../../configuration/vpn/l2tp.rst:349 +#: ../../configuration/vpn/pptp.rst:273 +#: ../../configuration/vpn/sstp.rst:307 msgid "Scripting" msgstr "Scripting" @@ -10617,7 +11760,15 @@ msgstr "Scripting" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." -#: ../../configuration/vpn/sstp.rst:246 +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + +#: ../../configuration/service/ipoe-server.rst:186 +#: ../../configuration/service/pppoe-server.rst:148 +#: ../../configuration/vpn/l2tp.rst:191 +#: ../../configuration/vpn/pptp.rst:131 +#: ../../configuration/vpn/sstp.rst:164 msgid "Secret for Dynamic Authorization Extension server (DM/CoA)" msgstr "Secret for Dynamic Authorization Extension server (DM/CoA)" @@ -10634,7 +11785,7 @@ msgstr "Security/authentication messages" msgid "See :rfc:`7761#section-4.1` for details." msgstr "See :rfc:`7761#section-4.1` for details." -#: ../../configuration/system/ip.rst:52 +#: ../../configuration/system/ip.rst:65 msgid "See below the different parameters available for the IPv4 **show** command:" msgstr "See below the different parameters available for the IPv4 **show** command:" @@ -10670,7 +11821,7 @@ msgstr "Select TLS version used." msgid "Select cipher suite used for cryptographic operations. This setting is mandatory." msgstr "Select cipher suite used for cryptographic operations. This setting is mandatory." -#: ../../configuration/vrf/index.rst:468 +#: ../../configuration/vrf/index.rst:487 msgid "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." msgstr "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." @@ -10694,6 +11845,10 @@ msgstr "Send all DNS queries to the IPv4/IPv6 DNS server specified under `<addre msgid "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." msgstr "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." +#: ../../configuration/vpn/l2tp.rst:276 +msgid "Sent to the client (LAC) in the Host-Name attribute" +msgstr "Sent to the client (LAC) in the Host-Name attribute" + #: ../../configuration/system/console.rst:5 msgid "Serial Console" msgstr "Serial Console" @@ -10703,7 +11858,6 @@ msgid "Serial interfaces can be any interface which is directly connected to the msgstr "Serial interfaces can be any interface which is directly connected to the CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)." #: ../../configuration/interfaces/openvpn.rst:325 -#: ../../configuration/vpn/sstp.rst:210 msgid "Server" msgstr "Server" @@ -10711,7 +11865,7 @@ msgstr "Server" msgid "Server:" msgstr "Server:" -#: ../../configuration/pki/index.rst:210 +#: ../../configuration/pki/index.rst:212 msgid "Server Certificate" msgstr "Server Certificate" @@ -10723,7 +11877,7 @@ msgstr "Server Configuration" msgid "Server Side" msgstr "Server Side" -#: ../../configuration/service/ipoe-server.rst:156 +#: ../../configuration/service/ipoe-server.rst:157 msgid "Server configuration" msgstr "Server configuration" @@ -10748,19 +11902,19 @@ msgstr "Set BFD peer IPv4 address or IPv6 address" msgid "Set BGP community-list to exactly match." msgstr "Set BGP community-list to exactly match." -#: ../../configuration/policy/route-map.rst:318 +#: ../../configuration/policy/route-map.rst:321 msgid "Set BGP local preference attribute." msgstr "Set BGP local preference attribute." -#: ../../configuration/policy/route-map.rst:336 +#: ../../configuration/policy/route-map.rst:339 msgid "Set BGP origin code." msgstr "Set BGP origin code." -#: ../../configuration/policy/route-map.rst:341 +#: ../../configuration/policy/route-map.rst:344 msgid "Set BGP originator ID attribute." msgstr "Set BGP originator ID attribute." -#: ../../configuration/policy/route-map.rst:359 +#: ../../configuration/policy/route-map.rst:362 msgid "Set BGP weight attribute" msgstr "Set BGP weight attribute" @@ -10776,7 +11930,7 @@ msgstr "Set IPSec inbound match criterias, where:" msgid "Set IP fragment match, where:" msgstr "Set IP fragment match, where:" -#: ../../configuration/policy/route-map.rst:331 +#: ../../configuration/policy/route-map.rst:334 msgid "Set OSPF external metric-type." msgstr "Set OSPF external metric-type." @@ -10796,12 +11950,16 @@ msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 ne msgid "Set SSL certeficate <name> for service <name>" msgstr "Set SSL certeficate <name> for service <name>" -#: ../../configuration/firewall/ipv4.rst:918 +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate <name> for service <name>" +msgstr "Set SSL certificate <name> for service <name>" + +#: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:280 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Set TTL to 300 seconds" @@ -10813,6 +11971,10 @@ msgstr "Set Virtual Tunnel Interface" msgid "Set a container description" msgstr "Set a container description" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -10825,7 +11987,7 @@ msgstr "Set a destination and/or source port. Accepted input:" msgid "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." msgstr "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." -#: ../../configuration/system/login.rst:387 +#: ../../configuration/system/login.rst:391 msgid "Set a limit on the maximum number of concurrent logged-in users on the system." msgstr "Set a limit on the maximum number of concurrent logged-in users on the system." @@ -10833,7 +11995,7 @@ msgstr "Set a limit on the maximum number of concurrent logged-in users on the s msgid "Set a meaningful description." msgstr "Set a meaningful description." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Set a named api key. Every key has the same, full permissions on the system." @@ -10860,15 +12022,56 @@ msgstr "Set action for the route-map policy." msgid "Set action to take on entries matching this rule." msgstr "Set action to take on entries matching this rule." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." -#: ../../configuration/vpn/sstp.rst:100 +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + +#: ../../configuration/service/ipoe-server.rst:60 +#: ../../configuration/service/ipoe-server.rst:88 +#: ../../configuration/service/pppoe-server.rst:38 +#: ../../configuration/vpn/l2tp.rst:26 +#: ../../configuration/vpn/pptp.rst:27 +#: ../../configuration/vpn/sstp.rst:53 msgid "Set authentication backend. The configured authentication backend is used for all queries." msgstr "Set authentication backend. The configured authentication backend is used for all queries." -#: ../../configuration/container/index.rst:117 +#: ../../configuration/container/index.rst:122 msgid "Set container capabilities or permissions." msgstr "Set container capabilities or permissions." @@ -10880,6 +12083,19 @@ msgstr "Set delay between gratuitous ARP messages sent on an interface." msgid "Set delay for second set of gratuitous ARPs after transition to MASTER." msgstr "Set delay for second set of gratuitous ARPs after transition to MASTER." +#: ../../configuration/service/ipoe-server.rst:356 +#: ../../configuration/service/pppoe-server.rst:522 +#: ../../configuration/vpn/l2tp.rst:476 +#: ../../configuration/vpn/pptp.rst:400 +#: ../../configuration/vpn/sstp.rst:434 +msgid "Set description." +msgstr "Set description." + +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 +msgid "Set description `<text>` for dynamic DNS service being configured." +msgstr "Set description `<text>` for dynamic DNS service being configured." + #: ../../configuration/policy/as-path-list.rst:21 msgid "Set description for as-path-list policy." msgstr "Set description for as-path-list policy." @@ -10956,7 +12172,7 @@ msgstr "Set eth1 to be the listening interface for the DHCPv6 relay." msgid "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." msgstr "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." -#: ../../configuration/policy/route-map.rst:251 +#: ../../configuration/policy/route-map.rst:254 msgid "Set extcommunity bandwidth" msgstr "Set extcommunity bandwidth" @@ -11025,6 +12241,10 @@ msgstr "Set maximum number of packets to alow in excess of rate." msgid "Set minimum time interval for refreshing gratuitous ARPs while MASTER." msgstr "Set minimum time interval for refreshing gratuitous ARPs while MASTER." +#: ../../configuration/vpn/l2tp.rst:72 +msgid "Set mode for IPsec authentication between VyOS and L2TP clients." +msgstr "Set mode for IPsec authentication between VyOS and L2TP clients." + #: ../../configuration/highavailability/index.rst:285 msgid "Set number of gratuitous ARP messages to send at a time after transition to MASTER." msgstr "Set number of gratuitous ARP messages to send at a time after transition to MASTER." @@ -11055,7 +12275,11 @@ msgstr "Set packet modifications: Packet Differentiated Services Codepoint (DSCP msgid "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." msgstr "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." -#: ../../configuration/policy/route-map.rst:350 +#: ../../configuration/vpn/l2tp.rst:76 +msgid "Set predefined shared secret phrase." +msgstr "Set predefined shared secret phrase." + +#: ../../configuration/policy/route-map.rst:353 msgid "Set prefixes to table." msgstr "Set prefixes to table." @@ -11063,7 +12287,7 @@ msgstr "Set prefixes to table." msgid "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." msgstr "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." -#: ../../configuration/policy/route-map.rst:260 +#: ../../configuration/policy/route-map.rst:263 msgid "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." @@ -11080,7 +12304,7 @@ msgstr "Set rule action to drop." msgid "Set service to bind on IP address, by default listen on any IPv4 and IPv6" msgstr "Set service to bind on IP address, by default listen on any IPv4 and IPv6" -#: ../../configuration/policy/route-map.rst:265 +#: ../../configuration/policy/route-map.rst:268 msgid "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." @@ -11096,7 +12320,7 @@ msgstr "Set some metric to routes learned from a particular neighbor." msgid "Set source-address to your local IP (LAN)." msgstr "Set source-address to your local IP (LAN)." -#: ../../configuration/policy/route-map.rst:346 +#: ../../configuration/policy/route-map.rst:349 msgid "Set source IP/IPv6 address for route." msgstr "Set source IP/IPv6 address for route." @@ -11105,7 +12329,7 @@ msgstr "Set source IP/IPv6 address for route." msgid "Set source address or prefix to match." msgstr "Set source address or prefix to match." -#: ../../configuration/policy/route-map.rst:354 +#: ../../configuration/policy/route-map.rst:357 msgid "Set tag value for routing protocol." msgstr "Set tag value for routing protocol." @@ -11113,8 +12337,8 @@ msgstr "Set tag value for routing protocol." msgid "Set the \"recursion desired\" bit in requests to the upstream nameserver." msgstr "Set the \"recursion desired\" bit in requests to the upstream nameserver." -#: ../../configuration/policy/route-map.rst:290 -#: ../../configuration/policy/route-map.rst:303 +#: ../../configuration/policy/route-map.rst:293 +#: ../../configuration/policy/route-map.rst:306 msgid "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." msgstr "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." @@ -11175,6 +12399,10 @@ msgstr "Set the Segment Routing Local Block i.e. the label range used by MPLS to msgid "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." msgstr "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." +#: ../../configuration/container/index.rst:99 +msgid "Set the User ID or Group ID of the container" +msgstr "Set the User ID or Group ID of the container" + #: ../../configuration/protocols/pim.rst:147 msgid "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." @@ -11183,6 +12411,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Set the ``sshd`` log level. The default is ``info``." @@ -11195,6 +12427,14 @@ msgstr "Set the address of the backend port" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Set the address of the backend server to which the incoming traffic will be forwarded" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." @@ -11231,6 +12471,10 @@ msgstr "Set the global setting for invalid packets." msgid "Set the global setting for related connections." msgstr "Set the global setting for related connections." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" @@ -11247,6 +12491,10 @@ msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can re msgid "Set the maximum number of TCP half-open connections." msgstr "Set the maximum number of TCP half-open connections." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." @@ -11255,11 +12503,11 @@ msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry use msgid "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." msgstr "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." -#: ../../configuration/interfaces/bridge.rst:148 +#: ../../configuration/interfaces/bridge.rst:157 msgid "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" msgstr "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" -#: ../../configuration/policy/route-map.rst:284 +#: ../../configuration/policy/route-map.rst:287 msgid "Set the next-hop as unchanged. Pass through the route-map without changing its value" msgstr "Set the next-hop as unchanged. Pass through the route-map without changing its value" @@ -11271,7 +12519,15 @@ msgstr "Set the number of TCP maximum retransmit attempts." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." -#: ../../configuration/system/login.rst:84 +#: ../../configuration/protocols/rpki.rst:119 +msgid "Set the number of seconds the router waits until retrying to connect to the cache server." +msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." + +#: ../../configuration/protocols/rpki.rst:112 +msgid "Set the number of seconds the router waits until the router expires the cache." +msgstr "Set the number of seconds the router waits until the router expires the cache." + +#: ../../configuration/system/login.rst:88 msgid "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." msgstr "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." @@ -11291,11 +12547,11 @@ msgstr "Set the peer's key used to receive (RX) traffic" msgid "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." msgstr "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." -#: ../../configuration/container/index.rst:98 +#: ../../configuration/container/index.rst:103 msgid "Set the restart behavior of the container." msgstr "Set the restart behavior of the container." -#: ../../configuration/policy/route-map.rst:323 +#: ../../configuration/policy/route-map.rst:326 msgid "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." msgstr "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." @@ -11307,6 +12563,10 @@ msgstr "Set the routing table to forward packet with." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." @@ -11328,15 +12588,27 @@ msgstr "Set the timeout in secounds for a protocol or state in a custom rule." msgid "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." msgstr "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." -#: ../../configuration/firewall/ipv4.rst:922 +#: ../../configuration/firewall/ipv4.rst:945 #: ../../configuration/firewall/ipv6.rst:931 msgid "Set the window scale factor for TCP window scaling" msgstr "Set the window scale factor for TCP window scaling" -#: ../../configuration/system/login.rst:124 +#: ../../configuration/system/login.rst:128 msgid "Set window of concurrently valid codes." msgstr "Set window of concurrently valid codes." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Sets the image name in the hub registry" @@ -11357,7 +12629,7 @@ msgstr "Sets the unique id for this vxlan-interface. Not sure how it correlates msgid "Setting VRRP group priority" msgstr "Setting VRRP group priority" -#: ../../configuration/service/dhcp-server.rst:231 +#: ../../configuration/service/dhcp-server.rst:287 msgid "Setting name" msgstr "Setting name" @@ -11389,7 +12661,16 @@ msgstr "Setting up certificates:" msgid "Setting up tunnel:" msgstr "Setting up tunnel:" -#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/system/option.rst:42 +#: ../../configuration/system/option.rst:53 +msgid "Setting will only become active with the next reboot!" +msgstr "Setting will only become active with the next reboot!" + +#: ../../configuration/service/dhcp-server.rst:429 +msgid "Setup DHCP HA for network 192.0.2.0/24" +msgstr "Setup DHCP HA for network 192.0.2.0/24" + +#: ../../configuration/service/dhcp-server.rst:413 msgid "Setup DHCP failover for network 192.0.2.0/24" msgstr "Setup DHCP failover for network 192.0.2.0/24" @@ -11397,15 +12678,19 @@ msgstr "Setup DHCP failover for network 192.0.2.0/24" msgid "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." msgstr "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." -#: ../../configuration/system/login.rst:262 +#: ../../configuration/system/login.rst:266 msgid "Setup the `<timeout>` in seconds when querying the RADIUS server." msgstr "Setup the `<timeout>` in seconds when querying the RADIUS server." -#: ../../configuration/system/login.rst:331 +#: ../../configuration/system/login.rst:335 msgid "Setup the `<timeout>` in seconds when querying the TACACS server." msgstr "Setup the `<timeout>` in seconds when querying the TACACS server." -#: ../../configuration/service/dns.rst:327 +#: ../../configuration/service/dns.rst:430 +msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." +msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:341 msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." @@ -11413,11 +12698,11 @@ msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS p msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." -#: ../../configuration/system/option.rst:31 +#: ../../configuration/system/option.rst:61 msgid "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." msgstr "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." -#: ../../configuration/system/option.rst:36 +#: ../../configuration/system/option.rst:66 msgid "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." msgstr "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." @@ -11445,25 +12730,25 @@ msgstr "Short GI capabilities for 20 and 40 MHz" msgid "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." msgstr "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." -#: ../../configuration/vrf/index.rst:488 +#: ../../configuration/vrf/index.rst:507 msgid "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." msgstr "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." -#: ../../configuration/protocols/bgp.rst:953 +#: ../../configuration/protocols/bgp.rst:975 #: ../../configuration/protocols/mpls.rst:225 msgid "Show" msgstr "Show" -#: ../../configuration/service/dhcp-server.rst:416 +#: ../../configuration/service/dhcp-server.rst:475 msgid "Show DHCP server daemon log file" msgstr "Show DHCP server daemon log file" -#: ../../configuration/service/dhcp-server.rst:668 +#: ../../configuration/service/dhcp-server.rst:729 msgid "Show DHCPv6 server daemon log file" msgstr "Show DHCPv6 server daemon log file" #: ../../configuration/firewall/bridge.rst:306 -#: ../../configuration/firewall/ipv4.rst:1115 +#: ../../configuration/firewall/ipv4.rst:1138 #: ../../configuration/firewall/ipv6.rst:1138 msgid "Show Firewall log" msgstr "Show Firewall log" @@ -11528,27 +12813,27 @@ msgstr "Show WWAN module model." msgid "Show WWAN module signal strength." msgstr "Show WWAN module signal strength." -#: ../../configuration/container/index.rst:163 +#: ../../configuration/container/index.rst:199 msgid "Show a list available container networks" msgstr "Show a list available container networks" -#: ../../configuration/pki/index.rst:297 +#: ../../configuration/pki/index.rst:328 msgid "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." msgstr "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." -#: ../../configuration/pki/index.rst:332 +#: ../../configuration/pki/index.rst:363 msgid "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." msgstr "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." -#: ../../configuration/pki/index.rst:315 +#: ../../configuration/pki/index.rst:346 msgid "Show a list of installed certificates" msgstr "Show a list of installed certificates" -#: ../../configuration/protocols/bfd.rst:98 +#: ../../configuration/protocols/bfd.rst:105 msgid "Show all BFD peers" msgstr "Show all BFD peers" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Show available offloading functions on given `<interface>`" @@ -11556,23 +12841,23 @@ msgstr "Show available offloading functions on given `<interface>`" msgid "Show binded qat device interrupts to certain core." msgstr "Show binded qat device interrupts to certain core." -#: ../../configuration/interfaces/bridge.rst:283 +#: ../../configuration/interfaces/bridge.rst:292 msgid "Show bridge `<name>` fdb displays the current forwarding table:" msgstr "Show bridge `<name>` fdb displays the current forwarding table:" -#: ../../configuration/interfaces/bridge.rst:310 +#: ../../configuration/interfaces/bridge.rst:319 msgid "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." msgstr "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." msgstr "Show brief interface information." -#: ../../configuration/system/ipv6.rst:46 +#: ../../configuration/system/ipv6.rst:59 msgid "Show commands" msgstr "Show commands" @@ -11584,11 +12869,11 @@ msgstr "Show configured serial ports and their respective interface configuratio msgid "Show connection data of load balanced traffic:" msgstr "Show connection data of load balanced traffic:" -#: ../../configuration/service/conntrack-sync.rst:132 +#: ../../configuration/service/conntrack-sync.rst:141 msgid "Show connection syncing external cache entries" msgstr "Show connection syncing external cache entries" -#: ../../configuration/service/conntrack-sync.rst:136 +#: ../../configuration/service/conntrack-sync.rst:145 msgid "Show connection syncing internal cache entries" msgstr "Show connection syncing internal cache entries" @@ -11610,7 +12895,7 @@ msgstr "Show detailed information about the underlaying physical links on given #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -11642,7 +12927,7 @@ msgstr "Show general information about specific WireGuard interface" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Show info about the Wireguard service. It also shows the latest handshake." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Show information about physical `<interface>`" @@ -11654,44 +12939,44 @@ msgstr "Show list of IPs currently blocked by SSH dynamic-protection." msgid "Show logs for mDNS repeater service." msgstr "Show logs for mDNS repeater service." -#: ../../configuration/container/index.rst:159 +#: ../../configuration/container/index.rst:195 msgid "Show logs from a given container" msgstr "Show logs from a given container" -#: ../../configuration/service/dhcp-server.rst:420 +#: ../../configuration/service/dhcp-server.rst:479 msgid "Show logs from all DHCP client processes." msgstr "Show logs from all DHCP client processes." -#: ../../configuration/service/dhcp-server.rst:672 +#: ../../configuration/service/dhcp-server.rst:733 msgid "Show logs from all DHCPv6 client processes." msgstr "Show logs from all DHCPv6 client processes." -#: ../../configuration/service/dhcp-server.rst:424 +#: ../../configuration/service/dhcp-server.rst:483 msgid "Show logs from specific `interface` DHCP client process." msgstr "Show logs from specific `interface` DHCP client process." -#: ../../configuration/service/dhcp-server.rst:676 +#: ../../configuration/service/dhcp-server.rst:737 msgid "Show logs from specific `interface` DHCPv6 client process." msgstr "Show logs from specific `interface` DHCPv6 client process." -#: ../../configuration/pki/index.rst:311 +#: ../../configuration/pki/index.rst:342 msgid "Show only information for specified Certificate Authority." msgstr "Show only information for specified Certificate Authority." -#: ../../configuration/pki/index.rst:328 +#: ../../configuration/pki/index.rst:359 msgid "Show only information for specified certificate." msgstr "Show only information for specified certificate." -#: ../../configuration/service/dhcp-server.rst:478 -#: ../../configuration/service/dhcp-server.rst:699 +#: ../../configuration/service/dhcp-server.rst:537 +#: ../../configuration/service/dhcp-server.rst:760 msgid "Show only leases in the specified pool." msgstr "Show only leases in the specified pool." -#: ../../configuration/service/dhcp-server.rst:708 +#: ../../configuration/service/dhcp-server.rst:769 msgid "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" msgstr "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" -#: ../../configuration/service/dhcp-server.rst:496 +#: ../../configuration/service/dhcp-server.rst:555 msgid "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" msgstr "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" @@ -11703,23 +12988,23 @@ msgstr "Show routing table entry for the default route." msgid "Show specific MACsec interface information" msgstr "Show specific MACsec interface information" -#: ../../configuration/vpn/site2site_ipsec.rst:221 +#: ../../configuration/vpn/site2site_ipsec.rst:224 msgid "Show status of new setup:" msgstr "Show status of new setup:" -#: ../../configuration/service/dhcp-server.rst:447 +#: ../../configuration/service/dhcp-server.rst:506 msgid "Show statuses of all active leases:" msgstr "Show statuses of all active leases:" -#: ../../configuration/service/dhcp-server.rst:465 +#: ../../configuration/service/dhcp-server.rst:524 msgid "Show statuses of all active leases granted by local (this server) or remote (failover server):" msgstr "Show statuses of all active leases granted by local (this server) or remote (failover server):" -#: ../../configuration/service/dhcp-server.rst:432 +#: ../../configuration/service/dhcp-server.rst:491 msgid "Show the DHCP server statistics:" msgstr "Show the DHCP server statistics:" -#: ../../configuration/service/dhcp-server.rst:443 +#: ../../configuration/service/dhcp-server.rst:502 msgid "Show the DHCP server statistics for the specified pool." msgstr "Show the DHCP server statistics for the specified pool." @@ -11731,11 +13016,11 @@ msgstr "Show the console server log." msgid "Show the full config uploaded to the QAT device." msgstr "Show the full config uploaded to the QAT device." -#: ../../configuration/container/index.rst:151 +#: ../../configuration/container/index.rst:187 msgid "Show the list of all active containers." msgstr "Show the list of all active containers." -#: ../../configuration/container/index.rst:155 +#: ../../configuration/container/index.rst:191 msgid "Show the local container images." msgstr "Show the local container images." @@ -11747,7 +13032,7 @@ msgstr "Show the logs of a specific Rule-Set." msgid "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." -#: ../../configuration/firewall/ipv4.rst:1125 +#: ../../configuration/firewall/ipv4.rst:1148 msgid "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." @@ -11760,15 +13045,15 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "Show the route" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP" -#: ../../configuration/protocols/bfd.rst:179 +#: ../../configuration/protocols/bfd.rst:186 msgid "Showing BFD monitored static routes" msgstr "Showing BFD monitored static routes" -#: ../../configuration/service/dhcp-server.rst:684 +#: ../../configuration/service/dhcp-server.rst:745 msgid "Shows status of all assigned leases:" msgstr "Shows status of all assigned leases:" @@ -11796,7 +13081,7 @@ msgstr "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)" msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" msgstr "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" -#: ../../configuration/vpn/site2site_ipsec.rst:427 +#: ../../configuration/vpn/site2site_ipsec.rst:430 msgid "Similar combinations are applicable for the dead-peer-detection." msgstr "Similar combinations are applicable for the dead-peer-detection." @@ -11828,6 +13113,14 @@ msgstr "Since it's a HQ and branch offices setup, we will want all clients to ha msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." +#: ../../configuration/service/ipoe-server.rst:131 +#: ../../configuration/service/pppoe-server.rst:93 +#: ../../configuration/vpn/l2tp.rst:136 +#: ../../configuration/vpn/pptp.rst:76 +#: ../../configuration/vpn/sstp.rst:109 +msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" +msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" + #: ../../configuration/service/mdns.rst:13 msgid "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." @@ -11836,6 +13129,10 @@ msgstr "Since the mDNS protocol sends the AA records in the packet itself, the r msgid "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." +#: ../../configuration/service/ids.rst:98 +msgid "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" +msgstr "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" + #: ../../configuration/interfaces/vxlan.rst:157 msgid "Single VXLAN device (SVD)" msgstr "Single VXLAN device (SVD)" @@ -11857,7 +13154,7 @@ msgstr "Site-to-site mode supports x.509 but doesn't require it and can also wor msgid "Site to Site VPN" msgstr "Site to Site VPN" -#: ../../configuration/pki/index.rst:275 +#: ../../configuration/pki/index.rst:306 msgid "Size of the RSA key." msgstr "Size of the RSA key." @@ -11865,6 +13162,10 @@ msgstr "Size of the RSA key." msgid "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." msgstr "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." +#: ../../configuration/service/ids.rst:110 +msgid "So, firewall configuration needed for this setup:" +msgstr "So, firewall configuration needed for this setup:" + #: ../../configuration/nat/nat44.rst:554 msgid "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." msgstr "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." @@ -11885,7 +13186,14 @@ msgstr "Some ISPs by default only delegate a /64 prefix. To request for a specif msgid "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." msgstr "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." -#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/service/ipoe-server.rst:140 +#: ../../configuration/service/pppoe-server.rst:102 +#: ../../configuration/vpn/pptp.rst:85 +#: ../../configuration/vpn/sstp.rst:118 +msgid "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." +msgstr "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." + +#: ../../configuration/vpn/l2tp.rst:145 msgid "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." msgstr "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." @@ -11893,6 +13201,10 @@ msgstr "Some RADIUS_ severs use an access control list which allows or denies qu msgid "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." msgstr "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." +#: ../../configuration/container/index.rst:171 +msgid "Some container registries require credentials to be used." +msgstr "Some container registries require credentials to be used." + #: ../../configuration/firewall/general-legacy.rst:38 msgid "Some firewall settings are global and have an affect on the whole system." msgstr "Some firewall settings are global and have an affect on the whole system." @@ -11933,11 +13245,11 @@ msgstr "Some users tend to connect their mobile devices using WireGuard to their msgid "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." msgstr "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." -#: ../../configuration/service/dhcp-server.rst:703 +#: ../../configuration/service/dhcp-server.rst:764 msgid "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" msgstr "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" -#: ../../configuration/service/dhcp-server.rst:491 +#: ../../configuration/service/dhcp-server.rst:550 msgid "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" msgstr "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" @@ -11949,7 +13261,16 @@ msgstr "Source Address" msgid "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." msgstr "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." -#: ../../configuration/vpn/sstp.rst:268 +#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:208 +#: ../../configuration/service/pppoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:170 +#: ../../configuration/vpn/l2tp.rst:157 +#: ../../configuration/vpn/l2tp.rst:213 +#: ../../configuration/vpn/pptp.rst:97 +#: ../../configuration/vpn/pptp.rst:153 +#: ../../configuration/vpn/sstp.rst:130 +#: ../../configuration/vpn/sstp.rst:186 msgid "Source IPv4 address used in all RADIUS server queires." msgstr "Source IPv4 address used in all RADIUS server queires." @@ -11961,11 +13282,11 @@ msgstr "Source NAT rules" msgid "Source Prefix" msgstr "Source Prefix" -#: ../../configuration/system/login.rst:276 +#: ../../configuration/system/login.rst:280 msgid "Source all connections to the RADIUS servers from given VRF `<name>`." msgstr "Source all connections to the RADIUS servers from given VRF `<name>`." -#: ../../configuration/system/login.rst:345 +#: ../../configuration/system/login.rst:349 msgid "Source all connections to the TACACS servers from given VRF `<name>`." msgstr "Source all connections to the TACACS servers from given VRF `<name>`." @@ -11973,7 +13294,7 @@ msgstr "Source all connections to the TACACS servers from given VRF `<name>`." msgid "Source protocol to match." msgstr "Source protocol to match." -#: ../../configuration/vpn/ipsec.rst:225 +#: ../../configuration/vpn/ipsec.rst:229 msgid "Source tunnel from dummy interface" msgstr "Source tunnel from dummy interface" @@ -12001,15 +13322,48 @@ msgstr "Spatial Multiplexing Power Save (SMPS) settings" msgid "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." msgstr "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." -#: ../../configuration/vpn/sstp.rst:238 +#: ../../configuration/service/ipoe-server.rst:178 +#: ../../configuration/service/pppoe-server.rst:140 +#: ../../configuration/vpn/l2tp.rst:183 +#: ../../configuration/vpn/pptp.rst:123 +#: ../../configuration/vpn/sstp.rst:156 msgid "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" msgstr "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" -#: ../../configuration/vpn/sstp.rst:194 +#: ../../configuration/service/pppoe-server.rst:470 +#: ../../configuration/vpn/l2tp.rst:424 +#: ../../configuration/vpn/pptp.rst:348 +#: ../../configuration/vpn/sstp.rst:382 +msgid "Specifies IPv4 negotiation preference." +msgstr "Specifies IPv4 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:345 +#: ../../configuration/vpn/l2tp.rst:289 +#: ../../configuration/vpn/pptp.rst:213 +#: ../../configuration/vpn/sstp.rst:247 +msgid "Specifies IPv6 negotiation preference." +msgstr "Specifies IPv6 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:552 +msgid "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" +msgstr "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" + +#: ../../configuration/service/pppoe-server.rst:502 +#: ../../configuration/vpn/l2tp.rst:456 +#: ../../configuration/vpn/pptp.rst:380 +#: ../../configuration/vpn/sstp.rst:414 +msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." +msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." + +#: ../../configuration/vpn/sstp.rst:200 msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." -#: ../../configuration/vrf/index.rst:477 +#: ../../configuration/service/ipoe-server.rst:81 +msgid "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." +msgstr "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." + +#: ../../configuration/vrf/index.rst:496 msgid "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." msgstr "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." @@ -12017,6 +13371,13 @@ msgstr "Specifies an optional route-map to be applied to routes imported or expo msgid "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." msgstr "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." +#: ../../configuration/service/pppoe-server.rst:388 +#: ../../configuration/vpn/l2tp.rst:332 +#: ../../configuration/vpn/pptp.rst:256 +#: ../../configuration/vpn/sstp.rst:290 +msgid "Specifies fixed or random interface identifier for IPv6. By default is fixed." +msgstr "Specifies fixed or random interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:173 msgid "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." msgstr "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." @@ -12025,15 +13386,36 @@ msgstr "Specifies how long squid assumes an externally validated username:passwo msgid "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." msgstr "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." +#: ../../configuration/service/pppoe-server.rst:462 +#: ../../configuration/vpn/l2tp.rst:416 +#: ../../configuration/vpn/pptp.rst:340 +#: ../../configuration/vpn/sstp.rst:374 +msgid "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." +msgstr "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." + #: ../../configuration/interfaces/bonding.rst:40 msgid "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" msgstr "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" +#: ../../configuration/service/pppoe-server.rst:396 +#: ../../configuration/vpn/l2tp.rst:340 +#: ../../configuration/vpn/pptp.rst:264 +#: ../../configuration/vpn/sstp.rst:298 +msgid "Specifies peer interface identifier for IPv6. By default is fixed." +msgstr "Specifies peer interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:81 msgid "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." msgstr "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." -#: ../../configuration/vpn/sstp.rst:110 +#: ../../configuration/service/ipoe-server.rst:348 +msgid "Specifies relay agent IP addre" +msgstr "Specifies relay agent IP addre" + +#: ../../configuration/service/pppoe-server.rst:70 +#: ../../configuration/vpn/l2tp.rst:52 +#: ../../configuration/vpn/pptp.rst:54 +#: ../../configuration/vpn/sstp.rst:79 msgid "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." msgstr "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." @@ -12057,7 +13439,7 @@ msgstr "Specifies the available :abbr:`MAC (Message Authentication Code)` algori msgid "Specifies the base DN under which the users are located." msgstr "Specifies the base DN under which the users are located." -#: ../../configuration/service/dhcp-server.rst:239 +#: ../../configuration/service/dhcp-server.rst:295 msgid "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." msgstr "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." @@ -12094,22 +13476,33 @@ msgstr "Specifies the port `<port>` that the SSTP port will listen on (default 4 msgid "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." msgstr "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." -#: ../../configuration/vrf/index.rst:452 +#: ../../configuration/vrf/index.rst:471 msgid "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." msgstr "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." -#: ../../configuration/vrf/index.rst:445 +#: ../../configuration/vrf/index.rst:464 msgid "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." msgstr "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." -#: ../../configuration/vpn/sstp.rst:281 +#: ../../configuration/service/ipoe-server.rst:224 +#: ../../configuration/service/pppoe-server.rst:186 +#: ../../configuration/vpn/l2tp.rst:229 +#: ../../configuration/vpn/pptp.rst:169 +#: ../../configuration/vpn/sstp.rst:202 msgid "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." msgstr "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." -#: ../../configuration/vpn/sstp.rst:188 +#: ../../configuration/vpn/sstp.rst:194 msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." +#: ../../configuration/service/pppoe-server.rst:490 +#: ../../configuration/vpn/l2tp.rst:444 +#: ../../configuration/vpn/pptp.rst:368 +#: ../../configuration/vpn/sstp.rst:402 +msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." +msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." + #: ../../configuration/interfaces/vxlan.rst:77 msgid "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." msgstr "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." @@ -12122,28 +13515,47 @@ msgstr "Specifies whether the VXLAN device is capable of vni filtering." msgid "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." msgstr "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." -#: ../../configuration/vpn/sstp.rst:272 +#: ../../configuration/service/ipoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:217 +#: ../../configuration/vpn/pptp.rst:157 +#: ../../configuration/vpn/sstp.rst:190 msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." +#: ../../configuration/service/pppoe-server.rst:174 +msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." +msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." + +#: ../../configuration/service/ipoe-server.rst:344 +msgid "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." +msgstr "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." + #: ../../configuration/service/ssh.rst:45 msgid "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." msgstr "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." -#: ../../configuration/firewall/ipv4.rst:401 +#: ../../configuration/service/ids.rst:51 +msgid "Specify IPv4 and/or IPv6 networks that should be protected/monitored." +msgstr "Specify IPv4 and/or IPv6 networks that should be protected/monitored." + +#: ../../configuration/service/ids.rst:38 +msgid "Specify IPv4 and/or IPv6 networks which are going to be excluded." +msgstr "Specify IPv4 and/or IPv6 networks which are going to be excluded." + +#: ../../configuration/firewall/ipv4.rst:424 #: ../../configuration/firewall/ipv6.rst:408 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." msgstr "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." -#: ../../configuration/service/dhcp-server.rst:550 +#: ../../configuration/service/dhcp-server.rst:609 msgid "Specify a NIS+ server address for DHCPv6 clients." msgstr "Specify a NIS+ server address for DHCPv6 clients." -#: ../../configuration/service/dhcp-server.rst:545 +#: ../../configuration/service/dhcp-server.rst:604 msgid "Specify a NIS server address for DHCPv6 clients." msgstr "Specify a NIS server address for DHCPv6 clients." -#: ../../configuration/service/dhcp-server.rst:555 +#: ../../configuration/service/dhcp-server.rst:614 msgid "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." msgstr "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." @@ -12167,6 +13579,14 @@ msgstr "Specify an alternate AS for this BGP process when interacting with the s msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." +#: ../../configuration/service/dns.rst:348 +msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." +msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." + +#: ../../configuration/service/ipoe-server.rst:339 +msgid "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" +msgstr "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" + #: ../../configuration/service/ntp.rst:84 #: ../../configuration/service/ssh.rst:110 #: ../../configuration/system/syslog.rst:79 @@ -12181,11 +13601,11 @@ msgstr "Specify nexthop on the path to the destination, ``ipv4-address`` can be msgid "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." msgstr "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." -#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:249 msgid "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." msgstr "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." -#: ../../configuration/system/login.rst:314 +#: ../../configuration/system/login.rst:318 msgid "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." msgstr "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." @@ -12205,7 +13625,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -12225,7 +13645,7 @@ msgstr "Specify the systems `<timezone>` as the Region/Location that best define msgid "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" msgstr "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" -#: ../../configuration/service/dns.rst:269 +#: ../../configuration/service/dns.rst:283 msgid "Specify timeout / update interval to check if IP address changed." msgstr "Specify timeout / update interval to check if IP address changed." @@ -12233,6 +13653,10 @@ msgstr "Specify timeout / update interval to check if IP address changed." msgid "Specify timeout interval for keepalive message in seconds." msgstr "Specify timeout interval for keepalive message in seconds." +#: ../../configuration/service/ipoe-server.rst:97 +msgid "Specify where interface is shared by multiple users or it is vlan-per-user." +msgstr "Specify where interface is shared by multiple users or it is vlan-per-user." + #: ../../configuration/interfaces/vxlan.rst:191 msgid "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." msgstr "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." @@ -12250,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -12285,7 +13713,7 @@ msgstr "Starting with VyOS 1.2 a :abbr:`mDNS (Multicast DNS)` repeater functiona msgid "Static" msgstr "Static" -#: ../../configuration/service/dhcp-server.rst:189 +#: ../../configuration/service/dhcp-server.rst:245 msgid "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." msgstr "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." @@ -12313,13 +13741,13 @@ msgstr "Static Routing or other dynamic routing protocols can be used over the v msgid "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." msgstr "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." -#: ../../configuration/service/dhcp-server.rst:174 -#: ../../configuration/service/dhcp-server.rst:621 +#: ../../configuration/service/dhcp-server.rst:224 +#: ../../configuration/service/dhcp-server.rst:682 msgid "Static mappings" msgstr "Static mappings" -#: ../../configuration/service/dhcp-server.rst:460 -#: ../../configuration/service/dhcp-server.rst:694 +#: ../../configuration/service/dhcp-server.rst:519 +#: ../../configuration/service/dhcp-server.rst:755 msgid "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." msgstr "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." @@ -12384,7 +13812,7 @@ msgstr "Supported versions of RIP are:" msgid "Supports as HELPER for configured grace period." msgstr "Supports as HELPER for configured grace period." -#: ../../configuration/vpn/ipsec.rst:178 +#: ../../configuration/vpn/ipsec.rst:182 msgid "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" msgstr "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" @@ -12404,17 +13832,17 @@ msgstr "Synamic instructs to forward to all peers which we have a direct connect msgid "Sync groups" msgstr "Sync groups" -#: ../../configuration/firewall/ipv4.rst:911 +#: ../../configuration/firewall/ipv4.rst:934 #: ../../configuration/firewall/ipv6.rst:920 msgid "Synproxy" msgstr "Synproxy" -#: ../../configuration/firewall/ipv4.rst:912 +#: ../../configuration/firewall/ipv4.rst:935 #: ../../configuration/firewall/ipv6.rst:921 msgid "Synproxy connections" msgstr "Synproxy connections" -#: ../../configuration/firewall/ipv4.rst:929 +#: ../../configuration/firewall/ipv4.rst:952 #: ../../configuration/firewall/ipv6.rst:938 msgid "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" msgstr "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" @@ -12484,23 +13912,23 @@ msgstr "System identifier: ``1921.6800.1002`` - for system idetifiers we recomme msgid "System is unusable - a panic condition" msgstr "System is unusable - a panic condition" -#: ../../configuration/system/login.rst:299 +#: ../../configuration/system/login.rst:303 msgid "TACACS+" msgstr "TACACS+" -#: ../../configuration/system/login.rst:418 +#: ../../configuration/system/login.rst:422 msgid "TACACS Example" msgstr "TACACS Example" -#: ../../configuration/system/login.rst:305 +#: ../../configuration/system/login.rst:309 msgid "TACACS is defined in :rfc:`8907`." msgstr "TACACS is defined in :rfc:`8907`." -#: ../../configuration/system/login.rst:335 +#: ../../configuration/system/login.rst:339 msgid "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." msgstr "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." -#: ../../configuration/protocols/static.rst:140 +#: ../../configuration/protocols/static.rst:173 #: ../../configuration/system/flow-accounting.rst:83 msgid "TBD" msgstr "TBD" @@ -12553,19 +13981,23 @@ msgstr "Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for a msgid "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" msgstr "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" -#: ../../configuration/vpn/sstp.rst:227 +#: ../../configuration/service/ipoe-server.rst:170 +#: ../../configuration/service/pppoe-server.rst:132 +#: ../../configuration/vpn/l2tp.rst:175 +#: ../../configuration/vpn/pptp.rst:115 +#: ../../configuration/vpn/sstp.rst:148 msgid "Temporary disable this RADIUS server." msgstr "Temporary disable this RADIUS server." -#: ../../configuration/system/login.rst:258 +#: ../../configuration/system/login.rst:262 msgid "Temporary disable this RADIUS server. It won't be queried." msgstr "Temporary disable this RADIUS server. It won't be queried." -#: ../../configuration/system/login.rst:327 +#: ../../configuration/system/login.rst:331 msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -12589,7 +14021,7 @@ msgstr "Test disconnecting given connection-oriented interface. `<interface>` ca msgid "Test from the IPv6 only client:" msgstr "Test from the IPv6 only client:" -#: ../../configuration/vpn/sstp.rst:305 +#: ../../configuration/vpn/sstp.rst:374 msgid "Testing SSTP" msgstr "Testing SSTP" @@ -12601,7 +14033,7 @@ msgstr "Testing and Validation" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "That is how it is possible to do the so-called \"ingress shaping\"." @@ -12617,11 +14049,11 @@ msgstr "The ARP monitor works by periodically checking the slave devices to dete msgid "The ASP has documented their IPSec requirements:" msgstr "The ASP has documented their IPSec requirements:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." -#: ../../configuration/vrf/index.rst:94 +#: ../../configuration/vrf/index.rst:113 msgid "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." msgstr "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." @@ -12645,7 +14077,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -12661,7 +14093,7 @@ msgstr "The Intel AX200 card does not work out of the box in AP mode, see https: msgid "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." msgstr "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." -#: ../../configuration/vpn/pptp.rst:6 +#: ../../configuration/vpn/pptp.rst:7 msgid "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." msgstr "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." @@ -12697,23 +14129,27 @@ msgstr "The UDP port number used by your apllication. It is mandatory for this k msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." -#: ../../configuration/service/dns.rst:173 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" -#: ../../configuration/service/dns.rst:171 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" -#: ../../configuration/service/dns.rst:175 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." -#: ../../configuration/pki/index.rst:254 +#: ../../configuration/pki/index.rst:285 msgid "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." msgstr "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." @@ -12758,10 +14194,26 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -12770,11 +14222,15 @@ msgstr "The ``https`` service listens on port 443 with backend `bk-default` to h msgid "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." msgstr "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." -#: ../../configuration/vpn/l2tp.rst:176 +#: ../../configuration/service/ipoe-server.rst:154 +#: ../../configuration/service/pppoe-server.rst:116 +#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/vpn/pptp.rst:99 +#: ../../configuration/vpn/sstp.rst:132 msgid "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." msgstr "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." -#: ../../configuration/interfaces/bridge.rst:270 +#: ../../configuration/interfaces/bridge.rst:279 msgid "The `show bridge` operational command can be used to display configured bridges:" msgstr "The `show bridge` operational command can be used to display configured bridges:" @@ -12787,11 +14243,11 @@ msgstr "The above directory and default-config must be a child directory of /con msgid "The action can be :" msgstr "The action can be :" -#: ../../configuration/pki/index.rst:271 +#: ../../configuration/pki/index.rst:302 msgid "The address the server listens to during http-01 challenge" msgstr "The address the server listens to during http-01 challenge" -#: ../../configuration/protocols/bgp.rst:775 +#: ../../configuration/protocols/bgp.rst:797 msgid "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." msgstr "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." @@ -12803,7 +14259,7 @@ msgstr "The allocated address block is 100.64.0.0/10." msgid "The amount of Duplicate Address Detection probes to send." msgstr "The amount of Duplicate Address Detection probes to send." -#: ../../configuration/protocols/bgp.rst:835 +#: ../../configuration/protocols/bgp.rst:857 msgid "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." msgstr "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." @@ -12819,15 +14275,19 @@ msgstr "The below referenced IP address `192.0.2.1` is used as example address r msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "The case of ingress shaping" -#: ../../configuration/service/pppoe-server.rst:385 +#: ../../configuration/service/pppoe-server.rst:644 +msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." +msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." + +#: ../../configuration/service/pppoe-server.rst:644 msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." -#: ../../configuration/service/ipoe-server.rst:90 +#: ../../configuration/service/ipoe-server.rst:91 msgid "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." msgstr "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." @@ -12839,7 +14299,7 @@ msgstr "The command :opcmd:`show interfaces wireguard wg01 public-key` will then msgid "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." msgstr "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." -#: ../../configuration/service/pppoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:305 msgid "The command below enables it, assuming the RADIUS connection has been setup and is working." msgstr "The command below enables it, assuming the RADIUS connection has been setup and is working." @@ -12855,9 +14315,9 @@ msgstr "The command pon TESTUNNEL establishes the PPTP tunnel to the remote syst msgid "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" msgstr "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" -#: ../../configuration/service/dhcp-server.rst:210 -#: ../../configuration/service/dhcp-server.rst:601 -#: ../../configuration/service/dhcp-server.rst:644 +#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:661 +#: ../../configuration/service/dhcp-server.rst:705 msgid "The configuration will look as follows:" msgstr "The configuration will look as follows:" @@ -12881,6 +14341,10 @@ msgstr "The connection tracking table contains one entry for each connection bei msgid "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" msgstr "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" +#: ../../configuration/service/pppoe-server.rst:299 +msgid "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" +msgstr "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" + #: ../../configuration/service/ntp.rst:29 msgid "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." msgstr "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." @@ -12905,7 +14369,11 @@ msgstr "The default hostname used is `vyos`." msgid "The default is 1492." msgstr "The default is 1492." -#: ../../configuration/service/dhcp-server.rst:526 +#: ../../configuration/interfaces/bridge.rst:140 +msgid "The default is ``802.1q``." +msgstr "The default is ``802.1q``." + +#: ../../configuration/service/dhcp-server.rst:585 msgid "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." msgstr "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." @@ -12925,7 +14393,7 @@ msgstr "The default value corresponds to 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "The default value is 300 seconds." @@ -12937,7 +14405,15 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/service/dhcp-server.rst:99 +#: ../../configuration/protocols/rpki.rst:122 +msgid "The default value is 600 seconds." +msgstr "The default value is 600 seconds." + +#: ../../configuration/protocols/rpki.rst:115 +msgid "The default value is 7200 seconds." +msgstr "The default value is 7200 seconds." + +#: ../../configuration/service/dhcp-server.rst:115 msgid "The default value is 86400 seconds which corresponds to one day." msgstr "The default value is 86400 seconds which corresponds to one day." @@ -12957,17 +14433,21 @@ msgstr "The destination port used for creating a VXLAN interface in Linux defaul msgid "The device can only receive packets with VNIs configured in the VNI filtering table." msgstr "The device can only receive packets with VNIs configured in the VNI filtering table." -#: ../../configuration/service/dhcp-server.rst:165 +#: ../../configuration/service/dhcp-server.rst:215 +msgid "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." +msgstr "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." + +#: ../../configuration/service/dhcp-server.rst:199 msgid "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." msgstr "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." #: ../../configuration/service/dhcp-server.rst:31 -#: ../../configuration/service/dhcp-server.rst:124 +#: ../../configuration/service/dhcp-server.rst:140 msgid "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." msgstr "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." #: ../../configuration/service/dhcp-server.rst:40 -#: ../../configuration/service/dhcp-server.rst:131 +#: ../../configuration/service/dhcp-server.rst:147 msgid "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." msgstr "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." @@ -12987,15 +14467,19 @@ msgstr "The embedded Squid proxy can use LDAP to authenticate users against a co msgid "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." msgstr "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." -#: ../../configuration/service/pppoe-server.rst:369 +#: ../../configuration/service/pppoe-server.rst:627 +msgid "The example below covers a dual-stack configuration." +msgstr "The example below covers a dual-stack configuration." + +#: ../../configuration/service/pppoe-server.rst:627 msgid "The example below covers a dual-stack configuration via pppoe-server." msgstr "The example below covers a dual-stack configuration via pppoe-server." -#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/service/pppoe-server.rst:606 msgid "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." msgstr "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." -#: ../../configuration/service/ipoe-server.rst:35 +#: ../../configuration/service/ipoe-server.rst:34 msgid "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." msgstr "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." @@ -13023,7 +14507,7 @@ msgstr "The first IP in the container network is reserved by the engine and cann msgid "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." msgstr "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." -#: ../../configuration/vpn/ipsec.rst:174 +#: ../../configuration/vpn/ipsec.rst:178 msgid "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." msgstr "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." @@ -13039,14 +14523,18 @@ msgstr "The first ip address is the RP's address and the second value is the mat msgid "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." msgstr "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." -#: ../../configuration/vpn/sstp.rst:311 +#: ../../configuration/vpn/sstp.rst:484 msgid "The following PPP configuration tests MSCHAP-v2:" msgstr "The following PPP configuration tests MSCHAP-v2:" -#: ../../configuration/system/login.rst:143 +#: ../../configuration/system/login.rst:147 msgid "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" msgstr "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" +#: ../../configuration/protocols/bgp.rst:664 +msgid "The following command uses the explicit-null label value for all the BGP instances." +msgstr "The following command uses the explicit-null label value for all the BGP instances." + #: ../../configuration/interfaces/openvpn.rst:708 msgid "The following commands let you check tunnel status." msgstr "The following commands let you check tunnel status." @@ -13059,11 +14547,11 @@ msgstr "The following commands let you reset OpenVPN." msgid "The following commands translate to \"--net host\" when the container is created" msgstr "The following commands translate to \"--net host\" when the container is created" -#: ../../configuration/vrf/index.rst:101 +#: ../../configuration/vrf/index.rst:120 msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -13079,10 +14567,22 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." +#: ../../configuration/interfaces/pppoe.rst:383 +msgid "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." +msgstr "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." + #: ../../configuration/policy/examples.rst:155 msgid "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." msgstr "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." @@ -13095,7 +14595,7 @@ msgstr "The following example creates a WAP. When configuring multiple WAP inter msgid "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." msgstr "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." -#: ../../configuration/vrf/index.rst:237 +#: ../../configuration/vrf/index.rst:256 msgid "The following example topology was built using EVE-NG." msgstr "The following example topology was built using EVE-NG." @@ -13140,7 +14640,7 @@ msgstr "The forwarding delay time is the time spent in each of the listening and msgid "The generated configuration will look like:" msgstr "The generated configuration will look like:" -#: ../../configuration/pki/index.rst:107 +#: ../../configuration/pki/index.rst:109 msgid "The generated parameters are then output to the console." msgstr "The generated parameters are then output to the console." @@ -13168,7 +14668,7 @@ msgstr "The hostname can be up to 63 characters. A hostname must start and end w msgid "The hostname or IP address of the master" msgstr "The hostname or IP address of the master" -#: ../../configuration/service/dhcp-server.rst:632 +#: ../../configuration/service/dhcp-server.rst:693 msgid "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." msgstr "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." @@ -13212,7 +14712,7 @@ msgstr "The legacy and zone-based firewall configuration options is not longer s msgid "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." msgstr "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." -#: ../../configuration/policy/route-map.rst:255 +#: ../../configuration/policy/route-map.rst:258 msgid "The link bandwidth extended community is encoded as non-transitive" msgstr "The link bandwidth extended community is encoded as non-transitive" @@ -13240,6 +14740,10 @@ msgstr "The main points regarding this packet flow and terminology used in VyOS msgid "The main structure VyOS firewall cli is shown next:" msgstr "The main structure VyOS firewall cli is shown next:" +#: ../../configuration/firewall/index.rst:92 +msgid "The main structure of the VyOS firewall CLI is shown next:" +msgstr "The main structure of the VyOS firewall CLI is shown next:" + #: ../../configuration/interfaces/bonding.rst:271 msgid "The maximum number of targets that can be specified is 16. The default value is no IP address." msgstr "The maximum number of targets that can be specified is 16. The default value is no IP address." @@ -13248,7 +14752,7 @@ msgstr "The maximum number of targets that can be specified is 16. The default v msgid "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." msgstr "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." -#: ../../configuration/interfaces/bridge.rst:230 +#: ../../configuration/interfaces/bridge.rst:239 msgid "The member interface `eth1` is a trunk that allows VLAN 10 to pass" msgstr "The member interface `eth1` is a trunk that allows VLAN 10 to pass" @@ -13268,15 +14772,19 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." +#: ../../configuration/service/dns.rst:171 +msgid "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." +msgstr "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." + #: ../../configuration/service/dhcp-server.rst:13 msgid "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." msgstr "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." -#: ../../configuration/service/conntrack-sync.rst:188 +#: ../../configuration/service/conntrack-sync.rst:197 msgid "The next example is a simple configuration of conntrack-sync." msgstr "The next example is a simple configuration of conntrack-sync." @@ -13324,7 +14832,7 @@ msgstr "The outgoing interface to perform the translation on" msgid "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." msgstr "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." -#: ../../configuration/vpn/ipsec.rst:235 +#: ../../configuration/vpn/ipsec.rst:239 msgid "The peer names RIGHT and LEFT are used as informational text." msgstr "The peer names RIGHT and LEFT are used as informational text." @@ -13332,7 +14840,7 @@ msgstr "The peer names RIGHT and LEFT are used as informational text." msgid "The peer with lower priority will become the key server and start distributing SAKs." msgstr "The peer with lower priority will become the key server and start distributing SAKs." -#: ../../configuration/vrf/index.rst:181 +#: ../../configuration/vrf/index.rst:200 msgid "The ping command is used to test whether a network host is reachable or not." msgstr "The ping command is used to test whether a network host is reachable or not." @@ -13344,19 +14852,19 @@ msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This m msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." -#: ../../configuration/service/dhcp-server.rst:375 +#: ../../configuration/service/dhcp-server.rst:432 msgid "The primary DHCP server uses address `192.168.189.252`" msgstr "The primary DHCP server uses address `192.168.189.252`" -#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:208 msgid "The primary and secondary statements determines whether the server is primary or secondary." msgstr "The primary and secondary statements determines whether the server is primary or secondary." @@ -13368,11 +14876,11 @@ msgstr "The primary option is only valid for active-backup, transmit-load-balanc msgid "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." msgstr "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." -#: ../../configuration/service/dhcp-server.rst:539 +#: ../../configuration/service/dhcp-server.rst:598 msgid "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" msgstr "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" -#: ../../configuration/vrf/index.rst:222 +#: ../../configuration/vrf/index.rst:241 msgid "The prompt is adjusted to reflect this change in both config and op-mode." msgstr "The prompt is adjusted to reflect this change in both config and op-mode." @@ -13400,7 +14908,7 @@ msgstr "The public IP address of the local side of the VPN will be 198.51.100.10 msgid "The public IP address of the remote side of the VPN will be 203.0.113.11." msgstr "The public IP address of the remote side of the VPN will be 203.0.113.11." -#: ../../configuration/service/ipoe-server.rst:130 +#: ../../configuration/service/ipoe-server.rst:131 #: ../../configuration/vpn/l2tp.rst:120 msgid "The rate-limit is set in kbit/sec." msgstr "The rate-limit is set in kbit/sec." @@ -13421,6 +14929,10 @@ msgstr "The remote site will have a subnet of 10.1.0.0/16." msgid "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." msgstr "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." +#: ../../configuration/service/dns.rst:161 +msgid "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." +msgstr "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." + #: ../../configuration/interfaces/openvpn.rst:458 msgid "The required config file may look like this:" msgstr "The required config file may look like this:" @@ -13465,7 +14977,7 @@ msgstr "The sFlow accounting based on hsflowd https://sflow.net/" msgid "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." msgstr "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." -#: ../../configuration/vpn/ipsec.rst:227 +#: ../../configuration/vpn/ipsec.rst:231 msgid "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." msgstr "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." @@ -13473,7 +14985,7 @@ msgstr "The scheme above doesn't work when one of the routers has a dynamic exte msgid "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." msgstr "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." -#: ../../configuration/service/dhcp-server.rst:376 +#: ../../configuration/service/dhcp-server.rst:433 msgid "The secondary DHCP server uses address `192.168.189.253`" msgstr "The secondary DHCP server uses address `192.168.189.253`" @@ -13533,11 +15045,14 @@ msgstr "The type can be the following: asbr-summary, external, network, nssa-ext msgid "The ultimate goal of classifying traffic is to give each class a different treatment." msgstr "The ultimate goal of classifying traffic is to give each class a different treatment." -#: ../../configuration/service/ipoe-server.rst:18 +#: ../../configuration/service/ipoe-server.rst:16 msgid "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." msgstr "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." -#: ../../configuration/vpn/l2tp.rst:221 +#: ../../configuration/service/pppoe-server.rst:222 +#: ../../configuration/vpn/l2tp.rst:265 +#: ../../configuration/vpn/pptp.rst:205 +#: ../../configuration/vpn/sstp.rst:238 msgid "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." msgstr "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." @@ -13549,7 +15064,11 @@ msgstr "The vendor-class-id option can be used to request a specific class of ve msgid "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." msgstr "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." -#: ../../configuration/system/login.rst:138 +#: ../../configuration/service/router-advert.rst:86 +msgid "The well known NAT64 prefix is ``64:ff9b::/96``" +msgstr "The well known NAT64 prefix is ``64:ff9b::/96``" + +#: ../../configuration/system/login.rst:142 msgid "The window size must be between 1 and 21." msgstr "The window size must be between 1 and 21." @@ -13557,6 +15076,10 @@ msgstr "The window size must be between 1 and 21." msgid "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." msgstr "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." +#: ../../configuration/service/ids.rst:125 +msgid "Then, FastNetMon configuration:" +msgstr "Then, FastNetMon configuration:" + #: ../../configuration/nat/nat44.rst:621 msgid "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." msgstr "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." @@ -13596,7 +15119,7 @@ msgstr "There are a lot of matching criteria against which the packet can be tes msgid "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." msgstr "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." -#: ../../configuration/system/ipv6.rst:92 +#: ../../configuration/system/ipv6.rst:105 msgid "There are different parameters for getting prefix-list information:" msgstr "There are different parameters for getting prefix-list information:" @@ -13612,7 +15135,7 @@ msgstr "There are many parameters you will be able to use in order to match the msgid "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" msgstr "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" -#: ../../configuration/service/ipoe-server.rst:153 +#: ../../configuration/service/ipoe-server.rst:154 msgid "There are rate-limited and non rate-limited users (MACs)" msgstr "There are rate-limited and non rate-limited users (MACs)" @@ -13628,7 +15151,7 @@ msgstr "There are three modes of operation for a wireless interface:" msgid "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" msgstr "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" -#: ../../configuration/protocols/bgp.rst:896 +#: ../../configuration/protocols/bgp.rst:918 msgid "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" msgstr "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" @@ -13757,7 +15280,7 @@ msgstr "This command allows peerings between directly connected eBGP peers using msgid "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." msgstr "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." -#: ../../configuration/protocols/bgp.rst:812 +#: ../../configuration/protocols/bgp.rst:834 msgid "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." msgstr "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." @@ -13814,19 +15337,19 @@ msgstr "This command allows you to select a specific access concentrator when yo msgid "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." msgstr "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." -#: ../../configuration/protocols/bgp.rst:867 +#: ../../configuration/protocols/bgp.rst:889 msgid "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." msgstr "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." -#: ../../configuration/protocols/bgp.rst:843 +#: ../../configuration/protocols/bgp.rst:865 msgid "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." msgstr "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." -#: ../../configuration/protocols/bgp.rst:851 +#: ../../configuration/protocols/bgp.rst:873 msgid "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." msgstr "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." -#: ../../configuration/protocols/bgp.rst:859 +#: ../../configuration/protocols/bgp.rst:881 msgid "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." msgstr "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." @@ -13854,7 +15377,7 @@ msgstr "This command can be used to filter the RIP path using prefix lists. :cfg msgid "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." msgstr "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." -#: ../../configuration/protocols/bgp.rst:652 +#: ../../configuration/protocols/bgp.rst:674 msgid "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." msgstr "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." @@ -13878,7 +15401,7 @@ msgstr "This command change distance value of OSPFv3 globally. The distance rang msgid "This command change the distance value of RIP. The distance range is 1 to 255." msgstr "This command change the distance value of RIP. The distance range is 1 to 255." -#: ../../configuration/protocols/bgp.rst:638 +#: ../../configuration/protocols/bgp.rst:650 msgid "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." msgstr "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." @@ -13954,23 +15477,23 @@ msgstr "This command defines matching parameters for access list rule. Matching msgid "This command defines the IS-IS router behavior:" msgstr "This command defines the IS-IS router behavior:" -#: ../../configuration/protocols/bgp.rst:720 +#: ../../configuration/protocols/bgp.rst:742 msgid "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." msgstr "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." -#: ../../configuration/protocols/bgp.rst:726 +#: ../../configuration/protocols/bgp.rst:748 msgid "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." msgstr "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." -#: ../../configuration/protocols/bgp.rst:713 +#: ../../configuration/protocols/bgp.rst:735 msgid "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." msgstr "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." -#: ../../configuration/protocols/bgp.rst:595 +#: ../../configuration/protocols/bgp.rst:601 msgid "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." msgstr "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." -#: ../../configuration/protocols/bgp.rst:732 +#: ../../configuration/protocols/bgp.rst:754 msgid "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." msgstr "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." @@ -13997,7 +15520,7 @@ msgstr "This command disables check of the MTU value in the OSPF DBD packets. Th msgid "This command disables it." msgstr "This command disables it." -#: ../../configuration/protocols/bgp.rst:607 +#: ../../configuration/protocols/bgp.rst:619 msgid "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." msgstr "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." @@ -14009,23 +15532,23 @@ msgstr "This command disables split-horizon on the interface. By default, VyOS d msgid "This command disables the load sharing across multiple LFA backups." msgstr "This command disables the load sharing across multiple LFA backups." -#: ../../configuration/protocols/bgp.rst:1009 +#: ../../configuration/protocols/bgp.rst:1031 msgid "This command displays BGP dampened routes." msgstr "This command displays BGP dampened routes." -#: ../../configuration/protocols/bgp.rst:1032 +#: ../../configuration/protocols/bgp.rst:1054 msgid "This command displays BGP received-routes that are accepted after filtering." msgstr "This command displays BGP received-routes that are accepted after filtering." -#: ../../configuration/protocols/bgp.rst:1022 +#: ../../configuration/protocols/bgp.rst:1044 msgid "This command displays BGP routes advertised to a neighbor." msgstr "This command displays BGP routes advertised to a neighbor." -#: ../../configuration/protocols/bgp.rst:1017 +#: ../../configuration/protocols/bgp.rst:1039 msgid "This command displays BGP routes allowed by the specified AS Path access list." msgstr "This command displays BGP routes allowed by the specified AS Path access list." -#: ../../configuration/protocols/bgp.rst:1026 +#: ../../configuration/protocols/bgp.rst:1048 msgid "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." msgstr "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." @@ -14052,11 +15575,11 @@ msgstr "This command displays a summary table with a database contents (LSA)." msgid "This command displays a table of paths to area boundary and autonomous system boundary routers." msgstr "This command displays a table of paths to area boundary and autonomous system boundary routers." -#: ../../configuration/protocols/bgp.rst:957 +#: ../../configuration/protocols/bgp.rst:979 msgid "This command displays all entries in BGP routing table." msgstr "This command displays all entries in BGP routing table." -#: ../../configuration/protocols/bgp.rst:1036 +#: ../../configuration/protocols/bgp.rst:1058 msgid "This command displays dampened routes received from BGP neighbor." msgstr "This command displays dampened routes received from BGP neighbor." @@ -14064,27 +15587,27 @@ msgstr "This command displays dampened routes received from BGP neighbor." msgid "This command displays external information redistributed into OSPFv3" msgstr "This command displays external information redistributed into OSPFv3" -#: ../../configuration/protocols/bgp.rst:1040 +#: ../../configuration/protocols/bgp.rst:1062 msgid "This command displays information about BGP routes whose AS path matches the specified regular expression." msgstr "This command displays information about BGP routes whose AS path matches the specified regular expression." -#: ../../configuration/protocols/bgp.rst:1013 +#: ../../configuration/protocols/bgp.rst:1035 msgid "This command displays information about flapping BGP routes." msgstr "This command displays information about flapping BGP routes." -#: ../../configuration/protocols/bgp.rst:977 +#: ../../configuration/protocols/bgp.rst:999 msgid "This command displays information about the particular entry in the BGP routing table." msgstr "This command displays information about the particular entry in the BGP routing table." -#: ../../configuration/protocols/bgp.rst:1004 +#: ../../configuration/protocols/bgp.rst:1026 msgid "This command displays routes that are permitted by the BGP community list." msgstr "This command displays routes that are permitted by the BGP community list." -#: ../../configuration/protocols/bgp.rst:997 +#: ../../configuration/protocols/bgp.rst:1019 msgid "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." msgstr "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." -#: ../../configuration/protocols/bgp.rst:993 +#: ../../configuration/protocols/bgp.rst:1015 msgid "This command displays routes with classless interdomain routing (CIDR)." msgstr "This command displays routes with classless interdomain routing (CIDR)." @@ -14126,7 +15649,7 @@ msgstr "This command displays the neighbors status." msgid "This command displays the neighbors status for a neighbor on the specified interface." msgstr "This command displays the neighbors status for a neighbor on the specified interface." -#: ../../configuration/protocols/bgp.rst:1045 +#: ../../configuration/protocols/bgp.rst:1067 msgid "This command displays the status of all BGP connections." msgstr "This command displays the status of all BGP connections." @@ -14134,7 +15657,7 @@ msgstr "This command displays the status of all BGP connections." msgid "This command enable/disables summarisation for the configured address range." msgstr "This command enable/disables summarisation for the configured address range." -#: ../../configuration/protocols/bgp.rst:603 +#: ../../configuration/protocols/bgp.rst:615 msgid "This command enable logging neighbor up/down changes and reset reason." msgstr "This command enable logging neighbor up/down changes and reset reason." @@ -14174,7 +15697,7 @@ msgstr "This command enables sending timestamps with each Hello and IHU message msgid "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." msgstr "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." -#: ../../configuration/protocols/bgp.rst:875 +#: ../../configuration/protocols/bgp.rst:897 msgid "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." msgstr "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." @@ -14198,7 +15721,7 @@ msgstr "This command generate a default route into the RIP." msgid "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -#: ../../configuration/protocols/bgp.rst:632 +#: ../../configuration/protocols/bgp.rst:644 msgid "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." msgstr "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." @@ -14241,7 +15764,7 @@ msgstr "This command is used for advertising IPv4 or IPv6 networks." msgid "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." msgstr "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." -#: ../../configuration/protocols/bgp.rst:620 +#: ../../configuration/protocols/bgp.rst:632 msgid "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." msgstr "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." @@ -14253,15 +15776,15 @@ msgstr "This command modifies the default metric (hop count) value for redistrib msgid "This command override AS number of the originating router with the local AS number." msgstr "This command override AS number of the originating router with the local AS number." -#: ../../configuration/protocols/bgp.rst:885 +#: ../../configuration/protocols/bgp.rst:907 msgid "This command prevents from sending back prefixes learned from the neighbor." msgstr "This command prevents from sending back prefixes learned from the neighbor." -#: ../../configuration/protocols/bgp.rst:804 +#: ../../configuration/protocols/bgp.rst:826 msgid "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." msgstr "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." -#: ../../configuration/protocols/bgp.rst:741 +#: ../../configuration/protocols/bgp.rst:763 msgid "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." msgstr "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." @@ -14297,19 +15820,19 @@ msgstr "This command redistributes routing information from the given route sour msgid "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." msgstr "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." -#: ../../configuration/protocols/bgp.rst:1068 +#: ../../configuration/protocols/bgp.rst:1090 msgid "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -#: ../../configuration/protocols/bgp.rst:1088 +#: ../../configuration/protocols/bgp.rst:1110 msgid "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -#: ../../configuration/protocols/bgp.rst:1075 +#: ../../configuration/protocols/bgp.rst:1097 msgid "This command resets all BGP connections of given router." msgstr "This command resets all BGP connections of given router." -#: ../../configuration/protocols/bgp.rst:1084 +#: ../../configuration/protocols/bgp.rst:1106 msgid "This command resets all external BGP peers of given router." msgstr "This command resets all external BGP peers of given router." @@ -14389,7 +15912,7 @@ msgstr "This command sets number of seconds for RxmtInterval timer value. This v msgid "This command sets old-style (ISO 10589) or new style packet formats:" msgstr "This command sets old-style (ISO 10589) or new style packet formats:" -#: ../../configuration/protocols/bgp.rst:944 +#: ../../configuration/protocols/bgp.rst:966 msgid "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." msgstr "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." @@ -14401,7 +15924,7 @@ msgstr "This command sets overload bit to avoid any transit traffic through this msgid "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." msgstr "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." -#: ../../configuration/protocols/bgp.rst:659 +#: ../../configuration/protocols/bgp.rst:681 msgid "This command sets the administrative distance for a particular route. The distance range is 1 to 255." msgstr "This command sets the administrative distance for a particular route. The distance range is 1 to 255." @@ -14461,7 +15984,7 @@ msgstr "This command should NOT be set normally." msgid "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -#: ../../configuration/protocols/bgp.rst:938 +#: ../../configuration/protocols/bgp.rst:960 msgid "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." msgstr "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." @@ -14517,11 +16040,11 @@ msgstr "This command specifies attributes to be left unchanged for advertisement msgid "This command specifies circuit type for interface:" msgstr "This command specifies circuit type for interface:" -#: ../../configuration/protocols/bgp.rst:920 +#: ../../configuration/protocols/bgp.rst:942 msgid "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." msgstr "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." -#: ../../configuration/protocols/bgp.rst:671 +#: ../../configuration/protocols/bgp.rst:693 msgid "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." msgstr "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." @@ -14530,7 +16053,7 @@ msgstr "This command specifies hold-time in seconds. The timer range is 4 to 655 msgid "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." msgstr "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." -#: ../../configuration/protocols/bgp.rst:677 +#: ../../configuration/protocols/bgp.rst:699 msgid "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." msgstr "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." @@ -14558,15 +16081,15 @@ msgstr "This command specifies metric type for redistributed routes. Difference msgid "This command specifies network type to Point-to-Point. The default network type is broadcast." msgstr "This command specifies network type to Point-to-Point. The default network type is broadcast." -#: ../../configuration/protocols/bgp.rst:784 +#: ../../configuration/protocols/bgp.rst:806 msgid "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." msgstr "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." -#: ../../configuration/protocols/bgp.rst:754 +#: ../../configuration/protocols/bgp.rst:776 msgid "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." msgstr "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." -#: ../../configuration/protocols/bgp.rst:791 +#: ../../configuration/protocols/bgp.rst:813 msgid "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." msgstr "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." @@ -14582,7 +16105,7 @@ msgstr "This command specifies that simple password authentication should be use msgid "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." msgstr "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." -#: ../../configuration/protocols/bgp.rst:748 +#: ../../configuration/protocols/bgp.rst:770 msgid "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." msgstr "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." @@ -14622,7 +16145,7 @@ msgstr "This command specifies the base receive cost for this interface. For wir msgid "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." msgstr "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." -#: ../../configuration/protocols/bgp.rst:799 +#: ../../configuration/protocols/bgp.rst:821 msgid "This command specifies the default local preference value. The local preference range is 0 to 4294967295." msgstr "This command specifies the default local preference value. The local preference range is 0 to 4294967295." @@ -14634,7 +16157,7 @@ msgstr "This command specifies the default metric value of redistributed routes. msgid "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." msgstr "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." -#: ../../configuration/protocols/bgp.rst:916 +#: ../../configuration/protocols/bgp.rst:938 msgid "This command specifies the given neighbor as route reflector client." msgstr "This command specifies the given neighbor as route reflector client." @@ -14658,7 +16181,7 @@ msgstr "This command specifies the minimum RTT, in milliseconds, starting from w msgid "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." msgstr "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." -#: ../../configuration/protocols/bgp.rst:589 +#: ../../configuration/protocols/bgp.rst:595 msgid "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." msgstr "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." @@ -14714,7 +16237,7 @@ msgstr "This command summarizes intra area paths from specified area into one su msgid "This command to ensure not advertise the summary lsa for the matched external LSAs." msgstr "This command to ensure not advertise the summary lsa for the matched external LSAs." -#: ../../configuration/protocols/bgp.rst:1079 +#: ../../configuration/protocols/bgp.rst:1101 msgid "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." msgstr "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." @@ -14763,7 +16286,7 @@ msgstr "This command will generate a default-route in L2 database." msgid "This command will give an overview of a rule in a single rule-set" msgstr "This command will give an overview of a rule in a single rule-set" -#: ../../configuration/firewall/ipv4.rst:1091 +#: ../../configuration/firewall/ipv4.rst:1114 msgid "This command will give an overview of a rule in a single rule-set, plus information for default action." msgstr "This command will give an overview of a rule in a single rule-set, plus information for default action." @@ -14771,7 +16294,7 @@ msgstr "This command will give an overview of a rule in a single rule-set, plus msgid "This command will give an overview of a rule in a single rule-set." msgstr "This command will give an overview of a rule in a single rule-set." -#: ../../configuration/firewall/ipv4.rst:1072 +#: ../../configuration/firewall/ipv4.rst:1095 #: ../../configuration/firewall/ipv6.rst:1088 msgid "This command will give an overview of a single rule-set." msgstr "This command will give an overview of a single rule-set." @@ -14792,11 +16315,19 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -14804,15 +16335,23 @@ msgstr "This configuration listen on port 80 and redirect incoming requests to H msgid "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." msgstr "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." -#: ../../configuration/service/dhcp-server.rst:76 -#: ../../configuration/service/dhcp-server.rst:520 +#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:579 msgid "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." msgstr "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." -#: ../../configuration/service/dhcp-server.rst:58 +#: ../../configuration/service/dhcp-server.rst:74 msgid "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." msgstr "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." +#: ../../configuration/service/dhcp-server.rst:58 +msgid "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" + +#: ../../configuration/service/dhcp-server.rst:154 +msgid "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" + #: ../../configuration/trafficpolicy/index.rst:628 msgid "This could be helpful if you want to test how an application behaves under certain network conditions." msgstr "This could be helpful if you want to test how an application behaves under certain network conditions." @@ -14825,7 +16364,7 @@ msgstr "This creates a route policy called FILTER-WEB with one rule to set the r msgid "This defaults to 10000." msgstr "This defaults to 10000." -#: ../../configuration/system/login.rst:254 +#: ../../configuration/system/login.rst:258 msgid "This defaults to 1812." msgstr "This defaults to 1812." @@ -14833,7 +16372,7 @@ msgstr "This defaults to 1812." msgid "This defaults to 2007." msgstr "This defaults to 2007." -#: ../../configuration/service/dns.rst:271 +#: ../../configuration/service/dns.rst:285 msgid "This defaults to 300 seconds." msgstr "This defaults to 300 seconds." @@ -14841,7 +16380,7 @@ msgstr "This defaults to 300 seconds." msgid "This defaults to 30 seconds." msgstr "This defaults to 30 seconds." -#: ../../configuration/system/login.rst:323 +#: ../../configuration/system/login.rst:327 msgid "This defaults to 49." msgstr "This defaults to 49." @@ -14857,7 +16396,7 @@ msgstr "This defaults to UDP" msgid "This defaults to both 1.2 and 1.3." msgstr "This defaults to both 1.2 and 1.3." -#: ../../configuration/pki/index.rst:283 +#: ../../configuration/pki/index.rst:314 msgid "This defaults to https://acme-v02.api.letsencrypt.org/directory" msgstr "This defaults to https://acme-v02.api.letsencrypt.org/directory" @@ -14893,15 +16432,27 @@ msgstr "This establishes our Port Forward rule, but if we created a firewall pol msgid "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." msgstr "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." +#: ../../configuration/vpn/ipsec.rst:392 +msgid "This example uses CACert as certificate authority." +msgstr "This example uses CACert as certificate authority." + +#: ../../configuration/vpn/ipsec.rst:386 +msgid "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." +msgstr "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." + +#: ../../configuration/protocols/bfd.rst:64 +msgid "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." +msgstr "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." + #: ../../configuration/protocols/ospf.rst:476 msgid "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." msgstr "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." -#: ../../configuration/service/dns.rst:404 +#: ../../configuration/service/dns.rst:418 msgid "This functionality is controlled by adding the following configuration:" msgstr "This functionality is controlled by adding the following configuration:" -#: ../../configuration/firewall/ipv4.rst:376 +#: ../../configuration/firewall/ipv4.rst:399 #: ../../configuration/firewall/ipv6.rst:378 msgid "This functions for both individual addresses and address groups." msgstr "This functions for both individual addresses and address groups." @@ -14930,11 +16481,11 @@ msgstr "This instructs opennhrp to reply with authorative answers on NHRP Resolu msgid "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." msgstr "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." -#: ../../configuration/service/dhcp-server.rst:82 +#: ../../configuration/service/dhcp-server.rst:98 msgid "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." msgstr "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." -#: ../../configuration/service/dhcp-server.rst:89 +#: ../../configuration/service/dhcp-server.rst:105 msgid "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." msgstr "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." @@ -14946,13 +16497,13 @@ msgstr "This is a mandatory command. Sets regular expression to match against lo msgid "This is a mandatory command. Sets the full path to the script. The script file must be executable." msgstr "This is a mandatory command. Sets the full path to the script. The script file must be executable." -#: ../../configuration/pki/index.rst:261 -#: ../../configuration/pki/index.rst:267 +#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:298 msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:117 -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "This is a mandatory setting." @@ -15015,11 +16566,14 @@ msgstr "This is the LCD model used in your system." #: ../../configuration/service/dhcp-server.rst:35 #: ../../configuration/service/dhcp-server.rst:44 -#: ../../configuration/service/dhcp-server.rst:51 msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." -#: ../../configuration/service/dhcp-server.rst:197 +#: ../../configuration/service/dhcp-server.rst:51 +msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." +msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." + +#: ../../configuration/service/dhcp-server.rst:253 msgid "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." msgstr "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." @@ -15031,7 +16585,7 @@ msgstr "This is the name of the physical interface used to connect to your LCD d msgid "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" msgstr "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" -#: ../../configuration/service/dhcp-server.rst:195 +#: ../../configuration/service/dhcp-server.rst:251 msgid "This is useful, for example, in combination with hostfile update." msgstr "This is useful, for example, in combination with hostfile update." @@ -15064,7 +16618,7 @@ msgstr "This mode provides load balancing and fault tolerance." msgid "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." msgstr "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." -#: ../../configuration/service/dhcp-server.rst:119 +#: ../../configuration/service/dhcp-server.rst:135 msgid "This option can be specified multiple times." msgstr "This option can be specified multiple times." @@ -15088,7 +16642,7 @@ msgstr "This option is used by some DHCP clients as a way for users to specify i msgid "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." msgstr "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." -#: ../../configuration/system/login.rst:390 +#: ../../configuration/system/login.rst:394 msgid "This option must be used with ``timeout`` option." msgstr "This option must be used with ``timeout`` option." @@ -15101,7 +16655,7 @@ msgstr "This option only affects 802.3ad mode." msgid "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." msgstr "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." -#: ../../configuration/pki/index.rst:277 +#: ../../configuration/pki/index.rst:308 msgid "This options defaults to 2048" msgstr "This options defaults to 2048" @@ -15131,12 +16685,12 @@ msgstr "This required setting defines the action of the current rule. If action msgid "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" msgstr "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" -#: ../../configuration/interfaces/bridge.rst:208 -#: ../../configuration/interfaces/bridge.rst:244 +#: ../../configuration/interfaces/bridge.rst:217 +#: ../../configuration/interfaces/bridge.rst:253 msgid "This results in the active configuration:" msgstr "This results in the active configuration:" -#: ../../configuration/service/dhcp-server.rst:68 +#: ../../configuration/service/dhcp-server.rst:84 msgid "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." msgstr "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." @@ -15219,11 +16773,19 @@ msgstr "This the simplest queue possible you can apply to your traffic. Traffic msgid "This topology was built using GNS3." msgstr "This topology was built using GNS3." +#: ../../configuration/system/option.rst:38 +msgid "This will add the following option to the Kernel commandline:" +msgstr "This will add the following option to the Kernel commandline:" + +#: ../../configuration/system/option.rst:48 +msgid "This will add the following two options to the Kernel commandline:" +msgstr "This will add the following two options to the Kernel commandline:" + #: ../../configuration/interfaces/ethernet.rst:9 msgid "This will be the most widely used interface on a router carrying traffic to the real world." msgstr "This will be the most widely used interface on a router carrying traffic to the real world." -#: ../../configuration/protocols/static.rst:171 +#: ../../configuration/protocols/static.rst:204 msgid "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." msgstr "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." @@ -15231,7 +16793,7 @@ msgstr "This will configure a static ARP entry always resolving `<address>` to ` msgid "This will match TCP traffic with source port 80." msgstr "This will match TCP traffic with source port 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" msgstr "This will render the following ddclient_ configuration entry:" @@ -15239,7 +16801,7 @@ msgstr "This will render the following ddclient_ configuration entry:" msgid "This will show you a basic firewall overview" msgstr "This will show you a basic firewall overview" -#: ../../configuration/firewall/ipv4.rst:961 +#: ../../configuration/firewall/ipv4.rst:984 msgid "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" msgstr "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" @@ -15255,17 +16817,17 @@ msgstr "This will show you a basic summary of zones configuration." msgid "This will show you a rule-set statistic since the last boot." msgstr "This will show you a rule-set statistic since the last boot." -#: ../../configuration/firewall/ipv4.rst:1112 +#: ../../configuration/firewall/ipv4.rst:1135 #: ../../configuration/firewall/ipv6.rst:1135 msgid "This will show you a statistic of all rule-sets since the last boot." msgstr "This will show you a statistic of all rule-sets since the last boot." -#: ../../configuration/firewall/ipv4.rst:1016 +#: ../../configuration/firewall/ipv4.rst:1039 #: ../../configuration/firewall/ipv6.rst:1032 msgid "This will show you a summary of rule-sets and groups" msgstr "This will show you a summary of rule-sets and groups" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." @@ -15301,29 +16863,49 @@ msgstr "Time in seconds that the prefix will remain preferred (default 4 hours)" msgid "Time in seconds that the prefix will remain valid (default: 30 days)" msgstr "Time in seconds that the prefix will remain valid (default: 30 days)" +#: ../../configuration/service/router-advert.rst:1 +msgid "Time in seconds that the prefix will remain valid (default: 65528 seconds)" +msgstr "Time in seconds that the prefix will remain valid (default: 65528 seconds)" + #: ../../configuration/service/webproxy.rst:177 msgid "Time is in minutes and defaults to 60." msgstr "Time is in minutes and defaults to 60." -#: ../../configuration/firewall/ipv4.rst:874 +#: ../../configuration/firewall/ipv4.rst:897 #: ../../configuration/firewall/ipv6.rst:883 #: ../../configuration/policy/route.rst:225 msgid "Time to match the defined rule." msgstr "Time to match the defined rule." +#: ../../configuration/service/ipoe-server.rst:368 +#: ../../configuration/service/pppoe-server.rst:534 +#: ../../configuration/vpn/l2tp.rst:488 +#: ../../configuration/vpn/pptp.rst:412 +#: ../../configuration/vpn/sstp.rst:446 +msgid "Timeout in seconds" +msgstr "Timeout in seconds" + #: ../../configuration/protocols/failover.rst:24 msgid "Timeout in seconds between health target checks." msgstr "Timeout in seconds between health target checks." -#: ../../configuration/vpn/sstp.rst:234 +#: ../../configuration/service/ipoe-server.rst:174 +#: ../../configuration/service/pppoe-server.rst:136 +#: ../../configuration/vpn/l2tp.rst:179 +#: ../../configuration/vpn/pptp.rst:119 +#: ../../configuration/vpn/sstp.rst:152 msgid "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" msgstr "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" -#: ../../configuration/vpn/sstp.rst:254 +#: ../../configuration/service/ipoe-server.rst:194 +#: ../../configuration/service/pppoe-server.rst:156 +#: ../../configuration/vpn/l2tp.rst:199 +#: ../../configuration/vpn/pptp.rst:139 +#: ../../configuration/vpn/sstp.rst:172 msgid "Timeout to wait response from server (seconds)" msgstr "Timeout to wait response from server (seconds)" -#: ../../configuration/protocols/bgp.rst:667 +#: ../../configuration/protocols/bgp.rst:689 #: ../../configuration/protocols/isis.rst:257 msgid "Timers" msgstr "Timers" @@ -15332,7 +16914,7 @@ msgstr "Timers" msgid "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" msgstr "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" -#: ../../configuration/vpn/l2tp.rst:58 +#: ../../configuration/vpn/l2tp.rst:108 msgid "To allow VPN-clients access via your external address, a NAT rule is required:" msgstr "To allow VPN-clients access via your external address, a NAT rule is required:" @@ -15344,7 +16926,7 @@ msgstr "To allow listing additional custom domain, for example ``openthread.thre msgid "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" msgstr "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" -#: ../../configuration/vpn/site2site_ipsec.rst:257 +#: ../../configuration/vpn/site2site_ipsec.rst:260 msgid "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" msgstr "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" @@ -15442,11 +17024,11 @@ msgstr "To configure syslog, you need to switch into configuration mode." msgid "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." msgstr "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." -#: ../../configuration/service/ipoe-server.rst:98 +#: ../../configuration/service/ipoe-server.rst:99 msgid "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." msgstr "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." -#: ../../configuration/system/login.rst:377 +#: ../../configuration/system/login.rst:381 msgid "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." msgstr "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." @@ -15462,11 +17044,11 @@ msgstr "To create routing table 100 and add a new default gateway to be used by msgid "To define a zone setup either one with interfaces or a local zone." msgstr "To define a zone setup either one with interfaces or a local zone." -#: ../../configuration/service/router-advert.rst:75 +#: ../../configuration/service/router-advert.rst:101 msgid "To disable advertisements without deleting the configuration:" msgstr "To disable advertisements without deleting the configuration:" -#: ../../configuration/system/login.rst:190 +#: ../../configuration/system/login.rst:194 msgid "To display the configured OTP user key, use the command:" msgstr "To display the configured OTP user key, use the command:" @@ -15483,7 +17065,11 @@ msgstr "To enable/disable helper support for a specific neighbour, the router-id msgid "To enable MLD reports and query on interfaces `eth0` and `eth1`:" msgstr "To enable MLD reports and query on interfaces `eth0` and `eth1`:" -#: ../../configuration/vpn/l2tp.rst:141 +#: ../../configuration/service/ipoe-server.rst:116 +#: ../../configuration/service/pppoe-server.rst:78 +#: ../../configuration/vpn/l2tp.rst:121 +#: ../../configuration/vpn/pptp.rst:61 +#: ../../configuration/vpn/sstp.rst:94 msgid "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." msgstr "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." @@ -15491,7 +17077,7 @@ msgstr "To enable RADIUS based authentication, the authentication mode needs to msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" @@ -15511,6 +17097,10 @@ msgstr "To enable the HTTP security headers in the configuration file, use the c msgid "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" msgstr "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" +#: ../../configuration/vpn/l2tp.rst:282 +msgid "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." +msgstr "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." + #: ../../configuration/service/snmp.rst:216 msgid "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." msgstr "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." @@ -15527,11 +17117,15 @@ msgstr "To generate the CA, the server private key and certificates the followin msgid "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." msgstr "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." -#: ../../configuration/service/dhcp-server.rst:566 +#: ../../configuration/service/dhcp-server.rst:625 msgid "To hand out individual prefixes to your clients the following configuration is used:" msgstr "To hand out individual prefixes to your clients the following configuration is used:" -#: ../../configuration/highavailability/index.rst:336 +#: ../../configuration/vpn/ipsec.rst:405 +msgid "To import it from the filesystem use:" +msgstr "To import it from the filesystem use:" + +#: ../../configuration/highavailability/index.rst:346 msgid "To know more about scripting, check the :ref:`command-scripting` section." msgstr "To know more about scripting, check the :ref:`command-scripting` section." @@ -15539,7 +17133,7 @@ msgstr "To know more about scripting, check the :ref:`command-scripting` section msgid "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" msgstr "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" -#: ../../configuration/protocols/static.rst:161 +#: ../../configuration/protocols/static.rst:194 msgid "To manipulate or display ARP_ table entries, the following commands are implemented." msgstr "To manipulate or display ARP_ table entries, the following commands are implemented." @@ -15552,7 +17146,7 @@ msgstr "To perform a graceful shutdown, the FRR ``graceful-restart prepare ip os msgid "To request a /56 prefix from your ISP use:" msgstr "To request a /56 prefix from your ISP use:" -#: ../../configuration/service/dhcp-server.rst:680 +#: ../../configuration/service/dhcp-server.rst:741 msgid "To restart the DHCPv6 server" msgstr "To restart the DHCPv6 server" @@ -15568,7 +17162,7 @@ msgstr "To setup a destination NAT rule we need to gather:" msgid "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" msgstr "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" -#: ../../configuration/service/ipoe-server.rst:113 +#: ../../configuration/service/ipoe-server.rst:114 msgid "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." @@ -15576,7 +17170,7 @@ msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the fol msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." msgstr "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." msgstr "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." @@ -15596,6 +17190,10 @@ msgstr "Topology:" msgid "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" msgstr "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" +#: ../../configuration/service/ipoe-server.rst:433 +msgid "Toubleshooting" +msgstr "Toubleshooting" + #: ../../configuration/highavailability/index.rst:171 msgid "Track" msgstr "Track" @@ -15644,7 +17242,7 @@ msgstr "Traffic from multicast sources will go to the Rendezvous Point, and rece msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." msgstr "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." -#: ../../configuration/firewall/ipv4.rst:928 +#: ../../configuration/firewall/ipv4.rst:951 #: ../../configuration/firewall/ipv6.rst:937 msgid "Traffic must be symmetric" msgstr "Traffic must be symmetric" @@ -15653,11 +17251,11 @@ msgstr "Traffic must be symmetric" msgid "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" msgstr "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" -#: ../../configuration/highavailability/index.rst:322 +#: ../../configuration/highavailability/index.rst:332 msgid "Transition scripts" msgstr "Transition scripts" -#: ../../configuration/highavailability/index.rst:324 +#: ../../configuration/highavailability/index.rst:334 msgid "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" msgstr "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" @@ -15667,6 +17265,8 @@ msgstr "Transparent Proxy" #: ../../configuration/interfaces/openvpn.rst:701 #: ../../configuration/interfaces/tunnel.rst:227 +#: ../../configuration/vpn/pptp.rst:484 +#: ../../configuration/vpn/sstp.rst:580 msgid "Troubleshooting" msgstr "Troubleshooting" @@ -15682,6 +17282,10 @@ msgstr "Tunnel" msgid "Tunnel keys" msgstr "Tunnel keys" +#: ../../configuration/vpn/l2tp.rst:280 +msgid "Tunnel password used to authenticate the client (LAC)" +msgstr "Tunnel password used to authenticate the client (LAC)" + #: ../../configuration/loadbalancing/wan.rst:257 msgid "Two environment variables are available:" msgstr "Two environment variables are available:" @@ -15714,15 +17318,15 @@ msgstr "UDP Broadcast Relay" msgid "UDP mode works better with NAT:" msgstr "UDP mode works better with NAT:" -#: ../../configuration/vpn/l2tp.rst:34 +#: ../../configuration/vpn/l2tp.rst:84 msgid "UDP port 1701 for IPsec" msgstr "UDP port 1701 for IPsec" -#: ../../configuration/vpn/l2tp.rst:39 +#: ../../configuration/vpn/l2tp.rst:89 msgid "UDP port 4500 (NAT-T)" msgstr "UDP port 4500 (NAT-T)" -#: ../../configuration/vpn/l2tp.rst:32 +#: ../../configuration/vpn/l2tp.rst:82 msgid "UDP port 500 (IKE)" msgstr "UDP port 500 (IKE)" @@ -15746,6 +17350,10 @@ msgstr "USB to serial converters will handle most of their work in software so y msgid "UUCP subsystem" msgstr "UUCP subsystem" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "Unicast" @@ -15778,11 +17386,11 @@ msgstr "Up to seven queues -defined as classes_ with different priorities- can b msgid "Update" msgstr "Update" -#: ../../configuration/container/index.rst:171 +#: ../../configuration/container/index.rst:207 msgid "Update container image" msgstr "Update container image" -#: ../../configuration/firewall/ipv4.rst:1175 +#: ../../configuration/firewall/ipv4.rst:1198 #: ../../configuration/firewall/ipv6.rst:1191 msgid "Update geoip database" msgstr "Update geoip database" @@ -15791,14 +17399,21 @@ msgstr "Update geoip database" msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." msgstr "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." -#: ../../configuration/vpn/sstp.rst:90 +#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/vpn/l2tp.rst:391 +#: ../../configuration/vpn/pptp.rst:315 +#: ../../configuration/vpn/sstp.rst:349 msgid "Upload bandwidth limit in kbit/s for `<user>`." msgstr "Upload bandwidth limit in kbit/s for `<user>`." +#: ../../configuration/service/ipoe-server.rst:325 +msgid "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." +msgstr "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." + #: ../../configuration/loadbalancing/wan.rst:209 msgid "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" msgstr "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" @@ -15816,7 +17431,7 @@ msgstr "Use 802.11n protocol" msgid "Use CA certificate from PKI subsystem" msgstr "Use CA certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:365 +#: ../../configuration/service/dns.rst:379 msgid "Use DynDNS as your preferred provider:" msgstr "Use DynDNS as your preferred provider:" @@ -15848,31 +17463,35 @@ msgstr "Use `delete system conntrack modules` to deactive all modules." msgid "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." msgstr "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." -#: ../../configuration/firewall/ipv4.rst:515 +#: ../../configuration/firewall/ipv4.rst:538 #: ../../configuration/firewall/ipv6.rst:525 msgid "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:578 +#: ../../configuration/firewall/ipv4.rst:601 #: ../../configuration/firewall/ipv6.rst:588 msgid "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:599 +#: ../../configuration/firewall/ipv4.rst:622 #: ../../configuration/firewall/ipv6.rst:609 msgid "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:536 +#: ../../configuration/firewall/ipv4.rst:559 #: ../../configuration/firewall/ipv6.rst:546 msgid "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:557 +#: ../../configuration/firewall/ipv4.rst:580 #: ../../configuration/firewall/ipv6.rst:567 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." +#: ../../configuration/service/dhcp-server.rst:430 +msgid "Use active-active HA mode." +msgstr "Use active-active HA mode." + #: ../../configuration/nat/nat44.rst:259 msgid "Use address `masquerade` (the interfaces primary address) on rule 30" msgstr "Use address `masquerade` (the interfaces primary address) on rule 30" @@ -15885,7 +17504,7 @@ msgstr "Use an automatically generated self-signed certificate" msgid "Use any local address, configured on any interface if this is not set." msgstr "Use any local address, configured on any interface if this is not set." -#: ../../configuration/service/dns.rst:279 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" msgstr "Use auth key file at ``/config/auth/my.key``" @@ -15893,10 +17512,14 @@ msgstr "Use auth key file at ``/config/auth/my.key``" msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:408 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." msgstr "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." +#: ../../configuration/service/dns.rst:462 +msgid "Use deSEC (dedyn.io) as your preferred provider:" +msgstr "Use deSEC (dedyn.io) as your preferred provider:" + #: ../../configuration/firewall/general-legacy.rst:478 msgid "Use inverse-match to match anything except the given country-codes." msgstr "Use inverse-match to match anything except the given country-codes." @@ -15905,7 +17528,7 @@ msgstr "Use inverse-match to match anything except the given country-codes." msgid "Use local socket for API" msgstr "Use local socket for API" -#: ../../configuration/vpn/sstp.rst:288 +#: ../../configuration/vpn/sstp.rst:357 msgid "Use local user `foo` with password `bar`" msgstr "Use local user `foo` with password `bar`" @@ -15913,7 +17536,7 @@ msgstr "Use local user `foo` with password `bar`" msgid "Use tab completion to get a list of categories." msgstr "Use tab completion to get a list of categories." -#: ../../configuration/system/option.rst:53 +#: ../../configuration/system/option.rst:83 msgid "Use the address of the specified interface on the local machine as the source address of the connection." msgstr "Use the address of the specified interface on the local machine as the source address of the connection." @@ -15925,7 +17548,7 @@ msgstr "Use the following topology to build a nat66 based isolated network betwe msgid "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." msgstr "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." -#: ../../configuration/system/option.rst:48 +#: ../../configuration/system/option.rst:78 msgid "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." msgstr "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." @@ -15957,10 +17580,26 @@ msgstr "Use this PIM command to modify the time out value (31-60000 seconds) for msgid "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." -#: ../../configuration/vpn/sstp.rst:137 +#: ../../configuration/service/ipoe-server.rst:261 +msgid "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/service/pppoe-server.rst:355 +msgid "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/pptp.rst:223 +msgid "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/sstp.rst:257 msgid "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +#: ../../configuration/vpn/l2tp.rst:299 +msgid "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + #: ../../configuration/service/pppoe-server.rst:93 msgid "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." msgstr "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." @@ -16005,7 +17644,7 @@ msgstr "Use this command to check the tunnel status for OpenVPN server interface msgid "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." msgstr "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." -#: ../../configuration/system/ipv6.rst:154 +#: ../../configuration/system/ipv6.rst:167 msgid "Use this command to clear Border Gateway Protocol statistics or status." msgstr "Use this command to clear Border Gateway Protocol statistics or status." @@ -16013,16 +17652,32 @@ msgstr "Use this command to clear Border Gateway Protocol statistics or status." msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." -#: ../../configuration/vpn/sstp.rst:146 +#: ../../configuration/service/ipoe-server.rst:269 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/service/pppoe-server.rst:363 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/pptp.rst:231 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/sstp.rst:265 msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +#: ../../configuration/vpn/l2tp.rst:307 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + #: ../../configuration/service/pppoe-server.rst:120 msgid "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." msgstr "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." -#: ../../configuration/protocols/static.rst:112 -#: ../../configuration/protocols/static.rst:125 +#: ../../configuration/protocols/static.rst:146 +#: ../../configuration/protocols/static.rst:159 msgid "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." msgstr "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." @@ -16226,6 +17881,10 @@ msgstr "Use this command to control the maximum number of equal cost paths to re msgid "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." msgstr "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." +#: ../../configuration/vpn/l2tp.rst:68 +msgid "Use this command to define IPsec interface." +msgstr "Use this command to define IPsec interface." + #: ../../configuration/trafficpolicy/index.rst:425 msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." @@ -16234,8 +17893,19 @@ msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." -#: ../../configuration/service/pppoe-server.rst:81 -#: ../../configuration/vpn/sstp.rst:132 +#: ../../configuration/service/ipoe-server.rst:277 +#: ../../configuration/service/pppoe-server.rst:371 +#: ../../configuration/vpn/l2tp.rst:315 +#: ../../configuration/vpn/pptp.rst:239 +#: ../../configuration/vpn/sstp.rst:273 +msgid "Use this command to define default IPv6 address pool name." +msgstr "Use this command to define default IPv6 address pool name." + +#: ../../configuration/service/ipoe-server.rst:77 +#: ../../configuration/service/pppoe-server.rst:61 +#: ../../configuration/vpn/l2tp.rst:48 +#: ../../configuration/vpn/pptp.rst:50 +#: ../../configuration/vpn/sstp.rst:75 msgid "Use this command to define default address pool name." msgstr "Use this command to define default address pool name." @@ -16255,15 +17925,31 @@ msgstr "Use this command to define in the selected interface whether you choose msgid "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +#: ../../configuration/service/ipoe-server.rst:70 +msgid "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + #: ../../configuration/service/pppoe-server.rst:73 msgid "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." -#: ../../configuration/vpn/sstp.rst:121 +#: ../../configuration/vpn/pptp.rst:43 +msgid "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/vpn/sstp.rst:68 msgid "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." -#: ../../configuration/service/pppoe-server.rst:42 +#: ../../configuration/vpn/l2tp.rst:41 +msgid "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:54 +msgid "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:65 msgid "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." msgstr "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." @@ -16283,8 +17969,11 @@ msgstr "Use this command to define the maximum number of entries to keep in the msgid "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." msgstr "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." -#: ../../configuration/service/pppoe-server.rst:77 -#: ../../configuration/vpn/sstp.rst:128 +#: ../../configuration/service/ipoe-server.rst:332 +#: ../../configuration/service/pppoe-server.rst:450 +#: ../../configuration/vpn/l2tp.rst:404 +#: ../../configuration/vpn/pptp.rst:328 +#: ../../configuration/vpn/sstp.rst:362 msgid "Use this command to define the next address pool name." msgstr "Use this command to define the next address pool name." @@ -16352,7 +18041,7 @@ msgstr "Use this command to enable PIMv6 in the selected interface so that it ca msgid "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." msgstr "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." -#: ../../configuration/service/pppoe-server.rst:236 +#: ../../configuration/service/pppoe-server.rst:310 msgid "Use this command to enable bandwidth shaping via RADIUS." msgstr "Use this command to enable bandwidth shaping via RADIUS." @@ -16364,7 +18053,7 @@ msgstr "Use this command to enable proxy Address Resolution Protocol (ARP) on th msgid "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." msgstr "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." -#: ../../configuration/service/pppoe-server.rst:249 +#: ../../configuration/service/pppoe-server.rst:323 msgid "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." msgstr "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." @@ -16386,7 +18075,7 @@ msgstr "Use this command to enable the logging of the default action on custom c msgid "Use this command to enable the logging of the default action on the specified chain." msgstr "Use this command to enable the logging of the default action on the specified chain." -#: ../../configuration/system/ipv6.rst:165 +#: ../../configuration/system/ipv6.rst:178 msgid "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." msgstr "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." @@ -16394,11 +18083,11 @@ msgstr "Use this command to flush the kernel IPv6 route cache. An address can be msgid "Use this command to get an overview of a zone." msgstr "Use this command to get an overview of a zone." -#: ../../configuration/system/ipv6.rst:120 +#: ../../configuration/system/ipv6.rst:133 msgid "Use this command to get information about OSPFv3." msgstr "Use this command to get information about OSPFv3." -#: ../../configuration/system/ipv6.rst:142 +#: ../../configuration/system/ipv6.rst:155 msgid "Use this command to get information about the RIPNG protocol" msgstr "Use this command to get information about the RIPNG protocol" @@ -16410,10 +18099,22 @@ msgstr "Use this command to instruct the system to establish a PPPoE connection msgid "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." msgstr "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." -#: ../../configuration/service/pppoe-server.rst:311 +#: ../../configuration/service/ipoe-server.rst:394 +msgid "Use this command to locally check the active sessions in the IPoE server." +msgstr "Use this command to locally check the active sessions in the IPoE server." + +#: ../../configuration/service/pppoe-server.rst:587 msgid "Use this command to locally check the active sessions in the PPPoE server." msgstr "Use this command to locally check the active sessions in the PPPoE server." +#: ../../configuration/vpn/pptp.rst:446 +msgid "Use this command to locally check the active sessions in the PPTP server." +msgstr "Use this command to locally check the active sessions in the PPTP server." + +#: ../../configuration/vpn/sstp.rst:542 +msgid "Use this command to locally check the active sessions in the SSTP server." +msgstr "Use this command to locally check the active sessions in the SSTP server." + #: ../../configuration/protocols/igmp.rst:104 msgid "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." msgstr "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." @@ -16427,7 +18128,7 @@ msgstr "Use this command to not install advertised DNS nameservers into the loca msgid "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." msgstr "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." -#: ../../configuration/system/ipv6.rst:160 +#: ../../configuration/system/ipv6.rst:173 msgid "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." msgstr "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." @@ -16467,7 +18168,7 @@ msgstr "Use this command to see discovery hello information" msgid "Use this command to see the Label Information Base." msgstr "Use this command to see the Label Information Base." -#: ../../configuration/service/pppoe-server.rst:26 +#: ../../configuration/service/pppoe-server.rst:33 msgid "Use this command to set a name for this PPPoE-server access concentrator." msgstr "Use this command to set a name for this PPPoE-server access concentrator." @@ -16511,31 +18212,31 @@ msgstr "Use this command to set the username for authenticating with a remote PP msgid "Use this command to show IPv6 Border Gateway Protocol information." msgstr "Use this command to show IPv6 Border Gateway Protocol information." -#: ../../configuration/system/ipv6.rst:50 +#: ../../configuration/system/ipv6.rst:63 msgid "Use this command to show IPv6 Neighbor Discovery Protocol information." msgstr "Use this command to show IPv6 Neighbor Discovery Protocol information." -#: ../../configuration/system/ipv6.rst:58 +#: ../../configuration/system/ipv6.rst:71 msgid "Use this command to show IPv6 forwarding status." msgstr "Use this command to show IPv6 forwarding status." -#: ../../configuration/system/ipv6.rst:54 +#: ../../configuration/system/ipv6.rst:67 msgid "Use this command to show IPv6 multicast group membership." msgstr "Use this command to show IPv6 multicast group membership." -#: ../../configuration/system/ipv6.rst:62 +#: ../../configuration/system/ipv6.rst:75 msgid "Use this command to show IPv6 routes." msgstr "Use this command to show IPv6 routes." -#: ../../configuration/system/ipv6.rst:105 +#: ../../configuration/system/ipv6.rst:118 msgid "Use this command to show all IPv6 access lists" msgstr "Use this command to show all IPv6 access lists" -#: ../../configuration/system/ipv6.rst:90 +#: ../../configuration/system/ipv6.rst:103 msgid "Use this command to show all IPv6 prefix lists" msgstr "Use this command to show all IPv6 prefix lists" -#: ../../configuration/system/ipv6.rst:146 +#: ../../configuration/system/ipv6.rst:159 msgid "Use this command to show the status of the RIPNG protocol" msgstr "Use this command to show the status of the RIPNG protocol" @@ -16595,6 +18296,14 @@ msgstr "Used to block specific domains by the Proxy. Specifying \"vyos.net\" wil msgid "User-level messages" msgstr "User-level messages" +#: ../../configuration/service/ipoe-server.rst:250 +#: ../../configuration/service/pppoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:255 +#: ../../configuration/vpn/pptp.rst:195 +#: ../../configuration/vpn/sstp.rst:228 +msgid "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." +msgstr "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." + #: ../../configuration/policy/examples.rst:18 msgid "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." @@ -16603,19 +18312,23 @@ msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing t msgid "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." msgstr "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." -#: ../../configuration/protocols/bgp.rst:900 +#: ../../configuration/protocols/bgp.rst:922 msgid "Using BGP confederation" msgstr "Using BGP confederation" -#: ../../configuration/protocols/bgp.rst:899 +#: ../../configuration/protocols/bgp.rst:921 msgid "Using BGP route-reflectors" msgstr "Using BGP route-reflectors" -#: ../../configuration/interfaces/bridge.rst:225 +#: ../../configuration/interfaces/bridge.rst:234 msgid "Using VLAN aware Bridge" msgstr "Using VLAN aware Bridge" -#: ../../configuration/interfaces/bridge.rst:266 +#: ../../configuration/vpn/sstp.rst:29 +msgid "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" +msgstr "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" + +#: ../../configuration/interfaces/bridge.rst:275 msgid "Using the operation mode command to view Bridge Information" msgstr "Using the operation mode command to view Bridge Information" @@ -16645,18 +18358,22 @@ msgstr "VHT operating channel center frequency - center freq 2 (for use with the #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 msgid "VLAN" msgstr "VLAN" +#: ../../configuration/service/pppoe-server.rst:232 +msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." +msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." + #: ../../configuration/service/pppoe-server.rst:163 msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." -#: ../../configuration/interfaces/bridge.rst:231 +#: ../../configuration/interfaces/bridge.rst:240 msgid "VLAN 10 on member interface `eth2` (ACCESS mode)" msgstr "VLAN 10 on member interface `eth2` (ACCESS mode)" @@ -16664,10 +18381,14 @@ msgstr "VLAN 10 on member interface `eth2` (ACCESS mode)" msgid "VLAN Example" msgstr "VLAN Example" -#: ../../configuration/interfaces/bridge.rst:134 +#: ../../configuration/interfaces/bridge.rst:143 msgid "VLAN Options" msgstr "VLAN Options" +#: ../../configuration/service/ipoe-server.rst:315 +msgid "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" +msgstr "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" + #: ../../configuration/service/lldp.rst:28 msgid "VLAN name" msgstr "VLAN name" @@ -16688,32 +18409,32 @@ msgstr "VPN-clients will request configuration parameters, optionally you can DN msgid "VRF" msgstr "VRF" -#: ../../configuration/vrf/index.rst:411 +#: ../../configuration/vrf/index.rst:430 msgid "VRF Route Leaking" msgstr "VRF Route Leaking" -#: ../../configuration/vrf/index.rst:283 +#: ../../configuration/vrf/index.rst:302 msgid "VRF and NAT" msgstr "VRF and NAT" -#: ../../configuration/vrf/index.rst:380 +#: ../../configuration/vrf/index.rst:399 msgid "VRF blue routing table" msgstr "VRF blue routing table" -#: ../../configuration/vrf/index.rst:347 +#: ../../configuration/vrf/index.rst:366 msgid "VRF default routing table" msgstr "VRF default routing table" -#: ../../configuration/vrf/index.rst:363 +#: ../../configuration/vrf/index.rst:382 msgid "VRF red routing table" msgstr "VRF red routing table" -#: ../../configuration/vrf/index.rst:235 -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:254 +#: ../../configuration/vrf/index.rst:261 msgid "VRF route leaking" msgstr "VRF route leaking" -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:261 msgid "VRF topology example" msgstr "VRF topology example" @@ -16769,11 +18490,19 @@ msgstr "Valid values are 0..255." msgid "Value" msgstr "Value" -#: ../../configuration/vpn/sstp.rst:263 +#: ../../configuration/service/ipoe-server.rst:203 +#: ../../configuration/service/pppoe-server.rst:165 +#: ../../configuration/vpn/l2tp.rst:208 +#: ../../configuration/vpn/pptp.rst:148 +#: ../../configuration/vpn/sstp.rst:181 msgid "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." msgstr "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." -#: ../../configuration/vpn/sstp.rst:258 +#: ../../configuration/service/ipoe-server.rst:198 +#: ../../configuration/service/pppoe-server.rst:160 +#: ../../configuration/vpn/l2tp.rst:203 +#: ../../configuration/vpn/pptp.rst:143 +#: ../../configuration/vpn/sstp.rst:176 msgid "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." msgstr "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." @@ -16795,11 +18524,11 @@ msgstr "Verify that connections are hitting the rule on both sides:" msgid "Version" msgstr "Version" -#: ../../configuration/highavailability/index.rst:339 +#: ../../configuration/highavailability/index.rst:349 msgid "Virtual-server" msgstr "Virtual-server" -#: ../../configuration/highavailability/index.rst:398 +#: ../../configuration/highavailability/index.rst:408 msgid "Virtual-server can be configured with VRRP virtual address or without VRRP." msgstr "Virtual-server can be configured with VRRP virtual address or without VRRP." @@ -16807,7 +18536,7 @@ msgstr "Virtual-server can be configured with VRRP virtual address or without VR msgid "Virtual Ethernet" msgstr "Virtual Ethernet" -#: ../../configuration/highavailability/index.rst:342 +#: ../../configuration/highavailability/index.rst:352 msgid "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." msgstr "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." @@ -16823,11 +18552,11 @@ msgstr "VyOS 1.1 supported login as user ``root``. This has been removed due to msgid "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." msgstr "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." -#: ../../configuration/vrf/index.rst:84 +#: ../../configuration/vrf/index.rst:103 msgid "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." msgstr "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." -#: ../../configuration/pki/index.rst:9 +#: ../../configuration/pki/index.rst:11 msgid "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." msgstr "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." @@ -16839,7 +18568,7 @@ msgstr "VyOS 1.4 uses chrony instead of ntpd (see :vytask:`T3008`) which will no msgid "VyOS Arista EOS setup" msgstr "VyOS Arista EOS setup" -#: ../../configuration/vpn/ipsec.rst:120 +#: ../../configuration/vpn/ipsec.rst:123 msgid "VyOS ESP group has the next options:" msgstr "VyOS ESP group has the next options:" @@ -16883,10 +18612,14 @@ msgstr "VyOS SNMP supports both IPv4 and IPv6." msgid "VyOS also comes with a build in SSTP server, see :ref:`sstp`." msgstr "VyOS also comes with a build in SSTP server, see :ref:`sstp`." -#: ../../configuration/service/dhcp-server.rst:504 +#: ../../configuration/service/dhcp-server.rst:563 msgid "VyOS also provides DHCPv6 server functionality which is described in this section." msgstr "VyOS also provides DHCPv6 server functionality which is described in this section." +#: ../../configuration/vpn/ipsec.rst:474 +msgid "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." +msgstr "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:127 msgid "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." msgstr "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." @@ -16928,11 +18661,15 @@ msgstr "VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**, **IGMP* msgid "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/ids.rst:17 +msgid "VyOS includes the FastNetMon Community Edition." +msgstr "VyOS includes the FastNetMon Community Edition." + +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS is also able to use any service relying on protocols supported by ddclient." @@ -16952,15 +18689,15 @@ msgstr "VyOS makes use of Linux `netfilter <https://netfilter.org/>`_ for packet msgid "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" msgstr "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" -#: ../../configuration/pki/index.rst:21 +#: ../../configuration/pki/index.rst:23 msgid "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." msgstr "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." -#: ../../configuration/pki/index.rst:35 +#: ../../configuration/pki/index.rst:37 msgid "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." msgstr "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." -#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:323 msgid "VyOS operational mode commands are not only available for generating keys but also to display them." msgstr "VyOS operational mode commands are not only available for generating keys but also to display them." @@ -16972,6 +18709,10 @@ msgstr "VyOS provide an HTTP API. You can use it to execute op-mode commands, up msgid "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." msgstr "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." +#: ../../configuration/service/dhcp-server.rst:172 +msgid "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" +msgstr "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:144 msgid "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." msgstr "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." @@ -16996,10 +18737,14 @@ msgstr "VyOS provides policies commands exclusively for BGP traffic filtering an msgid "VyOS provides some operational commands on OpenVPN." msgstr "VyOS provides some operational commands on OpenVPN." -#: ../../configuration/service/dhcp-server.rst:138 +#: ../../configuration/service/dhcp-server.rst:172 msgid "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." msgstr "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." +#: ../../configuration/pki/index.rst:255 +msgid "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." +msgstr "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." + #: ../../configuration/loadbalancing/reverse-proxy.rst:8 msgid "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." msgstr "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." @@ -17020,6 +18765,10 @@ msgstr "VyOS supports both MLD version 1 and version 2 (which allows source-spec msgid "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." msgstr "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." +#: ../../configuration/vpn/ipsec.rst:452 +msgid "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." +msgstr "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." + #: ../../configuration/system/updates.rst:5 msgid "VyOS supports online checking for updates" msgstr "VyOS supports online checking for updates" @@ -17060,11 +18809,11 @@ msgstr "VyOS uses the `mirror` option to configure port mirroring. The configura msgid "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." -#: ../../configuration/service/ipoe-server.rst:9 +#: ../../configuration/service/ipoe-server.rst:7 msgid "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." msgstr "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." -#: ../../configuration/vpn/l2tp.rst:6 +#: ../../configuration/vpn/l2tp.rst:7 msgid "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." @@ -17076,7 +18825,7 @@ msgstr "VyOS utilizes accel-ppp_ to provide SSTP server functionality. We suppor msgid "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." msgstr "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." -#: ../../configuration/vpn/site2site_ipsec.rst:164 +#: ../../configuration/vpn/site2site_ipsec.rst:167 msgid "WAN interface on `eth1`" msgstr "WAN interface on `eth1`" @@ -17117,7 +18866,7 @@ msgstr "We'll configure OpenVPN using self-signed certificates, and then discuss msgid "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." msgstr "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." -#: ../../configuration/vpn/ipsec.rst:232 +#: ../../configuration/vpn/ipsec.rst:236 msgid "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." msgstr "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." @@ -17129,11 +18878,15 @@ msgstr "We can't support all displays from the beginning. If your display type i msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." -#: ../../configuration/protocols/rpki.rst:158 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" -#: ../../configuration/protocols/bgp.rst:1249 +#: ../../configuration/vpn/ipsec.rst:456 +msgid "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." +msgstr "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." + +#: ../../configuration/protocols/bgp.rst:1271 msgid "We could expand on this and also deny link local and multicast in the rule 20 action deny." msgstr "We could expand on this and also deny link local and multicast in the rule 20 action deny." @@ -17145,6 +18898,10 @@ msgstr "We do not have CLI nodes for every single OpenVPN option. If an option i msgid "We don't recomend to use arguments. Using environments is more preffereble." msgstr "We don't recomend to use arguments. Using environments is more preffereble." +#: ../../configuration/vpn/ipsec.rst:506 +msgid "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." +msgstr "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." + #: ../../configuration/interfaces/wireguard.rst:148 msgid "We listen on port 51820" msgstr "We listen on port 51820" @@ -17153,7 +18910,7 @@ msgstr "We listen on port 51820" msgid "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" msgstr "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" -#: ../../configuration/system/option.rst:85 +#: ../../configuration/system/option.rst:115 msgid "We now utilize `tuned` for dynamic resource balancing based on profiles." msgstr "We now utilize `tuned` for dynamic resource balancing based on profiles." @@ -17169,7 +18926,7 @@ msgstr "We only need a single step for this interface:" msgid "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" msgstr "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" -#: ../../configuration/system/login.rst:420 +#: ../../configuration/system/login.rst:424 msgid "We use a vontainer providing the TACACS serve rin this example." msgstr "We use a vontainer providing the TACACS serve rin this example." @@ -17177,7 +18934,7 @@ msgstr "We use a vontainer providing the TACACS serve rin this example." msgid "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." msgstr "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." -#: ../../configuration/service/dhcp-server.rst:331 +#: ../../configuration/service/dhcp-server.rst:387 msgid "Web Proxy Autodiscovery (WPAD) URL" msgstr "Web Proxy Autodiscovery (WPAD) URL" @@ -17201,15 +18958,19 @@ msgstr "When LDP is working, you will be able to see label information in the ou msgid "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." msgstr "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." -#: ../../configuration/vrf/index.rst:73 +#: ../../configuration/vrf/index.rst:92 msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." -#: ../../configuration/service/dns.rst:354 +#: ../../configuration/service/dns.rst:445 +msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." +msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." + +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." msgstr "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." -#: ../../configuration/service/dns.rst:347 +#: ../../configuration/service/dns.rst:361 msgid "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." msgstr "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." @@ -17225,7 +18986,11 @@ msgstr "When a link is reconnected or a new slave joins the bond the receive tra msgid "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." msgstr "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." -#: ../../configuration/protocols/bgp.rst:684 +#: ../../configuration/protocols/bgp.rst:589 +msgid "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." +msgstr "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." + +#: ../../configuration/protocols/bgp.rst:706 msgid "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." msgstr "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." @@ -17237,7 +19002,7 @@ msgstr "When adding IPv6 routing information exchange feature to BGP. There were msgid "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." msgstr "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." -#: ../../configuration/service/pppoe-server.rst:169 +#: ../../configuration/service/pppoe-server.rst:238 msgid "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." msgstr "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." @@ -17271,17 +19036,21 @@ msgstr "When dequeuing, each hash-bucket with data is queried in a round robin f msgid "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." msgstr "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." -#: ../../configuration/vrf/index.rst:188 +#: ../../configuration/vrf/index.rst:207 msgid "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." msgstr "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." -#: ../../configuration/pki/index.rst:176 -#: ../../configuration/pki/index.rst:219 +#: ../../configuration/vpn/ipsec.rst:529 +msgid "When first connecting to the new VPN the user is prompted to enter proper credentials." +msgstr "When first connecting to the new VPN the user is prompted to enter proper credentials." + +#: ../../configuration/pki/index.rst:178 +#: ../../configuration/pki/index.rst:221 msgid "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" -#: ../../configuration/pki/index.rst:197 -#: ../../configuration/pki/index.rst:235 +#: ../../configuration/pki/index.rst:199 +#: ../../configuration/pki/index.rst:237 msgid "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" @@ -17325,7 +19094,7 @@ msgstr "When set the interface is enabled for \"dial-on-demand\"." msgid "When specified, this should be the only keyword for the interface." msgstr "When specified, this should be the only keyword for the interface." -#: ../../configuration/system/option.rst:60 +#: ../../configuration/system/option.rst:90 msgid "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." msgstr "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." @@ -17334,7 +19103,7 @@ msgstr "When starting a VyOS live system (the installation CD) the configured ke msgid "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." msgstr "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." -#: ../../configuration/vpn/site2site_ipsec.rst:416 +#: ../../configuration/vpn/site2site_ipsec.rst:419 msgid "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." msgstr "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." @@ -17346,6 +19115,10 @@ msgstr "When the command above is set, VyOS will answer every ICMP echo request msgid "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." msgstr "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." +#: ../../configuration/highavailability/index.rst:321 +msgid "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" +msgstr "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" + #: ../../_include/interface-address-with-dhcp.txt:14 msgid "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" msgstr "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" @@ -17366,6 +19139,10 @@ msgstr "When using NAT for a large number of host systems it recommended that a msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." +#: ../../configuration/protocols/rpki.rst:161 +msgid "When using SSH, private-key-file and public-key-file are mandatory options." +msgstr "When using SSH, private-key-file and public-key-file are mandatory options." + #: ../../configuration/vpn/openconnect.rst:222 msgid "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" msgstr "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" @@ -17450,12 +19227,23 @@ msgstr "Will be recorded only packets/flows on **incoming** direction in configu msgid "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" msgstr "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" +#: ../../configuration/vpn/ipsec.rst:501 +msgid "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." +msgstr "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." + +#: ../../configuration/service/pppoe-server.rst:579 +#: ../../configuration/vpn/l2tp.rst:514 +#: ../../configuration/vpn/pptp.rst:438 +#: ../../configuration/vpn/sstp.rst:472 +msgid "Windows Internet Name Service (WINS) servers propagated to client" +msgstr "Windows Internet Name Service (WINS) servers propagated to client" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:147 msgid "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." msgstr "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/interfaces/wireguard.rst:7 -#: ../../configuration/pki/index.rst:132 +#: ../../configuration/pki/index.rst:134 msgid "WireGuard" msgstr "WireGuard" @@ -17521,20 +19309,24 @@ msgid "With this command, you can specify how the URL path should be matched aga msgstr "With this command, you can specify how the URL path should be matched against incoming requests." #: ../../configuration/firewall/index.rst:166 +msgid "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." +msgstr "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." + +#: ../../configuration/firewall/index.rst:166 msgid "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." msgstr "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." -#: ../../configuration/service/dhcp-server.rst:257 -#: ../../configuration/service/dhcp-server.rst:262 -#: ../../configuration/service/dhcp-server.rst:267 -#: ../../configuration/service/dhcp-server.rst:277 -#: ../../configuration/service/dhcp-server.rst:282 -#: ../../configuration/service/dhcp-server.rst:312 -#: ../../configuration/service/dhcp-server.rst:317 -#: ../../configuration/service/dhcp-server.rst:322 -#: ../../configuration/service/dhcp-server.rst:342 -#: ../../configuration/service/dhcp-server.rst:347 -#: ../../configuration/service/dhcp-server.rst:357 +#: ../../configuration/service/dhcp-server.rst:313 +#: ../../configuration/service/dhcp-server.rst:318 +#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:338 +#: ../../configuration/service/dhcp-server.rst:368 +#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/service/dhcp-server.rst:378 +#: ../../configuration/service/dhcp-server.rst:398 +#: ../../configuration/service/dhcp-server.rst:403 +#: ../../configuration/service/dhcp-server.rst:413 msgid "Y" msgstr "Y" @@ -17542,7 +19334,7 @@ msgstr "Y" msgid "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." msgstr "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." -#: ../../configuration/system/login.rst:365 +#: ../../configuration/system/login.rst:369 msgid "You are able to set post-login or pre-login banner messages to display certain information for this system." msgstr "You are able to set post-login or pre-login banner messages to display certain information for this system." @@ -17558,11 +19350,15 @@ msgstr "You can also configure the time interval for preemption with the \"preem msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" msgstr "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" -#: ../../configuration/system/ipv6.rst:107 +#: ../../configuration/service/router-advert.rst:58 +msgid "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." +msgstr "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." + +#: ../../configuration/system/ipv6.rst:120 msgid "You can also specify which IPv6 access-list should be shown:" msgstr "You can also specify which IPv6 access-list should be shown:" @@ -17578,7 +19374,7 @@ msgstr "You can also use another attributes for identify client for disconnect, msgid "You can also write a description for a filter:" msgstr "You can also write a description for a filter:" -#: ../../configuration/system/login.rst:78 +#: ../../configuration/system/login.rst:82 msgid "You can assign multiple keys to the same user by using a unique identifier per SSH key." msgstr "You can assign multiple keys to the same user by using a unique identifier per SSH key." @@ -17614,7 +19410,7 @@ msgstr "You can create multiple VLAN interfaces on a physical interface. The VLA msgid "You can disable a VRRP group with ``disable`` option:" msgstr "You can disable a VRRP group with ``disable`` option:" -#: ../../configuration/system/ipv6.rst:122 +#: ../../configuration/system/ipv6.rst:135 msgid "You can get more specific OSPFv3 information by using the parameters shown below:" msgstr "You can get more specific OSPFv3 information by using the parameters shown below:" @@ -17626,15 +19422,15 @@ msgstr "You can not assign the same allowed-ips statement to multiple WireGuard msgid "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" msgstr "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" -#: ../../configuration/vpn/sstp.rst:332 +#: ../../configuration/vpn/sstp.rst:505 msgid "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." -#: ../../configuration/system/login.rst:443 +#: ../../configuration/system/login.rst:447 msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" @@ -17642,7 +19438,7 @@ msgstr "You can only apply one policy per interface and direction, but you could msgid "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" msgstr "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" -#: ../../configuration/service/dhcp-server.rst:176 +#: ../../configuration/service/dhcp-server.rst:226 msgid "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." msgstr "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." @@ -17718,6 +19514,10 @@ msgstr "You will also need the public key of your peer as well as the network(s) msgid "Your ISPs modem is connected to port ``eth0`` of your VyOS box." msgstr "Your ISPs modem is connected to port ``eth0`` of your VyOS box." +#: ../../configuration/service/router-advert.rst:110 +msgid "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" +msgstr "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" + #: ../../configuration/system/ip.rst:31 #: ../../configuration/system/ipv6.rst:27 #: ../../configuration/vrf/index.rst:44 @@ -17758,7 +19558,7 @@ msgstr "(This can be useful when a called service has many and/or often changing msgid ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." msgstr ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." -#: ../../configuration/protocols/static.rst:152 +#: ../../configuration/protocols/static.rst:185 msgid ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." msgstr ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." @@ -17798,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports a msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." @@ -17818,7 +19618,7 @@ msgstr ":abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc msgid ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." msgstr ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." -#: ../../configuration/vrf/index.rst:401 +#: ../../configuration/vrf/index.rst:420 msgid ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." msgstr ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." @@ -17830,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." @@ -17890,7 +19694,11 @@ msgstr ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -18010,43 +19818,43 @@ msgstr ":lastproofread:2021-07-12" msgid ":opcmd:`generate pki wireguard key-pair`." msgstr ":opcmd:`generate pki wireguard key-pair`." -#: ../../configuration/vrf/index.rst:88 +#: ../../configuration/vrf/index.rst:107 msgid ":ref:`routing-bgp`" msgstr ":ref:`routing-bgp`" -#: ../../configuration/vrf/index.rst:104 +#: ../../configuration/vrf/index.rst:123 msgid ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" msgstr ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" -#: ../../configuration/vrf/index.rst:89 +#: ../../configuration/vrf/index.rst:108 msgid ":ref:`routing-isis`" msgstr ":ref:`routing-isis`" -#: ../../configuration/vrf/index.rst:105 +#: ../../configuration/vrf/index.rst:124 msgid ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" msgstr ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" -#: ../../configuration/vrf/index.rst:90 +#: ../../configuration/vrf/index.rst:109 msgid ":ref:`routing-ospf`" msgstr ":ref:`routing-ospf`" -#: ../../configuration/vrf/index.rst:106 +#: ../../configuration/vrf/index.rst:125 msgid ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" msgstr ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" -#: ../../configuration/vrf/index.rst:91 +#: ../../configuration/vrf/index.rst:110 msgid ":ref:`routing-ospfv3`" msgstr ":ref:`routing-ospfv3`" -#: ../../configuration/vrf/index.rst:107 +#: ../../configuration/vrf/index.rst:126 msgid ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" msgstr ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" -#: ../../configuration/vrf/index.rst:92 +#: ../../configuration/vrf/index.rst:111 msgid ":ref:`routing-static`" msgstr ":ref:`routing-static`" -#: ../../configuration/vrf/index.rst:108 +#: ../../configuration/vrf/index.rst:127 msgid ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" msgstr ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" @@ -18054,7 +19862,7 @@ msgstr ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." -#: ../../configuration/service/dns.rst:230 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Based" @@ -18062,7 +19870,7 @@ msgstr ":rfc:`2136` Based" msgid ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." msgstr ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." -#: ../../configuration/pki/index.rst:15 +#: ../../configuration/pki/index.rst:17 msgid ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." msgstr ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." @@ -18082,23 +19890,27 @@ msgstr "`3. Add a full path to the script`_" msgid "`4. Add optional parameters`_" msgstr "`4. Add optional parameters`_" -#: ../../configuration/service/dhcp-server.rst:154 +#: ../../configuration/service/dhcp-server.rst:203 msgid "`<name>` must be identical on both sides!" msgstr "`<name>` must be identical on both sides!" -#: ../../configuration/pki/index.rst:202 +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + +#: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:181 +#: ../../configuration/pki/index.rst:183 msgid "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:240 +#: ../../configuration/pki/index.rst:242 msgid "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:224 +#: ../../configuration/pki/index.rst:226 msgid "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" @@ -18202,14 +20014,26 @@ msgstr "``802.3ad`` - IEEE 802.3ad Dynamic link aggregation. Creates aggregation msgid "``9600`` - 9600 bps" msgstr "``9600`` - 9600 bps" -#: ../../configuration/vpn/ipsec.rst:149 +#: ../../configuration/vpn/ipsec.rst:152 msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` defines a Diffie-Hellman group for PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Known limitations:``" +#: ../../configuration/service/ipoe-server.rst:247 +#: ../../configuration/service/pppoe-server.rst:209 +#: ../../configuration/vpn/l2tp.rst:252 +#: ../../configuration/vpn/pptp.rst:192 +#: ../../configuration/vpn/sstp.rst:225 +msgid "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." +msgstr "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." + #: ../../configuration/loadbalancing/wan.rst:259 msgid "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" msgstr "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" @@ -18226,11 +20050,11 @@ msgstr "``a`` - 802.11a - 54 Mbits/sec" msgid "``ac`` - 802.11ac - 1300 Mbits/sec" msgstr "``ac`` - 802.11ac - 1300 Mbits/sec" -#: ../../configuration/policy/route-map.rst:375 +#: ../../configuration/policy/route-map.rst:378 msgid "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" msgstr "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" -#: ../../configuration/policy/route-map.rst:368 +#: ../../configuration/policy/route-map.rst:371 msgid "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" msgstr "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" @@ -18256,7 +20080,7 @@ msgstr "``active-backup`` - Active-backup policy: Only one slave in the bond is msgid "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." msgstr "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." -#: ../../configuration/vpn/ipsec.rst:96 +#: ../../configuration/vpn/ipsec.rst:98 msgid "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" msgstr "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" @@ -18268,11 +20092,19 @@ msgstr "``all-available`` all checking target addresses must be available to pas msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``any-available`` any of the checking target addresses must be available to pass this check" -#: ../../configuration/vpn/site2site_ipsec.rst:385 +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + +#: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." #: ../../configuration/vpn/site2site_ipsec.rst:18 +msgid "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" +msgstr "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" + +#: ../../configuration/vpn/site2site_ipsec.rst:18 msgid "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" msgstr "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" @@ -18292,11 +20124,11 @@ msgstr "``begin`` Matches the beginning of the URL path" msgid "``bgp`` - Border Gateway Protocol (BGP)" msgstr "``bgp`` - Border Gateway Protocol (BGP)" -#: ../../configuration/vpn/site2site_ipsec.rst:147 +#: ../../configuration/vpn/site2site_ipsec.rst:150 msgid "``bind`` - select a VTI interface to bind to this peer;" msgstr "``bind`` - select a VTI interface to bind to this peer;" -#: ../../configuration/policy/route-map.rst:376 +#: ../../configuration/policy/route-map.rst:379 msgid "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" msgstr "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" @@ -18312,6 +20144,10 @@ msgstr "``burst``: Number of packets allowed to overshoot the limit within ``per msgid "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" msgstr "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:61 +msgid "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" +msgstr "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" + #: ../../configuration/service/lldp.rst:65 msgid "``cdp`` - Listen for CDP for Cisco routers/switches" msgstr "``cdp`` - Listen for CDP for Cisco routers/switches" @@ -18320,6 +20156,14 @@ msgstr "``cdp`` - Listen for CDP for Cisco routers/switches" msgid "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" msgstr "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:64 +msgid "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" +msgstr "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" + +#: ../../configuration/vpn/ipsec.rst:66 +msgid "``clear`` closes the CHILD_SA and does not take further action (default);" +msgstr "``clear`` closes the CHILD_SA and does not take further action (default);" + #: ../../configuration/vpn/ipsec.rst:65 msgid "``clear`` set action to clear;" msgstr "``clear`` set action to clear;" @@ -18328,11 +20172,15 @@ msgstr "``clear`` set action to clear;" msgid "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." msgstr "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +#: ../../configuration/vpn/site2site_ipsec.rst:414 +msgid "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +msgstr "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." + #: ../../configuration/vpn/ipsec.rst:47 msgid "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" msgstr "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" -#: ../../configuration/vpn/ipsec.rst:122 +#: ../../configuration/vpn/ipsec.rst:125 msgid "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." msgstr "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." @@ -18344,7 +20192,7 @@ msgstr "``compression`` whether IPComp compression of content is proposed on the msgid "``connected`` - Connected routes (directly attached subnet or host)" msgstr "``connected`` - Connected routes (directly attached subnet or host)" -#: ../../configuration/vpn/site2site_ipsec.rst:72 +#: ../../configuration/vpn/site2site_ipsec.rst:69 msgid "``connection-type`` - how to handle this connection process. Possible variants:" msgstr "``connection-type`` - how to handle this connection process. Possible variants:" @@ -18366,39 +20214,43 @@ msgstr "``d`` - Execution interval in days" msgid "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." msgstr "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +#: ../../configuration/vpn/site2site_ipsec.rst:403 +msgid "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +msgstr "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." + #: ../../configuration/vpn/ipsec.rst:56 msgid "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" msgstr "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" -#: ../../configuration/vpn/site2site_ipsec.rst:88 +#: ../../configuration/vpn/site2site_ipsec.rst:85 msgid "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" msgstr "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" -#: ../../configuration/vpn/site2site_ipsec.rst:92 +#: ../../configuration/vpn/site2site_ipsec.rst:89 msgid "``description`` - description for this peer;" msgstr "``description`` - description for this peer;" -#: ../../configuration/vpn/ipsec.rst:101 +#: ../../configuration/vpn/ipsec.rst:103 msgid "``dh-group`` dh-group;" msgstr "``dh-group`` dh-group;" -#: ../../configuration/vpn/site2site_ipsec.rst:23 +#: ../../configuration/vpn/site2site_ipsec.rst:24 msgid "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" msgstr "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" -#: ../../configuration/vpn/site2site_ipsec.rst:94 +#: ../../configuration/vpn/site2site_ipsec.rst:91 msgid "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" msgstr "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" -#: ../../configuration/vpn/ipsec.rst:88 +#: ../../configuration/vpn/ipsec.rst:90 msgid "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." msgstr "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." -#: ../../configuration/vpn/site2site_ipsec.rst:396 +#: ../../configuration/vpn/site2site_ipsec.rst:399 msgid "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." msgstr "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." -#: ../../configuration/vpn/ipsec.rst:162 +#: ../../configuration/vpn/ipsec.rst:166 msgid "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" msgstr "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" @@ -18406,7 +20258,7 @@ msgstr "``disable-route-autoinstall`` Do not automatically install routes to rem msgid "``disable`` - disable this tunnel;" msgstr "``disable`` - disable this tunnel;" -#: ../../configuration/vpn/ipsec.rst:147 +#: ../../configuration/vpn/ipsec.rst:150 msgid "``disable`` Disable PFS;" msgstr "``disable`` Disable PFS;" @@ -18424,15 +20276,15 @@ msgstr "``disable`` disable MOBIKE;" msgid "``drop``: drop the packet." msgstr "``drop``: drop the packet." -#: ../../configuration/system/login.rst:71 +#: ../../configuration/system/login.rst:75 msgid "``ecdsa-sha2-nistp256``" msgstr "``ecdsa-sha2-nistp256``" -#: ../../configuration/system/login.rst:72 +#: ../../configuration/system/login.rst:76 msgid "``ecdsa-sha2-nistp384``" msgstr "``ecdsa-sha2-nistp384``" -#: ../../configuration/system/login.rst:73 +#: ../../configuration/system/login.rst:77 msgid "``ecdsa-sha2-nistp521``" msgstr "``ecdsa-sha2-nistp521``" @@ -18440,7 +20292,7 @@ msgstr "``ecdsa-sha2-nistp521``" msgid "``edp`` - Listen for EDP for Extreme routers/switches" msgstr "``edp`` - Listen for EDP for Extreme routers/switches" -#: ../../configuration/vpn/ipsec.rst:145 +#: ../../configuration/vpn/ipsec.rst:148 msgid "``enable`` Inherit Diffie-Hellman group from IKE group (default);" msgstr "``enable`` Inherit Diffie-Hellman group from IKE group (default);" @@ -18452,11 +20304,11 @@ msgstr "``enable`` enable IPComp compression;" msgid "``enable`` enable MOBIKE (default for IKEv2);" msgstr "``enable`` enable MOBIKE (default for IKEv2);" -#: ../../configuration/vpn/ipsec.rst:103 +#: ../../configuration/vpn/ipsec.rst:105 msgid "``encryption`` encryption algorithm;" msgstr "``encryption`` encryption algorithm;" -#: ../../configuration/vpn/ipsec.rst:153 +#: ../../configuration/vpn/ipsec.rst:156 msgid "``encryption`` encryption algorithm (default 128 bit AES-CBC);" msgstr "``encryption`` encryption algorithm (default 128 bit AES-CBC);" @@ -18468,7 +20320,7 @@ msgstr "``end`` Matches the end of the URL path." msgid "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" msgstr "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" -#: ../../configuration/vpn/site2site_ipsec.rst:149 +#: ../../configuration/vpn/site2site_ipsec.rst:152 msgid "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." msgstr "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." @@ -18488,11 +20340,11 @@ msgstr "``file`` - path to the key file;" msgid "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/ipsec.rst:164 +#: ../../configuration/vpn/ipsec.rst:168 msgid "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/site2site_ipsec.rst:97 +#: ../../configuration/vpn/site2site_ipsec.rst:94 msgid "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" msgstr "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" @@ -18500,7 +20352,7 @@ msgstr "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagr msgid "``g`` - 802.11g - 54 Mbits/sec (default)" msgstr "``g`` - 802.11g - 54 Mbits/sec (default)" -#: ../../configuration/policy/route-map.rst:367 +#: ../../configuration/policy/route-map.rst:370 msgid "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" msgstr "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" @@ -18508,11 +20360,11 @@ msgstr "``graceful-shutdown`` - Well-known communities value GRACEFUL msgid "``h`` - Execution interval in hours" msgstr "``h`` - Execution interval in hours" -#: ../../configuration/vpn/ipsec.rst:105 +#: ../../configuration/vpn/ipsec.rst:107 msgid "``hash`` hash algorithm." msgstr "``hash`` hash algorithm." -#: ../../configuration/vpn/ipsec.rst:155 +#: ../../configuration/vpn/ipsec.rst:158 msgid "``hash`` hash algorithm (default sha1)." msgstr "``hash`` hash algorithm (default sha1)." @@ -18536,23 +20388,23 @@ msgstr "``ht40-`` - Both 20 MHz and 40 MHz with secondary channel below the prim msgid "``hvc0`` - Xen console" msgstr "``hvc0`` - Xen console" -#: ../../configuration/vpn/site2site_ipsec.rst:25 +#: ../../configuration/vpn/site2site_ipsec.rst:26 msgid "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" msgstr "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" -#: ../../configuration/vpn/site2site_ipsec.rst:101 +#: ../../configuration/vpn/site2site_ipsec.rst:98 msgid "``ike-group`` - IKE group to use for key exchanges;" msgstr "``ike-group`` - IKE group to use for key exchanges;" -#: ../../configuration/vpn/ipsec.rst:82 +#: ../../configuration/vpn/ipsec.rst:84 msgid "``ikev1`` use IKEv1 for Key Exchange;" msgstr "``ikev1`` use IKEv1 for Key Exchange;" -#: ../../configuration/vpn/site2site_ipsec.rst:103 +#: ../../configuration/vpn/site2site_ipsec.rst:100 msgid "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" msgstr "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" -#: ../../configuration/vpn/ipsec.rst:73 +#: ../../configuration/vpn/ipsec.rst:75 msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." @@ -18560,7 +20412,7 @@ msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticat msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" -#: ../../configuration/vpn/ipsec.rst:84 +#: ../../configuration/vpn/ipsec.rst:86 msgid "``ikev2`` use IKEv2 for Key Exchange;" msgstr "``ikev2`` use IKEv2 for Key Exchange;" @@ -18568,23 +20420,27 @@ msgstr "``ikev2`` use IKEv2 for Key Exchange;" msgid "``in``: Ruleset for forwarded packets on an inbound interface" msgstr "``in``: Ruleset for forwarded packets on an inbound interface" -#: ../../configuration/vpn/site2site_ipsec.rst:75 +#: ../../configuration/vpn/site2site_ipsec.rst:72 msgid "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" msgstr "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" -#: ../../configuration/vpn/ipsec.rst:166 +#: ../../configuration/system/option.rst:50 +msgid "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" +msgstr "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" + +#: ../../configuration/vpn/ipsec.rst:170 msgid "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" msgstr "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" -#: ../../configuration/pki/index.rst:148 +#: ../../configuration/pki/index.rst:150 msgid "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." msgstr "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." -#: ../../configuration/policy/route-map.rst:366 +#: ../../configuration/policy/route-map.rst:369 msgid "``internet`` - Well-known communities value 0" msgstr "``internet`` - Well-known communities value 0" -#: ../../configuration/vpn/ipsec.rst:69 +#: ../../configuration/vpn/ipsec.rst:71 msgid "``interval`` keep-alive interval in seconds <2-86400> (default 30);" msgstr "``interval`` keep-alive interval in seconds <2-86400> (default 30);" @@ -18602,7 +20458,7 @@ msgstr "``jump``: jump to another custom chain." msgid "``kernel`` - Kernel routes" msgstr "``kernel`` - Kernel routes" -#: ../../configuration/vpn/ipsec.rst:78 +#: ../../configuration/vpn/ipsec.rst:80 msgid "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" msgstr "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" @@ -18610,7 +20466,11 @@ msgstr "``key-exchange`` which protocol should be used to initialize the connect msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:" -#: ../../configuration/system/option.rst:107 +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + +#: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." @@ -18622,19 +20482,19 @@ msgstr "``least-connection`` Distributes requests to the server with the fewest msgid "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" msgstr "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" -#: ../../configuration/vpn/ipsec.rst:125 +#: ../../configuration/vpn/ipsec.rst:128 msgid "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" msgstr "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" -#: ../../configuration/vpn/ipsec.rst:128 +#: ../../configuration/vpn/ipsec.rst:131 msgid "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" msgstr "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" -#: ../../configuration/vpn/ipsec.rst:131 +#: ../../configuration/vpn/ipsec.rst:134 msgid "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" msgstr "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" -#: ../../configuration/vpn/ipsec.rst:86 +#: ../../configuration/vpn/ipsec.rst:88 msgid "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" @@ -18642,22 +20502,26 @@ msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgid "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" -#: ../../configuration/policy/route-map.rst:373 +#: ../../configuration/policy/route-map.rst:376 msgid "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" msgstr "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" -#: ../../configuration/vpn/site2site_ipsec.rst:107 +#: ../../configuration/vpn/site2site_ipsec.rst:104 msgid "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" msgstr "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" -#: ../../configuration/policy/route-map.rst:363 +#: ../../configuration/policy/route-map.rst:366 msgid "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" msgstr "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" -#: ../../configuration/vpn/site2site_ipsec.rst:31 +#: ../../configuration/vpn/site2site_ipsec.rst:32 msgid "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" msgstr "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:50 +msgid "``local-key`` - name of PKI key-pair with local private key" +msgstr "``local-key`` - name of PKI key-pair with local private key" + #: ../../configuration/firewall/general-legacy.rst:753 msgid "``local``: Ruleset for packets destined for this router" msgstr "``local``: Ruleset for packets destined for this router" @@ -18674,7 +20538,7 @@ msgstr "``m`` - Execution interval in minutes" msgid "``main`` Routing table used by VyOS and other interfaces not participating in PBR" msgstr "``main`` Routing table used by VyOS and other interfaces not participating in PBR" -#: ../../configuration/vpn/ipsec.rst:93 +#: ../../configuration/vpn/ipsec.rst:95 msgid "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" msgstr "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" @@ -18682,19 +20546,23 @@ msgstr "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommen msgid "``message``: Full message that has triggered the script." msgstr "``message``: Full message that has triggered the script." +#: ../../configuration/system/option.rst:40 +msgid "``mitigations=off``" +msgstr "``mitigations=off``" + #: ../../configuration/vpn/ipsec.rst:92 msgid "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" msgstr "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" -#: ../../configuration/vpn/site2site_ipsec.rst:35 +#: ../../configuration/vpn/site2site_ipsec.rst:36 msgid "``mode`` - mode for authentication between VyOS and remote peer:" msgstr "``mode`` - mode for authentication between VyOS and remote peer:" -#: ../../configuration/vpn/ipsec.rst:91 +#: ../../configuration/vpn/ipsec.rst:93 msgid "``mode`` IKEv1 Phase 1 Mode Selection:" msgstr "``mode`` IKEv1 Phase 1 Mode Selection:" -#: ../../configuration/vpn/ipsec.rst:136 +#: ../../configuration/vpn/ipsec.rst:139 msgid "``mode`` the type of the connection:" msgstr "``mode`` the type of the connection:" @@ -18758,19 +20626,19 @@ msgstr "``net.ipv6.conf.all.accept_redirects``" msgid "``net.ipv6.conf.all.accept_source_route``" msgstr "``net.ipv6.conf.all.accept_source_route``" -#: ../../configuration/policy/route-map.rst:364 +#: ../../configuration/policy/route-map.rst:367 msgid "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" msgstr "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" -#: ../../configuration/policy/route-map.rst:365 +#: ../../configuration/policy/route-map.rst:368 msgid "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" msgstr "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" -#: ../../configuration/policy/route-map.rst:374 +#: ../../configuration/policy/route-map.rst:377 msgid "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" msgstr "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" -#: ../../configuration/policy/route-map.rst:377 +#: ../../configuration/policy/route-map.rst:380 msgid "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" msgstr "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" @@ -18782,7 +20650,7 @@ msgstr "``no`` disable remote host re-authenticaton during an IKE rekey;" msgid "``none`` - Execution interval in minutes" msgstr "``none`` - Execution interval in minutes" -#: ../../configuration/vpn/site2site_ipsec.rst:85 +#: ../../configuration/vpn/site2site_ipsec.rst:82 msgid "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." msgstr "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." @@ -18798,7 +20666,7 @@ msgstr "``noselect`` marks the server as unused, except for display purposes. Th msgid "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" msgstr "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" -#: ../../configuration/vpn/ipsec.rst:160 +#: ../../configuration/vpn/ipsec.rst:164 msgid "``options``" msgstr "``options``" @@ -18814,11 +20682,19 @@ msgstr "``ospfv3`` - Open Shortest Path First (IPv6) (OSPFv3)" msgid "``out``: Ruleset for forwarded packets on an outbound interface" msgstr "``out``: Ruleset for forwarded packets on an outbound interface" +#: ../../configuration/vpn/site2site_ipsec.rst:54 +msgid "``passphrase`` - local private key passphrase" +msgstr "``passphrase`` - local private key passphrase" + +#: ../../configuration/vpn/site2site_ipsec.rst:67 +msgid "``passphrase`` - private key passphrase, if needed." +msgstr "``passphrase`` - private key passphrase, if needed." + #: ../../configuration/vpn/site2site_ipsec.rst:70 msgid "``password`` - passphrase private key, if needed." msgstr "``password`` - passphrase private key, if needed." -#: ../../configuration/pki/index.rst:163 +#: ../../configuration/pki/index.rst:165 msgid "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." msgstr "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." @@ -18826,7 +20702,7 @@ msgstr "``peer`` is used for the VyOS CLI command to identify the WireGuard peer msgid "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." msgstr "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." -#: ../../configuration/vpn/ipsec.rst:142 +#: ../../configuration/vpn/ipsec.rst:145 msgid "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" msgstr "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" @@ -18835,11 +20711,11 @@ msgid "``pool`` mobilizes persistent client mode association with a number of re msgstr "``pool`` mobilizes persistent client mode association with a number of remote servers." #: ../../configuration/vpn/site2site_ipsec.rst:126 -#: ../../configuration/vpn/site2site_ipsec.rst:136 +#: ../../configuration/vpn/site2site_ipsec.rst:139 msgid "``port`` - define port. Have effect only when used together with ``prefix``;" msgstr "``port`` - define port. Have effect only when used together with ``prefix``;" -#: ../../configuration/vpn/site2site_ipsec.rst:37 +#: ../../configuration/vpn/site2site_ipsec.rst:38 msgid "``pre-shared-secret`` - use predefined shared secret phrase;" msgstr "``pre-shared-secret`` - use predefined shared secret phrase;" @@ -18851,27 +20727,35 @@ msgstr "``prefer`` marks the server as preferred. All other things being equal, msgid "``prefix`` - IP network at local side." msgstr "``prefix`` - IP network at local side." -#: ../../configuration/vpn/site2site_ipsec.rst:138 +#: ../../configuration/vpn/site2site_ipsec.rst:141 msgid "``prefix`` - IP network at remote side." msgstr "``prefix`` - IP network at remote side." -#: ../../configuration/vpn/ipsec.rst:107 +#: ../../configuration/vpn/ipsec.rst:109 msgid "``prf`` pseudo-random function." msgstr "``prf`` pseudo-random function." -#: ../../configuration/vpn/ipsec.rst:151 +#: ../../configuration/vpn/site2site_ipsec.rst:130 +msgid "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" +msgstr "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" + +#: ../../configuration/system/option.rst:51 +msgid "``processor.max_cstate=1`` Limit processor to maximum C-state 1" +msgstr "``processor.max_cstate=1`` Limit processor to maximum C-state 1" + +#: ../../configuration/vpn/ipsec.rst:154 msgid "``proposal`` ESP-group proposal with number <1-65535>:" msgstr "``proposal`` ESP-group proposal with number <1-65535>:" -#: ../../configuration/vpn/ipsec.rst:99 +#: ../../configuration/vpn/ipsec.rst:101 msgid "``proposal`` the list of proposals and their parameters:" msgstr "``proposal`` the list of proposals and their parameters:" -#: ../../configuration/vpn/site2site_ipsec.rst:130 +#: ../../configuration/vpn/site2site_ipsec.rst:133 msgid "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" msgstr "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" -#: ../../configuration/vpn/site2site_ipsec.rst:21 +#: ../../configuration/vpn/site2site_ipsec.rst:22 msgid "``psk`` - Preshared secret key name:" msgstr "``psk`` - Preshared secret key name:" @@ -18890,7 +20774,7 @@ msgstr "``rate``: Number of packets. Default 5." msgid "``reject``: reject the packet." msgstr "``reject``: reject the packet." -#: ../../configuration/vpn/site2site_ipsec.rst:111 +#: ../../configuration/vpn/site2site_ipsec.rst:108 msgid "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." msgstr "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." @@ -18898,10 +20782,18 @@ msgstr "``remote-address`` - remote IP address or hostname for IPSec connection. msgid "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" msgstr "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" -#: ../../configuration/vpn/site2site_ipsec.rst:133 +#: ../../configuration/vpn/site2site_ipsec.rst:52 +msgid "``remote-key`` - name of PKI key-pair with remote public key" +msgstr "``remote-key`` - name of PKI key-pair with remote public key" + +#: ../../configuration/vpn/site2site_ipsec.rst:136 msgid "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" msgstr "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" +#: ../../configuration/vpn/site2site_ipsec.rst:113 +msgid "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" +msgstr "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" + #: ../../configuration/loadbalancing/reverse-proxy.rst:64 msgid "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" msgstr "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" @@ -18910,10 +20802,14 @@ msgstr "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" msgid "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" msgstr "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" -#: ../../configuration/vpn/site2site_ipsec.rst:80 +#: ../../configuration/vpn/site2site_ipsec.rst:77 msgid "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." msgstr "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." +#: ../../configuration/vpn/ipsec.rst:68 +msgid "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" +msgstr "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" + #: ../../configuration/vpn/ipsec.rst:54 #: ../../configuration/vpn/ipsec.rst:67 msgid "``restart`` set action to restart;" @@ -18941,19 +20837,19 @@ msgstr "``round-robin`` - Round-robin policy: Transmit packets in sequential ord msgid "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" msgstr "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" -#: ../../configuration/policy/route-map.rst:369 +#: ../../configuration/policy/route-map.rst:372 msgid "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" msgstr "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" -#: ../../configuration/policy/route-map.rst:371 +#: ../../configuration/policy/route-map.rst:374 msgid "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" msgstr "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" -#: ../../configuration/policy/route-map.rst:370 +#: ../../configuration/policy/route-map.rst:373 msgid "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" msgstr "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" -#: ../../configuration/policy/route-map.rst:372 +#: ../../configuration/policy/route-map.rst:375 msgid "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" msgstr "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" @@ -18961,11 +20857,19 @@ msgstr "``route-filter-v6`` - Well-known communities value ROUTE_FI msgid "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" +#: ../../configuration/vpn/site2site_ipsec.rst:48 +msgid "``rsa`` - options for RSA authentication mode:" +msgstr "``rsa`` - options for RSA authentication mode:" + +#: ../../configuration/vpn/site2site_ipsec.rst:40 +msgid "``rsa`` - use simple shared RSA key." +msgstr "``rsa`` - use simple shared RSA key." + #: ../../configuration/vpn/site2site_ipsec.rst:39 msgid "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" -#: ../../configuration/vpn/site2site_ipsec.rst:27 +#: ../../configuration/vpn/site2site_ipsec.rst:28 msgid "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" msgstr "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" @@ -18978,10 +20882,13 @@ msgid "``set firewall ipv4 forward filter ...``." msgstr "``set firewall ipv4 forward filter ...``." #: ../../configuration/firewall/index.rst:54 -#: ../../configuration/firewall/index.rst:72 msgid "``set firewall ipv4 input filter ...``." msgstr "``set firewall ipv4 input filter ...``." +#: ../../configuration/firewall/index.rst:72 +msgid "``set firewall ipv4 output filter ...``." +msgstr "``set firewall ipv4 output filter ...``." + #: ../../configuration/firewall/index.rst:63 msgid "``set firewall ipv6 forward filter ...``." msgstr "``set firewall ipv6 forward filter ...``." @@ -19010,19 +20917,19 @@ msgstr "``sonmp`` - Listen for SONMP for Nortel routers/switches" msgid "``source-address`` Distributes requests based on the source IP address of the client" msgstr "``source-address`` Distributes requests based on the source IP address of the client" -#: ../../configuration/system/login.rst:74 +#: ../../configuration/system/login.rst:78 msgid "``ssh-dss``" msgstr "``ssh-dss``" -#: ../../configuration/system/login.rst:75 +#: ../../configuration/system/login.rst:79 msgid "``ssh-ed25519``" msgstr "``ssh-ed25519``" -#: ../../configuration/system/login.rst:49 +#: ../../configuration/system/login.rst:53 msgid "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" msgstr "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" -#: ../../configuration/system/login.rst:76 +#: ../../configuration/system/login.rst:80 msgid "``ssh-rsa``" msgstr "``ssh-rsa``" @@ -19034,6 +20941,10 @@ msgstr "``ssl-fc-sni-end`` SSL frontend match end of connection Server Name" msgid "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" msgstr "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" +#: ../../configuration/vpn/ipsec.rst:54 +msgid "``start`` tries to immediately re-create the CHILD_SA;" +msgstr "``start`` tries to immediately re-create the CHILD_SA;" + #: ../../configuration/policy/route-map.rst:173 msgid "``static`` - Statically configured routes" msgstr "``static`` - Statically configured routes" @@ -19042,6 +20953,18 @@ msgstr "``static`` - Statically configured routes" msgid "``station`` - Connects to another access point" msgstr "``station`` - Connects to another access point" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -19083,22 +21006,34 @@ msgstr "``test-script``: A user defined script must return 0 to be considered su msgid "``threshold``: ``below`` or ``above`` the specified rate limit." msgstr "``threshold``: ``below`` or ``above`` the specified rate limit." -#: ../../configuration/system/option.rst:97 +#: ../../configuration/system/option.rst:127 msgid "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." msgstr "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." -#: ../../configuration/vpn/ipsec.rst:71 +#: ../../configuration/vpn/ipsec.rst:73 msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." -#: ../../configuration/vpn/ipsec.rst:140 +#: ../../configuration/vpn/ipsec.rst:143 msgid "``transport`` transport mode;" msgstr "``transport`` transport mode;" +#: ../../configuration/vpn/ipsec.rst:63 +msgid "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" +msgstr "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" + +#: ../../configuration/vpn/ipsec.rst:52 +msgid "``trap`` installs a trap policy for the CHILD_SA;" +msgstr "``trap`` installs a trap policy for the CHILD_SA;" + #: ../../configuration/loadbalancing/wan.rst:179 msgid "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" msgstr "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" @@ -19115,7 +21050,7 @@ msgstr "``ttyUSBX`` - USB Serial device name" msgid "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" msgstr "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" -#: ../../configuration/vpn/ipsec.rst:138 +#: ../../configuration/vpn/ipsec.rst:141 msgid "``tunnel`` tunnel mode (default);" msgstr "``tunnel`` tunnel mode (default);" @@ -19123,11 +21058,11 @@ msgstr "``tunnel`` tunnel mode (default);" msgid "``type``: Specify the type of test. type can be ping, ttl or a user defined script" msgstr "``type``: Specify the type of test. type can be ping, ttl or a user defined script" -#: ../../configuration/vpn/site2site_ipsec.rst:51 +#: ../../configuration/vpn/site2site_ipsec.rst:56 msgid "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" msgstr "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" -#: ../../configuration/vpn/site2site_ipsec.rst:152 +#: ../../configuration/vpn/site2site_ipsec.rst:155 msgid "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." msgstr "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." @@ -19135,7 +21070,7 @@ msgstr "``virtual-address`` - Defines a virtual IP address which is requested by msgid "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." msgstr "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." -#: ../../configuration/vpn/ipsec.rst:168 +#: ../../configuration/vpn/ipsec.rst:172 msgid "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." @@ -19143,11 +21078,27 @@ msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated l msgid "``vnc`` - Virtual Network Control (VNC)" msgstr "``vnc`` - Virtual Network Control (VNC)" -#: ../../configuration/vpn/site2site_ipsec.rst:140 +#: ../../configuration/vpn/site2site_ipsec.rst:143 msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" -#: ../../configuration/vpn/site2site_ipsec.rst:54 +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + +#: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - options for x509 authentication mode:" @@ -19163,10 +21114,26 @@ msgstr "``xor-hash`` - XOR policy: Transmit based on the selected transmit hash msgid "``yes`` enable remote host re-authentication during an IKE rekey;" msgstr "``yes`` enable remote host re-authentication during an IKE rekey;" -#: ../../configuration/system/option.rst:39 +#: ../../configuration/service/ntp.rst:90 +msgid "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." +msgstr "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." + +#: ../../configuration/service/ntp.rst:94 +msgid "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." +msgstr "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." + +#: ../../configuration/system/option.rst:69 msgid "`source-address` and `source-interface` can not be used at the same time." msgstr "`source-address` and `source-interface` can not be used at the same time." +#: ../../configuration/service/ntp.rst:102 +msgid "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." +msgstr "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." + +#: ../../configuration/service/ntp.rst:107 +msgid "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" +msgstr "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" + #: ../../configuration/protocols/rpki.rst:12 msgid "`tweet by EvilMog`_, 2020-02-21" msgstr "`tweet by EvilMog`_, 2020-02-21" @@ -19194,7 +21161,7 @@ msgstr "alert" msgid "all" msgstr "all" -#: ../../configuration/vrf/index.rst:428 +#: ../../configuration/vrf/index.rst:447 msgid "an RD / RTLIST" msgstr "an RD / RTLIST" @@ -19234,23 +21201,23 @@ msgstr "bgpd" msgid "bonding" msgstr "bonding" -#: ../../configuration/service/dhcp-server.rst:305 +#: ../../configuration/service/dhcp-server.rst:361 msgid "boot-size" msgstr "boot-size" -#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:354 msgid "bootfile-name" msgstr "bootfile-name" -#: ../../configuration/service/dhcp-server.rst:300 +#: ../../configuration/service/dhcp-server.rst:356 msgid "bootfile-name, filename" msgstr "bootfile-name, filename" -#: ../../configuration/service/dhcp-server.rst:288 +#: ../../configuration/service/dhcp-server.rst:344 msgid "bootfile-server" msgstr "bootfile-server" -#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:359 msgid "bootfile-size" msgstr "bootfile-size" @@ -19258,7 +21225,7 @@ msgstr "bootfile-size" msgid "bridge" msgstr "bridge" -#: ../../configuration/service/dhcp-server.rst:236 +#: ../../configuration/service/dhcp-server.rst:292 msgid "client-prefix-length" msgstr "client-prefix-length" @@ -19286,15 +21253,19 @@ msgstr "cron" msgid "daemon" msgstr "daemon" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ has another way to determine the WAN IP address. This is controlled by:" -#: ../../configuration/service/dns.rst:218 +#: ../../configuration/service/dns.rst:232 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:413 +#: ../../configuration/service/dns.rst:299 +msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." +msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." + +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in `<pattern>`." msgstr "ddclient_ will skip any address located before the string set in `<pattern>`." @@ -19306,7 +21277,7 @@ msgstr "debug" msgid "decrement-lifetime" msgstr "decrement-lifetime" -#: ../../configuration/service/dhcp-server.rst:335 +#: ../../configuration/service/dhcp-server.rst:391 msgid "default-lease-time, max-lease-time" msgstr "default-lease-time, max-lease-time" @@ -19318,7 +21289,7 @@ msgstr "default-lifetime" msgid "default-preference" msgstr "default-preference" -#: ../../configuration/service/dhcp-server.rst:248 +#: ../../configuration/service/dhcp-server.rst:304 msgid "default-router" msgstr "default-router" @@ -19330,15 +21301,15 @@ msgstr "default min-threshold" msgid "deprecate-prefix" msgstr "deprecate-prefix" -#: ../../configuration/highavailability/index.rst:354 +#: ../../configuration/highavailability/index.rst:364 msgid "destination-hashing" msgstr "destination-hashing" -#: ../../configuration/service/dhcp-server.rst:285 +#: ../../configuration/service/dhcp-server.rst:341 msgid "dhcp-server-identifier" msgstr "dhcp-server-identifier" -#: ../../configuration/highavailability/index.rst:364 +#: ../../configuration/highavailability/index.rst:374 msgid "direct" msgstr "direct" @@ -19356,17 +21327,17 @@ msgstr "disable: No source validation" msgid "dnssl" msgstr "dnssl" -#: ../../configuration/service/dhcp-server.rst:263 -#: ../../configuration/service/dhcp-server.rst:265 +#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:321 msgid "domain-name" msgstr "domain-name" -#: ../../configuration/service/dhcp-server.rst:260 +#: ../../configuration/service/dhcp-server.rst:316 msgid "domain-name-servers" msgstr "domain-name-servers" -#: ../../configuration/service/dhcp-server.rst:318 -#: ../../configuration/service/dhcp-server.rst:320 +#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:376 msgid "domain-search" msgstr "domain-search" @@ -19402,11 +21373,11 @@ msgstr "ethernet" msgid "exact-match: exact match of the network prefixes." msgstr "exact-match: exact match of the network prefixes." -#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:399 msgid "exclude" msgstr "exclude" -#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:404 msgid "failover" msgstr "failover" @@ -19418,8 +21389,8 @@ msgstr "fast: Request partner to transmit LACPDUs every 1 second" msgid "file <file name>" msgstr "file <file name>" -#: ../../configuration/protocols/bgp.rst:826 -#: ../../configuration/protocols/bgp.rst:832 +#: ../../configuration/protocols/bgp.rst:848 +#: ../../configuration/protocols/bgp.rst:854 msgid "filter-list" msgstr "filter-list" @@ -19431,6 +21402,10 @@ msgstr "ftp" msgid "full - always use full-duplex" msgstr "full - always use full-duplex" +#: ../../configuration/service/router-advert.rst:16 +msgid "geneve" +msgstr "geneve" + #: ../../configuration/interfaces/ethernet.rst:32 msgid "half - always use half-duplex" msgstr "half - always use half-duplex" @@ -19443,7 +21418,7 @@ msgstr "hop-limit" msgid "host: single host IP address to match." msgstr "host: single host IP address to match." -#: ../../configuration/system/option.rst:89 +#: ../../configuration/system/option.rst:119 msgid "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" msgstr "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" @@ -19467,7 +21442,7 @@ msgstr "info" msgid "interval" msgstr "interval" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "invalid" @@ -19475,8 +21450,8 @@ msgstr "invalid" msgid "inverse-match: network/netmask to match (requires network be defined)." msgstr "inverse-match: network/netmask to match (requires network be defined)." -#: ../../configuration/service/dhcp-server.rst:268 -#: ../../configuration/service/dhcp-server.rst:270 +#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:326 msgid "ip-forwarding" msgstr "ip-forwarding" @@ -19484,10 +21459,18 @@ msgstr "ip-forwarding" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "it can be used with any NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." @@ -19496,7 +21479,7 @@ msgstr "it does not increase hardware device interrupt rate (although it does in msgid "kern" msgstr "kern" -#: ../../configuration/service/router-advert.rst:16 +#: ../../configuration/service/router-advert.rst:17 msgid "l2tpv3" msgstr "l2tpv3" @@ -19504,27 +21487,27 @@ msgstr "l2tpv3" msgid "ldpd" msgstr "ldpd" -#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:389 msgid "lease" msgstr "lease" -#: ../../configuration/highavailability/index.rst:351 +#: ../../configuration/highavailability/index.rst:361 msgid "least-connection" msgstr "least-connection" -#: ../../configuration/vpn/site2site_ipsec.rst:275 +#: ../../configuration/vpn/site2site_ipsec.rst:278 msgid "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" msgstr "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" -#: ../../configuration/vpn/site2site_ipsec.rst:167 +#: ../../configuration/vpn/site2site_ipsec.rst:170 msgid "left local_ip: `198.51.100.3` # server side WAN IP" msgstr "left local_ip: `198.51.100.3` # server side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:276 +#: ../../configuration/vpn/site2site_ipsec.rst:279 msgid "left public_ip:172.18.201.10" msgstr "left public_ip:172.18.201.10" -#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:168 msgid "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" msgstr "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" @@ -19592,7 +21575,7 @@ msgstr "local use 5 (local5)" msgid "local use 7 (local7)" msgstr "local use 7 (local7)" -#: ../../configuration/highavailability/index.rst:355 +#: ../../configuration/highavailability/index.rst:365 msgid "locality-based-least-connection" msgstr "locality-based-least-connection" @@ -19666,12 +21649,12 @@ msgstr "more information related IGP - :ref:`routing-isis`" msgid "more information related IGP - :ref:`routing-ospf`" msgstr "more information related IGP - :ref:`routing-ospf`" -#: ../../configuration/service/dhcp-server.rst:258 +#: ../../configuration/service/dhcp-server.rst:314 #: ../../configuration/service/router-advert.rst:1 msgid "name-server" msgstr "name-server" -#: ../../configuration/service/dhcp-server.rst:280 +#: ../../configuration/service/dhcp-server.rst:336 msgid "netbios-name-servers" msgstr "netbios-name-servers" @@ -19687,7 +21670,7 @@ msgstr "network: network/netmask to match (requires inverse-match be defined) BU msgid "news" msgstr "news" -#: ../../configuration/service/dhcp-server.rst:290 +#: ../../configuration/service/dhcp-server.rst:346 msgid "next-server" msgstr "next-server" @@ -19699,7 +21682,7 @@ msgstr "no-autonomous-flag" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "notfound" @@ -19711,11 +21694,11 @@ msgstr "notice" msgid "ntp" msgstr "ntp" -#: ../../configuration/service/dhcp-server.rst:273 +#: ../../configuration/service/dhcp-server.rst:329 msgid "ntp-server" msgstr "ntp-server" -#: ../../configuration/service/dhcp-server.rst:275 +#: ../../configuration/service/dhcp-server.rst:331 msgid "ntp-servers" msgstr "ntp-servers" @@ -19723,7 +21706,7 @@ msgstr "ntp-servers" msgid "one rule with a LAN (inbound-interface) and the WAN (interface)." msgstr "one rule with a LAN (inbound-interface) and the WAN (interface)." -#: ../../configuration/service/router-advert.rst:17 +#: ../../configuration/service/router-advert.rst:18 msgid "openvpn" msgstr "openvpn" @@ -19763,8 +21746,8 @@ msgstr "policy extcommunity-list" msgid "policy large-community-list" msgstr "policy large-community-list" -#: ../../configuration/service/dhcp-server.rst:313 -#: ../../configuration/service/dhcp-server.rst:315 +#: ../../configuration/service/dhcp-server.rst:369 +#: ../../configuration/service/dhcp-server.rst:371 msgid "pop-server" msgstr "pop-server" @@ -19772,17 +21755,17 @@ msgstr "pop-server" msgid "preferred-lifetime" msgstr "preferred-lifetime" -#: ../../configuration/protocols/bgp.rst:827 -#: ../../configuration/protocols/bgp.rst:831 +#: ../../configuration/protocols/bgp.rst:849 +#: ../../configuration/protocols/bgp.rst:853 msgid "prefix-list, distribute-list" msgstr "prefix-list, distribute-list" -#: ../../configuration/service/router-advert.rst:18 +#: ../../configuration/service/router-advert.rst:19 msgid "pseudo-ethernet" msgstr "pseudo-ethernet" -#: ../../configuration/service/dhcp-server.rst:338 -#: ../../configuration/service/dhcp-server.rst:340 +#: ../../configuration/service/dhcp-server.rst:394 +#: ../../configuration/service/dhcp-server.rst:396 msgid "range" msgstr "range" @@ -19790,7 +21773,7 @@ msgstr "range" msgid "reachable-time" msgstr "reachable-time" -#: ../../configuration/system/ip.rst:82 +#: ../../configuration/system/ip.rst:95 msgid "reset commands" msgstr "reset commands" @@ -19798,7 +21781,7 @@ msgstr "reset commands" msgid "retrans-timer" msgstr "retrans-timer" -#: ../../configuration/service/dhcp-server.rst:325 +#: ../../configuration/service/dhcp-server.rst:381 msgid "rfc3442-static-route, windows-static-route" msgstr "rfc3442-static-route, windows-static-route" @@ -19806,15 +21789,15 @@ msgstr "rfc3442-static-route, windows-static-route" msgid "rfc3768-compatibility" msgstr "rfc3768-compatibility" -#: ../../configuration/vpn/site2site_ipsec.rst:277 +#: ../../configuration/vpn/site2site_ipsec.rst:280 msgid "right local_ip: 172.18.202.10 # right side WAN IP" msgstr "right local_ip: 172.18.202.10 # right side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:169 +#: ../../configuration/vpn/site2site_ipsec.rst:172 msgid "right local_ip: `203.0.113.2` # remote office side WAN IP" msgstr "right local_ip: `203.0.113.2` # remote office side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:168 +#: ../../configuration/vpn/site2site_ipsec.rst:171 msgid "right subnet: `10.0.0.0/24` site2,remote office side" msgstr "right subnet: `10.0.0.0/24` site2,remote office side" @@ -19822,16 +21805,16 @@ msgstr "right subnet: `10.0.0.0/24` site2,remote office side" msgid "ripd" msgstr "ripd" -#: ../../configuration/highavailability/index.rst:349 +#: ../../configuration/highavailability/index.rst:359 msgid "round-robin" msgstr "round-robin" -#: ../../configuration/protocols/bgp.rst:825 -#: ../../configuration/protocols/bgp.rst:833 +#: ../../configuration/protocols/bgp.rst:847 +#: ../../configuration/protocols/bgp.rst:855 msgid "route-map" msgstr "route-map" -#: ../../configuration/service/dhcp-server.rst:250 +#: ../../configuration/service/dhcp-server.rst:306 msgid "routers" msgstr "routers" @@ -19848,7 +21831,7 @@ msgstr "sFlow is a technology that enables monitoring of network traffic by send msgid "security" msgstr "security" -#: ../../configuration/service/dhcp-server.rst:283 +#: ../../configuration/service/dhcp-server.rst:339 msgid "server-identifier" msgstr "server-identifier" @@ -19865,11 +21848,11 @@ msgstr "set a destination and/or source address. Accepted input:" msgid "sha256 Hashes" msgstr "sha256 Hashes" -#: ../../configuration/system/ip.rst:50 +#: ../../configuration/system/ip.rst:63 msgid "show commands" msgstr "show commands" -#: ../../configuration/service/dhcp-server.rst:289 +#: ../../configuration/service/dhcp-server.rst:345 msgid "siaddr" msgstr "siaddr" @@ -19877,16 +21860,20 @@ msgstr "siaddr" msgid "slow: Request partner to transmit LACPDUs every 30 seconds" msgstr "slow: Request partner to transmit LACPDUs every 30 seconds" -#: ../../configuration/service/dhcp-server.rst:308 -#: ../../configuration/service/dhcp-server.rst:310 +#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:366 msgid "smtp-server" msgstr "smtp-server" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "software filters can easily be added to hash over new protocols," -#: ../../configuration/highavailability/index.rst:353 +#: ../../configuration/highavailability/index.rst:363 msgid "source-hashing" msgstr "source-hashing" @@ -19898,11 +21885,11 @@ msgstr "spoke01-spoke04" msgid "spoke05" msgstr "spoke05" -#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:409 msgid "static-mapping" msgstr "static-mapping" -#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:379 msgid "static-route" msgstr "static-route" @@ -19912,7 +21899,7 @@ msgstr "static-route" msgid "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." msgstr "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." -#: ../../configuration/service/dhcp-server.rst:238 +#: ../../configuration/service/dhcp-server.rst:294 msgid "subnet-mask" msgstr "subnet-mask" @@ -19928,8 +21915,8 @@ msgstr "tail" msgid "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." msgstr "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." -#: ../../configuration/service/dhcp-server.rst:293 -#: ../../configuration/service/dhcp-server.rst:295 +#: ../../configuration/service/dhcp-server.rst:349 +#: ../../configuration/service/dhcp-server.rst:351 msgid "tftp-server-name" msgstr "tftp-server-name" @@ -19938,21 +21925,21 @@ msgstr "tftp-server-name" msgid "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." msgstr "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." -#: ../../configuration/service/dhcp-server.rst:242 -#: ../../configuration/service/dhcp-server.rst:244 +#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:300 msgid "time-offset" msgstr "time-offset" -#: ../../configuration/service/dhcp-server.rst:253 +#: ../../configuration/service/dhcp-server.rst:309 msgid "time-server" msgstr "time-server" -#: ../../configuration/service/dhcp-server.rst:255 +#: ../../configuration/service/dhcp-server.rst:311 msgid "time-servers" msgstr "time-servers" -#: ../../configuration/highavailability/index.rst:365 -#: ../../configuration/service/router-advert.rst:19 +#: ../../configuration/highavailability/index.rst:375 +#: ../../configuration/service/router-advert.rst:20 msgid "tunnel" msgstr "tunnel" @@ -19972,7 +21959,7 @@ msgstr "user" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "valid" @@ -19984,7 +21971,7 @@ msgstr "valid-lifetime" msgid "veth interfaces need to be created in pairs - it's called the peer name" msgstr "veth interfaces need to be created in pairs - it's called the peer name" -#: ../../configuration/service/router-advert.rst:20 +#: ../../configuration/service/router-advert.rst:21 msgid "vxlan" msgstr "vxlan" @@ -19996,11 +21983,11 @@ msgstr "warning" msgid "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." msgstr "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." -#: ../../configuration/highavailability/index.rst:352 +#: ../../configuration/highavailability/index.rst:362 msgid "weighted-least-connection" msgstr "weighted-least-connection" -#: ../../configuration/highavailability/index.rst:350 +#: ../../configuration/highavailability/index.rst:360 msgid "weighted-round-robin" msgstr "weighted-round-robin" @@ -20008,15 +21995,15 @@ msgstr "weighted-round-robin" msgid "while a *byte* is written as a single **b**." msgstr "while a *byte* is written as a single **b**." -#: ../../configuration/service/dhcp-server.rst:278 +#: ../../configuration/service/dhcp-server.rst:334 msgid "wins-server" msgstr "wins-server" -#: ../../configuration/service/router-advert.rst:21 +#: ../../configuration/service/router-advert.rst:22 msgid "wireguard" msgstr "wireguard" -#: ../../configuration/service/router-advert.rst:22 +#: ../../configuration/service/router-advert.rst:23 msgid "wireless" msgstr "wireless" @@ -20024,15 +22011,15 @@ msgstr "wireless" msgid "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." msgstr "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." -#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:384 msgid "wpad-url" msgstr "wpad-url" -#: ../../configuration/service/dhcp-server.rst:330 +#: ../../configuration/service/dhcp-server.rst:386 msgid "wpad-url, wpad-url code 252 = text" msgstr "wpad-url, wpad-url code 252 = text" -#: ../../configuration/service/router-advert.rst:23 +#: ../../configuration/service/router-advert.rst:24 msgid "wwan" msgstr "wwan" diff --git a/docs/_locale/ja/contributing.pot b/docs/_locale/ja/contributing.pot index dbf06213..19630864 100644 --- a/docs/_locale/ja/contributing.pot +++ b/docs/_locale/ja/contributing.pot @@ -72,6 +72,18 @@ msgstr "A good approach for writing commit messages is actually to have a look a msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Acronyms also **must** be capitalized to visually distinguish them from msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Add one or more IP addresses" @@ -155,6 +167,14 @@ msgstr "Any \"modified\" package may refer to an altered version of e.g. vyos-1x msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." @@ -207,6 +227,10 @@ msgstr "Bad: radius (unless it's about the distance between a center of a circle msgid "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." msgstr "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +#: ../../contributing/debugging.rst:160 +msgid "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +msgstr "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." + #: ../../contributing/debugging.rst:170 msgid "Boot Timing" msgstr "Boot Timing" @@ -215,6 +239,10 @@ msgstr "Boot Timing" msgid "Bug Report/Issue" msgstr "Bug Report/Issue" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Build" @@ -299,7 +327,7 @@ msgstr "Command definitions are purely declarative, and cannot contain any logic msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Config Load Tests" @@ -327,7 +355,7 @@ msgstr "Continuous Integration" msgid "Customize" msgstr "Customize" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "DHCP client and DHCPv6 prefix delegation" @@ -436,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "Every change set must be consistent (self containing)! Do not fix multiple bugs in a single commit. If you already worked on multiple fixes in the same file use `git add --patch` to only add the parts related to the one issue into your upcoming commit." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "Example:" @@ -469,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Feature Request" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "Firmware" @@ -574,11 +610,15 @@ msgstr "Horrible: \"Tcp connection timeout\"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Horrible: \"frobnication algorithm.\"" -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "How can we reproduce this Bug?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "IP and IPv6 options" @@ -602,14 +642,30 @@ msgstr "If a verb is essential, keep it. For example, in the help text of ``set msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." @@ -622,7 +678,7 @@ msgstr "In a big system, such as VyOS, that is comprised of multiple components, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." @@ -686,10 +742,14 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Interface based tests" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Issues/Feature requests" @@ -702,6 +762,10 @@ msgstr "Issues or bugs are found in any software project. VyOS is not an excepti msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." @@ -758,7 +822,7 @@ msgstr "Linux Kernel" msgid "Live System" msgstr "Live System" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "MTU size" @@ -766,11 +830,11 @@ msgstr "MTU size" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Manual Smoketest Run" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Manual config load test" @@ -847,7 +911,7 @@ msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` t msgid "Old concept/syntax" msgstr "Old concept/syntax" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." @@ -859,7 +923,7 @@ msgstr "Once you have the required dependencies installed, you may proceed with msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own." @@ -884,6 +948,10 @@ msgid "Our StrongSWAN build differs from the upstream:" msgstr "Our StrongSWAN build differs from the upstream:" #: ../../contributing/testing.rst:20 +msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." +msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." + +#: ../../contributing/testing.rst:20 msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." @@ -895,7 +963,7 @@ msgstr "Our code is split into several modules. VyOS is composed of multiple ind msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." @@ -924,11 +992,15 @@ msgstr "Please submit your patches using the well-known GitHub pull-request agai msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/development.rst:254 +msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." +msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." + +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "Port description" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Port disable" @@ -952,7 +1024,11 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Provide as much information as you can" @@ -984,7 +1060,7 @@ msgstr "Rationale: this seems to be the unwritten standard in network device CLI msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Report a Bug" @@ -1017,6 +1093,10 @@ msgstr "Smoketests executes predefined VyOS CLI commands and checks if the desir msgid "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." msgstr "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +#: ../../contributing/testing.rst:45 +msgid "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +msgstr "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." + #: ../../contributing/build-vyos.rst:202 msgid "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." @@ -1025,7 +1105,7 @@ msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which ver msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." @@ -1061,6 +1141,14 @@ msgstr "Suppose you want to make a change in the webproxy script but yet you do msgid "System Startup" msgstr "System Startup" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." @@ -1121,11 +1209,15 @@ msgstr "The ``verify()`` function takes your internal representation of the conf msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1145,7 +1237,7 @@ msgstr "The default template processor for VyOS code is Jinja2_." msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." @@ -1185,7 +1277,7 @@ msgstr "The most obvious reasons could be:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "The original repo is at https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." @@ -1198,6 +1290,10 @@ msgid "The package ends up in deb_dist dir." msgstr "The package ends up in deb_dist dir." #: ../../contributing/debugging.rst:148 +msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" +msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" + +#: ../../contributing/debugging.rst:148 msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" @@ -1245,6 +1341,10 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" @@ -1261,6 +1361,10 @@ msgstr "This chapter lists those exceptions and gives you a brief overview what msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" @@ -1285,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Those common tests consists out of:" @@ -1314,10 +1418,18 @@ msgid "To debug issues in priorities or to see what's going on in the background msgstr "To debug issues in priorities or to see what's going on in the background you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution order of the scripts." #: ../../contributing/build-vyos.rst:373 +msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" +msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" + +#: ../../contributing/build-vyos.rst:373 msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" #: ../../contributing/debugging.rst:182 +msgid "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" +msgstr "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" + +#: ../../contributing/debugging.rst:182 msgid "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" msgstr "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" @@ -1325,6 +1437,10 @@ msgstr "To enable boot time graphing change the Kernel commandline and add the f msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." @@ -1385,7 +1501,7 @@ msgstr "Useful commands are:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLANs (QinQ and regular 802.1q)" @@ -1409,6 +1525,10 @@ msgstr "Virtualization Platforms" msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." +#: ../../contributing/debugging.rst:190 +msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." +msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." + #: ../../contributing/build-vyos.rst:168 msgid "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." msgstr "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." @@ -1425,6 +1545,10 @@ msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. O msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." @@ -1441,6 +1565,10 @@ msgstr "We now need to mount some required, volatile filesystems" msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" @@ -1485,6 +1613,10 @@ msgstr "When you are able to verify that it is actually a bug, spend some time t msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +#: ../../contributing/testing.rst:112 +msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." + #: ../../contributing/issues-features.rst:21 msgid "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." msgstr "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." @@ -1493,7 +1625,7 @@ msgstr "When you believe you have found a bug, it is always a good idea to verif msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "Which version of VyOS are you using? ``run show version``" @@ -1538,6 +1670,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1546,10 +1682,27 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + +#: ../../contributing/debugging.rst:166 +msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." + #: ../../contributing/development.rst:146 msgid "You then can proceed with cloning your fork or add a new remote to your local repository:" msgstr "You then can proceed with cloning your fork or add a new remote to your local repository:" @@ -1558,7 +1711,7 @@ msgstr "You then can proceed with cloning your fork or add a new remote to your msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." @@ -1666,6 +1819,10 @@ msgstr "commit:expression:" msgid "contine execution using ``cont``" msgstr "contine execution using ``cont``" +#: ../../contributing/debugging.rst:128 +msgid "continue execution using ``cont``" +msgstr "continue execution using ``cont``" + #: ../../contributing/development.rst:675 msgid "default:" msgstr "default:" diff --git a/docs/_locale/ja/copyright.pot b/docs/_locale/ja/copyright.pot index d64e38c0..75aafda9 100644 --- a/docs/_locale/ja/copyright.pot +++ b/docs/_locale/ja/copyright.pot @@ -13,6 +13,10 @@ msgid "Copyright Notice" msgstr "Copyright Notice" #: ../../copyright.md:3 +msgid "Copyright (C) 2018-2023 VyOS maintainers and contributors" +msgstr "Copyright (C) 2018-2023 VyOS maintainers and contributors" + +#: ../../copyright.md:3 msgid "Copyright (C) 2018-2024 VyOS maintainers and contributors" msgstr "Copyright (C) 2018-2024 VyOS maintainers and contributors" diff --git a/docs/_locale/ja/documentation.pot b/docs/_locale/ja/documentation.pot index 6b2b8401..1074c5fd 100644 --- a/docs/_locale/ja/documentation.pot +++ b/docs/_locale/ja/documentation.pot @@ -8,27 +8,47 @@ msgstr "" "Language: ja\n" "Plural-Forms: nplurals=1; plural=0;\n" -#: ../../documentation.rst:239 +#: ../../documentation.rst:216 msgid "16bit ASN: ``64496 - 64511``" msgstr "16bit ASN: ``64496 - 64511``" -#: ../../documentation.rst:240 +#: ../../documentation.rst:84 +msgid "1. Theoretical information" +msgstr "1. Theoretical information" + +#: ../../documentation.rst:92 +msgid "2. Configuration description" +msgstr "2. Configuration description" + +#: ../../documentation.rst:217 msgid "32bit ASN: ``65536 - 65551``" msgstr "32bit ASN: ``65536 - 65551``" -#: ../../documentation.rst:182 +#: ../../documentation.rst:99 +msgid "3. Configuration examples" +msgstr "3. Configuration examples" + +#: ../../documentation.rst:105 +msgid "4. Known issues" +msgstr "4. Known issues" + +#: ../../documentation.rst:113 +msgid "5. Debugging" +msgstr "5. Debugging" + +#: ../../documentation.rst:159 msgid "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." msgstr "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." -#: ../../documentation.rst:103 +#: ../../documentation.rst:408 msgid "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." msgstr "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." -#: ../../documentation.rst:229 +#: ../../documentation.rst:206 msgid "Address space" msgstr "Address space" -#: ../../documentation.rst:390 +#: ../../documentation.rst:58 msgid "All RST files must follow the same TOC Level syntax and have to start with" msgstr "All RST files must follow the same TOC Level syntax and have to start with" @@ -36,7 +56,7 @@ msgstr "All RST files must follow the same TOC Level syntax and have to start wi msgid "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." msgstr "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." -#: ../../documentation.rst:53 +#: ../../documentation.rst:51 msgid "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." msgstr "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." @@ -48,23 +68,23 @@ msgstr "Anything else" msgid "Anything else that is not a configuration or an operation command has no predefined structure." msgstr "Anything else that is not a configuration or an operation command has no predefined structure." -#: ../../documentation.rst:257 +#: ../../documentation.rst:234 msgid "Autolinter" msgstr "Autolinter" -#: ../../documentation.rst:94 +#: ../../documentation.rst:399 msgid "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." msgstr "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." -#: ../../documentation.rst:123 +#: ../../documentation.rst:428 msgid "Check your configured remote repositories:" msgstr "Check your configured remote repositories:" -#: ../../documentation.rst:78 +#: ../../documentation.rst:383 msgid "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" msgstr "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" -#: ../../documentation.rst:107 +#: ../../documentation.rst:412 msgid "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." msgstr "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." @@ -72,55 +92,67 @@ msgstr "Commit your changes with the message, ``$ git commit -m \"<commit messag msgid "Configuration mode pages" msgstr "Configuration mode pages" -#: ../../documentation.rst:84 +#: ../../documentation.rst:389 msgid "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" msgstr "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" -#: ../../documentation.rst:180 +#: ../../documentation.rst:157 msgid "Cross-References" msgstr "Cross-References" -#: ../../documentation.rst:268 +#: ../../documentation.rst:245 msgid "Custom Sphinx-doc Markup" msgstr "Custom Sphinx-doc Markup" -#: ../../documentation.rst:270 +#: ../../documentation.rst:247 msgid "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." msgstr "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." -#: ../../documentation.rst:45 +#: ../../documentation.rst:94 +msgid "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." +msgstr "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." + +#: ../../documentation.rst:115 +msgid "Described procedures for debugging a service:" +msgstr "Described procedures for debugging a service:" + +#: ../../documentation.rst:43 msgid "Don't forget to update ``index.rst`` when adding a new node." msgstr "Don't forget to update ``index.rst`` when adding a new node." -#: ../../documentation.rst:259 +#: ../../documentation.rst:236 msgid "Each GitHub pull request is automatically linted to check the address space and line length." msgstr "Each GitHub pull request is automatically linted to check the address space and line length." -#: ../../documentation.rst:252 +#: ../../documentation.rst:81 +msgid "Each page must contain the following parts:" +msgstr "Each page must contain the following parts:" + +#: ../../documentation.rst:229 msgid "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." msgstr "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." -#: ../../documentation.rst:292 +#: ../../documentation.rst:269 msgid "For an inline configuration level command, use ``:cfgcmd:``" msgstr "For an inline configuration level command, use ``:cfgcmd:``" -#: ../../documentation.rst:328 +#: ../../documentation.rst:305 msgid "For an inline operational level command, use ``:opcmd:``" msgstr "For an inline operational level command, use ``:opcmd:``" -#: ../../documentation.rst:186 +#: ../../documentation.rst:163 msgid "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." msgstr "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." -#: ../../documentation.rst:405 +#: ../../documentation.rst:70 msgid "For example:" msgstr "For example:" -#: ../../documentation.rst:76 +#: ../../documentation.rst:381 msgid "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" msgstr "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" -#: ../../documentation.rst:58 +#: ../../documentation.rst:363 msgid "Forking Workflow" msgstr "Forking Workflow" @@ -128,6 +160,10 @@ msgstr "Forking Workflow" msgid "Formating and Sphinxmarkup" msgstr "Formating and Sphinxmarkup" +#: ../../documentation.rst:127 +msgid "Formatting and Sphinxmarkup" +msgstr "Formatting and Sphinxmarkup" + #: ../../documentation.rst:432 msgid "General concepts for troubleshooting and detailed process descriptions belong here." msgstr "General concepts for troubleshooting and detailed process descriptions belong here." @@ -140,7 +176,11 @@ msgstr "Guidelines" msgid "If there some troubleshooting guides related to the commands. Explain it in the next optional part." msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part." -#: ../../documentation.rst:143 +#: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" @@ -152,43 +192,43 @@ msgstr "If you are willing to contribute to our documentation this is the defini msgid "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." msgstr "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." -#: ../../documentation.rst:417 +#: ../../documentation.rst:75 msgid "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." msgstr "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." -#: ../../documentation.rst:50 +#: ../../documentation.rst:48 msgid "Indent with two spaces." msgstr "Indent with two spaces." -#: ../../documentation.rst:81 +#: ../../documentation.rst:386 msgid "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" msgstr "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" -#: ../../documentation.rst:49 +#: ../../documentation.rst:47 msgid "Leave a newline before and after a header." msgstr "Leave a newline before and after a header." -#: ../../documentation.rst:250 +#: ../../documentation.rst:227 msgid "Limit all lines to a maximum of 80 characters." msgstr "Limit all lines to a maximum of 80 characters." -#: ../../documentation.rst:248 +#: ../../documentation.rst:225 msgid "Line length" msgstr "Line length" -#: ../../documentation.rst:87 +#: ../../documentation.rst:392 msgid "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." msgstr "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." -#: ../../documentation.rst:242 +#: ../../documentation.rst:219 msgid "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" msgstr "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" -#: ../../documentation.rst:231 +#: ../../documentation.rst:208 msgid "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" msgstr "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" -#: ../../documentation.rst:118 +#: ../../documentation.rst:423 msgid "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" msgstr "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" @@ -200,39 +240,43 @@ msgstr "Operation mode commands that do not fit in a related configuration mode msgid "Operation mode pages" msgstr "Operation mode pages" -#: ../../documentation.rst:385 +#: ../../documentation.rst:56 msgid "Page content" msgstr "Page content" -#: ../../documentation.rst:244 +#: ../../documentation.rst:221 msgid "Please do not use other public address space." msgstr "Please do not use other public address space." -#: ../../documentation.rst:47 +#: ../../documentation.rst:101 +msgid "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." +msgstr "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." + +#: ../../documentation.rst:45 msgid "Properly quote commands, filenames and brief code snippets with double backticks." msgstr "Properly quote commands, filenames and brief code snippets with double backticks." -#: ../../documentation.rst:112 +#: ../../documentation.rst:417 msgid "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" msgstr "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" -#: ../../documentation.rst:420 +#: ../../documentation.rst:78 msgid "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." msgstr "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." -#: ../../documentation.rst:262 +#: ../../documentation.rst:239 msgid "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." msgstr "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." -#: ../../documentation.rst:147 +#: ../../documentation.rst:124 msgid "Style Guide" msgstr "Style Guide" -#: ../../documentation.rst:114 +#: ../../documentation.rst:419 msgid "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." msgstr "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." -#: ../../documentation.rst:153 +#: ../../documentation.rst:130 msgid "TOC Level" msgstr "TOC Level" @@ -240,7 +284,7 @@ msgstr "TOC Level" msgid "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." msgstr "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." -#: ../../documentation.rst:60 +#: ../../documentation.rst:365 msgid "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." msgstr "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." @@ -248,7 +292,7 @@ msgstr "The Forking Workflow is fundamentally different from other popular Git w msgid "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." msgstr "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." -#: ../../documentation.rst:401 +#: ../../documentation.rst:66 msgid "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." msgstr "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." @@ -260,51 +304,59 @@ msgstr "The documentation has 3 different types of pages. The same kind of pages msgid "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." msgstr "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." -#: ../../documentation.rst:41 +#: ../../documentation.rst:39 msgid "The following is a quick summary of the rules:" msgstr "The following is a quick summary of the rules:" -#: ../../documentation.rst:66 +#: ../../documentation.rst:371 msgid "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." msgstr "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." -#: ../../documentation.rst:199 +#: ../../documentation.rst:176 msgid "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." msgstr "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." +#: ../../documentation.rst:86 +msgid "Theoretical information required for users to understand the next document sections:" +msgstr "Theoretical information required for users to understand the next document sections:" + #: ../../documentation.rst:35 msgid "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." msgstr "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." -#: ../../documentation.rst:299 +#: ../../documentation.rst:107 +msgid "This section must contain a list of:" +msgstr "This section must contain a list of:" + +#: ../../documentation.rst:276 msgid "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." msgstr "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." -#: ../../documentation.rst:337 +#: ../../documentation.rst:314 msgid "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." msgstr "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." -#: ../../documentation.rst:46 +#: ../../documentation.rst:44 msgid "Try not to exceed 80 characters per line, but don't break URLs over this." msgstr "Try not to exceed 80 characters per line, but don't break URLs over this." -#: ../../documentation.rst:241 +#: ../../documentation.rst:218 msgid "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" msgstr "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" -#: ../../documentation.rst:73 +#: ../../documentation.rst:378 msgid "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." msgstr "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." -#: ../../documentation.rst:43 +#: ../../documentation.rst:41 msgid "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." msgstr "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." -#: ../../documentation.rst:48 +#: ../../documentation.rst:46 msgid "Use literal blocks for longer snippets." msgstr "Use literal blocks for longer snippets." -#: ../../documentation.rst:99 +#: ../../documentation.rst:404 msgid "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." msgstr "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." @@ -312,35 +364,39 @@ msgstr "View modified files by calling ``$ git status``. You will get an overvie msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +#: ../../documentation.rst:20 +msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." + #: ../../documentation.rst:9 msgid "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." msgstr "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." -#: ../../documentation.rst:155 +#: ../../documentation.rst:132 msgid "We use the following syntax for Headlines." msgstr "We use the following syntax for Headlines." -#: ../../documentation.rst:277 +#: ../../documentation.rst:254 msgid "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." msgstr "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." -#: ../../documentation.rst:316 +#: ../../documentation.rst:293 msgid "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." msgstr "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." -#: ../../documentation.rst:51 +#: ../../documentation.rst:49 msgid "When in doubt, follow the style of existing documentation." msgstr "When in doubt, follow the style of existing documentation." -#: ../../documentation.rst:375 +#: ../../documentation.rst:352 msgid "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." msgstr "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." -#: ../../documentation.rst:319 +#: ../../documentation.rst:296 msgid "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." -#: ../../documentation.rst:282 +#: ../../documentation.rst:259 msgid "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." @@ -352,66 +408,98 @@ msgstr "Write Documentation" msgid "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." msgstr "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." -#: ../../documentation.rst:133 +#: ../../documentation.rst:29 +msgid "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." +msgstr "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." + +#: ../../documentation.rst:438 msgid "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." msgstr "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." -#: ../../documentation.rst:235 +#: ../../documentation.rst:212 msgid "``192.0.2.0/24``" msgstr "``192.0.2.0/24``" -#: ../../documentation.rst:236 +#: ../../documentation.rst:213 msgid "``198.51.100.0/24``" msgstr "``198.51.100.0/24``" -#: ../../documentation.rst:238 +#: ../../documentation.rst:215 msgid "``2001:db8::/32``" msgstr "``2001:db8::/32``" -#: ../../documentation.rst:237 +#: ../../documentation.rst:214 msgid "``203.0.113.0/24``" msgstr "``203.0.113.0/24``" -#: ../../documentation.rst:194 +#: ../../documentation.rst:171 msgid "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" msgstr "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" -#: ../../documentation.rst:190 +#: ../../documentation.rst:167 msgid "``:ref:`configuration/interfaces/ethernet:vlan``" msgstr "``:ref:`configuration/interfaces/ethernet:vlan``" -#: ../../documentation.rst:407 +#: ../../documentation.rst:72 msgid "``set firewall zone`` is written in ``firewall/zone.rst``" msgstr "``set firewall zone`` is written in ``firewall/zone.rst``" -#: ../../documentation.rst:408 +#: ../../documentation.rst:73 msgid "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" msgstr "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" -#: ../../documentation.rst:275 +#: ../../documentation.rst:88 +msgid "a simple explanation of what is this page about, why or when it is required to be used" +msgstr "a simple explanation of what is this page about, why or when it is required to be used" + +#: ../../documentation.rst:252 msgid "cfgcmd" msgstr "cfgcmd" -#: ../../documentation.rst:335 +#: ../../documentation.rst:312 msgid "cmdinclude" msgstr "cmdinclude" -#: ../../documentation.rst:197 +#: ../../documentation.rst:174 msgid "handle build errors" msgstr "handle build errors" -#: ../../documentation.rst:314 +#: ../../documentation.rst:117 +msgid "how to collect logs or other debugging information (like `show` commands output)" +msgstr "how to collect logs or other debugging information (like `show` commands output)" + +#: ../../documentation.rst:118 +msgid "how to read and what to search for in logs and collected information" +msgstr "how to read and what to search for in logs and collected information" + +#: ../../documentation.rst:109 +msgid "known issues or potential problems for the service or use case" +msgstr "known issues or potential problems for the service or use case" + +#: ../../documentation.rst:291 msgid "opcmd" msgstr "opcmd" -#: ../../documentation.rst:346 +#: ../../documentation.rst:89 +msgid "references to standards, RFCs" +msgstr "references to standards, RFCs" + +#: ../../documentation.rst:323 msgid "the content of interface-address.txt looks like this" msgstr "the content of interface-address.txt looks like this" -#: ../../documentation.rst:192 +#: ../../documentation.rst:169 msgid "to use an alternative hyperlink use it this way:" msgstr "to use an alternative hyperlink use it this way:" -#: ../../documentation.rst:373 +#: ../../documentation.rst:350 msgid "vytask" msgstr "vytask" + +#: ../../documentation.rst:119 +msgid "what are indicators of good and bad states in debugging outputs" +msgstr "what are indicators of good and bad states in debugging outputs" + +#: ../../documentation.rst:110 +msgid "workarounds for known issues (if any exist)" +msgstr "workarounds for known issues (if any exist)" diff --git a/docs/_locale/ja/installation.pot b/docs/_locale/ja/installation.pot index fab479b9..2b7831cd 100644 --- a/docs/_locale/ja/installation.pot +++ b/docs/_locale/ja/installation.pot @@ -212,6 +212,10 @@ msgstr "Add one or more routes for networks you want to pass through the VyOS VM msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." +#: ../../installation/cloud/aws.rst:27 +msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." +msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." + #: ../../installation/vyos-on-baremetal.rst:394 msgid "Advanced > Serial Port Console Redirection > Console Redirection Settings:" msgstr "Advanced > Serial Port Console Redirection > Console Redirection Settings:" @@ -465,6 +469,10 @@ msgstr "Clients (where VyOS is to be installed) with a PXE-enabled NIC" msgid "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." msgstr "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +#: ../../installation/cloud/aws.rst:88 +msgid "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +msgstr "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." + #: ../../installation/cloud/aws.rst:82 msgid "CloudWatch SSM Configuration creation" msgstr "CloudWatch SSM Configuration creation" @@ -1303,6 +1311,10 @@ msgstr "Requirements" msgid "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." msgstr "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +#: ../../installation/cloud/aws.rst:69 +msgid "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +msgstr "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." + #: ../../installation/install.rst:74 msgid "Rolling Release" msgstr "Rolling Release" diff --git a/docs/_locale/ja/quick-start.pot b/docs/_locale/ja/quick-start.pot index 1823bbf8..0a8e0385 100644 --- a/docs/_locale/ja/quick-start.pot +++ b/docs/_locale/ja/quick-start.pot @@ -101,6 +101,10 @@ msgid "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAG msgstr "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:" #: ../../quick-start.rst:243 +msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." +msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." + +#: ../../quick-start.rst:243 msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." @@ -292,6 +296,10 @@ msgstr "To make firewall configuration easier, we can create groups of interface msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." +#: ../../quick-start.rst:164 +msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." +msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." + #: ../../quick-start.rst:90 msgid "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" msgstr "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" diff --git a/docs/_locale/pt/LC_MESSAGES/automation.mo b/docs/_locale/pt/LC_MESSAGES/automation.mo Binary files differindex e9c17d9e..2167fbe2 100644 --- a/docs/_locale/pt/LC_MESSAGES/automation.mo +++ b/docs/_locale/pt/LC_MESSAGES/automation.mo diff --git a/docs/_locale/pt/LC_MESSAGES/cli.mo b/docs/_locale/pt/LC_MESSAGES/cli.mo Binary files differindex eebe0051..206ed847 100644 --- a/docs/_locale/pt/LC_MESSAGES/cli.mo +++ b/docs/_locale/pt/LC_MESSAGES/cli.mo diff --git a/docs/_locale/pt/LC_MESSAGES/configexamples.mo b/docs/_locale/pt/LC_MESSAGES/configexamples.mo Binary files differindex dff77ff7..0d14b40f 100644 --- a/docs/_locale/pt/LC_MESSAGES/configexamples.mo +++ b/docs/_locale/pt/LC_MESSAGES/configexamples.mo diff --git a/docs/_locale/pt/LC_MESSAGES/configuration.mo b/docs/_locale/pt/LC_MESSAGES/configuration.mo Binary files differindex d048c623..34c7846c 100644 --- a/docs/_locale/pt/LC_MESSAGES/configuration.mo +++ b/docs/_locale/pt/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/pt/LC_MESSAGES/contributing.mo b/docs/_locale/pt/LC_MESSAGES/contributing.mo Binary files differindex 45d920c0..3eabef9b 100644 --- a/docs/_locale/pt/LC_MESSAGES/contributing.mo +++ b/docs/_locale/pt/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/pt/LC_MESSAGES/copyright.mo b/docs/_locale/pt/LC_MESSAGES/copyright.mo Binary files differindex 68bcfd08..092931ce 100644 --- a/docs/_locale/pt/LC_MESSAGES/copyright.mo +++ b/docs/_locale/pt/LC_MESSAGES/copyright.mo diff --git a/docs/_locale/pt/LC_MESSAGES/documentation.mo b/docs/_locale/pt/LC_MESSAGES/documentation.mo Binary files differindex f7c88653..a5bbfec6 100644 --- a/docs/_locale/pt/LC_MESSAGES/documentation.mo +++ b/docs/_locale/pt/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/pt/LC_MESSAGES/installation.mo b/docs/_locale/pt/LC_MESSAGES/installation.mo Binary files differindex ccb5df93..b94e98d8 100644 --- a/docs/_locale/pt/LC_MESSAGES/installation.mo +++ b/docs/_locale/pt/LC_MESSAGES/installation.mo diff --git a/docs/_locale/pt/LC_MESSAGES/quick-start.mo b/docs/_locale/pt/LC_MESSAGES/quick-start.mo Binary files differindex 7bbab8c6..50f024af 100644 --- a/docs/_locale/pt/LC_MESSAGES/quick-start.mo +++ b/docs/_locale/pt/LC_MESSAGES/quick-start.mo diff --git a/docs/_locale/pt/automation.pot b/docs/_locale/pt/automation.pot index 92be3d32..6494fae3 100644 --- a/docs/_locale/pt/automation.pot +++ b/docs/_locale/pt/automation.pot @@ -8,55 +8,100 @@ msgstr "" "Language: pt\n" "Plural-Forms: nplurals=2; plural=(n>=0 && n<=1) ? 0 : 1;\n" +#: ../../automation/terraform/index.rst:15 +msgid "# terraformAZ # terraformvSphere # terraformGoogle" +msgstr "# terraformAZ # terraformvSphere # terraformGoogle" + +#: ../../automation/vyos-terraform.rst:707 +msgid "#az login" +msgstr "#az login" + +#: ../../automation/vyos-terraform.rst:261 +#: ../../automation/vyos-terraform.rst:283 +#: ../../automation/vyos-terraform.rst:711 +#: ../../automation/vyos-terraform.rst:731 +#: ../../automation/vyos-terraform.rst:1008 +#: ../../automation/vyos-terraform.rst:1029 +msgid "#cd /your folder" +msgstr "#cd /your folder" + +#: ../../automation/vyos-terraform.rst:287 +#: ../../automation/vyos-terraform.rst:735 +#: ../../automation/vyos-terraform.rst:1033 +msgid "#terraform apply" +msgstr "#terraform apply" + +#: ../../automation/vyos-terraform.rst:263 +#: ../../automation/vyos-terraform.rst:713 +#: ../../automation/vyos-terraform.rst:1010 +msgid "#terraform init" +msgstr "#terraform init" + +#: ../../automation/vyos-terraform.rst:285 +#: ../../automation/vyos-terraform.rst:733 +#: ../../automation/vyos-terraform.rst:1031 +msgid "#terraform plan" +msgstr "#terraform plan" + +#: ../../automation/vyos-terraform.rst:289 +#: ../../automation/vyos-terraform.rst:737 +#: ../../automation/vyos-terraform.rst:1035 +msgid "#yes" +msgstr "#yes" + +#: ../../automation/cloud-init.rst:366 +msgid "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." +msgstr "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." + #: ../../automation/cloud-init.rst:363 msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." msgstr "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." -#: ../../automation/cloud-init.rst:305 +#: ../../automation/cloud-init.rst:308 msgid "**meta-data**: empty file (required)." msgstr "**meta-data**: empty file (required)." -#: ../../automation/cloud-init.rst:300 +#: ../../automation/cloud-init.rst:303 msgid "**network-config**: file that will indicate to avoid dhcp client on first interface." msgstr "**network-config**: file that will indicate to avoid dhcp client on first interface." -#: ../../automation/cloud-init.rst:333 +#: ../../automation/cloud-init.rst:336 msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface." msgstr "**network-config** file only has configuration that disables the automatic dhcp client on first interface." -#: ../../automation/cloud-init.rst:303 +#: ../../automation/cloud-init.rst:306 msgid "**user-data**: includes vyos-commands." msgstr "**user-data**: includes vyos-commands." -#: ../../automation/cloud-init.rst:314 +#: ../../automation/cloud-init.rst:317 msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" msgstr "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" -#: ../../automation/vyos-api.rst:322 +#: ../../automation/vyos-api.rst:355 msgid "/config-file" msgstr "/config-file" -#: ../../automation/vyos-api.rst:265 +#: ../../automation/vyos-api.rst:298 msgid "/configure" msgstr "/configure" -#: ../../automation/vyos-api.rst:246 +#: ../../automation/vyos-api.rst:278 msgid "/generate" msgstr "/generate" -#: ../../automation/vyos-api.rst:184 +#: ../../automation/vyos-api.rst:216 msgid "/image" msgstr "/image" -#: ../../automation/vyos-api.rst:165 +#: ../../automation/vyos-api.rst:197 msgid "/poweroff" msgstr "/poweroff" -#: ../../automation/vyos-api.rst:147 +#: ../../automation/vyos-api.rst:179 msgid "/reboot" msgstr "/reboot" -#: ../../automation/vyos-api.rst:129 +#: ../../automation/vyos-api.rst:161 msgid "/reset" msgstr "/reset" @@ -64,19 +109,276 @@ msgstr "/reset" msgid "/retrieve" msgstr "/retrieve" -#: ../../automation/vyos-api.rst:222 +#: ../../automation/vyos-api.rst:254 msgid "/show" msgstr "/show" +#: ../../automation/vyos-terraform.rst:993 +msgid "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" +msgstr "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:61 +msgid "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/vyos-terraform.rst:692 +msgid "1.1 Create an account with Azure" +msgstr "1.1 Create an account with Azure" + +#: ../../automation/vyos-terraform.rst:243 +msgid "1.2 Create a key pair and download your .pem key" +msgstr "1.2 Create a key pair and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:63 +msgid "1.2 Create a key pair_ and download your .pem key" +msgstr "1.2 Create a key pair_ and download your .pem key" + +#: ../../automation/vyos-terraform.rst:245 +msgid "1.3 Create a security group for the new VyOS instance" +msgstr "1.3 Create a security group for the new VyOS instance" + +#: ../../automation/terraform/terraformAWS.rst:70 +msgid "1.3 Create a security group_ for the new VyOS instance and open all traffic" +msgstr "1.3 Create a security group_ for the new VyOS instance and open all traffic" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/terraform/terraformAWS.rst:266 +msgid "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." +msgstr "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." + +#: ../../automation/terraform/terraformvSphere.rst:23 +msgid "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" +msgstr "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:77 +#: ../../automation/terraform/terraformAZ.rst:54 +#: ../../automation/terraform/terraformGoogle.rst:76 +#: ../../automation/terraform/terraformvSphere.rst:53 +msgid "1 Create an UNIX instance whenever you want (local, cloud, and so on)" +msgstr "1 Create an UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:54 +#: ../../automation/terraform/terraformAZ.rst:26 +#: ../../automation/terraform/terraformGoogle.rst:52 +#: ../../automation/terraform/terraformvSphere.rst:29 +msgid "1 Create an UNIX or Windows instance" +msgstr "1 Create an UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:29 +msgid "1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/terraform/terraformAZ.rst:21 +msgid "1 Create an account with Azure" +msgstr "1 Create an account with Azure" + +#: ../../automation/terraform/terraformGoogle.rst:22 +msgid "1 Create an account with google cloud and a new project" +msgstr "1 Create an account with google cloud and a new project" + +#: ../../automation/terraform/terraformGoogle.rst:344 +msgid "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." +msgstr "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." + +#: ../../automation/terraform/terraformAWS.rst:86 +msgid "2.1 Create a0 UNIX or Windows instance" +msgstr "2.1 Create a0 UNIX or Windows instance" + +#: ../../automation/vyos-terraform.rst:250 +#: ../../automation/vyos-terraform.rst:697 +#: ../../automation/vyos-terraform.rst:998 +msgid "2.1 Create a UNIX or Windows instance" +msgstr "2.1 Create a UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:88 +msgid "2.2 Download and install Terraform" +msgstr "2.2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:90 +msgid "2.3 Create the folder for example /root/awsterraform" +msgstr "2.3 Create the folder for example /root/awsterraform" + +#: ../../automation/vyos-terraform.rst:254 +msgid "2.3 Create the folder for example ../awsvyos/" +msgstr "2.3 Create the folder for example ../awsvyos/" + +#: ../../automation/vyos-terraform.rst:701 +msgid "2.3 Create the folder for example ../azvyos/" +msgstr "2.3 Create the folder for example ../azvyos/" + +#: ../../automation/vyos-terraform.rst:1002 +msgid "2.3 Create the folder for example ../vsphere/" +msgstr "2.3 Create the folder for example ../vsphere/" + +#: ../../automation/vyos-terraform.rst:1004 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project" + +#: ../../automation/vyos-terraform.rst:703 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" + +#: ../../automation/terraform/terraformAWS.rst:96 +msgid "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" +msgstr "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" + +#: ../../automation/vyos-terraform.rst:256 +msgid "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" +msgstr "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" + +#: ../../automation/vyos-terraform.rst:705 +msgid "2.5 Login with Azure using the command" +msgstr "2.5 Login with Azure using the command" + +#: ../../automation/terraform/terraformAWS.rst:98 +msgid "2.5 Type the commands :" +msgstr "2.5 Type the commands :" + +#: ../../automation/terraform/terraformAZ.rst:44 +msgid "2.6 Type the commands :" +msgstr "2.6 Type the commands :" + +#: ../../automation/terraform/terraformAWS.rst:31 +msgid "2 Create a key pair_ and download your .pem key" +msgstr "2 Create a key pair_ and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:79 +#: ../../automation/terraform/terraformAZ.rst:56 +#: ../../automation/terraform/terraformGoogle.rst:78 +#: ../../automation/terraform/terraformvSphere.rst:55 +msgid "2 Download and install Ansible" +msgstr "2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:56 +#: ../../automation/terraform/terraformAZ.rst:28 +#: ../../automation/terraform/terraformGoogle.rst:54 +#: ../../automation/terraform/terraformvSphere.rst:31 +msgid "2 Download and install Terraform" +msgstr "2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:270 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" + +#: ../../automation/terraform/terraformGoogle.rst:347 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" + +#: ../../automation/vyos-terraform.rst:268 +#: ../../automation/vyos-terraform.rst:718 +#: ../../automation/vyos-terraform.rst:1016 +msgid "3.1 Create a UNIX instance" +msgstr "3.1 Create a UNIX instance" + +#: ../../automation/terraform/terraformAWS.rst:109 +msgid "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" +msgstr "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:111 +msgid "3.2 Download and install Ansible" +msgstr "3.2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:113 +msgid "3.3 Create the folder for example /root/aws/" +msgstr "3.3 Create the folder for example /root/aws/" + +#: ../../automation/vyos-terraform.rst:722 +msgid "3.3 Create the folder for example /root/az/" +msgstr "3.3 Create the folder for example /root/az/" + +#: ../../automation/vyos-terraform.rst:1020 +msgid "3.3 Create the folder for example /root/vsphere/" +msgstr "3.3 Create the folder for example /root/vsphere/" + +#: ../../automation/vyos-terraform.rst:274 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" + +#: ../../automation/vyos-terraform.rst:724 +#: ../../automation/vyos-terraform.rst:1022 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" + +#: ../../automation/terraform/terraformAWS.rst:115 +msgid "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAWS.rst:81 +msgid "3 Create the folder for example /root/aws/" +msgstr "3 Create the folder for example /root/aws/" + +#: ../../automation/terraform/terraformAWS.rst:58 +msgid "3 Create the folder for example /root/awsterraform" +msgstr "3 Create the folder for example /root/awsterraform" + +#: ../../automation/terraform/terraformAZ.rst:58 +msgid "3 Create the folder for example /root/az/" +msgstr "3 Create the folder for example /root/az/" + +#: ../../automation/terraform/terraformAZ.rst:30 +msgid "3 Create the folder for example /root/azvyos/" +msgstr "3 Create the folder for example /root/azvyos/" + +#: ../../automation/terraform/terraformGoogle.rst:56 +msgid "3 Create the folder for example /root/google" +msgstr "3 Create the folder for example /root/google" + +#: ../../automation/terraform/terraformGoogle.rst:80 +msgid "3 Create the folder for example /root/google/" +msgstr "3 Create the folder for example /root/google/" + +#: ../../automation/terraform/terraformvSphere.rst:33 +msgid "3 Create the folder for example /root/vsphereterraform" +msgstr "3 Create the folder for example /root/vsphereterraform" + +#: ../../automation/terraform/terraformvSphere.rst:57 +msgid "3 Create the folder for example /root/vsphereterraform/" +msgstr "3 Create the folder for example /root/vsphereterraform/" + +#: ../../automation/terraform/terraformAWS.rst:123 +msgid "4.1 Type the commands on your Terrafom instance:" +msgstr "4.1 Type the commands on your Terrafom instance:" + +#: ../../automation/terraform/terraformAWS.rst:83 +msgid "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAZ.rst:60 +msgid "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" +msgstr "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" + +#: ../../automation/terraform/terraformGoogle.rst:82 +msgid "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" +msgstr "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" + +#: ../../automation/terraform/terraformvSphere.rst:59 +msgid "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" +msgstr "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" + #: ../../automation/vyos-api.rst:41 msgid "API Endpoints" msgstr "API Endpoints" +#: ../../automation/terraform/terraformAWS.rst:26 +msgid "AWS" +msgstr "AWS" + +#: ../../automation/vyos-terraform.rst:233 +msgid "AWS_terraform_ansible_single_vyos_instance" +msgstr "AWS_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:273 +msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." + #: ../../automation/cloud-init.rst:270 msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." -#: ../../automation/cloud-init.rst:63 +#: ../../automation/cloud-init.rst:64 msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." msgstr "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." @@ -84,7 +386,7 @@ msgstr "A cloud-config document is written in YAML. The file must begin with ``# msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." msgstr "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." -#: ../../automation/cloud-init.rst:82 +#: ../../automation/cloud-init.rst:83 msgid "A single-quote symbol is not allowed inside command or value." msgstr "A single-quote symbol is not allowed inside command or value." @@ -92,18 +394,53 @@ msgstr "A single-quote symbol is not allowed inside command or value." msgid "Accept minion key" msgstr "Accept minion key" +#: ../../automation/terraform/terraformAWS.rst:255 +msgid "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformAZ.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformGoogle.rst:333 +msgid "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformvSphere.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/cloud-init.rst:92 +msgid "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." +msgstr "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." + #: ../../automation/vyos-api.rst:15 msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." msgstr "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." -#: ../../automation/cloud-init.rst:115 +#: ../../automation/terraform/terraformAWS.rst:539 +#: ../../automation/terraform/terraformAZ.rst:484 +#: ../../automation/terraform/terraformGoogle.rst:705 +#: ../../automation/terraform/terraformvSphere.rst:397 +msgid "All files about the article can be found here_" +msgstr "All files about the article can be found here_" + +#: ../../automation/cloud-init.rst:119 msgid "All of these can be overridden using the configuration in user-data." msgstr "All of these can be overridden using the configuration in user-data." -#: ../../automation/cloud-init.rst:256 +#: ../../automation/terraform/terraformAWS.rst:267 +msgid "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/cloud-init.rst:259 msgid "Also, this lab considers:" msgstr "Also, this lab considers:" +#: ../../automation/terraform/terraformAWS.rst:74 +#: ../../automation/terraform/terraformAZ.rst:51 +#: ../../automation/terraform/terraformGoogle.rst:73 +#: ../../automation/terraform/terraformvSphere.rst:50 #: ../../automation/vyos-ansible.rst:6 msgid "Ansible" msgstr "Ansible" @@ -121,7 +458,16 @@ msgstr "At this step we can get some op-mode information from VyOS nodes:" msgid "Authentication" msgstr "Authentication" -#: ../../automation/cloud-init.rst:241 +#: ../../automation/terraform/terraformAZ.rst:19 +msgid "Azure" +msgstr "Azure" + +#: ../../automation/vyos-terraform.rst:684 +#: ../../automation/vyos-terraform.rst:985 +msgid "Azure_terraform_ansible_single_vyos_instance" +msgstr "Azure_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:244 msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." msgstr "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." @@ -145,11 +491,11 @@ msgstr "Check that salt master can communicate with minions" msgid "Cloud-config modules" msgstr "Cloud-config modules" -#: ../../automation/cloud-init.rst:420 +#: ../../automation/cloud-init.rst:423 msgid "Cloud-init `network-config-docs`_." msgstr "Cloud-init `network-config-docs`_." -#: ../../automation/cloud-init.rst:239 +#: ../../automation/cloud-init.rst:242 msgid "Cloud-init on Proxmox" msgstr "Cloud-init on Proxmox" @@ -157,7 +503,7 @@ msgstr "Cloud-init on Proxmox" msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." msgstr "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." -#: ../../automation/cloud-init.rst:120 +#: ../../automation/cloud-init.rst:124 msgid "Command Execution at Initial Boot" msgstr "Command Execution at Initial Boot" @@ -165,11 +511,11 @@ msgstr "Command Execution at Initial Boot" msgid "Command Scripting" msgstr "Command Scripting" -#: ../../automation/cloud-init.rst:356 +#: ../../automation/cloud-init.rst:359 msgid "Command for generating ``seed.iso``" msgstr "Command for generating ``seed.iso``" -#: ../../automation/cloud-init.rst:78 +#: ../../automation/cloud-init.rst:79 msgid "Commands requirements:" msgstr "Commands requirements:" @@ -186,51 +532,55 @@ msgstr "Configuration" msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" msgstr "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" -#: ../../automation/vyos-pyvyos.rst:94 +#: ../../automation/vyos-pyvyos.rst:102 msgid "Configure, then Delete Object" msgstr "Configure, then Delete Object" -#: ../../automation/vyos-pyvyos.rst:141 +#: ../../automation/vyos-pyvyos.rst:149 msgid "Configure, then Load File" msgstr "Configure, then Load File" -#: ../../automation/vyos-pyvyos.rst:101 +#: ../../automation/vyos-pyvyos.rst:109 msgid "Configure, then Save" msgstr "Configure, then Save" -#: ../../automation/vyos-pyvyos.rst:108 +#: ../../automation/vyos-pyvyos.rst:116 msgid "Configure, then Save File" msgstr "Configure, then Save File" -#: ../../automation/vyos-pyvyos.rst:68 +#: ../../automation/vyos-pyvyos.rst:76 msgid "Configure, then Set" msgstr "Configure, then Set" -#: ../../automation/vyos-pyvyos.rst:85 +#: ../../automation/vyos-pyvyos.rst:93 msgid "Configure, then Show Object" msgstr "Configure, then Show Object" -#: ../../automation/vyos-pyvyos.rst:77 +#: ../../automation/vyos-pyvyos.rst:85 msgid "Configure, then Show a Single Object Value" msgstr "Configure, then Show a Single Object Value" +#: ../../automation/terraform/index.rst:5 +msgid "Content" +msgstr "Content" + #: ../../automation/vyos-napalm.rst:89 msgid "Content of commands.conf" msgstr "Content of commands.conf" -#: ../../automation/cloud-init.rst:337 +#: ../../automation/cloud-init.rst:340 msgid "Content of network-config file:" msgstr "Content of network-config file:" -#: ../../automation/cloud-init.rst:351 +#: ../../automation/cloud-init.rst:354 msgid "Create seed.iso" msgstr "Create seed.iso" -#: ../../automation/cloud-init.rst:189 +#: ../../automation/cloud-init.rst:193 msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." msgstr "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." -#: ../../automation/cloud-init.rst:368 +#: ../../automation/cloud-init.rst:371 msgid "Creating the VM" msgstr "Creating the VM" @@ -238,10 +588,38 @@ msgstr "Creating the VM" msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." msgstr "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." -#: ../../automation/cloud-init.rst:113 +#: ../../automation/cloud-init.rst:117 msgid "DHCP on first Ethernet interface if no network configuration is provided." msgstr "DHCP on first Ethernet interface if no network configuration is provided." +#: ../../automation/terraform/terraformAWS.rst:6 +msgid "Deploying VyOS in the AWS cloud" +msgstr "Deploying VyOS in the AWS cloud" + +#: ../../automation/terraform/terraformAZ.rst:6 +msgid "Deploying VyOS in the Azure cloud" +msgstr "Deploying VyOS in the Azure cloud" + +#: ../../automation/terraform/terraformGoogle.rst:6 +msgid "Deploying VyOS in the google cloud" +msgstr "Deploying VyOS in the google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:6 +msgid "Deploying VyOS in the vSphere infrastructure" +msgstr "Deploying VyOS in the vSphere infrastructure" + +#: ../../automation/terraform/terraformAWS.rst:39 +msgid "Deploying vyos in the AWS cloud" +msgstr "Deploying vyos in the AWS cloud" + +#: ../../automation/vyos-terraform.rst:299 +msgid "Deploying vyos in the Azure cloud" +msgstr "Deploying vyos in the Azure cloud" + +#: ../../automation/vyos-terraform.rst:742 +msgid "Deploying vyos in the Vsphere infrastructia" +msgstr "Deploying vyos in the Vsphere infrastructia" + #: ../../automation/vyos-netmiko.rst:12 msgid "Example" msgstr "Example" @@ -274,10 +652,46 @@ msgstr "Executing pre-hooks/post-hooks Scripts" msgid "File contents" msgstr "File contents" -#: ../../automation/cloud-init.rst:284 +#: ../../automation/terraform/terraformAWS.rst:476 +msgid "File contents of Ansible for AWS" +msgstr "File contents of Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:426 +msgid "File contents of Ansible for Azure" +msgstr "File contents of Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:651 +msgid "File contents of Ansible for google cloud" +msgstr "File contents of Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:338 +msgid "File contents of Ansible for vSphere" +msgstr "File contents of Ansible for vSphere" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "File contents of Terrafom for AWS" +msgstr "File contents of Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:93 +msgid "File contents of Terrafom for Azure" +msgstr "File contents of Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:375 +msgid "File contents of Terrafom for google cloud" +msgstr "File contents of Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:96 +msgid "File contents of Terrafom for vSphere" +msgstr "File contents of Terrafom for vSphere" + +#: ../../automation/cloud-init.rst:287 msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" msgstr "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" +#: ../../automation/cloud-init.rst:350 +msgid "Finally, file **meta-data** has no content, but it's required." +msgstr "Finally, file **meta-data** has no content, but it's required." + #: ../../automation/cloud-init.rst:347 msgid "Finaly, file **meta-data** has no content, but it's required." msgstr "Finaly, file **meta-data** has no content, but it's required." @@ -290,11 +704,15 @@ msgstr "For configuration/upgrade management issues, modification of this script msgid "For configuration and enabling the API see :ref:`http-api`" msgstr "For configuration and enabling the API see :ref:`http-api`" +#: ../../automation/vyos-api.rst:130 +msgid "For example, check an existing path:" +msgstr "For example, check an existing path:" + #: ../../automation/vyos-api.rst:109 msgid "For example, get the addresses of a ``dum0`` interface." msgstr "For example, get the addresses of a ``dum0`` interface." -#: ../../automation/vyos-api.rst:226 +#: ../../automation/vyos-api.rst:258 msgid "For example, show which images are installed." msgstr "For example, show which images are installed." @@ -302,19 +720,27 @@ msgstr "For example, show which images are installed." msgid "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." msgstr "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." -#: ../../automation/cloud-init.rst:411 +#: ../../automation/cloud-init.rst:221 +msgid "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." +msgstr "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." + +#: ../../automation/cloud-init.rst:414 msgid "From cli or GUI, power on VM, and after it boots, verify configuration" msgstr "From cli or GUI, power on VM, and after it boots, verify configuration" -#: ../../automation/vyos-pyvyos.rst:123 +#: ../../automation/terraform/terraformvyos.rst:26 +msgid "General commands that we will use for running Terraform scripts" +msgstr "General commands that we will use for running Terraform scripts" + +#: ../../automation/vyos-pyvyos.rst:131 msgid "Generate Object" msgstr "Generate Object" -#: ../../automation/cloud-init.rst:268 +#: ../../automation/cloud-init.rst:271 msgid "Generate qcow image" msgstr "Generate qcow image" -#: ../../automation/vyos-pyvyos.rst:24 +#: ../../automation/vyos-pyvyos.rst:32 msgid "Getting Started" msgstr "Getting Started" @@ -322,27 +748,47 @@ msgstr "Getting Started" msgid "Here is a simple example:" msgstr "Here is a simple example:" -#: ../../automation/cloud-init.rst:91 +#: ../../automation/cloud-init.rst:95 msgid "Here is an example cloud-config that appends configuration at the time of first boot." msgstr "Here is an example cloud-config that appends configuration at the time of first boot." -#: ../../automation/cloud-init.rst:377 +#: ../../automation/terraform/terraformAWS.rst:23 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" + +#: ../../automation/terraform/terraformAZ.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" + +#: ../../automation/vyos-terraform.rst:987 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" + +#: ../../automation/terraform/terraformGoogle.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" + +#: ../../automation/terraform/terraformvSphere.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" + +#: ../../automation/cloud-init.rst:380 msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." msgstr "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." -#: ../../automation/cloud-init.rst:81 +#: ../../automation/cloud-init.rst:82 msgid "If command ends in a value, it must be inside single quotes." msgstr "If command ends in a value, it must be inside single quotes." -#: ../../automation/cloud-init.rst:250 +#: ../../automation/cloud-init.rst:253 msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." msgstr "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." -#: ../../automation/cloud-init.rst:225 +#: ../../automation/cloud-init.rst:228 msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." msgstr "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." -#: ../../automation/cloud-init.rst:153 +#: ../../automation/cloud-init.rst:157 msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." msgstr "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." @@ -350,11 +796,11 @@ msgstr "If you need to gather information from linux commands to configure VyOS, msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." msgstr "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." -#: ../../automation/vyos-pyvyos.rst:27 +#: ../../automation/vyos-pyvyos.rst:35 msgid "Importing and Disabling Warnings for verify=False" msgstr "Importing and Disabling Warnings for verify=False" -#: ../../automation/cloud-init.rst:298 +#: ../../automation/cloud-init.rst:301 msgid "In Proxmox server three files are going to be used for this setup:" msgstr "In Proxmox server three files are going to be used for this setup:" @@ -362,23 +808,39 @@ msgstr "In Proxmox server three files are going to be used for this setup:" msgid "In VyOS, by default, enables only two modules:" msgstr "In VyOS, by default, enables only two modules:" -#: ../../automation/cloud-init.rst:307 +#: ../../automation/terraform/terraformAWS.rst:17 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." + +#: ../../automation/cloud-init.rst:310 msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" msgstr "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" -#: ../../automation/cloud-init.rst:274 +#: ../../automation/cloud-init.rst:277 msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" msgstr "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" -#: ../../automation/cloud-init.rst:71 +#: ../../automation/cloud-init.rst:72 msgid "Initial Configuration" msgstr "Initial Configuration" -#: ../../automation/vyos-pyvyos.rst:47 +#: ../../automation/vyos-pyvyos.rst:55 msgid "Initializing a VyDevice Object" msgstr "Initializing a VyDevice Object" -#: ../../automation/cloud-init.rst:180 +#: ../../automation/cloud-init.rst:184 msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." msgstr "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." @@ -386,7 +848,7 @@ msgstr "Injecting configuration data is not limited to cloud platforms. Users ca msgid "Install ``napalm-vyos`` module" msgstr "Install ``napalm-vyos`` module" -#: ../../automation/vyos-pyvyos.rst:15 +#: ../../automation/vyos-pyvyos.rst:23 msgid "Installation" msgstr "Installation" @@ -398,11 +860,20 @@ msgstr "It is possible to configure VyOS via netmiko_ proxy module. It requires msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." msgstr "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." +#: ../../automation/terraform/terraformAWS.rst:282 +#: ../../automation/terraform/terraformGoogle.rst:359 +msgid "Make sure that Ansible is pinging from Terrafom." +msgstr "Make sure that Ansible is pinging from Terrafom." + +#: ../../automation/terraform/terraformGoogle.rst:345 +msgid "Make sure that you have opened access to the instance in the security group." +msgstr "Make sure that you have opened access to the instance in the security group." + #: ../../automation/cloud-init.rst:20 msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." msgstr "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." -#: ../../automation/cloud-init.rst:244 +#: ../../automation/cloud-init.rst:247 msgid "Most important keys that needs to be considered:" msgstr "Most important keys that needs to be considered:" @@ -410,6 +881,10 @@ msgstr "Most important keys that needs to be considered:" msgid "Napalm" msgstr "Napalm" +#: ../../automation/terraform/terraformvyos.rst:13 +msgid "Need to install_ Terraform" +msgstr "Need to install_ Terraform" + #: ../../automation/vyos-netmiko.rst:6 msgid "Netmiko" msgstr "Netmiko" @@ -418,31 +893,37 @@ msgstr "Netmiko" msgid "Netmiko-proxy" msgstr "Netmiko-proxy" +#: ../../automation/terraform/terraformAWS.rst:-1 +#: ../../automation/terraform/terraformGoogle.rst:-1 +msgid "Network Topology Diagram" +msgstr "Network Topology Diagram" + #: ../../automation/cloud-init.rst:24 msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." msgstr "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." -#: ../../automation/cloud-init.rst:248 +#: ../../automation/cloud-init.rst:251 msgid "Networking configurations shouldn't be passed in user-data file." msgstr "Networking configurations shouldn't be passed in user-data file." -#: ../../automation/cloud-init.rst:178 +#: ../../automation/cloud-init.rst:182 msgid "NoCloud" msgstr "NoCloud" #: ../../automation/index.rst:6 +#: ../../automation/terraform/index.rst:6 msgid "Nornir" msgstr "Nornir" -#: ../../automation/cloud-init.rst:131 +#: ../../automation/cloud-init.rst:135 msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." msgstr "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." -#: ../../automation/cloud-init.rst:370 +#: ../../automation/cloud-init.rst:373 msgid "Notes for this particular example, that may need to be modified in other setups:" msgstr "Notes for this particular example, that may need to be modified in other setups:" -#: ../../automation/cloud-init.rst:287 +#: ../../automation/cloud-init.rst:290 msgid "Now, that file needs to be copied to proxmox server:" msgstr "Now, that file needs to be copied to proxmox server:" @@ -450,15 +931,15 @@ msgstr "Now, that file needs to be copied to proxmox server:" msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" msgstr "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" -#: ../../automation/cloud-init.rst:390 +#: ../../automation/cloud-init.rst:393 msgid "On proxmox server:" msgstr "On proxmox server:" -#: ../../automation/cloud-init.rst:353 +#: ../../automation/cloud-init.rst:356 msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." msgstr "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." -#: ../../automation/cloud-init.rst:80 +#: ../../automation/cloud-init.rst:81 msgid "One command per line." msgstr "One command per line." @@ -487,7 +968,7 @@ msgstr "Please take a look at the Contributing Guide for our :ref:`documentation msgid "Postconfig on boot" msgstr "Postconfig on boot" -#: ../../automation/cloud-init.rst:409 +#: ../../automation/cloud-init.rst:412 msgid "Power on VM and verifications" msgstr "Power on VM and verifications" @@ -495,15 +976,31 @@ msgstr "Power on VM and verifications" msgid "Preconfig on boot" msgstr "Preconfig on boot" -#: ../../automation/cloud-init.rst:296 +#: ../../automation/terraform/terraformAWS.rst:21 +msgid "Preparation steps for deploying VyOS on AWS" +msgstr "Preparation steps for deploying VyOS on AWS" + +#: ../../automation/terraform/terraformAZ.rst:14 +msgid "Preparation steps for deploying VyOS on Azure" +msgstr "Preparation steps for deploying VyOS on Azure" + +#: ../../automation/terraform/terraformGoogle.rst:14 +msgid "Preparation steps for deploying VyOS on google" +msgstr "Preparation steps for deploying VyOS on google" + +#: ../../automation/terraform/terraformvSphere.rst:14 +msgid "Preparation steps for deploying VyOS on vSphere" +msgstr "Preparation steps for deploying VyOS on vSphere" + +#: ../../automation/cloud-init.rst:299 msgid "Prepare cloud-init files" msgstr "Prepare cloud-init files" -#: ../../automation/cloud-init.rst:258 +#: ../../automation/cloud-init.rst:261 msgid "Proxmox IP address: **192.168.0.253/24**" msgstr "Proxmox IP address: **192.168.0.253/24**" -#: ../../automation/cloud-init.rst:422 +#: ../../automation/cloud-init.rst:425 msgid "Proxmox `Cloud-init-Support`_." msgstr "Proxmox `Cloud-init-Support`_." @@ -515,18 +1012,22 @@ msgstr "PyVyOS" msgid "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." msgstr "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." -#: ../../automation/cloud-init.rst:416 +#: ../../automation/cloud-init.rst:419 msgid "References" msgstr "References" -#: ../../automation/cloud-init.rst:263 +#: ../../automation/cloud-init.rst:266 msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." msgstr "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." -#: ../../automation/vyos-pyvyos.rst:132 +#: ../../automation/vyos-pyvyos.rst:140 msgid "Reset Object" msgstr "Reset Object" +#: ../../automation/vyos-terraform.rst:22 +msgid "Run Terraform" +msgstr "Run Terraform" + #: ../../automation/vyos-ansible.rst:80 msgid "Run ansible" msgstr "Run ansible" @@ -543,7 +1044,7 @@ msgstr "Run configuration commands" msgid "Run operational commands" msgstr "Run operational commands" -#: ../../automation/cloud-init.rst:111 +#: ../../automation/cloud-init.rst:115 msgid "SSH is configured on port 22." msgstr "SSH is configured on port 22." @@ -555,11 +1056,11 @@ msgstr "Salt" msgid "Salt master configuration:" msgstr "Salt master configuration:" -#: ../../automation/vyos-api.rst:344 +#: ../../automation/vyos-api.rst:377 msgid "Save a running configuration to a file." msgstr "Save a running configuration to a file." -#: ../../automation/vyos-api.rst:326 +#: ../../automation/vyos-api.rst:359 msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." msgstr "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." @@ -571,7 +1072,7 @@ msgstr "Script vyos-napalm.py" msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." msgstr "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." -#: ../../automation/vyos-pyvyos.rst:115 +#: ../../automation/vyos-pyvyos.rst:123 msgid "Show Object" msgstr "Show Object" @@ -579,7 +1080,42 @@ msgstr "Show Object" msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." msgstr "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." -#: ../../automation/cloud-init.rst:260 +#: ../../automation/command-scripting.rst:52 +msgid "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." + +#: ../../automation/terraform/terraformAWS.rst:537 +msgid "Sourse files for AWS from GIT" +msgstr "Sourse files for AWS from GIT" + +#: ../../automation/terraform/terraformAZ.rst:482 +msgid "Sourse files for Azure from GIT" +msgstr "Sourse files for Azure from GIT" + +#: ../../automation/terraform/terraformGoogle.rst:703 +msgid "Sourse files for google cloud from GIT" +msgstr "Sourse files for google cloud from GIT" + +#: ../../automation/terraform/terraformvSphere.rst:395 +msgid "Sourse files for vSphere from GIT" +msgstr "Sourse files for vSphere from GIT" + +#: ../../automation/terraform/terraformAWS.rst:88 +#: ../../automation/terraform/terraformAZ.rst:63 +#: ../../automation/terraform/terraformGoogle.rst:87 +#: ../../automation/terraform/terraformvSphere.rst:62 +msgid "Start" +msgstr "Start" + +#: ../../automation/terraform/terraformGoogle.rst:101 +msgid "Start creating a google cloud instance and check the result" +msgstr "Start creating a google cloud instance and check the result" + +#: ../../automation/terraform/terraformAWS.rst:102 +msgid "Start creating an AWS instance and check the result" +msgstr "Start creating an AWS instance and check the result" + +#: ../../automation/cloud-init.rst:263 msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." msgstr "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." @@ -591,14 +1127,80 @@ msgstr "Structure of /srv/salt:" msgid "Structure of files" msgstr "Structure of files" -#: ../../automation/cloud-init.rst:107 +#: ../../automation/vyos-terraform.rst:166 +#: ../../automation/vyos-terraform.rst:624 +msgid "Structure of files Ansible" +msgstr "Structure of files Ansible" + +#: ../../automation/terraform/terraformAWS.rst:463 +msgid "Structure of files Ansible for AWS" +msgstr "Structure of files Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:414 +msgid "Structure of files Ansible for Azure" +msgstr "Structure of files Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:639 +msgid "Structure of files Ansible for google cloud" +msgstr "Structure of files Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:326 +msgid "Structure of files Ansible for vSphere" +msgstr "Structure of files Ansible for vSphere" + +#: ../../automation/vyos-terraform.rst:38 +#: ../../automation/vyos-terraform.rst:302 +#: ../../automation/vyos-terraform.rst:745 +msgid "Structure of files Terrafom" +msgstr "Structure of files Terrafom" + +#: ../../automation/terraform/terraformAWS.rst:285 +msgid "Structure of files Terrafom for AWS" +msgstr "Structure of files Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:83 +msgid "Structure of files Terrafom for Azure" +msgstr "Structure of files Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:362 +msgid "Structure of files Terrafom for google cloud" +msgstr "Structure of files Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:84 +msgid "Structure of files Terrafom for vSphere" +msgstr "Structure of files Terrafom for vSphere" + +#: ../../automation/terraform/terraformvyos.rst:15 +msgid "Structure of files in the standard Terraform project:" +msgstr "Structure of files in the standard Terraform project:" + +#: ../../automation/cloud-init.rst:111 msgid "System Defaults/Fallbacks" msgstr "System Defaults/Fallbacks" -#: ../../automation/vyos-api.rst:301 +#: ../../automation/terraform/terraformAWS.rst:51 +#: ../../automation/terraform/terraformAZ.rst:23 +#: ../../automation/terraform/terraformGoogle.rst:49 +#: ../../automation/terraform/terraformvSphere.rst:26 +msgid "Terraform" +msgstr "Terraform" + +#: ../../automation/terraform/terraformAWS.rst:302 +msgid "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" +msgstr "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" + +#: ../../automation/terraform/terraformvyos.rst:6 +msgid "Terraform for VyOS" +msgstr "Terraform for VyOS" + +#: ../../automation/vyos-api.rst:334 msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." msgstr "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." +#: ../../automation/terraform/terraformGoogle.rst:41 +msgid "The .JSON file download automaticly after creating and will look like:" +msgstr "The .JSON file download automaticly after creating and will look like:" + #: ../../automation/command-scripting.rst:197 msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." @@ -607,23 +1209,23 @@ msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called o msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." msgstr "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." -#: ../../automation/vyos-api.rst:224 +#: ../../automation/vyos-api.rst:256 msgid "The ``/show`` endpoint is to show everything in the operational mode." msgstr "The ``/show`` endpoint is to show everything in the operational mode." -#: ../../automation/vyos-api.rst:248 +#: ../../automation/vyos-api.rst:280 msgid "The ``generate`` endpoint run a ``generate`` command." msgstr "The ``generate`` endpoint run a ``generate`` command." -#: ../../automation/vyos-api.rst:131 +#: ../../automation/vyos-api.rst:163 msgid "The ``reset`` endpoint run a ``reset`` command." msgstr "The ``reset`` endpoint run a ``reset`` command." -#: ../../automation/cloud-init.rst:84 +#: ../../automation/cloud-init.rst:85 msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." msgstr "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." -#: ../../automation/cloud-init.rst:88 +#: ../../automation/cloud-init.rst:89 msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." msgstr "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." @@ -640,23 +1242,23 @@ msgstr "The default file looks like this:" msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below." msgstr "The easiest way to configure the system via user-data is the Cloud-config syntax described below." -#: ../../automation/vyos-api.rst:324 +#: ../../automation/vyos-api.rst:357 msgid "The endpoint ``/config-file`` is to save or load a configuration." msgstr "The endpoint ``/config-file`` is to save or load a configuration." -#: ../../automation/cloud-init.rst:156 +#: ../../automation/cloud-init.rst:160 msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." msgstr "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." -#: ../../automation/cloud-init.rst:136 +#: ../../automation/cloud-init.rst:140 msgid "The following example shows how to execute commands after the initial configuration." msgstr "The following example shows how to execute commands after the initial configuration." -#: ../../automation/cloud-init.rst:74 +#: ../../automation/cloud-init.rst:75 msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." msgstr "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." -#: ../../automation/cloud-init.rst:197 +#: ../../automation/cloud-init.rst:201 msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." msgstr "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." @@ -664,7 +1266,7 @@ msgstr "The seed.iso file can be attached to the virtual machine. As an example, msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." msgstr "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." -#: ../../automation/cloud-init.rst:109 +#: ../../automation/cloud-init.rst:113 msgid "These are the VyOS defaults and fallbacks." msgstr "These are the VyOS defaults and fallbacks." @@ -676,11 +1278,11 @@ msgstr "This section needs improvements, examples and explanations." msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." msgstr "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." -#: ../../automation/vyos-api.rst:360 +#: ../../automation/vyos-api.rst:393 msgid "To Load a configuration file." msgstr "To Load a configuration file." -#: ../../automation/vyos-api.rst:186 +#: ../../automation/vyos-api.rst:218 msgid "To add or delete an image, use the ``/image`` endpoint." msgstr "To add or delete an image, use the ``/image`` endpoint." @@ -688,6 +1290,10 @@ msgstr "To add or delete an image, use the ``/image`` endpoint." msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" msgstr "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" +#: ../../automation/vyos-api.rst:128 +msgid "To check existence of a configuration path, use the ``exists`` operation." +msgstr "To check existence of a configuration path, use the ``exists`` operation." + #: ../../automation/vyos-api.rst:48 msgid "To get the whole configuration, pass an empty list to the ``path`` field" msgstr "To get the whole configuration, pass an empty list to the ``path`` field" @@ -696,7 +1302,7 @@ msgstr "To get the whole configuration, pass an empty list to the ``path`` field msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." msgstr "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." -#: ../../automation/vyos-api.rst:149 +#: ../../automation/vyos-api.rst:181 msgid "To initiate a reboot use the ``reboot`` endpoint." msgstr "To initiate a reboot use the ``reboot`` endpoint." @@ -708,14 +1314,23 @@ msgstr "To make sure that a script is not accidentally called without the ``vyat msgid "To only get a part of the configuration, for example ``system syslog``." msgstr "To only get a part of the configuration, for example ``system syslog``." -#: ../../automation/vyos-api.rst:167 +#: ../../automation/vyos-api.rst:199 msgid "To power off the system use the ``poweroff`` endpoint." msgstr "To power off the system use the ``poweroff`` endpoint." -#: ../../automation/cloud-init.rst:223 +#: ../../automation/cloud-init.rst:226 +#: ../../automation/terraform/terraformAWS.rst:264 +#: ../../automation/terraform/terraformGoogle.rst:342 msgid "Troubleshooting" msgstr "Troubleshooting" +#: ../../automation/terraform/terraformAWS.rst:91 +#: ../../automation/terraform/terraformAZ.rst:66 +#: ../../automation/terraform/terraformGoogle.rst:90 +#: ../../automation/terraform/terraformvSphere.rst:65 +msgid "Type the commands on your Terrafom instance:" +msgstr "Type the commands on your Terrafom instance:" + #: ../../automation/command-scripting.rst:39 msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." msgstr "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." @@ -725,10 +1340,14 @@ msgid "User-data" msgstr "User-data" #: ../../automation/cloud-init.rst:28 +msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." + +#: ../../automation/cloud-init.rst:28 msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." -#: ../../automation/vyos-pyvyos.rst:35 +#: ../../automation/vyos-pyvyos.rst:43 msgid "Using API Response Class" msgstr "Using API Response Class" @@ -736,18 +1355,26 @@ msgstr "Using API Response Class" msgid "Using PyVyOS" msgstr "Using PyVyOS" -#: ../../automation/cloud-init.rst:373 +#: ../../automation/vyos-pyvyos.rst:73 +msgid "Using pyvyos" +msgstr "Using pyvyos" + +#: ../../automation/cloud-init.rst:376 msgid "VM ID: in this example, VM ID used is 555." msgstr "VM ID: in this example, VM ID used is 555." -#: ../../automation/cloud-init.rst:381 +#: ../../automation/cloud-init.rst:384 msgid "VM Resources: these parameters can be modified as needed." msgstr "VM Resources: these parameters can be modified as needed." -#: ../../automation/cloud-init.rst:375 +#: ../../automation/cloud-init.rst:378 msgid "VM Storage: ``local`` volume is used." msgstr "VM Storage: ``local`` volume is used." +#: ../../automation/vyos-terraform.rst:991 +msgid "Vsphere" +msgstr "Vsphere" + #: ../../automation/vyos-api.rst:7 msgid "VyOS API" msgstr "VyOS API" @@ -756,7 +1383,11 @@ msgstr "VyOS API" msgid "VyOS Automation" msgstr "VyOS Automation" -#: ../../automation/cloud-init.rst:418 +#: ../../automation/terraform/index.rst:3 +msgid "VyOS Terraform" +msgstr "VyOS Terraform" + +#: ../../automation/cloud-init.rst:421 msgid "VyOS `cloud-init-docs`_." msgstr "VyOS `cloud-init-docs`_." @@ -764,7 +1395,7 @@ msgstr "VyOS `cloud-init-docs`_." msgid "VyOS cloud-init" msgstr "VyOS cloud-init" -#: ../../automation/cloud-init.rst:246 +#: ../../automation/cloud-init.rst:249 msgid "VyOS configuration commands are defined in user-data file." msgstr "VyOS configuration commands are defined in user-data file." @@ -784,6 +1415,18 @@ msgstr "VyOS supports configuration via ansible. Need to install ``ansible`` and msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." msgstr "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." +#: ../../automation/vyos-terraform.rst:8 +msgid "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" +msgstr "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" + +#: ../../automation/terraform/terraformvyos.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." + +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." + #: ../../automation/command-scripting.rst:8 msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts." msgstr "VyOS supports executing configuration and operational commands non-interactively from shell scripts." @@ -796,7 +1439,7 @@ msgstr "VyOS supports op-mode and configuration via salt_." msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." msgstr "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." -#: ../../automation/cloud-init.rst:122 +#: ../../automation/cloud-init.rst:126 msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." msgstr "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." @@ -804,7 +1447,7 @@ msgstr "VyOS supports the execution of operational commands and linux commands a msgid "We need 2 files, commands.conf and script itself." msgstr "We need 2 files, commands.conf and script itself." -#: ../../automation/cloud-init.rst:184 +#: ../../automation/cloud-init.rst:188 msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." msgstr "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." @@ -816,6 +1459,34 @@ msgstr "Will return:" msgid "With the ``retrieve`` endpoint you get parts or the whole configuration." msgstr "With the ``retrieve`` endpoint you get parts or the whole configuration." +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAWS.rst:40 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/vyos-terraform.rst:300 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." + +#: ../../automation/vyos-terraform.rst:743 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." + #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and support op-mode data:" msgstr "Without proxy it requires VyOS minion configuration and support op-mode data:" @@ -828,27 +1499,31 @@ msgstr "Without proxy it requires VyOS minion configuration and supports op-mode msgid "You can install PyVyOS using pip:" msgstr "You can install PyVyOS using pip:" -#: ../../automation/vyos-api.rst:267 +#: ../../automation/vyos-pyvyos.rst:25 +msgid "You can install pyvyos using pip:" +msgstr "You can install pyvyos using pip:" + +#: ../../automation/vyos-api.rst:300 msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." msgstr "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." -#: ../../automation/vyos-api.rst:286 +#: ../../automation/vyos-api.rst:319 msgid "``delete`` a single command" msgstr "``delete`` a single command" -#: ../../automation/cloud-init.rst:383 +#: ../../automation/cloud-init.rst:386 msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" msgstr "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" -#: ../../automation/vyos-api.rst:270 +#: ../../automation/vyos-api.rst:303 msgid "``set`` a single command" msgstr "``set`` a single command" -#: ../../automation/cloud-init.rst:55 +#: ../../automation/cloud-init.rst:56 msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." msgstr "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." -#: ../../automation/cloud-init.rst:112 +#: ../../automation/cloud-init.rst:116 msgid "``vyos``/``vyos`` credentials if no others specified by data source." msgstr "``vyos``/``vyos`` credentials if no others specified by data source." @@ -856,19 +1531,39 @@ msgstr "``vyos``/``vyos`` credentials if no others specified by data source." msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." msgstr "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." -#: ../../automation/vyos-api.rst:188 +#: ../../automation/vyos-pyvyos.rst:12 +msgid "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." +msgstr "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." + +#: ../../automation/vyos-pyvyos.rst:15 +msgid "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." +msgstr "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." + +#: ../../automation/vyos-pyvyos.rst:17 +msgid "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." +msgstr "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." + +#: ../../automation/vyos-api.rst:220 msgid "add an image" msgstr "add an image" +#: ../../automation/terraform/terraformAWS.rst:560 +msgid "all" +msgstr "all" + +#: ../../automation/terraform/terraformAWS.rst:478 +#: ../../automation/terraform/terraformAZ.rst:428 +#: ../../automation/terraform/terraformGoogle.rst:653 +#: ../../automation/terraform/terraformvSphere.rst:340 #: ../../automation/vyos-ansible.rst:26 msgid "ansible.cfg" msgstr "ansible.cfg" -#: ../../automation/cloud-init.rst:61 +#: ../../automation/cloud-init.rst:62 msgid "cloud-config file format" msgstr "cloud-config file format" -#: ../../automation/cloud-init.rst:229 +#: ../../automation/cloud-init.rst:232 msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" @@ -876,10 +1571,21 @@ msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in msgid "commands.txt" msgstr "commands.txt" -#: ../../automation/vyos-api.rst:205 +#: ../../automation/vyos-api.rst:237 msgid "delete an image, for example ``1.3-rolling-202006070117``" msgstr "delete an image, for example ``1.3-rolling-202006070117``" +#: ../../automation/terraform/terraformGoogle.rst:19 +msgid "google cloud" +msgstr "google cloud" + +#: ../../automation/terraform/terraformAWS.rst:528 +#: ../../automation/terraform/terraformAZ.rst:470 +#: ../../automation/terraform/terraformGoogle.rst:693 +#: ../../automation/terraform/terraformvSphere.rst:381 +msgid "group_vars/all" +msgstr "group_vars/all" + #: ../../automation/vyos-ansible.rst:42 msgid "hosts" msgstr "hosts" @@ -892,18 +1598,90 @@ msgstr "id_rsa_docker.pub. Needs to declare only public key exactly." msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." msgstr "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." +#: ../../automation/terraform/terraformAWS.rst:495 +#: ../../automation/terraform/terraformAZ.rst:438 +#: ../../automation/terraform/terraformGoogle.rst:662 +#: ../../automation/terraform/terraformvSphere.rst:350 +msgid "instance.yml" +msgstr "instance.yml" + +#: ../../automation/vyos-terraform.rst:313 +#: ../../automation/vyos-terraform.rst:758 +msgid "main.tf" +msgstr "main.tf" + #: ../../automation/vyos-ansible.rst:56 msgid "main.yml" msgstr "main.yml" +#: ../../automation/terraform/terraformGoogle.rst:84 +msgid "mykey.json you have to get using step 2 of the google cloud" +msgstr "mykey.json you have to get using step 2 of the google cloud" + +#: ../../automation/terraform/terraformAWS.rst:488 +msgid "mykey.pem" +msgstr "mykey.pem" + +#: ../../automation/terraform/terraformAWS.rst:85 +msgid "mykey.pem you have to get using step 1.2" +msgstr "mykey.pem you have to get using step 1.2" + +#: ../../automation/vyos-pyvyos.rst:6 +msgid "pyvyos" +msgstr "pyvyos" + +#: ../../automation/vyos-pyvyos.rst:8 +msgid "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." +msgstr "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." + #: ../../automation/vyos-salt.rst:141 msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" msgstr "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" #: ../../automation/index.rst:7 +#: ../../automation/terraform/index.rst:7 msgid "startup scripts" msgstr "startup scripts" +#: ../../automation/terraform/terraformAWS.rst:452 +#: ../../automation/terraform/terraformAZ.rst:405 +#: ../../automation/terraform/terraformGoogle.rst:623 +#: ../../automation/terraform/terraformvSphere.rst:307 +msgid "terraform.tfvars" +msgstr "terraform.tfvars" + #: ../../automation/vyos-salt.rst:131 msgid "top.sls" msgstr "top.sls" + +#: ../../automation/terraform/terraformvSphere.rst:20 +msgid "vSphere" +msgstr "vSphere" + +#: ../../automation/terraform/terraformAWS.rst:415 +#: ../../automation/terraform/terraformAZ.rst:298 +#: ../../automation/terraform/terraformGoogle.rst:538 +#: ../../automation/terraform/terraformvSphere.rst:239 +msgid "var.tf" +msgstr "var.tf" + +#: ../../automation/vyos-terraform.rst:516 +#: ../../automation/vyos-terraform.rst:899 +msgid "variables.tf" +msgstr "variables.tf" + +#: ../../automation/terraform/terraformAWS.rst:439 +#: ../../automation/terraform/terraformvSphere.rst:223 +msgid "versions.tf" +msgstr "versions.tf" + +#: ../../automation/vyos-api.rst:145 +msgid "versus a non-existent path:" +msgstr "versus a non-existent path:" + +#: ../../automation/terraform/terraformAWS.rst:300 +#: ../../automation/terraform/terraformAZ.rst:95 +#: ../../automation/terraform/terraformGoogle.rst:377 +#: ../../automation/terraform/terraformvSphere.rst:98 +msgid "vyos.tf" +msgstr "vyos.tf" diff --git a/docs/_locale/pt/cli.pot b/docs/_locale/pt/cli.pot index 34644e74..697d0fbb 100644 --- a/docs/_locale/pt/cli.pot +++ b/docs/_locale/pt/cli.pot @@ -28,23 +28,23 @@ msgstr "**Working configuration** is the one that is currently being modified in msgid "A VyOS system has three major types of configurations:" msgstr "A VyOS system has three major types of configurations:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" msgstr "Access opmode from config mode" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." msgstr "Add comment as an annotation to a configuration node." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." msgstr "All changes in the working config will thus be lost." @@ -52,7 +52,7 @@ msgstr "All changes in the working config will thus be lost." msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." @@ -72,11 +72,11 @@ msgstr "By default, the configuration is displayed in a hierarchy like the above msgid "Command Line Interface" msgstr "Command Line Interface" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" msgstr "Compare configurations" @@ -92,11 +92,11 @@ msgstr "Configuration Overview" msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." msgstr "Copy a configuration element." @@ -104,7 +104,7 @@ msgstr "Copy a configuration element." msgid "Editing the configuration" msgstr "Editing the configuration" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" msgstr "Example:" @@ -124,11 +124,11 @@ msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ` msgid "Get a collection of all the set commands required which led to the running configuration." msgstr "Get a collection of all the set commands required which led to the running configuration." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" @@ -140,15 +140,15 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" msgstr "Local Archive" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" msgstr "Managing configurations" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." @@ -164,31 +164,31 @@ msgstr "Operational mode allows for commands to perform operational system tasks msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" msgstr "Remote Archive" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." msgstr "Rename a configuration element." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" msgstr "Restore Default" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" msgstr "Rollback Changes" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" msgstr "Rollback to revision N (currently requires reboot)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" msgstr "Saving and loading manually" @@ -200,11 +200,11 @@ msgstr "See the configuration section of this document for more information on c msgid "Seeing and navigating the configuration" msgstr "Seeing and navigating the configuration" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." msgstr "Show commit revision difference." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" @@ -228,11 +228,15 @@ msgstr "The :cfgcmd:`show` command within configuration mode will show the worki msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -#: ../../cli.rst:784 +#: ../../cli.rst:656 +msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." +msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." + +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." @@ -248,11 +252,11 @@ msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd: msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." msgstr "The number of revisions don't affect the commit-archive." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." @@ -264,7 +268,7 @@ msgstr "These commands are also relative to the level you are inside and only re msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``." @@ -276,7 +280,7 @@ msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this a msgid "To enter configuration mode use the ``configure`` command:" msgstr "To enter configuration mode use the ``configure`` command:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." @@ -284,11 +288,11 @@ msgstr "To remove an existing comment from your current configuration, specify a msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." @@ -296,15 +300,15 @@ msgstr "Use this command to preserve configuration changes upon reboot. By defau msgid "Use this command to set the value of a parameter or to create a new element." msgstr "Use this command to set the value of a parameter or to create a new element." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." msgstr "Use this command to spot what the differences are between different configurations." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." msgstr "View all existing revisions on the local system." @@ -320,15 +324,19 @@ msgstr "View the current active configuration in JSON format." msgid "View the current active configuration in readable JSON format." msgstr "View the current active configuration in readable JSON format." +#: ../../cli.rst:855 +msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." +msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." + #: ../../cli.rst:852 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." msgstr "VyOS lets you compare different configurations." @@ -340,6 +348,10 @@ msgstr "VyOS makes use of a unified configuration file for the entire system's c msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +#: ../../cli.rst:561 +msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." + #: ../../cli.rst:340 msgid "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." msgstr "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." @@ -348,7 +360,7 @@ msgstr "When entering the configuration mode you are navigating inside a tree st msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." msgstr "When inside configuration mode you are not directly able to execute operational commands." @@ -356,7 +368,7 @@ msgstr "When inside configuration mode you are not directly able to execute oper msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" @@ -372,15 +384,15 @@ msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" msgstr "You can also rename config subtrees:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." @@ -388,19 +400,23 @@ msgstr "You can rollback configuration changes using the rollback command. This msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." -#: ../../cli.rst:747 +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." + +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." @@ -408,19 +424,19 @@ msgstr "You will be asked if you want to continue. If you accept, you will have msgid "``b`` will scroll back one page" msgstr "``b`` will scroll back one page" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" msgstr "``ftp://<user>:<passwd>@<host>/<dir>``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" @@ -436,11 +452,11 @@ msgstr "``q`` key can be used to cancel output" msgid "``return`` will scroll down one line" msgstr "``return`` will scroll down one line" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" msgstr "``scp://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" @@ -448,7 +464,7 @@ msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" msgid "``space`` will scroll down one page" msgstr "``space`` will scroll down one page" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" msgstr "``tftp://<host>/<dir>``" diff --git a/docs/_locale/pt/configexamples.pot b/docs/_locale/pt/configexamples.pot index bbc06225..95276db0 100644 --- a/docs/_locale/pt/configexamples.pot +++ b/docs/_locale/pt/configexamples.pot @@ -272,7 +272,7 @@ msgstr "A brief excursion into VRFs: This has been one of the longest-standing f msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." msgstr "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." -#: ../../configexamples/index.rst:37 +#: ../../configexamples/index.rst:38 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." msgstr "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." @@ -318,6 +318,14 @@ msgstr "Active Directory on Windows server" msgid "Add (temporary) default route" msgstr "Add (temporary) default route" +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" + #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" msgstr "Add all the hosts of VyOS:" @@ -351,6 +359,10 @@ msgid "After configured all the VRFs involved in this topology we take a deeper msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -378,6 +390,14 @@ msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on msgid "Allow DHCPv6 packets for router" msgstr "Allow DHCPv6 packets for router" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." + #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." msgstr "Allow access to the router only from trusted networks." @@ -572,6 +592,10 @@ msgid "Basic Setup (via console)" msgstr "Basic Setup (via console)" #: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" + +#: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" msgstr "Basik configuration of the ansible.cfg:" @@ -656,11 +680,19 @@ msgstr "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." msgstr "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." +#: ../../configexamples/lac-lns.rst:96 +msgid "Client" +msgstr "Client" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:94 msgid "Client configuration" msgstr "Client configuration" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." msgstr "Communication between private subnets should be done through ipsec tunnel without nat." @@ -704,7 +736,7 @@ msgstr "Configuration 'dcsp' and shaper using QoS" msgid "Configuration Blueprints" msgstr "Configuration Blueprints" -#: ../../configexamples/index.rst:30 +#: ../../configexamples/index.rst:31 msgid "Configuration Blueprints (autotest)" msgstr "Configuration Blueprints (autotest)" @@ -717,6 +749,7 @@ msgid "Configuration of basic firewall in one site, in order to:" msgstr "Configuration of basic firewall in one site, in order to:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113 +#: ../../configexamples/lac-lns.rst:29 #: ../../configexamples/pppoe-ipv6-basic.rst:26 msgid "Configurations" msgstr "Configurations" @@ -885,7 +918,7 @@ msgstr "Dynamic routing used between CE and PE nodes and eBGP peering establishe msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." msgstr "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." -#: ../../configexamples/index.rst:34 +#: ../../configexamples/index.rst:35 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." msgstr "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." @@ -1008,6 +1041,10 @@ msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1213,6 +1250,10 @@ msgid "In the end, you will end up with something like this config. I took out e msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." #: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." + +#: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1252,6 +1293,14 @@ msgstr "In this example two LAN interfaces exist in different subnets instead of msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." msgstr "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." +#: ../../configexamples/lac-lns.rst:17 +msgid "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." +msgstr "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." + +#: ../../configexamples/lac-lns.rst:98 +msgid "In this lab we use Windows PPPoE client." +msgstr "In this lab we use Windows PPPoE client." + #: ../../configexamples/zone-policy.rst:50 msgid "Inbound WAN connect to DMZ host." msgstr "Inbound WAN connect to DMZ host." @@ -1265,6 +1314,14 @@ msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Information about prefix-sid and label-operation from VyOS" #: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" + +#: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" msgstr "Install the Ansible:" @@ -1345,6 +1402,10 @@ msgstr "L3VPN configuration parameters table:" msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" msgstr "L3VPN for Hub-and-Spoke connectivity with VyOS" +#: ../../configexamples/lac-lns.rst:32 +msgid "LAC" +msgstr "LAC" + #: ../../configexamples/zone-policy.rst:392 msgid "LAN, WAN, DMZ, local and TUN (tunnel)" msgstr "LAN, WAN, DMZ, local and TUN (tunnel)" @@ -1389,6 +1450,10 @@ msgstr "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." msgid "LAN can access DMZ resources." msgstr "LAN can access DMZ resources." +#: ../../configexamples/lac-lns.rst:72 +msgid "LNS" +msgstr "LNS" + #: ../../configexamples/l3vpn-hub-and-spoke.rst:551 msgid "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" @@ -1398,6 +1463,10 @@ msgid "Let’s say we have a requirement to have multiple networks." msgstr "Let’s say we have a requirement to have multiple networks." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." msgstr "Local subnets should be able to reach internet using source nat." @@ -1433,9 +1502,22 @@ msgid "Masquerade Traffic originating from 10.200.201.0/24 that is heading out t msgstr "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:254 +#: ../../configexamples/lac-lns.rst:106 msgid "Monitoring" msgstr "Monitoring" +#: ../../configexamples/lac-lns.rst:117 +msgid "Monitoring on LAC side" +msgstr "Monitoring on LAC side" + +#: ../../configexamples/lac-lns.rst:108 +msgid "Monitoring on LNS side" +msgstr "Monitoring on LNS side" + +#: ../../configexamples/lac-lns.rst:140 +msgid "Monitoring on RADIUS Server side" +msgstr "Monitoring on RADIUS Server side" + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162 msgid "Multiple LAN/DMZ Setup" msgstr "Multiple LAN/DMZ Setup" @@ -1456,6 +1538,7 @@ msgstr "Native IPv4 and IPv6" msgid "Network Cabling" msgstr "Network Cabling" +#: ../../configexamples/lac-lns.rst:21 #: ../../configexamples/pppoe-ipv6-basic.rst:18 msgid "Network Topology" msgstr "Network Topology" @@ -1463,6 +1546,7 @@ msgstr "Network Topology" #: ../../configexamples/ansible.rst:-1 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:-1 #: ../../configexamples/l3vpn-hub-and-spoke.rst:-1 +#: ../../configexamples/lac-lns.rst:-1 #: ../../configexamples/nmp.rst:-1 #: ../../configexamples/pppoe-ipv6-basic.rst:-1 #: ../../configexamples/qos.rst:-1 @@ -1655,6 +1739,10 @@ msgstr "PPPoE IPv6 Basic Setup for Home Network" msgid "PPPoE Setup" msgstr "PPPoE Setup" +#: ../../configexamples/lac-lns.rst:7 +msgid "PPPoE over L2TP" +msgstr "PPPoE over L2TP" + #: ../../configexamples/segment-routing-isis.rst:255 msgid "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" msgstr "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" @@ -1692,6 +1780,10 @@ msgid "Priorities" msgstr "Priorities" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -2046,7 +2138,7 @@ msgstr "The lab I built is using a VRF (called **mgmt**) to provide out-of-band msgid "The lab was built using EVE-NG." msgstr "The lab was built using EVE-NG." -#: ../../configexamples/index.rst:32 +#: ../../configexamples/index.rst:33 msgid "The next pages contains automatic full tested configuration examples." msgstr "The next pages contains automatic full tested configuration examples." @@ -2054,7 +2146,7 @@ msgstr "The next pages contains automatic full tested configuration examples." msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." msgstr "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." -#: ../../configexamples/index.rst:40 +#: ../../configexamples/index.rst:41 msgid "The process will do the following steps:" msgstr "The process will do the following steps:" @@ -2123,6 +2215,10 @@ msgid "This chapter contains various configuration examples:" msgstr "This chapter contains various configuration examples:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" msgstr "This configuration example and the requirments consists on:" @@ -2130,6 +2226,10 @@ msgstr "This configuration example and the requirments consists on:" msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." msgstr "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." +#: ../../configexamples/lac-lns.rst:9 +msgid "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." +msgstr "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." + #: ../../configexamples/pppoe-ipv6-basic.rst:9 msgid "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." msgstr "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." @@ -2166,6 +2266,10 @@ msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to A msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." @@ -2210,6 +2314,10 @@ msgstr "This section describes verification commands for MPLS/BGP/LDP protocols msgid "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." msgstr "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." +#: ../../configexamples/lac-lns.rst:91 +msgid "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." +msgstr "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." + #: ../../configexamples/autotest/Wireguard/Wireguard.rst:10 msgid "This simple structure show how to connect two offices. One remote branch and the central office." msgstr "This simple structure show how to connect two offices. One remote branch and the central office." @@ -2580,6 +2688,10 @@ msgstr "When you have both routers up, you should be able to establish a connect msgid "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" msgstr "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" +#: ../../configexamples/lac-lns.rst:-1 +msgid "Window PPPoE Client Configuration" +msgstr "Window PPPoE Client Configuration" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:13 msgid "Windows Server 2019 with a running Active Directory" msgstr "Windows Server 2019 with a running Active Directory" @@ -2713,15 +2825,15 @@ msgstr "compute3 - Port 11 of each switch" msgid "compute3 (VMware ESXi 6.5)" msgstr "compute3 (VMware ESXi 6.5)" -#: ../../configexamples/index.rst:43 +#: ../../configexamples/index.rst:44 msgid "configure each host in the lab" msgstr "configure each host in the lab" -#: ../../configexamples/index.rst:42 +#: ../../configexamples/index.rst:43 msgid "create the lab on a eve-ng server" msgstr "create the lab on a eve-ng server" -#: ../../configexamples/index.rst:44 +#: ../../configexamples/index.rst:45 msgid "do some defined tests" msgstr "do some defined tests" @@ -2742,7 +2854,7 @@ msgstr "extended community and remote label of specific destination" msgid "first the PCA" msgstr "first the PCA" -#: ../../configexamples/index.rst:46 +#: ../../configexamples/index.rst:47 msgid "generate the documentation and include files" msgstr "generate the documentation and include files" @@ -2754,7 +2866,7 @@ msgstr "green uses local routing table id and VNI 4000" msgid "information between PE and CE:" msgstr "information between PE and CE:" -#: ../../configexamples/index.rst:45 +#: ../../configexamples/index.rst:46 msgid "optional do an upgrade to a higher version and do step 3 again." msgstr "optional do an upgrade to a higher version and do step 3 again." @@ -2770,7 +2882,7 @@ msgstr "router2 (Random 1RU machine with 4 NICs)" msgid "save the output to a file and import it in nearly all openvpn clients." msgstr "save the output to a file and import it in nearly all openvpn clients." -#: ../../configexamples/index.rst:47 +#: ../../configexamples/index.rst:48 msgid "shutdown and destroy the lab, if there is no error" msgstr "shutdown and destroy the lab, if there is no error" diff --git a/docs/_locale/pt/configuration.pot b/docs/_locale/pt/configuration.pot index 01486200..098a9f01 100644 --- a/docs/_locale/pt/configuration.pot +++ b/docs/_locale/pt/configuration.pot @@ -76,12 +76,20 @@ msgstr "**9** - NetFlow version 9 (default)" msgid "**AS path length check**" msgstr "**AS path length check**" +#: ../../configuration/service/dhcp-server.rst:175 +msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." +msgstr "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." + +#: ../../configuration/service/dhcp-server.rst:178 +msgid "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." +msgstr "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." + #: ../../configuration/protocols/bgp.rst:106 msgid "**Already-selected external check**" msgstr "**Already-selected external check**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." msgstr "**Applies to:** Inbound traffic." @@ -97,6 +105,7 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." msgstr "**Applies to:** Outbound traffic." @@ -168,9 +177,11 @@ msgstr "**Documentation under development**" msgid "**Ethernet (protocol, destination address or source address)**" msgstr "**Ethernet (protocol, destination address or source address)**" -#: ../../configuration/service/dhcp-server.rst:200 -#: ../../configuration/service/dhcp-server.rst:587 -#: ../../configuration/service/dhcp-server.rst:626 +#: ../../configuration/service/dhcp-server.rst:63 +#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:646 +#: ../../configuration/service/dhcp-server.rst:687 msgid "**Example:**" msgstr "**Example:**" @@ -269,11 +280,11 @@ msgstr "**Input**: stage where traffic destined for the router itself can be fil msgid "**Interface name**" msgstr "**Interface name**" -#: ../../configuration/vpn/site2site_ipsec.rst:303 +#: ../../configuration/vpn/site2site_ipsec.rst:306 msgid "**LEFT**" msgstr "**LEFT**" -#: ../../configuration/vpn/site2site_ipsec.rst:287 +#: ../../configuration/vpn/site2site_ipsec.rst:290 msgid "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" msgstr "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" @@ -309,11 +320,11 @@ msgstr "**MED check**" msgid "**Multi-path check**" msgstr "**Multi-path check**" -#: ../../configuration/protocols/bgp.rst:1193 +#: ../../configuration/protocols/bgp.rst:1215 msgid "**Node1:**" msgstr "**Node1:**" -#: ../../configuration/protocols/bgp.rst:1221 +#: ../../configuration/protocols/bgp.rst:1243 msgid "**Node2:**" msgstr "**Node2:**" @@ -326,10 +337,10 @@ msgid "**Node 1**" msgstr "**Node 1**" #: ../../configuration/protocols/babel.rst:192 -#: ../../configuration/protocols/bgp.rst:1103 -#: ../../configuration/protocols/bgp.rst:1130 -#: ../../configuration/protocols/bgp.rst:1148 -#: ../../configuration/protocols/bgp.rst:1176 +#: ../../configuration/protocols/bgp.rst:1125 +#: ../../configuration/protocols/bgp.rst:1152 +#: ../../configuration/protocols/bgp.rst:1170 +#: ../../configuration/protocols/bgp.rst:1198 #: ../../configuration/protocols/isis.rst:341 #: ../../configuration/protocols/isis.rst:416 #: ../../configuration/protocols/isis.rst:457 @@ -350,10 +361,10 @@ msgid "**Node 2**" msgstr "**Node 2**" #: ../../configuration/protocols/babel.rst:202 -#: ../../configuration/protocols/bgp.rst:1114 #: ../../configuration/protocols/bgp.rst:1136 -#: ../../configuration/protocols/bgp.rst:1160 +#: ../../configuration/protocols/bgp.rst:1158 #: ../../configuration/protocols/bgp.rst:1182 +#: ../../configuration/protocols/bgp.rst:1204 #: ../../configuration/protocols/isis.rst:352 #: ../../configuration/protocols/isis.rst:432 #: ../../configuration/protocols/isis.rst:511 @@ -384,6 +395,10 @@ msgid "**Output**: stage where traffic that is originated by the router itself c msgstr "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:65 +msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" @@ -411,7 +426,7 @@ msgstr "**Prerouting**: several actions can be done in this stage, and currently msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" -#: ../../configuration/service/dhcp-server.rst:391 +#: ../../configuration/service/dhcp-server.rst:448 msgid "**Primary**" msgstr "**Primary**" @@ -423,6 +438,10 @@ msgstr "**Queueing discipline** Fair/Flow Queue CoDel." msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Queueing discipline:** Deficit Round Robin." +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." + #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Queueing discipline:** Generalized Random Early Drop." @@ -481,11 +500,11 @@ msgstr "**RADIUS based IP pools (Framed-IP-Address)**" msgid "**RADIUS sessions management DM/CoA**" msgstr "**RADIUS sessions management DM/CoA**" -#: ../../configuration/vpn/site2site_ipsec.rst:343 +#: ../../configuration/vpn/site2site_ipsec.rst:346 msgid "**RIGHT**" msgstr "**RIGHT**" -#: ../../configuration/vpn/site2site_ipsec.rst:293 +#: ../../configuration/vpn/site2site_ipsec.rst:296 msgid "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" @@ -521,15 +540,15 @@ msgstr "**SW1**" msgid "**SW2**" msgstr "**SW2**" -#: ../../configuration/service/dhcp-server.rst:400 +#: ../../configuration/service/dhcp-server.rst:458 msgid "**Secondary**" msgstr "**Secondary**" -#: ../../configuration/vpn/ipsec.rst:261 +#: ../../configuration/vpn/ipsec.rst:265 msgid "**Setting up IPSec**" msgstr "**Setting up IPSec**" -#: ../../configuration/vpn/ipsec.rst:237 +#: ../../configuration/vpn/ipsec.rst:241 msgid "**Setting up the GRE tunnel**" msgstr "**Setting up the GRE tunnel**" @@ -566,6 +585,10 @@ msgstr "**VyOS Router:**" msgid "**Weight check**" msgstr "**Weight check**" +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." + #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" @@ -575,11 +598,25 @@ msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 1 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" msgstr "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" +#: ../../configuration/service/pppoe-server.rst:474 +#: ../../configuration/vpn/l2tp.rst:428 +#: ../../configuration/vpn/pptp.rst:352 +#: ../../configuration/vpn/sstp.rst:386 +msgid "**allow** - Negotiate IPv4 only if client requests (Default value)" +msgstr "**allow** - Negotiate IPv4 only if client requests (Default value)" + +#: ../../configuration/service/pppoe-server.rst:349 +#: ../../configuration/vpn/l2tp.rst:293 +#: ../../configuration/vpn/pptp.rst:217 +#: ../../configuration/vpn/sstp.rst:251 +msgid "**allow** - Negotiate IPv6 only if client requests" +msgstr "**allow** - Negotiate IPv6 only if client requests" + #: ../../configuration/container/index.rst:38 msgid "**allow-host-networks** cannot be used with **network**" msgstr "**allow-host-networks** cannot be used with **network**" -#: ../../configuration/container/index.rst:102 +#: ../../configuration/container/index.rst:107 msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" msgstr "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" @@ -595,6 +632,10 @@ msgstr "**application**: analyzes received flow data in the context of intrusion msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." msgstr "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." +#: ../../configuration/service/ids.rst:90 +msgid "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." +msgstr "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." + #: ../../configuration/protocols/ospf.rst:435 msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." @@ -603,6 +644,13 @@ msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." +#: ../../configuration/service/pppoe-server.rst:401 +#: ../../configuration/vpn/l2tp.rst:345 +#: ../../configuration/vpn/pptp.rst:269 +#: ../../configuration/vpn/sstp.rst:303 +msgid "**calling-sid** - Calculate interface identifier from calling-station-id." +msgstr "**calling-sid** - Calculate interface identifier from calling-station-id." + #: ../../configuration/protocols/ospf.rst:121 msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." msgstr "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." @@ -619,7 +667,28 @@ msgstr "**default** – this area will be used for shortcutting only if ABR doe msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." msgstr "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." -#: ../../configuration/vpn/sstp.rst:199 +#: ../../configuration/service/pppoe-server.rst:566 +msgid "**deny**: Deny second session authorization." +msgstr "**deny**: Deny second session authorization." + +#: ../../configuration/service/pppoe-server.rst:475 +#: ../../configuration/vpn/l2tp.rst:429 +#: ../../configuration/vpn/pptp.rst:353 +#: ../../configuration/vpn/sstp.rst:387 +msgid "**deny** - Do not negotiate IPv4" +msgstr "**deny** - Do not negotiate IPv4" + +#: ../../configuration/service/pppoe-server.rst:350 +#: ../../configuration/vpn/l2tp.rst:294 +#: ../../configuration/vpn/pptp.rst:218 +#: ../../configuration/vpn/sstp.rst:252 +msgid "**deny** - Do not negotiate IPv6 (default value)" +msgstr "**deny** - Do not negotiate IPv6 (default value)" + +#: ../../configuration/service/pppoe-server.rst:507 +#: ../../configuration/vpn/l2tp.rst:461 +#: ../../configuration/vpn/pptp.rst:385 +#: ../../configuration/vpn/sstp.rst:419 msgid "**deny** - deny mppe" msgstr "**deny** - deny mppe" @@ -635,6 +704,10 @@ msgstr "**dhcp** interface address is received by DHCP from a DHCP server on thi msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." +#: ../../configuration/service/pppoe-server.rst:565 +msgid "**disable**: Disables session control." +msgstr "**disable**: Disables session control." + #: ../../configuration/service/dhcp-relay.rst:75 msgid "**discard:** Received packets which already contain relay information will be discarded." msgstr "**discard:** Received packets which already contain relay information will be discarded." @@ -667,6 +740,17 @@ msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It co msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." +#: ../../configuration/service/pppoe-server.rst:400 +#: ../../configuration/vpn/l2tp.rst:344 +#: ../../configuration/vpn/pptp.rst:268 +#: ../../configuration/vpn/sstp.rst:302 +msgid "**ipv4-addr** - Calculate interface identifier from IPv4 address." +msgstr "**ipv4-addr** - Calculate interface identifier from IPv4 address." + +#: ../../configuration/service/ipoe-server.rst:91 +msgid "**l2**: It means that clients are on same network where interface is.**(default)**" +msgstr "**l2**: It means that clients are on same network where interface is.**(default)**" + #: ../../configuration/interfaces/bonding.rst:161 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" msgstr "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" @@ -707,10 +791,18 @@ msgstr "**level-2-only** - Act as an area (Level 2) router only." msgid "**level-2-only** - Level-2 only adjacencies are formed" msgstr "**level-2-only** - Level-2 only adjacencies are formed" -#: ../../configuration/vpn/sstp.rst:105 +#: ../../configuration/service/ipoe-server.rst:65 +#: ../../configuration/service/pppoe-server.rst:43 +#: ../../configuration/vpn/l2tp.rst:31 +#: ../../configuration/vpn/pptp.rst:32 +#: ../../configuration/vpn/sstp.rst:58 msgid "**local**: All authentication queries are handled locally." msgstr "**local**: All authentication queries are handled locally." +#: ../../configuration/service/ipoe-server.rst:93 +msgid "**local**: It means that client are behind some router." +msgstr "**local**: It means that client are behind some router." + #: ../../configuration/interfaces/wireguard.rst:140 msgid "**local side - commands**" msgstr "**local side - commands**" @@ -719,34 +811,55 @@ msgstr "**local side - commands**" msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." + #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**narrow** - Use old style of TLVs with narrow metric." -#: ../../configuration/container/index.rst:119 +#: ../../configuration/container/index.rst:124 msgid "**net-admin**: Network operations (interface, firewall, routing tables)" msgstr "**net-admin**: Network operations (interface, firewall, routing tables)" -#: ../../configuration/container/index.rst:120 +#: ../../configuration/container/index.rst:125 msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" msgstr "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" -#: ../../configuration/container/index.rst:121 +#: ../../configuration/container/index.rst:126 msgid "**net-raw**: Permission to create raw network sockets" msgstr "**net-raw**: Permission to create raw network sockets" -#: ../../configuration/container/index.rst:100 +#: ../../configuration/container/index.rst:105 msgid "**no**: Do not restart containers on exit" msgstr "**no**: Do not restart containers on exit" +#: ../../configuration/service/ipoe-server.rst:66 +msgid "**noauth**: Authentication disabled" +msgstr "**noauth**: Authentication disabled" + +#: ../../configuration/service/pppoe-server.rst:44 +#: ../../configuration/vpn/pptp.rst:33 +msgid "**noauth**: Authentication disabled." +msgstr "**noauth**: Authentication disabled." + #: ../../configuration/service/dns.rst:66 msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." -#: ../../configuration/container/index.rst:101 +#: ../../configuration/container/index.rst:106 msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires `<value>`." +msgstr "**order** Rule order. Requires `<value>`." + #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." @@ -755,10 +868,35 @@ msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It config msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." -#: ../../configuration/vpn/sstp.rst:198 +#: ../../configuration/service/pppoe-server.rst:473 +#: ../../configuration/vpn/l2tp.rst:427 +#: ../../configuration/vpn/pptp.rst:351 +#: ../../configuration/vpn/sstp.rst:385 +msgid "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" + +#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/vpn/l2tp.rst:292 +#: ../../configuration/vpn/pptp.rst:216 +#: ../../configuration/vpn/sstp.rst:250 +msgid "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" + +#: ../../configuration/vpn/sstp.rst:204 msgid "**prefer** - ask client for mppe, if it rejects don't fail" msgstr "**prefer** - ask client for mppe, if it rejects don't fail" +#: ../../configuration/service/pppoe-server.rst:506 +#: ../../configuration/vpn/l2tp.rst:460 +#: ../../configuration/vpn/pptp.rst:384 +#: ../../configuration/vpn/sstp.rst:418 +msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" + +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." + #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." @@ -771,39 +909,99 @@ msgstr "**process-no-validate** In this mode the recursor acts as a \"security a msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." -#: ../../configuration/vpn/sstp.rst:103 +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." + +#: ../../configuration/service/ipoe-server.rst:63 +#: ../../configuration/service/pppoe-server.rst:41 +#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/vpn/pptp.rst:30 +#: ../../configuration/vpn/sstp.rst:56 msgid "**radius**: All authentication queries are handled by a configured RADIUS server." msgstr "**radius**: All authentication queries are handled by a configured RADIUS server." +#: ../../configuration/service/pppoe-server.rst:391 +#: ../../configuration/service/pppoe-server.rst:398 +#: ../../configuration/vpn/l2tp.rst:335 +#: ../../configuration/vpn/l2tp.rst:342 +#: ../../configuration/vpn/pptp.rst:259 +#: ../../configuration/vpn/pptp.rst:266 +#: ../../configuration/vpn/sstp.rst:293 +#: ../../configuration/vpn/sstp.rst:300 +msgid "**random** - Random interface identifier for IPv6" +msgstr "**random** - Random interface identifier for IPv6" + +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires `<value>`." +msgstr "**regexp** Regular expression. Requires `<value>`." + #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**remote side - commands**" +#: ../../configuration/service/pppoe-server.rst:567 +msgid "**replace**: Terminate first session when second is authorized **(default)**" +msgstr "**replace**: Terminate first session when second is authorized **(default)**" + #: ../../configuration/service/dhcp-relay.rst:81 msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." -#: ../../configuration/vpn/sstp.rst:197 +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + +#: ../../configuration/service/pppoe-server.rst:472 +#: ../../configuration/vpn/l2tp.rst:426 +#: ../../configuration/vpn/pptp.rst:350 +#: ../../configuration/vpn/sstp.rst:384 +msgid "**require** - Require IPv4 negotiation" +msgstr "**require** - Require IPv4 negotiation" + +#: ../../configuration/service/pppoe-server.rst:347 +#: ../../configuration/vpn/l2tp.rst:291 +#: ../../configuration/vpn/pptp.rst:215 +#: ../../configuration/vpn/sstp.rst:249 +msgid "**require** - Require IPv6 negotiation" +msgstr "**require** - Require IPv6 negotiation" + +#: ../../configuration/service/pppoe-server.rst:505 +#: ../../configuration/vpn/l2tp.rst:459 +#: ../../configuration/vpn/pptp.rst:383 +#: ../../configuration/vpn/sstp.rst:417 msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." + #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**right**" -#: ../../configuration/container/index.rst:122 +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires `<value>`." +msgstr "**service** Service type. Requires `<value>`." + +#: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" +#: ../../configuration/service/ipoe-server.rst:99 +msgid "**shared**: Multiple clients share the same network. **(default)**" +msgstr "**shared**: Multiple clients share the same network. **(default)**" + #: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." msgstr "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." -#: ../../configuration/container/index.rst:123 +#: ../../configuration/container/index.rst:128 msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" msgstr "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" -#: ../../configuration/container/index.rst:124 +#: ../../configuration/container/index.rst:129 msgid "**sys-time**: Permission to set system clock" msgstr "**sys-time**: Permission to set system clock" @@ -819,10 +1017,25 @@ msgstr "**upstream:** The upstream network interface is the outgoing interface w msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." msgstr "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." +#: ../../configuration/service/ipoe-server.rst:100 +msgid "**vlan**: One VLAN per client." +msgstr "**vlan**: One VLAN per client." + #: ../../configuration/protocols/isis.rst:102 msgid "**wide** - Use new style of TLVs to carry wider metric." msgstr "**wide** - Use new style of TLVs to carry wider metric." +#: ../../configuration/service/pppoe-server.rst:392 +#: ../../configuration/service/pppoe-server.rst:399 +#: ../../configuration/vpn/l2tp.rst:336 +#: ../../configuration/vpn/l2tp.rst:343 +#: ../../configuration/vpn/pptp.rst:260 +#: ../../configuration/vpn/pptp.rst:267 +#: ../../configuration/vpn/sstp.rst:294 +#: ../../configuration/vpn/sstp.rst:301 +msgid "**x:x:x:x** - Specify interface identifier for IPv6" +msgstr "**x:x:x:x** - Specify interface identifier for IPv6" + #: ../../configuration/protocols/bgp.rst:143 msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." msgstr "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." @@ -887,7 +1100,7 @@ msgstr "0 if not defined, which means no refreshing." msgid "0 if not defined." msgstr "0 if not defined." -#: ../../configuration/service/dhcp-server.rst:237 +#: ../../configuration/service/dhcp-server.rst:293 #: ../../configuration/system/syslog.rst:114 #: ../../configuration/system/syslog.rst:173 #: ../../configuration/trafficpolicy/index.rst:801 @@ -950,7 +1163,7 @@ msgstr "10 - 10 MBit/s" msgid "11" msgstr "11" -#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:375 msgid "119" msgstr "119" @@ -960,11 +1173,11 @@ msgstr "119" msgid "12" msgstr "12" -#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:380 msgid "121, 249" msgstr "121, 249" -#: ../../configuration/service/dhcp-server.rst:304 +#: ../../configuration/service/dhcp-server.rst:360 #: ../../configuration/system/syslog.rst:138 #: ../../configuration/trafficpolicy/index.rst:870 msgid "13" @@ -976,7 +1189,7 @@ msgstr "13" msgid "14" msgstr "14" -#: ../../configuration/service/dhcp-server.rst:264 +#: ../../configuration/service/dhcp-server.rst:320 #: ../../configuration/system/syslog.rst:142 #: ../../configuration/trafficpolicy/index.rst:866 msgid "15" @@ -1000,7 +1213,7 @@ msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" msgid "18" msgstr "18" -#: ../../configuration/service/dhcp-server.rst:269 +#: ../../configuration/service/dhcp-server.rst:325 #: ../../configuration/system/syslog.rst:150 msgid "19" msgstr "19" @@ -1025,7 +1238,7 @@ msgstr "1: Enable DAD (default)" msgid "1 if not defined." msgstr "1 if not defined." -#: ../../configuration/service/dhcp-server.rst:243 +#: ../../configuration/service/dhcp-server.rst:299 #: ../../configuration/system/syslog.rst:116 #: ../../configuration/system/syslog.rst:178 #: ../../configuration/trafficpolicy/index.rst:799 @@ -1059,7 +1272,7 @@ msgstr "25000 - 25 GBit/s" msgid "2500 - 2.5 GBit/s" msgstr "2500 - 2.5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:329 +#: ../../configuration/service/dhcp-server.rst:385 msgid "252" msgstr "252" @@ -1087,7 +1300,7 @@ msgstr "2. Since this is the first packet, connection status of this connection, msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." -#: ../../configuration/service/dhcp-server.rst:249 +#: ../../configuration/service/dhcp-server.rst:305 #: ../../configuration/system/syslog.rst:118 #: ../../configuration/system/syslog.rst:181 #: ../../configuration/trafficpolicy/index.rst:797 @@ -1115,7 +1328,7 @@ msgstr "38" msgid "3. Add a full path to the script" msgstr "3. Add a full path to the script" -#: ../../configuration/service/dhcp-server.rst:254 +#: ../../configuration/service/dhcp-server.rst:310 #: ../../configuration/system/syslog.rst:120 #: ../../configuration/system/syslog.rst:183 #: ../../configuration/trafficpolicy/index.rst:795 @@ -1131,11 +1344,11 @@ msgstr "40000 - 40 GBit/s" msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." -#: ../../configuration/service/dhcp-server.rst:274 +#: ../../configuration/service/dhcp-server.rst:330 msgid "42" msgstr "42" -#: ../../configuration/service/dhcp-server.rst:279 +#: ../../configuration/service/dhcp-server.rst:335 msgid "44" msgstr "44" @@ -1166,7 +1379,7 @@ msgstr "50000 - 50 GBit/s" msgid "5000 - 5 GBit/s" msgstr "5000 - 5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:284 +#: ../../configuration/service/dhcp-server.rst:340 msgid "54" msgstr "54" @@ -1179,7 +1392,7 @@ msgstr "5. Second packet for this connection is received by the router. Since co msgid "5 if not defined." msgstr "5 if not defined." -#: ../../configuration/service/dhcp-server.rst:259 +#: ../../configuration/service/dhcp-server.rst:315 #: ../../configuration/system/syslog.rst:124 #: ../../configuration/system/syslog.rst:189 #: ../../configuration/trafficpolicy/index.rst:791 @@ -1187,7 +1400,7 @@ msgstr "5 if not defined." msgid "6" msgstr "6" -#: ../../configuration/service/dhcp-server.rst:294 +#: ../../configuration/service/dhcp-server.rst:350 msgid "66" msgstr "66" @@ -1195,11 +1408,11 @@ msgstr "66" msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic." -#: ../../configuration/service/dhcp-server.rst:299 +#: ../../configuration/service/dhcp-server.rst:355 msgid "67" msgstr "67" -#: ../../configuration/service/dhcp-server.rst:309 +#: ../../configuration/service/dhcp-server.rst:365 msgid "69" msgstr "69" @@ -1222,7 +1435,7 @@ msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defin msgid "7" msgstr "7" -#: ../../configuration/service/dhcp-server.rst:314 +#: ../../configuration/service/dhcp-server.rst:370 msgid "70" msgstr "70" @@ -1299,19 +1512,19 @@ msgstr "<x.x.x.x>-<x.x.x.x>: IP range to match." msgid "<x.x.x.x>: IP address to match." msgstr "<x.x.x.x>: IP address to match." -#: ../../configuration/pki/index.rst:252 +#: ../../configuration/pki/index.rst:283 msgid "ACME" msgstr "ACME" -#: ../../configuration/pki/index.rst:281 +#: ../../configuration/pki/index.rst:312 msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" -#: ../../configuration/protocols/static.rst:150 +#: ../../configuration/protocols/static.rst:183 msgid "ARP" msgstr "ARP" @@ -1335,7 +1548,11 @@ msgstr "A *bit* is written as **bit**," msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." -#: ../../configuration/protocols/bgp.rst:929 +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + +#: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" @@ -1351,7 +1568,7 @@ msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by msgid "A Rule-Set can be applied to every interface:" msgstr "A Rule-Set can be applied to every interface:" -#: ../../configuration/service/dhcp-server.rst:561 +#: ../../configuration/service/dhcp-server.rst:620 msgid "A SNTP server address can be specified for DHCPv6 clients." msgstr "A SNTP server address can be specified for DHCPv6 clients." @@ -1363,11 +1580,11 @@ msgstr "A VRF device is created with an associated route table. Network interfac msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." -#: ../../configuration/service/dhcp-server.rst:533 +#: ../../configuration/service/dhcp-server.rst:592 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." @@ -1379,11 +1596,15 @@ msgstr "A basic configuration requires a tunnel source (source-address), a tunne msgid "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." -#: ../../configuration/interfaces/bridge.rst:195 -#: ../../configuration/interfaces/bridge.rst:229 +#: ../../configuration/interfaces/bridge.rst:204 +#: ../../configuration/interfaces/bridge.rst:238 msgid "A bridge named `br100`" msgstr "A bridge named `br100`" +#: ../../configuration/container/index.rst:144 +msgid "A brief description what this network is all about." +msgstr "A brief description what this network is all about." + #: ../../configuration/trafficpolicy/index.rst:147 msgid "A class can have multiple match filters:" msgstr "A class can have multiple match filters:" @@ -1396,7 +1617,11 @@ msgstr "A common example is the case of some policies which, in order to be effe msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" msgstr "A complete LDAP auth OpenVPN configuration could look like the following example:" -#: ../../configuration/vpn/sstp.rst:335 +#: ../../configuration/service/ids.rst:84 +msgid "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" +msgstr "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" + +#: ../../configuration/vpn/sstp.rst:508 msgid "A connection attempt will be shown as:" msgstr "A connection attempt will be shown as:" @@ -1420,7 +1645,7 @@ msgstr "A domain name is the label (name) assigned to a computer network and is msgid "A dummy interface for the provider-assigned IP;" msgstr "A dummy interface for the provider-assigned IP;" -#: ../../configuration/highavailability/index.rst:426 +#: ../../configuration/highavailability/index.rst:436 msgid "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." @@ -1428,7 +1653,7 @@ msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availabi msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." -#: ../../configuration/service/dhcp-server.rst:152 +#: ../../configuration/service/dhcp-server.rst:201 msgid "A generic `<name>` referencing this sync service." msgstr "A generic `<name>` referencing this sync service." @@ -1436,11 +1661,11 @@ msgstr "A generic `<name>` referencing this sync service." msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." msgstr "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." -#: ../../configuration/pki/index.rst:189 +#: ../../configuration/pki/index.rst:191 msgid "A human readable description what this CA is about." msgstr "A human readable description what this CA is about." -#: ../../configuration/pki/index.rst:228 +#: ../../configuration/pki/index.rst:230 msgid "A human readable description what this certificate is about." msgstr "A human readable description what this certificate is about." @@ -1448,6 +1673,10 @@ msgstr "A human readable description what this certificate is about." msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." + #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." @@ -1456,7 +1685,7 @@ msgstr "A managed device is a network node that implements an SNMP interface tha msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." msgstr "A match filter can contain multiple criteria and will match traffic if all those criteria are true." -#: ../../configuration/protocols/bfd.rst:138 +#: ../../configuration/protocols/bfd.rst:145 msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." msgstr "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." @@ -1476,7 +1705,7 @@ msgstr "A packet rate limit can be set for a rule to apply the rule to traffic a msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." -#: ../../configuration/protocols/bgp.rst:698 +#: ../../configuration/protocols/bgp.rst:720 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." msgstr "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." @@ -1488,7 +1717,7 @@ msgstr "A physical interface is required to connect this MACsec instance to. Tra msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" -#: ../../configuration/firewall/ipv4.rst:485 +#: ../../configuration/firewall/ipv4.rst:508 #: ../../configuration/firewall/ipv6.rst:491 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." @@ -1526,11 +1755,11 @@ msgstr "A segment ID that contains an IP address prefix calculated by an IGP in msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." -#: ../../configuration/service/dhcp-server.rst:589 +#: ../../configuration/service/dhcp-server.rst:648 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" -#: ../../configuration/protocols/bgp.rst:1146 +#: ../../configuration/protocols/bgp.rst:1168 msgid "A simple BGP configuration via IPv6." msgstr "A simple BGP configuration via IPv6." @@ -1538,7 +1767,7 @@ msgstr "A simple BGP configuration via IPv6." msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." msgstr "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." -#: ../../configuration/protocols/bgp.rst:1101 +#: ../../configuration/protocols/bgp.rst:1123 msgid "A simple eBGP configuration:" msgstr "A simple eBGP configuration:" @@ -1602,7 +1831,7 @@ msgstr "A very small buffer will soon start dropping packets." msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." -#: ../../configuration/service/dns.rst:397 +#: ../../configuration/service/dns.rst:411 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." msgstr "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." @@ -1622,6 +1851,21 @@ msgstr "Accept SSH connections for the given `<device>` on TCP port `<port>`. Af msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." msgstr "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." +#: ../../configuration/service/pppoe-server.rst:384 +#: ../../configuration/vpn/l2tp.rst:328 +#: ../../configuration/vpn/pptp.rst:252 +#: ../../configuration/vpn/sstp.rst:286 +msgid "Accept peer interface identifier. By default is not defined." +msgstr "Accept peer interface identifier. By default is not defined." + +#: ../../configuration/service/ipoe-server.rst:364 +#: ../../configuration/service/pppoe-server.rst:530 +#: ../../configuration/vpn/l2tp.rst:484 +#: ../../configuration/vpn/pptp.rst:408 +#: ../../configuration/vpn/sstp.rst:442 +msgid "Acceptable rate of connections (e.g. 1/min, 60/sec)" +msgstr "Acceptable rate of connections (e.g. 1/min, 60/sec)" + #: ../../configuration/policy/access-list.rst:3 msgid "Access List Policy" msgstr "Access List Policy" @@ -1665,7 +1909,7 @@ msgstr "Add Power Constraint element to Beacon and Probe Response frames." msgid "Add a forwarding rule matching UDP port on your internet router." msgstr "Add a forwarding rule matching UDP port on your internet router." -#: ../../configuration/container/index.rst:113 +#: ../../configuration/container/index.rst:118 msgid "Add a host device to the container." msgstr "Add a host device to the container." @@ -1693,11 +1937,11 @@ msgstr "Add new port to SSL-ports acl. Ports included by default in SSL-ports ac msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" msgstr "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" -#: ../../configuration/policy/route-map.rst:221 +#: ../../configuration/policy/route-map.rst:224 msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" msgstr "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" -#: ../../configuration/policy/route-map.rst:236 +#: ../../configuration/policy/route-map.rst:239 msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" @@ -1705,11 +1949,11 @@ msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0 msgid "Add policy route matching VLAN source addresses" msgstr "Add policy route matching VLAN source addresses" -#: ../../configuration/pki/index.rst:217 +#: ../../configuration/pki/index.rst:219 msgid "Add public key portion for the certificate named `name` to the VyOS CLI." msgstr "Add public key portion for the certificate named `name` to the VyOS CLI." -#: ../../configuration/pki/index.rst:193 +#: ../../configuration/pki/index.rst:195 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." msgstr "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." @@ -1717,11 +1961,11 @@ msgstr "Add the CAs private key to the VyOS CLI. This should never leave the sys msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." -#: ../../configuration/pki/index.rst:232 +#: ../../configuration/pki/index.rst:234 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." msgstr "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." -#: ../../configuration/pki/index.rst:174 +#: ../../configuration/pki/index.rst:176 msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." @@ -1729,7 +1973,7 @@ msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." @@ -1765,11 +2009,11 @@ msgstr "Address Families" msgid "Address Groups" msgstr "Address Groups" -#: ../../configuration/service/dhcp-server.rst:592 +#: ../../configuration/service/dhcp-server.rst:651 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." -#: ../../configuration/service/dhcp-server.rst:582 +#: ../../configuration/service/dhcp-server.rst:641 msgid "Address pools" msgstr "Address pools" @@ -1777,14 +2021,30 @@ msgstr "Address pools" msgid "Address to listen for HTTPS requests" msgstr "Address to listen for HTTPS requests" -#: ../../configuration/container/index.rst:136 +#: ../../configuration/container/index.rst:160 +msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." +msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." + +#: ../../configuration/container/index.rst:141 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." -#: ../../configuration/protocols/bgp.rst:647 +#: ../../configuration/protocols/bgp.rst:669 msgid "Administrative Distance" msgstr "Administrative Distance" +#: ../../configuration/service/ipoe-server.rst:335 +msgid "Advanced Interface Options" +msgstr "Advanced Interface Options" + +#: ../../configuration/service/ipoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:425 +#: ../../configuration/vpn/l2tp.rst:369 +#: ../../configuration/vpn/pptp.rst:293 +#: ../../configuration/vpn/sstp.rst:327 +msgid "Advanced Options" +msgstr "Advanced Options" + #: ../../configuration/nat/nat44.rst:301 msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." msgstr "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." @@ -1797,7 +2057,11 @@ msgstr "Advantages of OpenVPN are:" msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" msgstr "Advertise DNS server per https://tools.ietf.org/html/rfc6106" -#: ../../configuration/service/router-advert.rst:53 +#: ../../configuration/service/router-advert.rst:78 +msgid "Advertising a NAT64 Prefix" +msgstr "Advertising a NAT64 Prefix" + +#: ../../configuration/service/router-advert.rst:54 msgid "Advertising a Prefix" msgstr "Advertising a Prefix" @@ -1805,7 +2069,7 @@ msgstr "Advertising a Prefix" msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" -#: ../../configuration/vrf/index.rst:325 +#: ../../configuration/vrf/index.rst:344 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." @@ -1813,10 +2077,18 @@ msgstr "After committing the configuration we can verify all leaked routes are i msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." -#: ../../configuration/pki/index.rst:212 +#: ../../configuration/vpn/ipsec.rst:418 +msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." +msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." + +#: ../../configuration/pki/index.rst:214 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." msgstr "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." +#: ../../configuration/vpn/ipsec.rst:399 +msgid "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." +msgstr "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." + #: ../../configuration/service/snmp.rst:39 msgid "Agent - software which runs on managed devices" msgstr "Agent - software which runs on managed devices" @@ -1825,7 +2097,7 @@ msgstr "Agent - software which runs on managed devices" msgid "Alert" msgstr "Alert" -#: ../../configuration/highavailability/index.rst:346 +#: ../../configuration/highavailability/index.rst:356 msgid "Algorithm" msgstr "Algorithm" @@ -1833,7 +2105,7 @@ msgstr "Algorithm" msgid "Aliases" msgstr "Aliases" -#: ../../configuration/service/dns.rst:167 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" @@ -1861,7 +2133,7 @@ msgstr "All interfaces used for the DHCP relay must be configured. This includes msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -#: ../../configuration/service/dns.rst:169 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" @@ -1897,7 +2169,11 @@ msgstr "All traffic to and from an interface within a zone is permitted." msgid "All tunnel sessions can be checked via:" msgstr "All tunnel sessions can be checked via:" -#: ../../configuration/vpn/l2tp.rst:209 +#: ../../configuration/service/ipoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:193 +#: ../../configuration/vpn/l2tp.rst:236 +#: ../../configuration/vpn/pptp.rst:176 +#: ../../configuration/vpn/sstp.rst:209 msgid "Allocation clients ip addresses by RADIUS" msgstr "Allocation clients ip addresses by RADIUS" @@ -1913,7 +2189,11 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -#: ../../configuration/service/dns.rst:359 +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." + +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -1933,13 +2213,13 @@ msgstr "Allow this BFD peer to not be directly connected" msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." -#: ../../configuration/firewall/ipv4.rst:812 +#: ../../configuration/firewall/ipv4.rst:835 #: ../../configuration/firewall/ipv6.rst:821 #: ../../configuration/system/conntrack.rst:199 msgid "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." -#: ../../configuration/interfaces/bridge.rst:162 +#: ../../configuration/interfaces/bridge.rst:171 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." msgstr "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." @@ -1947,11 +2227,11 @@ msgstr "Allows specific VLAN IDs to pass through the bridge member interface. Th msgid "Allows to define URL path matching rules for a specific service." msgstr "Allows to define URL path matching rules for a specific service." -#: ../../configuration/protocols/static.rst:69 +#: ../../configuration/protocols/static.rst:92 msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." -#: ../../configuration/protocols/static.rst:89 +#: ../../configuration/protocols/static.rst:112 msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." msgstr "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." @@ -1977,11 +2257,11 @@ msgstr "Also, for those who haven't updated to newer version, legacy documentati msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." msgstr "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." -#: ../../configuration/protocols/static.rst:138 +#: ../../configuration/protocols/static.rst:171 msgid "Alternate Routing Tables" msgstr "Alternate Routing Tables" -#: ../../configuration/protocols/static.rst:142 +#: ../../configuration/protocols/static.rst:175 msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." msgstr "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." @@ -1989,7 +2269,7 @@ msgstr "Alternate routing tables are used with policy based routing by utilizing msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" -#: ../../configuration/service/dhcp-server.rst:116 +#: ../../configuration/service/dhcp-server.rst:132 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." @@ -2037,7 +2317,7 @@ msgstr "An agent is a network-management software module that resides on a manag msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" -#: ../../configuration/firewall/ipv4.rst:373 +#: ../../configuration/firewall/ipv4.rst:396 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." @@ -2062,7 +2342,7 @@ msgstr "An basic introduction to zone-based firewalls can be found `here <https: #: ../../configuration/interfaces/tunnel.rst:71 #: ../../configuration/interfaces/tunnel.rst:93 #: ../../configuration/interfaces/tunnel.rst:194 -#: ../../configuration/system/login.rst:195 +#: ../../configuration/system/login.rst:199 msgid "An example:" msgstr "An example:" @@ -2070,11 +2350,11 @@ msgstr "An example:" msgid "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" msgstr "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" -#: ../../configuration/interfaces/bridge.rst:227 +#: ../../configuration/interfaces/bridge.rst:236 msgid "An example of creating a VLAN-aware bridge is as follows:" msgstr "An example of creating a VLAN-aware bridge is as follows:" -#: ../../configuration/system/login.rst:149 +#: ../../configuration/system/login.rst:153 msgid "An example of key generation:" msgstr "An example of key generation:" @@ -2102,6 +2382,10 @@ msgstr "And base chain for traffic generated by the router is ``set firewall ipv msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" +#: ../../configuration/service/ids.rst:138 +msgid "And content of the script:" +msgstr "And content of the script:" + #: ../../configuration/policy/route.rst:76 msgid "And for ipv6:" msgstr "And for ipv6:" @@ -2114,7 +2398,7 @@ msgstr "And next, some configuration example where groups are used:" msgid "And op-mode commands:" msgstr "And op-mode commands:" -#: ../../configuration/system/ip.rst:84 +#: ../../configuration/system/ip.rst:97 msgid "And the different IPv4 **reset** commands available:" msgstr "And the different IPv4 **reset** commands available:" @@ -2131,6 +2415,10 @@ msgstr "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT con msgid "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." msgstr "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." +#: ../../configuration/vpn/ipsec.rst:549 +msgid "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/vrf/index.rst:52 #: ../../configuration/vrf/index.rst:62 msgid "Apply a route-map filter to routes for the specified protocol." @@ -2156,7 +2444,7 @@ msgstr "Applying a Rule-Set to a Zone" msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" msgstr "Applying a traffic policy" @@ -2221,11 +2509,15 @@ msgstr "As a result, the processing of each packet becomes more efficient, poten msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." msgstr "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." +#: ../../configuration/vpn/ipsec.rst:523 +msgid "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." +msgstr "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." + #: ../../configuration/firewall/flowtables.rst:109 msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." -#: ../../configuration/system/option.rst:80 +#: ../../configuration/system/option.rst:110 msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." msgstr "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." @@ -2265,7 +2557,7 @@ msgstr "As the example image below shows, the device was configured with rules b msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." msgstr "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." -#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/l2tp.rst:86 msgid "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" msgstr "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" @@ -2301,7 +2593,7 @@ msgstr "Assign `<member>` interface to bridge `<interface>`. A completion helper msgid "Assign a specific backend to a rule" msgstr "Assign a specific backend to a rule" -#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:98 msgid "Assign interface identified by `<interface>` to VRF named `<name>`." msgstr "Assign interface identified by `<interface>` to VRF named `<name>`." @@ -2309,15 +2601,18 @@ msgstr "Assign interface identified by `<interface>` to VRF named `<name>`." msgid "Assign member interfaces to PortChannel" msgstr "Assign member interfaces to PortChannel" -#: ../../configuration/vpn/sstp.rst:80 +#: ../../configuration/service/pppoe-server.rst:437 +#: ../../configuration/vpn/l2tp.rst:381 +#: ../../configuration/vpn/pptp.rst:305 +#: ../../configuration/vpn/sstp.rst:339 msgid "Assign static IP address to `<user>` account." msgstr "Assign static IP address to `<user>` account." -#: ../../configuration/service/dhcp-server.rst:97 +#: ../../configuration/service/dhcp-server.rst:113 msgid "Assign the IP address to this machine for `<time>` seconds." msgstr "Assign the IP address to this machine for `<time>` seconds." -#: ../../configuration/system/login.rst:62 +#: ../../configuration/system/login.rst:66 msgid "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." msgstr "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." @@ -2401,7 +2696,15 @@ msgstr "Attaches user-defined network to a container. Only one network must be s msgid "Authentication" msgstr "Authentication" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/service/ipoe-server.rst:310 +#: ../../configuration/service/pppoe-server.rst:428 +#: ../../configuration/vpn/l2tp.rst:372 +#: ../../configuration/vpn/pptp.rst:296 +#: ../../configuration/vpn/sstp.rst:330 +msgid "Authentication Advanced Options" +msgstr "Authentication Advanced Options" + +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" msgstr "Authentication (EAPoL)" @@ -2433,15 +2736,19 @@ msgstr "Authentication token" msgid "Authentication – to verify that the message is from a valid source." msgstr "Authentication – to verify that the message is from a valid source." +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" + #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" msgstr "Authorization token" -#: ../../configuration/service/pppoe-server.rst:159 +#: ../../configuration/service/pppoe-server.rst:228 msgid "Automatic VLAN Creation" msgstr "Automatic VLAN Creation" -#: ../../configuration/service/ipoe-server.rst:96 +#: ../../configuration/service/ipoe-server.rst:97 msgid "Automatic VLAN creation" msgstr "Automatic VLAN creation" @@ -2469,7 +2776,7 @@ msgstr "Azure-data-explorer" msgid "BFD" msgstr "BFD" -#: ../../configuration/protocols/bfd.rst:136 +#: ../../configuration/protocols/bfd.rst:143 msgid "BFD Static Route Monitoring" msgstr "BFD Static Route Monitoring" @@ -2505,7 +2812,7 @@ msgstr "BGP Example" msgid "BGP Router Configuration" msgstr "BGP Router Configuration" -#: ../../configuration/protocols/bgp.rst:888 +#: ../../configuration/protocols/bgp.rst:910 msgid "BGP Scaling Configuration" msgstr "BGP Scaling Configuration" @@ -2517,7 +2824,7 @@ msgstr "BGP aggregator attribute: AS number or IP address of an aggregation." msgid "BGP as-path list to match." msgstr "BGP as-path list to match." -#: ../../configuration/policy/route-map.rst:216 +#: ../../configuration/policy/route-map.rst:219 msgid "BGP atomic aggregate attribute." msgstr "BGP atomic aggregate attribute." @@ -2533,11 +2840,11 @@ msgstr "BGP extended community to match." msgid "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" msgstr "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" -#: ../../configuration/protocols/bgp.rst:890 +#: ../../configuration/protocols/bgp.rst:912 msgid "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." msgstr "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." -#: ../../configuration/vrf/index.rst:413 +#: ../../configuration/vrf/index.rst:432 msgid "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." msgstr "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." @@ -2557,6 +2864,10 @@ msgstr "Babel is a modern routing protocol designed to be robust and efficient b msgid "Backend" msgstr "Backend" +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" msgstr "Balance algorithms:" @@ -2565,22 +2876,24 @@ msgstr "Balance algorithms:" msgid "Balancing Rules" msgstr "Balancing Rules" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" msgstr "Balancing based on domain name" -#: ../../configuration/service/ipoe-server.rst:122 -#: ../../configuration/service/pppoe-server.rst:182 -#: ../../configuration/vpn/l2tp.rst:113 +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + +#: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" msgstr "Bandwidth Shaping" -#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/ipoe-server.rst:129 #: ../../configuration/vpn/l2tp.rst:118 msgid "Bandwidth Shaping for local users" msgstr "Bandwidth Shaping for local users" -#: ../../configuration/service/pppoe-server.rst:184 +#: ../../configuration/service/pppoe-server.rst:253 msgid "Bandwidth rate limits can be set for local users or RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users or RADIUS based attributes." @@ -2588,7 +2901,7 @@ msgstr "Bandwidth rate limits can be set for local users or RADIUS based attribu msgid "Bandwidth rate limits can be set for local users or via RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users or via RADIUS based attributes." -#: ../../configuration/service/ipoe-server.rst:124 +#: ../../configuration/service/ipoe-server.rst:125 msgid "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." msgstr "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." @@ -2640,7 +2953,7 @@ msgstr "Because an aggregator cannot be active without at least one available li msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." @@ -2648,7 +2961,11 @@ msgstr "Before enabling any hardware segmentation offload a corresponding softwa msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." -#: ../../configuration/vpn/site2site_ipsec.rst:422 +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" + +#: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." msgstr "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." @@ -2672,6 +2989,10 @@ msgstr "Bidirectional NAT" msgid "Binary value" msgstr "Binary value" +#: ../../configuration/container/index.rst:153 +msgid "Bind container network to a given VRF instance." +msgstr "Bind container network to a given VRF instance." + #: ../../configuration/protocols/bfd.rst:39 msgid "Bind listener to specific interface/address, mandatory for IPv6" msgstr "Bind listener to specific interface/address, mandatory for IPv6" @@ -2680,7 +3001,7 @@ msgstr "Bind listener to specific interface/address, mandatory for IPv6" msgid "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." msgstr "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." -#: ../../configuration/protocols/static.rst:108 +#: ../../configuration/protocols/static.rst:142 msgid "Blackhole" msgstr "Blackhole" @@ -2708,11 +3029,11 @@ msgstr "Bond / Link Aggregation" msgid "Bond options" msgstr "Bond options" -#: ../../configuration/service/dhcp-server.rst:306 +#: ../../configuration/service/dhcp-server.rst:362 msgid "Boot image length in 512-octet blocks" msgstr "Boot image length in 512-octet blocks" -#: ../../configuration/service/dhcp-server.rst:301 +#: ../../configuration/service/dhcp-server.rst:357 msgid "Bootstrap file name" msgstr "Bootstrap file name" @@ -2752,8 +3073,8 @@ msgstr "Bridge Options" msgid "Bridge Rules" msgstr "Bridge Rules" -#: ../../configuration/interfaces/bridge.rst:198 -#: ../../configuration/interfaces/bridge.rst:233 +#: ../../configuration/interfaces/bridge.rst:207 +#: ../../configuration/interfaces/bridge.rst:242 msgid "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" msgstr "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" @@ -2761,6 +3082,14 @@ msgstr "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" msgid "Bridge maximum aging `<time>` in seconds (default: 20)." msgstr "Bridge maximum aging `<time>` in seconds (default: 20)." +#: ../../configuration/service/ipoe-server.rst:360 +#: ../../configuration/service/pppoe-server.rst:526 +#: ../../configuration/vpn/l2tp.rst:480 +#: ../../configuration/vpn/pptp.rst:404 +#: ../../configuration/vpn/sstp.rst:438 +msgid "Burst count" +msgstr "Burst count" + #: ../../configuration/interfaces/pppoe.rst:41 msgid "Business Users" msgstr "Business Users" @@ -2777,15 +3106,15 @@ msgstr "By default, FRR will bring up peering with minimal common capability for msgid "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." msgstr "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." -#: ../../configuration/system/login.rst:126 +#: ../../configuration/system/login.rst:130 msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." msgstr "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." -#: ../../configuration/service/dns.rst:393 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." msgstr "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." msgstr "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." @@ -2794,6 +3123,10 @@ msgstr "By default, enabling RPKI does not change best path selection. In partic msgid "By default, it supports both planned and unplanned outages." msgstr "By default, it supports both planned and unplanned outages." +#: ../../configuration/protocols/bgp.rst:661 +msgid "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." +msgstr "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." + #: ../../configuration/service/https.rst:45 msgid "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." msgstr "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." @@ -2839,7 +3172,11 @@ msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead c msgid "Bypassing the webproxy" msgstr "Bypassing the webproxy" -#: ../../configuration/pki/index.rst:170 +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" + +#: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" msgstr "CA (Certificate Authority)" @@ -2860,20 +3197,20 @@ msgstr "Capability Negotiation" msgid "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." msgstr "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." -#: ../../configuration/pki/index.rst:33 +#: ../../configuration/pki/index.rst:35 msgid "Certificate Authority (CA)" msgstr "Certificate Authority (CA)" -#: ../../configuration/pki/index.rst:185 +#: ../../configuration/pki/index.rst:187 msgid "Certificate revocation list in PEM format." msgstr "Certificate revocation list in PEM format." -#: ../../configuration/pki/index.rst:63 +#: ../../configuration/pki/index.rst:65 #: ../../configuration/vpn/sstp.rst:27 msgid "Certificates" msgstr "Certificates" -#: ../../configuration/system/option.rst:66 +#: ../../configuration/system/option.rst:96 msgid "Change system keyboard layout to given language." msgstr "Change system keyboard layout to given language." @@ -2889,7 +3226,7 @@ msgstr "Changes in BGP policies require the BGP session to be cleared. Clearing msgid "Changes to the NAT system only affect newly established connections. Already established connections are not affected." msgstr "Changes to the NAT system only affect newly established connections. Already established connections are not affected." -#: ../../configuration/system/option.rst:70 +#: ../../configuration/system/option.rst:100 msgid "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." msgstr "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." @@ -2909,11 +3246,11 @@ msgstr "Check if the Intel® QAT device is up and ready to do the job." msgid "Check status" msgstr "Check status" -#: ../../configuration/system/ipv6.rst:64 +#: ../../configuration/system/ipv6.rst:77 msgid "Check the many parameters available for the `show ipv6 route` command:" msgstr "Check the many parameters available for the `show ipv6 route` command:" -#: ../../configuration/service/pppoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:315 msgid "Checking connections" msgstr "Checking connections" @@ -2945,11 +3282,11 @@ msgstr "Class treatment" msgid "Classes" msgstr "Classes" -#: ../../configuration/service/dhcp-server.rst:326 +#: ../../configuration/service/dhcp-server.rst:382 msgid "Classless static route" msgstr "Classless static route" -#: ../../configuration/policy/route-map.rst:269 +#: ../../configuration/policy/route-map.rst:272 msgid "Clear all BGP extcommunities." msgstr "Clear all BGP extcommunities." @@ -2973,7 +3310,15 @@ msgstr "Client Authentication" msgid "Client Configuration" msgstr "Client Configuration" -#: ../../configuration/vpn/sstp.rst:289 +#: ../../configuration/service/ipoe-server.rst:328 +#: ../../configuration/service/pppoe-server.rst:446 +#: ../../configuration/vpn/l2tp.rst:400 +#: ../../configuration/vpn/pptp.rst:324 +#: ../../configuration/vpn/sstp.rst:358 +msgid "Client IP Pool Advanced Options" +msgstr "Client IP Pool Advanced Options" + +#: ../../configuration/vpn/sstp.rst:358 msgid "Client IP addresses will be provided from pool `192.0.2.0/25`" msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" @@ -2981,15 +3326,15 @@ msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" msgid "Client Side" msgstr "Client Side" -#: ../../configuration/service/ipoe-server.rst:184 +#: ../../configuration/service/ipoe-server.rst:186 msgid "Client configuration" msgstr "Client configuration" -#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:322 msgid "Client domain name" msgstr "Client domain name" -#: ../../configuration/service/dhcp-server.rst:321 +#: ../../configuration/service/dhcp-server.rst:377 msgid "Client domain search" msgstr "Client domain search" @@ -3001,7 +3346,7 @@ msgstr "Client isolation can be used to prevent low-level bridging of frames bet msgid "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" msgstr "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" -#: ../../configuration/service/dhcp-server.rst:514 +#: ../../configuration/service/dhcp-server.rst:573 msgid "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." msgstr "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." @@ -3019,11 +3364,11 @@ msgstr "Command completion can be used to list available time zones. The adjustm msgid "Command for disabling a rule but keep it in the configuration." msgstr "Command for disabling a rule but keep it in the configuration." -#: ../../configuration/vrf/index.rst:128 +#: ../../configuration/vrf/index.rst:147 msgid "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." msgstr "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." -#: ../../configuration/firewall/ipv4.rst:1179 +#: ../../configuration/firewall/ipv4.rst:1202 #: ../../configuration/firewall/ipv6.rst:1195 msgid "Command used to update GeoIP database and firewall sets." msgstr "Command used to update GeoIP database and firewall sets." @@ -3032,7 +3377,7 @@ msgstr "Command used to update GeoIP database and firewall sets." msgid "Commands" msgstr "Commands" -#: ../../configuration/service/dhcp-server.rst:379 +#: ../../configuration/service/dhcp-server.rst:436 msgid "Common configuration, valid for both primary and secondary node." msgstr "Common configuration, valid for both primary and secondary node." @@ -3059,7 +3404,7 @@ msgstr "Common interface configuration" msgid "Common parameters" msgstr "Common parameters" -#: ../../configuration/protocols/bgp.rst:927 +#: ../../configuration/protocols/bgp.rst:949 msgid "Confederation Configuration" msgstr "Confederation Configuration" @@ -3098,28 +3443,28 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/policy/local-route.rst:9 #: ../../configuration/policy/prefix-list.rst:16 #: ../../configuration/policy/route-map.rst:10 -#: ../../configuration/protocols/bfd.rst:143 +#: ../../configuration/protocols/bfd.rst:150 #: ../../configuration/protocols/bgp.rst:164 #: ../../configuration/protocols/igmp-proxy.rst:14 #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 #: ../../configuration/service/dhcp-relay.rst:19 #: ../../configuration/service/dhcp-relay.rst:137 #: ../../configuration/service/dhcp-server.rst:22 -#: ../../configuration/service/dhcp-server.rst:510 +#: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:227 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 -#: ../../configuration/service/ipoe-server.rst:28 +#: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 #: ../../configuration/service/mdns.rst:19 #: ../../configuration/service/ntp.rst:40 -#: ../../configuration/service/pppoe-server.rst:17 +#: ../../configuration/service/router-advert.rst:28 #: ../../configuration/service/salt-minion.rst:25 #: ../../configuration/service/ssh.rst:36 #: ../../configuration/service/tftp-server.rst:14 @@ -3127,18 +3472,18 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/system/default-route.rst:12 #: ../../configuration/system/flow-accounting.rst:43 #: ../../configuration/system/lcd.rst:17 -#: ../../configuration/system/login.rst:241 -#: ../../configuration/system/login.rst:310 +#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:314 #: ../../configuration/system/sflow.rst:12 #: ../../configuration/system/updates.rst:8 #: ../../configuration/vpn/dmvpn.rst:38 #: ../../configuration/vpn/dmvpn.rst:182 #: ../../configuration/vpn/openconnect.rst:21 -#: ../../configuration/vpn/sstp.rst:65 +#: ../../configuration/vpn/sstp.rst:40 #: ../../configuration/vrf/index.rst:16 -#: ../../configuration/vrf/index.rst:253 -#: ../../configuration/vrf/index.rst:288 -#: ../../configuration/vrf/index.rst:436 +#: ../../configuration/vrf/index.rst:272 +#: ../../configuration/vrf/index.rst:307 +#: ../../configuration/vrf/index.rst:455 msgid "Configuration" msgstr "Configuration" @@ -3148,8 +3493,8 @@ msgstr "Configuration" #: ../../configuration/protocols/pim6.rst:78 #: ../../configuration/protocols/rip.rst:239 #: ../../configuration/protocols/segment-routing.rst:187 -#: ../../configuration/system/login.rst:279 -#: ../../configuration/system/login.rst:350 +#: ../../configuration/system/login.rst:283 +#: ../../configuration/system/login.rst:354 msgid "Configuration Example" msgstr "Configuration Example" @@ -3171,7 +3516,7 @@ msgstr "Configuration Options" msgid "Configuration commands covered in this section:" msgstr "Configuration commands covered in this section:" -#: ../../configuration/vpn/ipsec.rst:284 +#: ../../configuration/vpn/ipsec.rst:288 msgid "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" msgstr "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" @@ -3183,7 +3528,7 @@ msgstr "Configuration commands will display. Note the command with the public ke msgid "Configuration example:" msgstr "Configuration example:" -#: ../../configuration/vrf/index.rst:430 +#: ../../configuration/vrf/index.rst:449 msgid "Configuration for these exported routes must, at a minimum, specify these two parameters." msgstr "Configuration for these exported routes must, at a minimum, specify these two parameters." @@ -3191,15 +3536,19 @@ msgstr "Configuration for these exported routes must, at a minimum, specify thes msgid "Configuration of :ref:`routing-static`" msgstr "Configuration of :ref:`routing-static`" -#: ../../configuration/service/dhcp-server.rst:371 +#: ../../configuration/service/dhcp-server.rst:427 +msgid "Configuration of a DHCP HA pair:" +msgstr "Configuration of a DHCP HA pair:" + +#: ../../configuration/service/dhcp-server.rst:411 msgid "Configuration of a DHCP failover pair" msgstr "Configuration of a DHCP failover pair" -#: ../../configuration/vrf/index.rst:438 +#: ../../configuration/vrf/index.rst:457 msgid "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." msgstr "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." -#: ../../configuration/protocols/static.rst:166 +#: ../../configuration/protocols/static.rst:199 #: ../../configuration/system/conntrack.rst:12 msgid "Configure" msgstr "Configure" @@ -3208,11 +3557,11 @@ msgstr "Configure" msgid "Configure BFD" msgstr "Configure BFD" -#: ../../configuration/service/dns.rst:258 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `<record>` which should be updated. This can be set multiple times." msgstr "Configure DNS `<record>` which should be updated. This can be set multiple times." -#: ../../configuration/service/dns.rst:253 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `<zone>` to be updated." msgstr "Configure DNS `<zone>` to be updated." @@ -3230,15 +3579,27 @@ msgstr "Configure Graceful Restart :rfc:`3623` helper support. By default, helpe msgid "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." msgstr "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." +#: ../../configuration/service/ids.rst:69 +msgid "Configure ICMP threshold parameters." +msgstr "Configure ICMP threshold parameters." + #: ../../configuration/service/dhcp-relay.rst:40 msgid "Configure IP address of the DHCP `<server>` which will handle the relayed packets." msgstr "Configure IP address of the DHCP `<server>` which will handle the relayed packets." -#: ../../configuration/vpn/sstp.rst:214 +#: ../../configuration/service/ipoe-server.rst:162 +#: ../../configuration/service/pppoe-server.rst:124 +#: ../../configuration/vpn/l2tp.rst:167 +#: ../../configuration/vpn/pptp.rst:107 +#: ../../configuration/vpn/sstp.rst:140 msgid "Configure RADIUS `<server>` and its required port for authentication requests." msgstr "Configure RADIUS `<server>` and its required port for authentication requests." -#: ../../configuration/vpn/sstp.rst:218 +#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/pppoe-server.rst:90 +#: ../../configuration/vpn/l2tp.rst:133 +#: ../../configuration/vpn/pptp.rst:73 +#: ../../configuration/vpn/sstp.rst:106 msgid "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." msgstr "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." @@ -3246,23 +3607,39 @@ msgstr "Configure RADIUS `<server>` and its required shared `<secret>` for commu msgid "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." msgstr "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." +#: ../../configuration/service/ids.rst:74 +msgid "Configure TCP threshold parameters" +msgstr "Configure TCP threshold parameters" + +#: ../../configuration/service/ids.rst:79 +msgid "Configure UDP threshold parameters" +msgstr "Configure UDP threshold parameters" + #: ../../_include/interface-mtu.txt:4 msgid "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." msgstr "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." -#: ../../configuration/system/login.rst:375 +#: ../../configuration/system/login.rst:379 msgid "Configure `<message>` which is shown after user has logged in to the system." msgstr "Configure `<message>` which is shown after user has logged in to the system." -#: ../../configuration/system/login.rst:370 +#: ../../configuration/system/login.rst:374 msgid "Configure `<message>` which is shown during SSH connect and before a user is logged in." msgstr "Configure `<message>` which is shown during SSH connect and before a user is logged in." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:440 +msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:355 msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." -#: ../../configuration/service/dns.rst:334 +#: ../../configuration/service/dns.rst:435 +msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:348 msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." @@ -3274,13 +3651,13 @@ msgstr "Configure a URL that contains information about images." msgid "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." msgstr "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." -#: ../../configuration/protocols/bfd.rst:154 -#: ../../configuration/protocols/bfd.rst:167 +#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:174 msgid "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." msgstr "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." -#: ../../configuration/protocols/bfd.rst:148 -#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:155 +#: ../../configuration/protocols/bfd.rst:168 msgid "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." msgstr "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." @@ -3304,6 +3681,10 @@ msgstr "Configure agent IP address associated with this interface." msgid "Configure aggregation delay timer interval." msgstr "Configure aggregation delay timer interval." +#: ../../configuration/service/ids.rst:24 +msgid "Configure alert script that will be executed when an attack is detected." +msgstr "Configure alert script that will be executed when an attack is detected." + #: ../../configuration/vpn/openconnect.rst:285 msgid "Configure an accounting server and enable accounting with:" msgstr "Configure an accounting server and enable accounting with:" @@ -3328,6 +3709,10 @@ msgstr "Configure backend `<name>` mode TCP or HTTP" msgid "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" msgstr "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" +#: ../../configuration/service/ids.rst:33 +msgid "Configure direction for processing traffic." +msgstr "Configure direction for processing traffic." + #: ../../configuration/service/console-server.rst:49 msgid "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." msgstr "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." @@ -3336,6 +3721,14 @@ msgstr "Configure either one or two stop bits. This defaults to one stop bits if msgid "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." msgstr "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." +#: ../../configuration/service/ids.rst:64 +msgid "Configure general threshold parameters." +msgstr "Configure general threshold parameters." + +#: ../../configuration/service/ids.rst:28 +msgid "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." +msgstr "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." + #: ../../configuration/interfaces/bridge.rst:46 msgid "Configure individual bridge port `<priority>`." msgstr "Configure individual bridge port `<priority>`." @@ -3353,6 +3746,14 @@ msgstr "Configure interface-specific Host/Router behaviour. If set, the interfac msgid "Configure interface `<interface>` with one or more interface addresses." msgstr "Configure interface `<interface>` with one or more interface addresses." +#: ../../configuration/service/ids.rst:42 +msgid "Configure listen interface for mirroring traffic." +msgstr "Configure listen interface for mirroring traffic." + +#: ../../configuration/service/ids.rst:55 +msgid "Configure local IPv4 address to listen for sflow." +msgstr "Configure local IPv4 address to listen for sflow." + #: ../../configuration/service/snmp.rst:148 msgid "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" msgstr "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" @@ -3369,7 +3770,7 @@ msgstr "Configure next-hop `<address>` for an IPv4 static route. Multiple static msgid "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." msgstr "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." -#: ../../configuration/system/option.rst:95 +#: ../../configuration/system/option.rst:125 msgid "Configure one of the predefined system performance profiles." msgstr "Configure one of the predefined system performance profiles." @@ -3381,7 +3782,7 @@ msgstr "Configure one or more attributes to the given NTP server." msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." msgstr "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." msgstr "Configure optional TTL value on the given resource record. This defaults to 600 seconds." @@ -3405,6 +3806,10 @@ msgstr "Configure port mirroring for `interface` outbound traffic and copy the t msgid "Configure port number of remote VXLAN endpoint." msgstr "Configure port number of remote VXLAN endpoint." +#: ../../configuration/service/ids.rst:59 +msgid "Configure port number to be used for sflow conection. Default port is 6343." +msgstr "Configure port number to be used for sflow conection. Default port is 6343." + #: ../../configuration/system/syslog.rst:73 msgid "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." msgstr "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." @@ -3413,6 +3818,14 @@ msgstr "Configure protocol used for communication to remote syslog host. This ca msgid "Configure proxy port if it does not listen to the default port 80." msgstr "Configure proxy port if it does not listen to the default port 80." +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" + #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" msgstr "Configure sFlow agent IPv4 or IPv6 address" @@ -3429,7 +3842,7 @@ msgstr "Configure service `<name>` mode TCP or HTTP" msgid "Configure service `<name>` to use the backend <name>" msgstr "Configure service `<name>` to use the backend <name>" -#: ../../configuration/system/login.rst:394 +#: ../../configuration/system/login.rst:398 msgid "Configure session timeout after which the user will be logged out." msgstr "Configure session timeout after which the user will be logged out." @@ -3445,7 +3858,7 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:247 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." msgstr "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." @@ -3457,18 +3870,22 @@ msgstr "Configure the IPv4 or IPv6 listen address of the TFTP server. Multiple I msgid "Configure the connection tracking protocol helper modules. All modules are enable by default." msgstr "Configure the connection tracking protocol helper modules. All modules are enable by default." -#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:256 msgid "Configure the discrete port under which the RADIUS server can be reached." msgstr "Configure the discrete port under which the RADIUS server can be reached." -#: ../../configuration/system/login.rst:321 +#: ../../configuration/system/login.rst:325 msgid "Configure the discrete port under which the TACACS server can be reached." msgstr "Configure the discrete port under which the TACACS server can be reached." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." msgstr "Configure the load-balancing reverse-proxy service for HTTP." +#: ../../configuration/service/ids.rst:46 +msgid "Configure traffic capture mode." +msgstr "Configure traffic capture mode." + #: ../../_include/interface-mac.txt:4 msgid "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." msgstr "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." @@ -3489,10 +3906,54 @@ msgstr "Configured value" msgid "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." msgstr "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." +#: ../../configuration/service/ipoe-server.rst:27 +msgid "Configuring IPoE Server" +msgstr "Configuring IPoE Server" + +#: ../../configuration/vpn/l2tp.rst:57 +msgid "Configuring IPsec" +msgstr "Configuring IPsec" + +#: ../../configuration/vpn/l2tp.rst:12 +msgid "Configuring L2TP Server" +msgstr "Configuring L2TP Server" + +#: ../../configuration/vpn/l2tp.rst:270 +msgid "Configuring LNS (L2TP Network Server)" +msgstr "Configuring LNS (L2TP Network Server)" + +#: ../../configuration/service/pppoe-server.rst:18 +msgid "Configuring PPPoE Server" +msgstr "Configuring PPPoE Server" + +#: ../../configuration/vpn/pptp.rst:13 +msgid "Configuring PPTP Server" +msgstr "Configuring PPTP Server" + #: ../../configuration/vpn/openconnect.rst:279 msgid "Configuring RADIUS accounting" msgstr "Configuring RADIUS accounting" +#: ../../configuration/service/ipoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:76 +#: ../../configuration/vpn/l2tp.rst:119 +#: ../../configuration/vpn/pptp.rst:59 +#: ../../configuration/vpn/sstp.rst:92 +msgid "Configuring RADIUS authentication" +msgstr "Configuring RADIUS authentication" + +#: ../../configuration/vpn/sstp.rst:24 +msgid "Configuring SSTP Server" +msgstr "Configuring SSTP Server" + +#: ../../configuration/vpn/sstp.rst:476 +msgid "Configuring SSTP client" +msgstr "Configuring SSTP client" + +#: ../../configuration/vpn/ipsec.rst:494 +msgid "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." +msgstr "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." + #: ../../configuration/service/tftp-server.rst:39 msgid "Configuring a listen-address is essential for the service to work." msgstr "Configuring a listen-address is essential for the service to work." @@ -3502,11 +3963,15 @@ msgstr "Configuring a listen-address is essential for the service to work." msgid "Connect/Disconnect" msgstr "Connect/Disconnect" -#: ../../configuration/vpn/sstp.rst:155 +#: ../../configuration/service/ipoe-server.rst:376 +#: ../../configuration/service/pppoe-server.rst:546 +#: ../../configuration/vpn/l2tp.rst:500 +#: ../../configuration/vpn/pptp.rst:424 +#: ../../configuration/vpn/sstp.rst:458 msgid "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." msgstr "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." -#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:143 msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." @@ -3514,6 +3979,10 @@ msgstr "Connections to the RPKI caching server can not only be established by HT msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +#: ../../configuration/protocols/rpki.rst:141 +msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." + #: ../../configuration/system/conntrack.rst:4 msgid "Conntrack" msgstr "Conntrack" @@ -3542,7 +4011,7 @@ msgstr "Console" msgid "Console Server" msgstr "Console Server" -#: ../../configuration/container/index.rst:106 +#: ../../configuration/container/index.rst:111 msgid "Constrain the memory available to the container." msgstr "Constrain the memory available to the container." @@ -3550,6 +4019,14 @@ msgstr "Constrain the memory available to the container." msgid "Container" msgstr "Container" +#: ../../configuration/container/index.rst:136 +msgid "Container Networks" +msgstr "Container Networks" + +#: ../../configuration/container/index.rst:156 +msgid "Container Registry" +msgstr "Container Registry" + #: ../../configuration/system/conntrack.rst:65 msgid "Contrack Timeouts" msgstr "Contrack Timeouts" @@ -3578,11 +4055,11 @@ msgstr "Creat community-list policy identified by name <text>." msgid "Creat extcommunity-list policy identified by name <text>." msgstr "Creat extcommunity-list policy identified by name <text>." -#: ../../configuration/service/dhcp-server.rst:104 +#: ../../configuration/service/dhcp-server.rst:120 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." -#: ../../configuration/service/dhcp-server.rst:110 +#: ../../configuration/service/dhcp-server.rst:126 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." @@ -3590,11 +4067,22 @@ msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are take msgid "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" msgstr "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" -#: ../../configuration/vpn/sstp.rst:70 +#: ../../configuration/service/pppoe-server.rst:49 +#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/pptp.rst:38 +#: ../../configuration/vpn/sstp.rst:63 msgid "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." msgstr "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." -#: ../../configuration/interfaces/bridge.rst:190 +#: ../../configuration/service/dhcp-server.rst:160 +msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." + +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" + +#: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" msgstr "Create a basic bridge" @@ -3606,7 +4094,11 @@ msgstr "Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using msgid "Create a load balancing rule, it can be a number between 1 and 9999:" msgstr "Create a load balancing rule, it can be a number between 1 and 9999:" -#: ../../configuration/service/dhcp-server.rst:183 +#: ../../configuration/service/dhcp-server.rst:239 +msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." +msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." + +#: ../../configuration/service/dhcp-server.rst:233 msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." @@ -3614,31 +4106,31 @@ msgstr "Create a new DHCP static mapping named `<description>` which is valid fo msgid "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." msgstr "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." -#: ../../configuration/pki/index.rst:40 -#: ../../configuration/pki/index.rst:45 +#: ../../configuration/pki/index.rst:42 +#: ../../configuration/pki/index.rst:47 msgid "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." msgstr "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." -#: ../../configuration/pki/index.rst:67 -#: ../../configuration/pki/index.rst:71 +#: ../../configuration/pki/index.rst:69 +#: ../../configuration/pki/index.rst:73 msgid "Create a new public/private keypair and output the certificate on the console." msgstr "Create a new public/private keypair and output the certificate on the console." -#: ../../configuration/pki/index.rst:89 -#: ../../configuration/pki/index.rst:94 +#: ../../configuration/pki/index.rst:91 +#: ../../configuration/pki/index.rst:96 msgid "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." msgstr "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." -#: ../../configuration/pki/index.rst:77 -#: ../../configuration/pki/index.rst:82 +#: ../../configuration/pki/index.rst:79 +#: ../../configuration/pki/index.rst:84 msgid "Create a new self-signed certificate. The public/private is then shown on the console." msgstr "Create a new self-signed certificate. The public/private is then shown on the console." -#: ../../configuration/pki/index.rst:52 +#: ../../configuration/pki/index.rst:54 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." -#: ../../configuration/pki/index.rst:57 +#: ../../configuration/pki/index.rst:59 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." @@ -3686,10 +4178,15 @@ msgstr "Create named `<alias>` for the configured static mapping for `<hostname> msgid "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." msgstr "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." -#: ../../configuration/service/dns.rst:234 +#: ../../configuration/service/dns.rst:248 msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." msgstr "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 +msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." + #: ../../configuration/system/login.rst:21 msgid "Create new system user with username `<name>` and real-name specified by `<string>`." msgstr "Create new system user with username `<name>` and real-name specified by `<string>`." @@ -3698,15 +4195,19 @@ msgstr "Create new system user with username `<name>` and real-name specified by msgid "Create service `<name>` to listen on <port>" msgstr "Create service `<name>` to listen on <port>" -#: ../../configuration/container/index.rst:132 +#: ../../configuration/container/index.rst:140 msgid "Creates a named container network" msgstr "Creates a named container network" +#: ../../configuration/service/ipoe-server.rst:55 +msgid "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" +msgstr "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" + #: ../../configuration/vpn/dmvpn.rst:83 msgid "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." msgstr "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." -#: ../../configuration/interfaces/bridge.rst:192 +#: ../../configuration/interfaces/bridge.rst:201 msgid "Creating a bridge interface is very simple. In this example, we will have:" msgstr "Creating a bridge interface is very simple. In this example, we will have:" @@ -3722,6 +4223,10 @@ msgstr "Creating a traffic policy" msgid "Creating rules for using flow tables:" msgstr "Creating rules for using flow tables:" +#: ../../configuration/container/index.rst:173 +msgid "Credentials can be defined here and will only be used when adding a container image to the system." +msgstr "Credentials can be defined here and will only be used when adding a container image to the system." + #: ../../configuration/system/syslog.rst:178 msgid "Critical" msgstr "Critical" @@ -3754,7 +4259,7 @@ msgstr "Cur Hop Limit" msgid "Currently does not do much as caching is not implemented." msgstr "Currently does not do much as caching is not implemented." -#: ../../configuration/vrf/index.rst:86 +#: ../../configuration/vrf/index.rst:105 msgid "Currently dynamic routing is supported for the following protocols:" msgstr "Currently dynamic routing is supported for the following protocols:" @@ -3778,7 +4283,7 @@ msgstr "Custom firewall chains can be created, with commands ``set firewall ipv4 msgid "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." msgstr "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." -#: ../../configuration/highavailability/index.rst:373 +#: ../../configuration/highavailability/index.rst:383 msgid "Custom health-check script allows checking real-server availability" msgstr "Custom health-check script allows checking real-server availability" @@ -3794,6 +4299,14 @@ msgstr "DCO can be enabled for both new and existing tunnels,VyOS adds an option msgid "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." msgstr "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." +#: ../../configuration/service/ids.rst:5 +msgid "DDoS Protection" +msgstr "DDoS Protection" + +#: ../../configuration/service/dhcp-server.rst:181 +msgid "DHCP High Availability must be configured explicitly by the following statements on both servers:" +msgstr "DHCP High Availability must be configured explicitly by the following statements on both servers:" + #: ../../configuration/service/dhcp-relay.rst:5 msgid "DHCP Relay" msgstr "DHCP Relay" @@ -3802,15 +4315,15 @@ msgstr "DHCP Relay" msgid "DHCP Server" msgstr "DHCP Server" -#: ../../configuration/service/dhcp-server.rst:351 +#: ../../configuration/service/dhcp-server.rst:407 msgid "DHCP failover parameters" msgstr "DHCP failover parameters" -#: ../../configuration/service/dhcp-server.rst:341 +#: ../../configuration/service/dhcp-server.rst:397 msgid "DHCP lease range" msgstr "DHCP lease range" -#: ../../configuration/service/dhcp-server.rst:377 +#: ../../configuration/service/dhcp-server.rst:434 msgid "DHCP range spans from `192.168.189.10` - `192.168.189.250`" msgstr "DHCP range spans from `192.168.189.10` - `192.168.189.250`" @@ -3822,7 +4335,7 @@ msgstr "DHCP relay example" msgid "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." msgstr "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." -#: ../../configuration/service/dhcp-server.rst:584 +#: ../../configuration/service/dhcp-server.rst:643 msgid "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." msgstr "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." @@ -3887,11 +4400,11 @@ msgstr "DNS name servers" msgid "DNS search list to advertise" msgstr "DNS search list to advertise" -#: ../../configuration/service/dhcp-server.rst:261 +#: ../../configuration/service/dhcp-server.rst:317 msgid "DNS server IPv4 address" msgstr "DNS server IPv4 address" -#: ../../configuration/service/dhcp-server.rst:591 +#: ../../configuration/service/dhcp-server.rst:650 msgid "DNS server is located at ``2001:db8::ffff``" msgstr "DNS server is located at ``2001:db8::ffff``" @@ -3903,7 +4416,7 @@ msgstr "DSCP values as per :rfc:`2474` and :rfc:`4595`:" msgid "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" msgstr "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" -#: ../../configuration/firewall/ipv4.rst:444 +#: ../../configuration/firewall/ipv4.rst:467 #: ../../configuration/firewall/ipv6.rst:451 msgid "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." msgstr "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." @@ -3940,15 +4453,18 @@ msgstr "Default Gateway/Route" msgid "Default Router Preference" msgstr "Default Router Preference" -#: ../../configuration/vpn/sstp.rst:201 +#: ../../configuration/service/pppoe-server.rst:509 +#: ../../configuration/vpn/l2tp.rst:463 +#: ../../configuration/vpn/pptp.rst:387 +#: ../../configuration/vpn/sstp.rst:421 msgid "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." msgstr "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." -#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:431 msgid "Default gateway and DNS server is at `192.0.2.254`" msgstr "Default gateway and DNS server is at `192.0.2.254`" -#: ../../configuration/container/index.rst:108 +#: ../../configuration/container/index.rst:113 msgid "Default is 512 MB. Use 0 MB for unlimited memory." msgstr "Default is 512 MB. Use 0 MB for unlimited memory." @@ -3976,7 +4492,7 @@ msgstr "Defaults to 'uid'" msgid "Defaults to 225.0.0.50." msgstr "Defaults to 225.0.0.50." -#: ../../configuration/system/option.rst:68 +#: ../../configuration/system/option.rst:98 msgid "Defaults to ``us``." msgstr "Defaults to ``us``." @@ -3988,6 +4504,10 @@ msgstr "Define Conection Timeouts" msgid "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." msgstr "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." +#: ../../configuration/container/index.rst:148 +msgid "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." +msgstr "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." + #: ../../configuration/firewall/groups.rst:52 msgid "Define a IPv4 or IPv6 Network group." msgstr "Define a IPv4 or IPv6 Network group." @@ -4040,6 +4560,10 @@ msgstr "Define different modes for sending replies in response to received ARP r msgid "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." msgstr "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." +#: ../../configuration/service/ntp.rst:88 +msgid "Define how to handle leaf-seonds." +msgstr "Define how to handle leaf-seonds." + #: ../../configuration/firewall/flowtables.rst:71 msgid "Define interfaces to be used in the flowtable." msgstr "Define interfaces to be used in the flowtable." @@ -4068,7 +4592,11 @@ msgstr "Define log group to send message to. Only applicable if rule log is enab msgid "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." msgstr "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/service/dhcp-server.rst:187 +msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" +msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" + +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" msgstr "Define the time interval to update the local cache" @@ -4080,7 +4608,11 @@ msgstr "Define the zone as a local zone. A local zone has no interfaces and will msgid "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/interfaces/bridge.rst:135 +msgid "Define used ethertype of bridge interface." +msgstr "Define used ethertype of bridge interface." + +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." msgstr "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." @@ -4092,26 +4624,51 @@ msgstr "Defines alternate sources for multicasting and IGMP data. The network ad msgid "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." msgstr "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." -#: ../../configuration/protocols/static.rst:120 -#: ../../configuration/protocols/static.rst:133 +#: ../../configuration/protocols/static.rst:154 +#: ../../configuration/protocols/static.rst:167 msgid "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +#: ../../configuration/service/pppoe-server.rst:496 +#: ../../configuration/vpn/l2tp.rst:450 +#: ../../configuration/vpn/pptp.rst:374 +#: ../../configuration/vpn/sstp.rst:408 +msgid "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." +msgstr "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." + #: ../../configuration/protocols/static.rst:34 #: ../../configuration/protocols/static.rst:54 -#: ../../configuration/protocols/static.rst:81 -#: ../../configuration/protocols/static.rst:101 +#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:124 msgid "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." msgstr "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +#: ../../configuration/service/pppoe-server.rst:515 +#: ../../configuration/vpn/l2tp.rst:469 +#: ../../configuration/vpn/pptp.rst:393 +#: ../../configuration/vpn/sstp.rst:427 +msgid "Defines preferred MRU. By default is not defined." +msgstr "Defines preferred MRU. By default is not defined." + #: ../../configuration/protocols/failover.rst:31 msgid "Defines protocols for checking ARP, ICMP, TCP" msgstr "Defines protocols for checking ARP, ICMP, TCP" -#: ../../configuration/vpn/sstp.rst:178 +#: ../../configuration/vpn/sstp.rst:184 msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." +#: ../../configuration/service/pppoe-server.rst:479 +#: ../../configuration/vpn/l2tp.rst:433 +#: ../../configuration/vpn/pptp.rst:357 +#: ../../configuration/vpn/sstp.rst:391 +msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." + +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." + #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):" @@ -4120,15 +4677,15 @@ msgstr "Defines the specified device as a system console. Available console devi msgid "Defining Peers" msgstr "Defining Peers" -#: ../../configuration/service/dhcp-server.rst:579 +#: ../../configuration/service/dhcp-server.rst:638 msgid "Delegate prefixes from the range indicated by the start and stop qualifier." msgstr "Delegate prefixes from the range indicated by the start and stop qualifier." -#: ../../configuration/policy/route-map.rst:231 +#: ../../configuration/policy/route-map.rst:234 msgid "Delete BGP communities matching the community-list." msgstr "Delete BGP communities matching the community-list." -#: ../../configuration/policy/route-map.rst:246 +#: ../../configuration/policy/route-map.rst:249 msgid "Delete BGP communities matching the large-community-list." msgstr "Delete BGP communities matching the large-community-list." @@ -4136,11 +4693,15 @@ msgstr "Delete BGP communities matching the large-community-list." msgid "Delete Logs" msgstr "Delete Logs" -#: ../../configuration/policy/route-map.rst:226 +#: ../../configuration/container/index.rst:211 +msgid "Delete a particular container image based on it's image ID. You can also delete all container images at once." +msgstr "Delete a particular container image based on it's image ID. You can also delete all container images at once." + +#: ../../configuration/policy/route-map.rst:229 msgid "Delete all BGP communities" msgstr "Delete all BGP communities" -#: ../../configuration/policy/route-map.rst:241 +#: ../../configuration/policy/route-map.rst:244 msgid "Delete all BGP large-communities" msgstr "Delete all BGP large-communities" @@ -4205,15 +4766,37 @@ msgstr "Devices evaluating whether an IPv4 address is public must be updated to msgid "Different NAT Types" msgstr "Different NAT Types" -#: ../../configuration/pki/index.rst:100 +#: ../../configuration/pki/index.rst:102 msgid "Diffie-Hellman parameters" msgstr "Diffie-Hellman parameters" +#: ../../configuration/service/ids.rst:93 +msgid "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." +msgstr "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." + +#: ../../configuration/system/option.rst:46 +msgid "Disable CPU power saving mechanisms also known as C states." +msgstr "Disable CPU power saving mechanisms also known as C states." + +#: ../../configuration/service/pppoe-server.rst:457 +#: ../../configuration/vpn/l2tp.rst:411 +#: ../../configuration/vpn/pptp.rst:335 +#: ../../configuration/vpn/sstp.rst:369 +msgid "Disable Compression Control Protocol (CCP). CCP is enabled by default." +msgstr "Disable Compression Control Protocol (CCP). CCP is enabled by default." + #: ../../configuration/protocols/pim6.rst:37 msgid "Disable MLD reports and query on the interface." msgstr "Disable MLD reports and query on the interface." -#: ../../configuration/vpn/sstp.rst:75 +#: ../../configuration/system/login.rst:39 +msgid "Disable (lock) account. User will not be able to log in." +msgstr "Disable (lock) account. User will not be able to log in." + +#: ../../configuration/service/pppoe-server.rst:432 +#: ../../configuration/vpn/l2tp.rst:376 +#: ../../configuration/vpn/pptp.rst:300 +#: ../../configuration/vpn/sstp.rst:334 msgid "Disable `<user>` account." msgstr "Disable `<user>` account." @@ -4221,11 +4804,23 @@ msgstr "Disable `<user>` account." msgid "Disable a BFD peer" msgstr "Disable a BFD peer" -#: ../../configuration/container/index.rst:128 +#: ../../configuration/container/index.rst:133 msgid "Disable a container." msgstr "Disable a container." -#: ../../configuration/firewall/ipv4.rst:930 +#: ../../configuration/container/index.rst:166 +msgid "Disable a given container registry" +msgstr "Disable a given container registry" + +#: ../../configuration/system/option.rst:35 +msgid "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." +msgstr "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." + +#: ../../configuration/service/conntrack-sync.rst:103 +msgid "Disable connection logging via Syslog." +msgstr "Disable connection logging via Syslog." + +#: ../../configuration/firewall/ipv4.rst:953 #: ../../configuration/firewall/ipv6.rst:939 msgid "Disable conntrack loose track option" msgstr "Disable conntrack loose track option" @@ -4242,7 +4837,11 @@ msgstr "Disable dhcpv6-relay service." msgid "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." msgstr "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." -#: ../../configuration/protocols/bgp.rst:616 +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." + +#: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." msgstr "Disable immediate session reset if peer's connected link goes down." @@ -4254,6 +4853,10 @@ msgstr "Disable password based authentication. Login via SSH keys only. This har msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." msgstr "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." @@ -4286,11 +4889,15 @@ msgstr "Disabled by default - no kernel module loaded." msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." -#: ../../configuration/protocols/static.rst:76 +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + +#: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." msgstr "Disables interface-based IPv4 static route." -#: ../../configuration/protocols/static.rst:96 +#: ../../configuration/protocols/static.rst:119 msgid "Disables interface-based IPv6 static route." msgstr "Disables interface-based IPv6 static route." @@ -4306,7 +4913,7 @@ msgstr "Disables web filtering without discarding configuration." msgid "Disables web proxy transparent mode at a listening address." msgstr "Disables web proxy transparent mode at a listening address." -#: ../../configuration/service/router-advert.rst:73 +#: ../../configuration/service/router-advert.rst:99 msgid "Disabling Advertisements" msgstr "Disabling Advertisements" @@ -4326,11 +4933,11 @@ msgstr "Disadvantages are:" msgid "Disassociate stations based on excessive transmission failures or other indications of connection loss." msgstr "Disassociate stations based on excessive transmission failures or other indications of connection loss." -#: ../../configuration/vrf/index.rst:142 +#: ../../configuration/vrf/index.rst:161 msgid "Display IPv4 routing table for VRF identified by `<name>`." msgstr "Display IPv4 routing table for VRF identified by `<name>`." -#: ../../configuration/vrf/index.rst:161 +#: ../../configuration/vrf/index.rst:180 msgid "Display IPv6 routing table for VRF identified by `<name>`." msgstr "Display IPv6 routing table for VRF identified by `<name>`." @@ -4338,7 +4945,7 @@ msgstr "Display IPv6 routing table for VRF identified by `<name>`." msgid "Display Logs" msgstr "Display Logs" -#: ../../configuration/system/login.rst:188 +#: ../../configuration/system/login.rst:192 msgid "Display OTP key for user" msgstr "Display OTP key for user" @@ -4346,11 +4953,11 @@ msgstr "Display OTP key for user" msgid "Display all authorization attempts of the specified image" msgstr "Display all authorization attempts of the specified image" -#: ../../configuration/protocols/static.rst:200 +#: ../../configuration/protocols/static.rst:233 msgid "Display all known ARP table entries on a given interface only (`eth1`):" msgstr "Display all known ARP table entries on a given interface only (`eth1`):" -#: ../../configuration/protocols/static.rst:188 +#: ../../configuration/protocols/static.rst:221 msgid "Display all known ARP table entries spanning across all interfaces" msgstr "Display all known ARP table entries spanning across all interfaces" @@ -4382,7 +4989,7 @@ msgstr "Displays information about all neighbors discovered via LLDP." msgid "Displays queue information for a PPPoE interface." msgstr "Displays queue information for a PPPoE interface." -#: ../../configuration/vrf/index.rst:213 +#: ../../configuration/vrf/index.rst:232 msgid "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." msgstr "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." @@ -4390,14 +4997,32 @@ msgstr "Displays the route packets taken to a network host utilizing VRF instanc msgid "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." msgstr "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." +#: ../../configuration/system/ip.rst:55 +#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:85 +msgid "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + +#: ../../configuration/system/ipv6.rst:51 +msgid "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + #: ../../_include/interface-ipv6.txt:37 msgid "Do not assign a link-local IPv6 address to this interface." msgstr "Do not assign a link-local IPv6 address to this interface." -#: ../../configuration/trafficpolicy/index.rst:1208 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + +#: ../../configuration/protocols/bgp.rst:609 +msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." +msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." + #: ../../configuration/service/dns.rst:103 msgid "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." msgstr "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." @@ -4426,7 +5051,7 @@ msgstr "Domain name(s) for which to obtain certificate" msgid "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." msgstr "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." -#: ../../configuration/pki/index.rst:259 +#: ../../configuration/pki/index.rst:290 msgid "Domain names to apply, multiple domain-names can be specified." msgstr "Domain names to apply, multiple domain-names can be specified." @@ -4435,19 +5060,19 @@ msgstr "Domain names to apply, multiple domain-names can be specified." msgid "Domain search order" msgstr "Domain search order" -#: ../../configuration/pki/index.rst:25 +#: ../../configuration/pki/index.rst:27 msgid "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" msgstr "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" -#: ../../configuration/protocols/bgp.rst:1172 +#: ../../configuration/protocols/bgp.rst:1194 msgid "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -#: ../../configuration/protocols/bgp.rst:1126 +#: ../../configuration/protocols/bgp.rst:1148 msgid "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" msgstr "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -#: ../../configuration/vpn/site2site_ipsec.rst:299 +#: ../../configuration/vpn/site2site_ipsec.rst:302 msgid "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." msgstr "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." @@ -4459,10 +5084,17 @@ msgstr "Download/Update complete blacklist" msgid "Download/Update partial blacklist." msgstr "Download/Update partial blacklist." -#: ../../configuration/vpn/sstp.rst:85 +#: ../../configuration/service/pppoe-server.rst:262 +#: ../../configuration/vpn/l2tp.rst:386 +#: ../../configuration/vpn/pptp.rst:310 +#: ../../configuration/vpn/sstp.rst:344 msgid "Download bandwidth limit in kbit/s for `<user>`." msgstr "Download bandwidth limit in kbit/s for `<user>`." +#: ../../configuration/service/ipoe-server.rst:320 +msgid "Download bandwidth limit in kbit/s for user on interface `<interface>`." +msgstr "Download bandwidth limit in kbit/s for user on interface `<interface>`." + #: ../../configuration/policy/route-map.rst:202 msgid "Drop AS-NUMBER from the BGP AS path." msgstr "Drop AS-NUMBER from the BGP AS path." @@ -4479,7 +5111,7 @@ msgstr "Drop rate" msgid "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" msgstr "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" -#: ../../configuration/service/pppoe-server.rst:367 +#: ../../configuration/service/pppoe-server.rst:625 msgid "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" msgstr "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" @@ -4495,19 +5127,23 @@ msgstr "Dummy interface" msgid "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." msgstr "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." -#: ../../configuration/vrf/index.rst:193 +#: ../../configuration/vrf/index.rst:212 msgid "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." msgstr "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." -#: ../../configuration/pki/index.rst:285 +#: ../../configuration/pki/index.rst:316 msgid "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" msgstr "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" +#: ../../configuration/vpn/ipsec.rst:568 +msgid "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." +msgstr "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." + #: ../../configuration/service/ssh.rst:113 msgid "Dynamic-protection" msgstr "Dynamic-protection" -#: ../../configuration/service/dns.rst:212 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" msgstr "Dynamic DNS" @@ -4519,11 +5155,11 @@ msgstr "EAPoL comes with an identify option. We automatically use the interface msgid "ESP Phase:" msgstr "ESP Phase:" -#: ../../configuration/vpn/ipsec.rst:111 +#: ../../configuration/vpn/ipsec.rst:113 msgid "ESP (Encapsulating Security Payload) Attributes" msgstr "ESP (Encapsulating Security Payload) Attributes" -#: ../../configuration/vpn/ipsec.rst:112 +#: ../../configuration/vpn/ipsec.rst:115 msgid "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" msgstr "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" @@ -4587,7 +5223,7 @@ msgstr "Eenables the Generic Protocol extension (VXLAN-GPE). Currently, this is msgid "Email address to associate with certificate" msgstr "Email address to associate with certificate" -#: ../../configuration/pki/index.rst:265 +#: ../../configuration/pki/index.rst:296 msgid "Email used for registration and recovery contact." msgstr "Email used for registration and recovery contact." @@ -4599,35 +5235,35 @@ msgstr "Embedding one policy into another one" msgid "Emergency" msgstr "Emergency" -#: ../../configuration/protocols/bfd.rst:89 +#: ../../configuration/protocols/bfd.rst:96 msgid "Enable BFD for ISIS on an interface" msgstr "Enable BFD for ISIS on an interface" -#: ../../configuration/protocols/bfd.rst:77 +#: ../../configuration/protocols/bfd.rst:84 msgid "Enable BFD for OSPF on an interface" msgstr "Enable BFD for OSPF on an interface" -#: ../../configuration/protocols/bfd.rst:81 +#: ../../configuration/protocols/bfd.rst:88 msgid "Enable BFD for OSPFv3 on an interface" msgstr "Enable BFD for OSPFv3 on an interface" -#: ../../configuration/protocols/bfd.rst:61 +#: ../../configuration/protocols/bfd.rst:68 msgid "Enable BFD in BGP" msgstr "Enable BFD in BGP" -#: ../../configuration/protocols/bfd.rst:85 +#: ../../configuration/protocols/bfd.rst:92 msgid "Enable BFD in ISIS" msgstr "Enable BFD in ISIS" -#: ../../configuration/protocols/bfd.rst:73 +#: ../../configuration/protocols/bfd.rst:80 msgid "Enable BFD in OSPF" msgstr "Enable BFD in OSPF" -#: ../../configuration/protocols/bfd.rst:69 +#: ../../configuration/protocols/bfd.rst:76 msgid "Enable BFD on a BGP peer group" msgstr "Enable BFD on a BGP peer group" -#: ../../configuration/protocols/bfd.rst:65 +#: ../../configuration/protocols/bfd.rst:72 msgid "Enable BFD on a single BGP neighbor" msgstr "Enable BFD on a single BGP neighbor" @@ -4635,6 +5271,10 @@ msgstr "Enable BFD on a single BGP neighbor" msgid "Enable DHCP failover configuration for this address pool." msgstr "Enable DHCP failover configuration for this address pool." +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." + #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``" @@ -4651,7 +5291,7 @@ msgstr "Enable IGMP and MLD querier." msgid "Enable IGMP and MLD snooping." msgstr "Enable IGMP and MLD snooping." -#: ../../configuration/service/dhcp-server.rst:271 +#: ../../configuration/service/dhcp-server.rst:327 msgid "Enable IP forwarding on client" msgstr "Enable IP forwarding on client" @@ -4705,7 +5345,7 @@ msgstr "Enable OSPF with Segment Routing (Experimental):" msgid "Enable OSPF with route redistribution of the loopback and default originate:" msgstr "Enable OSPF with route redistribution of the loopback and default originate:" -#: ../../configuration/system/login.rst:103 +#: ../../configuration/system/login.rst:107 msgid "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." @@ -4713,6 +5353,18 @@ msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE msgid "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." msgstr "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." +#: ../../configuration/service/router-advert.rst:82 +msgid "Enable PREF64 option as outlined in :rfc:`8781`." +msgstr "Enable PREF64 option as outlined in :rfc:`8781`." + +#: ../../configuration/service/ipoe-server.rst:386 +#: ../../configuration/service/pppoe-server.rst:575 +#: ../../configuration/vpn/l2tp.rst:510 +#: ../../configuration/vpn/pptp.rst:434 +#: ../../configuration/vpn/sstp.rst:468 +msgid "Enable SNMP" +msgstr "Enable SNMP" + #: ../../configuration/service/lldp.rst:59 msgid "Enable SNMP queries of the LLDP database" msgstr "Enable SNMP queries of the LLDP database" @@ -4721,8 +5373,8 @@ msgstr "Enable SNMP queries of the LLDP database" msgid "Enable SNMP support for an individual routing daemon." msgstr "Enable SNMP support for an individual routing daemon." -#: ../../configuration/interfaces/bridge.rst:197 -#: ../../configuration/interfaces/bridge.rst:232 +#: ../../configuration/interfaces/bridge.rst:206 +#: ../../configuration/interfaces/bridge.rst:241 msgid "Enable STP" msgstr "Enable STP" @@ -4833,15 +5485,23 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." -#: ../../configuration/vrf/index.rst:461 +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." + +#: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." -#: ../../configuration/vpn/sstp.rst:277 +#: ../../configuration/service/ipoe-server.rst:220 +#: ../../configuration/service/pppoe-server.rst:182 +#: ../../configuration/vpn/l2tp.rst:225 +#: ../../configuration/vpn/pptp.rst:165 +#: ../../configuration/vpn/sstp.rst:198 msgid "Enables bandwidth shaping via RADIUS." msgstr "Enables bandwidth shaping via RADIUS." -#: ../../configuration/vrf/index.rst:483 +#: ../../configuration/vrf/index.rst:502 msgid "Enables import or export of routes between the current unicast VRF and VPN." msgstr "Enables import or export of routes between the current unicast VRF and VPN." @@ -4853,6 +5513,10 @@ msgstr "Enables the Generic Protocol extension (VXLAN-GPE). Currently, this is o msgid "Enables the echo transmission mode" msgstr "Enables the echo transmission mode" +#: ../../configuration/system/option.rst:27 +msgid "Enables the root partition auto-extension and resizes to the maximum available space on system boot." +msgstr "Enables the root partition auto-extension and resizes to the maximum available space on system boot." + #: ../../configuration/service/router-advert.rst:27 msgid "Enabling Advertisments" msgstr "Enabling Advertisments" @@ -4873,11 +5537,15 @@ msgstr "Enabling this function increases the risk of bandwidth saturation." msgid "Enforce strict path checking" msgstr "Enforce strict path checking" +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." + #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." msgstr "Enslave `<member>` interface to bond `<interface>`." -#: ../../configuration/protocols/bgp.rst:764 +#: ../../configuration/protocols/bgp.rst:786 msgid "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." msgstr "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." @@ -4913,6 +5581,10 @@ msgstr "Ethernet flow control is a mechanism for temporarily stopping the transm msgid "Ethernet options" msgstr "Ethernet options" +#: ../../configuration/interfaces/bridge.rst:137 +msgid "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." +msgstr "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." + #: ../../configuration/service/eventhandler.rst:5 msgid "Event Handler" msgstr "Event Handler" @@ -4945,11 +5617,11 @@ msgstr "Every NAT rule has a translation command defined. The address defined fo msgid "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" msgstr "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" -#: ../../configuration/system/login.rst:47 +#: ../../configuration/system/login.rst:51 msgid "Every SSH key comes in three parts:" msgstr "Every SSH key comes in three parts:" -#: ../../configuration/system/login.rst:68 +#: ../../configuration/system/login.rst:72 msgid "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" msgstr "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" @@ -4965,12 +5637,16 @@ msgstr "Every Virtual Ethernet interfaces behaves like a real Ethernet interface msgid "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." msgstr "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." +#: ../../configuration/vpn/ipsec.rst:439 +msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." +msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:98 msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." #: ../../configuration/firewall/bridge.rst:321 -#: ../../configuration/highavailability/index.rst:397 +#: ../../configuration/highavailability/index.rst:407 #: ../../configuration/interfaces/bonding.rst:291 #: ../../configuration/interfaces/l2tpv3.rst:86 #: ../../configuration/interfaces/pppoe.rst:323 @@ -4980,23 +5656,24 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:156 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 -#: ../../configuration/service/conntrack-sync.rst:186 +#: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 -#: ../../configuration/service/dhcp-server.rst:362 -#: ../../configuration/service/dns.rst:160 -#: ../../configuration/service/dns.rst:276 +#: ../../configuration/service/dhcp-server.rst:418 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 -#: ../../configuration/service/ipoe-server.rst:150 +#: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 #: ../../configuration/service/monitoring.rst:134 +#: ../../configuration/service/router-advert.rst:108 #: ../../configuration/service/snmp.rst:94 #: ../../configuration/service/snmp.rst:145 #: ../../configuration/service/tftp-server.rst:47 #: ../../configuration/system/acceleration.rst:58 -#: ../../configuration/system/login.rst:397 +#: ../../configuration/system/login.rst:401 #: ../../configuration/system/name-server.rst:28 #: ../../configuration/system/name-server.rst:63 #: ../../configuration/system/sflow.rst:49 @@ -5005,9 +5682,8 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/trafficpolicy/index.rst:1122 #: ../../configuration/vpn/dmvpn.rst:161 #: ../../configuration/vpn/openconnect.rst:97 -#: ../../configuration/vpn/sstp.rst:286 -#: ../../configuration/vrf/index.rst:99 -#: ../../configuration/vrf/index.rst:232 +#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:251 msgid "Example" msgstr "Example" @@ -5028,16 +5704,18 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../configuration/nat/nat44.rst:425 #: ../../configuration/nat/nat66.rst:78 #: ../../configuration/nat/nat66.rst:96 -#: ../../configuration/protocols/static.rst:174 -#: ../../configuration/service/dns.rst:363 +#: ../../configuration/protocols/static.rst:67 +#: ../../configuration/protocols/static.rst:135 +#: ../../configuration/protocols/static.rst:207 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 #: ../../configuration/service/ssh.rst:200 #: ../../configuration/system/flow-accounting.rst:164 -#: ../../configuration/vpn/l2tp.rst:41 -#: ../../configuration/vpn/site2site_ipsec.rst:162 -#: ../../configuration/vpn/site2site_ipsec.rst:273 +#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:276 #: ../../_include/interface-address-with-dhcp.txt:22 #: ../../_include/interface-address.txt:9 #: ../../_include/interface-description.txt:7 @@ -5105,15 +5783,15 @@ msgstr "Example: Mirror the outbound traffic of `br1` port to `eth3`" msgid "Example: Mirror the outbound traffic of `eth1` port to `eth3`" msgstr "Example: Mirror the outbound traffic of `eth1` port to `eth3`" -#: ../../configuration/interfaces/bridge.rst:166 +#: ../../configuration/interfaces/bridge.rst:175 msgid "Example: Set `eth0` member port to be allowed VLAN 4" msgstr "Example: Set `eth0` member port to be allowed VLAN 4" -#: ../../configuration/interfaces/bridge.rst:172 +#: ../../configuration/interfaces/bridge.rst:181 msgid "Example: Set `eth0` member port to be allowed VLAN 6-8" msgstr "Example: Set `eth0` member port to be allowed VLAN 6-8" -#: ../../configuration/interfaces/bridge.rst:153 +#: ../../configuration/interfaces/bridge.rst:162 msgid "Example: Set `eth0` member port to be native VLAN 2" msgstr "Example: Set `eth0` member port to be native VLAN 2" @@ -5121,13 +5799,12 @@ msgstr "Example: Set `eth0` member port to be native VLAN 2" msgid "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." -#: ../../configuration/container/index.rst:177 -#: ../../configuration/service/https.rst:77 -#: ../../configuration/service/router-advert.rst:80 +#: ../../configuration/container/index.rst:216 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" msgstr "Example Configuration" -#: ../../configuration/service/dns.rst:378 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" msgstr "Example IPv6 only:" @@ -5135,7 +5812,7 @@ msgstr "Example IPv6 only:" msgid "Example Network" msgstr "Example Network" -#: ../../configuration/firewall/ipv4.rst:1130 +#: ../../configuration/firewall/ipv4.rst:1153 #: ../../configuration/firewall/ipv6.rst:1153 msgid "Example Partial Config" msgstr "Example Partial Config" @@ -5156,27 +5833,28 @@ msgstr "Example for configuring a simple L2TP over IPsec VPN for remote access ( msgid "Example of redirection:" msgstr "Example of redirection:" -#: ../../configuration/firewall/ipv4.rst:925 +#: ../../configuration/firewall/ipv4.rst:948 #: ../../configuration/firewall/ipv6.rst:934 msgid "Example synproxy" msgstr "Example synproxy" #: ../../configuration/firewall/groups.rst:145 -#: ../../configuration/interfaces/bridge.rst:187 +#: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 -#: ../../configuration/protocols/bgp.rst:1096 +#: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 #: ../../configuration/protocols/ospf.rst:834 -#: ../../configuration/service/pppoe-server.rst:343 +#: ../../configuration/service/pppoe-server.rst:601 #: ../../configuration/service/webproxy.rst:419 msgid "Examples" msgstr "Examples" #: ../../configuration/nat/nat44.rst:154 -#: ../../configuration/vpn/site2site_ipsec.rst:157 +#: ../../configuration/vpn/site2site_ipsec.rst:160 msgid "Examples:" msgstr "Examples:" @@ -5224,6 +5902,10 @@ msgstr "External DHCPv6 server is at 2001:db8::4" msgid "External Route Summarisation" msgstr "External Route Summarisation" +#: ../../configuration/service/ids.rst:101 +msgid "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" +msgstr "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" + #: ../../configuration/trafficpolicy/index.rst:441 msgid "FQ-CoDel" msgstr "FQ-CoDel" @@ -5274,8 +5956,6 @@ msgstr "Facility Code" #: ../../configuration/loadbalancing/wan.rst:218 #: ../../configuration/protocols/failover.rst:3 -#: ../../configuration/service/dhcp-server.rst:136 -#: ../../configuration/service/dhcp-server.rst:369 msgid "Failover" msgstr "Failover" @@ -5291,6 +5971,10 @@ msgstr "Failover mechanism to use for conntrack-sync." msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." msgstr "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." + #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" msgstr "Fair Queue" @@ -5303,7 +5987,15 @@ msgstr "Fair Queue is a non-shaping (work-conserving) policy, so it will only be msgid "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." msgstr "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/service/ids.rst:9 +msgid "FastNetMon" +msgstr "FastNetMon" + +#: ../../configuration/service/ids.rst:11 +msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." +msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." + +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" msgstr "Features of the Current Implementation" @@ -5311,11 +6003,15 @@ msgstr "Features of the Current Implementation" msgid "Field" msgstr "Field" -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:325 +msgid "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." +msgstr "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." + +#: ../../configuration/service/dns.rst:255 msgid "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." msgstr "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." -#: ../../configuration/service/pppoe-server.rst:228 +#: ../../configuration/service/pppoe-server.rst:302 msgid "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" msgstr "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" @@ -5404,7 +6100,7 @@ msgstr "Firewall groups represent collections of IP addresses, networks, ports, msgid "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." msgstr "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." -#: ../../configuration/highavailability/index.rst:381 +#: ../../configuration/highavailability/index.rst:391 msgid "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" msgstr "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" @@ -5428,7 +6124,7 @@ msgstr "Firmware Update" msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." -#: ../../configuration/vpn/ipsec.rst:267 +#: ../../configuration/vpn/ipsec.rst:271 msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." @@ -5436,6 +6132,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." + #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -5468,6 +6168,10 @@ msgstr "First the OTP keys must be generated and sent to the user and to the con msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." + #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." msgstr "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." @@ -5492,6 +6196,30 @@ msgstr "Flow Export" msgid "Flow and packet-based balancing" msgstr "Flow and packet-based balancing" +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." + #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." @@ -5544,15 +6272,15 @@ msgstr "For Hashing:" msgid "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." msgstr "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." -#: ../../configuration/policy/route-map.rst:311 +#: ../../configuration/policy/route-map.rst:314 msgid "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." msgstr "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." -#: ../../configuration/service/pppoe-server.rst:188 +#: ../../configuration/service/pppoe-server.rst:257 msgid "For Local Users" msgstr "For Local Users" -#: ../../configuration/service/pppoe-server.rst:223 +#: ../../configuration/service/pppoe-server.rst:297 msgid "For RADIUS users" msgstr "For RADIUS users" @@ -5592,7 +6320,7 @@ msgstr "For a simple home network using just the ISP's equipment, this is usuall msgid "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." msgstr "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." -#: ../../configuration/system/login.rst:132 +#: ../../configuration/system/login.rst:136 msgid "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." msgstr "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." @@ -5618,7 +6346,7 @@ msgstr "For fragmented TCP or UDP packets and all other IPv4 and IPv6 protocol t msgid "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" msgstr "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" -#: ../../configuration/protocols/bgp.rst:823 +#: ../../configuration/protocols/bgp.rst:845 msgid "For inbound updates the order of preference is:" msgstr "For inbound updates the order of preference is:" @@ -5642,7 +6370,11 @@ msgstr "For latest releases, refer the `firewall (interface-groups) <https://doc msgid "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." msgstr "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." -#: ../../configuration/service/pppoe-server.rst:299 +#: ../../configuration/protocols/bfd.rst:61 +msgid "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." +msgstr "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." + +#: ../../configuration/service/pppoe-server.rst:307 msgid "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." msgstr "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." @@ -5650,7 +6382,7 @@ msgstr "For network maintenance, it's a good idea to direct users to a backup se msgid "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." msgstr "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." -#: ../../configuration/protocols/bgp.rst:829 +#: ../../configuration/protocols/bgp.rst:851 msgid "For outbound updates the order of preference is:" msgstr "For outbound updates the order of preference is:" @@ -5691,11 +6423,11 @@ msgstr "For the :ref:`destination-nat66` rule, the destination address of the pa msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." -#: ../../configuration/container/index.rst:179 +#: ../../configuration/container/index.rst:218 msgid "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." msgstr "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." @@ -5729,6 +6461,10 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." @@ -5737,7 +6473,7 @@ msgstr "Formally, a virtual link looks like a point-to-point network connecting msgid "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." msgstr "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." -#: ../../configuration/highavailability/index.rst:362 +#: ../../configuration/highavailability/index.rst:372 msgid "Forward method" msgstr "Forward method" @@ -5765,7 +6501,7 @@ msgstr "From a security perspective, it is not recommended to let a third party msgid "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" msgstr "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" -#: ../../configuration/highavailability/index.rst:380 +#: ../../configuration/highavailability/index.rst:390 msgid "Fwmark" msgstr "Fwmark" @@ -5806,6 +6542,11 @@ msgstr "GRE is often seen as a one size fits all solution when it comes to class msgid "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." msgstr "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." +#: ../../configuration/pki/index.rst:123 +#: ../../configuration/pki/index.rst:128 +msgid "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." +msgstr "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." + #: ../../configuration/protocols/isis.rst:25 #: ../../configuration/protocols/ospf.rst:25 #: ../../configuration/protocols/ospf.rst:1081 @@ -5835,18 +6576,18 @@ msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key." msgid "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." -#: ../../configuration/pki/index.rst:153 -#: ../../configuration/pki/index.rst:157 +#: ../../configuration/pki/index.rst:155 +#: ../../configuration/pki/index.rst:159 msgid "Generate a WireGuard pre-shared secret used for peers to communicate." msgstr "Generate a WireGuard pre-shared secret used for peers to communicate." -#: ../../configuration/pki/index.rst:136 -#: ../../configuration/pki/index.rst:141 +#: ../../configuration/pki/index.rst:138 +#: ../../configuration/pki/index.rst:143 msgid "Generate a new WireGuard public/private key portion and output the result to the console." msgstr "Generate a new WireGuard public/private key portion and output the result to the console." -#: ../../configuration/pki/index.rst:104 -#: ../../configuration/pki/index.rst:111 +#: ../../configuration/pki/index.rst:106 +#: ../../configuration/pki/index.rst:113 msgid "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." msgstr "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." @@ -5882,7 +6623,7 @@ msgstr "Get detailed information about LLDP neighbors." msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" msgstr "Getting started" @@ -5898,6 +6639,18 @@ msgstr "Given the following example we have one VyOS router acting as OpenVPN se msgid "Gloabal" msgstr "Gloabal" +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +msgid "Global" +msgstr "Global" + +#: ../../configuration/service/ipoe-server.rst:352 +#: ../../configuration/service/pppoe-server.rst:518 +#: ../../configuration/vpn/l2tp.rst:472 +#: ../../configuration/vpn/pptp.rst:396 +#: ../../configuration/vpn/sstp.rst:430 +msgid "Global Advanced options" +msgstr "Global Advanced options" + #: ../../configuration/firewall/general.rst:84 msgid "Global Options" msgstr "Global Options" @@ -5910,7 +6663,7 @@ msgstr "Global Options Firewall Configuration" msgid "Global options" msgstr "Global options" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" msgstr "Global parameters" @@ -5923,6 +6676,10 @@ msgstr "Global settings" msgid "Graceful Restart" msgstr "Graceful Restart" +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" + #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" msgstr "Gratuitous ARP" @@ -5947,7 +6704,7 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" msgstr "HTTP based services" @@ -5956,10 +6713,14 @@ msgstr "HTTP based services" msgid "HTTP basic authentication username" msgstr "HTTP basic authentication username" -#: ../../configuration/system/option.rst:27 +#: ../../configuration/system/option.rst:57 msgid "HTTP client" msgstr "HTTP client" +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" + #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" msgstr "HT (High Throughput) capabilities (802.11n)" @@ -5968,7 +6729,7 @@ msgstr "HT (High Throughput) capabilities (802.11n)" msgid "Hairpin NAT/NAT Reflection" msgstr "Hairpin NAT/NAT Reflection" -#: ../../configuration/service/dhcp-server.rst:573 +#: ../../configuration/service/dhcp-server.rst:632 msgid "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." msgstr "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." @@ -5980,7 +6741,7 @@ msgstr "Handling and monitoring" msgid "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." msgstr "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." -#: ../../configuration/highavailability/index.rst:372 +#: ../../configuration/highavailability/index.rst:382 msgid "Health-check" msgstr "Health-check" @@ -6024,7 +6785,7 @@ msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:" -#: ../../configuration/protocols/rpki.rst:167 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." @@ -6054,6 +6815,11 @@ msgstr "Hewlett-Packard call it Source-Port filtering or port-isolation" msgid "High" msgstr "High" +#: ../../configuration/service/dhcp-server.rst:170 +#: ../../configuration/service/dhcp-server.rst:425 +msgid "High Availability" +msgstr "High Availability" + #: ../../configuration/highavailability/index.rst:6 msgid "High availability" msgstr "High availability" @@ -6074,7 +6840,7 @@ msgstr "Host Information" msgid "Host name" msgstr "Host name" -#: ../../configuration/service/dhcp-server.rst:630 +#: ../../configuration/service/dhcp-server.rst:691 msgid "Host specific mapping shall be named ``client1``" msgstr "Host specific mapping shall be named ``client1``" @@ -6094,7 +6860,7 @@ msgstr "How to configure Event Handler" msgid "How to make it work" msgstr "How to make it work" -#: ../../configuration/vpn/ipsec.rst:263 +#: ../../configuration/vpn/ipsec.rst:267 msgid "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." msgstr "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." @@ -6158,14 +6924,18 @@ msgstr "IKE (Internet Key Exchange) Attributes" msgid "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" msgstr "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" -#: ../../configuration/vpn/site2site_ipsec.rst:160 +#: ../../configuration/vpn/site2site_ipsec.rst:163 msgid "IKEv1" msgstr "IKEv1" -#: ../../configuration/vpn/site2site_ipsec.rst:271 +#: ../../configuration/vpn/site2site_ipsec.rst:274 msgid "IKEv2" msgstr "IKEv2" +#: ../../configuration/vpn/ipsec.rst:372 +msgid "IKEv2 IPSec road-warriors remote-access VPN" +msgstr "IKEv2 IPSec road-warriors remote-access VPN" + #: ../../configuration/system/ip.rst:3 msgid "IP" msgstr "IP" @@ -6198,11 +6968,11 @@ msgstr "IPSec IKE and ESP Groups;" msgid "IPSec IKEv2 Remote Access VPN" msgstr "IPSec IKEv2 Remote Access VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN" msgstr "IPSec IKEv2 site2site VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" msgstr "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" @@ -6218,7 +6988,7 @@ msgstr "IPSec VPN tunnels." msgid "IP address" msgstr "IP address" -#: ../../configuration/service/dhcp-server.rst:202 +#: ../../configuration/service/dhcp-server.rst:258 msgid "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" @@ -6227,19 +6997,19 @@ msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named msgid "IP address ``192.168.2.1/24``" msgstr "IP address ``192.168.2.1/24``" -#: ../../configuration/service/dhcp-server.rst:286 +#: ../../configuration/service/dhcp-server.rst:342 msgid "IP address for DHCP server identifier" msgstr "IP address for DHCP server identifier" -#: ../../configuration/service/dhcp-server.rst:276 +#: ../../configuration/service/dhcp-server.rst:332 msgid "IP address of NTP server" msgstr "IP address of NTP server" -#: ../../configuration/service/dhcp-server.rst:316 +#: ../../configuration/service/dhcp-server.rst:372 msgid "IP address of POP3 server" msgstr "IP address of POP3 server" -#: ../../configuration/service/dhcp-server.rst:311 +#: ../../configuration/service/dhcp-server.rst:367 msgid "IP address of SMTP server" msgstr "IP address of SMTP server" @@ -6255,7 +7025,7 @@ msgstr "IP address of route to match, based on prefix-list." msgid "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." msgstr "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." -#: ../../configuration/service/dhcp-server.rst:346 +#: ../../configuration/service/dhcp-server.rst:402 msgid "IP address to exclude from DHCP lease range" msgstr "IP address to exclude from DHCP lease range" @@ -6295,7 +7065,7 @@ msgstr "IP next-hop of route to match, based on type." msgid "IP precedence as defined in :rfc:`791`:" msgstr "IP precedence as defined in :rfc:`791`:" -#: ../../configuration/vpn/l2tp.rst:33 +#: ../../configuration/vpn/l2tp.rst:83 msgid "IP protocol number 50 (ESP)" msgstr "IP protocol number 50 (ESP)" @@ -6307,19 +7077,19 @@ msgstr "IP route source of route to match, based on access-list." msgid "IP route source of route to match, based on prefix-list." msgstr "IP route source of route to match, based on prefix-list." -#: ../../configuration/service/ipoe-server.rst:7 +#: ../../configuration/service/ipoe-server.rst:5 msgid "IPoE Server" msgstr "IPoE Server" -#: ../../configuration/service/ipoe-server.rst:30 +#: ../../configuration/service/ipoe-server.rst:29 msgid "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." msgstr "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." -#: ../../configuration/service/ipoe-server.rst:13 +#: ../../configuration/service/ipoe-server.rst:11 msgid "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." msgstr "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." -#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:153 msgid "IPoE server will listen on interfaces eth1.50 and eth1.51" msgstr "IPoE server will listen on interfaces eth1.50 and eth1.51" @@ -6327,11 +7097,11 @@ msgstr "IPoE server will listen on interfaces eth1.50 and eth1.51" msgid "IPsec" msgstr "IPsec" -#: ../../configuration/vpn/ipsec.rst:172 +#: ../../configuration/vpn/ipsec.rst:176 msgid "IPsec policy matching GRE" msgstr "IPsec policy matching GRE" -#: ../../configuration/service/pppoe-server.rst:346 +#: ../../configuration/service/pppoe-server.rst:604 msgid "IPv4" msgstr "IPv4" @@ -6343,11 +7113,11 @@ msgstr "IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, msgid "IPv4 Firewall Configuration" msgstr "IPv4 Firewall Configuration" -#: ../../configuration/service/dhcp-server.rst:291 +#: ../../configuration/service/dhcp-server.rst:347 msgid "IPv4 address of next bootstrap server" msgstr "IPv4 address of next bootstrap server" -#: ../../configuration/service/dhcp-server.rst:251 +#: ../../configuration/service/dhcp-server.rst:307 msgid "IPv4 address of router on the client's subnet" msgstr "IPv4 address of router on the client's subnet" @@ -6355,7 +7125,7 @@ msgstr "IPv4 address of router on the client's subnet" msgid "IPv4 or IPv6 source address of NetFlow packets" msgstr "IPv4 or IPv6 source address of NetFlow packets" -#: ../../configuration/protocols/bgp.rst:1099 +#: ../../configuration/protocols/bgp.rst:1121 msgid "IPv4 peering" msgstr "IPv4 peering" @@ -6376,8 +7146,12 @@ msgid "IPv4 server" msgstr "IPv4 server" #: ../../configuration/interfaces/pppoe.rst:244 -#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/service/ipoe-server.rst:256 +#: ../../configuration/service/pppoe-server.rst:341 #: ../../configuration/system/ipv6.rst:3 +#: ../../configuration/vpn/l2tp.rst:286 +#: ../../configuration/vpn/pptp.rst:210 +#: ../../configuration/vpn/sstp.rst:244 msgid "IPv6" msgstr "IPv6" @@ -6385,6 +7159,13 @@ msgstr "IPv6" msgid "IPv6 Access List" msgstr "IPv6 Access List" +#: ../../configuration/service/pppoe-server.rst:381 +#: ../../configuration/vpn/l2tp.rst:325 +#: ../../configuration/vpn/pptp.rst:249 +#: ../../configuration/vpn/sstp.rst:283 +msgid "IPv6 Advanced Options" +msgstr "IPv6 Advanced Options" + #: ../../configuration/interfaces/pppoe.rst:379 msgid "IPv6 DHCPv6-PD Example" msgstr "IPv6 DHCPv6-PD Example" @@ -6417,7 +7198,7 @@ msgstr "IPv6 SLAAC and IA-PD" msgid "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" msgstr "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" -#: ../../configuration/service/dhcp-server.rst:628 +#: ../../configuration/service/dhcp-server.rst:689 msgid "IPv6 address ``2001:db8::101`` shall be statically mapped" msgstr "IPv6 address ``2001:db8::101`` shall be statically mapped" @@ -6434,10 +7215,18 @@ msgid "IPv6 address of route to match, based on specified prefix-length. Note th msgstr "IPv6 address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." #: ../../configuration/service/pppoe-server.rst:270 +msgid "IPv6 client's prefix" +msgstr "IPv6 client's prefix" + +#: ../../configuration/service/pppoe-server.rst:270 msgid "IPv6 client's prefix assignment" msgstr "IPv6 client's prefix assignment" -#: ../../configuration/protocols/bgp.rst:1144 +#: ../../configuration/service/pppoe-server.rst:295 +msgid "IPv6 default client's pool assignment" +msgstr "IPv6 default client's pool assignment" + +#: ../../configuration/protocols/bgp.rst:1166 msgid "IPv6 peering" msgstr "IPv6 peering" @@ -6445,7 +7234,7 @@ msgstr "IPv6 peering" msgid "IPv6 prefix." msgstr "IPv6 prefix." -#: ../../configuration/service/dhcp-server.rst:629 +#: ../../configuration/service/dhcp-server.rst:690 msgid "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" msgstr "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" @@ -6457,7 +7246,7 @@ msgstr "IPv6 relay" msgid "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." msgstr "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." -#: ../../configuration/service/dhcp-server.rst:502 +#: ../../configuration/service/dhcp-server.rst:561 msgid "IPv6 server" msgstr "IPv6 server" @@ -6477,7 +7266,7 @@ msgstr "IS-IS Global Configuration" msgid "IS-IS SR Configuration" msgstr "IS-IS SR Configuration" -#: ../../configuration/service/dhcp-server.rst:233 +#: ../../configuration/service/dhcp-server.rst:289 msgid "ISC-DHCP Option name" msgstr "ISC-DHCP Option name" @@ -6493,7 +7282,7 @@ msgstr "If **max-threshold** is set but **min-threshold is not, then **min-thres msgid "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." msgstr "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." -#: ../../configuration/pki/index.rst:249 +#: ../../configuration/pki/index.rst:251 msgid "If CA is present, this certificate will be included in generated CRLs" msgstr "If CA is present, this certificate will be included in generated CRLs" @@ -6517,7 +7306,11 @@ msgstr "If :cfgcmd:`strict` is set the BGP session won’t become established un msgid "If ``alias`` is set, it can be used instead of the device when connecting." msgstr "If ``alias`` is set, it can be used instead of the device when connecting." -#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/policy/route-map.rst:204 +msgid "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." +msgstr "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." + +#: ../../configuration/vpn/l2tp.rst:79 msgid "If a local firewall policy is in place on your external interface you will need to allow the ports below:" msgstr "If a local firewall policy is in place on your external interface you will need to allow the ports below:" @@ -6530,7 +7323,7 @@ msgstr "If a registry is not specified, Docker.io will be used as the container msgid "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." msgstr "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." -#: ../../configuration/protocols/bgp.rst:771 +#: ../../configuration/protocols/bgp.rst:793 msgid "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." msgstr "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." @@ -6608,7 +7401,7 @@ msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguis msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." msgstr "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." msgstr "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." @@ -6660,11 +7453,46 @@ msgstr "If the AS-Path for the route has only private ASNs, the private ASNs are msgid "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." msgstr "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." +#: ../../configuration/service/ipoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:205 +#: ../../configuration/vpn/l2tp.rst:248 +#: ../../configuration/vpn/pptp.rst:188 +#: ../../configuration/vpn/sstp.rst:221 +msgid "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:233 +#: ../../configuration/service/pppoe-server.rst:195 +#: ../../configuration/vpn/l2tp.rst:238 +#: ../../configuration/vpn/pptp.rst:178 +#: ../../configuration/vpn/sstp.rst:211 +msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." +msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." + #: ../../configuration/vpn/l2tp.rst:211 msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." -#: ../../configuration/vpn/l2tp.rst:218 +#: ../../configuration/service/ipoe-server.rst:237 +#: ../../configuration/service/pppoe-server.rst:199 +#: ../../configuration/vpn/l2tp.rst:242 +#: ../../configuration/vpn/pptp.rst:182 +#: ../../configuration/vpn/sstp.rst:215 +msgid "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:240 +#: ../../configuration/service/pppoe-server.rst:202 +#: ../../configuration/vpn/l2tp.rst:245 +#: ../../configuration/vpn/pptp.rst:185 +#: ../../configuration/vpn/sstp.rst:218 +msgid "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." + +#: ../../configuration/service/pppoe-server.rst:219 +#: ../../configuration/vpn/l2tp.rst:262 +#: ../../configuration/vpn/pptp.rst:202 +#: ../../configuration/vpn/sstp.rst:235 msgid "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." msgstr "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." @@ -6688,6 +7516,10 @@ msgstr "If the current queue size is larger than **queue-limit**, then packets w msgid "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" msgstr "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +#: ../../configuration/firewall/index.rst:83 +msgid "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +msgstr "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" + #: ../../configuration/firewall/index.rst:26 msgid "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" msgstr "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" @@ -6705,7 +7537,7 @@ msgstr "If the statically mapped peer is running Cisco IOS, specify the cisco ke msgid "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." msgstr "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." -#: ../../configuration/service/conntrack-sync.rst:126 +#: ../../configuration/service/conntrack-sync.rst:135 msgid "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" msgstr "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" @@ -6713,7 +7545,7 @@ msgstr "If the table is empty and you have a warning message, it means conntrack msgid "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." msgstr "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." -#: ../../configuration/vpn/site2site_ipsec.rst:241 +#: ../../configuration/vpn/site2site_ipsec.rst:244 msgid "If there is SNAT rules on eth1, need to add exclude rule" msgstr "If there is SNAT rules on eth1, need to add exclude rule" @@ -6726,14 +7558,21 @@ msgstr "If this command is invoked from configure mode with the ``run`` prefix t msgid "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." msgstr "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." -#: ../../configuration/protocols/bgp.rst:768 +#: ../../configuration/protocols/bgp.rst:790 msgid "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." msgstr "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." -#: ../../configuration/vpn/sstp.rst:183 +#: ../../configuration/vpn/sstp.rst:189 msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." +#: ../../configuration/service/pppoe-server.rst:484 +#: ../../configuration/vpn/l2tp.rst:438 +#: ../../configuration/vpn/pptp.rst:362 +#: ../../configuration/vpn/sstp.rst:396 +msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." +msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." + #: ../../_include/interface-ip.txt:75 msgid "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." msgstr "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." @@ -6750,11 +7589,11 @@ msgstr "If this parameter is not set, the default holdoff time is 30 seconds." msgid "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." msgstr "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." -#: ../../configuration/system/login.rst:270 +#: ../../configuration/system/login.rst:274 msgid "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." -#: ../../configuration/system/login.rst:339 +#: ../../configuration/system/login.rst:343 msgid "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." msgstr "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." @@ -6774,10 +7613,14 @@ msgstr "If you are a hacker or want to try on your own we support passing raw Op msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." msgstr "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" msgstr "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." + #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." @@ -6786,10 +7629,17 @@ msgstr "If you are responsible for the global addresses assigned to your network msgid "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." msgstr "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." -#: ../../configuration/vpn/l2tp.rst:165 +#: ../../configuration/service/ipoe-server.rst:146 +#: ../../configuration/service/pppoe-server.rst:108 +#: ../../configuration/vpn/l2tp.rst:151 msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +#: ../../configuration/vpn/pptp.rst:91 +#: ../../configuration/vpn/sstp.rst:124 +msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." + #: ../../configuration/interfaces/openvpn.rst:306 msgid "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." msgstr "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." @@ -6813,6 +7663,10 @@ msgstr "If you enable this, you will probably want to set diversity-factor and c msgid "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." msgstr "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." +#: ../../configuration/vpn/ipsec.rst:483 +msgid "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." +msgstr "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." + #: ../../configuration/interfaces/bonding.rst:312 msgid "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." msgstr "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." @@ -6849,10 +7703,26 @@ msgstr "If you only want to check if the user account is enabled and can authent msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." +#: ../../configuration/service/ipoe-server.rst:215 +#: ../../configuration/service/pppoe-server.rst:177 +#: ../../configuration/vpn/l2tp.rst:220 +#: ../../configuration/vpn/pptp.rst:160 +#: ../../configuration/vpn/sstp.rst:193 +msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." +msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." + #: ../../configuration/system/console.rst:41 msgid "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." msgstr "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." +#: ../../configuration/vpn/sstp.rst:482 +msgid "If you use a self-signed certificate, do not forget to install CA on the client side." +msgstr "If you use a self-signed certificate, do not forget to install CA on the client side." + +#: ../../configuration/vpn/ipsec.rst:538 +msgid "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." +msgstr "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." + #: ../../configuration/system/flow-accounting.rst:140 msgid "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." msgstr "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." @@ -6861,7 +7731,7 @@ msgstr "If you want to change the maximum number of flows, which are tracking si msgid "If you want to disable a rule but let it in the configuration." msgstr "If you want to disable a rule but let it in the configuration." -#: ../../configuration/system/login.rst:294 +#: ../../configuration/system/login.rst:298 msgid "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." msgstr "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." @@ -6873,7 +7743,7 @@ msgstr "If you want to use existing blacklists you have to create/download a dat msgid "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." msgstr "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." -#: ../../configuration/protocols/bgp.rst:760 +#: ../../configuration/protocols/bgp.rst:782 msgid "Ignore AS_PATH length when selecting a route" msgstr "Ignore AS_PATH length when selecting a route" @@ -6885,7 +7755,7 @@ msgstr "Ignore VRRP main interface faults" msgid "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" msgstr "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" -#: ../../configuration/vpn/site2site_ipsec.rst:279 +#: ../../configuration/vpn/site2site_ipsec.rst:282 msgid "Imagine the following topology" msgstr "Imagine the following topology" @@ -6893,11 +7763,35 @@ msgstr "Imagine the following topology" msgid "Immediate" msgstr "Immediate" -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/pki/index.rst:254 +msgid "Import files to PKI format" +msgstr "Import files to PKI format" + +#: ../../configuration/pki/index.rst:265 +msgid "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." +msgstr "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." + +#: ../../configuration/pki/index.rst:280 +msgid "Import the OpenVPN shared secret stored in file to the VyOS CLI." +msgstr "Import the OpenVPN shared secret stored in file to the VyOS CLI." + +#: ../../configuration/pki/index.rst:271 +msgid "Import the certificate from the file to VyOS CLI." +msgstr "Import the certificate from the file to VyOS CLI." + +#: ../../configuration/pki/index.rst:275 +msgid "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." + +#: ../../configuration/pki/index.rst:261 +msgid "Import the public CA certificate from the defined file to VyOS CLI." +msgstr "Import the public CA certificate from the defined file to VyOS CLI." + +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" msgstr "Imported prefixes during the validation may have values:" -#: ../../configuration/protocols/static.rst:158 +#: ../../configuration/protocols/static.rst:191 msgid "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." msgstr "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." @@ -6905,7 +7799,7 @@ msgstr "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP msgid "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." msgstr "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." -#: ../../configuration/vpn/ipsec.rst:117 +#: ../../configuration/vpn/ipsec.rst:120 msgid "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." msgstr "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." @@ -6937,7 +7831,7 @@ msgstr "In a minimal configuration, the following must be provided:" msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." msgstr "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" msgstr "In a nutshell, the current implementation provides the following features:" @@ -6945,7 +7839,7 @@ msgstr "In a nutshell, the current implementation provides the following feature msgid "In addition, you can specify many other parameters to get BGP information:" msgstr "In addition, you can specify many other parameters to get BGP information:" -#: ../../configuration/system/login.rst:301 +#: ../../configuration/system/login.rst:305 msgid "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." @@ -6953,12 +7847,16 @@ msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service msgid "In addition to displaying flow accounting information locally, one can also exported them to a collection server." msgstr "In addition to displaying flow accounting information locally, one can also exported them to a collection server." -#: ../../configuration/pki/index.rst:144 -#: ../../configuration/pki/index.rst:159 +#: ../../configuration/pki/index.rst:146 +#: ../../configuration/pki/index.rst:161 #: ../../configuration/pki/pki_cli_import_help.txt:1 msgid "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." msgstr "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." +#: ../../configuration/interfaces/pppoe.rst:388 +msgid "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." +msgstr "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." + #: ../../configuration/service/broadcast-relay.rst:48 msgid "In addition you can also disable the whole service without the need to remove it from the current configuration." msgstr "In addition you can also disable the whole service without the need to remove it from the current configuration." @@ -7003,7 +7901,7 @@ msgstr "In firewall bridge rules, the action can be:" msgid "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." msgstr "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." -#: ../../configuration/system/login.rst:236 +#: ../../configuration/system/login.rst:240 msgid "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." msgstr "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." @@ -7011,7 +7909,7 @@ msgstr "In large deployments it is not reasonable to configure each user individ msgid "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." msgstr "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." -#: ../../configuration/service/dhcp-server.rst:161 +#: ../../configuration/service/dhcp-server.rst:211 msgid "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." msgstr "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." @@ -7023,7 +7921,7 @@ msgstr "In order for the system to use and complete unqualified host names, a li msgid "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." msgstr "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." -#: ../../configuration/protocols/bgp.rst:820 +#: ../../configuration/protocols/bgp.rst:842 msgid "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." msgstr "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." @@ -7039,7 +7937,7 @@ msgstr "In order to have VyOS Traffic Control working you need to follow 2 steps msgid "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." msgstr "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." -#: ../../configuration/service/dhcp-server.rst:623 +#: ../../configuration/service/dhcp-server.rst:684 msgid "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." msgstr "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." @@ -7055,6 +7953,10 @@ msgstr "In order to separate traffic, Fair Queue uses a classifier based on sour msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." @@ -7079,6 +7981,10 @@ msgstr "In our example, we used the key name ``openvpn-1`` which we will referen msgid "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" msgstr "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" +#: ../../configuration/vpn/ipsec.rst:411 +msgid "In our example the certificate name is called vyos:" +msgstr "In our example the certificate name is called vyos:" + #: ../../configuration/trafficpolicy/index.rst:906 msgid "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." msgstr "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." @@ -7123,7 +8029,11 @@ msgstr "In the case you want to apply some kind of **shaping** to your **inbound msgid "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." msgstr "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." -#: ../../configuration/service/pppoe-server.rst:259 +#: ../../configuration/vpn/ipsec.rst:564 +msgid "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." +msgstr "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." + +#: ../../configuration/service/pppoe-server.rst:333 msgid "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." msgstr "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." @@ -7131,7 +8041,7 @@ msgstr "In the example above, the first 499 sessions connect without delay. PADO msgid "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" msgstr "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" -#: ../../configuration/system/login.rst:399 +#: ../../configuration/system/login.rst:403 msgid "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." msgstr "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." @@ -7151,7 +8061,7 @@ msgstr "In the following example we can see a basic multicast setup:" msgid "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." msgstr "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." -#: ../../configuration/highavailability/index.rst:400 +#: ../../configuration/highavailability/index.rst:410 msgid "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" msgstr "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" @@ -7175,7 +8085,7 @@ msgstr "In this example, we use **masquerade** as the translation address instea msgid "In this example, we will be using the example Quick Start configuration above as a starting point." msgstr "In this example, we will be using the example Quick Start configuration above as a starting point." -#: ../../configuration/highavailability/index.rst:430 +#: ../../configuration/highavailability/index.rst:440 msgid "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." msgstr "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." @@ -7191,7 +8101,7 @@ msgstr "In this example we will use the most complicated case: a setup where eac msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." msgstr "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." -#: ../../configuration/service/dns.rst:165 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" msgstr "In this scenario:" @@ -7255,7 +8165,7 @@ msgstr "Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octet msgid "Indication" msgstr "Indication" -#: ../../configuration/service/dhcp-server.rst:64 +#: ../../configuration/service/dhcp-server.rst:80 msgid "Individual Client Subnet" msgstr "Individual Client Subnet" @@ -7319,6 +8229,10 @@ msgstr "Intel® QAT" msgid "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" msgstr "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" +#: ../../configuration/service/ids.rst:96 +msgid "Interface **eth0** used to connect to upstream." +msgstr "Interface **eth0** used to connect to upstream." + #: ../../configuration/protocols/isis.rst:146 #: ../../configuration/protocols/ospf.rst:356 #: ../../configuration/protocols/ospf.rst:1139 @@ -7329,7 +8243,7 @@ msgstr "Interface Configuration" msgid "Interface Groups" msgstr "Interface Groups" -#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:87 msgid "Interface Routes" msgstr "Interface Routes" @@ -7367,7 +8281,7 @@ msgid "Interface weight" msgstr "Interface weight" #: ../../configuration/interfaces/index.rst:3 -#: ../../configuration/vrf/index.rst:71 +#: ../../configuration/vrf/index.rst:90 msgid "Interfaces" msgstr "Interfaces" @@ -7388,10 +8302,18 @@ msgstr "Interfaces that participate in the DHCP relay process. If this command i msgid "Interfaces whose DHCP client nameservers to forward requests to." msgstr "Interfaces whose DHCP client nameservers to forward requests to." +#: ../../configuration/service/ids.rst:105 +msgid "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." +msgstr "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." + #: ../../configuration/system/flow-accounting.rst:70 msgid "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" msgstr "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" +#: ../../configuration/vpn/ipsec.rst:374 +msgid "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." +msgstr "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:6 msgid "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." msgstr "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." @@ -7412,7 +8334,7 @@ msgstr "Interval in milliseconds" msgid "Interval in minutes between updates (default: 60)" msgstr "Interval in minutes between updates (default: 60)" -#: ../../configuration/protocols/bgp.rst:906 +#: ../../configuration/protocols/bgp.rst:928 msgid "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." msgstr "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." @@ -7432,11 +8354,11 @@ msgstr "It's slower than IPsec due to higher protocol overhead and the fact it r msgid "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" msgstr "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" -#: ../../configuration/system/option.rst:111 +#: ../../configuration/system/option.rst:141 msgid "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." msgstr "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." -#: ../../configuration/system/option.rst:102 +#: ../../configuration/system/option.rst:132 msgid "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." msgstr "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." @@ -7457,11 +8379,11 @@ msgstr "It helps to think of the syntax as: (see below). The 'rule-set' should b msgid "It is compatible with Cisco (R) AnyConnect (R) clients." msgstr "It is compatible with Cisco (R) AnyConnect (R) clients." -#: ../../configuration/service/dhcp-server.rst:590 +#: ../../configuration/service/dhcp-server.rst:649 msgid "It is connected to ``eth1``" msgstr "It is connected to ``eth1``" -#: ../../configuration/system/login.rst:42 +#: ../../configuration/system/login.rst:46 msgid "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." msgstr "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." @@ -7477,26 +8399,31 @@ msgstr "It is important to note that when creating firewall rules, the DNAT tran msgid "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." msgstr "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." -#: ../../configuration/vrf/index.rst:505 +#: ../../configuration/vrf/index.rst:524 msgid "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." msgstr "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." -#: ../../configuration/vrf/index.rst:113 +#: ../../configuration/vrf/index.rst:132 msgid "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." msgstr "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." -#: ../../configuration/interfaces/bridge.rst:136 +#: ../../configuration/interfaces/bridge.rst:145 msgid "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" msgstr "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" -#: ../../configuration/system/login.rst:93 +#: ../../configuration/system/login.rst:97 msgid "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." msgstr "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." -#: ../../configuration/vrf/index.rst:496 +#: ../../configuration/vrf/index.rst:515 msgid "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." msgstr "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." +#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:132 +msgid "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." +msgstr "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." + #: ../../configuration/service/conntrack-sync.rst:30 msgid "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" msgstr "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" @@ -7517,7 +8444,7 @@ msgstr "It uses a stochastic model to classify incoming packets into different f msgid "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." msgstr "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." -#: ../../configuration/vrf/index.rst:220 +#: ../../configuration/vrf/index.rst:239 msgid "Join a given VRF. This will open a new subshell within the specified VRF." msgstr "Join a given VRF. This will open a new subshell within the specified VRF." @@ -7529,15 +8456,19 @@ msgstr "Jump to a different rule in this route-map on a match." msgid "Juniper EX Switch" msgstr "Juniper EX Switch" +#: ../../configuration/system/option.rst:31 +msgid "Kernel" +msgstr "Kernel" + #: ../../configuration/system/syslog.rst:112 msgid "Kernel messages" msgstr "Kernel messages" -#: ../../configuration/system/login.rst:40 +#: ../../configuration/system/login.rst:44 msgid "Key Based Authentication" msgstr "Key Based Authentication" -#: ../../configuration/pki/index.rst:30 +#: ../../configuration/pki/index.rst:32 msgid "Key Generation" msgstr "Key Generation" @@ -7545,7 +8476,7 @@ msgstr "Key Generation" msgid "Key Management" msgstr "Key Management" -#: ../../configuration/vpn/site2site_ipsec.rst:383 +#: ../../configuration/vpn/site2site_ipsec.rst:386 msgid "Key Parameters:" msgstr "Key Parameters:" @@ -7557,11 +8488,15 @@ msgstr "Key Points:" msgid "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." msgstr "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." -#: ../../configuration/pki/index.rst:167 +#: ../../configuration/vpn/ipsec.rst:381 +msgid "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." +msgstr "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." + +#: ../../configuration/pki/index.rst:169 msgid "Key usage (CLI)" msgstr "Key usage (CLI)" -#: ../../configuration/system/option.rst:58 +#: ../../configuration/system/option.rst:88 msgid "Keyboard Layout" msgstr "Keyboard Layout" @@ -7574,7 +8509,7 @@ msgstr "Keypairs" msgid "Keyword" msgstr "Keyword" -#: ../../configuration/vpn/l2tp.rst:4 +#: ../../configuration/vpn/l2tp.rst:5 msgid "L2TP" msgstr "L2TP" @@ -7606,7 +8541,7 @@ msgstr "L2TPv3 is described in :rfc:`3931`." msgid "L2TPv3 options" msgstr "L2TPv3 options" -#: ../../configuration/vrf/index.rst:399 +#: ../../configuration/vrf/index.rst:418 msgid "L3VPN VRFs" msgstr "L3VPN VRFs" @@ -7635,7 +8570,7 @@ msgstr "LLDP performs functions similar to several proprietary protocols, such a msgid "LNS (L2TP Network Server)" msgstr "LNS (L2TP Network Server)" -#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/l2tp.rst:272 msgid "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." @@ -7643,15 +8578,19 @@ msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." msgid "Label Distribution Protocol" msgstr "Label Distribution Protocol" +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." + #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." -#: ../../configuration/service/dhcp-server.rst:593 +#: ../../configuration/service/dhcp-server.rst:652 msgid "Lease time will be left at the default value which is 24 hours" msgstr "Lease time will be left at the default value which is 24 hours" -#: ../../configuration/service/dhcp-server.rst:336 +#: ../../configuration/service/dhcp-server.rst:392 msgid "Lease timeout in seconds (default: 86400)" msgstr "Lease timeout in seconds (default: 86400)" @@ -7683,7 +8622,7 @@ msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" msgid "Lets assume the following topology:" msgstr "Lets assume the following topology:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" msgstr "Level 4 balancing" @@ -7699,19 +8638,23 @@ msgstr "Lifetime in days; default is 365" msgid "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" msgstr "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/vpn/ipsec.rst:535 +msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." +msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" -#: ../../configuration/system/login.rst:112 +#: ../../configuration/system/login.rst:116 msgid "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." -#: ../../configuration/system/login.rst:118 +#: ../../configuration/system/login.rst:122 msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" msgstr "Limit maximum number of connections" @@ -7723,7 +8666,7 @@ msgstr "Limiter" msgid "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." msgstr "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." -#: ../../configuration/system/login.rst:381 +#: ../../configuration/system/login.rst:385 msgid "Limits" msgstr "Limits" @@ -7767,7 +8710,7 @@ msgstr "List of supported algorithms: ``diffie-hellman-group1-sha1``, ``diffie-h msgid "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" msgstr "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" -#: ../../configuration/policy/route-map.rst:362 +#: ../../configuration/policy/route-map.rst:365 msgid "List of well-known communities" msgstr "List of well-known communities" @@ -7775,7 +8718,7 @@ msgstr "List of well-known communities" msgid "Listen for DHCP requests on interface ``eth1``." msgstr "Listen for DHCP requests on interface ``eth1``." -#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:137 msgid "Lists VRFs that have been created" msgstr "Lists VRFs that have been created" @@ -7784,10 +8727,14 @@ msgid "Load-balancing" msgstr "Load-balancing" #: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" msgstr "Load-balancing algorithms to be used for distributind requests among the vailable servers" -#: ../../configuration/highavailability/index.rst:347 +#: ../../configuration/highavailability/index.rst:357 msgid "Load-balancing schedule algorithm:" msgstr "Load-balancing schedule algorithm:" @@ -7795,11 +8742,11 @@ msgstr "Load-balancing schedule algorithm:" msgid "Load Balance" msgstr "Load Balance" -#: ../../configuration/service/pppoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:317 msgid "Load Balancing" msgstr "Load Balancing" -#: ../../configuration/system/login.rst:422 +#: ../../configuration/system/login.rst:426 msgid "Load the container image in op-mode." msgstr "Load the container image in op-mode." @@ -7816,7 +8763,11 @@ msgstr "Local Configuration:" msgid "Local Configuration - Annotated:" msgstr "Local Configuration - Annotated:" -#: ../../configuration/service/dhcp-server.rst:143 +#: ../../configuration/service/dhcp-server.rst:192 +msgid "Local IP `<address>` used when communicating to the HA peer." +msgstr "Local IP `<address>` used when communicating to the HA peer." + +#: ../../configuration/service/dhcp-server.rst:177 msgid "Local IP `<address>` used when communicating to the failover peer." msgstr "Local IP `<address>` used when communicating to the failover peer." @@ -7848,11 +8799,11 @@ msgstr "Local User Account" msgid "Local path that includes the known hosts file." msgstr "Local path that includes the known hosts file." -#: ../../configuration/protocols/rpki.rst:145 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." msgstr "Local path that includes the private key file of the router." -#: ../../configuration/protocols/rpki.rst:149 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." msgstr "Local path that includes the public key file of the router." @@ -7864,7 +8815,7 @@ msgstr "Local route" msgid "Locally connect to serial port identified by `<device>`." msgstr "Locally connect to serial port identified by `<device>`." -#: ../../configuration/policy/route-map.rst:273 +#: ../../configuration/policy/route-map.rst:276 msgid "Locally significant administrative distance." msgstr "Locally significant administrative distance." @@ -7918,11 +8869,11 @@ msgstr "Logging to a remote host leaves the local logging configuration intact, msgid "Login/User Management" msgstr "Login/User Management" -#: ../../configuration/system/login.rst:363 +#: ../../configuration/system/login.rst:367 msgid "Login Banner" msgstr "Login Banner" -#: ../../configuration/system/login.rst:383 +#: ../../configuration/system/login.rst:387 msgid "Login limits" msgstr "Login limits" @@ -7981,7 +8932,7 @@ msgstr "MACsec options" msgid "MDI power" msgstr "MDI power" -#: ../../configuration/system/login.rst:91 +#: ../../configuration/system/login.rst:95 msgid "MFA/2FA authentication using OTP (one time passwords)" msgstr "MFA/2FA authentication using OTP (one time passwords)" @@ -8024,11 +8975,11 @@ msgstr "Main structure VyOS firewall cli is shown next:" msgid "Main structure is shown next:" msgstr "Main structure is shown next:" -#: ../../configuration/service/pppoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:303 msgid "Maintenance mode" msgstr "Maintenance mode" -#: ../../configuration/service/conntrack-sync.rst:107 +#: ../../configuration/service/conntrack-sync.rst:116 msgid "Make sure conntrack is enabled by running and show connection tracking table." msgstr "Make sure conntrack is enabled by running and show connection tracking table." @@ -8048,7 +8999,7 @@ msgstr "Mandatory Settings" msgid "Manual Neighbor Configuration" msgstr "Manual Neighbor Configuration" -#: ../../configuration/pki/index.rst:336 +#: ../../configuration/pki/index.rst:367 msgid "Manually trigger certificate renewal. This will be done twice a day." msgstr "Manually trigger certificate renewal. This will be done twice a day." @@ -8056,15 +9007,19 @@ msgstr "Manually trigger certificate renewal. This will be done twice a day." msgid "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." msgstr "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." -#: ../../configuration/vpn/sstp.rst:223 +#: ../../configuration/service/ipoe-server.rst:166 +#: ../../configuration/service/pppoe-server.rst:128 +#: ../../configuration/vpn/l2tp.rst:171 +#: ../../configuration/vpn/pptp.rst:111 +#: ../../configuration/vpn/sstp.rst:144 msgid "Mark RADIUS server as offline for this given `<time>` in seconds." msgstr "Mark RADIUS server as offline for this given `<time>` in seconds." -#: ../../configuration/pki/index.rst:206 +#: ../../configuration/pki/index.rst:208 msgid "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." msgstr "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." -#: ../../configuration/pki/index.rst:244 +#: ../../configuration/pki/index.rst:246 msgid "Mark the private key as password protected. User is asked for the password when the key is referenced." msgstr "Mark the private key as password protected. User is asked for the password when the key is referenced." @@ -8076,7 +9031,7 @@ msgstr "Match BGP large communities." msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." -#: ../../configuration/firewall/ipv4.rst:440 +#: ../../configuration/firewall/ipv4.rst:463 #: ../../configuration/firewall/ipv6.rst:447 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." @@ -8089,17 +9044,21 @@ msgstr "Match RPKI validation result." msgid "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." msgstr "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." -#: ../../configuration/firewall/ipv4.rst:773 +#: ../../configuration/firewall/ipv4.rst:796 #: ../../configuration/firewall/ipv6.rst:783 msgid "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." msgstr "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." -#: ../../configuration/firewall/ipv4.rst:831 +#: ../../configuration/firewall/ipv4.rst:854 #: ../../configuration/firewall/ipv6.rst:840 msgid "Match against the state of a packet." msgstr "Match against the state of a packet." -#: ../../configuration/firewall/ipv4.rst:620 +#: ../../configuration/firewall/ipv4.rst:336 +msgid "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." +msgstr "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." + +#: ../../configuration/firewall/ipv4.rst:643 #: ../../configuration/firewall/ipv6.rst:630 msgid "Match based on dscp value." msgstr "Match based on dscp value." @@ -8108,16 +9067,16 @@ msgstr "Match based on dscp value." msgid "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." msgstr "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." -#: ../../configuration/firewall/ipv4.rst:631 +#: ../../configuration/firewall/ipv4.rst:654 #: ../../configuration/firewall/ipv6.rst:641 msgid "Match based on fragment criteria." msgstr "Match based on fragment criteria." -#: ../../configuration/firewall/ipv4.rst:642 +#: ../../configuration/firewall/ipv4.rst:665 msgid "Match based on icmp code and type." msgstr "Match based on icmp code and type." -#: ../../configuration/firewall/ipv4.rst:653 +#: ../../configuration/firewall/ipv4.rst:676 msgid "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." msgstr "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." @@ -8147,18 +9106,18 @@ msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:239 -#: ../../configuration/firewall/ipv4.rst:663 +#: ../../configuration/firewall/ipv4.rst:686 #: ../../configuration/firewall/ipv6.rst:673 msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:248 -#: ../../configuration/firewall/ipv4.rst:674 +#: ../../configuration/firewall/ipv4.rst:697 #: ../../configuration/firewall/ipv6.rst:684 msgid "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:707 +#: ../../configuration/firewall/ipv4.rst:730 #: ../../configuration/firewall/ipv6.rst:717 msgid "Match based on ipsec criteria." msgstr "Match based on ipsec criteria." @@ -8168,35 +9127,35 @@ msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:256 -#: ../../configuration/firewall/ipv4.rst:684 +#: ../../configuration/firewall/ipv4.rst:707 #: ../../configuration/firewall/ipv6.rst:694 msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:265 -#: ../../configuration/firewall/ipv4.rst:695 +#: ../../configuration/firewall/ipv4.rst:718 #: ../../configuration/firewall/ipv6.rst:705 msgid "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:750 +#: ../../configuration/firewall/ipv4.rst:773 #: ../../configuration/firewall/ipv6.rst:760 #: ../../configuration/policy/route.rst:176 msgid "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." msgstr "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." -#: ../../configuration/firewall/ipv4.rst:762 +#: ../../configuration/firewall/ipv4.rst:785 #: ../../configuration/firewall/ipv6.rst:772 #: ../../configuration/policy/route.rst:184 msgid "Match based on packet type criteria." msgstr "Match based on packet type criteria." -#: ../../configuration/firewall/ipv4.rst:729 +#: ../../configuration/firewall/ipv4.rst:752 #: ../../configuration/firewall/ipv6.rst:739 msgid "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" msgstr "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" -#: ../../configuration/firewall/ipv4.rst:718 +#: ../../configuration/firewall/ipv4.rst:741 #: ../../configuration/firewall/ipv6.rst:728 msgid "Match based on the maximum number of packets to allow in excess of rate." msgstr "Match based on the maximum number of packets to allow in excess of rate." @@ -8209,7 +9168,7 @@ msgstr "Match based on vlan ID. Range is also supported." msgid "Match based on vlan priority(pcp). Range is also supported." msgstr "Match based on vlan priority(pcp). Range is also supported." -#: ../../configuration/firewall/ipv4.rst:801 +#: ../../configuration/firewall/ipv4.rst:824 #: ../../configuration/firewall/ipv6.rst:810 msgid "Match bases on recently seen sources." msgstr "Match bases on recently seen sources." @@ -8224,7 +9183,7 @@ msgstr "Match criteria based on connection mark." msgid "Match criteria based on nat connection status." msgstr "Match criteria based on nat connection status." -#: ../../configuration/firewall/ipv4.rst:345 +#: ../../configuration/firewall/ipv4.rst:368 #: ../../configuration/firewall/ipv6.rst:345 msgid "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." msgstr "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." @@ -8237,6 +9196,14 @@ msgstr "Match criteria based on source and/or destination mac-address." msgid "Match domain name" msgstr "Match domain name" +#: ../../configuration/service/ipoe-server.rst:382 +#: ../../configuration/service/pppoe-server.rst:571 +#: ../../configuration/vpn/l2tp.rst:506 +#: ../../configuration/vpn/pptp.rst:430 +#: ../../configuration/vpn/sstp.rst:464 +msgid "Match firewall mark value" +msgstr "Match firewall mark value" + #: ../../configuration/firewall/ipv6.rst:894 #: ../../configuration/policy/route.rst:234 msgid "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." @@ -8250,12 +9217,12 @@ msgstr "Match local preference." msgid "Match route metric." msgstr "Match route metric." -#: ../../configuration/firewall/ipv4.rst:885 +#: ../../configuration/firewall/ipv4.rst:908 #: ../../configuration/policy/route.rst:229 msgid "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." msgstr "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." -#: ../../configuration/firewall/ipv4.rst:906 +#: ../../configuration/firewall/ipv4.rst:929 #: ../../configuration/firewall/ipv6.rst:915 msgid "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." msgstr "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." @@ -8275,11 +9242,24 @@ msgstr "Matching traffic" msgid "Maximum A-MSDU length 3839 (default) or 7935 octets" msgstr "Maximum A-MSDU length 3839 (default) or 7935 octets" +#: ../../configuration/vpn/l2tp.rst:492 +#: ../../configuration/vpn/pptp.rst:416 +msgid "Maximum Transmission Unit (MTU) (default: **1436**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1436**)" + +#: ../../configuration/service/pppoe-server.rst:538 +msgid "Maximum Transmission Unit (MTU) (default: **1492**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1492**)" + +#: ../../configuration/vpn/sstp.rst:450 +msgid "Maximum Transmission Unit (MTU) (default: **1500**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1500**)" + #: ../../configuration/service/dns.rst:108 msgid "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." msgstr "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." -#: ../../configuration/vpn/sstp.rst:159 +#: ../../configuration/vpn/sstp.rst:165 msgid "Maximum number of IPv4 nameservers" msgstr "Maximum number of IPv4 nameservers" @@ -8287,6 +9267,14 @@ msgstr "Maximum number of IPv4 nameservers" msgid "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." msgstr "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." +#: ../../configuration/service/ipoe-server.rst:372 +#: ../../configuration/service/pppoe-server.rst:542 +#: ../../configuration/vpn/l2tp.rst:496 +#: ../../configuration/vpn/pptp.rst:420 +#: ../../configuration/vpn/sstp.rst:454 +msgid "Maximum number of concurrent session start attempts" +msgstr "Maximum number of concurrent session start attempts" + #: ../../configuration/interfaces/wireless.rst:77 msgid "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." msgstr "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." @@ -8295,7 +9283,11 @@ msgstr "Maximum number of stations allowed in station table. New stations will b msgid "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." msgstr "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." -#: ../../configuration/vpn/sstp.rst:250 +#: ../../configuration/service/ipoe-server.rst:190 +#: ../../configuration/service/pppoe-server.rst:152 +#: ../../configuration/vpn/l2tp.rst:195 +#: ../../configuration/vpn/pptp.rst:135 +#: ../../configuration/vpn/sstp.rst:168 msgid "Maximum number of tries to send Access-Request/Accounting-Request queries" msgstr "Maximum number of tries to send Access-Request/Accounting-Request queries" @@ -8311,7 +9303,7 @@ msgstr "Medium" msgid "Member Interfaces" msgstr "Member Interfaces" -#: ../../configuration/interfaces/bridge.rst:196 +#: ../../configuration/interfaces/bridge.rst:205 msgid "Member interfaces `eth1` and VLAN 10 on interface `eth2`" msgstr "Member interfaces `eth1` and VLAN 10 on interface `eth2`" @@ -8323,6 +9315,10 @@ msgstr "Messages generated internally by syslogd" msgid "Metris version, the default is ``2``" msgstr "Metris version, the default is ``2``" +#: ../../configuration/vpn/ipsec.rst:510 +msgid "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." + #: ../../configuration/service/router-advert.rst:1 msgid "Min and max intervals between unsolicited multicast RAs" msgstr "Min and max intervals between unsolicited multicast RAs" @@ -8351,7 +9347,12 @@ msgstr "Modify the time that pim will register suppress a FHR will send register msgid "Monitor, the system passively monitors any kind of wireless traffic" msgstr "Monitor, the system passively monitors any kind of wireless traffic" +#: ../../configuration/service/ipoe-server.rst:390 #: ../../configuration/service/monitoring.rst:2 +#: ../../configuration/service/pppoe-server.rst:583 +#: ../../configuration/vpn/l2tp.rst:518 +#: ../../configuration/vpn/pptp.rst:442 +#: ../../configuration/vpn/sstp.rst:538 msgid "Monitoring" msgstr "Monitoring" @@ -8371,7 +9372,7 @@ msgstr "Most operating systems include native client support for IPsec IKEv2 VPN msgid "Mount a volume into the container" msgstr "Mount a volume into the container" -#: ../../configuration/service/dhcp-server.rst:235 +#: ../../configuration/service/dhcp-server.rst:291 msgid "Multi" msgstr "Multi" @@ -8383,7 +9384,7 @@ msgstr "Multi-client server is the most popular OpenVPN mode on routers. It alwa msgid "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." msgstr "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." -#: ../../configuration/service/dhcp-server.rst:359 +#: ../../configuration/service/dhcp-server.rst:415 msgid "Multi: can be specified multiple times." msgstr "Multi: can be specified multiple times." @@ -8423,12 +9424,11 @@ msgstr "Multicast receivers will talk IGMP to their local router, so, besides ha msgid "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." msgstr "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." -#: ../../configuration/service/dhcp-server.rst:54 -#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:108 msgid "Multiple DNS servers can be defined." msgstr "Multiple DNS servers can be defined." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." msgstr "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." @@ -8441,6 +9441,10 @@ msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. Thi msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." msgstr "Multiple aliases can pe specified per host-name." @@ -8460,16 +9464,16 @@ msgstr "Multiple interfaces may be specified." msgid "Multiple networks/client IP addresses can be configured." msgstr "Multiple networks/client IP addresses can be configured." -#: ../../configuration/system/login.rst:248 -#: ../../configuration/system/login.rst:317 +#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:321 msgid "Multiple servers can be specified." msgstr "Multiple servers can be specified." -#: ../../configuration/service/dns.rst:374 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" -#: ../../configuration/firewall/ipv4.rst:494 +#: ../../configuration/firewall/ipv4.rst:517 #: ../../configuration/firewall/ipv6.rst:500 msgid "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" msgstr "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" @@ -8487,22 +9491,22 @@ msgstr "Multiple users can connect to the same serial device but only one is all msgid "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." msgstr "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." -#: ../../configuration/service/dhcp-server.rst:241 -#: ../../configuration/service/dhcp-server.rst:247 -#: ../../configuration/service/dhcp-server.rst:252 -#: ../../configuration/service/dhcp-server.rst:272 -#: ../../configuration/service/dhcp-server.rst:287 -#: ../../configuration/service/dhcp-server.rst:292 #: ../../configuration/service/dhcp-server.rst:297 -#: ../../configuration/service/dhcp-server.rst:302 -#: ../../configuration/service/dhcp-server.rst:307 -#: ../../configuration/service/dhcp-server.rst:327 -#: ../../configuration/service/dhcp-server.rst:332 -#: ../../configuration/service/dhcp-server.rst:337 +#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:308 +#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:358 +#: ../../configuration/service/dhcp-server.rst:363 +#: ../../configuration/service/dhcp-server.rst:383 +#: ../../configuration/service/dhcp-server.rst:388 +#: ../../configuration/service/dhcp-server.rst:393 msgid "N" msgstr "N" -#: ../../configuration/highavailability/index.rst:363 +#: ../../configuration/highavailability/index.rst:373 #: ../../configuration/nat/index.rst:5 msgid "NAT" msgstr "NAT" @@ -8523,6 +9527,10 @@ msgstr "NAT64" msgid "NAT64 client configuration:" msgstr "NAT64 client configuration:" +#: ../../configuration/service/router-advert.rst:84 +msgid "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." +msgstr "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." + #: ../../configuration/nat/nat64.rst:44 msgid "NAT64 server configuration:" msgstr "NAT64 server configuration:" @@ -8587,7 +9595,15 @@ msgstr "NTP supplies a warning of any impending leap second adjustment, but no i msgid "Name Server" msgstr "Name Server" -#: ../../configuration/service/dhcp-server.rst:356 +#: ../../configuration/vpn/sstp.rst:84 +msgid "Name of installed certificate authority certificate." +msgstr "Name of installed certificate authority certificate." + +#: ../../configuration/vpn/sstp.rst:88 +msgid "Name of installed server certificate." +msgstr "Name of installed server certificate." + +#: ../../configuration/service/dhcp-server.rst:412 msgid "Name of static mapping" msgstr "Name of static mapping" @@ -8595,11 +9611,11 @@ msgstr "Name of static mapping" msgid "Name of the single table Only if set group-metrics single-table." msgstr "Name of the single table Only if set group-metrics single-table." -#: ../../configuration/service/dhcp-server.rst:296 +#: ../../configuration/service/dhcp-server.rst:352 msgid "Name or IPv4 address of TFTP server" msgstr "Name or IPv4 address of TFTP server" -#: ../../configuration/service/dhcp-server.rst:281 +#: ../../configuration/service/dhcp-server.rst:337 msgid "NetBIOS over TCP/IP name server" msgstr "NetBIOS over TCP/IP name server" @@ -8677,6 +9693,10 @@ msgstr "Network management station (NMS) - software which runs on the manager" msgid "Network news subsystem" msgstr "Network news subsystem" +#: ../../configuration/service/ids.rst:87 +msgid "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" +msgstr "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" + #: ../../configuration/service/monitoring.rst:47 msgid "Networks allowed to query this server" msgstr "Networks allowed to query this server" @@ -8693,11 +9713,11 @@ msgstr "Next-hop interface for the route" msgid "Next it is necessary to configure 2FA for OpenConnect:" msgstr "Next it is necessary to configure 2FA for OpenConnect:" -#: ../../configuration/policy/route-map.rst:279 +#: ../../configuration/policy/route-map.rst:282 msgid "Nexthop IP address." msgstr "Nexthop IP address." -#: ../../configuration/policy/route-map.rst:298 +#: ../../configuration/policy/route-map.rst:301 msgid "Nexthop IPv6 address." msgstr "Nexthop IPv6 address." @@ -8705,6 +9725,22 @@ msgstr "Nexthop IPv6 address." msgid "Nexthop IPv6 address to match." msgstr "Nexthop IPv6 address to match." +#: ../../configuration/system/ip.rst:47 +#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/vrf/index.rst:71 +msgid "Nexthop Tracking" +msgstr "Nexthop Tracking" + +#: ../../configuration/system/ip.rst:49 +#: ../../configuration/system/ipv6.rst:45 +#: ../../configuration/vrf/index.rst:73 +msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." + +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." + #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" @@ -8713,7 +9749,7 @@ msgstr "No ROA exists which covers that prefix. Unfortunately this is the case f msgid "No VLAN tagging required by your ISP." msgstr "No VLAN tagging required by your ISP." -#: ../../configuration/protocols/bgp.rst:707 +#: ../../configuration/protocols/bgp.rst:729 msgid "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." msgstr "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." @@ -8753,7 +9789,7 @@ msgstr "Note: certificate names don't matter, we use 'openvpn-local' and 'openvp msgid "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." msgstr "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." -#: ../../configuration/vpn/ipsec.rst:294 +#: ../../configuration/vpn/ipsec.rst:298 #: ../../configuration/vpn/rsa-keys.rst:35 msgid "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." @@ -8762,11 +9798,11 @@ msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT publi msgid "Notice" msgstr "Notice" -#: ../../configuration/service/conntrack-sync.rst:194 +#: ../../configuration/service/conntrack-sync.rst:203 msgid "Now configure conntrack-sync service on ``router1`` **and** ``router2``" msgstr "Now configure conntrack-sync service on ``router1`` **and** ``router2``" -#: ../../configuration/vpn/ipsec.rst:297 +#: ../../configuration/vpn/ipsec.rst:301 msgid "Now the noted public keys should be entered on the opposite routers." msgstr "Now the noted public keys should be entered on the opposite routers." @@ -8786,7 +9822,7 @@ msgstr "Now when connecting the user will first be asked for the password and th msgid "Now you are ready to setup IPsec. The key points:" msgstr "Now you are ready to setup IPsec. The key points:" -#: ../../configuration/vpn/ipsec.rst:311 +#: ../../configuration/vpn/ipsec.rst:315 msgid "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." msgstr "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." @@ -8794,6 +9830,10 @@ msgstr "Now you are ready to setup IPsec. You'll need to use an ID instead of ad msgid "Number of antennas on this card" msgstr "Number of antennas on this card" +#: ../../configuration/service/dns.rst:166 +msgid "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." +msgstr "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." + #: ../../configuration/system/syslog.rst:231 msgid "Number of lines to be displayed, default 10" msgstr "Number of lines to be displayed, default 10" @@ -8822,7 +9862,7 @@ msgstr "OSPFv2 (IPv4)" msgid "OSPFv3 (IPv6)" msgstr "OSPFv3 (IPv6)" -#: ../../configuration/system/login.rst:141 +#: ../../configuration/system/login.rst:145 msgid "OTP-key generation" msgstr "OTP-key generation" @@ -8830,7 +9870,7 @@ msgstr "OTP-key generation" msgid "Offloading" msgstr "Offloading" -#: ../../configuration/service/dhcp-server.rst:245 +#: ../../configuration/service/dhcp-server.rst:301 msgid "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" msgstr "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" @@ -8842,7 +9882,7 @@ msgstr "Often we need to embed one policy into another one. It is possible to do msgid "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." msgstr "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." -#: ../../configuration/service/conntrack-sync.rst:211 +#: ../../configuration/service/conntrack-sync.rst:220 msgid "On active router run:" msgstr "On active router run:" @@ -8858,7 +9898,7 @@ msgstr "On low rates (below 40Mbit) you may want to tune `quantum` down to somet msgid "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." msgstr "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." -#: ../../configuration/service/conntrack-sync.rst:242 +#: ../../configuration/service/conntrack-sync.rst:251 msgid "On standby router run:" msgstr "On standby router run:" @@ -8866,34 +9906,34 @@ msgstr "On standby router run:" msgid "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." msgstr "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." -#: ../../configuration/vpn/ipsec.rst:181 -#: ../../configuration/vpn/ipsec.rst:239 -#: ../../configuration/vpn/ipsec.rst:299 +#: ../../configuration/vpn/ipsec.rst:185 +#: ../../configuration/vpn/ipsec.rst:243 +#: ../../configuration/vpn/ipsec.rst:303 #: ../../configuration/vpn/rsa-keys.rst:40 msgid "On the LEFT:" msgstr "On the LEFT:" -#: ../../configuration/vpn/ipsec.rst:314 +#: ../../configuration/vpn/ipsec.rst:318 #: ../../configuration/vpn/rsa-keys.rst:59 msgid "On the LEFT (static address):" msgstr "On the LEFT (static address):" -#: ../../configuration/vpn/ipsec.rst:221 +#: ../../configuration/vpn/ipsec.rst:225 msgid "On the RIGHT, setup by analogy and swap local and remote addresses." msgstr "On the RIGHT, setup by analogy and swap local and remote addresses." -#: ../../configuration/vpn/ipsec.rst:250 -#: ../../configuration/vpn/ipsec.rst:305 +#: ../../configuration/vpn/ipsec.rst:254 +#: ../../configuration/vpn/ipsec.rst:309 #: ../../configuration/vpn/rsa-keys.rst:46 msgid "On the RIGHT:" msgstr "On the RIGHT:" -#: ../../configuration/vpn/ipsec.rst:339 +#: ../../configuration/vpn/ipsec.rst:343 #: ../../configuration/vpn/rsa-keys.rst:84 msgid "On the RIGHT (dynamic address):" msgstr "On the RIGHT (dynamic address):" -#: ../../configuration/service/conntrack-sync.rst:207 +#: ../../configuration/service/conntrack-sync.rst:216 msgid "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" msgstr "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" @@ -8921,11 +9961,11 @@ msgstr "Once a class has a filter configured, you will also have to define what msgid "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." msgstr "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." -#: ../../configuration/protocols/bgp.rst:702 +#: ../../configuration/protocols/bgp.rst:724 msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" msgstr "Once a traffic-policy is created, you can apply it to an interface:" @@ -8957,6 +9997,10 @@ msgstr "Once the matching rules are set for a class, you can start configuring h msgid "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." msgstr "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." +#: ../../configuration/service/pppoe-server.rst:285 +msgid "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." +msgstr "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." + #: ../../configuration/vpn/openconnect.rst:257 msgid "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." msgstr "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." @@ -8965,11 +10009,15 @@ msgstr "Once you commit the above changes you can create a config file in the /c msgid "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." -#: ../../configuration/vpn/sstp.rst:307 +#: ../../configuration/vpn/sstp.rst:478 msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." -#: ../../configuration/protocols/rpki.rst:183 +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." + +#: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." @@ -9001,7 +10049,7 @@ msgstr "Only VRRP is supported. Required option." msgid "Only allow certain IP addresses or prefixes to access the https webserver." msgstr "Only allow certain IP addresses or prefixes to access the https webserver." -#: ../../configuration/firewall/ipv4.rst:459 +#: ../../configuration/firewall/ipv4.rst:482 #: ../../configuration/firewall/ipv6.rst:466 msgid "Only in the source criteria, you can specify a mac-address." msgstr "Only in the source criteria, you can specify a mac-address." @@ -9022,7 +10070,7 @@ msgstr "Only request an address from the PPPoE server but do not install any def msgid "Only request an address from the SSTP server but do not install any default route." msgstr "Only request an address from the SSTP server but do not install any default route." -#: ../../configuration/system/login.rst:51 +#: ../../configuration/system/login.rst:55 msgid "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." msgstr "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." @@ -9030,7 +10078,7 @@ msgstr "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note t msgid "Only works with a VXLAN device with external flag set." msgstr "Only works with a VXLAN device with external flag set." -#: ../../configuration/highavailability/index.rst:457 +#: ../../configuration/highavailability/index.rst:467 msgid "Op-mode check virtual-server status" msgstr "Op-mode check virtual-server status" @@ -9055,7 +10103,7 @@ msgid "OpenConnect supports a subset of it's configuration options to be applied msgstr "OpenConnect supports a subset of it's configuration options to be applied on a per user/group basis, for configuration purposes we refer to this functionality as \"Identity based config\". The following `OpenConnect Server Manual <https://ocserv.gitlab.io/www/manual.html#:~:text=Configuration%20files%20that% 20will%20be%20applied%20per%20user%20connection%20or%0A%23%20per%20group>`_ outlines the set of configuration options that are allowed. This can be leveraged to apply different sets of configs to different users or groups of users." #: ../../configuration/interfaces/openvpn.rst:7 -#: ../../configuration/pki/index.rst:117 +#: ../../configuration/pki/index.rst:119 msgid "OpenVPN" msgstr "OpenVPN" @@ -9097,7 +10145,7 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -9105,23 +10153,23 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/virtual-ethernet.rst:55 #: ../../configuration/interfaces/wireless.rst:416 #: ../../configuration/interfaces/wwan.rst:79 -#: ../../configuration/pki/index.rst:290 +#: ../../configuration/pki/index.rst:321 #: ../../configuration/protocols/igmp-proxy.rst:73 -#: ../../configuration/protocols/static.rst:183 -#: ../../configuration/service/conntrack-sync.rst:103 +#: ../../configuration/protocols/static.rst:216 +#: ../../configuration/service/conntrack-sync.rst:112 #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:195 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 #: ../../configuration/service/webproxy.rst:330 #: ../../configuration/system/default-route.rst:25 #: ../../configuration/system/flow-accounting.rst:175 -#: ../../configuration/vrf/index.rst:111 -#: ../../configuration/vrf/index.rst:323 -#: ../../configuration/vrf/index.rst:503 +#: ../../configuration/vrf/index.rst:130 +#: ../../configuration/vrf/index.rst:342 +#: ../../configuration/vrf/index.rst:522 msgid "Operation" msgstr "Operation" @@ -9131,17 +10179,17 @@ msgid "Operation-mode" msgstr "Operation-mode" #: ../../configuration/firewall/bridge.rst:284 -#: ../../configuration/firewall/ipv4.rst:954 +#: ../../configuration/firewall/ipv4.rst:977 #: ../../configuration/firewall/ipv6.rst:962 msgid "Operation-mode Firewall" msgstr "Operation-mode Firewall" -#: ../../configuration/container/index.rst:143 +#: ../../configuration/container/index.rst:179 msgid "Operation Commands" msgstr "Operation Commands" -#: ../../configuration/service/dhcp-server.rst:412 -#: ../../configuration/service/dhcp-server.rst:664 +#: ../../configuration/service/dhcp-server.rst:471 +#: ../../configuration/service/dhcp-server.rst:725 #: ../../configuration/system/acceleration.rst:42 msgid "Operation Mode" msgstr "Operation Mode" @@ -9151,12 +10199,12 @@ msgid "Operation mode of wireless radio." msgstr "Operation mode of wireless radio." #: ../../configuration/interfaces/wireguard.rst:338 -#: ../../configuration/protocols/bfd.rst:94 -#: ../../configuration/protocols/bfd.rst:175 +#: ../../configuration/protocols/bfd.rst:101 +#: ../../configuration/protocols/bfd.rst:182 msgid "Operational Commands" msgstr "Operational Commands" -#: ../../configuration/protocols/bgp.rst:950 +#: ../../configuration/protocols/bgp.rst:972 #: ../../configuration/protocols/mpls.rst:218 #: ../../configuration/protocols/ospf.rst:609 #: ../../configuration/protocols/ospf.rst:1268 @@ -9164,8 +10212,8 @@ msgstr "Operational Commands" msgid "Operational Mode Commands" msgstr "Operational Mode Commands" -#: ../../configuration/system/ip.rst:47 -#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/system/ip.rst:60 +#: ../../configuration/system/ipv6.rst:56 msgid "Operational commands" msgstr "Operational commands" @@ -9177,11 +10225,11 @@ msgstr "Option" msgid "Option 43 for UniFI" msgstr "Option 43 for UniFI" -#: ../../configuration/service/dhcp-server.rst:234 +#: ../../configuration/service/dhcp-server.rst:290 msgid "Option description" msgstr "Option description" -#: ../../configuration/service/dhcp-server.rst:232 +#: ../../configuration/service/dhcp-server.rst:288 msgid "Option number" msgstr "Option number" @@ -9211,7 +10259,7 @@ msgstr "Optional" msgid "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." msgstr "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." -#: ../../configuration/system/login.rst:107 +#: ../../configuration/system/login.rst:111 msgid "Optional/default settings" msgstr "Optional/default settings" @@ -9231,12 +10279,11 @@ msgstr "Optionally set a specific static IPv4 or IPv6 address for the container. #: ../../configuration/interfaces/openvpn.rst:631 #: ../../configuration/service/dhcp-relay.rst:53 #: ../../configuration/service/dhcp-relay.rst:160 -#: ../../configuration/service/dhcp-server.rst:224 -#: ../../configuration/vpn/sstp.rst:230 +#: ../../configuration/service/dhcp-server.rst:280 msgid "Options" msgstr "Options" -#: ../../configuration/vpn/ipsec.rst:159 +#: ../../configuration/vpn/ipsec.rst:162 msgid "Options (Global IPsec settings) Attributes" msgstr "Options (Global IPsec settings) Attributes" @@ -9252,11 +10299,15 @@ msgstr "Or, for example ftp, `delete system conntrack modules ftp`." msgid "Or **binary** prefixes." msgstr "Or **binary** prefixes." +#: ../../configuration/service/conntrack-sync.rst:107 +msgid "Order conntrackd to request a complete conntrack table resync against the other node at startup." +msgstr "Order conntrackd to request a complete conntrack table resync against the other node at startup." + #: ../../configuration/protocols/ospf.rst:73 msgid "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." msgstr "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." -#: ../../configuration/service/pppoe-server.rst:238 +#: ../../configuration/service/pppoe-server.rst:312 msgid "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." msgstr "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." @@ -9325,15 +10376,15 @@ msgstr "Overview of defined groups. You see the type, the members, and where the msgid "PBR multiple uplinks" msgstr "PBR multiple uplinks" -#: ../../configuration/vrf/index.rst:244 +#: ../../configuration/vrf/index.rst:263 msgid "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" msgstr "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" -#: ../../configuration/vrf/index.rst:245 +#: ../../configuration/vrf/index.rst:264 msgid "PC2 is in VRF ``blue`` which is the development department" msgstr "PC2 is in VRF ``blue`` which is the development department" -#: ../../configuration/vrf/index.rst:246 +#: ../../configuration/vrf/index.rst:265 msgid "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." msgstr "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." @@ -9369,7 +10420,7 @@ msgstr "PIM – Protocol Independent Multicast" msgid "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." msgstr "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." -#: ../../configuration/pki/index.rst:7 +#: ../../configuration/pki/index.rst:9 msgid "PKI" msgstr "PKI" @@ -9377,7 +10428,14 @@ msgstr "PKI" msgid "PPDU" msgstr "PPDU" -#: ../../configuration/vpn/sstp.rst:174 +#: ../../configuration/service/pppoe-server.rst:453 +#: ../../configuration/vpn/l2tp.rst:407 +#: ../../configuration/vpn/pptp.rst:331 +#: ../../configuration/vpn/sstp.rst:365 +msgid "PPP Advanced Options" +msgstr "PPP Advanced Options" + +#: ../../configuration/vpn/sstp.rst:180 msgid "PPP Settings" msgstr "PPP Settings" @@ -9393,7 +10451,7 @@ msgstr "PPPoE Server" msgid "PPPoE options" msgstr "PPPoE options" -#: ../../configuration/vpn/pptp.rst:4 +#: ../../configuration/vpn/pptp.rst:5 msgid "PPTP-Server" msgstr "PPTP-Server" @@ -9401,19 +10459,23 @@ msgstr "PPTP-Server" msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" msgstr "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." msgstr "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." +#: ../../configuration/service/dhcp-server.rst:65 +msgid "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" +msgstr "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" + #: ../../configuration/interfaces/bridge.rst:60 msgid "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." msgstr "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." -#: ../../configuration/vpn/sstp.rst:166 +#: ../../configuration/vpn/sstp.rst:172 msgid "Path to `<file>` pointing to the certificate authority certificate." msgstr "Path to `<file>` pointing to the certificate authority certificate." -#: ../../configuration/vpn/sstp.rst:170 +#: ../../configuration/vpn/sstp.rst:176 msgid "Path to `<file>` pointing to the servers certificate (public portion)." msgstr "Path to `<file>` pointing to the servers certificate (public portion)." @@ -9457,11 +10519,15 @@ msgstr "Per default VyOSs has minimal syslog logging enabled which is stored and msgid "Per default every packet is sampled (that is, the sampling rate is 1)." msgstr "Per default every packet is sampled (that is, the sampling rate is 1)." -#: ../../configuration/service/pppoe-server.rst:323 +#: ../../configuration/service/pppoe-server.rst:556 msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." -#: ../../configuration/system/option.rst:78 +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + +#: ../../configuration/system/option.rst:108 msgid "Performance" msgstr "Performance" @@ -9469,11 +10535,11 @@ msgstr "Performance" msgid "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." msgstr "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." -#: ../../configuration/vrf/index.rst:197 +#: ../../configuration/vrf/index.rst:216 msgid "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." msgstr "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." -#: ../../configuration/vrf/index.rst:183 +#: ../../configuration/vrf/index.rst:202 msgid "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." msgstr "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." @@ -9497,7 +10563,7 @@ msgstr "Please, refer to appropiate section for more information about firewall msgid "Please, refer to appropriate section for more information about firewall configuration:" msgstr "Please, refer to appropriate section for more information about firewall configuration:" -#: ../../configuration/service/ipoe-server.rst:23 +#: ../../configuration/service/ipoe-server.rst:21 msgid "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." msgstr "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." @@ -9513,7 +10579,7 @@ msgstr "Please refer to the :ref:`ipsec` documentation for the individual IPSec msgid "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." msgstr "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." -#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:420 msgid "Please see the :ref:`dhcp-dns-quick-start` configuration." msgstr "Please see the :ref:`dhcp-dns-quick-start` configuration." @@ -9566,12 +10632,16 @@ msgid "Port Groups" msgstr "Port Groups" #: ../../configuration/interfaces/bonding.rst:282 -#: ../../configuration/interfaces/bridge.rst:179 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/bridge.rst:188 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" msgstr "Port Mirror (SPAN)" -#: ../../configuration/vpn/sstp.rst:242 +#: ../../configuration/service/ipoe-server.rst:182 +#: ../../configuration/service/pppoe-server.rst:144 +#: ../../configuration/vpn/l2tp.rst:187 +#: ../../configuration/vpn/pptp.rst:127 +#: ../../configuration/vpn/sstp.rst:160 msgid "Port for Dynamic Authorization Extension server (DM/CoA)" msgstr "Port for Dynamic Authorization Extension server (DM/CoA)" @@ -9656,7 +10726,7 @@ msgstr "Preference associated with the default router" msgid "Prefix Conversion" msgstr "Prefix Conversion" -#: ../../configuration/service/dhcp-server.rst:564 +#: ../../configuration/service/dhcp-server.rst:623 msgid "Prefix Delegation" msgstr "Prefix Delegation" @@ -9696,11 +10766,11 @@ msgstr "Prefix to match against." msgid "Prefixes" msgstr "Prefixes" -#: ../../configuration/policy/route-map.rst:212 +#: ../../configuration/policy/route-map.rst:215 msgid "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." msgstr "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." -#: ../../configuration/policy/route-map.rst:207 +#: ../../configuration/policy/route-map.rst:210 msgid "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." @@ -9708,11 +10778,11 @@ msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's msgid "Principle of SNMP Communication" msgstr "Principle of SNMP Communication" -#: ../../configuration/vrf/index.rst:532 +#: ../../configuration/vrf/index.rst:551 msgid "Print a summary of neighbor connections for the specified AFI/SAFI combination." msgstr "Print a summary of neighbor connections for the specified AFI/SAFI combination." -#: ../../configuration/vrf/index.rst:511 +#: ../../configuration/vrf/index.rst:530 msgid "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." msgstr "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." @@ -9733,6 +10803,10 @@ msgstr "Priority Queue, as other non-shaping policies, is only useful if your ou msgid "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." msgstr "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." +#: ../../configuration/vpn/ipsec.rst:544 +msgid "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." +msgstr "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." + #: ../../configuration/service/monitoring.rst:38 msgid "Prometheus-client" msgstr "Prometheus-client" @@ -9841,11 +10915,11 @@ msgstr "Pseudo Ethernet/MACVLAN options" msgid "Publish a port for the container." msgstr "Publish a port for the container." -#: ../../configuration/container/index.rst:147 +#: ../../configuration/container/index.rst:183 msgid "Pull a new image for container" msgstr "Pull a new image for container" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -9875,7 +10949,7 @@ msgstr "R1:" msgid "R1 has 192.0.2.1/24 & 2001:db8::1/64" msgstr "R1 has 192.0.2.1/24 & 2001:db8::1/64" -#: ../../configuration/vrf/index.rst:248 +#: ../../configuration/vrf/index.rst:267 msgid "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" msgstr "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" @@ -9887,12 +10961,11 @@ msgstr "R2:" msgid "R2 has 192.0.2.2/24 & 2001:db8::2/64" msgstr "R2 has 192.0.2.2/24 & 2001:db8::2/64" -#: ../../configuration/system/login.rst:234 -#: ../../configuration/vpn/sstp.rst:207 +#: ../../configuration/system/login.rst:238 msgid "RADIUS" msgstr "RADIUS" -#: ../../configuration/service/ipoe-server.rst:111 +#: ../../configuration/service/ipoe-server.rst:112 msgid "RADIUS Setup" msgstr "RADIUS Setup" @@ -9900,6 +10973,14 @@ msgstr "RADIUS Setup" msgid "RADIUS advanced features" msgstr "RADIUS advanced features" +#: ../../configuration/service/ipoe-server.rst:158 +#: ../../configuration/service/pppoe-server.rst:120 +#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/vpn/pptp.rst:103 +#: ../../configuration/vpn/sstp.rst:136 +msgid "RADIUS advanced options" +msgstr "RADIUS advanced options" + #: ../../configuration/vpn/l2tp.rst:139 msgid "RADIUS authentication" msgstr "RADIUS authentication" @@ -9916,11 +10997,15 @@ msgstr "RADIUS provides the IP addresses in the example above via Framed-IP-Addr msgid "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" msgstr "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" -#: ../../configuration/system/login.rst:266 +#: ../../configuration/system/login.rst:270 msgid "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." msgstr "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." -#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/service/ipoe-server.rst:144 +#: ../../configuration/service/pppoe-server.rst:106 +#: ../../configuration/vpn/l2tp.rst:149 +#: ../../configuration/vpn/pptp.rst:89 +#: ../../configuration/vpn/sstp.rst:122 msgid "RADIUS source address" msgstr "RADIUS source address" @@ -9928,7 +11013,7 @@ msgstr "RADIUS source address" msgid "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." msgstr "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." -#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:312 msgid "RFC 868 time server IPv4 address" msgstr "RFC 868 time server IPv4 address" @@ -9970,8 +11055,8 @@ msgstr "Random-Detect could be useful for heavy traffic. One use of this algorit #: ../../configuration/protocols/static.rst:37 #: ../../configuration/protocols/static.rst:57 -#: ../../configuration/protocols/static.rst:84 -#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:107 +#: ../../configuration/protocols/static.rst:127 msgid "Range is 1 to 255, default is 1." msgstr "Range is 1 to 255, default is 1." @@ -10016,15 +11101,15 @@ msgstr "Re-generated the public/private keyportion which SSH uses to secure conn msgid "Reachable Time" msgstr "Reachable Time" -#: ../../configuration/highavailability/index.rst:388 +#: ../../configuration/highavailability/index.rst:398 msgid "Real server" msgstr "Real server" -#: ../../configuration/highavailability/index.rst:389 +#: ../../configuration/highavailability/index.rst:399 msgid "Real server IP address and port" msgstr "Real server IP address and port" -#: ../../configuration/highavailability/index.rst:404 +#: ../../configuration/highavailability/index.rst:414 msgid "Real server is auto-excluded if port check with this server fail." msgstr "Real server is auto-excluded if port check with this server fail." @@ -10032,7 +11117,11 @@ msgstr "Real server is auto-excluded if port check with this server fail." msgid "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." msgstr "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." -#: ../../configuration/vpn/l2tp.rst:205 +#: ../../configuration/service/ipoe-server.rst:227 +#: ../../configuration/service/pppoe-server.rst:189 +#: ../../configuration/vpn/l2tp.rst:232 +#: ../../configuration/vpn/pptp.rst:172 +#: ../../configuration/vpn/sstp.rst:205 msgid "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." msgstr "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." @@ -10040,7 +11129,11 @@ msgstr "Received RADIUS attributes have a higher priority than parameters define msgid "Recommended for larger installations." msgstr "Recommended for larger installations." -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" msgstr "Redirect HTTP to HTTPS" @@ -10068,11 +11161,11 @@ msgstr "Redistribution Configuration" msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." -#: ../../configuration/service/dns.rst:278 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" @@ -10147,7 +11240,11 @@ msgstr "Remote ``InfluxDB`` bucket name" msgid "Remote database name." msgstr "Remote database name." -#: ../../configuration/service/dhcp-server.rst:147 +#: ../../configuration/service/dhcp-server.rst:196 +msgid "Remote peer IP `<address>` of the second DHCP server in this HA cluster." +msgstr "Remote peer IP `<address>` of the second DHCP server in this HA cluster." + +#: ../../configuration/service/dhcp-server.rst:181 msgid "Remote peer IP `<address>` of the second DHCP server in this failover cluster." msgstr "Remote peer IP `<address>` of the second DHCP server in this failover cluster." @@ -10159,7 +11256,10 @@ msgstr "Remote port" msgid "Remote transmission interval will be multiplied by this value" msgstr "Remote transmission interval will be multiplied by this value" -#: ../../configuration/vpn/l2tp.rst:216 +#: ../../configuration/service/pppoe-server.rst:217 +#: ../../configuration/vpn/l2tp.rst:260 +#: ../../configuration/vpn/pptp.rst:200 +#: ../../configuration/vpn/sstp.rst:233 msgid "Renaming clients interfaces by RADIUS" msgstr "Renaming clients interfaces by RADIUS" @@ -10179,7 +11279,10 @@ msgstr "Request only a temporary address and not form an IA_NA (Identity Associa msgid "Requests are forwarded through ``eth2`` as the `upstream interface`" msgstr "Requests are forwarded through ``eth2`` as the `upstream interface`" -#: ../../configuration/vpn/sstp.rst:95 +#: ../../configuration/service/pppoe-server.rst:442 +#: ../../configuration/vpn/l2tp.rst:396 +#: ../../configuration/vpn/pptp.rst:320 +#: ../../configuration/vpn/sstp.rst:354 msgid "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." msgstr "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." @@ -10191,12 +11294,12 @@ msgstr "Requirements" msgid "Requirements:" msgstr "Requirements:" -#: ../../configuration/firewall/ipv4.rst:926 +#: ../../configuration/firewall/ipv4.rst:949 #: ../../configuration/firewall/ipv6.rst:935 msgid "Requirements to enable synproxy:" msgstr "Requirements to enable synproxy:" -#: ../../configuration/protocols/bgp.rst:1064 +#: ../../configuration/protocols/bgp.rst:1086 #: ../../configuration/protocols/mpls.rst:248 msgid "Reset" msgstr "Reset" @@ -10205,11 +11308,11 @@ msgstr "Reset" msgid "Reset OpenVPN" msgstr "Reset OpenVPN" -#: ../../configuration/system/ipv6.rst:150 +#: ../../configuration/system/ipv6.rst:163 msgid "Reset commands" msgstr "Reset commands" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." msgstr "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." @@ -10225,7 +11328,7 @@ msgstr "Restart DHCP relay service" msgid "Restart DHCPv6 relay agent immediately." msgstr "Restart DHCPv6 relay agent immediately." -#: ../../configuration/container/index.rst:167 +#: ../../configuration/container/index.rst:203 msgid "Restart a given container" msgstr "Restart a given container" @@ -10233,7 +11336,7 @@ msgstr "Restart a given container" msgid "Restart mDNS repeater service." msgstr "Restart mDNS repeater service." -#: ../../configuration/service/dhcp-server.rst:428 +#: ../../configuration/service/dhcp-server.rst:487 msgid "Restart the DHCP server" msgstr "Restart the DHCP server" @@ -10245,7 +11348,7 @@ msgstr "Restart the IGMP proxy process." msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." msgstr "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." -#: ../../configuration/service/dns.rst:204 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." msgstr "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." @@ -10263,11 +11366,11 @@ msgstr "Results in:" msgid "Retransmit Timer" msgstr "Retransmit Timer" -#: ../../configuration/service/conntrack-sync.rst:140 +#: ../../configuration/service/conntrack-sync.rst:149 msgid "Retrieve current statistics of connection tracking subsystem." msgstr "Retrieve current statistics of connection tracking subsystem." -#: ../../configuration/service/conntrack-sync.rst:173 +#: ../../configuration/service/conntrack-sync.rst:182 msgid "Retrieve current status of connection tracking subsystem." msgstr "Retrieve current status of connection tracking subsystem." @@ -10287,15 +11390,15 @@ msgstr "Round Robin" msgid "Route Aggregation Configuration" msgstr "Route Aggregation Configuration" -#: ../../configuration/protocols/bgp.rst:682 +#: ../../configuration/protocols/bgp.rst:704 msgid "Route Dampening" msgstr "Route Dampening" -#: ../../configuration/protocols/bgp.rst:1189 +#: ../../configuration/protocols/bgp.rst:1211 msgid "Route Filtering" msgstr "Route Filtering" -#: ../../configuration/protocols/bgp.rst:818 +#: ../../configuration/protocols/bgp.rst:840 msgid "Route Filtering Configuration" msgstr "Route Filtering Configuration" @@ -10311,7 +11414,7 @@ msgstr "Route Map Policy" msgid "Route Redistribution" msgstr "Route Redistribution" -#: ../../configuration/protocols/bgp.rst:904 +#: ../../configuration/protocols/bgp.rst:926 msgid "Route Reflector Configuration" msgstr "Route Reflector Configuration" @@ -10319,7 +11422,7 @@ msgstr "Route Reflector Configuration" msgid "Route Selection" msgstr "Route Selection" -#: ../../configuration/protocols/bgp.rst:737 +#: ../../configuration/protocols/bgp.rst:759 msgid "Route Selection Configuration" msgstr "Route Selection Configuration" @@ -10327,11 +11430,11 @@ msgstr "Route Selection Configuration" msgid "Route and Route6 Policy" msgstr "Route and Route6 Policy" -#: ../../configuration/protocols/bgp.rst:690 +#: ../../configuration/protocols/bgp.rst:712 msgid "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." msgstr "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." -#: ../../configuration/protocols/bgp.rst:1191 +#: ../../configuration/protocols/bgp.rst:1213 msgid "Route filter can be applied using a route-map:" msgstr "Route filter can be applied using a route-map:" @@ -10339,7 +11442,7 @@ msgstr "Route filter can be applied using a route-map:" msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." msgstr "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." msgstr "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." @@ -10363,7 +11466,7 @@ msgstr "Router Lifetime" msgid "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." msgstr "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." -#: ../../configuration/vrf/index.rst:425 +#: ../../configuration/vrf/index.rst:444 msgid "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" msgstr "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" @@ -10375,7 +11478,7 @@ msgstr "Routes on Node 2:" msgid "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." msgstr "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." -#: ../../configuration/protocols/bgp.rst:662 +#: ../../configuration/protocols/bgp.rst:684 #: ../../configuration/protocols/ospf.rst:92 #: ../../configuration/protocols/rip.rst:64 #: ../../configuration/protocols/static.rst:39 @@ -10391,7 +11494,7 @@ msgstr "Routes with this attribute can only be sent to your neighbor if your loc msgid "Routine" msgstr "Routine" -#: ../../configuration/vrf/index.rst:82 +#: ../../configuration/vrf/index.rst:101 msgid "Routing" msgstr "Routing" @@ -10404,16 +11507,16 @@ msgid "Rule-Sets" msgstr "Rule-Sets" #: ../../configuration/firewall/bridge.rst:287 -#: ../../configuration/firewall/ipv4.rst:957 +#: ../../configuration/firewall/ipv4.rst:980 #: ../../configuration/firewall/ipv6.rst:965 msgid "Rule-set overview" msgstr "Rule-set overview" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." @@ -10421,11 +11524,11 @@ msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` an msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" @@ -10447,7 +11550,7 @@ msgstr "Rules allow to control and route incoming traffic to specific backend ba msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." msgstr "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:391 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" msgstr "Running Behind NAT" @@ -10511,7 +11614,7 @@ msgstr "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new s msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." msgstr "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." -#: ../../configuration/protocols/rpki.rst:127 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -10520,11 +11623,11 @@ msgstr "SSH" msgid "SSH :ref:`ssh_key_based_authentication`" msgstr "SSH :ref:`ssh_key_based_authentication`" -#: ../../configuration/system/login.rst:57 +#: ../../configuration/system/login.rst:61 msgid "SSH :ref:`ssh_operation`" msgstr "SSH :ref:`ssh_operation`" -#: ../../configuration/system/option.rst:44 +#: ../../configuration/system/option.rst:74 msgid "SSH client" msgstr "SSH client" @@ -10532,7 +11635,7 @@ msgstr "SSH client" msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." -#: ../../configuration/protocols/rpki.rst:137 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." msgstr "SSH username to establish an SSH connection to the cache server." @@ -10544,8 +11647,11 @@ msgstr "SSH was designed as a replacement for Telnet and for unsecured remote sh msgid "SSID to be used in IEEE 802.11 management frames" msgstr "SSID to be used in IEEE 802.11 management frames" +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 +msgid "SSL Bridging" +msgstr "SSL Bridging" + #: ../../configuration/vpn/openconnect.rst:24 -#: ../../configuration/vpn/sstp.rst:162 msgid "SSL Certificates" msgstr "SSL Certificates" @@ -10609,7 +11715,44 @@ msgstr "Scanning is not supported on all wireless drivers and wireless hardware. msgid "Script execution" msgstr "Script execution" +#: ../../configuration/service/ipoe-server.rst:299 +#: ../../configuration/service/pppoe-server.rst:417 +#: ../../configuration/vpn/l2tp.rst:361 +#: ../../configuration/vpn/pptp.rst:285 +#: ../../configuration/vpn/sstp.rst:319 +msgid "Script to run before session interface comes up" +msgstr "Script to run before session interface comes up" + +#: ../../configuration/service/ipoe-server.rst:291 +#: ../../configuration/service/pppoe-server.rst:409 +#: ../../configuration/vpn/l2tp.rst:353 +#: ../../configuration/vpn/pptp.rst:277 +#: ../../configuration/vpn/sstp.rst:311 +msgid "Script to run when session interface changed by RADIUS CoA handling" +msgstr "Script to run when session interface changed by RADIUS CoA handling" + +#: ../../configuration/service/ipoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:413 +#: ../../configuration/vpn/l2tp.rst:357 +#: ../../configuration/vpn/pptp.rst:281 +#: ../../configuration/vpn/sstp.rst:315 +msgid "Script to run when session interface going to terminate" +msgstr "Script to run when session interface going to terminate" + +#: ../../configuration/service/ipoe-server.rst:303 +#: ../../configuration/service/pppoe-server.rst:421 +#: ../../configuration/vpn/l2tp.rst:365 +#: ../../configuration/vpn/pptp.rst:289 +#: ../../configuration/vpn/sstp.rst:323 +msgid "Script to run when session interface is completely configured and started" +msgstr "Script to run when session interface is completely configured and started" + #: ../../configuration/highavailability/index.rst:299 +#: ../../configuration/service/ipoe-server.rst:287 +#: ../../configuration/service/pppoe-server.rst:405 +#: ../../configuration/vpn/l2tp.rst:349 +#: ../../configuration/vpn/pptp.rst:273 +#: ../../configuration/vpn/sstp.rst:307 msgid "Scripting" msgstr "Scripting" @@ -10617,7 +11760,15 @@ msgstr "Scripting" msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." -#: ../../configuration/vpn/sstp.rst:246 +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + +#: ../../configuration/service/ipoe-server.rst:186 +#: ../../configuration/service/pppoe-server.rst:148 +#: ../../configuration/vpn/l2tp.rst:191 +#: ../../configuration/vpn/pptp.rst:131 +#: ../../configuration/vpn/sstp.rst:164 msgid "Secret for Dynamic Authorization Extension server (DM/CoA)" msgstr "Secret for Dynamic Authorization Extension server (DM/CoA)" @@ -10634,7 +11785,7 @@ msgstr "Security/authentication messages" msgid "See :rfc:`7761#section-4.1` for details." msgstr "See :rfc:`7761#section-4.1` for details." -#: ../../configuration/system/ip.rst:52 +#: ../../configuration/system/ip.rst:65 msgid "See below the different parameters available for the IPv4 **show** command:" msgstr "See below the different parameters available for the IPv4 **show** command:" @@ -10670,7 +11821,7 @@ msgstr "Select TLS version used." msgid "Select cipher suite used for cryptographic operations. This setting is mandatory." msgstr "Select cipher suite used for cryptographic operations. This setting is mandatory." -#: ../../configuration/vrf/index.rst:468 +#: ../../configuration/vrf/index.rst:487 msgid "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." msgstr "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." @@ -10694,6 +11845,10 @@ msgstr "Send all DNS queries to the IPv4/IPv6 DNS server specified under `<addre msgid "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." msgstr "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." +#: ../../configuration/vpn/l2tp.rst:276 +msgid "Sent to the client (LAC) in the Host-Name attribute" +msgstr "Sent to the client (LAC) in the Host-Name attribute" + #: ../../configuration/system/console.rst:5 msgid "Serial Console" msgstr "Serial Console" @@ -10703,7 +11858,6 @@ msgid "Serial interfaces can be any interface which is directly connected to the msgstr "Serial interfaces can be any interface which is directly connected to the CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)." #: ../../configuration/interfaces/openvpn.rst:325 -#: ../../configuration/vpn/sstp.rst:210 msgid "Server" msgstr "Server" @@ -10711,7 +11865,7 @@ msgstr "Server" msgid "Server:" msgstr "Server:" -#: ../../configuration/pki/index.rst:210 +#: ../../configuration/pki/index.rst:212 msgid "Server Certificate" msgstr "Server Certificate" @@ -10723,7 +11877,7 @@ msgstr "Server Configuration" msgid "Server Side" msgstr "Server Side" -#: ../../configuration/service/ipoe-server.rst:156 +#: ../../configuration/service/ipoe-server.rst:157 msgid "Server configuration" msgstr "Server configuration" @@ -10748,19 +11902,19 @@ msgstr "Set BFD peer IPv4 address or IPv6 address" msgid "Set BGP community-list to exactly match." msgstr "Set BGP community-list to exactly match." -#: ../../configuration/policy/route-map.rst:318 +#: ../../configuration/policy/route-map.rst:321 msgid "Set BGP local preference attribute." msgstr "Set BGP local preference attribute." -#: ../../configuration/policy/route-map.rst:336 +#: ../../configuration/policy/route-map.rst:339 msgid "Set BGP origin code." msgstr "Set BGP origin code." -#: ../../configuration/policy/route-map.rst:341 +#: ../../configuration/policy/route-map.rst:344 msgid "Set BGP originator ID attribute." msgstr "Set BGP originator ID attribute." -#: ../../configuration/policy/route-map.rst:359 +#: ../../configuration/policy/route-map.rst:362 msgid "Set BGP weight attribute" msgstr "Set BGP weight attribute" @@ -10776,7 +11930,7 @@ msgstr "Set IPSec inbound match criterias, where:" msgid "Set IP fragment match, where:" msgstr "Set IP fragment match, where:" -#: ../../configuration/policy/route-map.rst:331 +#: ../../configuration/policy/route-map.rst:334 msgid "Set OSPF external metric-type." msgstr "Set OSPF external metric-type." @@ -10796,12 +11950,16 @@ msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 ne msgid "Set SSL certeficate <name> for service <name>" msgstr "Set SSL certeficate <name> for service <name>" -#: ../../configuration/firewall/ipv4.rst:918 +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate <name> for service <name>" +msgstr "Set SSL certificate <name> for service <name>" + +#: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:280 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" msgstr "Set TTL to 300 seconds" @@ -10813,6 +11971,10 @@ msgstr "Set Virtual Tunnel Interface" msgid "Set a container description" msgstr "Set a container description" +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." + #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" msgstr "Set a destination and/or source address. Accepted input for ipv4:" @@ -10825,7 +11987,7 @@ msgstr "Set a destination and/or source port. Accepted input:" msgid "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." msgstr "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." -#: ../../configuration/system/login.rst:387 +#: ../../configuration/system/login.rst:391 msgid "Set a limit on the maximum number of concurrent logged-in users on the system." msgstr "Set a limit on the maximum number of concurrent logged-in users on the system." @@ -10833,7 +11995,7 @@ msgstr "Set a limit on the maximum number of concurrent logged-in users on the s msgid "Set a meaningful description." msgstr "Set a meaningful description." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." msgstr "Set a named api key. Every key has the same, full permissions on the system." @@ -10860,15 +12022,56 @@ msgstr "Set action for the route-map policy." msgid "Set action to take on entries matching this rule." msgstr "Set action to take on entries matching this rule." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." -#: ../../configuration/vpn/sstp.rst:100 +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + +#: ../../configuration/service/ipoe-server.rst:60 +#: ../../configuration/service/ipoe-server.rst:88 +#: ../../configuration/service/pppoe-server.rst:38 +#: ../../configuration/vpn/l2tp.rst:26 +#: ../../configuration/vpn/pptp.rst:27 +#: ../../configuration/vpn/sstp.rst:53 msgid "Set authentication backend. The configured authentication backend is used for all queries." msgstr "Set authentication backend. The configured authentication backend is used for all queries." -#: ../../configuration/container/index.rst:117 +#: ../../configuration/container/index.rst:122 msgid "Set container capabilities or permissions." msgstr "Set container capabilities or permissions." @@ -10880,6 +12083,19 @@ msgstr "Set delay between gratuitous ARP messages sent on an interface." msgid "Set delay for second set of gratuitous ARPs after transition to MASTER." msgstr "Set delay for second set of gratuitous ARPs after transition to MASTER." +#: ../../configuration/service/ipoe-server.rst:356 +#: ../../configuration/service/pppoe-server.rst:522 +#: ../../configuration/vpn/l2tp.rst:476 +#: ../../configuration/vpn/pptp.rst:400 +#: ../../configuration/vpn/sstp.rst:434 +msgid "Set description." +msgstr "Set description." + +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 +msgid "Set description `<text>` for dynamic DNS service being configured." +msgstr "Set description `<text>` for dynamic DNS service being configured." + #: ../../configuration/policy/as-path-list.rst:21 msgid "Set description for as-path-list policy." msgstr "Set description for as-path-list policy." @@ -10956,7 +12172,7 @@ msgstr "Set eth1 to be the listening interface for the DHCPv6 relay." msgid "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." msgstr "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." -#: ../../configuration/policy/route-map.rst:251 +#: ../../configuration/policy/route-map.rst:254 msgid "Set extcommunity bandwidth" msgstr "Set extcommunity bandwidth" @@ -11025,6 +12241,10 @@ msgstr "Set maximum number of packets to alow in excess of rate." msgid "Set minimum time interval for refreshing gratuitous ARPs while MASTER." msgstr "Set minimum time interval for refreshing gratuitous ARPs while MASTER." +#: ../../configuration/vpn/l2tp.rst:72 +msgid "Set mode for IPsec authentication between VyOS and L2TP clients." +msgstr "Set mode for IPsec authentication between VyOS and L2TP clients." + #: ../../configuration/highavailability/index.rst:285 msgid "Set number of gratuitous ARP messages to send at a time after transition to MASTER." msgstr "Set number of gratuitous ARP messages to send at a time after transition to MASTER." @@ -11055,7 +12275,11 @@ msgstr "Set packet modifications: Packet Differentiated Services Codepoint (DSCP msgid "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." msgstr "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." -#: ../../configuration/policy/route-map.rst:350 +#: ../../configuration/vpn/l2tp.rst:76 +msgid "Set predefined shared secret phrase." +msgstr "Set predefined shared secret phrase." + +#: ../../configuration/policy/route-map.rst:353 msgid "Set prefixes to table." msgstr "Set prefixes to table." @@ -11063,7 +12287,7 @@ msgstr "Set prefixes to table." msgid "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." msgstr "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." -#: ../../configuration/policy/route-map.rst:260 +#: ../../configuration/policy/route-map.rst:263 msgid "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." @@ -11080,7 +12304,7 @@ msgstr "Set rule action to drop." msgid "Set service to bind on IP address, by default listen on any IPv4 and IPv6" msgstr "Set service to bind on IP address, by default listen on any IPv4 and IPv6" -#: ../../configuration/policy/route-map.rst:265 +#: ../../configuration/policy/route-map.rst:268 msgid "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." msgstr "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." @@ -11096,7 +12320,7 @@ msgstr "Set some metric to routes learned from a particular neighbor." msgid "Set source-address to your local IP (LAN)." msgstr "Set source-address to your local IP (LAN)." -#: ../../configuration/policy/route-map.rst:346 +#: ../../configuration/policy/route-map.rst:349 msgid "Set source IP/IPv6 address for route." msgstr "Set source IP/IPv6 address for route." @@ -11105,7 +12329,7 @@ msgstr "Set source IP/IPv6 address for route." msgid "Set source address or prefix to match." msgstr "Set source address or prefix to match." -#: ../../configuration/policy/route-map.rst:354 +#: ../../configuration/policy/route-map.rst:357 msgid "Set tag value for routing protocol." msgstr "Set tag value for routing protocol." @@ -11113,8 +12337,8 @@ msgstr "Set tag value for routing protocol." msgid "Set the \"recursion desired\" bit in requests to the upstream nameserver." msgstr "Set the \"recursion desired\" bit in requests to the upstream nameserver." -#: ../../configuration/policy/route-map.rst:290 -#: ../../configuration/policy/route-map.rst:303 +#: ../../configuration/policy/route-map.rst:293 +#: ../../configuration/policy/route-map.rst:306 msgid "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." msgstr "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." @@ -11175,6 +12399,10 @@ msgstr "Set the Segment Routing Local Block i.e. the label range used by MPLS to msgid "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." msgstr "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." +#: ../../configuration/container/index.rst:99 +msgid "Set the User ID or Group ID of the container" +msgstr "Set the User ID or Group ID of the container" + #: ../../configuration/protocols/pim.rst:147 msgid "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." @@ -11183,6 +12411,10 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." msgstr "Set the ``sshd`` log level. The default is ``info``." @@ -11195,6 +12427,14 @@ msgstr "Set the address of the backend port" msgid "Set the address of the backend server to which the incoming traffic will be forwarded" msgstr "Set the address of the backend server to which the incoming traffic will be forwarded" +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." + #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." @@ -11231,6 +12471,10 @@ msgstr "Set the global setting for invalid packets." msgid "Set the global setting for related connections." msgstr "Set the global setting for related connections." +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." + #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" @@ -11247,6 +12491,10 @@ msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can re msgid "Set the maximum number of TCP half-open connections." msgstr "Set the maximum number of TCP half-open connections." +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." + #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." @@ -11255,11 +12503,11 @@ msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry use msgid "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." msgstr "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." -#: ../../configuration/interfaces/bridge.rst:148 +#: ../../configuration/interfaces/bridge.rst:157 msgid "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" msgstr "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" -#: ../../configuration/policy/route-map.rst:284 +#: ../../configuration/policy/route-map.rst:287 msgid "Set the next-hop as unchanged. Pass through the route-map without changing its value" msgstr "Set the next-hop as unchanged. Pass through the route-map without changing its value" @@ -11271,7 +12519,15 @@ msgstr "Set the number of TCP maximum retransmit attempts." msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." msgstr "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." -#: ../../configuration/system/login.rst:84 +#: ../../configuration/protocols/rpki.rst:119 +msgid "Set the number of seconds the router waits until retrying to connect to the cache server." +msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." + +#: ../../configuration/protocols/rpki.rst:112 +msgid "Set the number of seconds the router waits until the router expires the cache." +msgstr "Set the number of seconds the router waits until the router expires the cache." + +#: ../../configuration/system/login.rst:88 msgid "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." msgstr "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." @@ -11291,11 +12547,11 @@ msgstr "Set the peer's key used to receive (RX) traffic" msgid "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." msgstr "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." -#: ../../configuration/container/index.rst:98 +#: ../../configuration/container/index.rst:103 msgid "Set the restart behavior of the container." msgstr "Set the restart behavior of the container." -#: ../../configuration/policy/route-map.rst:323 +#: ../../configuration/policy/route-map.rst:326 msgid "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." msgstr "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." @@ -11307,6 +12563,10 @@ msgstr "Set the routing table to forward packet with." msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." + #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." @@ -11328,15 +12588,27 @@ msgstr "Set the timeout in secounds for a protocol or state in a custom rule." msgid "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." msgstr "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." -#: ../../configuration/firewall/ipv4.rst:922 +#: ../../configuration/firewall/ipv4.rst:945 #: ../../configuration/firewall/ipv6.rst:931 msgid "Set the window scale factor for TCP window scaling" msgstr "Set the window scale factor for TCP window scaling" -#: ../../configuration/system/login.rst:124 +#: ../../configuration/system/login.rst:128 msgid "Set window of concurrently valid codes." msgstr "Set window of concurrently valid codes." +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" + #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" msgstr "Sets the image name in the hub registry" @@ -11357,7 +12629,7 @@ msgstr "Sets the unique id for this vxlan-interface. Not sure how it correlates msgid "Setting VRRP group priority" msgstr "Setting VRRP group priority" -#: ../../configuration/service/dhcp-server.rst:231 +#: ../../configuration/service/dhcp-server.rst:287 msgid "Setting name" msgstr "Setting name" @@ -11389,7 +12661,16 @@ msgstr "Setting up certificates:" msgid "Setting up tunnel:" msgstr "Setting up tunnel:" -#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/system/option.rst:42 +#: ../../configuration/system/option.rst:53 +msgid "Setting will only become active with the next reboot!" +msgstr "Setting will only become active with the next reboot!" + +#: ../../configuration/service/dhcp-server.rst:429 +msgid "Setup DHCP HA for network 192.0.2.0/24" +msgstr "Setup DHCP HA for network 192.0.2.0/24" + +#: ../../configuration/service/dhcp-server.rst:413 msgid "Setup DHCP failover for network 192.0.2.0/24" msgstr "Setup DHCP failover for network 192.0.2.0/24" @@ -11397,15 +12678,19 @@ msgstr "Setup DHCP failover for network 192.0.2.0/24" msgid "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." msgstr "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." -#: ../../configuration/system/login.rst:262 +#: ../../configuration/system/login.rst:266 msgid "Setup the `<timeout>` in seconds when querying the RADIUS server." msgstr "Setup the `<timeout>` in seconds when querying the RADIUS server." -#: ../../configuration/system/login.rst:331 +#: ../../configuration/system/login.rst:335 msgid "Setup the `<timeout>` in seconds when querying the TACACS server." msgstr "Setup the `<timeout>` in seconds when querying the TACACS server." -#: ../../configuration/service/dns.rst:327 +#: ../../configuration/service/dns.rst:430 +msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." +msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:341 msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." @@ -11413,11 +12698,11 @@ msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS p msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." -#: ../../configuration/system/option.rst:31 +#: ../../configuration/system/option.rst:61 msgid "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." msgstr "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." -#: ../../configuration/system/option.rst:36 +#: ../../configuration/system/option.rst:66 msgid "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." msgstr "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." @@ -11445,25 +12730,25 @@ msgstr "Short GI capabilities for 20 and 40 MHz" msgid "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." msgstr "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." -#: ../../configuration/vrf/index.rst:488 +#: ../../configuration/vrf/index.rst:507 msgid "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." msgstr "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." -#: ../../configuration/protocols/bgp.rst:953 +#: ../../configuration/protocols/bgp.rst:975 #: ../../configuration/protocols/mpls.rst:225 msgid "Show" msgstr "Show" -#: ../../configuration/service/dhcp-server.rst:416 +#: ../../configuration/service/dhcp-server.rst:475 msgid "Show DHCP server daemon log file" msgstr "Show DHCP server daemon log file" -#: ../../configuration/service/dhcp-server.rst:668 +#: ../../configuration/service/dhcp-server.rst:729 msgid "Show DHCPv6 server daemon log file" msgstr "Show DHCPv6 server daemon log file" #: ../../configuration/firewall/bridge.rst:306 -#: ../../configuration/firewall/ipv4.rst:1115 +#: ../../configuration/firewall/ipv4.rst:1138 #: ../../configuration/firewall/ipv6.rst:1138 msgid "Show Firewall log" msgstr "Show Firewall log" @@ -11528,27 +12813,27 @@ msgstr "Show WWAN module model." msgid "Show WWAN module signal strength." msgstr "Show WWAN module signal strength." -#: ../../configuration/container/index.rst:163 +#: ../../configuration/container/index.rst:199 msgid "Show a list available container networks" msgstr "Show a list available container networks" -#: ../../configuration/pki/index.rst:297 +#: ../../configuration/pki/index.rst:328 msgid "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." msgstr "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." -#: ../../configuration/pki/index.rst:332 +#: ../../configuration/pki/index.rst:363 msgid "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." msgstr "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." -#: ../../configuration/pki/index.rst:315 +#: ../../configuration/pki/index.rst:346 msgid "Show a list of installed certificates" msgstr "Show a list of installed certificates" -#: ../../configuration/protocols/bfd.rst:98 +#: ../../configuration/protocols/bfd.rst:105 msgid "Show all BFD peers" msgstr "Show all BFD peers" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" msgstr "Show available offloading functions on given `<interface>`" @@ -11556,23 +12841,23 @@ msgstr "Show available offloading functions on given `<interface>`" msgid "Show binded qat device interrupts to certain core." msgstr "Show binded qat device interrupts to certain core." -#: ../../configuration/interfaces/bridge.rst:283 +#: ../../configuration/interfaces/bridge.rst:292 msgid "Show bridge `<name>` fdb displays the current forwarding table:" msgstr "Show bridge `<name>` fdb displays the current forwarding table:" -#: ../../configuration/interfaces/bridge.rst:310 +#: ../../configuration/interfaces/bridge.rst:319 msgid "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." msgstr "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." msgstr "Show brief interface information." -#: ../../configuration/system/ipv6.rst:46 +#: ../../configuration/system/ipv6.rst:59 msgid "Show commands" msgstr "Show commands" @@ -11584,11 +12869,11 @@ msgstr "Show configured serial ports and their respective interface configuratio msgid "Show connection data of load balanced traffic:" msgstr "Show connection data of load balanced traffic:" -#: ../../configuration/service/conntrack-sync.rst:132 +#: ../../configuration/service/conntrack-sync.rst:141 msgid "Show connection syncing external cache entries" msgstr "Show connection syncing external cache entries" -#: ../../configuration/service/conntrack-sync.rst:136 +#: ../../configuration/service/conntrack-sync.rst:145 msgid "Show connection syncing internal cache entries" msgstr "Show connection syncing internal cache entries" @@ -11610,7 +12895,7 @@ msgstr "Show detailed information about the underlaying physical links on given #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 @@ -11642,7 +12927,7 @@ msgstr "Show general information about specific WireGuard interface" msgid "Show info about the Wireguard service. It also shows the latest handshake." msgstr "Show info about the Wireguard service. It also shows the latest handshake." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" msgstr "Show information about physical `<interface>`" @@ -11654,44 +12939,44 @@ msgstr "Show list of IPs currently blocked by SSH dynamic-protection." msgid "Show logs for mDNS repeater service." msgstr "Show logs for mDNS repeater service." -#: ../../configuration/container/index.rst:159 +#: ../../configuration/container/index.rst:195 msgid "Show logs from a given container" msgstr "Show logs from a given container" -#: ../../configuration/service/dhcp-server.rst:420 +#: ../../configuration/service/dhcp-server.rst:479 msgid "Show logs from all DHCP client processes." msgstr "Show logs from all DHCP client processes." -#: ../../configuration/service/dhcp-server.rst:672 +#: ../../configuration/service/dhcp-server.rst:733 msgid "Show logs from all DHCPv6 client processes." msgstr "Show logs from all DHCPv6 client processes." -#: ../../configuration/service/dhcp-server.rst:424 +#: ../../configuration/service/dhcp-server.rst:483 msgid "Show logs from specific `interface` DHCP client process." msgstr "Show logs from specific `interface` DHCP client process." -#: ../../configuration/service/dhcp-server.rst:676 +#: ../../configuration/service/dhcp-server.rst:737 msgid "Show logs from specific `interface` DHCPv6 client process." msgstr "Show logs from specific `interface` DHCPv6 client process." -#: ../../configuration/pki/index.rst:311 +#: ../../configuration/pki/index.rst:342 msgid "Show only information for specified Certificate Authority." msgstr "Show only information for specified Certificate Authority." -#: ../../configuration/pki/index.rst:328 +#: ../../configuration/pki/index.rst:359 msgid "Show only information for specified certificate." msgstr "Show only information for specified certificate." -#: ../../configuration/service/dhcp-server.rst:478 -#: ../../configuration/service/dhcp-server.rst:699 +#: ../../configuration/service/dhcp-server.rst:537 +#: ../../configuration/service/dhcp-server.rst:760 msgid "Show only leases in the specified pool." msgstr "Show only leases in the specified pool." -#: ../../configuration/service/dhcp-server.rst:708 +#: ../../configuration/service/dhcp-server.rst:769 msgid "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" msgstr "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" -#: ../../configuration/service/dhcp-server.rst:496 +#: ../../configuration/service/dhcp-server.rst:555 msgid "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" msgstr "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" @@ -11703,23 +12988,23 @@ msgstr "Show routing table entry for the default route." msgid "Show specific MACsec interface information" msgstr "Show specific MACsec interface information" -#: ../../configuration/vpn/site2site_ipsec.rst:221 +#: ../../configuration/vpn/site2site_ipsec.rst:224 msgid "Show status of new setup:" msgstr "Show status of new setup:" -#: ../../configuration/service/dhcp-server.rst:447 +#: ../../configuration/service/dhcp-server.rst:506 msgid "Show statuses of all active leases:" msgstr "Show statuses of all active leases:" -#: ../../configuration/service/dhcp-server.rst:465 +#: ../../configuration/service/dhcp-server.rst:524 msgid "Show statuses of all active leases granted by local (this server) or remote (failover server):" msgstr "Show statuses of all active leases granted by local (this server) or remote (failover server):" -#: ../../configuration/service/dhcp-server.rst:432 +#: ../../configuration/service/dhcp-server.rst:491 msgid "Show the DHCP server statistics:" msgstr "Show the DHCP server statistics:" -#: ../../configuration/service/dhcp-server.rst:443 +#: ../../configuration/service/dhcp-server.rst:502 msgid "Show the DHCP server statistics for the specified pool." msgstr "Show the DHCP server statistics for the specified pool." @@ -11731,11 +13016,11 @@ msgstr "Show the console server log." msgid "Show the full config uploaded to the QAT device." msgstr "Show the full config uploaded to the QAT device." -#: ../../configuration/container/index.rst:151 +#: ../../configuration/container/index.rst:187 msgid "Show the list of all active containers." msgstr "Show the list of all active containers." -#: ../../configuration/container/index.rst:155 +#: ../../configuration/container/index.rst:191 msgid "Show the local container images." msgstr "Show the local container images." @@ -11747,7 +13032,7 @@ msgstr "Show the logs of a specific Rule-Set." msgid "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." -#: ../../configuration/firewall/ipv4.rst:1125 +#: ../../configuration/firewall/ipv4.rst:1148 msgid "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." @@ -11760,15 +13045,15 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log msgid "Show the route" msgstr "Show the route" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP" -#: ../../configuration/protocols/bfd.rst:179 +#: ../../configuration/protocols/bfd.rst:186 msgid "Showing BFD monitored static routes" msgstr "Showing BFD monitored static routes" -#: ../../configuration/service/dhcp-server.rst:684 +#: ../../configuration/service/dhcp-server.rst:745 msgid "Shows status of all assigned leases:" msgstr "Shows status of all assigned leases:" @@ -11796,7 +13081,7 @@ msgstr "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)" msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" msgstr "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" -#: ../../configuration/vpn/site2site_ipsec.rst:427 +#: ../../configuration/vpn/site2site_ipsec.rst:430 msgid "Similar combinations are applicable for the dead-peer-detection." msgstr "Similar combinations are applicable for the dead-peer-detection." @@ -11828,6 +13113,14 @@ msgstr "Since it's a HQ and branch offices setup, we will want all clients to ha msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." +#: ../../configuration/service/ipoe-server.rst:131 +#: ../../configuration/service/pppoe-server.rst:93 +#: ../../configuration/vpn/l2tp.rst:136 +#: ../../configuration/vpn/pptp.rst:76 +#: ../../configuration/vpn/sstp.rst:109 +msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" +msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" + #: ../../configuration/service/mdns.rst:13 msgid "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." @@ -11836,6 +13129,10 @@ msgstr "Since the mDNS protocol sends the AA records in the packet itself, the r msgid "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." +#: ../../configuration/service/ids.rst:98 +msgid "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" +msgstr "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" + #: ../../configuration/interfaces/vxlan.rst:157 msgid "Single VXLAN device (SVD)" msgstr "Single VXLAN device (SVD)" @@ -11857,7 +13154,7 @@ msgstr "Site-to-site mode supports x.509 but doesn't require it and can also wor msgid "Site to Site VPN" msgstr "Site to Site VPN" -#: ../../configuration/pki/index.rst:275 +#: ../../configuration/pki/index.rst:306 msgid "Size of the RSA key." msgstr "Size of the RSA key." @@ -11865,6 +13162,10 @@ msgstr "Size of the RSA key." msgid "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." msgstr "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." +#: ../../configuration/service/ids.rst:110 +msgid "So, firewall configuration needed for this setup:" +msgstr "So, firewall configuration needed for this setup:" + #: ../../configuration/nat/nat44.rst:554 msgid "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." msgstr "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." @@ -11885,7 +13186,14 @@ msgstr "Some ISPs by default only delegate a /64 prefix. To request for a specif msgid "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." msgstr "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." -#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/service/ipoe-server.rst:140 +#: ../../configuration/service/pppoe-server.rst:102 +#: ../../configuration/vpn/pptp.rst:85 +#: ../../configuration/vpn/sstp.rst:118 +msgid "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." +msgstr "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." + +#: ../../configuration/vpn/l2tp.rst:145 msgid "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." msgstr "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." @@ -11893,6 +13201,10 @@ msgstr "Some RADIUS_ severs use an access control list which allows or denies qu msgid "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." msgstr "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." +#: ../../configuration/container/index.rst:171 +msgid "Some container registries require credentials to be used." +msgstr "Some container registries require credentials to be used." + #: ../../configuration/firewall/general-legacy.rst:38 msgid "Some firewall settings are global and have an affect on the whole system." msgstr "Some firewall settings are global and have an affect on the whole system." @@ -11933,11 +13245,11 @@ msgstr "Some users tend to connect their mobile devices using WireGuard to their msgid "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." msgstr "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." -#: ../../configuration/service/dhcp-server.rst:703 +#: ../../configuration/service/dhcp-server.rst:764 msgid "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" msgstr "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" -#: ../../configuration/service/dhcp-server.rst:491 +#: ../../configuration/service/dhcp-server.rst:550 msgid "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" msgstr "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" @@ -11949,7 +13261,16 @@ msgstr "Source Address" msgid "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." msgstr "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." -#: ../../configuration/vpn/sstp.rst:268 +#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:208 +#: ../../configuration/service/pppoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:170 +#: ../../configuration/vpn/l2tp.rst:157 +#: ../../configuration/vpn/l2tp.rst:213 +#: ../../configuration/vpn/pptp.rst:97 +#: ../../configuration/vpn/pptp.rst:153 +#: ../../configuration/vpn/sstp.rst:130 +#: ../../configuration/vpn/sstp.rst:186 msgid "Source IPv4 address used in all RADIUS server queires." msgstr "Source IPv4 address used in all RADIUS server queires." @@ -11961,11 +13282,11 @@ msgstr "Source NAT rules" msgid "Source Prefix" msgstr "Source Prefix" -#: ../../configuration/system/login.rst:276 +#: ../../configuration/system/login.rst:280 msgid "Source all connections to the RADIUS servers from given VRF `<name>`." msgstr "Source all connections to the RADIUS servers from given VRF `<name>`." -#: ../../configuration/system/login.rst:345 +#: ../../configuration/system/login.rst:349 msgid "Source all connections to the TACACS servers from given VRF `<name>`." msgstr "Source all connections to the TACACS servers from given VRF `<name>`." @@ -11973,7 +13294,7 @@ msgstr "Source all connections to the TACACS servers from given VRF `<name>`." msgid "Source protocol to match." msgstr "Source protocol to match." -#: ../../configuration/vpn/ipsec.rst:225 +#: ../../configuration/vpn/ipsec.rst:229 msgid "Source tunnel from dummy interface" msgstr "Source tunnel from dummy interface" @@ -12001,15 +13322,48 @@ msgstr "Spatial Multiplexing Power Save (SMPS) settings" msgid "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." msgstr "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." -#: ../../configuration/vpn/sstp.rst:238 +#: ../../configuration/service/ipoe-server.rst:178 +#: ../../configuration/service/pppoe-server.rst:140 +#: ../../configuration/vpn/l2tp.rst:183 +#: ../../configuration/vpn/pptp.rst:123 +#: ../../configuration/vpn/sstp.rst:156 msgid "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" msgstr "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" -#: ../../configuration/vpn/sstp.rst:194 +#: ../../configuration/service/pppoe-server.rst:470 +#: ../../configuration/vpn/l2tp.rst:424 +#: ../../configuration/vpn/pptp.rst:348 +#: ../../configuration/vpn/sstp.rst:382 +msgid "Specifies IPv4 negotiation preference." +msgstr "Specifies IPv4 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:345 +#: ../../configuration/vpn/l2tp.rst:289 +#: ../../configuration/vpn/pptp.rst:213 +#: ../../configuration/vpn/sstp.rst:247 +msgid "Specifies IPv6 negotiation preference." +msgstr "Specifies IPv6 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:552 +msgid "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" +msgstr "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" + +#: ../../configuration/service/pppoe-server.rst:502 +#: ../../configuration/vpn/l2tp.rst:456 +#: ../../configuration/vpn/pptp.rst:380 +#: ../../configuration/vpn/sstp.rst:414 +msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." +msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." + +#: ../../configuration/vpn/sstp.rst:200 msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." -#: ../../configuration/vrf/index.rst:477 +#: ../../configuration/service/ipoe-server.rst:81 +msgid "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." +msgstr "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." + +#: ../../configuration/vrf/index.rst:496 msgid "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." msgstr "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." @@ -12017,6 +13371,13 @@ msgstr "Specifies an optional route-map to be applied to routes imported or expo msgid "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." msgstr "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." +#: ../../configuration/service/pppoe-server.rst:388 +#: ../../configuration/vpn/l2tp.rst:332 +#: ../../configuration/vpn/pptp.rst:256 +#: ../../configuration/vpn/sstp.rst:290 +msgid "Specifies fixed or random interface identifier for IPv6. By default is fixed." +msgstr "Specifies fixed or random interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:173 msgid "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." msgstr "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." @@ -12025,15 +13386,36 @@ msgstr "Specifies how long squid assumes an externally validated username:passwo msgid "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." msgstr "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." +#: ../../configuration/service/pppoe-server.rst:462 +#: ../../configuration/vpn/l2tp.rst:416 +#: ../../configuration/vpn/pptp.rst:340 +#: ../../configuration/vpn/sstp.rst:374 +msgid "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." +msgstr "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." + #: ../../configuration/interfaces/bonding.rst:40 msgid "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" msgstr "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" +#: ../../configuration/service/pppoe-server.rst:396 +#: ../../configuration/vpn/l2tp.rst:340 +#: ../../configuration/vpn/pptp.rst:264 +#: ../../configuration/vpn/sstp.rst:298 +msgid "Specifies peer interface identifier for IPv6. By default is fixed." +msgstr "Specifies peer interface identifier for IPv6. By default is fixed." + #: ../../configuration/service/webproxy.rst:81 msgid "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." msgstr "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." -#: ../../configuration/vpn/sstp.rst:110 +#: ../../configuration/service/ipoe-server.rst:348 +msgid "Specifies relay agent IP addre" +msgstr "Specifies relay agent IP addre" + +#: ../../configuration/service/pppoe-server.rst:70 +#: ../../configuration/vpn/l2tp.rst:52 +#: ../../configuration/vpn/pptp.rst:54 +#: ../../configuration/vpn/sstp.rst:79 msgid "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." msgstr "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." @@ -12057,7 +13439,7 @@ msgstr "Specifies the available :abbr:`MAC (Message Authentication Code)` algori msgid "Specifies the base DN under which the users are located." msgstr "Specifies the base DN under which the users are located." -#: ../../configuration/service/dhcp-server.rst:239 +#: ../../configuration/service/dhcp-server.rst:295 msgid "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." msgstr "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." @@ -12094,22 +13476,33 @@ msgstr "Specifies the port `<port>` that the SSTP port will listen on (default 4 msgid "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." msgstr "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." -#: ../../configuration/vrf/index.rst:452 +#: ../../configuration/vrf/index.rst:471 msgid "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." msgstr "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." -#: ../../configuration/vrf/index.rst:445 +#: ../../configuration/vrf/index.rst:464 msgid "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." msgstr "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." -#: ../../configuration/vpn/sstp.rst:281 +#: ../../configuration/service/ipoe-server.rst:224 +#: ../../configuration/service/pppoe-server.rst:186 +#: ../../configuration/vpn/l2tp.rst:229 +#: ../../configuration/vpn/pptp.rst:169 +#: ../../configuration/vpn/sstp.rst:202 msgid "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." msgstr "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." -#: ../../configuration/vpn/sstp.rst:188 +#: ../../configuration/vpn/sstp.rst:194 msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." +#: ../../configuration/service/pppoe-server.rst:490 +#: ../../configuration/vpn/l2tp.rst:444 +#: ../../configuration/vpn/pptp.rst:368 +#: ../../configuration/vpn/sstp.rst:402 +msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." +msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." + #: ../../configuration/interfaces/vxlan.rst:77 msgid "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." msgstr "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." @@ -12122,28 +13515,47 @@ msgstr "Specifies whether the VXLAN device is capable of vni filtering." msgid "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." msgstr "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." -#: ../../configuration/vpn/sstp.rst:272 +#: ../../configuration/service/ipoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:217 +#: ../../configuration/vpn/pptp.rst:157 +#: ../../configuration/vpn/sstp.rst:190 msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." +#: ../../configuration/service/pppoe-server.rst:174 +msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." +msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." + +#: ../../configuration/service/ipoe-server.rst:344 +msgid "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." +msgstr "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." + #: ../../configuration/service/ssh.rst:45 msgid "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." msgstr "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." -#: ../../configuration/firewall/ipv4.rst:401 +#: ../../configuration/service/ids.rst:51 +msgid "Specify IPv4 and/or IPv6 networks that should be protected/monitored." +msgstr "Specify IPv4 and/or IPv6 networks that should be protected/monitored." + +#: ../../configuration/service/ids.rst:38 +msgid "Specify IPv4 and/or IPv6 networks which are going to be excluded." +msgstr "Specify IPv4 and/or IPv6 networks which are going to be excluded." + +#: ../../configuration/firewall/ipv4.rst:424 #: ../../configuration/firewall/ipv6.rst:408 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." msgstr "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." -#: ../../configuration/service/dhcp-server.rst:550 +#: ../../configuration/service/dhcp-server.rst:609 msgid "Specify a NIS+ server address for DHCPv6 clients." msgstr "Specify a NIS+ server address for DHCPv6 clients." -#: ../../configuration/service/dhcp-server.rst:545 +#: ../../configuration/service/dhcp-server.rst:604 msgid "Specify a NIS server address for DHCPv6 clients." msgstr "Specify a NIS server address for DHCPv6 clients." -#: ../../configuration/service/dhcp-server.rst:555 +#: ../../configuration/service/dhcp-server.rst:614 msgid "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." msgstr "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." @@ -12167,6 +13579,14 @@ msgstr "Specify an alternate AS for this BGP process when interacting with the s msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." msgstr "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." +#: ../../configuration/service/dns.rst:348 +msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." +msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." + +#: ../../configuration/service/ipoe-server.rst:339 +msgid "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" +msgstr "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" + #: ../../configuration/service/ntp.rst:84 #: ../../configuration/service/ssh.rst:110 #: ../../configuration/system/syslog.rst:79 @@ -12181,11 +13601,11 @@ msgstr "Specify nexthop on the path to the destination, ``ipv4-address`` can be msgid "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." msgstr "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." -#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:249 msgid "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." msgstr "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." -#: ../../configuration/system/login.rst:314 +#: ../../configuration/system/login.rst:318 msgid "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." msgstr "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." @@ -12205,7 +13625,7 @@ msgstr "Specify the identifier value of the site-level aggregator (SLA) on the i msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" msgstr "Specify the minimum required TLS version 1.2 or 1.3" @@ -12225,7 +13645,7 @@ msgstr "Specify the systems `<timezone>` as the Region/Location that best define msgid "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" msgstr "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" -#: ../../configuration/service/dns.rst:269 +#: ../../configuration/service/dns.rst:283 msgid "Specify timeout / update interval to check if IP address changed." msgstr "Specify timeout / update interval to check if IP address changed." @@ -12233,6 +13653,10 @@ msgstr "Specify timeout / update interval to check if IP address changed." msgid "Specify timeout interval for keepalive message in seconds." msgstr "Specify timeout interval for keepalive message in seconds." +#: ../../configuration/service/ipoe-server.rst:97 +msgid "Specify where interface is shared by multiple users or it is vlan-per-user." +msgstr "Specify where interface is shared by multiple users or it is vlan-per-user." + #: ../../configuration/interfaces/vxlan.rst:191 msgid "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." msgstr "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." @@ -12250,6 +13674,10 @@ msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." #: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." + +#: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." msgstr "Start Webserver in given VRF." @@ -12285,7 +13713,7 @@ msgstr "Starting with VyOS 1.2 a :abbr:`mDNS (Multicast DNS)` repeater functiona msgid "Static" msgstr "Static" -#: ../../configuration/service/dhcp-server.rst:189 +#: ../../configuration/service/dhcp-server.rst:245 msgid "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." msgstr "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." @@ -12313,13 +13741,13 @@ msgstr "Static Routing or other dynamic routing protocols can be used over the v msgid "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." msgstr "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." -#: ../../configuration/service/dhcp-server.rst:174 -#: ../../configuration/service/dhcp-server.rst:621 +#: ../../configuration/service/dhcp-server.rst:224 +#: ../../configuration/service/dhcp-server.rst:682 msgid "Static mappings" msgstr "Static mappings" -#: ../../configuration/service/dhcp-server.rst:460 -#: ../../configuration/service/dhcp-server.rst:694 +#: ../../configuration/service/dhcp-server.rst:519 +#: ../../configuration/service/dhcp-server.rst:755 msgid "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." msgstr "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." @@ -12384,7 +13812,7 @@ msgstr "Supported versions of RIP are:" msgid "Supports as HELPER for configured grace period." msgstr "Supports as HELPER for configured grace period." -#: ../../configuration/vpn/ipsec.rst:178 +#: ../../configuration/vpn/ipsec.rst:182 msgid "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" msgstr "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" @@ -12404,17 +13832,17 @@ msgstr "Synamic instructs to forward to all peers which we have a direct connect msgid "Sync groups" msgstr "Sync groups" -#: ../../configuration/firewall/ipv4.rst:911 +#: ../../configuration/firewall/ipv4.rst:934 #: ../../configuration/firewall/ipv6.rst:920 msgid "Synproxy" msgstr "Synproxy" -#: ../../configuration/firewall/ipv4.rst:912 +#: ../../configuration/firewall/ipv4.rst:935 #: ../../configuration/firewall/ipv6.rst:921 msgid "Synproxy connections" msgstr "Synproxy connections" -#: ../../configuration/firewall/ipv4.rst:929 +#: ../../configuration/firewall/ipv4.rst:952 #: ../../configuration/firewall/ipv6.rst:938 msgid "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" msgstr "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" @@ -12484,23 +13912,23 @@ msgstr "System identifier: ``1921.6800.1002`` - for system idetifiers we recomme msgid "System is unusable - a panic condition" msgstr "System is unusable - a panic condition" -#: ../../configuration/system/login.rst:299 +#: ../../configuration/system/login.rst:303 msgid "TACACS+" msgstr "TACACS+" -#: ../../configuration/system/login.rst:418 +#: ../../configuration/system/login.rst:422 msgid "TACACS Example" msgstr "TACACS Example" -#: ../../configuration/system/login.rst:305 +#: ../../configuration/system/login.rst:309 msgid "TACACS is defined in :rfc:`8907`." msgstr "TACACS is defined in :rfc:`8907`." -#: ../../configuration/system/login.rst:335 +#: ../../configuration/system/login.rst:339 msgid "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." msgstr "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." -#: ../../configuration/protocols/static.rst:140 +#: ../../configuration/protocols/static.rst:173 #: ../../configuration/system/flow-accounting.rst:83 msgid "TBD" msgstr "TBD" @@ -12553,19 +13981,23 @@ msgstr "Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for a msgid "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" msgstr "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" -#: ../../configuration/vpn/sstp.rst:227 +#: ../../configuration/service/ipoe-server.rst:170 +#: ../../configuration/service/pppoe-server.rst:132 +#: ../../configuration/vpn/l2tp.rst:175 +#: ../../configuration/vpn/pptp.rst:115 +#: ../../configuration/vpn/sstp.rst:148 msgid "Temporary disable this RADIUS server." msgstr "Temporary disable this RADIUS server." -#: ../../configuration/system/login.rst:258 +#: ../../configuration/system/login.rst:262 msgid "Temporary disable this RADIUS server. It won't be queried." msgstr "Temporary disable this RADIUS server. It won't be queried." -#: ../../configuration/system/login.rst:327 +#: ../../configuration/system/login.rst:331 msgid "Temporary disable this TACACS server. It won't be queried." msgstr "Temporary disable this TACACS server. It won't be queried." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" msgstr "Terminate SSL" @@ -12589,7 +14021,7 @@ msgstr "Test disconnecting given connection-oriented interface. `<interface>` ca msgid "Test from the IPv6 only client:" msgstr "Test from the IPv6 only client:" -#: ../../configuration/vpn/sstp.rst:305 +#: ../../configuration/vpn/sstp.rst:374 msgid "Testing SSTP" msgstr "Testing SSTP" @@ -12601,7 +14033,7 @@ msgstr "Testing and Validation" msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." msgstr "That is how it is possible to do the so-called \"ingress shaping\"." @@ -12617,11 +14049,11 @@ msgstr "The ARP monitor works by periodically checking the slave devices to dete msgid "The ASP has documented their IPSec requirements:" msgstr "The ASP has documented their IPSec requirements:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." msgstr "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." -#: ../../configuration/vrf/index.rst:94 +#: ../../configuration/vrf/index.rst:113 msgid "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." msgstr "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." @@ -12645,7 +14077,7 @@ msgstr "The DN and password to bind as while performing searches. As the passwor msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." msgstr "The HTTP service listen on TCP port 80." @@ -12661,7 +14093,7 @@ msgstr "The Intel AX200 card does not work out of the box in AP mode, see https: msgid "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." msgstr "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." -#: ../../configuration/vpn/pptp.rst:6 +#: ../../configuration/vpn/pptp.rst:7 msgid "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." msgstr "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." @@ -12697,23 +14129,27 @@ msgstr "The UDP port number used by your apllication. It is mandatory for this k msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." msgstr "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." + #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." msgstr "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." -#: ../../configuration/service/dns.rst:173 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" msgstr "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" -#: ../../configuration/service/dns.rst:171 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" msgstr "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" -#: ../../configuration/service/dns.rst:175 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." msgstr "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." -#: ../../configuration/pki/index.rst:254 +#: ../../configuration/pki/index.rst:285 msgid "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." msgstr "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." @@ -12758,10 +14194,26 @@ msgstr "The ``address`` can be configured either on the VRRP interface or on not msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" + #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." @@ -12770,11 +14222,15 @@ msgstr "The ``https`` service listens on port 443 with backend `bk-default` to h msgid "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." msgstr "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." -#: ../../configuration/vpn/l2tp.rst:176 +#: ../../configuration/service/ipoe-server.rst:154 +#: ../../configuration/service/pppoe-server.rst:116 +#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/vpn/pptp.rst:99 +#: ../../configuration/vpn/sstp.rst:132 msgid "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." msgstr "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." -#: ../../configuration/interfaces/bridge.rst:270 +#: ../../configuration/interfaces/bridge.rst:279 msgid "The `show bridge` operational command can be used to display configured bridges:" msgstr "The `show bridge` operational command can be used to display configured bridges:" @@ -12787,11 +14243,11 @@ msgstr "The above directory and default-config must be a child directory of /con msgid "The action can be :" msgstr "The action can be :" -#: ../../configuration/pki/index.rst:271 +#: ../../configuration/pki/index.rst:302 msgid "The address the server listens to during http-01 challenge" msgstr "The address the server listens to during http-01 challenge" -#: ../../configuration/protocols/bgp.rst:775 +#: ../../configuration/protocols/bgp.rst:797 msgid "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." msgstr "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." @@ -12803,7 +14259,7 @@ msgstr "The allocated address block is 100.64.0.0/10." msgid "The amount of Duplicate Address Detection probes to send." msgstr "The amount of Duplicate Address Detection probes to send." -#: ../../configuration/protocols/bgp.rst:835 +#: ../../configuration/protocols/bgp.rst:857 msgid "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." msgstr "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." @@ -12819,15 +14275,19 @@ msgstr "The below referenced IP address `192.0.2.1` is used as example address r msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" msgstr "The case of ingress shaping" -#: ../../configuration/service/pppoe-server.rst:385 +#: ../../configuration/service/pppoe-server.rst:644 +msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." +msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." + +#: ../../configuration/service/pppoe-server.rst:644 msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." -#: ../../configuration/service/ipoe-server.rst:90 +#: ../../configuration/service/ipoe-server.rst:91 msgid "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." msgstr "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." @@ -12839,7 +14299,7 @@ msgstr "The command :opcmd:`show interfaces wireguard wg01 public-key` will then msgid "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." msgstr "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." -#: ../../configuration/service/pppoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:305 msgid "The command below enables it, assuming the RADIUS connection has been setup and is working." msgstr "The command below enables it, assuming the RADIUS connection has been setup and is working." @@ -12855,9 +14315,9 @@ msgstr "The command pon TESTUNNEL establishes the PPTP tunnel to the remote syst msgid "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" msgstr "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" -#: ../../configuration/service/dhcp-server.rst:210 -#: ../../configuration/service/dhcp-server.rst:601 -#: ../../configuration/service/dhcp-server.rst:644 +#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:661 +#: ../../configuration/service/dhcp-server.rst:705 msgid "The configuration will look as follows:" msgstr "The configuration will look as follows:" @@ -12881,6 +14341,10 @@ msgstr "The connection tracking table contains one entry for each connection bei msgid "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" msgstr "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" +#: ../../configuration/service/pppoe-server.rst:299 +msgid "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" +msgstr "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" + #: ../../configuration/service/ntp.rst:29 msgid "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." msgstr "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." @@ -12905,7 +14369,11 @@ msgstr "The default hostname used is `vyos`." msgid "The default is 1492." msgstr "The default is 1492." -#: ../../configuration/service/dhcp-server.rst:526 +#: ../../configuration/interfaces/bridge.rst:140 +msgid "The default is ``802.1q``." +msgstr "The default is ``802.1q``." + +#: ../../configuration/service/dhcp-server.rst:585 msgid "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." msgstr "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." @@ -12925,7 +14393,7 @@ msgstr "The default value corresponds to 64." msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." msgstr "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." msgstr "The default value is 300 seconds." @@ -12937,7 +14405,15 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/service/dhcp-server.rst:99 +#: ../../configuration/protocols/rpki.rst:122 +msgid "The default value is 600 seconds." +msgstr "The default value is 600 seconds." + +#: ../../configuration/protocols/rpki.rst:115 +msgid "The default value is 7200 seconds." +msgstr "The default value is 7200 seconds." + +#: ../../configuration/service/dhcp-server.rst:115 msgid "The default value is 86400 seconds which corresponds to one day." msgstr "The default value is 86400 seconds which corresponds to one day." @@ -12957,17 +14433,21 @@ msgstr "The destination port used for creating a VXLAN interface in Linux defaul msgid "The device can only receive packets with VNIs configured in the VNI filtering table." msgstr "The device can only receive packets with VNIs configured in the VNI filtering table." -#: ../../configuration/service/dhcp-server.rst:165 +#: ../../configuration/service/dhcp-server.rst:215 +msgid "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." +msgstr "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." + +#: ../../configuration/service/dhcp-server.rst:199 msgid "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." msgstr "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." #: ../../configuration/service/dhcp-server.rst:31 -#: ../../configuration/service/dhcp-server.rst:124 +#: ../../configuration/service/dhcp-server.rst:140 msgid "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." msgstr "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." #: ../../configuration/service/dhcp-server.rst:40 -#: ../../configuration/service/dhcp-server.rst:131 +#: ../../configuration/service/dhcp-server.rst:147 msgid "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." msgstr "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." @@ -12987,15 +14467,19 @@ msgstr "The embedded Squid proxy can use LDAP to authenticate users against a co msgid "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." msgstr "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." -#: ../../configuration/service/pppoe-server.rst:369 +#: ../../configuration/service/pppoe-server.rst:627 +msgid "The example below covers a dual-stack configuration." +msgstr "The example below covers a dual-stack configuration." + +#: ../../configuration/service/pppoe-server.rst:627 msgid "The example below covers a dual-stack configuration via pppoe-server." msgstr "The example below covers a dual-stack configuration via pppoe-server." -#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/service/pppoe-server.rst:606 msgid "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." msgstr "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." -#: ../../configuration/service/ipoe-server.rst:35 +#: ../../configuration/service/ipoe-server.rst:34 msgid "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." msgstr "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." @@ -13023,7 +14507,7 @@ msgstr "The first IP in the container network is reserved by the engine and cann msgid "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." msgstr "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." -#: ../../configuration/vpn/ipsec.rst:174 +#: ../../configuration/vpn/ipsec.rst:178 msgid "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." msgstr "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." @@ -13039,14 +14523,18 @@ msgstr "The first ip address is the RP's address and the second value is the mat msgid "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." msgstr "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." -#: ../../configuration/vpn/sstp.rst:311 +#: ../../configuration/vpn/sstp.rst:484 msgid "The following PPP configuration tests MSCHAP-v2:" msgstr "The following PPP configuration tests MSCHAP-v2:" -#: ../../configuration/system/login.rst:143 +#: ../../configuration/system/login.rst:147 msgid "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" msgstr "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" +#: ../../configuration/protocols/bgp.rst:664 +msgid "The following command uses the explicit-null label value for all the BGP instances." +msgstr "The following command uses the explicit-null label value for all the BGP instances." + #: ../../configuration/interfaces/openvpn.rst:708 msgid "The following commands let you check tunnel status." msgstr "The following commands let you check tunnel status." @@ -13059,11 +14547,11 @@ msgstr "The following commands let you reset OpenVPN." msgid "The following commands translate to \"--net host\" when the container is created" msgstr "The following commands translate to \"--net host\" when the container is created" -#: ../../configuration/vrf/index.rst:101 +#: ../../configuration/vrf/index.rst:120 msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." @@ -13079,10 +14567,22 @@ msgstr "The following configuration on VyOS applies to all following 3rd party v msgid "The following configuration reverse-proxy terminate SSL." msgstr "The following configuration reverse-proxy terminate SSL." +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." + #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." msgstr "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." +#: ../../configuration/interfaces/pppoe.rst:383 +msgid "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." +msgstr "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." + #: ../../configuration/policy/examples.rst:155 msgid "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." msgstr "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." @@ -13095,7 +14595,7 @@ msgstr "The following example creates a WAP. When configuring multiple WAP inter msgid "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." msgstr "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." -#: ../../configuration/vrf/index.rst:237 +#: ../../configuration/vrf/index.rst:256 msgid "The following example topology was built using EVE-NG." msgstr "The following example topology was built using EVE-NG." @@ -13140,7 +14640,7 @@ msgstr "The forwarding delay time is the time spent in each of the listening and msgid "The generated configuration will look like:" msgstr "The generated configuration will look like:" -#: ../../configuration/pki/index.rst:107 +#: ../../configuration/pki/index.rst:109 msgid "The generated parameters are then output to the console." msgstr "The generated parameters are then output to the console." @@ -13168,7 +14668,7 @@ msgstr "The hostname can be up to 63 characters. A hostname must start and end w msgid "The hostname or IP address of the master" msgstr "The hostname or IP address of the master" -#: ../../configuration/service/dhcp-server.rst:632 +#: ../../configuration/service/dhcp-server.rst:693 msgid "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." msgstr "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." @@ -13212,7 +14712,7 @@ msgstr "The legacy and zone-based firewall configuration options is not longer s msgid "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." msgstr "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." -#: ../../configuration/policy/route-map.rst:255 +#: ../../configuration/policy/route-map.rst:258 msgid "The link bandwidth extended community is encoded as non-transitive" msgstr "The link bandwidth extended community is encoded as non-transitive" @@ -13240,6 +14740,10 @@ msgstr "The main points regarding this packet flow and terminology used in VyOS msgid "The main structure VyOS firewall cli is shown next:" msgstr "The main structure VyOS firewall cli is shown next:" +#: ../../configuration/firewall/index.rst:92 +msgid "The main structure of the VyOS firewall CLI is shown next:" +msgstr "The main structure of the VyOS firewall CLI is shown next:" + #: ../../configuration/interfaces/bonding.rst:271 msgid "The maximum number of targets that can be specified is 16. The default value is no IP address." msgstr "The maximum number of targets that can be specified is 16. The default value is no IP address." @@ -13248,7 +14752,7 @@ msgstr "The maximum number of targets that can be specified is 16. The default v msgid "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." msgstr "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." -#: ../../configuration/interfaces/bridge.rst:230 +#: ../../configuration/interfaces/bridge.rst:239 msgid "The member interface `eth1` is a trunk that allows VLAN 10 to pass" msgstr "The member interface `eth1` is a trunk that allows VLAN 10 to pass" @@ -13268,15 +14772,19 @@ msgstr "The most visible application of the protocol is for access to shell acco msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." msgstr "The name of the service can be different, in this example it is only for convenience." +#: ../../configuration/service/dns.rst:171 +msgid "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." +msgstr "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." + #: ../../configuration/service/dhcp-server.rst:13 msgid "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." msgstr "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." -#: ../../configuration/service/conntrack-sync.rst:188 +#: ../../configuration/service/conntrack-sync.rst:197 msgid "The next example is a simple configuration of conntrack-sync." msgstr "The next example is a simple configuration of conntrack-sync." @@ -13324,7 +14832,7 @@ msgstr "The outgoing interface to perform the translation on" msgid "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." msgstr "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." -#: ../../configuration/vpn/ipsec.rst:235 +#: ../../configuration/vpn/ipsec.rst:239 msgid "The peer names RIGHT and LEFT are used as informational text." msgstr "The peer names RIGHT and LEFT are used as informational text." @@ -13332,7 +14840,7 @@ msgstr "The peer names RIGHT and LEFT are used as informational text." msgid "The peer with lower priority will become the key server and start distributing SAKs." msgstr "The peer with lower priority will become the key server and start distributing SAKs." -#: ../../configuration/vrf/index.rst:181 +#: ../../configuration/vrf/index.rst:200 msgid "The ping command is used to test whether a network host is reachable or not." msgstr "The ping command is used to test whether a network host is reachable or not." @@ -13344,19 +14852,19 @@ msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This m msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." -#: ../../configuration/service/dhcp-server.rst:375 +#: ../../configuration/service/dhcp-server.rst:432 msgid "The primary DHCP server uses address `192.168.189.252`" msgstr "The primary DHCP server uses address `192.168.189.252`" -#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:208 msgid "The primary and secondary statements determines whether the server is primary or secondary." msgstr "The primary and secondary statements determines whether the server is primary or secondary." @@ -13368,11 +14876,11 @@ msgstr "The primary option is only valid for active-backup, transmit-load-balanc msgid "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." msgstr "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." -#: ../../configuration/service/dhcp-server.rst:539 +#: ../../configuration/service/dhcp-server.rst:598 msgid "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" msgstr "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" -#: ../../configuration/vrf/index.rst:222 +#: ../../configuration/vrf/index.rst:241 msgid "The prompt is adjusted to reflect this change in both config and op-mode." msgstr "The prompt is adjusted to reflect this change in both config and op-mode." @@ -13400,7 +14908,7 @@ msgstr "The public IP address of the local side of the VPN will be 198.51.100.10 msgid "The public IP address of the remote side of the VPN will be 203.0.113.11." msgstr "The public IP address of the remote side of the VPN will be 203.0.113.11." -#: ../../configuration/service/ipoe-server.rst:130 +#: ../../configuration/service/ipoe-server.rst:131 #: ../../configuration/vpn/l2tp.rst:120 msgid "The rate-limit is set in kbit/sec." msgstr "The rate-limit is set in kbit/sec." @@ -13421,6 +14929,10 @@ msgstr "The remote site will have a subnet of 10.1.0.0/16." msgid "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." msgstr "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." +#: ../../configuration/service/dns.rst:161 +msgid "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." +msgstr "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." + #: ../../configuration/interfaces/openvpn.rst:458 msgid "The required config file may look like this:" msgstr "The required config file may look like this:" @@ -13465,7 +14977,7 @@ msgstr "The sFlow accounting based on hsflowd https://sflow.net/" msgid "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." msgstr "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." -#: ../../configuration/vpn/ipsec.rst:227 +#: ../../configuration/vpn/ipsec.rst:231 msgid "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." msgstr "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." @@ -13473,7 +14985,7 @@ msgstr "The scheme above doesn't work when one of the routers has a dynamic exte msgid "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." msgstr "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." -#: ../../configuration/service/dhcp-server.rst:376 +#: ../../configuration/service/dhcp-server.rst:433 msgid "The secondary DHCP server uses address `192.168.189.253`" msgstr "The secondary DHCP server uses address `192.168.189.253`" @@ -13533,11 +15045,14 @@ msgstr "The type can be the following: asbr-summary, external, network, nssa-ext msgid "The ultimate goal of classifying traffic is to give each class a different treatment." msgstr "The ultimate goal of classifying traffic is to give each class a different treatment." -#: ../../configuration/service/ipoe-server.rst:18 +#: ../../configuration/service/ipoe-server.rst:16 msgid "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." msgstr "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." -#: ../../configuration/vpn/l2tp.rst:221 +#: ../../configuration/service/pppoe-server.rst:222 +#: ../../configuration/vpn/l2tp.rst:265 +#: ../../configuration/vpn/pptp.rst:205 +#: ../../configuration/vpn/sstp.rst:238 msgid "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." msgstr "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." @@ -13549,7 +15064,11 @@ msgstr "The vendor-class-id option can be used to request a specific class of ve msgid "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." msgstr "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." -#: ../../configuration/system/login.rst:138 +#: ../../configuration/service/router-advert.rst:86 +msgid "The well known NAT64 prefix is ``64:ff9b::/96``" +msgstr "The well known NAT64 prefix is ``64:ff9b::/96``" + +#: ../../configuration/system/login.rst:142 msgid "The window size must be between 1 and 21." msgstr "The window size must be between 1 and 21." @@ -13557,6 +15076,10 @@ msgstr "The window size must be between 1 and 21." msgid "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." msgstr "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." +#: ../../configuration/service/ids.rst:125 +msgid "Then, FastNetMon configuration:" +msgstr "Then, FastNetMon configuration:" + #: ../../configuration/nat/nat44.rst:621 msgid "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." msgstr "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." @@ -13596,7 +15119,7 @@ msgstr "There are a lot of matching criteria against which the packet can be tes msgid "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." msgstr "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." -#: ../../configuration/system/ipv6.rst:92 +#: ../../configuration/system/ipv6.rst:105 msgid "There are different parameters for getting prefix-list information:" msgstr "There are different parameters for getting prefix-list information:" @@ -13612,7 +15135,7 @@ msgstr "There are many parameters you will be able to use in order to match the msgid "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" msgstr "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" -#: ../../configuration/service/ipoe-server.rst:153 +#: ../../configuration/service/ipoe-server.rst:154 msgid "There are rate-limited and non rate-limited users (MACs)" msgstr "There are rate-limited and non rate-limited users (MACs)" @@ -13628,7 +15151,7 @@ msgstr "There are three modes of operation for a wireless interface:" msgid "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" msgstr "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" -#: ../../configuration/protocols/bgp.rst:896 +#: ../../configuration/protocols/bgp.rst:918 msgid "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" msgstr "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" @@ -13757,7 +15280,7 @@ msgstr "This command allows peerings between directly connected eBGP peers using msgid "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." msgstr "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." -#: ../../configuration/protocols/bgp.rst:812 +#: ../../configuration/protocols/bgp.rst:834 msgid "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." msgstr "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." @@ -13814,19 +15337,19 @@ msgstr "This command allows you to select a specific access concentrator when yo msgid "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." msgstr "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." -#: ../../configuration/protocols/bgp.rst:867 +#: ../../configuration/protocols/bgp.rst:889 msgid "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." msgstr "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." -#: ../../configuration/protocols/bgp.rst:843 +#: ../../configuration/protocols/bgp.rst:865 msgid "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." msgstr "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." -#: ../../configuration/protocols/bgp.rst:851 +#: ../../configuration/protocols/bgp.rst:873 msgid "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." msgstr "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." -#: ../../configuration/protocols/bgp.rst:859 +#: ../../configuration/protocols/bgp.rst:881 msgid "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." msgstr "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." @@ -13854,7 +15377,7 @@ msgstr "This command can be used to filter the RIP path using prefix lists. :cfg msgid "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." msgstr "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." -#: ../../configuration/protocols/bgp.rst:652 +#: ../../configuration/protocols/bgp.rst:674 msgid "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." msgstr "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." @@ -13878,7 +15401,7 @@ msgstr "This command change distance value of OSPFv3 globally. The distance rang msgid "This command change the distance value of RIP. The distance range is 1 to 255." msgstr "This command change the distance value of RIP. The distance range is 1 to 255." -#: ../../configuration/protocols/bgp.rst:638 +#: ../../configuration/protocols/bgp.rst:650 msgid "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." msgstr "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." @@ -13954,23 +15477,23 @@ msgstr "This command defines matching parameters for access list rule. Matching msgid "This command defines the IS-IS router behavior:" msgstr "This command defines the IS-IS router behavior:" -#: ../../configuration/protocols/bgp.rst:720 +#: ../../configuration/protocols/bgp.rst:742 msgid "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." msgstr "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." -#: ../../configuration/protocols/bgp.rst:726 +#: ../../configuration/protocols/bgp.rst:748 msgid "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." msgstr "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." -#: ../../configuration/protocols/bgp.rst:713 +#: ../../configuration/protocols/bgp.rst:735 msgid "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." msgstr "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." -#: ../../configuration/protocols/bgp.rst:595 +#: ../../configuration/protocols/bgp.rst:601 msgid "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." msgstr "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." -#: ../../configuration/protocols/bgp.rst:732 +#: ../../configuration/protocols/bgp.rst:754 msgid "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." msgstr "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." @@ -13997,7 +15520,7 @@ msgstr "This command disables check of the MTU value in the OSPF DBD packets. Th msgid "This command disables it." msgstr "This command disables it." -#: ../../configuration/protocols/bgp.rst:607 +#: ../../configuration/protocols/bgp.rst:619 msgid "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." msgstr "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." @@ -14009,23 +15532,23 @@ msgstr "This command disables split-horizon on the interface. By default, VyOS d msgid "This command disables the load sharing across multiple LFA backups." msgstr "This command disables the load sharing across multiple LFA backups." -#: ../../configuration/protocols/bgp.rst:1009 +#: ../../configuration/protocols/bgp.rst:1031 msgid "This command displays BGP dampened routes." msgstr "This command displays BGP dampened routes." -#: ../../configuration/protocols/bgp.rst:1032 +#: ../../configuration/protocols/bgp.rst:1054 msgid "This command displays BGP received-routes that are accepted after filtering." msgstr "This command displays BGP received-routes that are accepted after filtering." -#: ../../configuration/protocols/bgp.rst:1022 +#: ../../configuration/protocols/bgp.rst:1044 msgid "This command displays BGP routes advertised to a neighbor." msgstr "This command displays BGP routes advertised to a neighbor." -#: ../../configuration/protocols/bgp.rst:1017 +#: ../../configuration/protocols/bgp.rst:1039 msgid "This command displays BGP routes allowed by the specified AS Path access list." msgstr "This command displays BGP routes allowed by the specified AS Path access list." -#: ../../configuration/protocols/bgp.rst:1026 +#: ../../configuration/protocols/bgp.rst:1048 msgid "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." msgstr "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." @@ -14052,11 +15575,11 @@ msgstr "This command displays a summary table with a database contents (LSA)." msgid "This command displays a table of paths to area boundary and autonomous system boundary routers." msgstr "This command displays a table of paths to area boundary and autonomous system boundary routers." -#: ../../configuration/protocols/bgp.rst:957 +#: ../../configuration/protocols/bgp.rst:979 msgid "This command displays all entries in BGP routing table." msgstr "This command displays all entries in BGP routing table." -#: ../../configuration/protocols/bgp.rst:1036 +#: ../../configuration/protocols/bgp.rst:1058 msgid "This command displays dampened routes received from BGP neighbor." msgstr "This command displays dampened routes received from BGP neighbor." @@ -14064,27 +15587,27 @@ msgstr "This command displays dampened routes received from BGP neighbor." msgid "This command displays external information redistributed into OSPFv3" msgstr "This command displays external information redistributed into OSPFv3" -#: ../../configuration/protocols/bgp.rst:1040 +#: ../../configuration/protocols/bgp.rst:1062 msgid "This command displays information about BGP routes whose AS path matches the specified regular expression." msgstr "This command displays information about BGP routes whose AS path matches the specified regular expression." -#: ../../configuration/protocols/bgp.rst:1013 +#: ../../configuration/protocols/bgp.rst:1035 msgid "This command displays information about flapping BGP routes." msgstr "This command displays information about flapping BGP routes." -#: ../../configuration/protocols/bgp.rst:977 +#: ../../configuration/protocols/bgp.rst:999 msgid "This command displays information about the particular entry in the BGP routing table." msgstr "This command displays information about the particular entry in the BGP routing table." -#: ../../configuration/protocols/bgp.rst:1004 +#: ../../configuration/protocols/bgp.rst:1026 msgid "This command displays routes that are permitted by the BGP community list." msgstr "This command displays routes that are permitted by the BGP community list." -#: ../../configuration/protocols/bgp.rst:997 +#: ../../configuration/protocols/bgp.rst:1019 msgid "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." msgstr "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." -#: ../../configuration/protocols/bgp.rst:993 +#: ../../configuration/protocols/bgp.rst:1015 msgid "This command displays routes with classless interdomain routing (CIDR)." msgstr "This command displays routes with classless interdomain routing (CIDR)." @@ -14126,7 +15649,7 @@ msgstr "This command displays the neighbors status." msgid "This command displays the neighbors status for a neighbor on the specified interface." msgstr "This command displays the neighbors status for a neighbor on the specified interface." -#: ../../configuration/protocols/bgp.rst:1045 +#: ../../configuration/protocols/bgp.rst:1067 msgid "This command displays the status of all BGP connections." msgstr "This command displays the status of all BGP connections." @@ -14134,7 +15657,7 @@ msgstr "This command displays the status of all BGP connections." msgid "This command enable/disables summarisation for the configured address range." msgstr "This command enable/disables summarisation for the configured address range." -#: ../../configuration/protocols/bgp.rst:603 +#: ../../configuration/protocols/bgp.rst:615 msgid "This command enable logging neighbor up/down changes and reset reason." msgstr "This command enable logging neighbor up/down changes and reset reason." @@ -14174,7 +15697,7 @@ msgstr "This command enables sending timestamps with each Hello and IHU message msgid "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." msgstr "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." -#: ../../configuration/protocols/bgp.rst:875 +#: ../../configuration/protocols/bgp.rst:897 msgid "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." msgstr "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." @@ -14198,7 +15721,7 @@ msgstr "This command generate a default route into the RIP." msgid "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -#: ../../configuration/protocols/bgp.rst:632 +#: ../../configuration/protocols/bgp.rst:644 msgid "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." msgstr "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." @@ -14241,7 +15764,7 @@ msgstr "This command is used for advertising IPv4 or IPv6 networks." msgid "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." msgstr "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." -#: ../../configuration/protocols/bgp.rst:620 +#: ../../configuration/protocols/bgp.rst:632 msgid "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." msgstr "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." @@ -14253,15 +15776,15 @@ msgstr "This command modifies the default metric (hop count) value for redistrib msgid "This command override AS number of the originating router with the local AS number." msgstr "This command override AS number of the originating router with the local AS number." -#: ../../configuration/protocols/bgp.rst:885 +#: ../../configuration/protocols/bgp.rst:907 msgid "This command prevents from sending back prefixes learned from the neighbor." msgstr "This command prevents from sending back prefixes learned from the neighbor." -#: ../../configuration/protocols/bgp.rst:804 +#: ../../configuration/protocols/bgp.rst:826 msgid "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." msgstr "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." -#: ../../configuration/protocols/bgp.rst:741 +#: ../../configuration/protocols/bgp.rst:763 msgid "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." msgstr "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." @@ -14297,19 +15820,19 @@ msgstr "This command redistributes routing information from the given route sour msgid "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." msgstr "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." -#: ../../configuration/protocols/bgp.rst:1068 +#: ../../configuration/protocols/bgp.rst:1090 msgid "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -#: ../../configuration/protocols/bgp.rst:1088 +#: ../../configuration/protocols/bgp.rst:1110 msgid "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." msgstr "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -#: ../../configuration/protocols/bgp.rst:1075 +#: ../../configuration/protocols/bgp.rst:1097 msgid "This command resets all BGP connections of given router." msgstr "This command resets all BGP connections of given router." -#: ../../configuration/protocols/bgp.rst:1084 +#: ../../configuration/protocols/bgp.rst:1106 msgid "This command resets all external BGP peers of given router." msgstr "This command resets all external BGP peers of given router." @@ -14389,7 +15912,7 @@ msgstr "This command sets number of seconds for RxmtInterval timer value. This v msgid "This command sets old-style (ISO 10589) or new style packet formats:" msgstr "This command sets old-style (ISO 10589) or new style packet formats:" -#: ../../configuration/protocols/bgp.rst:944 +#: ../../configuration/protocols/bgp.rst:966 msgid "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." msgstr "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." @@ -14401,7 +15924,7 @@ msgstr "This command sets overload bit to avoid any transit traffic through this msgid "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." msgstr "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." -#: ../../configuration/protocols/bgp.rst:659 +#: ../../configuration/protocols/bgp.rst:681 msgid "This command sets the administrative distance for a particular route. The distance range is 1 to 255." msgstr "This command sets the administrative distance for a particular route. The distance range is 1 to 255." @@ -14461,7 +15984,7 @@ msgstr "This command should NOT be set normally." msgid "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." msgstr "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -#: ../../configuration/protocols/bgp.rst:938 +#: ../../configuration/protocols/bgp.rst:960 msgid "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." msgstr "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." @@ -14517,11 +16040,11 @@ msgstr "This command specifies attributes to be left unchanged for advertisement msgid "This command specifies circuit type for interface:" msgstr "This command specifies circuit type for interface:" -#: ../../configuration/protocols/bgp.rst:920 +#: ../../configuration/protocols/bgp.rst:942 msgid "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." msgstr "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." -#: ../../configuration/protocols/bgp.rst:671 +#: ../../configuration/protocols/bgp.rst:693 msgid "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." msgstr "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." @@ -14530,7 +16053,7 @@ msgstr "This command specifies hold-time in seconds. The timer range is 4 to 655 msgid "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." msgstr "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." -#: ../../configuration/protocols/bgp.rst:677 +#: ../../configuration/protocols/bgp.rst:699 msgid "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." msgstr "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." @@ -14558,15 +16081,15 @@ msgstr "This command specifies metric type for redistributed routes. Difference msgid "This command specifies network type to Point-to-Point. The default network type is broadcast." msgstr "This command specifies network type to Point-to-Point. The default network type is broadcast." -#: ../../configuration/protocols/bgp.rst:784 +#: ../../configuration/protocols/bgp.rst:806 msgid "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." msgstr "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." -#: ../../configuration/protocols/bgp.rst:754 +#: ../../configuration/protocols/bgp.rst:776 msgid "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." msgstr "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." -#: ../../configuration/protocols/bgp.rst:791 +#: ../../configuration/protocols/bgp.rst:813 msgid "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." msgstr "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." @@ -14582,7 +16105,7 @@ msgstr "This command specifies that simple password authentication should be use msgid "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." msgstr "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." -#: ../../configuration/protocols/bgp.rst:748 +#: ../../configuration/protocols/bgp.rst:770 msgid "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." msgstr "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." @@ -14622,7 +16145,7 @@ msgstr "This command specifies the base receive cost for this interface. For wir msgid "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." msgstr "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." -#: ../../configuration/protocols/bgp.rst:799 +#: ../../configuration/protocols/bgp.rst:821 msgid "This command specifies the default local preference value. The local preference range is 0 to 4294967295." msgstr "This command specifies the default local preference value. The local preference range is 0 to 4294967295." @@ -14634,7 +16157,7 @@ msgstr "This command specifies the default metric value of redistributed routes. msgid "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." msgstr "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." -#: ../../configuration/protocols/bgp.rst:916 +#: ../../configuration/protocols/bgp.rst:938 msgid "This command specifies the given neighbor as route reflector client." msgstr "This command specifies the given neighbor as route reflector client." @@ -14658,7 +16181,7 @@ msgstr "This command specifies the minimum RTT, in milliseconds, starting from w msgid "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." msgstr "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." -#: ../../configuration/protocols/bgp.rst:589 +#: ../../configuration/protocols/bgp.rst:595 msgid "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." msgstr "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." @@ -14714,7 +16237,7 @@ msgstr "This command summarizes intra area paths from specified area into one su msgid "This command to ensure not advertise the summary lsa for the matched external LSAs." msgstr "This command to ensure not advertise the summary lsa for the matched external LSAs." -#: ../../configuration/protocols/bgp.rst:1079 +#: ../../configuration/protocols/bgp.rst:1101 msgid "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." msgstr "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." @@ -14763,7 +16286,7 @@ msgstr "This command will generate a default-route in L2 database." msgid "This command will give an overview of a rule in a single rule-set" msgstr "This command will give an overview of a rule in a single rule-set" -#: ../../configuration/firewall/ipv4.rst:1091 +#: ../../configuration/firewall/ipv4.rst:1114 msgid "This command will give an overview of a rule in a single rule-set, plus information for default action." msgstr "This command will give an overview of a rule in a single rule-set, plus information for default action." @@ -14771,7 +16294,7 @@ msgstr "This command will give an overview of a rule in a single rule-set, plus msgid "This command will give an overview of a rule in a single rule-set." msgstr "This command will give an overview of a rule in a single rule-set." -#: ../../configuration/firewall/ipv4.rst:1072 +#: ../../configuration/firewall/ipv4.rst:1095 #: ../../configuration/firewall/ipv6.rst:1088 msgid "This command will give an overview of a single rule-set." msgstr "This command will give an overview of a single rule-set." @@ -14792,11 +16315,19 @@ msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" @@ -14804,15 +16335,23 @@ msgstr "This configuration listen on port 80 and redirect incoming requests to H msgid "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." msgstr "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." -#: ../../configuration/service/dhcp-server.rst:76 -#: ../../configuration/service/dhcp-server.rst:520 +#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:579 msgid "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." msgstr "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." -#: ../../configuration/service/dhcp-server.rst:58 +#: ../../configuration/service/dhcp-server.rst:74 msgid "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." msgstr "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." +#: ../../configuration/service/dhcp-server.rst:58 +msgid "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" + +#: ../../configuration/service/dhcp-server.rst:154 +msgid "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" + #: ../../configuration/trafficpolicy/index.rst:628 msgid "This could be helpful if you want to test how an application behaves under certain network conditions." msgstr "This could be helpful if you want to test how an application behaves under certain network conditions." @@ -14825,7 +16364,7 @@ msgstr "This creates a route policy called FILTER-WEB with one rule to set the r msgid "This defaults to 10000." msgstr "This defaults to 10000." -#: ../../configuration/system/login.rst:254 +#: ../../configuration/system/login.rst:258 msgid "This defaults to 1812." msgstr "This defaults to 1812." @@ -14833,7 +16372,7 @@ msgstr "This defaults to 1812." msgid "This defaults to 2007." msgstr "This defaults to 2007." -#: ../../configuration/service/dns.rst:271 +#: ../../configuration/service/dns.rst:285 msgid "This defaults to 300 seconds." msgstr "This defaults to 300 seconds." @@ -14841,7 +16380,7 @@ msgstr "This defaults to 300 seconds." msgid "This defaults to 30 seconds." msgstr "This defaults to 30 seconds." -#: ../../configuration/system/login.rst:323 +#: ../../configuration/system/login.rst:327 msgid "This defaults to 49." msgstr "This defaults to 49." @@ -14857,7 +16396,7 @@ msgstr "This defaults to UDP" msgid "This defaults to both 1.2 and 1.3." msgstr "This defaults to both 1.2 and 1.3." -#: ../../configuration/pki/index.rst:283 +#: ../../configuration/pki/index.rst:314 msgid "This defaults to https://acme-v02.api.letsencrypt.org/directory" msgstr "This defaults to https://acme-v02.api.letsencrypt.org/directory" @@ -14893,15 +16432,27 @@ msgstr "This establishes our Port Forward rule, but if we created a firewall pol msgid "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." msgstr "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." +#: ../../configuration/vpn/ipsec.rst:392 +msgid "This example uses CACert as certificate authority." +msgstr "This example uses CACert as certificate authority." + +#: ../../configuration/vpn/ipsec.rst:386 +msgid "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." +msgstr "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." + +#: ../../configuration/protocols/bfd.rst:64 +msgid "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." +msgstr "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." + #: ../../configuration/protocols/ospf.rst:476 msgid "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." msgstr "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." -#: ../../configuration/service/dns.rst:404 +#: ../../configuration/service/dns.rst:418 msgid "This functionality is controlled by adding the following configuration:" msgstr "This functionality is controlled by adding the following configuration:" -#: ../../configuration/firewall/ipv4.rst:376 +#: ../../configuration/firewall/ipv4.rst:399 #: ../../configuration/firewall/ipv6.rst:378 msgid "This functions for both individual addresses and address groups." msgstr "This functions for both individual addresses and address groups." @@ -14930,11 +16481,11 @@ msgstr "This instructs opennhrp to reply with authorative answers on NHRP Resolu msgid "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." msgstr "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." -#: ../../configuration/service/dhcp-server.rst:82 +#: ../../configuration/service/dhcp-server.rst:98 msgid "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." msgstr "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." -#: ../../configuration/service/dhcp-server.rst:89 +#: ../../configuration/service/dhcp-server.rst:105 msgid "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." msgstr "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." @@ -14946,13 +16497,13 @@ msgstr "This is a mandatory command. Sets regular expression to match against lo msgid "This is a mandatory command. Sets the full path to the script. The script file must be executable." msgstr "This is a mandatory command. Sets the full path to the script. The script file must be executable." -#: ../../configuration/pki/index.rst:261 -#: ../../configuration/pki/index.rst:267 +#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:298 msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:117 -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." msgstr "This is a mandatory setting." @@ -15015,11 +16566,14 @@ msgstr "This is the LCD model used in your system." #: ../../configuration/service/dhcp-server.rst:35 #: ../../configuration/service/dhcp-server.rst:44 -#: ../../configuration/service/dhcp-server.rst:51 msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." -#: ../../configuration/service/dhcp-server.rst:197 +#: ../../configuration/service/dhcp-server.rst:51 +msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." +msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." + +#: ../../configuration/service/dhcp-server.rst:253 msgid "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." msgstr "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." @@ -15031,7 +16585,7 @@ msgstr "This is the name of the physical interface used to connect to your LCD d msgid "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" msgstr "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" -#: ../../configuration/service/dhcp-server.rst:195 +#: ../../configuration/service/dhcp-server.rst:251 msgid "This is useful, for example, in combination with hostfile update." msgstr "This is useful, for example, in combination with hostfile update." @@ -15064,7 +16618,7 @@ msgstr "This mode provides load balancing and fault tolerance." msgid "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." msgstr "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." -#: ../../configuration/service/dhcp-server.rst:119 +#: ../../configuration/service/dhcp-server.rst:135 msgid "This option can be specified multiple times." msgstr "This option can be specified multiple times." @@ -15088,7 +16642,7 @@ msgstr "This option is used by some DHCP clients as a way for users to specify i msgid "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." msgstr "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." -#: ../../configuration/system/login.rst:390 +#: ../../configuration/system/login.rst:394 msgid "This option must be used with ``timeout`` option." msgstr "This option must be used with ``timeout`` option." @@ -15101,7 +16655,7 @@ msgstr "This option only affects 802.3ad mode." msgid "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." msgstr "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." -#: ../../configuration/pki/index.rst:277 +#: ../../configuration/pki/index.rst:308 msgid "This options defaults to 2048" msgstr "This options defaults to 2048" @@ -15131,12 +16685,12 @@ msgstr "This required setting defines the action of the current rule. If action msgid "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" msgstr "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" -#: ../../configuration/interfaces/bridge.rst:208 -#: ../../configuration/interfaces/bridge.rst:244 +#: ../../configuration/interfaces/bridge.rst:217 +#: ../../configuration/interfaces/bridge.rst:253 msgid "This results in the active configuration:" msgstr "This results in the active configuration:" -#: ../../configuration/service/dhcp-server.rst:68 +#: ../../configuration/service/dhcp-server.rst:84 msgid "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." msgstr "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." @@ -15219,11 +16773,19 @@ msgstr "This the simplest queue possible you can apply to your traffic. Traffic msgid "This topology was built using GNS3." msgstr "This topology was built using GNS3." +#: ../../configuration/system/option.rst:38 +msgid "This will add the following option to the Kernel commandline:" +msgstr "This will add the following option to the Kernel commandline:" + +#: ../../configuration/system/option.rst:48 +msgid "This will add the following two options to the Kernel commandline:" +msgstr "This will add the following two options to the Kernel commandline:" + #: ../../configuration/interfaces/ethernet.rst:9 msgid "This will be the most widely used interface on a router carrying traffic to the real world." msgstr "This will be the most widely used interface on a router carrying traffic to the real world." -#: ../../configuration/protocols/static.rst:171 +#: ../../configuration/protocols/static.rst:204 msgid "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." msgstr "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." @@ -15231,7 +16793,7 @@ msgstr "This will configure a static ARP entry always resolving `<address>` to ` msgid "This will match TCP traffic with source port 80." msgstr "This will match TCP traffic with source port 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" msgstr "This will render the following ddclient_ configuration entry:" @@ -15239,7 +16801,7 @@ msgstr "This will render the following ddclient_ configuration entry:" msgid "This will show you a basic firewall overview" msgstr "This will show you a basic firewall overview" -#: ../../configuration/firewall/ipv4.rst:961 +#: ../../configuration/firewall/ipv4.rst:984 msgid "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" msgstr "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" @@ -15255,17 +16817,17 @@ msgstr "This will show you a basic summary of zones configuration." msgid "This will show you a rule-set statistic since the last boot." msgstr "This will show you a rule-set statistic since the last boot." -#: ../../configuration/firewall/ipv4.rst:1112 +#: ../../configuration/firewall/ipv4.rst:1135 #: ../../configuration/firewall/ipv6.rst:1135 msgid "This will show you a statistic of all rule-sets since the last boot." msgstr "This will show you a statistic of all rule-sets since the last boot." -#: ../../configuration/firewall/ipv4.rst:1016 +#: ../../configuration/firewall/ipv4.rst:1039 #: ../../configuration/firewall/ipv6.rst:1032 msgid "This will show you a summary of rule-sets and groups" msgstr "This will show you a summary of rule-sets and groups" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." @@ -15301,29 +16863,49 @@ msgstr "Time in seconds that the prefix will remain preferred (default 4 hours)" msgid "Time in seconds that the prefix will remain valid (default: 30 days)" msgstr "Time in seconds that the prefix will remain valid (default: 30 days)" +#: ../../configuration/service/router-advert.rst:1 +msgid "Time in seconds that the prefix will remain valid (default: 65528 seconds)" +msgstr "Time in seconds that the prefix will remain valid (default: 65528 seconds)" + #: ../../configuration/service/webproxy.rst:177 msgid "Time is in minutes and defaults to 60." msgstr "Time is in minutes and defaults to 60." -#: ../../configuration/firewall/ipv4.rst:874 +#: ../../configuration/firewall/ipv4.rst:897 #: ../../configuration/firewall/ipv6.rst:883 #: ../../configuration/policy/route.rst:225 msgid "Time to match the defined rule." msgstr "Time to match the defined rule." +#: ../../configuration/service/ipoe-server.rst:368 +#: ../../configuration/service/pppoe-server.rst:534 +#: ../../configuration/vpn/l2tp.rst:488 +#: ../../configuration/vpn/pptp.rst:412 +#: ../../configuration/vpn/sstp.rst:446 +msgid "Timeout in seconds" +msgstr "Timeout in seconds" + #: ../../configuration/protocols/failover.rst:24 msgid "Timeout in seconds between health target checks." msgstr "Timeout in seconds between health target checks." -#: ../../configuration/vpn/sstp.rst:234 +#: ../../configuration/service/ipoe-server.rst:174 +#: ../../configuration/service/pppoe-server.rst:136 +#: ../../configuration/vpn/l2tp.rst:179 +#: ../../configuration/vpn/pptp.rst:119 +#: ../../configuration/vpn/sstp.rst:152 msgid "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" msgstr "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" -#: ../../configuration/vpn/sstp.rst:254 +#: ../../configuration/service/ipoe-server.rst:194 +#: ../../configuration/service/pppoe-server.rst:156 +#: ../../configuration/vpn/l2tp.rst:199 +#: ../../configuration/vpn/pptp.rst:139 +#: ../../configuration/vpn/sstp.rst:172 msgid "Timeout to wait response from server (seconds)" msgstr "Timeout to wait response from server (seconds)" -#: ../../configuration/protocols/bgp.rst:667 +#: ../../configuration/protocols/bgp.rst:689 #: ../../configuration/protocols/isis.rst:257 msgid "Timers" msgstr "Timers" @@ -15332,7 +16914,7 @@ msgstr "Timers" msgid "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" msgstr "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" -#: ../../configuration/vpn/l2tp.rst:58 +#: ../../configuration/vpn/l2tp.rst:108 msgid "To allow VPN-clients access via your external address, a NAT rule is required:" msgstr "To allow VPN-clients access via your external address, a NAT rule is required:" @@ -15344,7 +16926,7 @@ msgstr "To allow listing additional custom domain, for example ``openthread.thre msgid "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" msgstr "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" -#: ../../configuration/vpn/site2site_ipsec.rst:257 +#: ../../configuration/vpn/site2site_ipsec.rst:260 msgid "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" msgstr "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" @@ -15442,11 +17024,11 @@ msgstr "To configure syslog, you need to switch into configuration mode." msgid "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." msgstr "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." -#: ../../configuration/service/ipoe-server.rst:98 +#: ../../configuration/service/ipoe-server.rst:99 msgid "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." msgstr "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." -#: ../../configuration/system/login.rst:377 +#: ../../configuration/system/login.rst:381 msgid "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." msgstr "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." @@ -15462,11 +17044,11 @@ msgstr "To create routing table 100 and add a new default gateway to be used by msgid "To define a zone setup either one with interfaces or a local zone." msgstr "To define a zone setup either one with interfaces or a local zone." -#: ../../configuration/service/router-advert.rst:75 +#: ../../configuration/service/router-advert.rst:101 msgid "To disable advertisements without deleting the configuration:" msgstr "To disable advertisements without deleting the configuration:" -#: ../../configuration/system/login.rst:190 +#: ../../configuration/system/login.rst:194 msgid "To display the configured OTP user key, use the command:" msgstr "To display the configured OTP user key, use the command:" @@ -15483,7 +17065,11 @@ msgstr "To enable/disable helper support for a specific neighbour, the router-id msgid "To enable MLD reports and query on interfaces `eth0` and `eth1`:" msgstr "To enable MLD reports and query on interfaces `eth0` and `eth1`:" -#: ../../configuration/vpn/l2tp.rst:141 +#: ../../configuration/service/ipoe-server.rst:116 +#: ../../configuration/service/pppoe-server.rst:78 +#: ../../configuration/vpn/l2tp.rst:121 +#: ../../configuration/vpn/pptp.rst:61 +#: ../../configuration/vpn/sstp.rst:94 msgid "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." msgstr "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." @@ -15491,7 +17077,7 @@ msgstr "To enable RADIUS based authentication, the authentication mode needs to msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" @@ -15511,6 +17097,10 @@ msgstr "To enable the HTTP security headers in the configuration file, use the c msgid "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" msgstr "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" +#: ../../configuration/vpn/l2tp.rst:282 +msgid "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." +msgstr "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." + #: ../../configuration/service/snmp.rst:216 msgid "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." msgstr "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." @@ -15527,11 +17117,15 @@ msgstr "To generate the CA, the server private key and certificates the followin msgid "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." msgstr "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." -#: ../../configuration/service/dhcp-server.rst:566 +#: ../../configuration/service/dhcp-server.rst:625 msgid "To hand out individual prefixes to your clients the following configuration is used:" msgstr "To hand out individual prefixes to your clients the following configuration is used:" -#: ../../configuration/highavailability/index.rst:336 +#: ../../configuration/vpn/ipsec.rst:405 +msgid "To import it from the filesystem use:" +msgstr "To import it from the filesystem use:" + +#: ../../configuration/highavailability/index.rst:346 msgid "To know more about scripting, check the :ref:`command-scripting` section." msgstr "To know more about scripting, check the :ref:`command-scripting` section." @@ -15539,7 +17133,7 @@ msgstr "To know more about scripting, check the :ref:`command-scripting` section msgid "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" msgstr "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" -#: ../../configuration/protocols/static.rst:161 +#: ../../configuration/protocols/static.rst:194 msgid "To manipulate or display ARP_ table entries, the following commands are implemented." msgstr "To manipulate or display ARP_ table entries, the following commands are implemented." @@ -15552,7 +17146,7 @@ msgstr "To perform a graceful shutdown, the FRR ``graceful-restart prepare ip os msgid "To request a /56 prefix from your ISP use:" msgstr "To request a /56 prefix from your ISP use:" -#: ../../configuration/service/dhcp-server.rst:680 +#: ../../configuration/service/dhcp-server.rst:741 msgid "To restart the DHCPv6 server" msgstr "To restart the DHCPv6 server" @@ -15568,7 +17162,7 @@ msgstr "To setup a destination NAT rule we need to gather:" msgid "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" msgstr "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" -#: ../../configuration/service/ipoe-server.rst:113 +#: ../../configuration/service/ipoe-server.rst:114 msgid "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." @@ -15576,7 +17170,7 @@ msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the fol msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." msgstr "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." msgstr "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." @@ -15596,6 +17190,10 @@ msgstr "Topology:" msgid "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" msgstr "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" +#: ../../configuration/service/ipoe-server.rst:433 +msgid "Toubleshooting" +msgstr "Toubleshooting" + #: ../../configuration/highavailability/index.rst:171 msgid "Track" msgstr "Track" @@ -15644,7 +17242,7 @@ msgstr "Traffic from multicast sources will go to the Rendezvous Point, and rece msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." msgstr "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." -#: ../../configuration/firewall/ipv4.rst:928 +#: ../../configuration/firewall/ipv4.rst:951 #: ../../configuration/firewall/ipv6.rst:937 msgid "Traffic must be symmetric" msgstr "Traffic must be symmetric" @@ -15653,11 +17251,11 @@ msgstr "Traffic must be symmetric" msgid "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" msgstr "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" -#: ../../configuration/highavailability/index.rst:322 +#: ../../configuration/highavailability/index.rst:332 msgid "Transition scripts" msgstr "Transition scripts" -#: ../../configuration/highavailability/index.rst:324 +#: ../../configuration/highavailability/index.rst:334 msgid "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" msgstr "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" @@ -15667,6 +17265,8 @@ msgstr "Transparent Proxy" #: ../../configuration/interfaces/openvpn.rst:701 #: ../../configuration/interfaces/tunnel.rst:227 +#: ../../configuration/vpn/pptp.rst:484 +#: ../../configuration/vpn/sstp.rst:580 msgid "Troubleshooting" msgstr "Troubleshooting" @@ -15682,6 +17282,10 @@ msgstr "Tunnel" msgid "Tunnel keys" msgstr "Tunnel keys" +#: ../../configuration/vpn/l2tp.rst:280 +msgid "Tunnel password used to authenticate the client (LAC)" +msgstr "Tunnel password used to authenticate the client (LAC)" + #: ../../configuration/loadbalancing/wan.rst:257 msgid "Two environment variables are available:" msgstr "Two environment variables are available:" @@ -15714,15 +17318,15 @@ msgstr "UDP Broadcast Relay" msgid "UDP mode works better with NAT:" msgstr "UDP mode works better with NAT:" -#: ../../configuration/vpn/l2tp.rst:34 +#: ../../configuration/vpn/l2tp.rst:84 msgid "UDP port 1701 for IPsec" msgstr "UDP port 1701 for IPsec" -#: ../../configuration/vpn/l2tp.rst:39 +#: ../../configuration/vpn/l2tp.rst:89 msgid "UDP port 4500 (NAT-T)" msgstr "UDP port 4500 (NAT-T)" -#: ../../configuration/vpn/l2tp.rst:32 +#: ../../configuration/vpn/l2tp.rst:82 msgid "UDP port 500 (IKE)" msgstr "UDP port 500 (IKE)" @@ -15746,6 +17350,10 @@ msgstr "USB to serial converters will handle most of their work in software so y msgid "UUCP subsystem" msgstr "UUCP subsystem" +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" + #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" msgstr "Unicast" @@ -15778,11 +17386,11 @@ msgstr "Up to seven queues -defined as classes_ with different priorities- can b msgid "Update" msgstr "Update" -#: ../../configuration/container/index.rst:171 +#: ../../configuration/container/index.rst:207 msgid "Update container image" msgstr "Update container image" -#: ../../configuration/firewall/ipv4.rst:1175 +#: ../../configuration/firewall/ipv4.rst:1198 #: ../../configuration/firewall/ipv6.rst:1191 msgid "Update geoip database" msgstr "Update geoip database" @@ -15791,14 +17399,21 @@ msgstr "Update geoip database" msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." msgstr "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." -#: ../../configuration/vpn/sstp.rst:90 +#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/vpn/l2tp.rst:391 +#: ../../configuration/vpn/pptp.rst:315 +#: ../../configuration/vpn/sstp.rst:349 msgid "Upload bandwidth limit in kbit/s for `<user>`." msgstr "Upload bandwidth limit in kbit/s for `<user>`." +#: ../../configuration/service/ipoe-server.rst:325 +msgid "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." +msgstr "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." + #: ../../configuration/loadbalancing/wan.rst:209 msgid "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" msgstr "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" @@ -15816,7 +17431,7 @@ msgstr "Use 802.11n protocol" msgid "Use CA certificate from PKI subsystem" msgstr "Use CA certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:365 +#: ../../configuration/service/dns.rst:379 msgid "Use DynDNS as your preferred provider:" msgstr "Use DynDNS as your preferred provider:" @@ -15848,31 +17463,35 @@ msgstr "Use `delete system conntrack modules` to deactive all modules." msgid "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." msgstr "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." -#: ../../configuration/firewall/ipv4.rst:515 +#: ../../configuration/firewall/ipv4.rst:538 #: ../../configuration/firewall/ipv6.rst:525 msgid "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:578 +#: ../../configuration/firewall/ipv4.rst:601 #: ../../configuration/firewall/ipv6.rst:588 msgid "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:599 +#: ../../configuration/firewall/ipv4.rst:622 #: ../../configuration/firewall/ipv6.rst:609 msgid "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:536 +#: ../../configuration/firewall/ipv4.rst:559 #: ../../configuration/firewall/ipv6.rst:546 msgid "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." -#: ../../configuration/firewall/ipv4.rst:557 +#: ../../configuration/firewall/ipv4.rst:580 #: ../../configuration/firewall/ipv6.rst:567 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." +#: ../../configuration/service/dhcp-server.rst:430 +msgid "Use active-active HA mode." +msgstr "Use active-active HA mode." + #: ../../configuration/nat/nat44.rst:259 msgid "Use address `masquerade` (the interfaces primary address) on rule 30" msgstr "Use address `masquerade` (the interfaces primary address) on rule 30" @@ -15885,7 +17504,7 @@ msgstr "Use an automatically generated self-signed certificate" msgid "Use any local address, configured on any interface if this is not set." msgstr "Use any local address, configured on any interface if this is not set." -#: ../../configuration/service/dns.rst:279 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" msgstr "Use auth key file at ``/config/auth/my.key``" @@ -15893,10 +17512,14 @@ msgstr "Use auth key file at ``/config/auth/my.key``" msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:408 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." msgstr "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." +#: ../../configuration/service/dns.rst:462 +msgid "Use deSEC (dedyn.io) as your preferred provider:" +msgstr "Use deSEC (dedyn.io) as your preferred provider:" + #: ../../configuration/firewall/general-legacy.rst:478 msgid "Use inverse-match to match anything except the given country-codes." msgstr "Use inverse-match to match anything except the given country-codes." @@ -15905,7 +17528,7 @@ msgstr "Use inverse-match to match anything except the given country-codes." msgid "Use local socket for API" msgstr "Use local socket for API" -#: ../../configuration/vpn/sstp.rst:288 +#: ../../configuration/vpn/sstp.rst:357 msgid "Use local user `foo` with password `bar`" msgstr "Use local user `foo` with password `bar`" @@ -15913,7 +17536,7 @@ msgstr "Use local user `foo` with password `bar`" msgid "Use tab completion to get a list of categories." msgstr "Use tab completion to get a list of categories." -#: ../../configuration/system/option.rst:53 +#: ../../configuration/system/option.rst:83 msgid "Use the address of the specified interface on the local machine as the source address of the connection." msgstr "Use the address of the specified interface on the local machine as the source address of the connection." @@ -15925,7 +17548,7 @@ msgstr "Use the following topology to build a nat66 based isolated network betwe msgid "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." msgstr "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." -#: ../../configuration/system/option.rst:48 +#: ../../configuration/system/option.rst:78 msgid "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." msgstr "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." @@ -15957,10 +17580,26 @@ msgstr "Use this PIM command to modify the time out value (31-60000 seconds) for msgid "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." -#: ../../configuration/vpn/sstp.rst:137 +#: ../../configuration/service/ipoe-server.rst:261 +msgid "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/service/pppoe-server.rst:355 +msgid "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/pptp.rst:223 +msgid "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/sstp.rst:257 msgid "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." msgstr "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +#: ../../configuration/vpn/l2tp.rst:299 +msgid "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + #: ../../configuration/service/pppoe-server.rst:93 msgid "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." msgstr "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." @@ -16005,7 +17644,7 @@ msgstr "Use this command to check the tunnel status for OpenVPN server interface msgid "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." msgstr "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." -#: ../../configuration/system/ipv6.rst:154 +#: ../../configuration/system/ipv6.rst:167 msgid "Use this command to clear Border Gateway Protocol statistics or status." msgstr "Use this command to clear Border Gateway Protocol statistics or status." @@ -16013,16 +17652,32 @@ msgstr "Use this command to clear Border Gateway Protocol statistics or status." msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." -#: ../../configuration/vpn/sstp.rst:146 +#: ../../configuration/service/ipoe-server.rst:269 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/service/pppoe-server.rst:363 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/pptp.rst:231 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/sstp.rst:265 msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +#: ../../configuration/vpn/l2tp.rst:307 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + #: ../../configuration/service/pppoe-server.rst:120 msgid "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." msgstr "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." -#: ../../configuration/protocols/static.rst:112 -#: ../../configuration/protocols/static.rst:125 +#: ../../configuration/protocols/static.rst:146 +#: ../../configuration/protocols/static.rst:159 msgid "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." msgstr "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." @@ -16226,6 +17881,10 @@ msgstr "Use this command to control the maximum number of equal cost paths to re msgid "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." msgstr "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." +#: ../../configuration/vpn/l2tp.rst:68 +msgid "Use this command to define IPsec interface." +msgstr "Use this command to define IPsec interface." + #: ../../configuration/trafficpolicy/index.rst:425 msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." @@ -16234,8 +17893,19 @@ msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." -#: ../../configuration/service/pppoe-server.rst:81 -#: ../../configuration/vpn/sstp.rst:132 +#: ../../configuration/service/ipoe-server.rst:277 +#: ../../configuration/service/pppoe-server.rst:371 +#: ../../configuration/vpn/l2tp.rst:315 +#: ../../configuration/vpn/pptp.rst:239 +#: ../../configuration/vpn/sstp.rst:273 +msgid "Use this command to define default IPv6 address pool name." +msgstr "Use this command to define default IPv6 address pool name." + +#: ../../configuration/service/ipoe-server.rst:77 +#: ../../configuration/service/pppoe-server.rst:61 +#: ../../configuration/vpn/l2tp.rst:48 +#: ../../configuration/vpn/pptp.rst:50 +#: ../../configuration/vpn/sstp.rst:75 msgid "Use this command to define default address pool name." msgstr "Use this command to define default address pool name." @@ -16255,15 +17925,31 @@ msgstr "Use this command to define in the selected interface whether you choose msgid "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +#: ../../configuration/service/ipoe-server.rst:70 +msgid "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + #: ../../configuration/service/pppoe-server.rst:73 msgid "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." -#: ../../configuration/vpn/sstp.rst:121 +#: ../../configuration/vpn/pptp.rst:43 +msgid "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/vpn/sstp.rst:68 msgid "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." -#: ../../configuration/service/pppoe-server.rst:42 +#: ../../configuration/vpn/l2tp.rst:41 +msgid "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:54 +msgid "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:65 msgid "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." msgstr "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." @@ -16283,8 +17969,11 @@ msgstr "Use this command to define the maximum number of entries to keep in the msgid "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." msgstr "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." -#: ../../configuration/service/pppoe-server.rst:77 -#: ../../configuration/vpn/sstp.rst:128 +#: ../../configuration/service/ipoe-server.rst:332 +#: ../../configuration/service/pppoe-server.rst:450 +#: ../../configuration/vpn/l2tp.rst:404 +#: ../../configuration/vpn/pptp.rst:328 +#: ../../configuration/vpn/sstp.rst:362 msgid "Use this command to define the next address pool name." msgstr "Use this command to define the next address pool name." @@ -16352,7 +18041,7 @@ msgstr "Use this command to enable PIMv6 in the selected interface so that it ca msgid "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." msgstr "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." -#: ../../configuration/service/pppoe-server.rst:236 +#: ../../configuration/service/pppoe-server.rst:310 msgid "Use this command to enable bandwidth shaping via RADIUS." msgstr "Use this command to enable bandwidth shaping via RADIUS." @@ -16364,7 +18053,7 @@ msgstr "Use this command to enable proxy Address Resolution Protocol (ARP) on th msgid "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." msgstr "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." -#: ../../configuration/service/pppoe-server.rst:249 +#: ../../configuration/service/pppoe-server.rst:323 msgid "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." msgstr "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." @@ -16386,7 +18075,7 @@ msgstr "Use this command to enable the logging of the default action on custom c msgid "Use this command to enable the logging of the default action on the specified chain." msgstr "Use this command to enable the logging of the default action on the specified chain." -#: ../../configuration/system/ipv6.rst:165 +#: ../../configuration/system/ipv6.rst:178 msgid "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." msgstr "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." @@ -16394,11 +18083,11 @@ msgstr "Use this command to flush the kernel IPv6 route cache. An address can be msgid "Use this command to get an overview of a zone." msgstr "Use this command to get an overview of a zone." -#: ../../configuration/system/ipv6.rst:120 +#: ../../configuration/system/ipv6.rst:133 msgid "Use this command to get information about OSPFv3." msgstr "Use this command to get information about OSPFv3." -#: ../../configuration/system/ipv6.rst:142 +#: ../../configuration/system/ipv6.rst:155 msgid "Use this command to get information about the RIPNG protocol" msgstr "Use this command to get information about the RIPNG protocol" @@ -16410,10 +18099,22 @@ msgstr "Use this command to instruct the system to establish a PPPoE connection msgid "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." msgstr "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." -#: ../../configuration/service/pppoe-server.rst:311 +#: ../../configuration/service/ipoe-server.rst:394 +msgid "Use this command to locally check the active sessions in the IPoE server." +msgstr "Use this command to locally check the active sessions in the IPoE server." + +#: ../../configuration/service/pppoe-server.rst:587 msgid "Use this command to locally check the active sessions in the PPPoE server." msgstr "Use this command to locally check the active sessions in the PPPoE server." +#: ../../configuration/vpn/pptp.rst:446 +msgid "Use this command to locally check the active sessions in the PPTP server." +msgstr "Use this command to locally check the active sessions in the PPTP server." + +#: ../../configuration/vpn/sstp.rst:542 +msgid "Use this command to locally check the active sessions in the SSTP server." +msgstr "Use this command to locally check the active sessions in the SSTP server." + #: ../../configuration/protocols/igmp.rst:104 msgid "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." msgstr "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." @@ -16427,7 +18128,7 @@ msgstr "Use this command to not install advertised DNS nameservers into the loca msgid "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." msgstr "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." -#: ../../configuration/system/ipv6.rst:160 +#: ../../configuration/system/ipv6.rst:173 msgid "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." msgstr "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." @@ -16467,7 +18168,7 @@ msgstr "Use this command to see discovery hello information" msgid "Use this command to see the Label Information Base." msgstr "Use this command to see the Label Information Base." -#: ../../configuration/service/pppoe-server.rst:26 +#: ../../configuration/service/pppoe-server.rst:33 msgid "Use this command to set a name for this PPPoE-server access concentrator." msgstr "Use this command to set a name for this PPPoE-server access concentrator." @@ -16511,31 +18212,31 @@ msgstr "Use this command to set the username for authenticating with a remote PP msgid "Use this command to show IPv6 Border Gateway Protocol information." msgstr "Use this command to show IPv6 Border Gateway Protocol information." -#: ../../configuration/system/ipv6.rst:50 +#: ../../configuration/system/ipv6.rst:63 msgid "Use this command to show IPv6 Neighbor Discovery Protocol information." msgstr "Use this command to show IPv6 Neighbor Discovery Protocol information." -#: ../../configuration/system/ipv6.rst:58 +#: ../../configuration/system/ipv6.rst:71 msgid "Use this command to show IPv6 forwarding status." msgstr "Use this command to show IPv6 forwarding status." -#: ../../configuration/system/ipv6.rst:54 +#: ../../configuration/system/ipv6.rst:67 msgid "Use this command to show IPv6 multicast group membership." msgstr "Use this command to show IPv6 multicast group membership." -#: ../../configuration/system/ipv6.rst:62 +#: ../../configuration/system/ipv6.rst:75 msgid "Use this command to show IPv6 routes." msgstr "Use this command to show IPv6 routes." -#: ../../configuration/system/ipv6.rst:105 +#: ../../configuration/system/ipv6.rst:118 msgid "Use this command to show all IPv6 access lists" msgstr "Use this command to show all IPv6 access lists" -#: ../../configuration/system/ipv6.rst:90 +#: ../../configuration/system/ipv6.rst:103 msgid "Use this command to show all IPv6 prefix lists" msgstr "Use this command to show all IPv6 prefix lists" -#: ../../configuration/system/ipv6.rst:146 +#: ../../configuration/system/ipv6.rst:159 msgid "Use this command to show the status of the RIPNG protocol" msgstr "Use this command to show the status of the RIPNG protocol" @@ -16595,6 +18296,14 @@ msgstr "Used to block specific domains by the Proxy. Specifying \"vyos.net\" wil msgid "User-level messages" msgstr "User-level messages" +#: ../../configuration/service/ipoe-server.rst:250 +#: ../../configuration/service/pppoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:255 +#: ../../configuration/vpn/pptp.rst:195 +#: ../../configuration/vpn/sstp.rst:228 +msgid "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." +msgstr "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." + #: ../../configuration/policy/examples.rst:18 msgid "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." @@ -16603,19 +18312,23 @@ msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing t msgid "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." msgstr "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." -#: ../../configuration/protocols/bgp.rst:900 +#: ../../configuration/protocols/bgp.rst:922 msgid "Using BGP confederation" msgstr "Using BGP confederation" -#: ../../configuration/protocols/bgp.rst:899 +#: ../../configuration/protocols/bgp.rst:921 msgid "Using BGP route-reflectors" msgstr "Using BGP route-reflectors" -#: ../../configuration/interfaces/bridge.rst:225 +#: ../../configuration/interfaces/bridge.rst:234 msgid "Using VLAN aware Bridge" msgstr "Using VLAN aware Bridge" -#: ../../configuration/interfaces/bridge.rst:266 +#: ../../configuration/vpn/sstp.rst:29 +msgid "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" +msgstr "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" + +#: ../../configuration/interfaces/bridge.rst:275 msgid "Using the operation mode command to view Bridge Information" msgstr "Using the operation mode command to view Bridge Information" @@ -16645,18 +18358,22 @@ msgstr "VHT operating channel center frequency - center freq 2 (for use with the #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 msgid "VLAN" msgstr "VLAN" +#: ../../configuration/service/pppoe-server.rst:232 +msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." +msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." + #: ../../configuration/service/pppoe-server.rst:163 msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." -#: ../../configuration/interfaces/bridge.rst:231 +#: ../../configuration/interfaces/bridge.rst:240 msgid "VLAN 10 on member interface `eth2` (ACCESS mode)" msgstr "VLAN 10 on member interface `eth2` (ACCESS mode)" @@ -16664,10 +18381,14 @@ msgstr "VLAN 10 on member interface `eth2` (ACCESS mode)" msgid "VLAN Example" msgstr "VLAN Example" -#: ../../configuration/interfaces/bridge.rst:134 +#: ../../configuration/interfaces/bridge.rst:143 msgid "VLAN Options" msgstr "VLAN Options" +#: ../../configuration/service/ipoe-server.rst:315 +msgid "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" +msgstr "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" + #: ../../configuration/service/lldp.rst:28 msgid "VLAN name" msgstr "VLAN name" @@ -16688,32 +18409,32 @@ msgstr "VPN-clients will request configuration parameters, optionally you can DN msgid "VRF" msgstr "VRF" -#: ../../configuration/vrf/index.rst:411 +#: ../../configuration/vrf/index.rst:430 msgid "VRF Route Leaking" msgstr "VRF Route Leaking" -#: ../../configuration/vrf/index.rst:283 +#: ../../configuration/vrf/index.rst:302 msgid "VRF and NAT" msgstr "VRF and NAT" -#: ../../configuration/vrf/index.rst:380 +#: ../../configuration/vrf/index.rst:399 msgid "VRF blue routing table" msgstr "VRF blue routing table" -#: ../../configuration/vrf/index.rst:347 +#: ../../configuration/vrf/index.rst:366 msgid "VRF default routing table" msgstr "VRF default routing table" -#: ../../configuration/vrf/index.rst:363 +#: ../../configuration/vrf/index.rst:382 msgid "VRF red routing table" msgstr "VRF red routing table" -#: ../../configuration/vrf/index.rst:235 -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:254 +#: ../../configuration/vrf/index.rst:261 msgid "VRF route leaking" msgstr "VRF route leaking" -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:261 msgid "VRF topology example" msgstr "VRF topology example" @@ -16769,11 +18490,19 @@ msgstr "Valid values are 0..255." msgid "Value" msgstr "Value" -#: ../../configuration/vpn/sstp.rst:263 +#: ../../configuration/service/ipoe-server.rst:203 +#: ../../configuration/service/pppoe-server.rst:165 +#: ../../configuration/vpn/l2tp.rst:208 +#: ../../configuration/vpn/pptp.rst:148 +#: ../../configuration/vpn/sstp.rst:181 msgid "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." msgstr "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." -#: ../../configuration/vpn/sstp.rst:258 +#: ../../configuration/service/ipoe-server.rst:198 +#: ../../configuration/service/pppoe-server.rst:160 +#: ../../configuration/vpn/l2tp.rst:203 +#: ../../configuration/vpn/pptp.rst:143 +#: ../../configuration/vpn/sstp.rst:176 msgid "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." msgstr "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." @@ -16795,11 +18524,11 @@ msgstr "Verify that connections are hitting the rule on both sides:" msgid "Version" msgstr "Version" -#: ../../configuration/highavailability/index.rst:339 +#: ../../configuration/highavailability/index.rst:349 msgid "Virtual-server" msgstr "Virtual-server" -#: ../../configuration/highavailability/index.rst:398 +#: ../../configuration/highavailability/index.rst:408 msgid "Virtual-server can be configured with VRRP virtual address or without VRRP." msgstr "Virtual-server can be configured with VRRP virtual address or without VRRP." @@ -16807,7 +18536,7 @@ msgstr "Virtual-server can be configured with VRRP virtual address or without VR msgid "Virtual Ethernet" msgstr "Virtual Ethernet" -#: ../../configuration/highavailability/index.rst:342 +#: ../../configuration/highavailability/index.rst:352 msgid "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." msgstr "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." @@ -16823,11 +18552,11 @@ msgstr "VyOS 1.1 supported login as user ``root``. This has been removed due to msgid "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." msgstr "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." -#: ../../configuration/vrf/index.rst:84 +#: ../../configuration/vrf/index.rst:103 msgid "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." msgstr "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." -#: ../../configuration/pki/index.rst:9 +#: ../../configuration/pki/index.rst:11 msgid "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." msgstr "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." @@ -16839,7 +18568,7 @@ msgstr "VyOS 1.4 uses chrony instead of ntpd (see :vytask:`T3008`) which will no msgid "VyOS Arista EOS setup" msgstr "VyOS Arista EOS setup" -#: ../../configuration/vpn/ipsec.rst:120 +#: ../../configuration/vpn/ipsec.rst:123 msgid "VyOS ESP group has the next options:" msgstr "VyOS ESP group has the next options:" @@ -16883,10 +18612,14 @@ msgstr "VyOS SNMP supports both IPv4 and IPv6." msgid "VyOS also comes with a build in SSTP server, see :ref:`sstp`." msgstr "VyOS also comes with a build in SSTP server, see :ref:`sstp`." -#: ../../configuration/service/dhcp-server.rst:504 +#: ../../configuration/service/dhcp-server.rst:563 msgid "VyOS also provides DHCPv6 server functionality which is described in this section." msgstr "VyOS also provides DHCPv6 server functionality which is described in this section." +#: ../../configuration/vpn/ipsec.rst:474 +msgid "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." +msgstr "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." + #: ../../configuration/vpn/remoteaccess_ipsec.rst:127 msgid "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." msgstr "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." @@ -16928,11 +18661,15 @@ msgstr "VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**, **IGMP* msgid "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/ids.rst:17 +msgid "VyOS includes the FastNetMon Community Edition." +msgstr "VyOS includes the FastNetMon Community Edition." + +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." msgstr "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." msgstr "VyOS is also able to use any service relying on protocols supported by ddclient." @@ -16952,15 +18689,15 @@ msgstr "VyOS makes use of Linux `netfilter <https://netfilter.org/>`_ for packet msgid "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" msgstr "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" -#: ../../configuration/pki/index.rst:21 +#: ../../configuration/pki/index.rst:23 msgid "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." msgstr "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." -#: ../../configuration/pki/index.rst:35 +#: ../../configuration/pki/index.rst:37 msgid "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." msgstr "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." -#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:323 msgid "VyOS operational mode commands are not only available for generating keys but also to display them." msgstr "VyOS operational mode commands are not only available for generating keys but also to display them." @@ -16972,6 +18709,10 @@ msgstr "VyOS provide an HTTP API. You can use it to execute op-mode commands, up msgid "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." msgstr "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." +#: ../../configuration/service/dhcp-server.rst:172 +msgid "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" +msgstr "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:144 msgid "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." msgstr "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." @@ -16996,10 +18737,14 @@ msgstr "VyOS provides policies commands exclusively for BGP traffic filtering an msgid "VyOS provides some operational commands on OpenVPN." msgstr "VyOS provides some operational commands on OpenVPN." -#: ../../configuration/service/dhcp-server.rst:138 +#: ../../configuration/service/dhcp-server.rst:172 msgid "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." msgstr "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." +#: ../../configuration/pki/index.rst:255 +msgid "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." +msgstr "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." + #: ../../configuration/loadbalancing/reverse-proxy.rst:8 msgid "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." msgstr "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." @@ -17020,6 +18765,10 @@ msgstr "VyOS supports both MLD version 1 and version 2 (which allows source-spec msgid "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." msgstr "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." +#: ../../configuration/vpn/ipsec.rst:452 +msgid "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." +msgstr "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." + #: ../../configuration/system/updates.rst:5 msgid "VyOS supports online checking for updates" msgstr "VyOS supports online checking for updates" @@ -17060,11 +18809,11 @@ msgstr "VyOS uses the `mirror` option to configure port mirroring. The configura msgid "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." -#: ../../configuration/service/ipoe-server.rst:9 +#: ../../configuration/service/ipoe-server.rst:7 msgid "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." msgstr "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." -#: ../../configuration/vpn/l2tp.rst:6 +#: ../../configuration/vpn/l2tp.rst:7 msgid "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." msgstr "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." @@ -17076,7 +18825,7 @@ msgstr "VyOS utilizes accel-ppp_ to provide SSTP server functionality. We suppor msgid "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." msgstr "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." -#: ../../configuration/vpn/site2site_ipsec.rst:164 +#: ../../configuration/vpn/site2site_ipsec.rst:167 msgid "WAN interface on `eth1`" msgstr "WAN interface on `eth1`" @@ -17117,7 +18866,7 @@ msgstr "We'll configure OpenVPN using self-signed certificates, and then discuss msgid "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." msgstr "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." -#: ../../configuration/vpn/ipsec.rst:232 +#: ../../configuration/vpn/ipsec.rst:236 msgid "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." msgstr "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." @@ -17129,11 +18878,15 @@ msgstr "We can't support all displays from the beginning. If your display type i msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." -#: ../../configuration/protocols/rpki.rst:158 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" -#: ../../configuration/protocols/bgp.rst:1249 +#: ../../configuration/vpn/ipsec.rst:456 +msgid "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." +msgstr "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." + +#: ../../configuration/protocols/bgp.rst:1271 msgid "We could expand on this and also deny link local and multicast in the rule 20 action deny." msgstr "We could expand on this and also deny link local and multicast in the rule 20 action deny." @@ -17145,6 +18898,10 @@ msgstr "We do not have CLI nodes for every single OpenVPN option. If an option i msgid "We don't recomend to use arguments. Using environments is more preffereble." msgstr "We don't recomend to use arguments. Using environments is more preffereble." +#: ../../configuration/vpn/ipsec.rst:506 +msgid "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." +msgstr "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." + #: ../../configuration/interfaces/wireguard.rst:148 msgid "We listen on port 51820" msgstr "We listen on port 51820" @@ -17153,7 +18910,7 @@ msgstr "We listen on port 51820" msgid "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" msgstr "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" -#: ../../configuration/system/option.rst:85 +#: ../../configuration/system/option.rst:115 msgid "We now utilize `tuned` for dynamic resource balancing based on profiles." msgstr "We now utilize `tuned` for dynamic resource balancing based on profiles." @@ -17169,7 +18926,7 @@ msgstr "We only need a single step for this interface:" msgid "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" msgstr "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" -#: ../../configuration/system/login.rst:420 +#: ../../configuration/system/login.rst:424 msgid "We use a vontainer providing the TACACS serve rin this example." msgstr "We use a vontainer providing the TACACS serve rin this example." @@ -17177,7 +18934,7 @@ msgstr "We use a vontainer providing the TACACS serve rin this example." msgid "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." msgstr "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." -#: ../../configuration/service/dhcp-server.rst:331 +#: ../../configuration/service/dhcp-server.rst:387 msgid "Web Proxy Autodiscovery (WPAD) URL" msgstr "Web Proxy Autodiscovery (WPAD) URL" @@ -17201,15 +18958,19 @@ msgstr "When LDP is working, you will be able to see label information in the ou msgid "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." msgstr "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." -#: ../../configuration/vrf/index.rst:73 +#: ../../configuration/vrf/index.rst:92 msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." msgstr "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." -#: ../../configuration/service/dns.rst:354 +#: ../../configuration/service/dns.rst:445 +msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." +msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." + +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." msgstr "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." -#: ../../configuration/service/dns.rst:347 +#: ../../configuration/service/dns.rst:361 msgid "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." msgstr "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." @@ -17225,7 +18986,11 @@ msgstr "When a link is reconnected or a new slave joins the bond the receive tra msgid "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." msgstr "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." -#: ../../configuration/protocols/bgp.rst:684 +#: ../../configuration/protocols/bgp.rst:589 +msgid "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." +msgstr "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." + +#: ../../configuration/protocols/bgp.rst:706 msgid "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." msgstr "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." @@ -17237,7 +19002,7 @@ msgstr "When adding IPv6 routing information exchange feature to BGP. There were msgid "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." msgstr "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." -#: ../../configuration/service/pppoe-server.rst:169 +#: ../../configuration/service/pppoe-server.rst:238 msgid "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." msgstr "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." @@ -17271,17 +19036,21 @@ msgstr "When dequeuing, each hash-bucket with data is queried in a round robin f msgid "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." msgstr "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." -#: ../../configuration/vrf/index.rst:188 +#: ../../configuration/vrf/index.rst:207 msgid "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." msgstr "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." -#: ../../configuration/pki/index.rst:176 -#: ../../configuration/pki/index.rst:219 +#: ../../configuration/vpn/ipsec.rst:529 +msgid "When first connecting to the new VPN the user is prompted to enter proper credentials." +msgstr "When first connecting to the new VPN the user is prompted to enter proper credentials." + +#: ../../configuration/pki/index.rst:178 +#: ../../configuration/pki/index.rst:221 msgid "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" -#: ../../configuration/pki/index.rst:197 -#: ../../configuration/pki/index.rst:235 +#: ../../configuration/pki/index.rst:199 +#: ../../configuration/pki/index.rst:237 msgid "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" msgstr "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" @@ -17325,7 +19094,7 @@ msgstr "When set the interface is enabled for \"dial-on-demand\"." msgid "When specified, this should be the only keyword for the interface." msgstr "When specified, this should be the only keyword for the interface." -#: ../../configuration/system/option.rst:60 +#: ../../configuration/system/option.rst:90 msgid "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." msgstr "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." @@ -17334,7 +19103,7 @@ msgstr "When starting a VyOS live system (the installation CD) the configured ke msgid "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." msgstr "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." -#: ../../configuration/vpn/site2site_ipsec.rst:416 +#: ../../configuration/vpn/site2site_ipsec.rst:419 msgid "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." msgstr "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." @@ -17346,6 +19115,10 @@ msgstr "When the command above is set, VyOS will answer every ICMP echo request msgid "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." msgstr "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." +#: ../../configuration/highavailability/index.rst:321 +msgid "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" +msgstr "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" + #: ../../_include/interface-address-with-dhcp.txt:14 msgid "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" msgstr "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" @@ -17366,6 +19139,10 @@ msgstr "When using NAT for a large number of host systems it recommended that a msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." +#: ../../configuration/protocols/rpki.rst:161 +msgid "When using SSH, private-key-file and public-key-file are mandatory options." +msgstr "When using SSH, private-key-file and public-key-file are mandatory options." + #: ../../configuration/vpn/openconnect.rst:222 msgid "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" msgstr "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" @@ -17450,12 +19227,23 @@ msgstr "Will be recorded only packets/flows on **incoming** direction in configu msgid "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" msgstr "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" +#: ../../configuration/vpn/ipsec.rst:501 +msgid "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." +msgstr "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." + +#: ../../configuration/service/pppoe-server.rst:579 +#: ../../configuration/vpn/l2tp.rst:514 +#: ../../configuration/vpn/pptp.rst:438 +#: ../../configuration/vpn/sstp.rst:472 +msgid "Windows Internet Name Service (WINS) servers propagated to client" +msgstr "Windows Internet Name Service (WINS) servers propagated to client" + #: ../../configuration/vpn/remoteaccess_ipsec.rst:147 msgid "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." msgstr "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/interfaces/wireguard.rst:7 -#: ../../configuration/pki/index.rst:132 +#: ../../configuration/pki/index.rst:134 msgid "WireGuard" msgstr "WireGuard" @@ -17521,20 +19309,24 @@ msgid "With this command, you can specify how the URL path should be matched aga msgstr "With this command, you can specify how the URL path should be matched against incoming requests." #: ../../configuration/firewall/index.rst:166 +msgid "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." +msgstr "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." + +#: ../../configuration/firewall/index.rst:166 msgid "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." msgstr "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." -#: ../../configuration/service/dhcp-server.rst:257 -#: ../../configuration/service/dhcp-server.rst:262 -#: ../../configuration/service/dhcp-server.rst:267 -#: ../../configuration/service/dhcp-server.rst:277 -#: ../../configuration/service/dhcp-server.rst:282 -#: ../../configuration/service/dhcp-server.rst:312 -#: ../../configuration/service/dhcp-server.rst:317 -#: ../../configuration/service/dhcp-server.rst:322 -#: ../../configuration/service/dhcp-server.rst:342 -#: ../../configuration/service/dhcp-server.rst:347 -#: ../../configuration/service/dhcp-server.rst:357 +#: ../../configuration/service/dhcp-server.rst:313 +#: ../../configuration/service/dhcp-server.rst:318 +#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:338 +#: ../../configuration/service/dhcp-server.rst:368 +#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/service/dhcp-server.rst:378 +#: ../../configuration/service/dhcp-server.rst:398 +#: ../../configuration/service/dhcp-server.rst:403 +#: ../../configuration/service/dhcp-server.rst:413 msgid "Y" msgstr "Y" @@ -17542,7 +19334,7 @@ msgstr "Y" msgid "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." msgstr "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." -#: ../../configuration/system/login.rst:365 +#: ../../configuration/system/login.rst:369 msgid "You are able to set post-login or pre-login banner messages to display certain information for this system." msgstr "You are able to set post-login or pre-login banner messages to display certain information for this system." @@ -17558,11 +19350,15 @@ msgstr "You can also configure the time interval for preemption with the \"preem msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." msgstr "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" msgstr "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" -#: ../../configuration/system/ipv6.rst:107 +#: ../../configuration/service/router-advert.rst:58 +msgid "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." +msgstr "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." + +#: ../../configuration/system/ipv6.rst:120 msgid "You can also specify which IPv6 access-list should be shown:" msgstr "You can also specify which IPv6 access-list should be shown:" @@ -17578,7 +19374,7 @@ msgstr "You can also use another attributes for identify client for disconnect, msgid "You can also write a description for a filter:" msgstr "You can also write a description for a filter:" -#: ../../configuration/system/login.rst:78 +#: ../../configuration/system/login.rst:82 msgid "You can assign multiple keys to the same user by using a unique identifier per SSH key." msgstr "You can assign multiple keys to the same user by using a unique identifier per SSH key." @@ -17614,7 +19410,7 @@ msgstr "You can create multiple VLAN interfaces on a physical interface. The VLA msgid "You can disable a VRRP group with ``disable`` option:" msgstr "You can disable a VRRP group with ``disable`` option:" -#: ../../configuration/system/ipv6.rst:122 +#: ../../configuration/system/ipv6.rst:135 msgid "You can get more specific OSPFv3 information by using the parameters shown below:" msgstr "You can get more specific OSPFv3 information by using the parameters shown below:" @@ -17626,15 +19422,15 @@ msgstr "You can not assign the same allowed-ips statement to multiple WireGuard msgid "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" msgstr "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" -#: ../../configuration/vpn/sstp.rst:332 +#: ../../configuration/vpn/sstp.rst:505 msgid "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." -#: ../../configuration/system/login.rst:443 +#: ../../configuration/system/login.rst:447 msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" @@ -17642,7 +19438,7 @@ msgstr "You can only apply one policy per interface and direction, but you could msgid "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" msgstr "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" -#: ../../configuration/service/dhcp-server.rst:176 +#: ../../configuration/service/dhcp-server.rst:226 msgid "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." msgstr "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." @@ -17718,6 +19514,10 @@ msgstr "You will also need the public key of your peer as well as the network(s) msgid "Your ISPs modem is connected to port ``eth0`` of your VyOS box." msgstr "Your ISPs modem is connected to port ``eth0`` of your VyOS box." +#: ../../configuration/service/router-advert.rst:110 +msgid "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" +msgstr "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" + #: ../../configuration/system/ip.rst:31 #: ../../configuration/system/ipv6.rst:27 #: ../../configuration/vrf/index.rst:44 @@ -17758,7 +19558,7 @@ msgstr "(This can be useful when a called service has many and/or often changing msgid ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." msgstr ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." -#: ../../configuration/protocols/static.rst:152 +#: ../../configuration/protocols/static.rst:185 msgid ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." msgstr ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." @@ -17798,11 +19598,11 @@ msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports a msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." @@ -17818,7 +19618,7 @@ msgstr ":abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc msgid ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." msgstr ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." -#: ../../configuration/vrf/index.rst:401 +#: ../../configuration/vrf/index.rst:420 msgid ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." msgstr ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." @@ -17830,6 +19630,10 @@ msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." + #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." @@ -17890,7 +19694,11 @@ msgstr ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." + +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" @@ -18010,43 +19818,43 @@ msgstr ":lastproofread:2021-07-12" msgid ":opcmd:`generate pki wireguard key-pair`." msgstr ":opcmd:`generate pki wireguard key-pair`." -#: ../../configuration/vrf/index.rst:88 +#: ../../configuration/vrf/index.rst:107 msgid ":ref:`routing-bgp`" msgstr ":ref:`routing-bgp`" -#: ../../configuration/vrf/index.rst:104 +#: ../../configuration/vrf/index.rst:123 msgid ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" msgstr ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" -#: ../../configuration/vrf/index.rst:89 +#: ../../configuration/vrf/index.rst:108 msgid ":ref:`routing-isis`" msgstr ":ref:`routing-isis`" -#: ../../configuration/vrf/index.rst:105 +#: ../../configuration/vrf/index.rst:124 msgid ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" msgstr ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" -#: ../../configuration/vrf/index.rst:90 +#: ../../configuration/vrf/index.rst:109 msgid ":ref:`routing-ospf`" msgstr ":ref:`routing-ospf`" -#: ../../configuration/vrf/index.rst:106 +#: ../../configuration/vrf/index.rst:125 msgid ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" msgstr ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" -#: ../../configuration/vrf/index.rst:91 +#: ../../configuration/vrf/index.rst:110 msgid ":ref:`routing-ospfv3`" msgstr ":ref:`routing-ospfv3`" -#: ../../configuration/vrf/index.rst:107 +#: ../../configuration/vrf/index.rst:126 msgid ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" msgstr ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" -#: ../../configuration/vrf/index.rst:92 +#: ../../configuration/vrf/index.rst:111 msgid ":ref:`routing-static`" msgstr ":ref:`routing-static`" -#: ../../configuration/vrf/index.rst:108 +#: ../../configuration/vrf/index.rst:127 msgid ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" msgstr ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" @@ -18054,7 +19862,7 @@ msgstr ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." msgstr ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." -#: ../../configuration/service/dns.rst:230 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" msgstr ":rfc:`2136` Based" @@ -18062,7 +19870,7 @@ msgstr ":rfc:`2136` Based" msgid ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." msgstr ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." -#: ../../configuration/pki/index.rst:15 +#: ../../configuration/pki/index.rst:17 msgid ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." msgstr ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." @@ -18082,23 +19890,27 @@ msgstr "`3. Add a full path to the script`_" msgid "`4. Add optional parameters`_" msgstr "`4. Add optional parameters`_" -#: ../../configuration/service/dhcp-server.rst:154 +#: ../../configuration/service/dhcp-server.rst:203 msgid "`<name>` must be identical on both sides!" msgstr "`<name>` must be identical on both sides!" -#: ../../configuration/pki/index.rst:202 +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + +#: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:181 +#: ../../configuration/pki/index.rst:183 msgid "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:240 +#: ../../configuration/pki/index.rst:242 msgid "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:224 +#: ../../configuration/pki/index.rst:226 msgid "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" msgstr "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" @@ -18202,14 +20014,26 @@ msgstr "``802.3ad`` - IEEE 802.3ad Dynamic link aggregation. Creates aggregation msgid "``9600`` - 9600 bps" msgstr "``9600`` - 9600 bps" -#: ../../configuration/vpn/ipsec.rst:149 +#: ../../configuration/vpn/ipsec.rst:152 msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" msgstr "``< dh-group >`` defines a Diffie-Hellman group for PFS;" +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." + #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" msgstr "``Known limitations:``" +#: ../../configuration/service/ipoe-server.rst:247 +#: ../../configuration/service/pppoe-server.rst:209 +#: ../../configuration/vpn/l2tp.rst:252 +#: ../../configuration/vpn/pptp.rst:192 +#: ../../configuration/vpn/sstp.rst:225 +msgid "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." +msgstr "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." + #: ../../configuration/loadbalancing/wan.rst:259 msgid "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" msgstr "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" @@ -18226,11 +20050,11 @@ msgstr "``a`` - 802.11a - 54 Mbits/sec" msgid "``ac`` - 802.11ac - 1300 Mbits/sec" msgstr "``ac`` - 802.11ac - 1300 Mbits/sec" -#: ../../configuration/policy/route-map.rst:375 +#: ../../configuration/policy/route-map.rst:378 msgid "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" msgstr "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" -#: ../../configuration/policy/route-map.rst:368 +#: ../../configuration/policy/route-map.rst:371 msgid "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" msgstr "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" @@ -18256,7 +20080,7 @@ msgstr "``active-backup`` - Active-backup policy: Only one slave in the bond is msgid "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." msgstr "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." -#: ../../configuration/vpn/ipsec.rst:96 +#: ../../configuration/vpn/ipsec.rst:98 msgid "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" msgstr "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" @@ -18268,11 +20092,19 @@ msgstr "``all-available`` all checking target addresses must be available to pas msgid "``any-available`` any of the checking target addresses must be available to pass this check" msgstr "``any-available`` any of the checking target addresses must be available to pass this check" -#: ../../configuration/vpn/site2site_ipsec.rst:385 +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + +#: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." msgstr "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." #: ../../configuration/vpn/site2site_ipsec.rst:18 +msgid "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" +msgstr "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" + +#: ../../configuration/vpn/site2site_ipsec.rst:18 msgid "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" msgstr "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" @@ -18292,11 +20124,11 @@ msgstr "``begin`` Matches the beginning of the URL path" msgid "``bgp`` - Border Gateway Protocol (BGP)" msgstr "``bgp`` - Border Gateway Protocol (BGP)" -#: ../../configuration/vpn/site2site_ipsec.rst:147 +#: ../../configuration/vpn/site2site_ipsec.rst:150 msgid "``bind`` - select a VTI interface to bind to this peer;" msgstr "``bind`` - select a VTI interface to bind to this peer;" -#: ../../configuration/policy/route-map.rst:376 +#: ../../configuration/policy/route-map.rst:379 msgid "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" msgstr "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" @@ -18312,6 +20144,10 @@ msgstr "``burst``: Number of packets allowed to overshoot the limit within ``per msgid "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" msgstr "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:61 +msgid "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" +msgstr "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" + #: ../../configuration/service/lldp.rst:65 msgid "``cdp`` - Listen for CDP for Cisco routers/switches" msgstr "``cdp`` - Listen for CDP for Cisco routers/switches" @@ -18320,6 +20156,14 @@ msgstr "``cdp`` - Listen for CDP for Cisco routers/switches" msgid "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" msgstr "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:64 +msgid "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" +msgstr "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" + +#: ../../configuration/vpn/ipsec.rst:66 +msgid "``clear`` closes the CHILD_SA and does not take further action (default);" +msgstr "``clear`` closes the CHILD_SA and does not take further action (default);" + #: ../../configuration/vpn/ipsec.rst:65 msgid "``clear`` set action to clear;" msgstr "``clear`` set action to clear;" @@ -18328,11 +20172,15 @@ msgstr "``clear`` set action to clear;" msgid "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." msgstr "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +#: ../../configuration/vpn/site2site_ipsec.rst:414 +msgid "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +msgstr "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." + #: ../../configuration/vpn/ipsec.rst:47 msgid "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" msgstr "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" -#: ../../configuration/vpn/ipsec.rst:122 +#: ../../configuration/vpn/ipsec.rst:125 msgid "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." msgstr "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." @@ -18344,7 +20192,7 @@ msgstr "``compression`` whether IPComp compression of content is proposed on the msgid "``connected`` - Connected routes (directly attached subnet or host)" msgstr "``connected`` - Connected routes (directly attached subnet or host)" -#: ../../configuration/vpn/site2site_ipsec.rst:72 +#: ../../configuration/vpn/site2site_ipsec.rst:69 msgid "``connection-type`` - how to handle this connection process. Possible variants:" msgstr "``connection-type`` - how to handle this connection process. Possible variants:" @@ -18366,39 +20214,43 @@ msgstr "``d`` - Execution interval in days" msgid "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." msgstr "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +#: ../../configuration/vpn/site2site_ipsec.rst:403 +msgid "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +msgstr "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." + #: ../../configuration/vpn/ipsec.rst:56 msgid "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" msgstr "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" -#: ../../configuration/vpn/site2site_ipsec.rst:88 +#: ../../configuration/vpn/site2site_ipsec.rst:85 msgid "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" msgstr "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" -#: ../../configuration/vpn/site2site_ipsec.rst:92 +#: ../../configuration/vpn/site2site_ipsec.rst:89 msgid "``description`` - description for this peer;" msgstr "``description`` - description for this peer;" -#: ../../configuration/vpn/ipsec.rst:101 +#: ../../configuration/vpn/ipsec.rst:103 msgid "``dh-group`` dh-group;" msgstr "``dh-group`` dh-group;" -#: ../../configuration/vpn/site2site_ipsec.rst:23 +#: ../../configuration/vpn/site2site_ipsec.rst:24 msgid "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" msgstr "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" -#: ../../configuration/vpn/site2site_ipsec.rst:94 +#: ../../configuration/vpn/site2site_ipsec.rst:91 msgid "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" msgstr "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" -#: ../../configuration/vpn/ipsec.rst:88 +#: ../../configuration/vpn/ipsec.rst:90 msgid "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." msgstr "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." -#: ../../configuration/vpn/site2site_ipsec.rst:396 +#: ../../configuration/vpn/site2site_ipsec.rst:399 msgid "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." msgstr "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." -#: ../../configuration/vpn/ipsec.rst:162 +#: ../../configuration/vpn/ipsec.rst:166 msgid "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" msgstr "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" @@ -18406,7 +20258,7 @@ msgstr "``disable-route-autoinstall`` Do not automatically install routes to rem msgid "``disable`` - disable this tunnel;" msgstr "``disable`` - disable this tunnel;" -#: ../../configuration/vpn/ipsec.rst:147 +#: ../../configuration/vpn/ipsec.rst:150 msgid "``disable`` Disable PFS;" msgstr "``disable`` Disable PFS;" @@ -18424,15 +20276,15 @@ msgstr "``disable`` disable MOBIKE;" msgid "``drop``: drop the packet." msgstr "``drop``: drop the packet." -#: ../../configuration/system/login.rst:71 +#: ../../configuration/system/login.rst:75 msgid "``ecdsa-sha2-nistp256``" msgstr "``ecdsa-sha2-nistp256``" -#: ../../configuration/system/login.rst:72 +#: ../../configuration/system/login.rst:76 msgid "``ecdsa-sha2-nistp384``" msgstr "``ecdsa-sha2-nistp384``" -#: ../../configuration/system/login.rst:73 +#: ../../configuration/system/login.rst:77 msgid "``ecdsa-sha2-nistp521``" msgstr "``ecdsa-sha2-nistp521``" @@ -18440,7 +20292,7 @@ msgstr "``ecdsa-sha2-nistp521``" msgid "``edp`` - Listen for EDP for Extreme routers/switches" msgstr "``edp`` - Listen for EDP for Extreme routers/switches" -#: ../../configuration/vpn/ipsec.rst:145 +#: ../../configuration/vpn/ipsec.rst:148 msgid "``enable`` Inherit Diffie-Hellman group from IKE group (default);" msgstr "``enable`` Inherit Diffie-Hellman group from IKE group (default);" @@ -18452,11 +20304,11 @@ msgstr "``enable`` enable IPComp compression;" msgid "``enable`` enable MOBIKE (default for IKEv2);" msgstr "``enable`` enable MOBIKE (default for IKEv2);" -#: ../../configuration/vpn/ipsec.rst:103 +#: ../../configuration/vpn/ipsec.rst:105 msgid "``encryption`` encryption algorithm;" msgstr "``encryption`` encryption algorithm;" -#: ../../configuration/vpn/ipsec.rst:153 +#: ../../configuration/vpn/ipsec.rst:156 msgid "``encryption`` encryption algorithm (default 128 bit AES-CBC);" msgstr "``encryption`` encryption algorithm (default 128 bit AES-CBC);" @@ -18468,7 +20320,7 @@ msgstr "``end`` Matches the end of the URL path." msgid "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" msgstr "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" -#: ../../configuration/vpn/site2site_ipsec.rst:149 +#: ../../configuration/vpn/site2site_ipsec.rst:152 msgid "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." msgstr "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." @@ -18488,11 +20340,11 @@ msgstr "``file`` - path to the key file;" msgid "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/ipsec.rst:164 +#: ../../configuration/vpn/ipsec.rst:168 msgid "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/site2site_ipsec.rst:97 +#: ../../configuration/vpn/site2site_ipsec.rst:94 msgid "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" msgstr "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" @@ -18500,7 +20352,7 @@ msgstr "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagr msgid "``g`` - 802.11g - 54 Mbits/sec (default)" msgstr "``g`` - 802.11g - 54 Mbits/sec (default)" -#: ../../configuration/policy/route-map.rst:367 +#: ../../configuration/policy/route-map.rst:370 msgid "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" msgstr "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" @@ -18508,11 +20360,11 @@ msgstr "``graceful-shutdown`` - Well-known communities value GRACEFUL msgid "``h`` - Execution interval in hours" msgstr "``h`` - Execution interval in hours" -#: ../../configuration/vpn/ipsec.rst:105 +#: ../../configuration/vpn/ipsec.rst:107 msgid "``hash`` hash algorithm." msgstr "``hash`` hash algorithm." -#: ../../configuration/vpn/ipsec.rst:155 +#: ../../configuration/vpn/ipsec.rst:158 msgid "``hash`` hash algorithm (default sha1)." msgstr "``hash`` hash algorithm (default sha1)." @@ -18536,23 +20388,23 @@ msgstr "``ht40-`` - Both 20 MHz and 40 MHz with secondary channel below the prim msgid "``hvc0`` - Xen console" msgstr "``hvc0`` - Xen console" -#: ../../configuration/vpn/site2site_ipsec.rst:25 +#: ../../configuration/vpn/site2site_ipsec.rst:26 msgid "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" msgstr "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" -#: ../../configuration/vpn/site2site_ipsec.rst:101 +#: ../../configuration/vpn/site2site_ipsec.rst:98 msgid "``ike-group`` - IKE group to use for key exchanges;" msgstr "``ike-group`` - IKE group to use for key exchanges;" -#: ../../configuration/vpn/ipsec.rst:82 +#: ../../configuration/vpn/ipsec.rst:84 msgid "``ikev1`` use IKEv1 for Key Exchange;" msgstr "``ikev1`` use IKEv1 for Key Exchange;" -#: ../../configuration/vpn/site2site_ipsec.rst:103 +#: ../../configuration/vpn/site2site_ipsec.rst:100 msgid "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" msgstr "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" -#: ../../configuration/vpn/ipsec.rst:73 +#: ../../configuration/vpn/ipsec.rst:75 msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." @@ -18560,7 +20412,7 @@ msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticat msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" -#: ../../configuration/vpn/ipsec.rst:84 +#: ../../configuration/vpn/ipsec.rst:86 msgid "``ikev2`` use IKEv2 for Key Exchange;" msgstr "``ikev2`` use IKEv2 for Key Exchange;" @@ -18568,23 +20420,27 @@ msgstr "``ikev2`` use IKEv2 for Key Exchange;" msgid "``in``: Ruleset for forwarded packets on an inbound interface" msgstr "``in``: Ruleset for forwarded packets on an inbound interface" -#: ../../configuration/vpn/site2site_ipsec.rst:75 +#: ../../configuration/vpn/site2site_ipsec.rst:72 msgid "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" msgstr "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" -#: ../../configuration/vpn/ipsec.rst:166 +#: ../../configuration/system/option.rst:50 +msgid "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" +msgstr "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" + +#: ../../configuration/vpn/ipsec.rst:170 msgid "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" msgstr "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" -#: ../../configuration/pki/index.rst:148 +#: ../../configuration/pki/index.rst:150 msgid "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." msgstr "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." -#: ../../configuration/policy/route-map.rst:366 +#: ../../configuration/policy/route-map.rst:369 msgid "``internet`` - Well-known communities value 0" msgstr "``internet`` - Well-known communities value 0" -#: ../../configuration/vpn/ipsec.rst:69 +#: ../../configuration/vpn/ipsec.rst:71 msgid "``interval`` keep-alive interval in seconds <2-86400> (default 30);" msgstr "``interval`` keep-alive interval in seconds <2-86400> (default 30);" @@ -18602,7 +20458,7 @@ msgstr "``jump``: jump to another custom chain." msgid "``kernel`` - Kernel routes" msgstr "``kernel`` - Kernel routes" -#: ../../configuration/vpn/ipsec.rst:78 +#: ../../configuration/vpn/ipsec.rst:80 msgid "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" msgstr "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" @@ -18610,7 +20466,11 @@ msgstr "``key-exchange`` which protocol should be used to initialize the connect msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:" -#: ../../configuration/system/option.rst:107 +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + +#: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." @@ -18622,19 +20482,19 @@ msgstr "``least-connection`` Distributes requests to the server with the fewest msgid "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" msgstr "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" -#: ../../configuration/vpn/ipsec.rst:125 +#: ../../configuration/vpn/ipsec.rst:128 msgid "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" msgstr "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" -#: ../../configuration/vpn/ipsec.rst:128 +#: ../../configuration/vpn/ipsec.rst:131 msgid "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" msgstr "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" -#: ../../configuration/vpn/ipsec.rst:131 +#: ../../configuration/vpn/ipsec.rst:134 msgid "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" msgstr "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" -#: ../../configuration/vpn/ipsec.rst:86 +#: ../../configuration/vpn/ipsec.rst:88 msgid "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" @@ -18642,22 +20502,26 @@ msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgid "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" -#: ../../configuration/policy/route-map.rst:373 +#: ../../configuration/policy/route-map.rst:376 msgid "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" msgstr "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" -#: ../../configuration/vpn/site2site_ipsec.rst:107 +#: ../../configuration/vpn/site2site_ipsec.rst:104 msgid "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" msgstr "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" -#: ../../configuration/policy/route-map.rst:363 +#: ../../configuration/policy/route-map.rst:366 msgid "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" msgstr "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" -#: ../../configuration/vpn/site2site_ipsec.rst:31 +#: ../../configuration/vpn/site2site_ipsec.rst:32 msgid "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" msgstr "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" +#: ../../configuration/vpn/site2site_ipsec.rst:50 +msgid "``local-key`` - name of PKI key-pair with local private key" +msgstr "``local-key`` - name of PKI key-pair with local private key" + #: ../../configuration/firewall/general-legacy.rst:753 msgid "``local``: Ruleset for packets destined for this router" msgstr "``local``: Ruleset for packets destined for this router" @@ -18674,7 +20538,7 @@ msgstr "``m`` - Execution interval in minutes" msgid "``main`` Routing table used by VyOS and other interfaces not participating in PBR" msgstr "``main`` Routing table used by VyOS and other interfaces not participating in PBR" -#: ../../configuration/vpn/ipsec.rst:93 +#: ../../configuration/vpn/ipsec.rst:95 msgid "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" msgstr "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" @@ -18682,19 +20546,23 @@ msgstr "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommen msgid "``message``: Full message that has triggered the script." msgstr "``message``: Full message that has triggered the script." +#: ../../configuration/system/option.rst:40 +msgid "``mitigations=off``" +msgstr "``mitigations=off``" + #: ../../configuration/vpn/ipsec.rst:92 msgid "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" msgstr "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" -#: ../../configuration/vpn/site2site_ipsec.rst:35 +#: ../../configuration/vpn/site2site_ipsec.rst:36 msgid "``mode`` - mode for authentication between VyOS and remote peer:" msgstr "``mode`` - mode for authentication between VyOS and remote peer:" -#: ../../configuration/vpn/ipsec.rst:91 +#: ../../configuration/vpn/ipsec.rst:93 msgid "``mode`` IKEv1 Phase 1 Mode Selection:" msgstr "``mode`` IKEv1 Phase 1 Mode Selection:" -#: ../../configuration/vpn/ipsec.rst:136 +#: ../../configuration/vpn/ipsec.rst:139 msgid "``mode`` the type of the connection:" msgstr "``mode`` the type of the connection:" @@ -18758,19 +20626,19 @@ msgstr "``net.ipv6.conf.all.accept_redirects``" msgid "``net.ipv6.conf.all.accept_source_route``" msgstr "``net.ipv6.conf.all.accept_source_route``" -#: ../../configuration/policy/route-map.rst:364 +#: ../../configuration/policy/route-map.rst:367 msgid "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" msgstr "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" -#: ../../configuration/policy/route-map.rst:365 +#: ../../configuration/policy/route-map.rst:368 msgid "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" msgstr "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" -#: ../../configuration/policy/route-map.rst:374 +#: ../../configuration/policy/route-map.rst:377 msgid "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" msgstr "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" -#: ../../configuration/policy/route-map.rst:377 +#: ../../configuration/policy/route-map.rst:380 msgid "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" msgstr "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" @@ -18782,7 +20650,7 @@ msgstr "``no`` disable remote host re-authenticaton during an IKE rekey;" msgid "``none`` - Execution interval in minutes" msgstr "``none`` - Execution interval in minutes" -#: ../../configuration/vpn/site2site_ipsec.rst:85 +#: ../../configuration/vpn/site2site_ipsec.rst:82 msgid "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." msgstr "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." @@ -18798,7 +20666,7 @@ msgstr "``noselect`` marks the server as unused, except for display purposes. Th msgid "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" msgstr "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" -#: ../../configuration/vpn/ipsec.rst:160 +#: ../../configuration/vpn/ipsec.rst:164 msgid "``options``" msgstr "``options``" @@ -18814,11 +20682,19 @@ msgstr "``ospfv3`` - Open Shortest Path First (IPv6) (OSPFv3)" msgid "``out``: Ruleset for forwarded packets on an outbound interface" msgstr "``out``: Ruleset for forwarded packets on an outbound interface" +#: ../../configuration/vpn/site2site_ipsec.rst:54 +msgid "``passphrase`` - local private key passphrase" +msgstr "``passphrase`` - local private key passphrase" + +#: ../../configuration/vpn/site2site_ipsec.rst:67 +msgid "``passphrase`` - private key passphrase, if needed." +msgstr "``passphrase`` - private key passphrase, if needed." + #: ../../configuration/vpn/site2site_ipsec.rst:70 msgid "``password`` - passphrase private key, if needed." msgstr "``password`` - passphrase private key, if needed." -#: ../../configuration/pki/index.rst:163 +#: ../../configuration/pki/index.rst:165 msgid "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." msgstr "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." @@ -18826,7 +20702,7 @@ msgstr "``peer`` is used for the VyOS CLI command to identify the WireGuard peer msgid "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." msgstr "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." -#: ../../configuration/vpn/ipsec.rst:142 +#: ../../configuration/vpn/ipsec.rst:145 msgid "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" msgstr "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" @@ -18835,11 +20711,11 @@ msgid "``pool`` mobilizes persistent client mode association with a number of re msgstr "``pool`` mobilizes persistent client mode association with a number of remote servers." #: ../../configuration/vpn/site2site_ipsec.rst:126 -#: ../../configuration/vpn/site2site_ipsec.rst:136 +#: ../../configuration/vpn/site2site_ipsec.rst:139 msgid "``port`` - define port. Have effect only when used together with ``prefix``;" msgstr "``port`` - define port. Have effect only when used together with ``prefix``;" -#: ../../configuration/vpn/site2site_ipsec.rst:37 +#: ../../configuration/vpn/site2site_ipsec.rst:38 msgid "``pre-shared-secret`` - use predefined shared secret phrase;" msgstr "``pre-shared-secret`` - use predefined shared secret phrase;" @@ -18851,27 +20727,35 @@ msgstr "``prefer`` marks the server as preferred. All other things being equal, msgid "``prefix`` - IP network at local side." msgstr "``prefix`` - IP network at local side." -#: ../../configuration/vpn/site2site_ipsec.rst:138 +#: ../../configuration/vpn/site2site_ipsec.rst:141 msgid "``prefix`` - IP network at remote side." msgstr "``prefix`` - IP network at remote side." -#: ../../configuration/vpn/ipsec.rst:107 +#: ../../configuration/vpn/ipsec.rst:109 msgid "``prf`` pseudo-random function." msgstr "``prf`` pseudo-random function." -#: ../../configuration/vpn/ipsec.rst:151 +#: ../../configuration/vpn/site2site_ipsec.rst:130 +msgid "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" +msgstr "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" + +#: ../../configuration/system/option.rst:51 +msgid "``processor.max_cstate=1`` Limit processor to maximum C-state 1" +msgstr "``processor.max_cstate=1`` Limit processor to maximum C-state 1" + +#: ../../configuration/vpn/ipsec.rst:154 msgid "``proposal`` ESP-group proposal with number <1-65535>:" msgstr "``proposal`` ESP-group proposal with number <1-65535>:" -#: ../../configuration/vpn/ipsec.rst:99 +#: ../../configuration/vpn/ipsec.rst:101 msgid "``proposal`` the list of proposals and their parameters:" msgstr "``proposal`` the list of proposals and their parameters:" -#: ../../configuration/vpn/site2site_ipsec.rst:130 +#: ../../configuration/vpn/site2site_ipsec.rst:133 msgid "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" msgstr "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" -#: ../../configuration/vpn/site2site_ipsec.rst:21 +#: ../../configuration/vpn/site2site_ipsec.rst:22 msgid "``psk`` - Preshared secret key name:" msgstr "``psk`` - Preshared secret key name:" @@ -18890,7 +20774,7 @@ msgstr "``rate``: Number of packets. Default 5." msgid "``reject``: reject the packet." msgstr "``reject``: reject the packet." -#: ../../configuration/vpn/site2site_ipsec.rst:111 +#: ../../configuration/vpn/site2site_ipsec.rst:108 msgid "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." msgstr "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." @@ -18898,10 +20782,18 @@ msgstr "``remote-address`` - remote IP address or hostname for IPSec connection. msgid "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" msgstr "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" -#: ../../configuration/vpn/site2site_ipsec.rst:133 +#: ../../configuration/vpn/site2site_ipsec.rst:52 +msgid "``remote-key`` - name of PKI key-pair with remote public key" +msgstr "``remote-key`` - name of PKI key-pair with remote public key" + +#: ../../configuration/vpn/site2site_ipsec.rst:136 msgid "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" msgstr "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" +#: ../../configuration/vpn/site2site_ipsec.rst:113 +msgid "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" +msgstr "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" + #: ../../configuration/loadbalancing/reverse-proxy.rst:64 msgid "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" msgstr "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" @@ -18910,10 +20802,14 @@ msgstr "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" msgid "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" msgstr "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" -#: ../../configuration/vpn/site2site_ipsec.rst:80 +#: ../../configuration/vpn/site2site_ipsec.rst:77 msgid "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." msgstr "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." +#: ../../configuration/vpn/ipsec.rst:68 +msgid "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" +msgstr "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" + #: ../../configuration/vpn/ipsec.rst:54 #: ../../configuration/vpn/ipsec.rst:67 msgid "``restart`` set action to restart;" @@ -18941,19 +20837,19 @@ msgstr "``round-robin`` - Round-robin policy: Transmit packets in sequential ord msgid "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" msgstr "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" -#: ../../configuration/policy/route-map.rst:369 +#: ../../configuration/policy/route-map.rst:372 msgid "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" msgstr "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" -#: ../../configuration/policy/route-map.rst:371 +#: ../../configuration/policy/route-map.rst:374 msgid "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" msgstr "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" -#: ../../configuration/policy/route-map.rst:370 +#: ../../configuration/policy/route-map.rst:373 msgid "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" msgstr "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" -#: ../../configuration/policy/route-map.rst:372 +#: ../../configuration/policy/route-map.rst:375 msgid "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" msgstr "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" @@ -18961,11 +20857,19 @@ msgstr "``route-filter-v6`` - Well-known communities value ROUTE_FI msgid "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" +#: ../../configuration/vpn/site2site_ipsec.rst:48 +msgid "``rsa`` - options for RSA authentication mode:" +msgstr "``rsa`` - options for RSA authentication mode:" + +#: ../../configuration/vpn/site2site_ipsec.rst:40 +msgid "``rsa`` - use simple shared RSA key." +msgstr "``rsa`` - use simple shared RSA key." + #: ../../configuration/vpn/site2site_ipsec.rst:39 msgid "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" msgstr "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" -#: ../../configuration/vpn/site2site_ipsec.rst:27 +#: ../../configuration/vpn/site2site_ipsec.rst:28 msgid "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" msgstr "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" @@ -18978,10 +20882,13 @@ msgid "``set firewall ipv4 forward filter ...``." msgstr "``set firewall ipv4 forward filter ...``." #: ../../configuration/firewall/index.rst:54 -#: ../../configuration/firewall/index.rst:72 msgid "``set firewall ipv4 input filter ...``." msgstr "``set firewall ipv4 input filter ...``." +#: ../../configuration/firewall/index.rst:72 +msgid "``set firewall ipv4 output filter ...``." +msgstr "``set firewall ipv4 output filter ...``." + #: ../../configuration/firewall/index.rst:63 msgid "``set firewall ipv6 forward filter ...``." msgstr "``set firewall ipv6 forward filter ...``." @@ -19010,19 +20917,19 @@ msgstr "``sonmp`` - Listen for SONMP for Nortel routers/switches" msgid "``source-address`` Distributes requests based on the source IP address of the client" msgstr "``source-address`` Distributes requests based on the source IP address of the client" -#: ../../configuration/system/login.rst:74 +#: ../../configuration/system/login.rst:78 msgid "``ssh-dss``" msgstr "``ssh-dss``" -#: ../../configuration/system/login.rst:75 +#: ../../configuration/system/login.rst:79 msgid "``ssh-ed25519``" msgstr "``ssh-ed25519``" -#: ../../configuration/system/login.rst:49 +#: ../../configuration/system/login.rst:53 msgid "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" msgstr "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" -#: ../../configuration/system/login.rst:76 +#: ../../configuration/system/login.rst:80 msgid "``ssh-rsa``" msgstr "``ssh-rsa``" @@ -19034,6 +20941,10 @@ msgstr "``ssl-fc-sni-end`` SSL frontend match end of connection Server Name" msgid "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" msgstr "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" +#: ../../configuration/vpn/ipsec.rst:54 +msgid "``start`` tries to immediately re-create the CHILD_SA;" +msgstr "``start`` tries to immediately re-create the CHILD_SA;" + #: ../../configuration/policy/route-map.rst:173 msgid "``static`` - Statically configured routes" msgstr "``static`` - Statically configured routes" @@ -19042,6 +20953,18 @@ msgstr "``static`` - Statically configured routes" msgid "``station`` - Connects to another access point" msgstr "``station`` - Connects to another access point" +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" + #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 msgid "``synproxy``: synproxy the packet." @@ -19083,22 +21006,34 @@ msgstr "``test-script``: A user defined script must return 0 to be considered su msgid "``threshold``: ``below`` or ``above`` the specified rate limit." msgstr "``threshold``: ``below`` or ``above`` the specified rate limit." -#: ../../configuration/system/option.rst:97 +#: ../../configuration/system/option.rst:127 msgid "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." msgstr "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." -#: ../../configuration/vpn/ipsec.rst:71 +#: ../../configuration/vpn/ipsec.rst:73 msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." + #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." -#: ../../configuration/vpn/ipsec.rst:140 +#: ../../configuration/vpn/ipsec.rst:143 msgid "``transport`` transport mode;" msgstr "``transport`` transport mode;" +#: ../../configuration/vpn/ipsec.rst:63 +msgid "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" +msgstr "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" + +#: ../../configuration/vpn/ipsec.rst:52 +msgid "``trap`` installs a trap policy for the CHILD_SA;" +msgstr "``trap`` installs a trap policy for the CHILD_SA;" + #: ../../configuration/loadbalancing/wan.rst:179 msgid "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" msgstr "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" @@ -19115,7 +21050,7 @@ msgstr "``ttyUSBX`` - USB Serial device name" msgid "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" msgstr "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" -#: ../../configuration/vpn/ipsec.rst:138 +#: ../../configuration/vpn/ipsec.rst:141 msgid "``tunnel`` tunnel mode (default);" msgstr "``tunnel`` tunnel mode (default);" @@ -19123,11 +21058,11 @@ msgstr "``tunnel`` tunnel mode (default);" msgid "``type``: Specify the type of test. type can be ping, ttl or a user defined script" msgstr "``type``: Specify the type of test. type can be ping, ttl or a user defined script" -#: ../../configuration/vpn/site2site_ipsec.rst:51 +#: ../../configuration/vpn/site2site_ipsec.rst:56 msgid "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" msgstr "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" -#: ../../configuration/vpn/site2site_ipsec.rst:152 +#: ../../configuration/vpn/site2site_ipsec.rst:155 msgid "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." msgstr "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." @@ -19135,7 +21070,7 @@ msgstr "``virtual-address`` - Defines a virtual IP address which is requested by msgid "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." msgstr "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." -#: ../../configuration/vpn/ipsec.rst:168 +#: ../../configuration/vpn/ipsec.rst:172 msgid "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." @@ -19143,11 +21078,27 @@ msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated l msgid "``vnc`` - Virtual Network Control (VNC)" msgstr "``vnc`` - Virtual Network Control (VNC)" -#: ../../configuration/vpn/site2site_ipsec.rst:140 +#: ../../configuration/vpn/site2site_ipsec.rst:143 msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" -#: ../../configuration/vpn/site2site_ipsec.rst:54 +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + +#: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" msgstr "``x509`` - options for x509 authentication mode:" @@ -19163,10 +21114,26 @@ msgstr "``xor-hash`` - XOR policy: Transmit based on the selected transmit hash msgid "``yes`` enable remote host re-authentication during an IKE rekey;" msgstr "``yes`` enable remote host re-authentication during an IKE rekey;" -#: ../../configuration/system/option.rst:39 +#: ../../configuration/service/ntp.rst:90 +msgid "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." +msgstr "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." + +#: ../../configuration/service/ntp.rst:94 +msgid "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." +msgstr "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." + +#: ../../configuration/system/option.rst:69 msgid "`source-address` and `source-interface` can not be used at the same time." msgstr "`source-address` and `source-interface` can not be used at the same time." +#: ../../configuration/service/ntp.rst:102 +msgid "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." +msgstr "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." + +#: ../../configuration/service/ntp.rst:107 +msgid "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" +msgstr "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" + #: ../../configuration/protocols/rpki.rst:12 msgid "`tweet by EvilMog`_, 2020-02-21" msgstr "`tweet by EvilMog`_, 2020-02-21" @@ -19194,7 +21161,7 @@ msgstr "alert" msgid "all" msgstr "all" -#: ../../configuration/vrf/index.rst:428 +#: ../../configuration/vrf/index.rst:447 msgid "an RD / RTLIST" msgstr "an RD / RTLIST" @@ -19234,23 +21201,23 @@ msgstr "bgpd" msgid "bonding" msgstr "bonding" -#: ../../configuration/service/dhcp-server.rst:305 +#: ../../configuration/service/dhcp-server.rst:361 msgid "boot-size" msgstr "boot-size" -#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:354 msgid "bootfile-name" msgstr "bootfile-name" -#: ../../configuration/service/dhcp-server.rst:300 +#: ../../configuration/service/dhcp-server.rst:356 msgid "bootfile-name, filename" msgstr "bootfile-name, filename" -#: ../../configuration/service/dhcp-server.rst:288 +#: ../../configuration/service/dhcp-server.rst:344 msgid "bootfile-server" msgstr "bootfile-server" -#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:359 msgid "bootfile-size" msgstr "bootfile-size" @@ -19258,7 +21225,7 @@ msgstr "bootfile-size" msgid "bridge" msgstr "bridge" -#: ../../configuration/service/dhcp-server.rst:236 +#: ../../configuration/service/dhcp-server.rst:292 msgid "client-prefix-length" msgstr "client-prefix-length" @@ -19286,15 +21253,19 @@ msgstr "cron" msgid "daemon" msgstr "daemon" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" msgstr "ddclient_ has another way to determine the WAN IP address. This is controlled by:" -#: ../../configuration/service/dns.rst:218 +#: ../../configuration/service/dns.rst:232 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -#: ../../configuration/service/dns.rst:413 +#: ../../configuration/service/dns.rst:299 +msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." +msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." + +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in `<pattern>`." msgstr "ddclient_ will skip any address located before the string set in `<pattern>`." @@ -19306,7 +21277,7 @@ msgstr "debug" msgid "decrement-lifetime" msgstr "decrement-lifetime" -#: ../../configuration/service/dhcp-server.rst:335 +#: ../../configuration/service/dhcp-server.rst:391 msgid "default-lease-time, max-lease-time" msgstr "default-lease-time, max-lease-time" @@ -19318,7 +21289,7 @@ msgstr "default-lifetime" msgid "default-preference" msgstr "default-preference" -#: ../../configuration/service/dhcp-server.rst:248 +#: ../../configuration/service/dhcp-server.rst:304 msgid "default-router" msgstr "default-router" @@ -19330,15 +21301,15 @@ msgstr "default min-threshold" msgid "deprecate-prefix" msgstr "deprecate-prefix" -#: ../../configuration/highavailability/index.rst:354 +#: ../../configuration/highavailability/index.rst:364 msgid "destination-hashing" msgstr "destination-hashing" -#: ../../configuration/service/dhcp-server.rst:285 +#: ../../configuration/service/dhcp-server.rst:341 msgid "dhcp-server-identifier" msgstr "dhcp-server-identifier" -#: ../../configuration/highavailability/index.rst:364 +#: ../../configuration/highavailability/index.rst:374 msgid "direct" msgstr "direct" @@ -19356,17 +21327,17 @@ msgstr "disable: No source validation" msgid "dnssl" msgstr "dnssl" -#: ../../configuration/service/dhcp-server.rst:263 -#: ../../configuration/service/dhcp-server.rst:265 +#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:321 msgid "domain-name" msgstr "domain-name" -#: ../../configuration/service/dhcp-server.rst:260 +#: ../../configuration/service/dhcp-server.rst:316 msgid "domain-name-servers" msgstr "domain-name-servers" -#: ../../configuration/service/dhcp-server.rst:318 -#: ../../configuration/service/dhcp-server.rst:320 +#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:376 msgid "domain-search" msgstr "domain-search" @@ -19402,11 +21373,11 @@ msgstr "ethernet" msgid "exact-match: exact match of the network prefixes." msgstr "exact-match: exact match of the network prefixes." -#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:399 msgid "exclude" msgstr "exclude" -#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:404 msgid "failover" msgstr "failover" @@ -19418,8 +21389,8 @@ msgstr "fast: Request partner to transmit LACPDUs every 1 second" msgid "file <file name>" msgstr "file <file name>" -#: ../../configuration/protocols/bgp.rst:826 -#: ../../configuration/protocols/bgp.rst:832 +#: ../../configuration/protocols/bgp.rst:848 +#: ../../configuration/protocols/bgp.rst:854 msgid "filter-list" msgstr "filter-list" @@ -19431,6 +21402,10 @@ msgstr "ftp" msgid "full - always use full-duplex" msgstr "full - always use full-duplex" +#: ../../configuration/service/router-advert.rst:16 +msgid "geneve" +msgstr "geneve" + #: ../../configuration/interfaces/ethernet.rst:32 msgid "half - always use half-duplex" msgstr "half - always use half-duplex" @@ -19443,7 +21418,7 @@ msgstr "hop-limit" msgid "host: single host IP address to match." msgstr "host: single host IP address to match." -#: ../../configuration/system/option.rst:89 +#: ../../configuration/system/option.rst:119 msgid "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" msgstr "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" @@ -19467,7 +21442,7 @@ msgstr "info" msgid "interval" msgstr "interval" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" msgstr "invalid" @@ -19475,8 +21450,8 @@ msgstr "invalid" msgid "inverse-match: network/netmask to match (requires network be defined)." msgstr "inverse-match: network/netmask to match (requires network be defined)." -#: ../../configuration/service/dhcp-server.rst:268 -#: ../../configuration/service/dhcp-server.rst:270 +#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:326 msgid "ip-forwarding" msgstr "ip-forwarding" @@ -19484,10 +21459,18 @@ msgstr "ip-forwarding" msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," msgstr "it can be used with any NIC," +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" + #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." @@ -19496,7 +21479,7 @@ msgstr "it does not increase hardware device interrupt rate (although it does in msgid "kern" msgstr "kern" -#: ../../configuration/service/router-advert.rst:16 +#: ../../configuration/service/router-advert.rst:17 msgid "l2tpv3" msgstr "l2tpv3" @@ -19504,27 +21487,27 @@ msgstr "l2tpv3" msgid "ldpd" msgstr "ldpd" -#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:389 msgid "lease" msgstr "lease" -#: ../../configuration/highavailability/index.rst:351 +#: ../../configuration/highavailability/index.rst:361 msgid "least-connection" msgstr "least-connection" -#: ../../configuration/vpn/site2site_ipsec.rst:275 +#: ../../configuration/vpn/site2site_ipsec.rst:278 msgid "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" msgstr "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" -#: ../../configuration/vpn/site2site_ipsec.rst:167 +#: ../../configuration/vpn/site2site_ipsec.rst:170 msgid "left local_ip: `198.51.100.3` # server side WAN IP" msgstr "left local_ip: `198.51.100.3` # server side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:276 +#: ../../configuration/vpn/site2site_ipsec.rst:279 msgid "left public_ip:172.18.201.10" msgstr "left public_ip:172.18.201.10" -#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:168 msgid "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" msgstr "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" @@ -19592,7 +21575,7 @@ msgstr "local use 5 (local5)" msgid "local use 7 (local7)" msgstr "local use 7 (local7)" -#: ../../configuration/highavailability/index.rst:355 +#: ../../configuration/highavailability/index.rst:365 msgid "locality-based-least-connection" msgstr "locality-based-least-connection" @@ -19666,12 +21649,12 @@ msgstr "more information related IGP - :ref:`routing-isis`" msgid "more information related IGP - :ref:`routing-ospf`" msgstr "more information related IGP - :ref:`routing-ospf`" -#: ../../configuration/service/dhcp-server.rst:258 +#: ../../configuration/service/dhcp-server.rst:314 #: ../../configuration/service/router-advert.rst:1 msgid "name-server" msgstr "name-server" -#: ../../configuration/service/dhcp-server.rst:280 +#: ../../configuration/service/dhcp-server.rst:336 msgid "netbios-name-servers" msgstr "netbios-name-servers" @@ -19687,7 +21670,7 @@ msgstr "network: network/netmask to match (requires inverse-match be defined) BU msgid "news" msgstr "news" -#: ../../configuration/service/dhcp-server.rst:290 +#: ../../configuration/service/dhcp-server.rst:346 msgid "next-server" msgstr "next-server" @@ -19699,7 +21682,7 @@ msgstr "no-autonomous-flag" msgid "no-on-link-flag" msgstr "no-on-link-flag" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" msgstr "notfound" @@ -19711,11 +21694,11 @@ msgstr "notice" msgid "ntp" msgstr "ntp" -#: ../../configuration/service/dhcp-server.rst:273 +#: ../../configuration/service/dhcp-server.rst:329 msgid "ntp-server" msgstr "ntp-server" -#: ../../configuration/service/dhcp-server.rst:275 +#: ../../configuration/service/dhcp-server.rst:331 msgid "ntp-servers" msgstr "ntp-servers" @@ -19723,7 +21706,7 @@ msgstr "ntp-servers" msgid "one rule with a LAN (inbound-interface) and the WAN (interface)." msgstr "one rule with a LAN (inbound-interface) and the WAN (interface)." -#: ../../configuration/service/router-advert.rst:17 +#: ../../configuration/service/router-advert.rst:18 msgid "openvpn" msgstr "openvpn" @@ -19763,8 +21746,8 @@ msgstr "policy extcommunity-list" msgid "policy large-community-list" msgstr "policy large-community-list" -#: ../../configuration/service/dhcp-server.rst:313 -#: ../../configuration/service/dhcp-server.rst:315 +#: ../../configuration/service/dhcp-server.rst:369 +#: ../../configuration/service/dhcp-server.rst:371 msgid "pop-server" msgstr "pop-server" @@ -19772,17 +21755,17 @@ msgstr "pop-server" msgid "preferred-lifetime" msgstr "preferred-lifetime" -#: ../../configuration/protocols/bgp.rst:827 -#: ../../configuration/protocols/bgp.rst:831 +#: ../../configuration/protocols/bgp.rst:849 +#: ../../configuration/protocols/bgp.rst:853 msgid "prefix-list, distribute-list" msgstr "prefix-list, distribute-list" -#: ../../configuration/service/router-advert.rst:18 +#: ../../configuration/service/router-advert.rst:19 msgid "pseudo-ethernet" msgstr "pseudo-ethernet" -#: ../../configuration/service/dhcp-server.rst:338 -#: ../../configuration/service/dhcp-server.rst:340 +#: ../../configuration/service/dhcp-server.rst:394 +#: ../../configuration/service/dhcp-server.rst:396 msgid "range" msgstr "range" @@ -19790,7 +21773,7 @@ msgstr "range" msgid "reachable-time" msgstr "reachable-time" -#: ../../configuration/system/ip.rst:82 +#: ../../configuration/system/ip.rst:95 msgid "reset commands" msgstr "reset commands" @@ -19798,7 +21781,7 @@ msgstr "reset commands" msgid "retrans-timer" msgstr "retrans-timer" -#: ../../configuration/service/dhcp-server.rst:325 +#: ../../configuration/service/dhcp-server.rst:381 msgid "rfc3442-static-route, windows-static-route" msgstr "rfc3442-static-route, windows-static-route" @@ -19806,15 +21789,15 @@ msgstr "rfc3442-static-route, windows-static-route" msgid "rfc3768-compatibility" msgstr "rfc3768-compatibility" -#: ../../configuration/vpn/site2site_ipsec.rst:277 +#: ../../configuration/vpn/site2site_ipsec.rst:280 msgid "right local_ip: 172.18.202.10 # right side WAN IP" msgstr "right local_ip: 172.18.202.10 # right side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:169 +#: ../../configuration/vpn/site2site_ipsec.rst:172 msgid "right local_ip: `203.0.113.2` # remote office side WAN IP" msgstr "right local_ip: `203.0.113.2` # remote office side WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:168 +#: ../../configuration/vpn/site2site_ipsec.rst:171 msgid "right subnet: `10.0.0.0/24` site2,remote office side" msgstr "right subnet: `10.0.0.0/24` site2,remote office side" @@ -19822,16 +21805,16 @@ msgstr "right subnet: `10.0.0.0/24` site2,remote office side" msgid "ripd" msgstr "ripd" -#: ../../configuration/highavailability/index.rst:349 +#: ../../configuration/highavailability/index.rst:359 msgid "round-robin" msgstr "round-robin" -#: ../../configuration/protocols/bgp.rst:825 -#: ../../configuration/protocols/bgp.rst:833 +#: ../../configuration/protocols/bgp.rst:847 +#: ../../configuration/protocols/bgp.rst:855 msgid "route-map" msgstr "route-map" -#: ../../configuration/service/dhcp-server.rst:250 +#: ../../configuration/service/dhcp-server.rst:306 msgid "routers" msgstr "routers" @@ -19848,7 +21831,7 @@ msgstr "sFlow is a technology that enables monitoring of network traffic by send msgid "security" msgstr "security" -#: ../../configuration/service/dhcp-server.rst:283 +#: ../../configuration/service/dhcp-server.rst:339 msgid "server-identifier" msgstr "server-identifier" @@ -19865,11 +21848,11 @@ msgstr "set a destination and/or source address. Accepted input:" msgid "sha256 Hashes" msgstr "sha256 Hashes" -#: ../../configuration/system/ip.rst:50 +#: ../../configuration/system/ip.rst:63 msgid "show commands" msgstr "show commands" -#: ../../configuration/service/dhcp-server.rst:289 +#: ../../configuration/service/dhcp-server.rst:345 msgid "siaddr" msgstr "siaddr" @@ -19877,16 +21860,20 @@ msgstr "siaddr" msgid "slow: Request partner to transmit LACPDUs every 30 seconds" msgstr "slow: Request partner to transmit LACPDUs every 30 seconds" -#: ../../configuration/service/dhcp-server.rst:308 -#: ../../configuration/service/dhcp-server.rst:310 +#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:366 msgid "smtp-server" msgstr "smtp-server" +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" + #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," msgstr "software filters can easily be added to hash over new protocols," -#: ../../configuration/highavailability/index.rst:353 +#: ../../configuration/highavailability/index.rst:363 msgid "source-hashing" msgstr "source-hashing" @@ -19898,11 +21885,11 @@ msgstr "spoke01-spoke04" msgid "spoke05" msgstr "spoke05" -#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:409 msgid "static-mapping" msgstr "static-mapping" -#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:379 msgid "static-route" msgstr "static-route" @@ -19912,7 +21899,7 @@ msgstr "static-route" msgid "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." msgstr "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." -#: ../../configuration/service/dhcp-server.rst:238 +#: ../../configuration/service/dhcp-server.rst:294 msgid "subnet-mask" msgstr "subnet-mask" @@ -19928,8 +21915,8 @@ msgstr "tail" msgid "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." msgstr "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." -#: ../../configuration/service/dhcp-server.rst:293 -#: ../../configuration/service/dhcp-server.rst:295 +#: ../../configuration/service/dhcp-server.rst:349 +#: ../../configuration/service/dhcp-server.rst:351 msgid "tftp-server-name" msgstr "tftp-server-name" @@ -19938,21 +21925,21 @@ msgstr "tftp-server-name" msgid "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." msgstr "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." -#: ../../configuration/service/dhcp-server.rst:242 -#: ../../configuration/service/dhcp-server.rst:244 +#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:300 msgid "time-offset" msgstr "time-offset" -#: ../../configuration/service/dhcp-server.rst:253 +#: ../../configuration/service/dhcp-server.rst:309 msgid "time-server" msgstr "time-server" -#: ../../configuration/service/dhcp-server.rst:255 +#: ../../configuration/service/dhcp-server.rst:311 msgid "time-servers" msgstr "time-servers" -#: ../../configuration/highavailability/index.rst:365 -#: ../../configuration/service/router-advert.rst:19 +#: ../../configuration/highavailability/index.rst:375 +#: ../../configuration/service/router-advert.rst:20 msgid "tunnel" msgstr "tunnel" @@ -19972,7 +21959,7 @@ msgstr "user" msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" msgstr "valid" @@ -19984,7 +21971,7 @@ msgstr "valid-lifetime" msgid "veth interfaces need to be created in pairs - it's called the peer name" msgstr "veth interfaces need to be created in pairs - it's called the peer name" -#: ../../configuration/service/router-advert.rst:20 +#: ../../configuration/service/router-advert.rst:21 msgid "vxlan" msgstr "vxlan" @@ -19996,11 +21983,11 @@ msgstr "warning" msgid "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." msgstr "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." -#: ../../configuration/highavailability/index.rst:352 +#: ../../configuration/highavailability/index.rst:362 msgid "weighted-least-connection" msgstr "weighted-least-connection" -#: ../../configuration/highavailability/index.rst:350 +#: ../../configuration/highavailability/index.rst:360 msgid "weighted-round-robin" msgstr "weighted-round-robin" @@ -20008,15 +21995,15 @@ msgstr "weighted-round-robin" msgid "while a *byte* is written as a single **b**." msgstr "while a *byte* is written as a single **b**." -#: ../../configuration/service/dhcp-server.rst:278 +#: ../../configuration/service/dhcp-server.rst:334 msgid "wins-server" msgstr "wins-server" -#: ../../configuration/service/router-advert.rst:21 +#: ../../configuration/service/router-advert.rst:22 msgid "wireguard" msgstr "wireguard" -#: ../../configuration/service/router-advert.rst:22 +#: ../../configuration/service/router-advert.rst:23 msgid "wireless" msgstr "wireless" @@ -20024,15 +22011,15 @@ msgstr "wireless" msgid "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." msgstr "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." -#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:384 msgid "wpad-url" msgstr "wpad-url" -#: ../../configuration/service/dhcp-server.rst:330 +#: ../../configuration/service/dhcp-server.rst:386 msgid "wpad-url, wpad-url code 252 = text" msgstr "wpad-url, wpad-url code 252 = text" -#: ../../configuration/service/router-advert.rst:23 +#: ../../configuration/service/router-advert.rst:24 msgid "wwan" msgstr "wwan" diff --git a/docs/_locale/pt/contributing.pot b/docs/_locale/pt/contributing.pot index b804fb90..d7f2ae4c 100644 --- a/docs/_locale/pt/contributing.pot +++ b/docs/_locale/pt/contributing.pot @@ -72,6 +72,18 @@ msgstr "A good approach for writing commit messages is actually to have a look a msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." msgstr "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." + #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" msgstr "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" @@ -93,7 +105,7 @@ msgstr "Acronyms also **must** be capitalized to visually distinguish them from msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" msgstr "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" msgstr "Add one or more IP addresses" @@ -155,6 +167,14 @@ msgstr "Any \"modified\" package may refer to an altered version of e.g. vyos-1x msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" + #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." msgstr "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." @@ -207,6 +227,10 @@ msgstr "Bad: radius (unless it's about the distance between a center of a circle msgid "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." msgstr "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +#: ../../contributing/debugging.rst:160 +msgid "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +msgstr "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." + #: ../../contributing/debugging.rst:170 msgid "Boot Timing" msgstr "Boot Timing" @@ -215,6 +239,10 @@ msgstr "Boot Timing" msgid "Bug Report/Issue" msgstr "Bug Report/Issue" +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." + #: ../../contributing/build-vyos.rst:825 msgid "Build" msgstr "Build" @@ -299,7 +327,7 @@ msgstr "Command definitions are purely declarative, and cannot contain any logic msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." msgstr "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" msgstr "Config Load Tests" @@ -327,7 +355,7 @@ msgstr "Continuous Integration" msgid "Customize" msgstr "Customize" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" msgstr "DHCP client and DHCPv6 prefix delegation" @@ -436,7 +464,7 @@ msgid "Every change set must be consistent (self containing)! Do not fix multipl msgstr "Every change set must be consistent (self containing)! Do not fix multiple bugs in a single commit. If you already worked on multiple fixes in the same file use `git add --patch` to only add the parts related to the one issue into your upcoming commit." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" msgstr "Example:" @@ -469,6 +497,14 @@ msgstr "FRR" msgid "Feature Request" msgstr "Feature Request" +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." + #: ../../contributing/build-vyos.rst:600 msgid "Firmware" msgstr "Firmware" @@ -574,11 +610,15 @@ msgstr "Horrible: \"Tcp connection timeout\"" msgid "Horrible: \"frobnication algorithm.\"" msgstr "Horrible: \"frobnication algorithm.\"" -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" msgstr "How can we reproduce this Bug?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" msgstr "IP and IPv6 options" @@ -602,14 +642,30 @@ msgstr "If a verb is essential, keep it. For example, in the help text of ``set msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" msgstr "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." + #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." + #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." + #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." @@ -622,7 +678,7 @@ msgstr "In a big system, such as VyOS, that is comprised of multiple components, msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." msgstr "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." @@ -686,10 +742,14 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" msgstr "Interface based tests" +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" + #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" msgstr "Issues/Feature requests" @@ -702,6 +762,10 @@ msgstr "Issues or bugs are found in any software project. VyOS is not an excepti msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." + #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." @@ -758,7 +822,7 @@ msgstr "Linux Kernel" msgid "Live System" msgstr "Live System" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" msgstr "MTU size" @@ -766,11 +830,11 @@ msgstr "MTU size" msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" msgstr "Manual Smoketest Run" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" msgstr "Manual config load test" @@ -847,7 +911,7 @@ msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` t msgid "Old concept/syntax" msgstr "Old concept/syntax" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." @@ -859,7 +923,7 @@ msgstr "Once you have the required dependencies installed, you may proceed with msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own." @@ -884,6 +948,10 @@ msgid "Our StrongSWAN build differs from the upstream:" msgstr "Our StrongSWAN build differs from the upstream:" #: ../../contributing/testing.rst:20 +msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." +msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." + +#: ../../contributing/testing.rst:20 msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." @@ -895,7 +963,7 @@ msgstr "Our code is split into several modules. VyOS is composed of multiple ind msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." @@ -924,11 +992,15 @@ msgstr "Please submit your patches using the well-known GitHub pull-request agai msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." -#: ../../contributing/testing.rst:104 +#: ../../contributing/development.rst:254 +msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." +msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." + +#: ../../contributing/testing.rst:107 msgid "Port description" msgstr "Port description" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" msgstr "Port disable" @@ -952,7 +1024,11 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" msgstr "Provide as much information as you can" @@ -984,7 +1060,7 @@ msgstr "Rationale: this seems to be the unwritten standard in network device CLI msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" msgstr "Report a Bug" @@ -1017,6 +1093,10 @@ msgstr "Smoketests executes predefined VyOS CLI commands and checks if the desir msgid "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." msgstr "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +#: ../../contributing/testing.rst:45 +msgid "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +msgstr "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." + #: ../../contributing/build-vyos.rst:202 msgid "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." @@ -1025,7 +1105,7 @@ msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which ver msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." @@ -1061,6 +1141,14 @@ msgstr "Suppose you want to make a change in the webproxy script but yet you do msgid "System Startup" msgstr "System Startup" +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." + #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." @@ -1121,11 +1209,15 @@ msgstr "The ``verify()`` function takes your internal representation of the conf msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." + #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" @@ -1145,7 +1237,7 @@ msgstr "The default template processor for VyOS code is Jinja2_." msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." @@ -1185,7 +1277,7 @@ msgstr "The most obvious reasons could be:" msgid "The original repo is at https://github.com/dmbaturin/hvinfo" msgstr "The original repo is at https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." @@ -1198,6 +1290,10 @@ msgid "The package ends up in deb_dist dir." msgstr "The package ends up in deb_dist dir." #: ../../contributing/debugging.rst:148 +msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" +msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" + +#: ../../contributing/debugging.rst:148 msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" @@ -1245,6 +1341,10 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." + #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" @@ -1261,6 +1361,10 @@ msgstr "This chapter lists those exceptions and gives you a brief overview what msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" + #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" @@ -1285,11 +1389,11 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" msgstr "Those common tests consists out of:" @@ -1314,10 +1418,18 @@ msgid "To debug issues in priorities or to see what's going on in the background msgstr "To debug issues in priorities or to see what's going on in the background you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution order of the scripts." #: ../../contributing/build-vyos.rst:373 +msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" +msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" + +#: ../../contributing/build-vyos.rst:373 msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" #: ../../contributing/debugging.rst:182 +msgid "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" +msgstr "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" + +#: ../../contributing/debugging.rst:182 msgid "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" msgstr "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" @@ -1325,6 +1437,10 @@ msgstr "To enable boot time graphing change the Kernel commandline and add the f msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." + #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." @@ -1385,7 +1501,7 @@ msgstr "Useful commands are:" msgid "VIF (incl. VIF-S/VIF-C)" msgstr "VIF (incl. VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLANs (QinQ and regular 802.1q)" @@ -1409,6 +1525,10 @@ msgstr "Virtualization Platforms" msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." +#: ../../contributing/debugging.rst:190 +msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." +msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." + #: ../../contributing/build-vyos.rst:168 msgid "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." msgstr "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." @@ -1425,6 +1545,10 @@ msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. O msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" + #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." @@ -1441,6 +1565,10 @@ msgstr "We now need to mount some required, volatile filesystems" msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" + #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" @@ -1485,6 +1613,10 @@ msgstr "When you are able to verify that it is actually a bug, spend some time t msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +#: ../../contributing/testing.rst:112 +msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." + #: ../../contributing/issues-features.rst:21 msgid "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." msgstr "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." @@ -1493,7 +1625,7 @@ msgstr "When you believe you have found a bug, it is always a good idea to verif msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" msgstr "Which version of VyOS are you using? ``run show version``" @@ -1538,6 +1670,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." + #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1546,10 +1682,27 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" + #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + +#: ../../contributing/debugging.rst:166 +msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." + #: ../../contributing/development.rst:146 msgid "You then can proceed with cloning your fork or add a new remote to your local repository:" msgstr "You then can proceed with cloning your fork or add a new remote to your local repository:" @@ -1558,7 +1711,7 @@ msgstr "You then can proceed with cloning your fork or add a new remote to your msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." @@ -1666,6 +1819,10 @@ msgstr "commit:expression:" msgid "contine execution using ``cont``" msgstr "contine execution using ``cont``" +#: ../../contributing/debugging.rst:128 +msgid "continue execution using ``cont``" +msgstr "continue execution using ``cont``" + #: ../../contributing/development.rst:675 msgid "default:" msgstr "default:" diff --git a/docs/_locale/pt/copyright.pot b/docs/_locale/pt/copyright.pot index 6f47ee66..a88566e9 100644 --- a/docs/_locale/pt/copyright.pot +++ b/docs/_locale/pt/copyright.pot @@ -13,6 +13,10 @@ msgid "Copyright Notice" msgstr "Copyright Notice" #: ../../copyright.md:3 +msgid "Copyright (C) 2018-2023 VyOS maintainers and contributors" +msgstr "Copyright (C) 2018-2023 VyOS maintainers and contributors" + +#: ../../copyright.md:3 msgid "Copyright (C) 2018-2024 VyOS maintainers and contributors" msgstr "Copyright (C) 2018-2024 VyOS maintainers and contributors" diff --git a/docs/_locale/pt/documentation.pot b/docs/_locale/pt/documentation.pot index 602471a4..2a96e024 100644 --- a/docs/_locale/pt/documentation.pot +++ b/docs/_locale/pt/documentation.pot @@ -8,27 +8,47 @@ msgstr "" "Language: pt\n" "Plural-Forms: nplurals=2; plural=(n>=0 && n<=1) ? 0 : 1;\n" -#: ../../documentation.rst:239 +#: ../../documentation.rst:216 msgid "16bit ASN: ``64496 - 64511``" msgstr "16bit ASN: ``64496 - 64511``" -#: ../../documentation.rst:240 +#: ../../documentation.rst:84 +msgid "1. Theoretical information" +msgstr "1. Theoretical information" + +#: ../../documentation.rst:92 +msgid "2. Configuration description" +msgstr "2. Configuration description" + +#: ../../documentation.rst:217 msgid "32bit ASN: ``65536 - 65551``" msgstr "32bit ASN: ``65536 - 65551``" -#: ../../documentation.rst:182 +#: ../../documentation.rst:99 +msgid "3. Configuration examples" +msgstr "3. Configuration examples" + +#: ../../documentation.rst:105 +msgid "4. Known issues" +msgstr "4. Known issues" + +#: ../../documentation.rst:113 +msgid "5. Debugging" +msgstr "5. Debugging" + +#: ../../documentation.rst:159 msgid "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." msgstr "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." -#: ../../documentation.rst:103 +#: ../../documentation.rst:408 msgid "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." msgstr "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." -#: ../../documentation.rst:229 +#: ../../documentation.rst:206 msgid "Address space" msgstr "Address space" -#: ../../documentation.rst:390 +#: ../../documentation.rst:58 msgid "All RST files must follow the same TOC Level syntax and have to start with" msgstr "All RST files must follow the same TOC Level syntax and have to start with" @@ -36,7 +56,7 @@ msgstr "All RST files must follow the same TOC Level syntax and have to start wi msgid "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." msgstr "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." -#: ../../documentation.rst:53 +#: ../../documentation.rst:51 msgid "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." msgstr "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." @@ -48,23 +68,23 @@ msgstr "Anything else" msgid "Anything else that is not a configuration or an operation command has no predefined structure." msgstr "Anything else that is not a configuration or an operation command has no predefined structure." -#: ../../documentation.rst:257 +#: ../../documentation.rst:234 msgid "Autolinter" msgstr "Autolinter" -#: ../../documentation.rst:94 +#: ../../documentation.rst:399 msgid "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." msgstr "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." -#: ../../documentation.rst:123 +#: ../../documentation.rst:428 msgid "Check your configured remote repositories:" msgstr "Check your configured remote repositories:" -#: ../../documentation.rst:78 +#: ../../documentation.rst:383 msgid "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" msgstr "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" -#: ../../documentation.rst:107 +#: ../../documentation.rst:412 msgid "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." msgstr "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." @@ -72,55 +92,67 @@ msgstr "Commit your changes with the message, ``$ git commit -m \"<commit messag msgid "Configuration mode pages" msgstr "Configuration mode pages" -#: ../../documentation.rst:84 +#: ../../documentation.rst:389 msgid "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" msgstr "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" -#: ../../documentation.rst:180 +#: ../../documentation.rst:157 msgid "Cross-References" msgstr "Cross-References" -#: ../../documentation.rst:268 +#: ../../documentation.rst:245 msgid "Custom Sphinx-doc Markup" msgstr "Custom Sphinx-doc Markup" -#: ../../documentation.rst:270 +#: ../../documentation.rst:247 msgid "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." msgstr "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." -#: ../../documentation.rst:45 +#: ../../documentation.rst:94 +msgid "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." +msgstr "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." + +#: ../../documentation.rst:115 +msgid "Described procedures for debugging a service:" +msgstr "Described procedures for debugging a service:" + +#: ../../documentation.rst:43 msgid "Don't forget to update ``index.rst`` when adding a new node." msgstr "Don't forget to update ``index.rst`` when adding a new node." -#: ../../documentation.rst:259 +#: ../../documentation.rst:236 msgid "Each GitHub pull request is automatically linted to check the address space and line length." msgstr "Each GitHub pull request is automatically linted to check the address space and line length." -#: ../../documentation.rst:252 +#: ../../documentation.rst:81 +msgid "Each page must contain the following parts:" +msgstr "Each page must contain the following parts:" + +#: ../../documentation.rst:229 msgid "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." msgstr "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." -#: ../../documentation.rst:292 +#: ../../documentation.rst:269 msgid "For an inline configuration level command, use ``:cfgcmd:``" msgstr "For an inline configuration level command, use ``:cfgcmd:``" -#: ../../documentation.rst:328 +#: ../../documentation.rst:305 msgid "For an inline operational level command, use ``:opcmd:``" msgstr "For an inline operational level command, use ``:opcmd:``" -#: ../../documentation.rst:186 +#: ../../documentation.rst:163 msgid "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." msgstr "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." -#: ../../documentation.rst:405 +#: ../../documentation.rst:70 msgid "For example:" msgstr "For example:" -#: ../../documentation.rst:76 +#: ../../documentation.rst:381 msgid "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" msgstr "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" -#: ../../documentation.rst:58 +#: ../../documentation.rst:363 msgid "Forking Workflow" msgstr "Forking Workflow" @@ -128,6 +160,10 @@ msgstr "Forking Workflow" msgid "Formating and Sphinxmarkup" msgstr "Formating and Sphinxmarkup" +#: ../../documentation.rst:127 +msgid "Formatting and Sphinxmarkup" +msgstr "Formatting and Sphinxmarkup" + #: ../../documentation.rst:432 msgid "General concepts for troubleshooting and detailed process descriptions belong here." msgstr "General concepts for troubleshooting and detailed process descriptions belong here." @@ -140,7 +176,11 @@ msgstr "Guidelines" msgid "If there some troubleshooting guides related to the commands. Explain it in the next optional part." msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part." -#: ../../documentation.rst:143 +#: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" @@ -152,43 +192,43 @@ msgstr "If you are willing to contribute to our documentation this is the defini msgid "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." msgstr "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." -#: ../../documentation.rst:417 +#: ../../documentation.rst:75 msgid "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." msgstr "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." -#: ../../documentation.rst:50 +#: ../../documentation.rst:48 msgid "Indent with two spaces." msgstr "Indent with two spaces." -#: ../../documentation.rst:81 +#: ../../documentation.rst:386 msgid "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" msgstr "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" -#: ../../documentation.rst:49 +#: ../../documentation.rst:47 msgid "Leave a newline before and after a header." msgstr "Leave a newline before and after a header." -#: ../../documentation.rst:250 +#: ../../documentation.rst:227 msgid "Limit all lines to a maximum of 80 characters." msgstr "Limit all lines to a maximum of 80 characters." -#: ../../documentation.rst:248 +#: ../../documentation.rst:225 msgid "Line length" msgstr "Line length" -#: ../../documentation.rst:87 +#: ../../documentation.rst:392 msgid "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." msgstr "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." -#: ../../documentation.rst:242 +#: ../../documentation.rst:219 msgid "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" msgstr "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" -#: ../../documentation.rst:231 +#: ../../documentation.rst:208 msgid "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" msgstr "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" -#: ../../documentation.rst:118 +#: ../../documentation.rst:423 msgid "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" msgstr "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" @@ -200,39 +240,43 @@ msgstr "Operation mode commands that do not fit in a related configuration mode msgid "Operation mode pages" msgstr "Operation mode pages" -#: ../../documentation.rst:385 +#: ../../documentation.rst:56 msgid "Page content" msgstr "Page content" -#: ../../documentation.rst:244 +#: ../../documentation.rst:221 msgid "Please do not use other public address space." msgstr "Please do not use other public address space." -#: ../../documentation.rst:47 +#: ../../documentation.rst:101 +msgid "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." +msgstr "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." + +#: ../../documentation.rst:45 msgid "Properly quote commands, filenames and brief code snippets with double backticks." msgstr "Properly quote commands, filenames and brief code snippets with double backticks." -#: ../../documentation.rst:112 +#: ../../documentation.rst:417 msgid "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" msgstr "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" -#: ../../documentation.rst:420 +#: ../../documentation.rst:78 msgid "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." msgstr "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." -#: ../../documentation.rst:262 +#: ../../documentation.rst:239 msgid "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." msgstr "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." -#: ../../documentation.rst:147 +#: ../../documentation.rst:124 msgid "Style Guide" msgstr "Style Guide" -#: ../../documentation.rst:114 +#: ../../documentation.rst:419 msgid "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." msgstr "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." -#: ../../documentation.rst:153 +#: ../../documentation.rst:130 msgid "TOC Level" msgstr "TOC Level" @@ -240,7 +284,7 @@ msgstr "TOC Level" msgid "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." msgstr "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." -#: ../../documentation.rst:60 +#: ../../documentation.rst:365 msgid "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." msgstr "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." @@ -248,7 +292,7 @@ msgstr "The Forking Workflow is fundamentally different from other popular Git w msgid "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." msgstr "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." -#: ../../documentation.rst:401 +#: ../../documentation.rst:66 msgid "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." msgstr "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." @@ -260,51 +304,59 @@ msgstr "The documentation has 3 different types of pages. The same kind of pages msgid "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." msgstr "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." -#: ../../documentation.rst:41 +#: ../../documentation.rst:39 msgid "The following is a quick summary of the rules:" msgstr "The following is a quick summary of the rules:" -#: ../../documentation.rst:66 +#: ../../documentation.rst:371 msgid "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." msgstr "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." -#: ../../documentation.rst:199 +#: ../../documentation.rst:176 msgid "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." msgstr "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." +#: ../../documentation.rst:86 +msgid "Theoretical information required for users to understand the next document sections:" +msgstr "Theoretical information required for users to understand the next document sections:" + #: ../../documentation.rst:35 msgid "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." msgstr "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." -#: ../../documentation.rst:299 +#: ../../documentation.rst:107 +msgid "This section must contain a list of:" +msgstr "This section must contain a list of:" + +#: ../../documentation.rst:276 msgid "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." msgstr "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." -#: ../../documentation.rst:337 +#: ../../documentation.rst:314 msgid "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." msgstr "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." -#: ../../documentation.rst:46 +#: ../../documentation.rst:44 msgid "Try not to exceed 80 characters per line, but don't break URLs over this." msgstr "Try not to exceed 80 characters per line, but don't break URLs over this." -#: ../../documentation.rst:241 +#: ../../documentation.rst:218 msgid "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" msgstr "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" -#: ../../documentation.rst:73 +#: ../../documentation.rst:378 msgid "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." msgstr "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." -#: ../../documentation.rst:43 +#: ../../documentation.rst:41 msgid "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." msgstr "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." -#: ../../documentation.rst:48 +#: ../../documentation.rst:46 msgid "Use literal blocks for longer snippets." msgstr "Use literal blocks for longer snippets." -#: ../../documentation.rst:99 +#: ../../documentation.rst:404 msgid "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." msgstr "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." @@ -312,35 +364,39 @@ msgstr "View modified files by calling ``$ git status``. You will get an overvie msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +#: ../../documentation.rst:20 +msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." + #: ../../documentation.rst:9 msgid "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." msgstr "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." -#: ../../documentation.rst:155 +#: ../../documentation.rst:132 msgid "We use the following syntax for Headlines." msgstr "We use the following syntax for Headlines." -#: ../../documentation.rst:277 +#: ../../documentation.rst:254 msgid "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." msgstr "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." -#: ../../documentation.rst:316 +#: ../../documentation.rst:293 msgid "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." msgstr "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." -#: ../../documentation.rst:51 +#: ../../documentation.rst:49 msgid "When in doubt, follow the style of existing documentation." msgstr "When in doubt, follow the style of existing documentation." -#: ../../documentation.rst:375 +#: ../../documentation.rst:352 msgid "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." msgstr "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." -#: ../../documentation.rst:319 +#: ../../documentation.rst:296 msgid "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." -#: ../../documentation.rst:282 +#: ../../documentation.rst:259 msgid "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." msgstr "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." @@ -352,66 +408,98 @@ msgstr "Write Documentation" msgid "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." msgstr "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." -#: ../../documentation.rst:133 +#: ../../documentation.rst:29 +msgid "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." +msgstr "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." + +#: ../../documentation.rst:438 msgid "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." msgstr "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." -#: ../../documentation.rst:235 +#: ../../documentation.rst:212 msgid "``192.0.2.0/24``" msgstr "``192.0.2.0/24``" -#: ../../documentation.rst:236 +#: ../../documentation.rst:213 msgid "``198.51.100.0/24``" msgstr "``198.51.100.0/24``" -#: ../../documentation.rst:238 +#: ../../documentation.rst:215 msgid "``2001:db8::/32``" msgstr "``2001:db8::/32``" -#: ../../documentation.rst:237 +#: ../../documentation.rst:214 msgid "``203.0.113.0/24``" msgstr "``203.0.113.0/24``" -#: ../../documentation.rst:194 +#: ../../documentation.rst:171 msgid "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" msgstr "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" -#: ../../documentation.rst:190 +#: ../../documentation.rst:167 msgid "``:ref:`configuration/interfaces/ethernet:vlan``" msgstr "``:ref:`configuration/interfaces/ethernet:vlan``" -#: ../../documentation.rst:407 +#: ../../documentation.rst:72 msgid "``set firewall zone`` is written in ``firewall/zone.rst``" msgstr "``set firewall zone`` is written in ``firewall/zone.rst``" -#: ../../documentation.rst:408 +#: ../../documentation.rst:73 msgid "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" msgstr "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" -#: ../../documentation.rst:275 +#: ../../documentation.rst:88 +msgid "a simple explanation of what is this page about, why or when it is required to be used" +msgstr "a simple explanation of what is this page about, why or when it is required to be used" + +#: ../../documentation.rst:252 msgid "cfgcmd" msgstr "cfgcmd" -#: ../../documentation.rst:335 +#: ../../documentation.rst:312 msgid "cmdinclude" msgstr "cmdinclude" -#: ../../documentation.rst:197 +#: ../../documentation.rst:174 msgid "handle build errors" msgstr "handle build errors" -#: ../../documentation.rst:314 +#: ../../documentation.rst:117 +msgid "how to collect logs or other debugging information (like `show` commands output)" +msgstr "how to collect logs or other debugging information (like `show` commands output)" + +#: ../../documentation.rst:118 +msgid "how to read and what to search for in logs and collected information" +msgstr "how to read and what to search for in logs and collected information" + +#: ../../documentation.rst:109 +msgid "known issues or potential problems for the service or use case" +msgstr "known issues or potential problems for the service or use case" + +#: ../../documentation.rst:291 msgid "opcmd" msgstr "opcmd" -#: ../../documentation.rst:346 +#: ../../documentation.rst:89 +msgid "references to standards, RFCs" +msgstr "references to standards, RFCs" + +#: ../../documentation.rst:323 msgid "the content of interface-address.txt looks like this" msgstr "the content of interface-address.txt looks like this" -#: ../../documentation.rst:192 +#: ../../documentation.rst:169 msgid "to use an alternative hyperlink use it this way:" msgstr "to use an alternative hyperlink use it this way:" -#: ../../documentation.rst:373 +#: ../../documentation.rst:350 msgid "vytask" msgstr "vytask" + +#: ../../documentation.rst:119 +msgid "what are indicators of good and bad states in debugging outputs" +msgstr "what are indicators of good and bad states in debugging outputs" + +#: ../../documentation.rst:110 +msgid "workarounds for known issues (if any exist)" +msgstr "workarounds for known issues (if any exist)" diff --git a/docs/_locale/pt/installation.pot b/docs/_locale/pt/installation.pot index b6b01c69..04cbc68f 100644 --- a/docs/_locale/pt/installation.pot +++ b/docs/_locale/pt/installation.pot @@ -212,6 +212,10 @@ msgstr "Add one or more routes for networks you want to pass through the VyOS VM msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." +#: ../../installation/cloud/aws.rst:27 +msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." +msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." + #: ../../installation/vyos-on-baremetal.rst:394 msgid "Advanced > Serial Port Console Redirection > Console Redirection Settings:" msgstr "Advanced > Serial Port Console Redirection > Console Redirection Settings:" @@ -465,6 +469,10 @@ msgstr "Clients (where VyOS is to be installed) with a PXE-enabled NIC" msgid "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." msgstr "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +#: ../../installation/cloud/aws.rst:88 +msgid "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +msgstr "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." + #: ../../installation/cloud/aws.rst:82 msgid "CloudWatch SSM Configuration creation" msgstr "CloudWatch SSM Configuration creation" @@ -1303,6 +1311,10 @@ msgstr "Requirements" msgid "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." msgstr "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +#: ../../installation/cloud/aws.rst:69 +msgid "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +msgstr "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." + #: ../../installation/install.rst:74 msgid "Rolling Release" msgstr "Rolling Release" diff --git a/docs/_locale/pt/quick-start.pot b/docs/_locale/pt/quick-start.pot index eff80392..3886dd71 100644 --- a/docs/_locale/pt/quick-start.pot +++ b/docs/_locale/pt/quick-start.pot @@ -101,6 +101,10 @@ msgid "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAG msgstr "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:" #: ../../quick-start.rst:243 +msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." +msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." + +#: ../../quick-start.rst:243 msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." @@ -292,6 +296,10 @@ msgstr "To make firewall configuration easier, we can create groups of interface msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." +#: ../../quick-start.rst:164 +msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." +msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." + #: ../../quick-start.rst:90 msgid "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" msgstr "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" diff --git a/docs/_locale/uk/404.pot b/docs/_locale/uk/404.pot index ba0c5417..296b5ad0 100644 --- a/docs/_locale/uk/404.pot +++ b/docs/_locale/uk/404.pot @@ -10,19 +10,19 @@ msgstr "" #: ../../404.rst:4 msgid "Page Not Found" -msgstr "Page Not Found" +msgstr "Сторінку не знайдено" #: ../../404.rst:6 msgid "Sorry, We could not find a page. Try using the search box or go to the release homepage:" -msgstr "Sorry, We could not find a page. Try using the search box or go to the release homepage:" +msgstr "Вибачте, не вдалося знайти сторінку. Спробуйте скористатися вікном пошуку або перейдіть на домашню сторінку випуску:" #: ../../404.rst:9 msgid "`1.2.x (crux) <https://docs.vyos.io/en/crux/>`_" -msgstr "`1.2.x (crux) <https://docs.vyos.io/en/crux/>`_" +msgstr "`1.2.x (суть)<https://docs.vyos.io/en/crux/> `_" #: ../../404.rst:10 msgid "`1.3.x (equuleus) <https://docs.vyos.io/en/equuleus/>`_" -msgstr "`1.3.x (equuleus) <https://docs.vyos.io/en/equuleus/>`_" +msgstr "`1.3.x (дорівнює)<https://docs.vyos.io/en/equuleus/> `_" #: ../../404.rst:11 msgid "`1.4.x (sagitta) <https://docs.vyos.io/en/sagitta/>`_" @@ -34,4 +34,4 @@ msgstr "`rolling release (circinus) <https://docs.vyos.io/en/latest/>`_" #: ../../404.rst:11 msgid "`rolling release (sagitta) <https://docs.vyos.io/en/latest/>`_" -msgstr "`rolling release (sagitta) <https://docs.vyos.io/en/latest/>`_" +msgstr "`прокатний випуск (sagitta)<https://docs.vyos.io/en/latest/> `_" diff --git a/docs/_locale/uk/LC_MESSAGES/404.mo b/docs/_locale/uk/LC_MESSAGES/404.mo Binary files differindex 931cdcbb..ef44cca9 100644 --- a/docs/_locale/uk/LC_MESSAGES/404.mo +++ b/docs/_locale/uk/LC_MESSAGES/404.mo diff --git a/docs/_locale/uk/LC_MESSAGES/automation.mo b/docs/_locale/uk/LC_MESSAGES/automation.mo Binary files differindex c353f97f..d0d1031e 100644 --- a/docs/_locale/uk/LC_MESSAGES/automation.mo +++ b/docs/_locale/uk/LC_MESSAGES/automation.mo diff --git a/docs/_locale/uk/LC_MESSAGES/cli.mo b/docs/_locale/uk/LC_MESSAGES/cli.mo Binary files differindex 468e41bb..ea88e77e 100644 --- a/docs/_locale/uk/LC_MESSAGES/cli.mo +++ b/docs/_locale/uk/LC_MESSAGES/cli.mo diff --git a/docs/_locale/uk/LC_MESSAGES/configexamples.mo b/docs/_locale/uk/LC_MESSAGES/configexamples.mo Binary files differindex 923a9818..1659ac29 100644 --- a/docs/_locale/uk/LC_MESSAGES/configexamples.mo +++ b/docs/_locale/uk/LC_MESSAGES/configexamples.mo diff --git a/docs/_locale/uk/LC_MESSAGES/configuration.mo b/docs/_locale/uk/LC_MESSAGES/configuration.mo Binary files differindex 7acb2117..81074aef 100644 --- a/docs/_locale/uk/LC_MESSAGES/configuration.mo +++ b/docs/_locale/uk/LC_MESSAGES/configuration.mo diff --git a/docs/_locale/uk/LC_MESSAGES/contributing.mo b/docs/_locale/uk/LC_MESSAGES/contributing.mo Binary files differindex 6d56979f..274a2f5d 100644 --- a/docs/_locale/uk/LC_MESSAGES/contributing.mo +++ b/docs/_locale/uk/LC_MESSAGES/contributing.mo diff --git a/docs/_locale/uk/LC_MESSAGES/copyright.mo b/docs/_locale/uk/LC_MESSAGES/copyright.mo Binary files differindex b6a61413..7e821cf6 100644 --- a/docs/_locale/uk/LC_MESSAGES/copyright.mo +++ b/docs/_locale/uk/LC_MESSAGES/copyright.mo diff --git a/docs/_locale/uk/LC_MESSAGES/documentation.mo b/docs/_locale/uk/LC_MESSAGES/documentation.mo Binary files differindex 1023d5e8..eaf825f8 100644 --- a/docs/_locale/uk/LC_MESSAGES/documentation.mo +++ b/docs/_locale/uk/LC_MESSAGES/documentation.mo diff --git a/docs/_locale/uk/LC_MESSAGES/index.mo b/docs/_locale/uk/LC_MESSAGES/index.mo Binary files differindex fee8c817..bba78648 100644 --- a/docs/_locale/uk/LC_MESSAGES/index.mo +++ b/docs/_locale/uk/LC_MESSAGES/index.mo diff --git a/docs/_locale/uk/LC_MESSAGES/installation.mo b/docs/_locale/uk/LC_MESSAGES/installation.mo Binary files differindex 60c26968..e782757c 100644 --- a/docs/_locale/uk/LC_MESSAGES/installation.mo +++ b/docs/_locale/uk/LC_MESSAGES/installation.mo diff --git a/docs/_locale/uk/LC_MESSAGES/introducing.mo b/docs/_locale/uk/LC_MESSAGES/introducing.mo Binary files differindex 7f4a2a31..8985a77e 100644 --- a/docs/_locale/uk/LC_MESSAGES/introducing.mo +++ b/docs/_locale/uk/LC_MESSAGES/introducing.mo diff --git a/docs/_locale/uk/LC_MESSAGES/operation.mo b/docs/_locale/uk/LC_MESSAGES/operation.mo Binary files differindex e00b53b3..05105a32 100644 --- a/docs/_locale/uk/LC_MESSAGES/operation.mo +++ b/docs/_locale/uk/LC_MESSAGES/operation.mo diff --git a/docs/_locale/uk/LC_MESSAGES/quick-start.mo b/docs/_locale/uk/LC_MESSAGES/quick-start.mo Binary files differindex 1db72477..bc6caea0 100644 --- a/docs/_locale/uk/LC_MESSAGES/quick-start.mo +++ b/docs/_locale/uk/LC_MESSAGES/quick-start.mo diff --git a/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo b/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo Binary files differindex 46d22286..cde66849 100644 --- a/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo +++ b/docs/_locale/uk/LC_MESSAGES/troubleshooting.mo diff --git a/docs/_locale/uk/automation.pot b/docs/_locale/uk/automation.pot index fd209459..96148754 100644 --- a/docs/_locale/uk/automation.pot +++ b/docs/_locale/uk/automation.pot @@ -8,407 +8,882 @@ msgstr "" "Language: uk\n" "Plural-Forms: nplurals=3; plural=((n%10==1) && (n%100!=11)) ? 0 : ((n%10>=2 && n%10<=4) && ((n%100<12 || n%100>14))) ? 1 : 2;\n" +#: ../../automation/terraform/index.rst:15 +msgid "# terraformAZ # terraformvSphere # terraformGoogle" +msgstr "# terraformAZ # terraformvSphere # terraformGoogle" + +#: ../../automation/vyos-terraform.rst:707 +msgid "#az login" +msgstr "#az login" + +#: ../../automation/vyos-terraform.rst:261 +#: ../../automation/vyos-terraform.rst:283 +#: ../../automation/vyos-terraform.rst:711 +#: ../../automation/vyos-terraform.rst:731 +#: ../../automation/vyos-terraform.rst:1008 +#: ../../automation/vyos-terraform.rst:1029 +msgid "#cd /your folder" +msgstr "#cd /your folder" + +#: ../../automation/vyos-terraform.rst:287 +#: ../../automation/vyos-terraform.rst:735 +#: ../../automation/vyos-terraform.rst:1033 +msgid "#terraform apply" +msgstr "#terraform apply" + +#: ../../automation/vyos-terraform.rst:263 +#: ../../automation/vyos-terraform.rst:713 +#: ../../automation/vyos-terraform.rst:1010 +msgid "#terraform init" +msgstr "#terraform init" + +#: ../../automation/vyos-terraform.rst:285 +#: ../../automation/vyos-terraform.rst:733 +#: ../../automation/vyos-terraform.rst:1031 +msgid "#terraform plan" +msgstr "#terraform plan" + +#: ../../automation/vyos-terraform.rst:289 +#: ../../automation/vyos-terraform.rst:737 +#: ../../automation/vyos-terraform.rst:1035 +msgid "#yes" +msgstr "#yes" + +#: ../../automation/cloud-init.rst:366 +msgid "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." +msgstr "**NOTE**: be careful while copying and pasting previous commands. Double quotes may need to be corrected." + #: ../../automation/cloud-init.rst:363 msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." -msgstr "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." +msgstr "**ПРИМІТКА**: будьте обережні під час копіювання та вставлення попередніх команд. Подвійні лапки, можливо, потрібно буде виправити." -#: ../../automation/cloud-init.rst:305 +#: ../../automation/cloud-init.rst:308 msgid "**meta-data**: empty file (required)." -msgstr "**meta-data**: empty file (required)." +msgstr "**мета-дані**: порожній файл (обов’язково)." -#: ../../automation/cloud-init.rst:300 +#: ../../automation/cloud-init.rst:303 msgid "**network-config**: file that will indicate to avoid dhcp client on first interface." -msgstr "**network-config**: file that will indicate to avoid dhcp client on first interface." +msgstr "**network-config**: файл, який вказуватиме на уникнення клієнта dhcp на першому інтерфейсі." -#: ../../automation/cloud-init.rst:333 +#: ../../automation/cloud-init.rst:336 msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface." -msgstr "**network-config** file only has configuration that disables the automatic dhcp client on first interface." +msgstr "Файл **network-config** містить лише конфігурацію, яка вимикає автоматичний клієнт dhcp на першому інтерфейсі." -#: ../../automation/cloud-init.rst:303 +#: ../../automation/cloud-init.rst:306 msgid "**user-data**: includes vyos-commands." -msgstr "**user-data**: includes vyos-commands." +msgstr "**користувацькі дані**: включає vyos-команди." -#: ../../automation/cloud-init.rst:314 +#: ../../automation/cloud-init.rst:317 msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" -msgstr "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" +msgstr "Файл **user-data** має починатися з ``#cloud-config`` і містити vyos-команди. Наприклад:" -#: ../../automation/vyos-api.rst:322 +#: ../../automation/vyos-api.rst:355 msgid "/config-file" -msgstr "/config-file" +msgstr "/конфігураційний файл" -#: ../../automation/vyos-api.rst:265 +#: ../../automation/vyos-api.rst:298 msgid "/configure" -msgstr "/configure" +msgstr "/налаштувати" -#: ../../automation/vyos-api.rst:246 +#: ../../automation/vyos-api.rst:278 msgid "/generate" -msgstr "/generate" +msgstr "/генерувати" -#: ../../automation/vyos-api.rst:184 +#: ../../automation/vyos-api.rst:216 msgid "/image" -msgstr "/image" +msgstr "/зображення" -#: ../../automation/vyos-api.rst:165 +#: ../../automation/vyos-api.rst:197 msgid "/poweroff" msgstr "/poweroff" -#: ../../automation/vyos-api.rst:147 +#: ../../automation/vyos-api.rst:179 msgid "/reboot" msgstr "/reboot" -#: ../../automation/vyos-api.rst:129 +#: ../../automation/vyos-api.rst:161 msgid "/reset" -msgstr "/reset" +msgstr "/скинути" #: ../../automation/vyos-api.rst:44 msgid "/retrieve" -msgstr "/retrieve" +msgstr "/ отримати" -#: ../../automation/vyos-api.rst:222 +#: ../../automation/vyos-api.rst:254 msgid "/show" -msgstr "/show" +msgstr "/показати" + +#: ../../automation/vyos-terraform.rst:993 +msgid "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" +msgstr "1.1 Collect all data in to file \"terraform.tfvars\" and create resources fo example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:61 +msgid "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1.1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/vyos-terraform.rst:692 +msgid "1.1 Create an account with Azure" +msgstr "1.1 Create an account with Azure" + +#: ../../automation/vyos-terraform.rst:243 +msgid "1.2 Create a key pair and download your .pem key" +msgstr "1.2 Create a key pair and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:63 +msgid "1.2 Create a key pair_ and download your .pem key" +msgstr "1.2 Create a key pair_ and download your .pem key" + +#: ../../automation/vyos-terraform.rst:245 +msgid "1.3 Create a security group for the new VyOS instance" +msgstr "1.3 Create a security group for the new VyOS instance" + +#: ../../automation/terraform/terraformAWS.rst:70 +msgid "1.3 Create a security group_ for the new VyOS instance and open all traffic" +msgstr "1.3 Create a security group_ for the new VyOS instance and open all traffic" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/terraform/terraformAWS.rst:266 +msgid "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." +msgstr "1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/." + +#: ../../automation/terraform/terraformvSphere.rst:23 +msgid "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" +msgstr "1 Collect all data in to file \"terraform.tfvars\" and create resources for example \"terraform\"" + +#: ../../automation/terraform/terraformAWS.rst:77 +#: ../../automation/terraform/terraformAZ.rst:54 +#: ../../automation/terraform/terraformGoogle.rst:76 +#: ../../automation/terraform/terraformvSphere.rst:53 +msgid "1 Create an UNIX instance whenever you want (local, cloud, and so on)" +msgstr "1 Create an UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:54 +#: ../../automation/terraform/terraformAZ.rst:26 +#: ../../automation/terraform/terraformGoogle.rst:52 +#: ../../automation/terraform/terraformvSphere.rst:29 +msgid "1 Create an UNIX or Windows instance" +msgstr "1 Create an UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:29 +msgid "1 Create an account with AWS and get your \"access_key\", \"secret key\"" +msgstr "1 Create an account with AWS and get your \"access_key\", \"secret key\"" + +#: ../../automation/terraform/terraformAZ.rst:21 +msgid "1 Create an account with Azure" +msgstr "1 Create an account with Azure" + +#: ../../automation/terraform/terraformGoogle.rst:22 +msgid "1 Create an account with google cloud and a new project" +msgstr "1 Create an account with google cloud and a new project" + +#: ../../automation/terraform/terraformGoogle.rst:344 +msgid "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." +msgstr "1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location)." + +#: ../../automation/terraform/terraformAWS.rst:86 +msgid "2.1 Create a0 UNIX or Windows instance" +msgstr "2.1 Create a0 UNIX or Windows instance" + +#: ../../automation/vyos-terraform.rst:250 +#: ../../automation/vyos-terraform.rst:697 +#: ../../automation/vyos-terraform.rst:998 +msgid "2.1 Create a UNIX or Windows instance" +msgstr "2.1 Create a UNIX or Windows instance" + +#: ../../automation/terraform/terraformAWS.rst:88 +msgid "2.2 Download and install Terraform" +msgstr "2.2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:90 +msgid "2.3 Create the folder for example /root/awsterraform" +msgstr "2.3 Create the folder for example /root/awsterraform" + +#: ../../automation/vyos-terraform.rst:254 +msgid "2.3 Create the folder for example ../awsvyos/" +msgstr "2.3 Create the folder for example ../awsvyos/" + +#: ../../automation/vyos-terraform.rst:701 +msgid "2.3 Create the folder for example ../azvyos/" +msgstr "2.3 Create the folder for example ../azvyos/" + +#: ../../automation/vyos-terraform.rst:1002 +msgid "2.3 Create the folder for example ../vsphere/" +msgstr "2.3 Create the folder for example ../vsphere/" + +#: ../../automation/vyos-terraform.rst:1004 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project" + +#: ../../automation/vyos-terraform.rst:703 +msgid "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" +msgstr "2.4 Copy all files from my folder /Terraform into your Terraform project (main.tf, variables.tf)" + +#: ../../automation/terraform/terraformAWS.rst:96 +msgid "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" +msgstr "2.4 Copy all files into your Terraform project \"/root/awsterraform\" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_" + +#: ../../automation/vyos-terraform.rst:256 +msgid "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" +msgstr "2.4 Copy all files into your Terraform project (vyos.tf, var.tf) 2.4.1 Please type the information into the strings 22, 35, 36 of file \"vyos.tf\"" + +#: ../../automation/vyos-terraform.rst:705 +msgid "2.5 Login with Azure using the command" +msgstr "2.5 Login with Azure using the command" + +#: ../../automation/terraform/terraformAWS.rst:98 +msgid "2.5 Type the commands :" +msgstr "2.5 Type the commands :" + +#: ../../automation/terraform/terraformAZ.rst:44 +msgid "2.6 Type the commands :" +msgstr "2.6 Type the commands :" + +#: ../../automation/terraform/terraformAWS.rst:31 +msgid "2 Create a key pair_ and download your .pem key" +msgstr "2 Create a key pair_ and download your .pem key" + +#: ../../automation/terraform/terraformAWS.rst:79 +#: ../../automation/terraform/terraformAZ.rst:56 +#: ../../automation/terraform/terraformGoogle.rst:78 +#: ../../automation/terraform/terraformvSphere.rst:55 +msgid "2 Download and install Ansible" +msgstr "2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:56 +#: ../../automation/terraform/terraformAZ.rst:28 +#: ../../automation/terraform/terraformGoogle.rst:54 +#: ../../automation/terraform/terraformvSphere.rst:31 +msgid "2 Download and install Terraform" +msgstr "2 Download and install Terraform" + +#: ../../automation/terraform/terraformAWS.rst:270 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf" + +#: ../../automation/terraform/terraformGoogle.rst:347 +msgid "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" +msgstr "2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf" + +#: ../../automation/vyos-terraform.rst:268 +#: ../../automation/vyos-terraform.rst:718 +#: ../../automation/vyos-terraform.rst:1016 +msgid "3.1 Create a UNIX instance" +msgstr "3.1 Create a UNIX instance" + +#: ../../automation/terraform/terraformAWS.rst:109 +msgid "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" +msgstr "3.1 Create a UNIX instance whenever you want (local, cloud, and so on)" + +#: ../../automation/terraform/terraformAWS.rst:111 +msgid "3.2 Download and install Ansible" +msgstr "3.2 Download and install Ansible" + +#: ../../automation/terraform/terraformAWS.rst:113 +msgid "3.3 Create the folder for example /root/aws/" +msgstr "3.3 Create the folder for example /root/aws/" + +#: ../../automation/vyos-terraform.rst:722 +msgid "3.3 Create the folder for example /root/az/" +msgstr "3.3 Create the folder for example /root/az/" + +#: ../../automation/vyos-terraform.rst:1020 +msgid "3.3 Create the folder for example /root/vsphere/" +msgstr "3.3 Create the folder for example /root/vsphere/" + +#: ../../automation/vyos-terraform.rst:274 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml, mykey.pem)" + +#: ../../automation/vyos-terraform.rst:724 +#: ../../automation/vyos-terraform.rst:1022 +msgid "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" +msgstr "3.4 Copy all files from my folder /Ansible into your Ansible project (ansible.cfg, instance.yml and /group_vars)" + +#: ../../automation/terraform/terraformAWS.rst:115 +msgid "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "3.4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAWS.rst:81 +msgid "3 Create the folder for example /root/aws/" +msgstr "3 Create the folder for example /root/aws/" + +#: ../../automation/terraform/terraformAWS.rst:58 +msgid "3 Create the folder for example /root/awsterraform" +msgstr "3 Create the folder for example /root/awsterraform" + +#: ../../automation/terraform/terraformAZ.rst:58 +msgid "3 Create the folder for example /root/az/" +msgstr "3 Create the folder for example /root/az/" + +#: ../../automation/terraform/terraformAZ.rst:30 +msgid "3 Create the folder for example /root/azvyos/" +msgstr "3 Create the folder for example /root/azvyos/" + +#: ../../automation/terraform/terraformGoogle.rst:56 +msgid "3 Create the folder for example /root/google" +msgstr "3 Create the folder for example /root/google" + +#: ../../automation/terraform/terraformGoogle.rst:80 +msgid "3 Create the folder for example /root/google/" +msgstr "3 Create the folder for example /root/google/" + +#: ../../automation/terraform/terraformvSphere.rst:33 +msgid "3 Create the folder for example /root/vsphereterraform" +msgstr "3 Create the folder for example /root/vsphereterraform" + +#: ../../automation/terraform/terraformvSphere.rst:57 +msgid "3 Create the folder for example /root/vsphereterraform/" +msgstr "3 Create the folder for example /root/vsphereterraform/" + +#: ../../automation/terraform/terraformAWS.rst:123 +msgid "4.1 Type the commands on your Terrafom instance:" +msgstr "4.1 Type the commands on your Terrafom instance:" + +#: ../../automation/terraform/terraformAWS.rst:83 +msgid "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" +msgstr "4 Copy all files into your Ansible project \"/root/aws/\" (ansible.cfg, instance.yml, mykey.pem and \"all\"), more detailed see `Structure of files Ansible for AWS`_" + +#: ../../automation/terraform/terraformAZ.rst:60 +msgid "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" +msgstr "4 Copy all files into your Ansible project \"/root/az/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for Azure`_" + +#: ../../automation/terraform/terraformGoogle.rst:82 +msgid "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" +msgstr "4 Copy all files into your Ansible project \"/root/google/\" (ansible.cfg, instance.yml, mykey.json and \"all\"), more detailed see `Structure of files Ansible for google cloud`_" + +#: ../../automation/terraform/terraformvSphere.rst:59 +msgid "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" +msgstr "4 Copy all files into your Ansible project \"/root/vsphereterraform/\" (ansible.cfg, instance.yml,\"all\"), more detailed see `Structure of files Ansible for vSphere`_" #: ../../automation/vyos-api.rst:41 msgid "API Endpoints" -msgstr "API Endpoints" +msgstr "Кінцеві точки API" + +#: ../../automation/terraform/terraformAWS.rst:26 +msgid "AWS" +msgstr "AWS" + +#: ../../automation/vyos-terraform.rst:233 +msgid "AWS_terraform_ansible_single_vyos_instance" +msgstr "AWS_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:273 +msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After cloning the repo, edit the file **qemu.yml** and comment the **download-iso** role." #: ../../automation/cloud-init.rst:270 msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." -msgstr "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "Потрібен образ qcow VyOS із параметрами хмарної ініціалізації. Це можна отримати за допомогою репозиторію `vyos-vm-images`_. Після клонування репо відредагуйте файл **qemu.yml** і закоментуйте роль **download-iso**." -#: ../../automation/cloud-init.rst:63 +#: ../../automation/cloud-init.rst:64 msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." -msgstr "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." +msgstr "Документ хмарної конфігурації написаний на YAML. Файл має починатися з рядка ``#cloud-config``. Єдиними підтримуваними ключами верхнього рівня є ``vyos_config_commands`` і ``write_files``. Використання цих ключів описано в наступних двох розділах." #: ../../automation/command-scripting.rst:159 msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." -msgstr "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." +msgstr "Нижче наведено простий приклад, де команда ops, що виконується в сценарії після перехоплення, є «показати інтерфейси»." -#: ../../automation/cloud-init.rst:82 +#: ../../automation/cloud-init.rst:83 msgid "A single-quote symbol is not allowed inside command or value." -msgstr "A single-quote symbol is not allowed inside command or value." +msgstr "Символ одинарних лапок не дозволяється всередині команди чи значення." #: ../../automation/vyos-salt.rst:32 msgid "Accept minion key" -msgstr "Accept minion key" +msgstr "Прийняти ключ міньйона" + +#: ../../automation/terraform/terraformAWS.rst:255 +msgid "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the AWS cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformAZ.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformGoogle.rst:333 +msgid "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/terraform/terraformvSphere.rst:75 +msgid "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" +msgstr "After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. If you need to delete the instance please type the command:" + +#: ../../automation/cloud-init.rst:92 +msgid "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." +msgstr "After the ``vyos_config_commands`` are executed, cloud-init will automatically perform a ``commit`` and ``save`` operation." #: ../../automation/vyos-api.rst:15 msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." -msgstr "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." +msgstr "Усі кінцеві точки прослуховують лише запити HTTP POST, і API KEY має бути встановлено як ``key`` у даних форми." -#: ../../automation/cloud-init.rst:115 +#: ../../automation/terraform/terraformAWS.rst:539 +#: ../../automation/terraform/terraformAZ.rst:484 +#: ../../automation/terraform/terraformGoogle.rst:705 +#: ../../automation/terraform/terraformvSphere.rst:397 +msgid "All files about the article can be found here_" +msgstr "All files about the article can be found here_" + +#: ../../automation/cloud-init.rst:119 msgid "All of these can be overridden using the configuration in user-data." -msgstr "All of these can be overridden using the configuration in user-data." +msgstr "Усе це можна змінити за допомогою конфігурації в даних користувача." -#: ../../automation/cloud-init.rst:256 +#: ../../automation/terraform/terraformAWS.rst:267 +msgid "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." +msgstr "Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group." + +#: ../../automation/cloud-init.rst:259 msgid "Also, this lab considers:" -msgstr "Also, this lab considers:" +msgstr "Також ця лабораторія розглядає:" +#: ../../automation/terraform/terraformAWS.rst:74 +#: ../../automation/terraform/terraformAZ.rst:51 +#: ../../automation/terraform/terraformGoogle.rst:73 +#: ../../automation/terraform/terraformvSphere.rst:50 #: ../../automation/vyos-ansible.rst:6 msgid "Ansible" -msgstr "Ansible" +msgstr "Ансібль" #: ../../automation/command-scripting.rst:181 #: ../../automation/command-scripting.rst:200 msgid "Any modifications were done to work around unfixed bugs and implement enhancements that are not complete in the VyOS system can be placed here." -msgstr "Any modifications were done to work around unfixed bugs and implement enhancements that are not complete in the VyOS system can be placed here." +msgstr "Тут можна розмістити будь-які зміни, внесені для усунення невиправлених помилок і впровадження вдосконалень, які не завершені в системі VyOS." #: ../../automation/vyos-salt.rst:55 msgid "At this step we can get some op-mode information from VyOS nodes:" -msgstr "At this step we can get some op-mode information from VyOS nodes:" +msgstr "На цьому кроці ми можемо отримати деяку інформацію про робочий режим від вузлів VyOS:" #: ../../automation/vyos-api.rst:13 msgid "Authentication" -msgstr "Authentication" +msgstr "Аутентифікація" + +#: ../../automation/terraform/terraformAZ.rst:19 +msgid "Azure" +msgstr "Azure" -#: ../../automation/cloud-init.rst:241 +#: ../../automation/vyos-terraform.rst:684 +#: ../../automation/vyos-terraform.rst:985 +msgid "Azure_terraform_ansible_single_vyos_instance" +msgstr "Azure_terraform_ansible_single_vyos_instance" + +#: ../../automation/cloud-init.rst:244 msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." -msgstr "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." +msgstr "Перш ніж почати, зверніться до `network-config-docs`_ cloud-init, щоб дізнатися, як імпортувати конфігурації користувача та мережі." #: ../../automation/vyos-api.rst:18 msgid "Below see one example for curl and one for python. The rest of the documentation is reduced to curl." -msgstr "Below see one example for curl and one for python. The rest of the documentation is reduced to curl." +msgstr "Нижче див. один приклад для curl і один для python. Решта документації зводиться до curl." #: ../../automation/vyos-salt.rst:20 msgid "Check salt-keys on the salt master" -msgstr "Check salt-keys on the salt master" +msgstr "Перевірте ключі солі на соляному майстрі" #: ../../automation/vyos-salt.rst:161 msgid "Check that proxy minion is alive:" -msgstr "Check that proxy minion is alive:" +msgstr "Переконайтеся, що проксі-міньйон живий:" #: ../../automation/vyos-salt.rst:45 msgid "Check that salt master can communicate with minions" -msgstr "Check that salt master can communicate with minions" +msgstr "Перевірте, чи майстер солі може спілкуватися з міньйонами" #: ../../automation/cloud-init.rst:47 msgid "Cloud-config modules" -msgstr "Cloud-config modules" +msgstr "Модулі хмарної конфігурації" -#: ../../automation/cloud-init.rst:420 +#: ../../automation/cloud-init.rst:423 msgid "Cloud-init `network-config-docs`_." msgstr "Cloud-init `network-config-docs`_." -#: ../../automation/cloud-init.rst:239 +#: ../../automation/cloud-init.rst:242 msgid "Cloud-init on Proxmox" -msgstr "Cloud-init on Proxmox" +msgstr "Cloud-init на Proxmox" #: ../../automation/cloud-init.rst:9 msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." -msgstr "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." +msgstr "Хмарні та віртуалізовані екземпляри VyOS ініціалізуються за допомогою галузевого стандарту cloud-init. Через хмарну ініціалізацію система виконує такі завдання, як введення ключів SSH і налаштування мережі. Крім того, користувач може надати спеціальну конфігурацію під час запуску екземпляра." -#: ../../automation/cloud-init.rst:120 +#: ../../automation/cloud-init.rst:124 msgid "Command Execution at Initial Boot" -msgstr "Command Execution at Initial Boot" +msgstr "Виконання команди під час початкового завантаження" #: ../../automation/command-scripting.rst:6 msgid "Command Scripting" -msgstr "Command Scripting" +msgstr "Командний сценарій" -#: ../../automation/cloud-init.rst:356 +#: ../../automation/cloud-init.rst:359 msgid "Command for generating ``seed.iso``" -msgstr "Command for generating ``seed.iso``" +msgstr "Команда для створення ``seed.iso``" -#: ../../automation/cloud-init.rst:78 +#: ../../automation/cloud-init.rst:79 msgid "Commands requirements:" -msgstr "Commands requirements:" +msgstr "Вимоги до команд:" #: ../../automation/cloud-init.rst:16 msgid "Config Sources" -msgstr "Config Sources" +msgstr "Джерела конфігурації" #: ../../automation/vyos-napalm.rst:85 #: ../../automation/vyos-salt.rst:104 msgid "Configuration" -msgstr "Configuration" +msgstr "Конфігурація" #: ../../automation/command-scripting.rst:23 msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" -msgstr "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" +msgstr "Команди конфігурації виконуються так само, як під час звичайного сеансу конфігурації. Наприклад, якщо ви хочете вимкнути вузол BGP для переходу VRRP до резервного копіювання:" -#: ../../automation/vyos-pyvyos.rst:94 +#: ../../automation/vyos-pyvyos.rst:102 msgid "Configure, then Delete Object" msgstr "Configure, then Delete Object" -#: ../../automation/vyos-pyvyos.rst:141 +#: ../../automation/vyos-pyvyos.rst:149 msgid "Configure, then Load File" msgstr "Configure, then Load File" -#: ../../automation/vyos-pyvyos.rst:101 +#: ../../automation/vyos-pyvyos.rst:109 msgid "Configure, then Save" msgstr "Configure, then Save" -#: ../../automation/vyos-pyvyos.rst:108 +#: ../../automation/vyos-pyvyos.rst:116 msgid "Configure, then Save File" msgstr "Configure, then Save File" -#: ../../automation/vyos-pyvyos.rst:68 +#: ../../automation/vyos-pyvyos.rst:76 msgid "Configure, then Set" msgstr "Configure, then Set" -#: ../../automation/vyos-pyvyos.rst:85 +#: ../../automation/vyos-pyvyos.rst:93 msgid "Configure, then Show Object" msgstr "Configure, then Show Object" -#: ../../automation/vyos-pyvyos.rst:77 +#: ../../automation/vyos-pyvyos.rst:85 msgid "Configure, then Show a Single Object Value" msgstr "Configure, then Show a Single Object Value" +#: ../../automation/terraform/index.rst:5 +msgid "Content" +msgstr "Content" + #: ../../automation/vyos-napalm.rst:89 msgid "Content of commands.conf" -msgstr "Content of commands.conf" +msgstr "Вміст commands.conf" -#: ../../automation/cloud-init.rst:337 +#: ../../automation/cloud-init.rst:340 msgid "Content of network-config file:" -msgstr "Content of network-config file:" +msgstr "Вміст файлу конфігурації мережі:" -#: ../../automation/cloud-init.rst:351 +#: ../../automation/cloud-init.rst:354 msgid "Create seed.iso" -msgstr "Create seed.iso" +msgstr "Створіть seed.iso" -#: ../../automation/cloud-init.rst:189 +#: ../../automation/cloud-init.rst:193 msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." -msgstr "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." +msgstr "Створіть текстові файли з іменами user-data і meta-data. У системах на базі Linux утиліту mkisofs можна використовувати для створення початкового ISO. Наступний синтаксис додасть ці файли до файлової системи ISO 9660." -#: ../../automation/cloud-init.rst:368 +#: ../../automation/cloud-init.rst:371 msgid "Creating the VM" -msgstr "Creating the VM" +msgstr "Створення ВМ" #: ../../automation/command-scripting.rst:156 msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." -msgstr "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." +msgstr "Користувальницькі сценарії не виконуються з привілеями root (використовуйте sudo всередині, якщо це необхідно)." -#: ../../automation/cloud-init.rst:113 +#: ../../automation/cloud-init.rst:117 msgid "DHCP on first Ethernet interface if no network configuration is provided." -msgstr "DHCP on first Ethernet interface if no network configuration is provided." +msgstr "DHCP на першому інтерфейсі Ethernet, якщо конфігурація мережі не надається." + +#: ../../automation/terraform/terraformAWS.rst:6 +msgid "Deploying VyOS in the AWS cloud" +msgstr "Deploying VyOS in the AWS cloud" + +#: ../../automation/terraform/terraformAZ.rst:6 +msgid "Deploying VyOS in the Azure cloud" +msgstr "Deploying VyOS in the Azure cloud" + +#: ../../automation/terraform/terraformGoogle.rst:6 +msgid "Deploying VyOS in the google cloud" +msgstr "Deploying VyOS in the google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:6 +msgid "Deploying VyOS in the vSphere infrastructure" +msgstr "Deploying VyOS in the vSphere infrastructure" + +#: ../../automation/terraform/terraformAWS.rst:39 +msgid "Deploying vyos in the AWS cloud" +msgstr "Deploying vyos in the AWS cloud" + +#: ../../automation/vyos-terraform.rst:299 +msgid "Deploying vyos in the Azure cloud" +msgstr "Deploying vyos in the Azure cloud" + +#: ../../automation/vyos-terraform.rst:742 +msgid "Deploying vyos in the Vsphere infrastructia" +msgstr "Deploying vyos in the Vsphere infrastructia" #: ../../automation/vyos-netmiko.rst:12 msgid "Example" -msgstr "Example" +msgstr "приклад" #: ../../automation/vyos-salt.rst:185 msgid "Example of configuration:" -msgstr "Example of configuration:" +msgstr "Приклад конфігурації:" #: ../../automation/vyos-salt.rst:199 msgid "Example of configuration commands from the file \"/srv/salt/states/commands.txt\"" -msgstr "Example of configuration commands from the file \"/srv/salt/states/commands.txt\"" +msgstr "Приклад команд налаштування з файлу "/srv/salt/states/commands.txt"" #: ../../automation/vyos-salt.rst:173 msgid "Example of op-mode:" -msgstr "Example of op-mode:" +msgstr "Приклад операційного режиму:" #: ../../automation/vyos-salt.rst:171 msgid "Examples" -msgstr "Examples" +msgstr "Приклади" #: ../../automation/command-scripting.rst:102 msgid "Executing Configuration Scripts" -msgstr "Executing Configuration Scripts" +msgstr "Виконання сценаріїв конфігурації" #: ../../automation/command-scripting.rst:138 msgid "Executing pre-hooks/post-hooks Scripts" -msgstr "Executing pre-hooks/post-hooks Scripts" +msgstr "Виконання сценаріїв до/пост-хуків" #: ../../automation/vyos-ansible.rst:24 msgid "File contents" -msgstr "File contents" +msgstr "Вміст файлу" + +#: ../../automation/terraform/terraformAWS.rst:476 +msgid "File contents of Ansible for AWS" +msgstr "File contents of Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:426 +msgid "File contents of Ansible for Azure" +msgstr "File contents of Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:651 +msgid "File contents of Ansible for google cloud" +msgstr "File contents of Ansible for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:338 +msgid "File contents of Ansible for vSphere" +msgstr "File contents of Ansible for vSphere" + +#: ../../automation/terraform/terraformAWS.rst:298 +msgid "File contents of Terrafom for AWS" +msgstr "File contents of Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:93 +msgid "File contents of Terrafom for Azure" +msgstr "File contents of Terrafom for Azure" -#: ../../automation/cloud-init.rst:284 +#: ../../automation/terraform/terraformGoogle.rst:375 +msgid "File contents of Terrafom for google cloud" +msgstr "File contents of Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:96 +msgid "File contents of Terrafom for vSphere" +msgstr "File contents of Terrafom for vSphere" + +#: ../../automation/cloud-init.rst:287 msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" -msgstr "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" +msgstr "Файл, створений попередньою командою: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" + +#: ../../automation/cloud-init.rst:350 +msgid "Finally, file **meta-data** has no content, but it's required." +msgstr "Finally, file **meta-data** has no content, but it's required." #: ../../automation/cloud-init.rst:347 msgid "Finaly, file **meta-data** has no content, but it's required." -msgstr "Finaly, file **meta-data** has no content, but it's required." +msgstr "Нарешті, файл **meta-data** не має вмісту, але він є обов’язковим." #: ../../automation/command-scripting.rst:212 msgid "For configuration/upgrade management issues, modification of this script should be the last option. Always try to find solutions based on CLI commands first." -msgstr "For configuration/upgrade management issues, modification of this script should be the last option. Always try to find solutions based on CLI commands first." +msgstr "У разі проблем із керуванням конфігурацією/оновленням змінення цього сценарію має бути останнім варіантом. Завжди намагайтеся спочатку знайти рішення на основі команд CLI." #: ../../automation/vyos-api.rst:9 msgid "For configuration and enabling the API see :ref:`http-api`" -msgstr "For configuration and enabling the API see :ref:`http-api`" +msgstr "Для налаштування та ввімкнення API див. :ref:`http-api`" + +#: ../../automation/vyos-api.rst:130 +msgid "For example, check an existing path:" +msgstr "For example, check an existing path:" #: ../../automation/vyos-api.rst:109 msgid "For example, get the addresses of a ``dum0`` interface." -msgstr "For example, get the addresses of a ``dum0`` interface." +msgstr "Наприклад, отримати адреси інтерфейсу ``dum0``." -#: ../../automation/vyos-api.rst:226 +#: ../../automation/vyos-api.rst:258 msgid "For example, show which images are installed." -msgstr "For example, show which images are installed." +msgstr "Наприклад, показати, які образи встановлені." #: ../../automation/cloud-init.rst:217 msgid "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." -msgstr "For more information on the NoCloud data source, visit its `page <https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ in the cloud-init documentation." +msgstr "Щоб дізнатися більше про джерело даних NoCloud, відвідайте його сторінку<https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html> `_ у документації cloud-init." -#: ../../automation/cloud-init.rst:411 +#: ../../automation/cloud-init.rst:221 +msgid "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." +msgstr "For more information on the NoCloud data source, visit its page `nocloud`_ in the cloud-init documentation." + +#: ../../automation/cloud-init.rst:414 msgid "From cli or GUI, power on VM, and after it boots, verify configuration" -msgstr "From cli or GUI, power on VM, and after it boots, verify configuration" +msgstr "З кліпу або GUI увімкніть віртуальну машину та після її завантаження перевірте конфігурацію" -#: ../../automation/vyos-pyvyos.rst:123 +#: ../../automation/terraform/terraformvyos.rst:26 +msgid "General commands that we will use for running Terraform scripts" +msgstr "General commands that we will use for running Terraform scripts" + +#: ../../automation/vyos-pyvyos.rst:131 msgid "Generate Object" msgstr "Generate Object" -#: ../../automation/cloud-init.rst:268 +#: ../../automation/cloud-init.rst:271 msgid "Generate qcow image" -msgstr "Generate qcow image" +msgstr "Створити зображення qcow" -#: ../../automation/vyos-pyvyos.rst:24 +#: ../../automation/vyos-pyvyos.rst:32 msgid "Getting Started" msgstr "Getting Started" #: ../../automation/command-scripting.rst:82 msgid "Here is a simple example:" -msgstr "Here is a simple example:" +msgstr "Ось простий приклад:" -#: ../../automation/cloud-init.rst:91 +#: ../../automation/cloud-init.rst:95 msgid "Here is an example cloud-config that appends configuration at the time of first boot." -msgstr "Here is an example cloud-config that appends configuration at the time of first boot." +msgstr "Ось приклад хмарної конфігурації, яка додає конфігурацію під час першого завантаження." + +#: ../../automation/terraform/terraformAWS.rst:23 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+AWS Step by step:" -#: ../../automation/cloud-init.rst:377 +#: ../../automation/terraform/terraformAZ.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Azure Step by step:" + +#: ../../automation/vyos-terraform.rst:987 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+Vsphere Step by step:" + +#: ../../automation/terraform/terraformGoogle.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+google Step by step:" + +#: ../../automation/terraform/terraformvSphere.rst:16 +msgid "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" +msgstr "How to create a single instance and install your configuration using Terraform+Ansible+vSphere Step by step:" + +#: ../../automation/cloud-init.rst:380 msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." -msgstr "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." +msgstr "Зберігання файлів ISO: для зберігання файлів ``.iso`` використовується локальний том. У цьому сценарії тип тома ``локальний`` встановлено на **каталог**, а також приєднаний до ``/var/lib/vz``." -#: ../../automation/cloud-init.rst:81 +#: ../../automation/cloud-init.rst:82 msgid "If command ends in a value, it must be inside single quotes." -msgstr "If command ends in a value, it must be inside single quotes." +msgstr "Якщо команда закінчується значенням, воно має бути в одинарних лапках." -#: ../../automation/cloud-init.rst:250 +#: ../../automation/cloud-init.rst:253 msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." -msgstr "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." +msgstr "Якщо конфігурація мережі не надається, клієнт dhcp буде ввімкнено на першому інтерфейсі. Майте на увазі, що цю конфігурацію буде введено на рівні ОС, тому не очікуйте знайти конфігурацію клієнта dhcp у vyos cli. Через таку поведінку в наступному прикладі лабораторної роботи ми вимкнемо конфігурацію dhcp-клієнта на eth0." -#: ../../automation/cloud-init.rst:225 +#: ../../automation/cloud-init.rst:228 msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." -msgstr "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." +msgstr "Якщо у вас виникли проблеми, переконайтеся, що документ конфігурації хмари містить дійсний YAML. Інтернет-ресурси, такі як https://www.yamllint.com/, надають простий інструмент для перевірки YAML." -#: ../../automation/cloud-init.rst:153 +#: ../../automation/cloud-init.rst:157 msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." -msgstr "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." +msgstr "Якщо вам потрібно зібрати інформацію з команд Linux для налаштування VyOS, ви можете виконати команди, а потім налаштувати VyOS у тому самому сценарії." #: ../../automation/command-scripting.rst:79 msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." -msgstr "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." +msgstr "Якщо ви бажаєте створити сценарій конфігурацій мовою, відмінною від bash, ви можете налаштувати команди виводу сценарію, а потім створити їх у сценарії bash." -#: ../../automation/vyos-pyvyos.rst:27 +#: ../../automation/vyos-pyvyos.rst:35 msgid "Importing and Disabling Warnings for verify=False" msgstr "Importing and Disabling Warnings for verify=False" -#: ../../automation/cloud-init.rst:298 +#: ../../automation/cloud-init.rst:301 msgid "In Proxmox server three files are going to be used for this setup:" -msgstr "In Proxmox server three files are going to be used for this setup:" +msgstr "На сервері Proxmox для цього налаштування використовуватимуться три файли:" #: ../../automation/cloud-init.rst:49 msgid "In VyOS, by default, enables only two modules:" -msgstr "In VyOS, by default, enables only two modules:" +msgstr "У VyOS за замовчуванням включено лише два модулі:" + +#: ../../automation/terraform/terraformAWS.rst:17 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the AWS cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible." -#: ../../automation/cloud-init.rst:307 +#: ../../automation/terraform/terraformGoogle.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:11 +msgid "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." +msgstr "In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible." + +#: ../../automation/cloud-init.rst:310 msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" -msgstr "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" +msgstr "У цій лабораторії всі файли знаходяться в папці ``/tmp/``. Отже, перш ніж продовжити, давайте перейдемо до цього каталогу:" -#: ../../automation/cloud-init.rst:274 +#: ../../automation/cloud-init.rst:277 msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" -msgstr "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" +msgstr "У цій лабораторії ми використовуємо версію VyOS 1.3.0 і встановлюємо диск 10G. Завантажте файл VyOS .iso та збережіть його як ``/tmp/vyos.iso``. Команда, яка використовується для створення зображення qcow:" -#: ../../automation/cloud-init.rst:71 +#: ../../automation/cloud-init.rst:72 msgid "Initial Configuration" -msgstr "Initial Configuration" +msgstr "Початкова конфігурація" -#: ../../automation/vyos-pyvyos.rst:47 +#: ../../automation/vyos-pyvyos.rst:55 msgid "Initializing a VyDevice Object" msgstr "Initializing a VyDevice Object" -#: ../../automation/cloud-init.rst:180 +#: ../../automation/cloud-init.rst:184 msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." -msgstr "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." +msgstr "Впровадження конфігураційних даних не обмежується хмарними платформами. Користувачі можуть використовувати джерело даних NoCloud для введення даних користувача та метаданих на такі платформи віртуалізації, як VMware, Hyper-V і KVM." #: ../../automation/vyos-napalm.rst:11 msgid "Install ``napalm-vyos`` module" -msgstr "Install ``napalm-vyos`` module" +msgstr "Встановити модуль ``napalm-vyos''" -#: ../../automation/vyos-pyvyos.rst:15 +#: ../../automation/vyos-pyvyos.rst:23 msgid "Installation" msgstr "Installation" #: ../../automation/vyos-salt.rst:98 msgid "It is possible to configure VyOS via netmiko_ proxy module. It requires a minion with installed packet ``python3-netmiko`` module who has a connection to VyOS nodes. Salt-minion have to communicate with salt master" -msgstr "It is possible to configure VyOS via netmiko_ proxy module. It requires a minion with installed packet ``python3-netmiko`` module who has a connection to VyOS nodes. Salt-minion have to communicate with salt master" +msgstr "Налаштувати VyOS можна через модуль netmiko_ proxy. Для цього потрібен міньйон із встановленим пакетним модулем ``python3-netmiko``, який має підключення до вузлів VyOS. Сіль-міньйон повинен спілкуватися з соляним майстром" #: ../../automation/cloud-init.rst:36 msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." -msgstr "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." +msgstr "Основні хмарні постачальники пропонують засоби надання даних користувача під час запуску екземпляра. Його можна надати як звичайний текст або як текст у кодуванні base64, залежно від постачальника хмари. Крім того, його можна стиснути за допомогою gzip, що має сенс із довгим списком команд конфігурації через жорстке обмеження до ~16384 байтів для всіх даних користувача." + +#: ../../automation/terraform/terraformAWS.rst:282 +#: ../../automation/terraform/terraformGoogle.rst:359 +msgid "Make sure that Ansible is pinging from Terrafom." +msgstr "Make sure that Ansible is pinging from Terrafom." + +#: ../../automation/terraform/terraformGoogle.rst:345 +msgid "Make sure that you have opened access to the instance in the security group." +msgstr "Make sure that you have opened access to the instance in the security group." #: ../../automation/cloud-init.rst:20 msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." -msgstr "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." +msgstr "Метадані – джерелом метаданих є хмарна платформа або гіпервізор. У деяких хмарах реалізовано як кінцеву точку HTTP за адресою ``http://169.254.169.254``." -#: ../../automation/cloud-init.rst:244 +#: ../../automation/cloud-init.rst:247 msgid "Most important keys that needs to be considered:" -msgstr "Most important keys that needs to be considered:" +msgstr "Найважливіші ключі, які необхідно враховувати:" #: ../../automation/vyos-napalm.rst:6 msgid "Napalm" -msgstr "Napalm" +msgstr "Напалм" + +#: ../../automation/terraform/terraformvyos.rst:13 +msgid "Need to install_ Terraform" +msgstr "Need to install_ Terraform" #: ../../automation/vyos-netmiko.rst:6 msgid "Netmiko" @@ -416,94 +891,116 @@ msgstr "Netmiko" #: ../../automation/vyos-salt.rst:96 msgid "Netmiko-proxy" -msgstr "Netmiko-proxy" +msgstr "Netmiko-проксі" + +#: ../../automation/terraform/terraformAWS.rst:-1 +#: ../../automation/terraform/terraformGoogle.rst:-1 +msgid "Network Topology Diagram" +msgstr "Схема топології мережі" #: ../../automation/cloud-init.rst:24 msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." -msgstr "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." +msgstr "Конфігурація мережі. Це джерело конфігурації інформує систему про параметри мережі, такі як IP-адреси, маршрути, DNS. Доступно лише на кількох хмарних платформах і платформах віртуалізації." -#: ../../automation/cloud-init.rst:248 +#: ../../automation/cloud-init.rst:251 msgid "Networking configurations shouldn't be passed in user-data file." -msgstr "Networking configurations shouldn't be passed in user-data file." +msgstr "Конфігурації мережі не слід передавати у файлі даних користувача." -#: ../../automation/cloud-init.rst:178 +#: ../../automation/cloud-init.rst:182 msgid "NoCloud" msgstr "NoCloud" #: ../../automation/index.rst:6 +#: ../../automation/terraform/index.rst:6 msgid "Nornir" -msgstr "Nornir" +msgstr "Відьми" -#: ../../automation/cloud-init.rst:131 +#: ../../automation/cloud-init.rst:135 msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." -msgstr "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." +msgstr "Зверніть увагу, що /opt/vyatta/etc/config використовується замість каталогу /config/scripts, зазначеного в розділі :ref:`command-scripting` документації, оскільки каталог /config/script не монтується, коли ` Виконується модуль `write_files``." -#: ../../automation/cloud-init.rst:370 +#: ../../automation/cloud-init.rst:373 msgid "Notes for this particular example, that may need to be modified in other setups:" -msgstr "Notes for this particular example, that may need to be modified in other setups:" +msgstr "Примітки для цього конкретного прикладу, які, можливо, потрібно буде змінити в інших налаштуваннях:" -#: ../../automation/cloud-init.rst:287 +#: ../../automation/cloud-init.rst:290 msgid "Now, that file needs to be copied to proxmox server:" -msgstr "Now, that file needs to be copied to proxmox server:" +msgstr "Тепер цей файл потрібно скопіювати на сервер proxmox:" #: ../../automation/command-scripting.rst:108 msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" -msgstr "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" +msgstr "У VyOS це спричинить наступну проблему: після зміни конфігурації за допомогою сценарію, подібного до цього, більше неможливо змінити конфігурацію вручну:" -#: ../../automation/cloud-init.rst:390 +#: ../../automation/cloud-init.rst:393 msgid "On proxmox server:" -msgstr "On proxmox server:" +msgstr "На сервері proxmox:" -#: ../../automation/cloud-init.rst:353 +#: ../../automation/cloud-init.rst:356 msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." -msgstr "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." +msgstr "Після створення трьох файлів настав час створити образ ``seed.iso``, який потрібно підключити до нової віртуальної машини як компакт-диск." -#: ../../automation/cloud-init.rst:80 +#: ../../automation/cloud-init.rst:81 msgid "One command per line." -msgstr "One command per line." +msgstr "Одна команда на рядок." #: ../../automation/vyos-napalm.rst:21 msgid "Op-mode" -msgstr "Op-mode" +msgstr "По-моді" #: ../../automation/command-scripting.rst:77 msgid "Other script languages" -msgstr "Other script languages" +msgstr "Інші скриптові мови" #: ../../automation/vyos-napalm.rst:129 #: ../../automation/vyos-netmiko.rst:47 msgid "Output" -msgstr "Output" +msgstr "Вихідні дані" #: ../../automation/vyos-napalm.rst:48 msgid "Output op-mode" -msgstr "Output op-mode" +msgstr "Вихідний оп-режим" #: ../../_include/need_improvement.txt:13 msgid "Please take a look at the Contributing Guide for our :ref:`documentation`." -msgstr "Please take a look at the Contributing Guide for our :ref:`documentation`." +msgstr "Будь ласка, перегляньте Посібник зі сприяння для нашої :ref:`документації`." #: ../../automation/command-scripting.rst:195 msgid "Postconfig on boot" -msgstr "Postconfig on boot" +msgstr "Postconfig під час завантаження" -#: ../../automation/cloud-init.rst:409 +#: ../../automation/cloud-init.rst:412 msgid "Power on VM and verifications" -msgstr "Power on VM and verifications" +msgstr "Увімкніть віртуальну машину та перевірки" #: ../../automation/command-scripting.rst:176 msgid "Preconfig on boot" -msgstr "Preconfig on boot" +msgstr "Попереднє налаштування під час завантаження" + +#: ../../automation/terraform/terraformAWS.rst:21 +msgid "Preparation steps for deploying VyOS on AWS" +msgstr "Preparation steps for deploying VyOS on AWS" -#: ../../automation/cloud-init.rst:296 +#: ../../automation/terraform/terraformAZ.rst:14 +msgid "Preparation steps for deploying VyOS on Azure" +msgstr "Preparation steps for deploying VyOS on Azure" + +#: ../../automation/terraform/terraformGoogle.rst:14 +msgid "Preparation steps for deploying VyOS on google" +msgstr "Preparation steps for deploying VyOS on google" + +#: ../../automation/terraform/terraformvSphere.rst:14 +msgid "Preparation steps for deploying VyOS on vSphere" +msgstr "Preparation steps for deploying VyOS on vSphere" + +#: ../../automation/cloud-init.rst:299 msgid "Prepare cloud-init files" -msgstr "Prepare cloud-init files" +msgstr "Підготуйте файли хмарної ініціалізації" -#: ../../automation/cloud-init.rst:258 +#: ../../automation/cloud-init.rst:261 msgid "Proxmox IP address: **192.168.0.253/24**" -msgstr "Proxmox IP address: **192.168.0.253/24**" +msgstr "IP-адреса Proxmox: **192.168.0.253/24**" -#: ../../automation/cloud-init.rst:422 +#: ../../automation/cloud-init.rst:425 msgid "Proxmox `Cloud-init-Support`_." msgstr "Proxmox `Cloud-init-Support`_." @@ -515,220 +1012,342 @@ msgstr "PyVyOS" msgid "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." msgstr "PyVyOS is a Python library for interacting with VyOS devices via their API. This documentation guides you on using PyVyOS to manage your VyOS devices programmatically. The complete PyVyOS documentation is available on [Read the Docs](https://pyvyos.readthedocs.io/en/latest/), and the library can be found on [GitHub](https://github.com/robertoberto/pyvyos) and [PyPI](https://pypi.org/project/pyvyos/)." -#: ../../automation/cloud-init.rst:416 +#: ../../automation/cloud-init.rst:419 msgid "References" -msgstr "References" +msgstr "Список літератури" -#: ../../automation/cloud-init.rst:263 +#: ../../automation/cloud-init.rst:266 msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." -msgstr "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." +msgstr "Видаліть клієнт dhcp за замовчуванням на першому інтерфейсі та завантажте іншу конфігурацію під час першого завантаження за допомогою cloud-init." -#: ../../automation/vyos-pyvyos.rst:132 +#: ../../automation/vyos-pyvyos.rst:140 msgid "Reset Object" msgstr "Reset Object" +#: ../../automation/vyos-terraform.rst:22 +msgid "Run Terraform" +msgstr "Run Terraform" + #: ../../automation/vyos-ansible.rst:80 msgid "Run ansible" -msgstr "Run ansible" +msgstr "Запустіть ansible" #: ../../automation/command-scripting.rst:50 msgid "Run commands remotely" -msgstr "Run commands remotely" +msgstr "Виконуйте команди віддалено" #: ../../automation/command-scripting.rst:21 msgid "Run configuration commands" -msgstr "Run configuration commands" +msgstr "Виконайте команди конфігурації" #: ../../automation/command-scripting.rst:37 msgid "Run operational commands" -msgstr "Run operational commands" +msgstr "Виконуйте оперативні команди" -#: ../../automation/cloud-init.rst:111 +#: ../../automation/cloud-init.rst:115 msgid "SSH is configured on port 22." -msgstr "SSH is configured on port 22." +msgstr "SSH налаштовано на порт 22." #: ../../automation/vyos-salt.rst:8 msgid "Salt" -msgstr "Salt" +msgstr "сіль" #: ../../automation/vyos-salt.rst:106 msgid "Salt master configuration:" -msgstr "Salt master configuration:" +msgstr "Конфігурація Salt Master:" -#: ../../automation/vyos-api.rst:344 +#: ../../automation/vyos-api.rst:377 msgid "Save a running configuration to a file." -msgstr "Save a running configuration to a file." +msgstr "Збережіть запущену конфігурацію у файл." -#: ../../automation/vyos-api.rst:326 +#: ../../automation/vyos-api.rst:359 msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." -msgstr "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." +msgstr "Збережіть поточну конфігурацію в початковій конфігурації. Якщо ви не вказуєте файл під час збереження, він зберігається в ``/config/config.boot``." #: ../../automation/vyos-napalm.rst:99 msgid "Script vyos-napalm.py" -msgstr "Script vyos-napalm.py" +msgstr "Скрипт vyos-napalm.py" #: ../../automation/command-scripting.rst:152 msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." -msgstr "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." +msgstr "Сценарії виконуються в алфавітному порядку. Їхні назви мають повністю складатися з великих і малих літер ASCII, цифр ASCII, символів підкреслення ASCII і мінус-дефісів ASCII. Інші символи не допускаються." -#: ../../automation/vyos-pyvyos.rst:115 +#: ../../automation/vyos-pyvyos.rst:123 msgid "Show Object" msgstr "Show Object" #: ../../automation/command-scripting.rst:52 msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." -msgstr "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "Іноді ви просто не хочете виконувати купу команд операційного режиму через SSH на віддаленій системі VyOS." + +#: ../../automation/command-scripting.rst:52 +msgid "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "Sometimes you simply want to execute a bunch of op-mode commands via SSH on a remote VyOS system." + +#: ../../automation/terraform/terraformAWS.rst:537 +msgid "Sourse files for AWS from GIT" +msgstr "Sourse files for AWS from GIT" + +#: ../../automation/terraform/terraformAZ.rst:482 +msgid "Sourse files for Azure from GIT" +msgstr "Sourse files for Azure from GIT" + +#: ../../automation/terraform/terraformGoogle.rst:703 +msgid "Sourse files for google cloud from GIT" +msgstr "Sourse files for google cloud from GIT" -#: ../../automation/cloud-init.rst:260 +#: ../../automation/terraform/terraformvSphere.rst:395 +msgid "Sourse files for vSphere from GIT" +msgstr "Sourse files for vSphere from GIT" + +#: ../../automation/terraform/terraformAWS.rst:88 +#: ../../automation/terraform/terraformAZ.rst:63 +#: ../../automation/terraform/terraformGoogle.rst:87 +#: ../../automation/terraform/terraformvSphere.rst:62 +msgid "Start" +msgstr "Start" + +#: ../../automation/terraform/terraformGoogle.rst:101 +msgid "Start creating a google cloud instance and check the result" +msgstr "Start creating a google cloud instance and check the result" + +#: ../../automation/terraform/terraformAWS.rst:102 +msgid "Start creating an AWS instance and check the result" +msgstr "Start creating an AWS instance and check the result" + +#: ../../automation/cloud-init.rst:263 msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." -msgstr "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." +msgstr "Використовується: локальний том, який монтується в каталозі **/var/lib/vz** і містить усі типи вмісту, включаючи фрагменти." #: ../../automation/vyos-salt.rst:119 msgid "Structure of /srv/salt:" -msgstr "Structure of /srv/salt:" +msgstr "Структура /srv/salt:" #: ../../automation/vyos-ansible.rst:11 msgid "Structure of files" -msgstr "Structure of files" +msgstr "Структура файлів" + +#: ../../automation/vyos-terraform.rst:166 +#: ../../automation/vyos-terraform.rst:624 +msgid "Structure of files Ansible" +msgstr "Structure of files Ansible" + +#: ../../automation/terraform/terraformAWS.rst:463 +msgid "Structure of files Ansible for AWS" +msgstr "Structure of files Ansible for AWS" + +#: ../../automation/terraform/terraformAZ.rst:414 +msgid "Structure of files Ansible for Azure" +msgstr "Structure of files Ansible for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:639 +msgid "Structure of files Ansible for google cloud" +msgstr "Structure of files Ansible for google cloud" -#: ../../automation/cloud-init.rst:107 +#: ../../automation/terraform/terraformvSphere.rst:326 +msgid "Structure of files Ansible for vSphere" +msgstr "Structure of files Ansible for vSphere" + +#: ../../automation/vyos-terraform.rst:38 +#: ../../automation/vyos-terraform.rst:302 +#: ../../automation/vyos-terraform.rst:745 +msgid "Structure of files Terrafom" +msgstr "Structure of files Terrafom" + +#: ../../automation/terraform/terraformAWS.rst:285 +msgid "Structure of files Terrafom for AWS" +msgstr "Structure of files Terrafom for AWS" + +#: ../../automation/terraform/terraformAZ.rst:83 +msgid "Structure of files Terrafom for Azure" +msgstr "Structure of files Terrafom for Azure" + +#: ../../automation/terraform/terraformGoogle.rst:362 +msgid "Structure of files Terrafom for google cloud" +msgstr "Structure of files Terrafom for google cloud" + +#: ../../automation/terraform/terraformvSphere.rst:84 +msgid "Structure of files Terrafom for vSphere" +msgstr "Structure of files Terrafom for vSphere" + +#: ../../automation/terraform/terraformvyos.rst:15 +msgid "Structure of files in the standard Terraform project:" +msgstr "Structure of files in the standard Terraform project:" + +#: ../../automation/cloud-init.rst:111 msgid "System Defaults/Fallbacks" -msgstr "System Defaults/Fallbacks" +msgstr "Системні параметри за замовчуванням/запасні варіанти" + +#: ../../automation/terraform/terraformAWS.rst:51 +#: ../../automation/terraform/terraformAZ.rst:23 +#: ../../automation/terraform/terraformGoogle.rst:49 +#: ../../automation/terraform/terraformvSphere.rst:26 +msgid "Terraform" +msgstr "Terraform" -#: ../../automation/vyos-api.rst:301 +#: ../../automation/terraform/terraformAWS.rst:302 +msgid "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" +msgstr "Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf" + +#: ../../automation/terraform/terraformvyos.rst:6 +msgid "Terraform for VyOS" +msgstr "Terraform for VyOS" + +#: ../../automation/vyos-api.rst:334 msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." -msgstr "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." +msgstr "API надсилає кожен запит до сеансу та фіксує його. Але деякі компоненти VyOS, такі як сервери DHCP і PPPoE, IPSec, VXLAN та інші тунелі, вимагають повної конфігурації для фіксації. Кінцева точка оброблятиме кілька команд, якщо ви передасте їх як список у поле ``data``." + +#: ../../automation/terraform/terraformGoogle.rst:41 +msgid "The .JSON file download automaticly after creating and will look like:" +msgstr "The .JSON file download automaticly after creating and will look like:" #: ../../automation/command-scripting.rst:197 msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." -msgstr "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." +msgstr "Сценарій ``/config/scripts/vyos-postconfig-bootup.script`` викликається під час завантаження після повного застосування конфігурації VyOS." #: ../../automation/command-scripting.rst:178 msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." -msgstr "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." +msgstr "Сценарій ``/config/scripts/vyos-preconfig-bootup.script`` викликається під час завантаження перед налаштуванням VyOS під час процесу завантаження." -#: ../../automation/vyos-api.rst:224 +#: ../../automation/vyos-api.rst:256 msgid "The ``/show`` endpoint is to show everything in the operational mode." -msgstr "The ``/show`` endpoint is to show everything in the operational mode." +msgstr "Кінцева точка ``/show`` має показати все в робочому режимі." -#: ../../automation/vyos-api.rst:248 +#: ../../automation/vyos-api.rst:280 msgid "The ``generate`` endpoint run a ``generate`` command." -msgstr "The ``generate`` endpoint run a ``generate`` command." +msgstr "Кінцева точка ``generate`` виконує команду ``generate``." -#: ../../automation/vyos-api.rst:131 +#: ../../automation/vyos-api.rst:163 msgid "The ``reset`` endpoint run a ``reset`` command." -msgstr "The ``reset`` endpoint run a ``reset`` command." +msgstr "Кінцева точка ``reset`` виконує команду ``reset``." -#: ../../automation/cloud-init.rst:84 +#: ../../automation/cloud-init.rst:85 msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." -msgstr "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." +msgstr "Список команд, створений командою ``show configuration commands`` на маршрутизаторі VyOS, має відповідати всім вимогам, тому можна легко отримати правильний список команд, скопіювавши його з іншого маршрутизатора." -#: ../../automation/cloud-init.rst:88 +#: ../../automation/cloud-init.rst:89 msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." -msgstr "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." +msgstr "Конфігурація, указана в документі cloud-config, замінює значення конфігурації за замовчуванням і значення, налаштовані за допомогою метаданих." #: ../../automation/command-scripting.rst:142 msgid "The default directories where your custom Scripts should be located are:" -msgstr "The default directories where your custom Scripts should be located are:" +msgstr "Каталоги за замовчуванням, у яких мають розташовуватися ваші власні сценарії:" #: ../../automation/command-scripting.rst:184 #: ../../automation/command-scripting.rst:203 msgid "The default file looks like this:" -msgstr "The default file looks like this:" +msgstr "Файл за замовчуванням виглядає так:" #: ../../automation/cloud-init.rst:42 msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below." -msgstr "The easiest way to configure the system via user-data is the Cloud-config syntax described below." +msgstr "Найпростішим способом налаштування системи за допомогою даних користувача є синтаксис Cloud-config, описаний нижче." -#: ../../automation/vyos-api.rst:324 +#: ../../automation/vyos-api.rst:357 msgid "The endpoint ``/config-file`` is to save or load a configuration." -msgstr "The endpoint ``/config-file`` is to save or load a configuration." +msgstr "Кінцева точка ``/config-file`` призначена для збереження або завантаження конфігурації." -#: ../../automation/cloud-init.rst:156 +#: ../../automation/cloud-init.rst:160 msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." -msgstr "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." +msgstr "У наступному прикладі ім’я хоста встановлюється на основі ідентифікатора екземпляра, отриманого від служби метаданих EC2." -#: ../../automation/cloud-init.rst:136 +#: ../../automation/cloud-init.rst:140 msgid "The following example shows how to execute commands after the initial configuration." -msgstr "The following example shows how to execute commands after the initial configuration." +msgstr "У наступному прикладі показано, як виконувати команди після початкової конфігурації." -#: ../../automation/cloud-init.rst:74 +#: ../../automation/cloud-init.rst:75 msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." -msgstr "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." +msgstr "Ключ, який використовується для позначення конфігурації VyOS, це ``vyos_config_commands``. Далі йде конфігурація VyOS за допомогою синтаксису "set-style". Підтримуються команди «встановити» і «видалити»." -#: ../../automation/cloud-init.rst:197 +#: ../../automation/cloud-init.rst:201 msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." -msgstr "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." +msgstr "Файл seed.iso можна приєднати до віртуальної машини. Як приклад, наведено спосіб за допомогою KVM для приєднання ISO як компакт-диска." #: ../../automation/command-scripting.rst:104 msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." -msgstr "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." +msgstr "Під час роботи зі скриптами конфігурації є підводний камінь. Виникає спокуса викликати сценарії конфігурації за допомогою "sudo" (тобто тимчасових кореневих прав), оскільки це поширений спосіб виклику системних команд на більшості платформ Linux." -#: ../../automation/cloud-init.rst:109 +#: ../../automation/cloud-init.rst:113 msgid "These are the VyOS defaults and fallbacks." -msgstr "These are the VyOS defaults and fallbacks." +msgstr "Це стандартні та резервні параметри VyOS." #: ../../_include/need_improvement.txt:11 msgid "This section needs improvements, examples and explanations." -msgstr "This section needs improvements, examples and explanations." +msgstr "Цей розділ потребує вдосконалень, прикладів і пояснень." #: ../../automation/command-scripting.rst:118 msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." -msgstr "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." +msgstr "Це призведе до такого повідомлення про помилку: ``Налаштування не вдалось`` Якщо це станеться, потрібно перезавантажити систему, щоб мати можливість знову редагувати конфігурацію вручну." -#: ../../automation/vyos-api.rst:360 +#: ../../automation/vyos-api.rst:393 msgid "To Load a configuration file." -msgstr "To Load a configuration file." +msgstr "Щоб завантажити файл конфігурації." -#: ../../automation/vyos-api.rst:186 +#: ../../automation/vyos-api.rst:218 msgid "To add or delete an image, use the ``/image`` endpoint." -msgstr "To add or delete an image, use the ``/image`` endpoint." +msgstr "Щоб додати або видалити зображення, використовуйте кінцеву точку ``/image``." #: ../../automation/command-scripting.rst:121 msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" -msgstr "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" +msgstr "Щоб уникнути цих проблем, правильним способом є виклик сценарію з групою ``vyattacfg``, наприклад, за допомогою команди ``sg`` (перемикання групи):" + +#: ../../automation/vyos-api.rst:128 +msgid "To check existence of a configuration path, use the ``exists`` operation." +msgstr "To check existence of a configuration path, use the ``exists`` operation." #: ../../automation/vyos-api.rst:48 msgid "To get the whole configuration, pass an empty list to the ``path`` field" -msgstr "To get the whole configuration, pass an empty list to the ``path`` field" +msgstr "Щоб отримати повну конфігурацію, передайте порожній список у поле ``path``" #: ../../automation/command-scripting.rst:11 msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." -msgstr "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." +msgstr "Щоб включити специфічні функції та псевдоніми VyOS, вам потрібно розмістити файли /opt/vyatta/etc/functions/script-template`` у верхній частині сценарію." -#: ../../automation/vyos-api.rst:149 +#: ../../automation/vyos-api.rst:181 msgid "To initiate a reboot use the ``reboot`` endpoint." msgstr "To initiate a reboot use the ``reboot`` endpoint." #: ../../automation/command-scripting.rst:128 msgid "To make sure that a script is not accidentally called without the ``vyattacfg`` group, the script can be safeguarded like this:" -msgstr "To make sure that a script is not accidentally called without the ``vyattacfg`` group, the script can be safeguarded like this:" +msgstr "Щоб переконатися, що сценарій випадково не викликається без групи ``vyattacfg``, сценарій можна захистити таким чином:" #: ../../automation/vyos-api.rst:79 msgid "To only get a part of the configuration, for example ``system syslog``." -msgstr "To only get a part of the configuration, for example ``system syslog``." +msgstr "Щоб отримати лише частину конфігурації, наприклад ``system syslog``." -#: ../../automation/vyos-api.rst:167 +#: ../../automation/vyos-api.rst:199 msgid "To power off the system use the ``poweroff`` endpoint." msgstr "To power off the system use the ``poweroff`` endpoint." -#: ../../automation/cloud-init.rst:223 +#: ../../automation/cloud-init.rst:226 +#: ../../automation/terraform/terraformAWS.rst:264 +#: ../../automation/terraform/terraformGoogle.rst:342 msgid "Troubleshooting" -msgstr "Troubleshooting" +msgstr "Вирішення проблем" + +#: ../../automation/terraform/terraformAWS.rst:91 +#: ../../automation/terraform/terraformAZ.rst:66 +#: ../../automation/terraform/terraformGoogle.rst:90 +#: ../../automation/terraform/terraformvSphere.rst:65 +msgid "Type the commands on your Terrafom instance:" +msgstr "Type the commands on your Terrafom instance:" #: ../../automation/command-scripting.rst:39 msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." -msgstr "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." +msgstr "На відміну від звичайного сеансу конфігурації, перед усіма робочими командами має бути ``виконати``, навіть якщо ви не створили сеанс за допомогою configure." #: ../../automation/cloud-init.rst:34 msgid "User-data" -msgstr "User-data" +msgstr "Дані користувача" + +#: ../../automation/cloud-init.rst:28 +msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." #: ../../automation/cloud-init.rst:28 msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." -msgstr "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "Дані користувача - дані користувача вказуються користувачем. Це джерело конфігурації пропонує можливість вставляти будь-які команди конфігурації CLI в конфігурацію перед першим завантаженням." -#: ../../automation/vyos-pyvyos.rst:35 +#: ../../automation/vyos-pyvyos.rst:43 msgid "Using API Response Class" msgstr "Using API Response Class" @@ -736,174 +1355,333 @@ msgstr "Using API Response Class" msgid "Using PyVyOS" msgstr "Using PyVyOS" -#: ../../automation/cloud-init.rst:373 +#: ../../automation/vyos-pyvyos.rst:73 +msgid "Using pyvyos" +msgstr "Using pyvyos" + +#: ../../automation/cloud-init.rst:376 msgid "VM ID: in this example, VM ID used is 555." -msgstr "VM ID: in this example, VM ID used is 555." +msgstr "Ідентифікатор віртуальної машини: у цьому прикладі використовується ідентифікатор віртуальної машини 555." -#: ../../automation/cloud-init.rst:381 +#: ../../automation/cloud-init.rst:384 msgid "VM Resources: these parameters can be modified as needed." -msgstr "VM Resources: these parameters can be modified as needed." +msgstr "Ресурси VM: ці параметри можна змінювати за потреби." -#: ../../automation/cloud-init.rst:375 +#: ../../automation/cloud-init.rst:378 msgid "VM Storage: ``local`` volume is used." -msgstr "VM Storage: ``local`` volume is used." +msgstr "Сховище VM: використовується ``локальний`` том." + +#: ../../automation/vyos-terraform.rst:991 +msgid "Vsphere" +msgstr "Vsphere" #: ../../automation/vyos-api.rst:7 msgid "VyOS API" -msgstr "VyOS API" +msgstr "API VyOS" #: ../../automation/index.rst:3 msgid "VyOS Automation" -msgstr "VyOS Automation" +msgstr "Автоматизація VyOS" -#: ../../automation/cloud-init.rst:418 +#: ../../automation/terraform/index.rst:3 +msgid "VyOS Terraform" +msgstr "VyOS Terraform" + +#: ../../automation/cloud-init.rst:421 msgid "VyOS `cloud-init-docs`_." msgstr "VyOS `cloud-init-docs`_." #: ../../automation/cloud-init.rst:7 msgid "VyOS cloud-init" -msgstr "VyOS cloud-init" +msgstr "Хмарна ініціалізація VyOS" -#: ../../automation/cloud-init.rst:246 +#: ../../automation/cloud-init.rst:249 msgid "VyOS configuration commands are defined in user-data file." -msgstr "VyOS configuration commands are defined in user-data file." +msgstr "Команди конфігурації VyOS визначені у файлі даних користувача." #: ../../automation/command-scripting.rst:140 msgid "VyOS has the ability to run custom scripts before and after each commit" -msgstr "VyOS has the ability to run custom scripts before and after each commit" +msgstr "VyOS має можливість запускати власні сценарії до і після кожного коміту" #: ../../automation/cloud-init.rst:18 msgid "VyOS support three types of config sources." -msgstr "VyOS support three types of config sources." +msgstr "VyOS підтримує три типи джерел конфігурації." #: ../../automation/vyos-ansible.rst:8 msgid "VyOS supports configuration via ansible. Need to install ``ansible`` and ``python3-paramiko`` module" -msgstr "VyOS supports configuration via ansible. Need to install ``ansible`` and ``python3-paramiko`` module" +msgstr "VyOS підтримує налаштування через ansible. Необхідно встановити модуль ``ansible`` і ``python3-paramiko``" #: ../../automation/vyos-netmiko.rst:8 msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." -msgstr "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." +msgstr "VyOS підтримує налаштування через netmiko_. Для цього потрібно встановити модуль ``python3-netmiko``." + +#: ../../automation/vyos-terraform.rst:8 +msgid "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" +msgstr "VyOS supports develop infrastructia via Terraform and provisioning via ansible. Need to install ``Terraform``" + +#: ../../automation/terraform/terraformvyos.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. For more details about Terraform please have a look here link_." + +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." +msgstr "VyOS supports development infrastructure via Terraform and provisioning via Ansible. Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. More detailed about what is Terraform you can write using the link_." #: ../../automation/command-scripting.rst:8 msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts." -msgstr "VyOS supports executing configuration and operational commands non-interactively from shell scripts." +msgstr "VyOS підтримує виконання конфігураційних і операційних команд неінтерактивно зі сценаріїв оболонки." #: ../../automation/vyos-salt.rst:10 msgid "VyOS supports op-mode and configuration via salt_." -msgstr "VyOS supports op-mode and configuration via salt_." +msgstr "VyOS підтримує робочий режим і налаштування через salt_." #: ../../automation/vyos-napalm.rst:8 msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." -msgstr "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." +msgstr "VyOS підтримує деякі функції napalm_ для налаштування та робочого режиму. Це вимагає додаткових тестів." -#: ../../automation/cloud-init.rst:122 +#: ../../automation/cloud-init.rst:126 msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." -msgstr "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." +msgstr "VyOS підтримує виконання операційних команд і команд Linux під час початкового завантаження. Це досягається за допомогою ``write_files`` до певних файлів у каталозі /opt/vyatta/etc/config/scripts. Команди, указані в opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script, виконуються до налаштування. Файл /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script містить команди, які потрібно виконати після налаштування. В обох випадках команди виконуються від імені користувача root." #: ../../automation/vyos-napalm.rst:87 msgid "We need 2 files, commands.conf and script itself." -msgstr "We need 2 files, commands.conf and script itself." +msgstr "Нам потрібні 2 файли, commands.conf і сам скрипт." -#: ../../automation/cloud-init.rst:184 +#: ../../automation/cloud-init.rst:188 msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." -msgstr "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." +msgstr "Хоча існують інші методи, найпростішим методом використання джерела даних NoCloud є створення початкового ISO та підключення його до віртуальної машини як компакт-диска. Том має бути відформатований як файлова система vfat або ISO 9660 із міткою «cidata» або «CIDATA»." #: ../../automation/command-scripting.rst:63 msgid "Will return:" -msgstr "Will return:" +msgstr "Повернеться:" #: ../../automation/vyos-api.rst:46 msgid "With the ``retrieve`` endpoint you get parts or the whole configuration." -msgstr "With the ``retrieve`` endpoint you get parts or the whole configuration." +msgstr "За допомогою кінцевої точки ``retrieve`` ви отримуєте частини або всю конфігурацію." + +#: ../../automation/terraform/terraformAWS.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAZ.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformGoogle.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformvSphere.rst:8 +msgid "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." +msgstr "With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. Also we will make provisioning using Ansible." + +#: ../../automation/terraform/terraformAWS.rst:40 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible." + +#: ../../automation/vyos-terraform.rst:300 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform." + +#: ../../automation/vyos-terraform.rst:743 +msgid "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." +msgstr "With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the vSphere." #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and support op-mode data:" -msgstr "Without proxy it requires VyOS minion configuration and support op-mode data:" +msgstr "Без проксі-сервера потрібна конфігурація допоміжного VyOS і підтримка даних операційного режиму:" #: ../../automation/vyos-salt.rst:12 msgid "Without proxy it requires VyOS minion configuration and supports op-mode data:" -msgstr "Without proxy it requires VyOS minion configuration and supports op-mode data:" +msgstr "Без проксі-сервера він вимагає конфігурації допоміжного VyOS і підтримує дані в робочому режимі:" #: ../../automation/vyos-pyvyos.rst:17 msgid "You can install PyVyOS using pip:" msgstr "You can install PyVyOS using pip:" -#: ../../automation/vyos-api.rst:267 +#: ../../automation/vyos-pyvyos.rst:25 +msgid "You can install pyvyos using pip:" +msgstr "You can install pyvyos using pip:" + +#: ../../automation/vyos-api.rst:300 msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." -msgstr "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." +msgstr "Ви можете передати команду ``set``, ``delete`` або ``comment`` до кінцевої точки ``/configure``." -#: ../../automation/vyos-api.rst:286 +#: ../../automation/vyos-api.rst:319 msgid "``delete`` a single command" -msgstr "``delete`` a single command" +msgstr "``видалити`` одну команду" -#: ../../automation/cloud-init.rst:383 +#: ../../automation/cloud-init.rst:386 msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" -msgstr "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" +msgstr "``seed.iso`` було раніше створено в каталозі ``/tmp/``. Його необхідно перемістити в ``/var/lib/vz/template/iso``" -#: ../../automation/vyos-api.rst:270 +#: ../../automation/vyos-api.rst:303 msgid "``set`` a single command" -msgstr "``set`` a single command" +msgstr "``встановити`` одну команду" -#: ../../automation/cloud-init.rst:55 +#: ../../automation/cloud-init.rst:56 msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." -msgstr "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." +msgstr "``vyos_userdata`` - модуль приймає список команд конфігурації CLI в розділі ``vyos_config_commands``, що дає простий спосіб налаштувати систему під час розгортання." -#: ../../automation/cloud-init.rst:112 +#: ../../automation/cloud-init.rst:116 msgid "``vyos``/``vyos`` credentials if no others specified by data source." -msgstr "``vyos``/``vyos`` credentials if no others specified by data source." +msgstr "Облікові дані ``vyos''/``vyos'', якщо джерело даних не вказує інші." #: ../../automation/cloud-init.rst:51 msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." -msgstr "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." +msgstr "``write_files`` - цей модуль дозволяє вставляти будь-які файли у файлову систему перед першим завантаженням, наприклад, попередньо згенеровані ключі шифрування, сертифікати або навіть цілий файл ``config.boot``. Формат описано в документації cloudinit `Cloud-init-write_files`_." -#: ../../automation/vyos-api.rst:188 +#: ../../automation/vyos-pyvyos.rst:12 +msgid "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." +msgstr "`pyvyos Documentation on Read the Docs <https://pyvyos.readthedocs.io/en/latest/>`_ provides detailed instructions on the installation, configuration, and operation of the pyvyos library." + +#: ../../automation/vyos-pyvyos.rst:15 +msgid "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." +msgstr "`pyvyos Source Code on GitHub <https://github.com/robertoberto/pyvyos>`_ allows you to access and contribute to the library's code." + +#: ../../automation/vyos-pyvyos.rst:17 +msgid "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." +msgstr "`pyvyos on PyPI <https://pypi.org/project/pyvyos/>`_ for easy installation via pip, the Python package installer. Execute `pip install pyvyos` in your terminal to install." + +#: ../../automation/vyos-api.rst:220 msgid "add an image" -msgstr "add an image" +msgstr "Додайте зображення" +#: ../../automation/terraform/terraformAWS.rst:560 +msgid "all" +msgstr "all" + +#: ../../automation/terraform/terraformAWS.rst:478 +#: ../../automation/terraform/terraformAZ.rst:428 +#: ../../automation/terraform/terraformGoogle.rst:653 +#: ../../automation/terraform/terraformvSphere.rst:340 #: ../../automation/vyos-ansible.rst:26 msgid "ansible.cfg" msgstr "ansible.cfg" -#: ../../automation/cloud-init.rst:61 +#: ../../automation/cloud-init.rst:62 msgid "cloud-config file format" -msgstr "cloud-config file format" +msgstr "формат файлу хмарної конфігурації" -#: ../../automation/cloud-init.rst:229 +#: ../../automation/cloud-init.rst:232 msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" -msgstr "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" +msgstr "cloud-init веде журнал до /var/log/cloud-init.log. Цей файл може допомогти визначити, чому конфігурація відрізняється від вашої очікуваної. Ви можете отримати найважливіші результати фільтрації даних за ключовим словом ``vyos``:" #: ../../automation/vyos-salt.rst:153 msgid "commands.txt" msgstr "commands.txt" -#: ../../automation/vyos-api.rst:205 +#: ../../automation/vyos-api.rst:237 msgid "delete an image, for example ``1.3-rolling-202006070117``" -msgstr "delete an image, for example ``1.3-rolling-202006070117``" +msgstr "видалити зображення, наприклад ``1.3-rolling-202006070117``" + +#: ../../automation/terraform/terraformGoogle.rst:19 +msgid "google cloud" +msgstr "google cloud" + +#: ../../automation/terraform/terraformAWS.rst:528 +#: ../../automation/terraform/terraformAZ.rst:470 +#: ../../automation/terraform/terraformGoogle.rst:693 +#: ../../automation/terraform/terraformvSphere.rst:381 +msgid "group_vars/all" +msgstr "group_vars/all" #: ../../automation/vyos-ansible.rst:42 msgid "hosts" -msgstr "hosts" +msgstr "господарі" #: ../../automation/vyos-ansible.rst:35 msgid "id_rsa_docker.pub. Needs to declare only public key exactly." -msgstr "id_rsa_docker.pub. Needs to declare only public key exactly." +msgstr "id_rsa_docker.pub. Необхідно точно оголосити лише відкритий ключ." #: ../../automation/vyos-api.rst:106 msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." -msgstr "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." +msgstr "якщо вам просто потрібно значення багатозначного вузла, скористайтеся операцією ``returnValues``." + +#: ../../automation/terraform/terraformAWS.rst:495 +#: ../../automation/terraform/terraformAZ.rst:438 +#: ../../automation/terraform/terraformGoogle.rst:662 +#: ../../automation/terraform/terraformvSphere.rst:350 +msgid "instance.yml" +msgstr "instance.yml" + +#: ../../automation/vyos-terraform.rst:313 +#: ../../automation/vyos-terraform.rst:758 +msgid "main.tf" +msgstr "main.tf" #: ../../automation/vyos-ansible.rst:56 msgid "main.yml" msgstr "main.yml" +#: ../../automation/terraform/terraformGoogle.rst:84 +msgid "mykey.json you have to get using step 2 of the google cloud" +msgstr "mykey.json you have to get using step 2 of the google cloud" + +#: ../../automation/terraform/terraformAWS.rst:488 +msgid "mykey.pem" +msgstr "mykey.pem" + +#: ../../automation/terraform/terraformAWS.rst:85 +msgid "mykey.pem you have to get using step 1.2" +msgstr "mykey.pem you have to get using step 1.2" + +#: ../../automation/vyos-pyvyos.rst:6 +msgid "pyvyos" +msgstr "pyvyos" + +#: ../../automation/vyos-pyvyos.rst:8 +msgid "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." +msgstr "pyvyos is a Python library designed for interacting with VyOS devices through their API. This documentation is intended to guide you in using pyvyos for programmatic management of your VyOS devices." + #: ../../automation/vyos-salt.rst:141 msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" -msgstr "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" +msgstr "r11-proxy.sls Містить параметри для підключення до міньйона salt-proxy" #: ../../automation/index.rst:7 +#: ../../automation/terraform/index.rst:7 msgid "startup scripts" -msgstr "startup scripts" +msgstr "скрипти запуску" + +#: ../../automation/terraform/terraformAWS.rst:452 +#: ../../automation/terraform/terraformAZ.rst:405 +#: ../../automation/terraform/terraformGoogle.rst:623 +#: ../../automation/terraform/terraformvSphere.rst:307 +msgid "terraform.tfvars" +msgstr "terraform.tfvars" #: ../../automation/vyos-salt.rst:131 msgid "top.sls" msgstr "top.sls" + +#: ../../automation/terraform/terraformvSphere.rst:20 +msgid "vSphere" +msgstr "vSphere" + +#: ../../automation/terraform/terraformAWS.rst:415 +#: ../../automation/terraform/terraformAZ.rst:298 +#: ../../automation/terraform/terraformGoogle.rst:538 +#: ../../automation/terraform/terraformvSphere.rst:239 +msgid "var.tf" +msgstr "var.tf" + +#: ../../automation/vyos-terraform.rst:516 +#: ../../automation/vyos-terraform.rst:899 +msgid "variables.tf" +msgstr "variables.tf" + +#: ../../automation/terraform/terraformAWS.rst:439 +#: ../../automation/terraform/terraformvSphere.rst:223 +msgid "versions.tf" +msgstr "versions.tf" + +#: ../../automation/vyos-api.rst:145 +msgid "versus a non-existent path:" +msgstr "versus a non-existent path:" + +#: ../../automation/terraform/terraformAWS.rst:300 +#: ../../automation/terraform/terraformAZ.rst:95 +#: ../../automation/terraform/terraformGoogle.rst:377 +#: ../../automation/terraform/terraformvSphere.rst:98 +msgid "vyos.tf" +msgstr "vyos.tf" diff --git a/docs/_locale/uk/cli.pot b/docs/_locale/uk/cli.pot index 40f3c22e..d2d2418b 100644 --- a/docs/_locale/uk/cli.pot +++ b/docs/_locale/uk/cli.pot @@ -10,127 +10,127 @@ msgstr "" #: ../../cli.rst:115 msgid "**Active** or **running configuration** is the system configuration that is loaded and currently active (used by VyOS). Any change in the configuration will have to be committed to belong to the active/running configuration." -msgstr "**Active** or **running configuration** is the system configuration that is loaded and currently active (used by VyOS). Any change in the configuration will have to be committed to belong to the active/running configuration." +msgstr "**Активна** або **запущена конфігурація** – це конфігурація системи, яка завантажена та наразі активна (використовується VyOS). Будь-яка зміна в конфігурації повинна бути закріплена для належності до активної/працюючої конфігурації." #: ../../cli.rst:382 msgid "**Example:**" -msgstr "**Example:**" +msgstr "**Приклад:**" #: ../../cli.rst:126 msgid "**Saved configuration** is the one saved to a file using the :cfgcmd:`save` command. It allows you to keep safe a configuration for future uses. There can be multiple configuration files. The default or \"boot\" configuration is saved and loaded from the file ``/config/config.boot``." -msgstr "**Saved configuration** is the one saved to a file using the :cfgcmd:`save` command. It allows you to keep safe a configuration for future uses. There can be multiple configuration files. The default or \"boot\" configuration is saved and loaded from the file ``/config/config.boot``." +msgstr "**Збережена конфігурація** – це конфігурація, збережена у файл за допомогою команди :cfgcmd:`save`. Це дозволяє зберегти конфігурацію для подальшого використання. Файлів конфігурації може бути декілька. Стандартна або "завантажувальна" конфігурація зберігається та завантажується з файлу ``/config/config.boot``." #: ../../cli.rst:120 msgid "**Working configuration** is the one that is currently being modified in configuration mode. Changes made to the working configuration do not go into effect until the changes are committed with the :cfgcmd:`commit` command. At which time the working configuration will become the active or running configuration." -msgstr "**Working configuration** is the one that is currently being modified in configuration mode. Changes made to the working configuration do not go into effect until the changes are committed with the :cfgcmd:`commit` command. At which time the working configuration will become the active or running configuration." +msgstr "**Робоча конфігурація** – це конфігурація, яка зараз змінюється в режимі конфігурації. Зміни, внесені до робочої конфігурації, не набудуть чинності, доки зміни не будуть зафіксовані за допомогою команди :cfgcmd:`commit`. У цей час робоча конфігурація стане активною або запущеною конфігурацією." #: ../../cli.rst:113 msgid "A VyOS system has three major types of configurations:" -msgstr "A VyOS system has three major types of configurations:" +msgstr "Система VyOS має три основні типи конфігурацій:" -#: ../../cli.rst:576 +#: ../../cli.rst:579 msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." -msgstr "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." +msgstr "Перезавантаження через те, що ви не ввели ``confirm``, не обов’язково переведе вас до *збереженої конфігурації*, а до точки перед невдалим комітом." -#: ../../cli.rst:690 +#: ../../cli.rst:693 msgid "Access opmode from config mode" -msgstr "Access opmode from config mode" +msgstr "Доступ до opmode з режиму конфігурації" -#: ../../cli.rst:697 +#: ../../cli.rst:700 msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." -msgstr "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." +msgstr "Доступ до цих команд можливий за допомогою команди ``run [command]``. За допомогою цієї команди ви матимете доступ до всього, доступного з робочого режиму." -#: ../../cli.rst:651 +#: ../../cli.rst:654 msgid "Add comment as an annotation to a configuration node." -msgstr "Add comment as an annotation to a configuration node." +msgstr "Додайте коментар як анотацію до вузла конфігурації." -#: ../../cli.rst:539 +#: ../../cli.rst:542 msgid "All changes in the working config will thus be lost." -msgstr "All changes in the working config will thus be lost." +msgstr "Таким чином, усі зміни в робочій конфігурації буде втрачено." #: ../../cli.rst:355 msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." -msgstr "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." +msgstr "Усі команди, що виконуються тут, відносяться до рівня конфігурації, який ви ввели. Ви можете робити все з верхнього рівня, але команди будуть досить довгими, якщо їх вводити вручну." -#: ../../cli.rst:676 +#: ../../cli.rst:679 msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." -msgstr "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show <section>`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." +msgstr "Важливо зауважити, що оскільки коментар додається вгорі розділу, він не відображатиметься, якщо ``показати<section> `` використовується команда. У наведеному вище прикладі команда `show firewall` повертатиметься після рядка ``firewall {``, приховуючи коментар." #: ../../cli.rst:493 msgid "Any change you do on the configuration, will not take effect until committed using the :cfgcmd:`commit` command in configuration mode." -msgstr "Any change you do on the configuration, will not take effect until committed using the :cfgcmd:`commit` command in configuration mode." +msgstr "Будь-яка зміна, яку ви вносите в конфігурацію, не набуде чинності, доки не буде зафіксовано за допомогою команди :cfgcmd:`commit` у режимі конфігурації." #: ../../cli.rst:221 msgid "Both these ``show`` commands should be executed when in operational mode, they do not work directly in configuration mode. There is a special way on how to :ref:`run_opmode_from_config_mode`." -msgstr "Both these ``show`` commands should be executed when in operational mode, they do not work directly in configuration mode. There is a special way on how to :ref:`run_opmode_from_config_mode`." +msgstr "Обидві ці команди ``show`` слід виконувати в робочому режимі, вони не працюють безпосередньо в режимі конфігурації. Існує спеціальний спосіб :ref:`запустити_opmode_from_config_mode`." #: ../../cli.rst:193 msgid "By default, the configuration is displayed in a hierarchy like the above example, this is only one of the possible ways to display the configuration. When the configuration is generated and the device is configured, changes are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` commands." -msgstr "By default, the configuration is displayed in a hierarchy like the above example, this is only one of the possible ways to display the configuration. When the configuration is generated and the device is configured, changes are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` commands." +msgstr "За замовчуванням конфігурація відображається в ієрархії, як у прикладі вище, це лише один із можливих способів відображення конфігурації. Після створення конфігурації та налаштування пристрою зміни додаються за допомогою набору команд :cfgcmd:`set` і :cfgcmd:`delete`." #: ../../cli.rst:5 msgid "Command Line Interface" -msgstr "Command Line Interface" +msgstr "Інтерфейс командного рядка" -#: ../../cli.rst:701 +#: ../../cli.rst:704 msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." -msgstr "Command completion and syntax help with ``?`` and ``[tab]`` will also work." +msgstr "Доповнення команд і синтаксична довідка з ``?`` і ``[tab]`` також працюватимуть." -#: ../../cli.rst:754 +#: ../../cli.rst:757 msgid "Compare configurations" -msgstr "Compare configurations" +msgstr "Порівняйте конфігурації" #: ../../cli.rst:75 msgid "Configuration Mode" -msgstr "Configuration Mode" +msgstr "Режим конфігурації" #: ../../cli.rst:102 msgid "Configuration Overview" -msgstr "Configuration Overview" +msgstr "Огляд конфігурації" #: ../../cli.rst:457 msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." -msgstr "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." +msgstr "Команди конфігурації зведені з дерева в команди «одного рядка», показані в :opcmd:`показати команди конфігурації` з режиму роботи. Команди відносяться до рівня, на якому вони виконуються, і вся зайва інформація з поточного рівня видаляється з введеної команди." -#: ../../cli.rst:535 +#: ../../cli.rst:538 msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." -msgstr "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." +msgstr "Неможливо вийти з режиму конфігурації, поки існують незафіксовані зміни. Щоб вийти з режиму налаштування без застосування змін, необхідно використати команду :cfgcmd:`exit discard`." -#: ../../cli.rst:583 +#: ../../cli.rst:586 msgid "Copy a configuration element." -msgstr "Copy a configuration element." +msgstr "Скопіюйте елемент конфігурації." #: ../../cli.rst:447 msgid "Editing the configuration" -msgstr "Editing the configuration" +msgstr "Редагування конфігурації" -#: ../../cli.rst:662 +#: ../../cli.rst:665 msgid "Example:" -msgstr "Example:" +msgstr "приклад:" #: ../../cli.rst:30 msgid "Example showing possible show commands:" -msgstr "Example showing possible show commands:" +msgstr "Приклад, що показує можливі команди шоу:" #: ../../cli.rst:433 msgid "Exiting from the configuration mode is done via the :cfgcmd:`exit` command from the top level, executing :cfgcmd:`exit` from within a sub-level takes you back to the top level." -msgstr "Exiting from the configuration mode is done via the :cfgcmd:`exit` command from the top level, executing :cfgcmd:`exit` from within a sub-level takes you back to the top level." +msgstr "Вихід із режиму налаштування здійснюється за допомогою команди :cfgcmd:`exit` з верхнього рівня, виконання :cfgcmd:`exit` з підрівня повертає вас на верхній рівень." #: ../../cli.rst:21 msgid "For example typing ``sh`` followed by the ``TAB`` key will complete to ``show``. Pressing ``TAB`` a second time will display the possible sub-commands of the ``show`` command." -msgstr "For example typing ``sh`` followed by the ``TAB`` key will complete to ``show``. Pressing ``TAB`` a second time will display the possible sub-commands of the ``show`` command." +msgstr "Наприклад, введення ``sh`` і клавіша ``TAB`` призведе до ``show``. Повторне натискання ``TAB`` відобразить можливі підкоманди команди ``show``." #: ../../cli.rst:201 msgid "Get a collection of all the set commands required which led to the running configuration." -msgstr "Get a collection of all the set commands required which led to the running configuration." +msgstr "Отримайте збірку всіх необхідних команд, які призвели до запущеної конфігурації." -#: ../../cli.rst:933 +#: ../../cli.rst:936 msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." -msgstr "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." +msgstr "Якщо ви підключені віддалено, ви втратите з’єднання. Ви можете спочатку скопіювати конфігурацію, відредагувати її, щоб забезпечити з’єднання, і завантажити відредаговану конфігурацію." -#: ../../cli.rst:919 +#: ../../cli.rst:922 msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" -msgstr "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" +msgstr "Якщо ви хочете повністю видалити конфігурацію та відновити стандартну, ви можете ввести таку команду в режимі конфігурації:" #: ../../cli.rst:413 msgid "It is also possible to display all :cfgcmd:`set` commands within configuration mode using :cfgcmd:`show | commands`" @@ -138,320 +138,336 @@ msgstr "It is also possible to display all :cfgcmd:`set` commands within configu #: ../../cli.rst:413 msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" -msgstr "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" +msgstr "Також можна відобразити всі команди `set` в режимі конфігурації за допомогою :cfgcmd:`show | команди`" -#: ../../cli.rst:723 +#: ../../cli.rst:726 msgid "Local Archive" -msgstr "Local Archive" +msgstr "Місцевий архів" -#: ../../cli.rst:714 +#: ../../cli.rst:717 msgid "Managing configurations" -msgstr "Managing configurations" +msgstr "Керування конфігураціями" -#: ../../cli.rst:627 +#: ../../cli.rst:630 msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." -msgstr "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." +msgstr "Зауважте, що команда ``show`` поважає ваш рівень редагування, і на цьому рівні ви можете переглядати змінений набір правил брандмауера лише за допомогою ``show`` без параметрів." #: ../../cli.rst:11 msgid "Operational Mode" -msgstr "Operational Mode" +msgstr "Режим роботи" #: ../../cli.rst:13 msgid "Operational mode allows for commands to perform operational system tasks and view system and service status, while configuration mode allows for the modification of system configuration." -msgstr "Operational mode allows for commands to perform operational system tasks and view system and service status, while configuration mode allows for the modification of system configuration." +msgstr "Оперативний режим дозволяє командам виконувати завдання операційної системи та переглядати стан системи та служби, а режим конфігурації дозволяє змінювати конфігурацію системи." #: ../../cli.rst:85 msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." -msgstr "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." +msgstr "Підказка змінюється з ``$`` на ``#``. Щоб вийти з режиму налаштування, введіть ``вихід``." -#: ../../cli.rst:850 +#: ../../cli.rst:853 msgid "Remote Archive" -msgstr "Remote Archive" +msgstr "Віддалений архів" -#: ../../cli.rst:616 +#: ../../cli.rst:619 msgid "Rename a configuration element." -msgstr "Rename a configuration element." +msgstr "Перейменувати елемент конфігурації." -#: ../../cli.rst:917 +#: ../../cli.rst:920 msgid "Restore Default" -msgstr "Restore Default" +msgstr "Відновити значення за замовчуванням" -#: ../../cli.rst:725 +#: ../../cli.rst:728 msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." -msgstr "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." +msgstr "Ревізії зберігаються на диску. Ви можете переглядати, порівнювати та повертати їх до будь-яких попередніх версій, якщо щось піде не так." -#: ../../cli.rst:828 +#: ../../cli.rst:831 msgid "Rollback Changes" -msgstr "Rollback Changes" +msgstr "Відкат змін" -#: ../../cli.rst:835 +#: ../../cli.rst:838 msgid "Rollback to revision N (currently requires reboot)" -msgstr "Rollback to revision N (currently requires reboot)" +msgstr "Відкат до версії N (наразі вимагає перезавантаження)" -#: ../../cli.rst:884 +#: ../../cli.rst:887 msgid "Saving and loading manually" -msgstr "Saving and loading manually" +msgstr "Збереження та завантаження вручну" #: ../../cli.rst:94 msgid "See the configuration section of this document for more information on configuration mode." -msgstr "See the configuration section of this document for more information on configuration mode." +msgstr "Дивіться розділ конфігурації цього документа, щоб отримати додаткові відомості про режим конфігурації." #: ../../cli.rst:133 msgid "Seeing and navigating the configuration" -msgstr "Seeing and navigating the configuration" +msgstr "Перегляд конфігурації та навігація" -#: ../../cli.rst:810 +#: ../../cli.rst:813 msgid "Show commit revision difference." -msgstr "Show commit revision difference." +msgstr "Показати різницю в редакції фіксації." -#: ../../cli.rst:861 +#: ../../cli.rst:864 msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" -msgstr "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" +msgstr "Укажіть віддалене розташування архіву комітів як будь-яке з наведених нижче :abbr:`URI (уніфікований ідентифікатор ресурсу)`" #: ../../cli.rst:111 msgid "Terminology" -msgstr "Terminology" +msgstr "Термінологія" #: ../../cli.rst:17 msgid "The CLI provides a built-in help system. In the CLI the ``?`` key may be used to display available commands. The ``TAB`` key can be used to auto-complete commands and will present the help system upon a conflict or unknown value." -msgstr "The CLI provides a built-in help system. In the CLI the ``?`` key may be used to display available commands. The ``TAB`` key can be used to auto-complete commands and will present the help system upon a conflict or unknown value." +msgstr "CLI забезпечує вбудовану довідкову систему. У CLI можна використовувати клавішу ``?`` для відображення доступних команд. Клавіша ``TAB`` може використовуватися для автоматичного завершення команд і відображатиме довідкову систему у випадку конфлікту або невідомого значення." #: ../../cli.rst:7 msgid "The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a configuration mode." -msgstr "The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a configuration mode." +msgstr "VyOS :abbr:`CLI (інтерфейс командного рядка)` містить робочий і конфігураційний режими." #: ../../cli.rst:378 msgid "The :cfgcmd:`show` command within configuration mode will show the working configuration indicating line changes with ``+`` for additions, ``>`` for replacements and ``-`` for deletions." -msgstr "The :cfgcmd:`show` command within configuration mode will show the working configuration indicating line changes with ``+`` for additions, ``>`` for replacements and ``-`` for deletions." +msgstr "Команда :cfgcmd:`show` у режимі конфігурації покаже робочу конфігурацію, вказуючи на зміни рядка за допомогою ``+`` для додавання, ``>`` для заміни та ``-`` для видалення." #: ../../cli.rst:653 msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." -msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." +msgstr "Команда ``comment`` дозволяє вставити коментар над ``<config node> `` розділ конфігурації. Коли відображаються, коментарі обмежуються ``/*`` і ``*/`` як розділювачі відкриття/закриття. Коментарі потрібно зафіксувати, як і інші зміни конфігурації." -#: ../../cli.rst:784 +#: ../../cli.rst:656 +msgid "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." +msgstr "The ``comment`` command allows you to insert a comment above the ``<config node>`` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be committed, just like other config changes." + +#: ../../cli.rst:787 msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." -msgstr "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." +msgstr "Команда :cfgcmd:`compare` дозволяє порівнювати різні типи конфігурацій. Це також дозволяє порівнювати різні версії за допомогою команди :cfgcmd:`compare NM`, де N і M є номерами версій. Вихідні дані описуватимуть конфігурацію N у порівнянні з M, вказуючи знаком плюс (``+``) додаткові частини, які N має порівняно з M, і вказуючи знаком мінус (``-``) недоліки частини N відсутні в порівнянні з M." -#: ../../cli.rst:813 +#: ../../cli.rst:816 msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." -msgstr "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." +msgstr "Наведена вище команда також дозволяє побачити різницю між двома комітами. За умовчанням показано різницю з поточною конфігурацією." #: ../../cli.rst:338 msgid "The config mode" -msgstr "The config mode" +msgstr "Режим конфігурації" #: ../../cli.rst:449 msgid "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd:`delete` commands from within configuration mode." -msgstr "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd:`delete` commands from within configuration mode." +msgstr "Конфігурацію можна редагувати за допомогою команд :cfgcmd:`set` і :cfgcmd:`delete` у режимі налаштування." #: ../../cli.rst:359 msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." -msgstr "The current hierarchy level can be changed by the :cfgcmd:`edit` command." +msgstr "Поточний рівень ієрархії можна змінити командою :cfgcmd:`edit`." -#: ../../cli.rst:872 +#: ../../cli.rst:875 msgid "The number of revisions don't affect the commit-archive." -msgstr "The number of revisions don't affect the commit-archive." +msgstr "Кількість редагувань не впливає на архів комітів." -#: ../../cli.rst:930 +#: ../../cli.rst:933 msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." -msgstr "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." +msgstr "Тоді ви можете :cfgcmd:`зберегти`, щоб також видалити збережену конфігурацію." #: ../../cli.rst:422 msgid "These commands are also relative to the level you are inside and only relevant configuration blocks will be displayed when entering a sub-level." -msgstr "These commands are also relative to the level you are inside and only relevant configuration blocks will be displayed when entering a sub-level." +msgstr "Ці команди також пов’язані з рівнем, на якому ви перебуваєте, і під час переходу на підрівень відображатимуться лише відповідні блоки конфігурації." #: ../../cli.rst:475 msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." -msgstr "These two commands above are essentially the same, just executed from different levels in the hierarchy." +msgstr "Ці дві наведені вище команди по суті однакові, просто виконуються з різних рівнів ієрархії." -#: ../../cli.rst:824 +#: ../../cli.rst:827 msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." -msgstr "This means four commits ago we did ``set system ipv6 disable-forwarding``." +msgstr "Це означає, що чотири коміти тому ми зробили ``налаштування системного ipv6 disable-forwarding``." #: ../../cli.rst:480 msgid "To delete a configuration entry use the :cfgcmd:`delete` command, this also deletes all sub-levels under the current level you've specified in the :cfgcmd:`delete` command. Deleting an entry will also result in the element reverting back to its default value if one exists." -msgstr "To delete a configuration entry use the :cfgcmd:`delete` command, this also deletes all sub-levels under the current level you've specified in the :cfgcmd:`delete` command. Deleting an entry will also result in the element reverting back to its default value if one exists." +msgstr "Щоб видалити запис конфігурації, скористайтеся командою :cfgcmd:`delete`, це також видаляє всі підрівні поточного рівня, указаного в команді :cfgcmd:`delete`. Видалення запису також призведе до повернення елемента до значення за замовчуванням, якщо воно існує." #: ../../cli.rst:77 msgid "To enter configuration mode use the ``configure`` command:" -msgstr "To enter configuration mode use the ``configure`` command:" +msgstr "Щоб увійти в режим налаштування, використовуйте команду ``configure``:" -#: ../../cli.rst:658 +#: ../../cli.rst:661 msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." -msgstr "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." +msgstr "Щоб видалити наявний коментар із вашої поточної конфігурації, укажіть порожній рядок у подвійних лапках (``""``) як текст коментаря." #: ../../cli.rst:225 msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." -msgstr "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." +msgstr "Використовуйте ``показати команди конфігурації | strip-private``, коли ви хочете приховати особисті дані. Ви можете зробити це, якщо хочете поділитися своєю конфігурацією на `форумі`_." -#: ../../cli.rst:895 +#: ../../cli.rst:898 msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." -msgstr "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." +msgstr "Використовуйте цю команду, щоб завантажити конфігурацію, яка замінить поточну конфігурацію. Визначте розташування файлу конфігурації, який потрібно завантажити. Ви можете використовувати шлях до локального файлу, адресу SCP, адресу SFTP, адресу FTP, адресу HTTP, адресу HTTPS або адресу TFTP." -#: ../../cli.rst:508 +#: ../../cli.rst:511 msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." -msgstr "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." +msgstr "Використовуйте цю команду, щоб зберегти зміни конфігурації після перезавантаження. За замовчуванням він зберігається в */config/config.boot*. Якщо ви хочете зберегти файл конфігурації в іншому місці, ви можете додати локальний шлях, адресу SCP, адресу FTP або адресу TFTP." #: ../../cli.rst:454 msgid "Use this command to set the value of a parameter or to create a new element." -msgstr "Use this command to set the value of a parameter or to create a new element." +msgstr "Використовуйте цю команду, щоб встановити значення параметра або створити новий елемент." -#: ../../cli.rst:760 +#: ../../cli.rst:763 msgid "Use this command to spot what the differences are between different configurations." -msgstr "Use this command to spot what the differences are between different configurations." +msgstr "Використовуйте цю команду, щоб визначити відмінності між різними конфігураціями." -#: ../../cli.rst:552 +#: ../../cli.rst:555 msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." -msgstr "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." +msgstr "Використовуйте цю команду, щоб тимчасово зафіксувати зміни та встановити кількість хвилин, доступних для перевірки. ``confirm`` необхідно ввести протягом цих хвилин, інакше система перезавантажиться до попередньої конфігурації. Стандартне значення становить 10 хвилин." -#: ../../cli.rst:730 +#: ../../cli.rst:733 msgid "View all existing revisions on the local system." -msgstr "View all existing revisions on the local system." +msgstr "Переглянути всі існуючі версії в локальній системі." #: ../../cli.rst:137 msgid "View the current active configuration, also known as the running configuration, from the operational mode." -msgstr "View the current active configuration, also known as the running configuration, from the operational mode." +msgstr "Перегляньте поточну активну конфігурацію, також відому як поточна конфігурація, у робочому режимі." #: ../../cli.rst:233 msgid "View the current active configuration in JSON format." -msgstr "View the current active configuration in JSON format." +msgstr "Перегляньте поточну активну конфігурацію у форматі JSON." #: ../../cli.rst:241 msgid "View the current active configuration in readable JSON format." -msgstr "View the current active configuration in readable JSON format." +msgstr "Перегляньте поточну активну конфігурацію в читабельному форматі JSON." + +#: ../../cli.rst:855 +msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." +msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successful the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." #: ../../cli.rst:852 msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." -msgstr "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." +msgstr "VyOS може завантажити конфігурацію у віддалене місце після кожного виклику :cfgcmd:`commit`. Вам потрібно буде встановити розташування архіву комітів. Підтримуються сервери TFTP, FTP, SCP і SFTP. Кожного разу, коли :cfgcmd:`commit` є успішним, файл ``config.boot`` буде скопійовано до визначеного місця призначення. Ім’я файлу, що використовується на віддаленому хості, буде ``config.boot-hostname.YYYYMMDD_HHMMSS``." -#: ../../cli.rst:716 +#: ../../cli.rst:719 msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." -msgstr "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." +msgstr "VyOS поставляється з інтегрованою системою керування версіями для конфігурації системи. Він автоматично підтримує резервну копію кожної попередньої конфігурації, яка була зафіксована в системі. Конфігурації керуються локальними версіями для відкоту, але їх також можна зберігати на віддаленому хості для архівування/резервного копіювання." -#: ../../cli.rst:756 +#: ../../cli.rst:759 msgid "VyOS lets you compare different configurations." -msgstr "VyOS lets you compare different configurations." +msgstr "VyOS дозволяє порівнювати різні конфігурації." #: ../../cli.rst:104 msgid "VyOS makes use of a unified configuration file for the entire system's configuration: ``/config/config.boot``. This allows easy template creation, backup, and replication of system configuration. A system can thus also be easily cloned by simply copying the required configuration files." -msgstr "VyOS makes use of a unified configuration file for the entire system's configuration: ``/config/config.boot``. This allows easy template creation, backup, and replication of system configuration. A system can thus also be easily cloned by simply copying the required configuration files." +msgstr "VyOS використовує уніфікований файл конфігурації для всієї конфігурації системи: ``/config/config.boot``. Це дозволяє легко створювати шаблони, створювати резервні копії та тиражувати конфігурацію системи. Таким чином, систему також можна легко клонувати, просто скопіювавши необхідні конфігураційні файли." #: ../../cli.rst:558 msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." -msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +msgstr "А якщо ви робите щось небезпечне? Припустімо, що ви хочете налаштувати брандмауер і не впевнені, що немає помилок, які заблокують вас у вашій системі. Ви можете використовувати підтверджену фіксацію. Якщо ви введете команду ``commit-confirm``, ваші зміни буде зафіксовано, і якщо ви не введете команду ``confirm`` протягом 10 хвилин, ваша система перезавантажиться до попередньої версії конфігурації." + +#: ../../cli.rst:561 +msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +msgstr "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be committed, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." #: ../../cli.rst:340 msgid "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." -msgstr "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." +msgstr "Під час входу в режим конфігурації ви переміщуєтеся всередині деревоподібної структури, щоб увійти в режим конфігурації, у робочому режимі введіть команду :opcmd:`configure`." #: ../../cli.rst:351 msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." -msgstr "When going into configuration mode, prompt changes from ``$`` to ``#``." +msgstr "Під час переходу в режим налаштування підказка змінюється з ``$`` на ``#``." -#: ../../cli.rst:692 +#: ../../cli.rst:695 msgid "When inside configuration mode you are not directly able to execute operational commands." -msgstr "When inside configuration mode you are not directly able to execute operational commands." +msgstr "У режимі конфігурації ви не можете безпосередньо виконувати робочі команди." #: ../../cli.rst:61 msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." -msgstr "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." +msgstr "Якщо вихід команди призводить до більшої кількості рядків, ніж може бути відображено на екрані терміналу, результат розбивається на сторінки, як вказує підказка ``:``." -#: ../../cli.rst:889 +#: ../../cli.rst:892 msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" -msgstr "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" +msgstr "Використовуючи команду save_, ви можете додати конкретне місце для збереження файлу конфігурації. І за потреби ви зможете завантажити його за допомогою команди ``load``:" #: ../../cli.rst:72 msgid "When viewing in page mode the following commands are available:" -msgstr "When viewing in page mode the following commands are available:" +msgstr "Під час перегляду в режимі сторінки доступні такі команди:" #: ../../cli.rst:370 msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." +msgstr "Тепер ви перебуваєте на підрівні відносно ``інтерфейсів ethernet eth0``, усі команди, які виконуються з цього моменту, відносяться до цього підрівня. Використовуйте команду :cfgcmd:`top` або :cfgcmd:`exit`, щоб повернутися на вершину ієрархії. Ви також можете використовувати команду :cfgcmd:`up`, щоб перейти лише на один рівень вище за раз." #: ../../cli.rst:370 msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." msgstr "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use either the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." -#: ../../cli.rst:618 +#: ../../cli.rst:621 msgid "You can also rename config subtrees:" -msgstr "You can also rename config subtrees:" +msgstr "Ви також можете перейменувати піддерева конфігурації:" -#: ../../cli.rst:585 +#: ../../cli.rst:588 msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." -msgstr "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." +msgstr "Ви можете копіювати та видаляти піддерева конфігурації. Припустімо, ви встановили набір правил брандмауера ``FromWorld`` з одним правилом, яке дозволяє трафік із певної підмережі. Тепер ви хочете налаштувати подібне правило, але для іншої підмережі. Змініть рівень редагування на ``назва брандмауера FromWorld`` і використовуйте ``копіювати правило 10 до правила 20``, а потім змініть правило 20." -#: ../../cli.rst:830 +#: ../../cli.rst:833 msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." -msgstr "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." +msgstr "Ви можете скасувати зміни конфігурації за допомогою команди rollback. Це застосує вибрану версію та ініціює перезавантаження системи." #: ../../cli.rst:58 msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." -msgstr "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." +msgstr "Ви можете прокручувати вгору за допомогою клавіш ``[Shift]+[PageUp]`` і прокручувати вниз за допомогою ``[Shift]+[PageDown]``." + +#: ../../cli.rst:504 +msgid "You can specify a commit message with :cfgcmd:`commit comment <message>`." +msgstr "You can specify a commit message with :cfgcmd:`commit comment <message>`." -#: ../../cli.rst:747 +#: ../../cli.rst:750 msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." -msgstr "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." +msgstr "Ви можете вказати кількість версій, що зберігаються на диску. N може бути в діапазоні від 0 до 65535. Коли кількість версій перевищує встановлене значення, найстаріша версія видаляється. За замовчуванням це значення зберігає 100 редакцій локально." -#: ../../cli.rst:886 +#: ../../cli.rst:889 msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." -msgstr "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." +msgstr "Ви можете використовувати команди ``save`` і ``load``, якщо ви хочете вручну керувати певними конфігураційними файлами." -#: ../../cli.rst:874 +#: ../../cli.rst:877 msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" -msgstr "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" +msgstr "Ви можете виявити, що VyOS не дозволяє безпечне з’єднання, оскільки не може перевірити легітимність віддаленого сервера. Щоб швидко додати відбиток SSH віддаленого хоста до вашого файлу ``~/.ssh/known_hosts``, ви можете скористатися наведеним нижче обхідним шляхом:" -#: ../../cli.rst:927 +#: ../../cli.rst:930 msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." -msgstr "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." +msgstr "Вас запитають, чи хочете ви продовжити. Якщо ви приймаєте, вам доведеться використовувати :cfgcmd:`commit`, якщо ви хочете зробити зміни активними." #: ../../cli.rst:67 msgid "``b`` will scroll back one page" -msgstr "``b`` will scroll back one page" +msgstr "``b`` прокрутить на одну сторінку назад" -#: ../../cli.rst:866 +#: ../../cli.rst:869 msgid "``ftp://<user>:<passwd>@<host>/<dir>``" -msgstr "``ftp://<user>:<passwd>@<host>/<dir>``" +msgstr "``ftp://<user> :<passwd> @<host> /<dir> ``" -#: ../../cli.rst:870 +#: ../../cli.rst:873 msgid "``git+https://<user>:<passwd>@<host>/<path>``" msgstr "``git+https://<user>:<passwd>@<host>/<path>``" -#: ../../cli.rst:864 +#: ../../cli.rst:867 msgid "``http://<user>:<passwd>@<host>:/<dir>``" msgstr "``http://<user>:<passwd>@<host>:/<dir>``" -#: ../../cli.rst:865 +#: ../../cli.rst:868 msgid "``https://<user>:<passwd>@<host>:/<dir>``" msgstr "``https://<user>:<passwd>@<host>:/<dir>``" #: ../../cli.rst:71 msgid "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size." -msgstr "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size." +msgstr "``стрілка вліво`` і ``стрілка вправо`` можна використовувати для прокручування вліво або вправо у випадку, якщо вихідні дані містять рядки, які перевищують розмір терміналу." #: ../../cli.rst:65 msgid "``q`` key can be used to cancel output" -msgstr "``q`` key can be used to cancel output" +msgstr "Для скасування виводу можна використовувати клавішу ``q``" #: ../../cli.rst:68 msgid "``return`` will scroll down one line" -msgstr "``return`` will scroll down one line" +msgstr "``return`` прокрутить на один рядок вниз" -#: ../../cli.rst:868 +#: ../../cli.rst:871 msgid "``scp://<user>:<passwd>@<host>:/<dir>``" -msgstr "``scp://<user>:<passwd>@<host>:/<dir>``" +msgstr "``scp://<user> :<passwd> @<host> :/<dir> ``" -#: ../../cli.rst:867 +#: ../../cli.rst:870 msgid "``sftp://<user>:<passwd>@<host>/<dir>``" -msgstr "``sftp://<user>:<passwd>@<host>/<dir>``" +msgstr "``sftp://<user> :<passwd> @<host> /<dir> ``" #: ../../cli.rst:66 msgid "``space`` will scroll down one page" -msgstr "``space`` will scroll down one page" +msgstr "``пробіл`` прокрутить на одну сторінку вниз" -#: ../../cli.rst:869 +#: ../../cli.rst:872 msgid "``tftp://<host>/<dir>``" -msgstr "``tftp://<host>/<dir>``" +msgstr "``tftp://<host> /<dir> ``" #: ../../cli.rst:69 msgid "``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time respectively" -msgstr "``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time respectively" +msgstr "``стрілка вгору`` і ``стрілка вниз`` прокручують вгору або вниз на один рядок відповідно" diff --git a/docs/_locale/uk/configexamples.pot b/docs/_locale/uk/configexamples.pot index d009b64c..b6a28477 100644 --- a/docs/_locale/uk/configexamples.pot +++ b/docs/_locale/uk/configexamples.pot @@ -10,60 +10,60 @@ msgstr "" #: ../../configexamples/zone-policy.rst:162 msgid "''It is important to note, that you do not want to add logging to the established state rule as you will be logging both the inbound and outbound packets for each session instead of just the initiation of the session. Your logs will be massive in a very short period of time.''" -msgstr "''It is important to note, that you do not want to add logging to the established state rule as you will be logging both the inbound and outbound packets for each session instead of just the initiation of the session. Your logs will be massive in a very short period of time.''" +msgstr "''Важливо зауважити, що ви не хочете додавати журналювання до встановленого правила стану, оскільки ви реєструватимете як вхідні, так і вихідні пакети для кожного сеансу, а не лише початок сеансу. Ваші журнали стануть масивними за дуже короткий проміжок часу." #: ../../configexamples/azure-vpn-bgp.rst:117 msgid "**Important**: Add an interface route to reach Azure's BGP listener" -msgstr "**Important**: Add an interface route to reach Azure's BGP listener" +msgstr "**Важливо**: додайте маршрут інтерфейсу для доступу до прослухувача BGP Azure" #: ../../configexamples/azure-vpn-dual-bgp.rst:134 msgid "**Important**: Add an interface route to reach both Azure's BGP listeners" -msgstr "**Important**: Add an interface route to reach both Azure's BGP listeners" +msgstr "**Важливо**: додайте маршрут інтерфейсу, щоб отримати доступ до обох слухачів BGP Azure" #: ../../configexamples/azure-vpn-dual-bgp.rst:156 msgid "**Important**: Disable connected check, otherwise the routes learned from Azure will not be imported into the routing table." -msgstr "**Important**: Disable connected check, otherwise the routes learned from Azure will not be imported into the routing table." +msgstr "**Важливо**: вимкніть перевірку підключення, інакше маршрути, отримані з Azure, не будуть імпортовані в таблицю маршрутизації." #: ../../configexamples/azure-vpn-bgp.rst:133 msgid "**Important**: Disable connected check \\" -msgstr "**Important**: Disable connected check \\" +msgstr "**Важливо**: Вимкніть перевірку підключення \\" #: ../../configexamples/l3vpn-hub-and-spoke.rst:46 msgid "**NOTE:** VyOS Router (tested with VyOS 1.4-rolling-202110310317) – The configurations below are specifically for VyOS 1.4.x." -msgstr "**NOTE:** VyOS Router (tested with VyOS 1.4-rolling-202110310317) – The configurations below are specifically for VyOS 1.4.x." +msgstr "**ПРИМІТКА.** Маршрутизатор VyOS (перевірено з VyOS 1.4-rolling-202110310317) – наведені нижче конфігурації спеціально для VyOS 1.4.x." #: ../../configexamples/l3vpn-hub-and-spoke.rst:1123 msgid "**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see * * * for the transit routers of the mpls backbone." -msgstr "**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see * * * for the transit routers of the mpls backbone." +msgstr "**Примітка.** На даний момент trace mpls не показує мітки/шляхи. Отже, ми побачимо * * * для транзитних маршрутизаторів магістралі mpls." #: ../../configexamples/zone-policy.rst:34 msgid "**This specific example is for a router on a stick, but is very easily adapted for however many NICs you have**:" -msgstr "**This specific example is for a router on a stick, but is very easily adapted for however many NICs you have**:" +msgstr "**Цей конкретний приклад стосується маршрутизатора на накопичувачі, але його дуже легко адаптувати для будь-якої кількості мережевих карток, які у вас є**:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:5 msgid "**Virtual Routing and Forwarding** is a technology that allow multiple instance of a routing table to exist within a single device. One of the key aspect of **VRFs** is that do not share the same routes or interfaces, therefore packets are forwarded between interfaces that belong to the same VRF only." -msgstr "**Virtual Routing and Forwarding** is a technology that allow multiple instance of a routing table to exist within a single device. One of the key aspect of **VRFs** is that do not share the same routes or interfaces, therefore packets are forwarded between interfaces that belong to the same VRF only." +msgstr "**Віртуальна маршрутизація та переадресація** — це технологія, яка дозволяє існувати кільком примірникам таблиці маршрутизації на одному пристрої. Одним із ключових аспектів **VRF** є те, що вони не використовують однакові маршрути чи інтерфейси, тому пакети пересилаються між інтерфейсами, які належать лише одній VRF." #: ../../configexamples/ha.rst:389 msgid "**offsite1**" -msgstr "**offsite1**" +msgstr "**поза сайтом1**" #: ../../configexamples/ha.rst:201 #: ../../configexamples/ha.rst:237 #: ../../configexamples/ha.rst:366 #: ../../configexamples/ha.rst:540 msgid "**router1**" -msgstr "**router1**" +msgstr "**роутер1**" #: ../../configexamples/ha.rst:215 #: ../../configexamples/ha.rst:250 #: ../../configexamples/ha.rst:581 msgid "**router2**" -msgstr "**router2**" +msgstr "**роутер2**" #: ../../configexamples/ha.rst:70 msgid "100: 'Public' network, using our 203.0.113.0/24 network." -msgstr "100: 'Public' network, using our 203.0.113.0/24 network." +msgstr "100: «Загальнодоступна» мережа, яка використовує нашу мережу 203.0.113.0/24." #: ../../configexamples/azure-vpn-bgp.rst:38 #: ../../configexamples/azure-vpn-dual-bgp.rst:35 @@ -118,35 +118,35 @@ msgstr "172.17.1.2/24 CS0" #: ../../configexamples/qos.rst:143 msgid "172.17.1.2/24 CS0 - > CS4" -msgstr "172.17.1.2/24 CS0 - > CS4" +msgstr "172.17.1.2/24 CS0 - > CS4" #: ../../configexamples/qos.rst:150 msgid "172.17.1.2/24 CS4 - > CS5" -msgstr "172.17.1.2/24 CS4 - > CS5" +msgstr "172.17.1.2/24 CS4 - > CS5" #: ../../configexamples/qos.rst:26 msgid "172.17.1.2 CS0 -> CS4" -msgstr "172.17.1.2 CS0 -> CS4" +msgstr "172.17.1.2 CS0 -> CS4" #: ../../configexamples/qos.rst:27 msgid "172.17.1.3 CS0 -> CS5" -msgstr "172.17.1.3 CS0 -> CS5" +msgstr "172.17.1.3 CS0 -> CS5" #: ../../configexamples/qos.rst:29 msgid "172.17.1.40 CS0 by default" -msgstr "172.17.1.40 CS0 by default" +msgstr "172.17.1.40 CS0 за замовчуванням" #: ../../configexamples/qos.rst:28 msgid "172.17.1.4 CS0 -> CS6" -msgstr "172.17.1.4 CS0 -> CS6" +msgstr "172.17.1.4 CS0 -> CS6" #: ../../configexamples/zone-policy.rst:45 msgid "192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can SSH to VyOS." -msgstr "192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can SSH to VyOS." +msgstr "192.168.100.10/2001:0DB8:0:AAAA::10 — це консоль адміністратора. Він може SSH до VyOS." #: ../../configexamples/zone-policy.rst:43 msgid "192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and mail (SMTP/IMAP) server." -msgstr "192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and mail (SMTP/IMAP) server." +msgstr "192.168.200.200/2001:0DB8:0:BBBB::200 — внутрішній/зовнішній DNS, веб-сервер і поштовий (SMTP/IMAP) сервер." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 msgid "192.168.3.0/30" @@ -175,7 +175,7 @@ msgstr "2001:db8::6/127" #: ../../configexamples/ha.rst:71 msgid "201: 'Internal' network, using 10.200.201.0/24" -msgstr "201: 'Internal' network, using 10.200.201.0/24" +msgstr "201: «Внутрішня» мережа, використовуючи 10.200.201.0/24" #: ../../configexamples/azure-vpn-bgp.rst:44 #: ../../configexamples/azure-vpn-dual-bgp.rst:41 @@ -192,7 +192,7 @@ msgstr "2 private subnets on each site." #: ../../configexamples/l3vpn-hub-and-spoke.rst:35 msgid "2 x Route reflectors (VyOS-RRx)" -msgstr "2 x Route reflectors (VyOS-RRx)" +msgstr "2 x Маршрутні відбивачі (VyOS-RRx)" #: ../../configexamples/l3vpn-hub-and-spoke.rst:38 msgid "3 x Customer Edge (VyOS-CEx)" @@ -204,11 +204,11 @@ msgstr "3 x Provider Edge (VyOs-PEx)" #: ../../configexamples/l3vpn-hub-and-spoke.rst:36 msgid "4 x Provider routers (VyOS-Px)" -msgstr "4 x Provider routers (VyOS-Px)" +msgstr "4 маршрутизатори провайдера (VyOS-Px)" #: ../../configexamples/ha.rst:69 msgid "50: Upstream, using the 192.0.2.0/24 network allocated by them." -msgstr "50: Upstream, using the 192.0.2.0/24 network allocated by them." +msgstr "50: Вгору, використовуючи виділену ними мережу 192.0.2.0/24." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 msgid "64496:1" @@ -253,70 +253,78 @@ msgstr "65540" #: ../../configexamples/qos.rst:62 msgid "ADDRESS10 change CS0 -> CS4 source 172.17.1.2/32" -msgstr "ADDRESS10 change CS0 -> CS4 source 172.17.1.2/32" +msgstr "ADDRESS10 змінити CS0 -> джерело CS4 172.17.1.2/32" #: ../../configexamples/qos.rst:63 msgid "ADDRESS20 change CS0 -> CS5 source 172.17.1.3/32" -msgstr "ADDRESS20 change CS0 -> CS5 source 172.17.1.3/32" +msgstr "ADDRESS20 змінити CS0 -> джерело CS5 172.17.1.3/32" #: ../../configexamples/qos.rst:64 msgid "ADDRESS30 change CS0 -> CS6 source 172.17.1.4/32" -msgstr "ADDRESS30 change CS0 -> CS6 source 172.17.1.4/32" +msgstr "ADDRESS30 змінити CS0 -> джерело CS6 172.17.1.4/32" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:28 msgid "A brief excursion into VRFs: This has been one of the longest-standing feature requests of VyOS (dating back to 2016) which can be described as \"a VLAN for layer 2 is what a VRF is for layer 3\". With VRFs, a router/system can hold multiple, isolated routing tables on the same system. If you wonder what's the difference between multiple tables that people used for policy-based routing since forever, it's that a VRF also isolates connected routes rather than just static and dynamically learned routes, so it allows NICs in different VRFs to use conflicting network ranges without issues." -msgstr "A brief excursion into VRFs: This has been one of the longest-standing feature requests of VyOS (dating back to 2016) which can be described as \"a VLAN for layer 2 is what a VRF is for layer 3\". With VRFs, a router/system can hold multiple, isolated routing tables on the same system. If you wonder what's the difference between multiple tables that people used for policy-based routing since forever, it's that a VRF also isolates connected routes rather than just static and dynamically learned routes, so it allows NICs in different VRFs to use conflicting network ranges without issues." +msgstr "Короткий екскурс у VRF. Це був один із найдавніших запитів щодо функцій VyOS (починаючи з 2016 року), який можна описати так: «VLAN для рівня 2 — це те, що VRF для рівня 3». За допомогою VRF маршрутизатор/система може зберігати кілька ізольованих таблиць маршрутизації в одній системі. Якщо вам цікаво, яка різниця між декількома таблицями, які люди використовували для маршрутизації на основі політики з давніх-давен, це те, що VRF також ізолює підключені маршрути, а не просто статичні та динамічно вивчаються маршрути, тому він дозволяє мережевим картам у різних VRF використовувати конфліктні мережеві діапазони без питань." #: ../../configexamples/azure-vpn-bgp.rst:26 #: ../../configexamples/azure-vpn-dual-bgp.rst:23 msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." -msgstr "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." +msgstr "Ресурс з’єднання, розгорнутий в Azure, зв’язує шлюз Azure VNet і шлюз локальної мережі, що представляє пристрій Vyos." -#: ../../configexamples/index.rst:37 +#: ../../configexamples/index.rst:38 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." -msgstr "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." +msgstr "Хост ``vyos-oobm`` використовуватиметься як проксі-сервер ssh. Цей хост просто необхідний для лабораторного тесту." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:312 msgid "A key point to understand is that if we need two VRFs to communicate between each other EXPORT rt from VRF1 has to be in the IMPORT rt list from VRF2. But this is only in ONE direction, to complete the communication the EXPORT rt from VRF2 has to be in the IMPORT rt list from VRF1." -msgstr "A key point to understand is that if we need two VRFs to communicate between each other EXPORT rt from VRF1 has to be in the IMPORT rt list from VRF2. But this is only in ONE direction, to complete the communication the EXPORT rt from VRF2 has to be in the IMPORT rt list from VRF1." +msgstr "Ключовим моментом, який слід зрозуміти, є те, що якщо нам потрібні два VRF для зв’язку між собою, EXPORT rt з VRF1 має бути в списку IMPORT rt з VRF2. Але це тільки в ОДНОМУ напрямку, для завершення зв’язку EXPORT rt з VRF2 має бути в списку IMPORT rt з VRF1." #: ../../configexamples/azure-vpn-bgp.rst:21 #: ../../configexamples/azure-vpn-dual-bgp.rst:18 msgid "A local network gateway deployed in Azure representing the Vyos device, matching the below Vyos settings except for address space, which only requires the Vyos private IP, in this example 10.10.0.5/32" -msgstr "A local network gateway deployed in Azure representing the Vyos device, matching the below Vyos settings except for address space, which only requires the Vyos private IP, in this example 10.10.0.5/32" +msgstr "Шлюз локальної мережі, розгорнутий в Azure, представляє пристрій Vyos, що відповідає наведеним нижче налаштуванням Vyos, за винятком адресного простору, для якого потрібна лише приватна IP-адреса Vyos, у цьому прикладі 10.10.0.5/32" #: ../../configexamples/azure-vpn-dual-bgp.rst:15 msgid "A pair of Azure VNet Gateways deployed in active-active configuration with BGP enabled." -msgstr "A pair of Azure VNet Gateways deployed in active-active configuration with BGP enabled." +msgstr "Пара шлюзів Azure VNet, розгорнутих у конфігурації активний-активний із увімкненим BGP." #: ../../configexamples/azure-vpn-bgp.rst:18 msgid "A pair of Azure VNet Gateways deployed in active-passive configuration with BGP enabled." -msgstr "A pair of Azure VNet Gateways deployed in active-passive configuration with BGP enabled." +msgstr "Пара шлюзів Azure VNet, розгорнутих у активній-пасивній конфігурації з увімкненим BGP." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:16 msgid "A public, routable IPv4 address. This does not necessarily need to be static, but you will need to update the tunnel endpoint when/if your IP address changes, which can be done with a script and a scheduled task." -msgstr "A public, routable IPv4 address. This does not necessarily need to be static, but you will need to update the tunnel endpoint when/if your IP address changes, which can be done with a script and a scheduled task." +msgstr "Загальнодоступна адреса IPv4, яку можна маршрутизувати. Це не обов’язково має бути статичним, але вам потрібно буде оновити кінцеву точку тунелю, коли/якщо ваша IP-адреса змінюється, що можна зробити за допомогою сценарію та запланованого завдання." #: ../../configexamples/wan-load-balancing.rst:126 #: ../../configexamples/wan-load-balancing.rst:136 msgid "A rule order for prioritizing traffic is useful in scenarios where the secondary link has a lower speed and should only carry high priority traffic. It is assumed for this example that eth1 is connected to a slower connection than eth0 and should prioritize VoIP traffic." -msgstr "A rule order for prioritizing traffic is useful in scenarios where the secondary link has a lower speed and should only carry high priority traffic. It is assumed for this example that eth1 is connected to a slower connection than eth0 and should prioritize VoIP traffic." +msgstr "Порядок правил для визначення пріоритетів трафіку корисний у сценаріях, коли вторинне з’єднання має нижчу швидкість і має передавати лише високопріоритетний трафік. У цьому прикладі припускається, що eth1 підключено до повільнішого з’єднання, ніж eth0, і має надавати пріоритет VoIP-трафіку." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:41 msgid "A simple solution could be using different routing tables, or VRFs for all the networks so we can keep the routing restrictions. But for us to route between the different VRFs we would need a cable or a logical connection between each other:" -msgstr "A simple solution could be using different routing tables, or VRFs for all the networks so we can keep the routing restrictions. But for us to route between the different VRFs we would need a cable or a logical connection between each other:" +msgstr "Простим рішенням може бути використання різних таблиць маршрутизації або VRF для всіх мереж, щоб ми могли зберегти обмеження маршрутизації. Але для маршрутизації між різними VRF нам знадобиться кабель або логічне з’єднання між собою:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:19 msgid "Account at https://www.tunnelbroker.net/" -msgstr "Account at https://www.tunnelbroker.net/" +msgstr "Обліковий запис на https://www.tunnelbroker.net/" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:21 msgid "Active Directory on Windows server" -msgstr "Active Directory on Windows server" +msgstr "Active Directory на сервері Windows" #: ../../configexamples/ha.rst:161 msgid "Add (temporary) default route" -msgstr "Add (temporary) default route" +msgstr "Додати (тимчасовий) маршрут за замовчуванням" + +#: ../../configexamples/ansible.rst:99 +msgid "Add a simple playbook with the tasks for each router:" +msgstr "Add a simple playbook with the tasks for each router:" + +#: ../../configexamples/ansible.rst:73 +msgid "Add all the VyOS hosts:" +msgstr "Add all the VyOS hosts:" #: ../../configexamples/ansible.rst:73 msgid "Add all the hosts of VyOS:" @@ -328,7 +336,7 @@ msgstr "Add general variables:" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:47 msgid "Add the LDAP plugin configuration file `/config/auth/ldap-auth.config`" -msgstr "Add the LDAP plugin configuration file `/config/auth/ldap-auth.config`" +msgstr "Додайте файл конфігурації плагіна LDAP `/config/auth/ldap-auth.config`" #: ../../configexamples/ansible.rst:99 msgid "Add the simple playbook with the tasks for each router:" @@ -336,19 +344,23 @@ msgstr "Add the simple playbook with the tasks for each router:" #: ../../configexamples/wan-load-balancing.rst:167 msgid "Adding a rule for the second interface" -msgstr "Adding a rule for the second interface" +msgstr "Додавання правила для другого інтерфейсу" #: ../../configexamples/ha.rst:498 msgid "Advertise connected routes" -msgstr "Advertise connected routes" +msgstr "Оголошуйте сполучені маршрути" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:87 msgid "After all is done and commit, let's take a look if the Wireguard interface is up and running." -msgstr "After all is done and commit, let's take a look if the Wireguard interface is up and running." +msgstr "Після того, як усе зроблено та закріплено, давайте подивимося, чи працює інтерфейс Wireguard." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:324 msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" -msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" +msgstr "Після налаштування всіх VRF, залучених до цієї топології, ми глибше розглядаємо як BGP, так і таблицю маршрутизації для VRF LAN1" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check IPSec status, and counter on every tunnel:" +msgstr "After some testing, we can check IPSec status, and counter on every tunnel:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 msgid "After some testing, we can check ipsec status, and counter on every tunnel:" @@ -356,27 +368,35 @@ msgstr "After some testing, we can check ipsec status, and counter on every tunn #: ../../configexamples/qos.rst:81 msgid "After the interface eth0 on router VyOS3" -msgstr "After the interface eth0 on router VyOS3" +msgstr "Після інтерфейсу eth0 на роутері VyOS3" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:51 msgid "After this, we need the DHCP-Server and Relay configuration. To get a testable result, we just have one IP in the DHCP range. Expand it as you need it." -msgstr "After this, we need the DHCP-Server and Relay configuration. To get a testable result, we just have one IP in the DHCP range. Expand it as you need it." +msgstr "Після цього нам знадобиться конфігурація DHCP-сервера та ретрансляції. Щоб отримати перевірений результат, ми маємо лише одну IP-адресу в діапазоні DHCP. Розширюйте його, як вам це потрібно." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:52 msgid "After you have each public key. The wireguard interfaces can be setup." -msgstr "After you have each public key. The wireguard interfaces can be setup." +msgstr "Після того, як у вас є кожен відкритий ключ. Інтерфейси Wireguard можна налаштувати." #: ../../configexamples/wan-load-balancing.rst:28 msgid "All outgoing packets are assigned the source address of the assigned interface (SNAT)." -msgstr "All outgoing packets are assigned the source address of the assigned interface (SNAT)." +msgstr "Усім вихідним пакетам призначається адреса джерела призначеного інтерфейсу (SNAT)." #: ../../configexamples/wan-load-balancing.rst:24 msgid "All traffic coming in through eth2 is balanced between eth0 and eth1 on the router." -msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on the router." +msgstr "Весь трафік, що надходить через eth2, балансується між eth0 і eth1 на маршрутизаторі." #: ../../configexamples/pppoe-ipv6-basic.rst:88 msgid "Allow DHCPv6 packets for router" -msgstr "Allow DHCPv6 packets for router" +msgstr "Дозволити пакети DHCPv6 для маршрутизатора" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow DNS requests only only for local networks." +msgstr "Allow DNS requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow ICMP on all interfaces." +msgstr "Allow ICMP on all interfaces." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 msgid "Allow access to the router only from trusted networks." @@ -384,11 +404,11 @@ msgstr "Allow access to the router only from trusted networks." #: ../../configexamples/pppoe-ipv6-basic.rst:86 msgid "Allow all established and related traffic for router and LAN" -msgstr "Allow all established and related traffic for router and LAN" +msgstr "Дозволити весь встановлений і пов’язаний трафік для маршрутизатора та локальної мережі" #: ../../configexamples/pppoe-ipv6-basic.rst:87 msgid "Allow all icmpv6 packets for router and LAN" -msgstr "Allow all icmpv6 packets for router and LAN" +msgstr "Дозволити всі пакети icmpv6 для маршрутизатора та локальної мережі" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:38 msgid "Allow all new connections from local subnets." @@ -412,11 +432,11 @@ msgstr "Also, we can check firewall counters:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:716 msgid "Also we can verify how PE devices receives VPNv4 networks from the RRs and installing them to the specific customer VRFs:" -msgstr "Also we can verify how PE devices receives VPNv4 networks from the RRs and installing them to the specific customer VRFs:" +msgstr "Також ми можемо перевірити, як пристрої PE отримують мережі VPNv4 від RR і встановлюють їх на VRF певного клієнта:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:20 msgid "An L3VPN consists of multiple access links, multiple VPN routing and forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An L3VPN can be configured to connect two or more customer sites. In hub-and-spoke MPLS L3VPN environments, the spoke routers need to have unique Route Distinguishers (RDs). In order to use the hub site as a transit point for connectivity in such an environment, the spoke sites export their routes to the hub. Spokes can talk to hubs, but never have direct paths to other spokes. All traffic between spokes is controlled and delivered over the hub site." -msgstr "An L3VPN consists of multiple access links, multiple VPN routing and forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An L3VPN can be configured to connect two or more customer sites. In hub-and-spoke MPLS L3VPN environments, the spoke routers need to have unique Route Distinguishers (RDs). In order to use the hub site as a transit point for connectivity in such an environment, the spoke sites export their routes to the hub. Spokes can talk to hubs, but never have direct paths to other spokes. All traffic between spokes is controlled and delivered over the hub site." +msgstr "L3VPN складається з кількох каналів доступу, кількох таблиць маршрутизації та переадресації VPN (VRF) і кількох шляхів MPLS або кількох P2MP LSP. L3VPN можна налаштувати для підключення двох або більше сайтів клієнтів. У середовищах MPLS L3VPN із концентратором і стрілкою спіцеві маршрутизатори повинні мати унікальні розрізнювачі маршрутів (RD). Щоб використовувати вузловий сайт як транзитну точку для підключення в такому середовищі, спільні сайти експортують свої маршрути до концентратора. Спиці можуть спілкуватися з концентраторами, але ніколи не мають прямих шляхів до інших спиць. Весь трафік між вузлами контролюється та передається через вузол." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:191 msgid "And NAT Configuration:" @@ -424,20 +444,20 @@ msgstr "And NAT Configuration:" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:99 msgid "And ping the Branch PC from your central router to check the response." -msgstr "And ping the Branch PC from your central router to check the response." +msgstr "І перевірте відповідь на Branch PC із центрального маршрутизатора." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:90 msgid "And show all DHCP Leases" -msgstr "And show all DHCP Leases" +msgstr "І показати всі оренди DHCP" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:132 msgid "And the ``client`` to receive an IPv6 address with stateless autoconfig." -msgstr "And the ``client`` to receive an IPv6 address with stateless autoconfig." +msgstr "І ``клієнт`` для отримання IPv6-адреси з автоконфігурацією без збереження стану." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:-1 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:-1 msgid "Ansible Example topology image" -msgstr "Ansible Example topology image" +msgstr "Приклад зображення топології Ansible" #: ../../configexamples/ansible.rst:7 msgid "Ansible example" @@ -445,71 +465,71 @@ msgstr "Ansible example" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:10 msgid "Any information related to a VRF is not exchanged between devices -or in the same device- by default, this is a technique called **VRF-Lite**." -msgstr "Any information related to a VRF is not exchanged between devices -or in the same device- by default, this is a technique called **VRF-Lite**." +msgstr "Будь-яка інформація, пов’язана з VRF, не обмінюється між пристроями або в одному пристрої за замовчуванням, це техніка під назвою **VRF-Lite**." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:611 msgid "Appendix-A" -msgstr "Appendix-A" +msgstr "Додаток-А" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:764 msgid "Appendix-B" -msgstr "Appendix-B" +msgstr "Додаток-Б" #: ../../configexamples/ha.rst:500 msgid "As a reminder, only advertise routes that you are the default router for. This is why we are NOT announcing the 192.0.2.0/24 network, because if that was announced into OSPF, the other routers would try to connect to that network over a tunnel that connects to that network!" -msgstr "As a reminder, only advertise routes that you are the default router for. This is why we are NOT announcing the 192.0.2.0/24 network, because if that was announced into OSPF, the other routers would try to connect to that network over a tunnel that connects to that network!" +msgstr "Нагадуємо, рекламуйте лише маршрути, для яких ви є маршрутизатором за умовчанням. Ось чому ми НЕ анонсуємо мережу 192.0.2.0/24, тому що якби це було оголошено в OSPF, інші маршрутизатори намагалися б підключитися до цієї мережі через тунель, який з’єднується з цією мережею!" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:853 msgid "As we can see even if both VRF LAN1 and LAN2 has the same import RTs we are able to select which routes are effectively imported and installed." -msgstr "As we can see even if both VRF LAN1 and LAN2 has the same import RTs we are able to select which routes are effectively imported and installed." +msgstr "Як ми бачимо, навіть якщо VRF LAN1 і LAN2 мають однакові RT імпорту, ми можемо вибрати, які маршрути ефективно імпортувати та встановити." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:417 msgid "As we can see in the BGP table any imported route has been injected with a \"@\" followed by the VPN id; In the routing table of the VRF, if the route was installed, we can see -between round brackets- the exported VRF table." -msgstr "As we can see in the BGP table any imported route has been injected with a \"@\" followed by the VPN id; In the routing table of the VRF, if the route was installed, we can see -between round brackets- the exported VRF table." +msgstr "Як ми бачимо в таблиці BGP, до будь-якого імпортованого маршруту додано символ «@», за яким слідує ідентифікатор VPN; У таблиці маршрутизації VRF, якщо маршрут було встановлено, ми можемо побачити (між круглими дужками) експортовану таблицю VRF." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:52 msgid "As we can see this is unpractical." -msgstr "As we can see this is unpractical." +msgstr "Як бачимо, це непрактично." #: ../../configexamples/l3vpn-hub-and-spoke.rst:67 msgid "As we know the main assumption of L3VPN “Hub and Spoke” is, that the traffic between spokes have to pass via hub, in our scenario VyOS-PE2 is the Hub PE and the VyOS-CE1-HUB is the central customer office device that is responsible for controlling access between all spokes and announcing its network prefixes (10.0.0.100/32). VyOS-PE2 has the main VRF (its name is BLUE_HUB), its own Route-Distinguisher(RD) and route-target import/export lists. Multiprotocol-BGP(MP-BGP) delivers L3VPN related control-plane information to the nodes across network where PEs Spokes import the route-target 60535:1030 (this is export route-target of vrf BLUE_HUB) and export its own route-target 60535:1011(this is vrf BLUE_SPOKE export route-target). Therefore, the Customer edge nodes can only learn the network prefixes of the HUB site [10.0.0.100/32]. For this example VyOS-CE1 has network prefixes [10.0.0.80/32] / VyOS-CE2 has network prefixes [10.0.0.90/32]. Route-Reflector devices VyOS-RR1 and VyOS-RR2 are used to simplify network routes exchange and minimize iBGP peerings between devices." -msgstr "As we know the main assumption of L3VPN “Hub and Spoke” is, that the traffic between spokes have to pass via hub, in our scenario VyOS-PE2 is the Hub PE and the VyOS-CE1-HUB is the central customer office device that is responsible for controlling access between all spokes and announcing its network prefixes (10.0.0.100/32). VyOS-PE2 has the main VRF (its name is BLUE_HUB), its own Route-Distinguisher(RD) and route-target import/export lists. Multiprotocol-BGP(MP-BGP) delivers L3VPN related control-plane information to the nodes across network where PEs Spokes import the route-target 60535:1030 (this is export route-target of vrf BLUE_HUB) and export its own route-target 60535:1011(this is vrf BLUE_SPOKE export route-target). Therefore, the Customer edge nodes can only learn the network prefixes of the HUB site [10.0.0.100/32]. For this example VyOS-CE1 has network prefixes [10.0.0.80/32] / VyOS-CE2 has network prefixes [10.0.0.90/32]. Route-Reflector devices VyOS-RR1 and VyOS-RR2 are used to simplify network routes exchange and minimize iBGP peerings between devices." +msgstr "Як ми знаємо, основне припущення L3VPN «Hub and Spoke» полягає в тому, що трафік між вузлами має проходити через концентратор, у нашому сценарії VyOS-PE2 — це Hub PE, а VyOS-CE1-HUB — це центральний офісний пристрій клієнта, який відповідає за контроль доступу між усіма зв’язками та оголошення своїх мережевих префіксів (10.0.0.100/32). VyOS-PE2 має головний VRF (його назва BLUE_HUB), власний Route-Distinguisher (RD) і списки імпорту/експорту цільового маршруту. Multiprotocol-BGP(MP-BGP) доставляє пов’язану з L3VPN інформацію про площину керування до вузлів у мережі, де спілки PE імпортують цільовий маршрут 60535:1030 (це цільовий маршрут експорту vrf BLUE_HUB) і експортують власний цільовий маршрут 60535 :1011 (це мета експорту vrf BLUE_SPOKE). Таким чином, периферійні вузли клієнта можуть вивчати лише мережеві префікси сайту HUB [10.0.0.100/32]. Для цього прикладу VyOS-CE1 має мережеві префікси [10.0.0.80/32] / VyOS-CE2 має мережеві префікси [10.0.0.90/32]. Пристрої Route-Reflector VyOS-RR1 і VyOS-RR2 використовуються для спрощення обміну мережевими маршрутами та мінімізації однорангового обміну iBGP між пристроями." #: ../../configexamples/qos.rst:182 msgid "As we see shaper is working and the traffic will not work over 5 Mbit/s." -msgstr "As we see shaper is working and the traffic will not work over 5 Mbit/s." +msgstr "Як ми бачимо, шейпер працює і трафік більше 5 Мбіт/с працювати не буде." #: ../../configexamples/ha.rst:141 msgid "Assign external IP addresses" -msgstr "Assign external IP addresses" +msgstr "Призначити зовнішні IP-адреси" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:74 msgid "Assuming the pings are successful, you need to add some DNS servers. Some options:" -msgstr "Assuming the pings are successful, you need to add some DNS servers. Some options:" +msgstr "Якщо пінг пройшов успішно, вам потрібно додати кілька DNS-серверів. Деякі варіанти:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:107 msgid "At the first step we need to configure the IP/MPLS backbone network using OSPF as IGP protocol and LDP as label-switching protocol for the base connectivity between **P** (rovider), **P** (rovider) **E** (dge) and **R** (oute) **R** (eflector) nodes:" -msgstr "At the first step we need to configure the IP/MPLS backbone network using OSPF as IGP protocol and LDP as label-switching protocol for the base connectivity between **P** (rovider), **P** (rovider) **E** (dge) and **R** (oute) **R** (eflector) nodes:" +msgstr "На першому кроці нам потрібно налаштувати магістральну мережу IP/MPLS за допомогою OSPF як протоколу IGP і LDP як протоколу перемикання міток для базового з’єднання між **P** (rovider), **P** (rovider) ** Вузли E** (dge) і **R** (oute) **R** (eflector):" #: ../../configexamples/ha.rst:516 msgid "At this point, you now need to create the X link between all four routers. Use amdifferent /30 for each link." -msgstr "At this point, you now need to create the X link between all four routers. Use amdifferent /30 for each link." +msgstr "На цьому етапі вам потрібно створити X-з’єднання між усіма чотирма маршрутизаторами. Використовуйте amdifferent /30 для кожного посилання." #: ../../configexamples/ha.rst:184 msgid "At this point, you should be able to SSH into both of them, and will no longer need access to the console (unless you break something!)" -msgstr "At this point, you should be able to SSH into both of them, and will no longer need access to the console (unless you break something!)" +msgstr "На цьому етапі ви зможете підключатися через SSH до обох, і вам більше не потрібен доступ до консолі (якщо ви не зламаєте щось!)" #: ../../configexamples/ha.rst:278 msgid "At this point, you should be able to see both IP addresses when you run ``show interfaces``\\ , and ``show vrrp`` should show both interfaces in MASTER state (and SLAVE state on router2)." -msgstr "At this point, you should be able to see both IP addresses when you run ``show interfaces``\\ , and ``show vrrp`` should show both interfaces in MASTER state (and SLAVE state on router2)." +msgstr "На цьому етапі ви повинні бачити обидві IP-адреси, коли запускаєте ``show interfaces``\\ , а ``show vrrp`` має показувати обидва інтерфейси в стані MASTER (і стані SLAVE на router2)." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:102 msgid "At this point, your VyOS install should have full IPv6, but now your LAN devices need access." -msgstr "At this point, your VyOS install should have full IPv6, but now your LAN devices need access." +msgstr "На даний момент ваша інсталяція VyOS повинна мати повний IPv6, але тепер вашим пристроям локальної мережі потрібен доступ." #: ../../configexamples/l3vpn-hub-and-spoke.rst:324 msgid "At this step we are going to enable iBGP protocol on MPLS nodes and Route Reflectors (two routers for redundancy) that will deliver IPv4 VPN (L3VPN) routes between them:" -msgstr "At this step we are going to enable iBGP protocol on MPLS nodes and Route Reflectors (two routers for redundancy) that will deliver IPv4 VPN (L3VPN) routes between them:" +msgstr "На цьому кроці ми збираємося ввімкнути протокол iBGP на вузлах MPLS і Route Reflectors (два маршрутизатори для резервування), які забезпечать маршрути IPv4 VPN (L3VPN) між ними:" #: ../../configexamples/azure-vpn-bgp.rst:52 #: ../../configexamples/azure-vpn-dual-bgp.rst:51 @@ -518,11 +538,11 @@ msgstr "Azure ASN" #: ../../configexamples/azure-vpn-dual-bgp.rst:41 msgid "Azure VNet Gateway 1 public IP" -msgstr "Azure VNet Gateway 1 public IP" +msgstr "Загальнодоступна IP-адреса віртуальної мережі Azure Gateway 1" #: ../../configexamples/azure-vpn-dual-bgp.rst:43 msgid "Azure VNet Gateway 2 public IP" -msgstr "Azure VNet Gateway 2 public IP" +msgstr "Загальнодоступна IP-адреса Azure VNet Gateway 2" #: ../../configexamples/azure-vpn-bgp.rst:46 #: ../../configexamples/azure-vpn-dual-bgp.rst:45 @@ -531,12 +551,12 @@ msgstr "Azure VNet Gateway BGP IP" #: ../../configexamples/azure-vpn-bgp.rst:44 msgid "Azure VNet Gateway public IP" -msgstr "Azure VNet Gateway public IP" +msgstr "Загальнодоступна IP-адреса віртуальної мережі Azure" #: ../../configexamples/azure-vpn-bgp.rst:38 #: ../../configexamples/azure-vpn-dual-bgp.rst:35 msgid "Azure address space" -msgstr "Azure address space" +msgstr "Адресний простір Azure" #: ../../configexamples/ha.rst:534 msgid "BGP" @@ -544,11 +564,11 @@ msgstr "BGP" #: ../../configexamples/bgp-ipv6-unnumbered.rst:7 msgid "BGP IPv6 unnumbered with extended nexthop" -msgstr "BGP IPv6 unnumbered with extended nexthop" +msgstr "BGP IPv6 без номерів із розширеним наступним кроком" #: ../../configexamples/ha.rst:536 msgid "BGP is an extremely complex network protocol. An example is provided here." -msgstr "BGP is an extremely complex network protocol. An example is provided here." +msgstr "BGP є надзвичайно складним мережевим протоколом. Приклад наведено тут." #: ../../configexamples/l3vpn-hub-and-spoke.rst:88 msgid "BLUE_HUB" @@ -561,15 +581,19 @@ msgstr "BLUE_SPOKE" #: ../../configexamples/wan-load-balancing.rst:169 msgid "Based on the previous example, another rule for traffic from the second interface eth3 can be added to the load balancer. However, traffic meant to flow between the LAN subnets will be sent to eth0 and eth1 as well. To prevent this, another rule is required. This rule excludes traffic between the local subnets from the load balancer. It also excludes locally-sources packets (required for web caching with load balancing). eth+ is used as an alias that refers to all ethernet interfaces:" -msgstr "Based on the previous example, another rule for traffic from the second interface eth3 can be added to the load balancer. However, traffic meant to flow between the LAN subnets will be sent to eth0 and eth1 as well. To prevent this, another rule is required. This rule excludes traffic between the local subnets from the load balancer. It also excludes locally-sources packets (required for web caching with load balancing). eth+ is used as an alias that refers to all ethernet interfaces:" +msgstr "На основі попереднього прикладу до балансувальника навантаження можна додати ще одне правило для трафіку з другого інтерфейсу eth3. Однак трафік, призначений для проходження між підмережами LAN, також буде надіслано до eth0 та eth1. Щоб цього не сталося, потрібно ще одне правило. Це правило виключає трафік між локальними підмережами з балансувальника навантаження. Він також виключає пакети з локальних джерел (потрібні для веб-кешування з балансуванням навантаження). eth+ використовується як псевдонім, який посилається на всі інтерфейси Ethernet:" #: ../../configexamples/pppoe-ipv6-basic.rst:82 msgid "Basic Firewall" -msgstr "Basic Firewall" +msgstr "Базовий брандмауер" #: ../../configexamples/ha.rst:108 msgid "Basic Setup (via console)" -msgstr "Basic Setup (via console)" +msgstr "Основне налаштування (через консоль)" + +#: ../../configexamples/ansible.rst:64 +msgid "Basic configuration of ansible.cfg:" +msgstr "Basic configuration of ansible.cfg:" #: ../../configexamples/ansible.rst:64 msgid "Basik configuration of the ansible.cfg:" @@ -577,55 +601,55 @@ msgstr "Basik configuration of the ansible.cfg:" #: ../../configexamples/qos.rst:74 msgid "Before the interface eth0 on router VyOS3" -msgstr "Before the interface eth0 on router VyOS3" +msgstr "До інтерфейсу eth0 на роутері VyOS3" #: ../../configexamples/ha.rst:125 msgid "Bonding on Hardware Router" -msgstr "Bonding on Hardware Router" +msgstr "З’єднання на апаратному маршрутизаторі" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:32 msgid "Both LANs have to be able to route between each other, both will have managed devices through a dedicated management network and both will need Internet access yet the LAN2 will need access to some set of outside networks, not all. The management network will need access to both LANs but cannot have access to/from the outside." -msgstr "Both LANs have to be able to route between each other, both will have managed devices through a dedicated management network and both will need Internet access yet the LAN2 will need access to some set of outside networks, not all. The management network will need access to both LANs but cannot have access to/from the outside." +msgstr "Обидві локальні мережі повинні мати можливість маршрутизації між собою, обидві матимуть керовані пристрої через спеціальну мережу керування, і обидві потребуватимуть доступу до Інтернету, але LAN2 потребуватиме доступ до деяких зовнішніх мереж, а не до всіх. Мережі керування потрібен доступ до обох локальних мереж, але вона не може мати доступу до/ззовні." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:35 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:61 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:77 msgid "Branch" -msgstr "Branch" +msgstr "Відділення" #: ../../configexamples/zone-policy.rst:151 msgid "By default, iptables does not allow traffic for established sessions to return, so you must explicitly allow this. I do this by adding two rules to every ruleset. 1 allows established and related state packets through and rule 2 drops and logs invalid state packets. We place the established/related rule at the top because the vast majority of traffic on a network is established and the invalid rule to prevent invalid state packets from mistakenly being matched against other rules. Having the most matched rule listed first reduces CPU load in high volume environments. Note: I have filed a bug to have this added as a default action as well." -msgstr "By default, iptables does not allow traffic for established sessions to return, so you must explicitly allow this. I do this by adding two rules to every ruleset. 1 allows established and related state packets through and rule 2 drops and logs invalid state packets. We place the established/related rule at the top because the vast majority of traffic on a network is established and the invalid rule to prevent invalid state packets from mistakenly being matched against other rules. Having the most matched rule listed first reduces CPU load in high volume environments. Note: I have filed a bug to have this added as a default action as well." +msgstr "За замовчуванням iptables не дозволяє повертати трафік для встановлених сеансів, тому ви повинні явно дозволити це. Я роблю це, додаючи два правила до кожного набору правил. 1 дозволяє пакети встановленого та пов’язаного стану, а правило 2 відкидає та реєструє недійсні пакети стану. Ми розміщуємо встановлене/пов’язане правило вгорі, оскільки переважна більшість трафіку в мережі встановлено, а правило недійсності запобігає помилковому зіставленню недійсних пакетів стану з іншими правилами. Якщо правило, яке найбільше відповідає першим, зменшує навантаження на ЦП у середовищах із великим обсягом. Примітка: я повідомив про помилку, щоб також додати цю дію як дію за замовчуванням." #: ../../configexamples/l3vpn-hub-and-spoke.rst:891 msgid "CE Hub device" -msgstr "CE Hub device" +msgstr "пристрій концентратора CE" #: ../../configexamples/qos.rst:33 msgid "CS4 -> CS5" -msgstr "CS4 -> CS5" +msgstr "CS4 -> CS5" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:29 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:55 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:71 msgid "Central" -msgstr "Central" +msgstr "Центральний" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:48 msgid "Check all possible settings `here <https://github.com/threerings/openvpn-auth-ldap/blob/master/auth-ldap.conf>`_" -msgstr "Check all possible settings `here <https://github.com/threerings/openvpn-auth-ldap/blob/master/auth-ldap.conf>`_" +msgstr "Перевірте всі можливі налаштування тут<https://github.com/threerings/openvpn-auth-ldap/blob/master/auth-ldap.conf> `_" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:252 msgid "Check the BGP VRF table and verify if the static routes are injected showing the correct next-hop information." -msgstr "Check the BGP VRF table and verify if the static routes are injected showing the correct next-hop information." +msgstr "Перевірте таблицю BGP VRF і перевірте, чи впроваджено статичні маршрути з правильною інформацією про наступний крок." #: ../../configexamples/qos.rst:67 msgid "Check the result" -msgstr "Check the result" +msgstr "Перевірте результат" #: ../../configexamples/qos.rst:175 msgid "Check the result." -msgstr "Check the result." +msgstr "Перевірте результат." #: ../../configexamples/ansible.rst:142 msgid "Check the result on the vyos10 router:" @@ -637,7 +661,7 @@ msgstr "Check the version:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:164 msgid "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." -msgstr "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." +msgstr "Перевірка таблиці маршрутизації VRF має виявити активні статичні та підключені записи. Тест PING між ядром і віддаленим маршрутизатором є способом перевірки підключення в межах VRF." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:204 msgid "Checking through op-mode commands" @@ -649,16 +673,24 @@ msgstr "Cisco" #: ../../configexamples/ha.rst:90 msgid "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" -msgstr "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" +msgstr "Cisco VPC Crossconnect – порти 39 і 40, з’єднані між кожним комутатором" #: ../../configexamples/azure-vpn-bgp.rst:92 #: ../../configexamples/azure-vpn-dual-bgp.rst:94 msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." -msgstr "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." +msgstr "Підніміть MSS VTI до 1350, щоб уникнути чорних дірок PMTU." + +#: ../../configexamples/lac-lns.rst:96 +msgid "Client" +msgstr "Client" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:94 msgid "Client configuration" -msgstr "Client configuration" +msgstr "Конфігурація клієнта" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through IPSec tunnel without NAT." +msgstr "Communication between private subnets should be done through IPSec tunnel without NAT." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 msgid "Communication between private subnets should be done through ipsec tunnel without nat." @@ -666,7 +698,7 @@ msgstr "Communication between private subnets should be done through ipsec tunne #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:601 msgid "Conclusions" -msgstr "Conclusions" +msgstr "Висновки" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:26 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:25 @@ -682,94 +714,95 @@ msgstr "Conclusions" #: ../../configexamples/segment-routing-isis.rst:24 #: ../../configexamples/site-2-site-cisco.rst:18 msgid "Configuration" -msgstr "Configuration" +msgstr "Конфігурація" #: ../../configexamples/qos.rst:38 msgid "Configuration:" -msgstr "Configuration:" +msgstr "Конфігурація:" #: ../../configexamples/nmp.rst:26 msgid "Configuration 'NMP'" -msgstr "Configuration 'NMP'" +msgstr "Конфігурація "NMP"" #: ../../configexamples/nmp.rst:13 msgid "Configuration 'VyOS'" -msgstr "Configuration 'VyOS'" +msgstr "Конфігурація "VyOS"" #: ../../configexamples/qos.rst:10 msgid "Configuration 'dcsp' and shaper using QoS" -msgstr "Configuration 'dcsp' and shaper using QoS" +msgstr "Конфігурація 'dcsp' і формувач з використанням QoS" #: ../../configexamples/index.rst:4 msgid "Configuration Blueprints" -msgstr "Configuration Blueprints" +msgstr "Чертежі конфігурації" -#: ../../configexamples/index.rst:30 +#: ../../configexamples/index.rst:31 msgid "Configuration Blueprints (autotest)" -msgstr "Configuration Blueprints (autotest)" +msgstr "Конфігурація креслень (самоперевірка)" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:40 msgid "Configuration VyOS as OpenVPN Server" -msgstr "Configuration VyOS as OpenVPN Server" +msgstr "Налаштуйте VyOS як сервер OpenVPN" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:27 msgid "Configuration of basic firewall in one site, in order to:" msgstr "Configuration of basic firewall in one site, in order to:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113 +#: ../../configexamples/lac-lns.rst:29 #: ../../configexamples/pppoe-ipv6-basic.rst:26 msgid "Configurations" -msgstr "Configurations" +msgstr "Конфігурації" #: ../../configexamples/ha.rst:358 msgid "Configure Wireguard" -msgstr "Configure Wireguard" +msgstr "Налаштувати Wireguard" #: ../../configexamples/azure-vpn-bgp.rst:85 msgid "Configure a VTI with a dummy IP address" -msgstr "Configure a VTI with a dummy IP address" +msgstr "Налаштуйте VTI з фіктивною IP-адресою" #: ../../configexamples/ha.rst:312 msgid "Configure conntrack-sync and enable helpers" -msgstr "Configure conntrack-sync and enable helpers" +msgstr "Налаштуйте conntrack-sync і ввімкніть помічники" #: ../../configexamples/azure-vpn-bgp.rst:58 #: ../../configexamples/azure-vpn-dual-bgp.rst:57 msgid "Configure the IKE and ESP settings to match a subset of those supported by Azure:" -msgstr "Configure the IKE and ESP settings to match a subset of those supported by Azure:" +msgstr "Налаштуйте параметри IKE та ESP відповідно до підмножини тих, що підтримуються Azure:" #: ../../configexamples/azure-vpn-bgp.rst:98 msgid "Configure the VPN tunnel" -msgstr "Configure the VPN tunnel" +msgstr "Налаштуйте VPN-тунель" #: ../../configexamples/azure-vpn-dual-bgp.rst:101 msgid "Configure the VPN tunnels" -msgstr "Configure the VPN tunnels" +msgstr "Налаштуйте VPN-тунелі" #: ../../configexamples/wan-load-balancing.rst:47 msgid "Configure the WAN load balancer with the parameters described above:" -msgstr "Configure the WAN load balancer with the parameters described above:" +msgstr "Налаштуйте балансир навантаження глобальної мережі з параметрами, описаними вище:" #: ../../configexamples/wan-load-balancing.rst:46 msgid "Configure the load balancer" -msgstr "Configure the load balancer" +msgstr "Налаштуйте балансир навантаження" #: ../../configexamples/azure-vpn-dual-bgp.rst:84 msgid "Configure two VTIs with a dummy IP address each" -msgstr "Configure two VTIs with a dummy IP address each" +msgstr "Налаштуйте два VTI з фіктивною IP-адресою кожен" #: ../../configexamples/azure-vpn-bgp.rst:123 #: ../../configexamples/azure-vpn-dual-bgp.rst:141 msgid "Configure your BGP settings" -msgstr "Configure your BGP settings" +msgstr "Налаштуйте параметри BGP" #: ../../configexamples/ha.rst:314 msgid "Conntrack helper modules are enabled by default, but they tend to cause more problems than they're worth in complex networks. You can disable all of them at one go." -msgstr "Conntrack helper modules are enabled by default, but they tend to cause more problems than they're worth in complex networks. You can disable all of them at one go." +msgstr "Допоміжні модулі Conntrack увімкнено за замовчуванням, але вони, як правило, створюють більше проблем, ніж вони того варті, у складних мережах. Ви можете вимкнути їх усі за один раз." #: ../../configexamples/nmp.rst:9 msgid "Consider how to quickly set up NMP and VyOS for monitoring. NMP is multi-vendor network monitoring from 'SolarWinds' built to scale and expand with the needs of your network." -msgstr "Consider how to quickly set up NMP and VyOS for monitoring. NMP is multi-vendor network monitoring from 'SolarWinds' built to scale and expand with the needs of your network." +msgstr "Розглянемо, як швидко налаштувати NMP і VyOS для моніторингу. NMP — це моніторинг мережі від багатьох постачальників від SolarWinds, створений для масштабування та розширення відповідно до потреб вашої мережі." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 @@ -777,199 +810,199 @@ msgstr "Consider how to quickly set up NMP and VyOS for monitoring. NMP is multi #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:616 msgid "Core" -msgstr "Core" +msgstr "Ядро" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:134 msgid "Core Router" -msgstr "Core Router" +msgstr "Основний маршрутизатор" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:62 msgid "Core network" -msgstr "Core network" +msgstr "Основна мережа" #: ../../configexamples/ha.rst:417 msgid "Create Export Filter" -msgstr "Create Export Filter" +msgstr "Створити експортний фільтр" #: ../../configexamples/ha.rst:448 msgid "Create Import Filter" -msgstr "Create Import Filter" +msgstr "Створити фільтр імпорту" #: ../../configexamples/ha.rst:265 msgid "Create VRRP sync-group" -msgstr "Create VRRP sync-group" +msgstr "Створіть групу синхронізації VRRP" #: ../../configexamples/ha.rst:127 msgid "Create a LACP bond on the hardware router. We are assuming that eth0 and eth1 are connected to port 8 on both switches, and that those ports are configured as a Port-Channel." -msgstr "Create a LACP bond on the hardware router. We are assuming that eth0 and eth1 are connected to port 8 on both switches, and that those ports are configured as a Port-Channel." +msgstr "Створіть зв’язок LACP на апаратному маршрутизаторі. Ми припускаємо, що eth0 і eth1 підключені до порту 8 на обох комутаторах і що ці порти налаштовані як порт-канал." #: ../../configexamples/ha.rst:117 msgid "Create an 'All VLANs' network group, that passes all trunked traffic through to the VM. Attach this network group to router1 as eth0." -msgstr "Create an 'All VLANs' network group, that passes all trunked traffic through to the VM. Attach this network group to router1 as eth0." +msgstr "Створіть мережеву групу «Усі VLAN», яка передає весь транкінговий трафік до віртуальної машини. Приєднайте цю мережеву групу до router1 як eth0." #: ../../configexamples/wan-load-balancing.rst:81 msgid "Create interface weight based configuration" -msgstr "Create interface weight based configuration" +msgstr "Створення конфігурації на основі ваги інтерфейсу" #: ../../configexamples/wan-load-balancing.rst:111 msgid "Create rule order based configuration" -msgstr "Create rule order based configuration" +msgstr "Створення конфігурації на основі порядку правил" #: ../../configexamples/wan-load-balancing.rst:142 msgid "Create rule order based configuration with low speed secondary link" -msgstr "Create rule order based configuration with low speed secondary link" +msgstr "Створіть конфігурацію на основі порядку правил із низькошвидкісним вторинним посиланням" #: ../../configexamples/wan-load-balancing.rst:35 msgid "Create static routes through the two ISPs towards the ping targets and commit the changes:" -msgstr "Create static routes through the two ISPs towards the ping targets and commit the changes:" +msgstr "Створіть статичні маршрути через двох провайдерів до цілей ping і зафіксуйте зміни:" #: ../../configexamples/wan-load-balancing.rst:34 msgid "Create static routes to ping targets" -msgstr "Create static routes to ping targets" +msgstr "Створіть статичні маршрути до цілей ping" #: ../../configexamples/ha.rst:110 msgid "Create your router1 VM. So it can withstand a VM Host failing or a network link failing. Using VMware, this is achieved by enabling vSphere DRS, vSphere Availability, and creating a Distributed Port Group that uses LACP." -msgstr "Create your router1 VM. So it can withstand a VM Host failing or a network link failing. Using VMware, this is achieved by enabling vSphere DRS, vSphere Availability, and creating a Distributed Port Group that uses LACP." +msgstr "Створіть віртуальну машину router1. Таким чином, він може витримати збій хоста віртуальної машини або мережевого з’єднання. За допомогою VMware це досягається шляхом увімкнення vSphere DRS, vSphere Availability та створення розподіленої групи портів, яка використовує LACP." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:44 #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:62 msgid "DHCP-Relay" -msgstr "DHCP-Relay" +msgstr "DHCP-ретрансляція" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:37 #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:55 msgid "DHCP-Server" -msgstr "DHCP-Server" +msgstr "DHCP-сервер" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:3 msgid "DHCP Relay trough GRE-Bridge" -msgstr "DHCP Relay trough GRE-Bridge" +msgstr "DHCP Relay через GRE-Bridge" #: ../../configexamples/pppoe-ipv6-basic.rst:42 msgid "DHCPv6-PD Setup" -msgstr "DHCPv6-PD Setup" +msgstr "Налаштування DHCPv6-PD" #: ../../configexamples/zone-policy.rst:374 msgid "DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a bunch at one time." -msgstr "DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a bunch at one time." +msgstr "Політика DMZ-LAN – LAN-DMZ. Ви можете досягти ритму, коли ви створюєте купу одночасно." #: ../../configexamples/zone-policy.rst:49 msgid "DMZ cannot access LAN resources." -msgstr "DMZ cannot access LAN resources." +msgstr "DMZ не може отримати доступ до ресурсів локальної мережі." #: ../../configexamples/ha.rst:18 msgid "Design" -msgstr "Design" +msgstr "Дизайн" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "Device-A" -msgstr "Device-A" +msgstr "Пристрій-А" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "Device-B" -msgstr "Device-B" +msgstr "Пристрій-Б" #: ../../configexamples/ha.rst:514 msgid "Duplicate configuration" -msgstr "Duplicate configuration" +msgstr "Дубльована конфігурація" #: ../../configexamples/pppoe-ipv6-basic.rst:44 msgid "During address configuration, in addition to assigning an address to the WAN interface, ISP also provides a prefix to allow the router to configure addresses of LAN interface and other nodes connecting to LAN, which is called prefix delegation (PD)." -msgstr "During address configuration, in addition to assigning an address to the WAN interface, ISP also provides a prefix to allow the router to configure addresses of LAN interface and other nodes connecting to LAN, which is called prefix delegation (PD)." +msgstr "Під час конфігурації адреси, окрім призначення адреси інтерфейсу WAN, ISP також надає префікс, який дозволяє маршрутизатору налаштовувати адреси інтерфейсу LAN та інших вузлів, що підключаються до LAN, що називається делегуванням префікса (PD)." #: ../../configexamples/l3vpn-hub-and-spoke.rst:484 msgid "Dynamic routing used between CE and PE nodes and eBGP peering established for the route exchanging between them. All routes received by PEs are then exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based on previously configured L3VPN parameters." -msgstr "Dynamic routing used between CE and PE nodes and eBGP peering established for the route exchanging between them. All routes received by PEs are then exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based on previously configured L3VPN parameters." +msgstr "Динамічна маршрутизація, що використовується між вузлами CE і PE, і eBGP, встановлений для обміну маршрутами між ними. Усі маршрути, отримані PE, потім експортуються до L3VPN і доставляються з Spoke-сайтів до Hub і навпаки на основі попередньо налаштованих параметрів L3VPN." #: ../../configexamples/zone-policy.rst:91 msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." -msgstr "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." +msgstr "Кожен інтерфейс призначений для зони. Інтерфейс може бути фізичним або віртуальним, як-от тунелі (VPN, PPTP, GRE тощо), і обробляється однаково." -#: ../../configexamples/index.rst:34 +#: ../../configexamples/index.rst:35 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." -msgstr "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." +msgstr "Кожна лабораторія створить тест із зовнішнього сценарію. Вміст сторінки генеруватиметься, тому зміни не матимуть чинності." #: ../../configexamples/azure-vpn-bgp.rst:79 #: ../../configexamples/azure-vpn-dual-bgp.rst:78 msgid "Enable IPsec on eth0" -msgstr "Enable IPsec on eth0" +msgstr "Увімкніть IPsec на eth0" #: ../../configexamples/ha.rst:470 msgid "Enable OSPF" -msgstr "Enable OSPF" +msgstr "Увімкніть OSPF" #: ../../configexamples/ha.rst:174 msgid "Enable SSH" -msgstr "Enable SSH" +msgstr "Увімкніть SSH" #: ../../configexamples/ha.rst:176 msgid "Enable SSH so you can now SSH into the routers, rather than using the console." -msgstr "Enable SSH so you can now SSH into the routers, rather than using the console." +msgstr "Увімкніть SSH, щоб тепер ви могли підключатися через SSH до маршрутизаторів, а не використовувати консоль." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:140 msgid "Enables router advertisements. This is an IPv6 alternative for DHCP (though DHCPv6 can still be used). With RAs, Your devices will automatically find the information they need for routing and DNS." -msgstr "Enables router advertisements. This is an IPv6 alternative for DHCP (though DHCPv6 can still be used). With RAs, Your devices will automatically find the information they need for routing and DNS." +msgstr "Вмикає оголошення маршрутизатора. Це альтернатива IPv6 для DHCP (хоча DHCPv6 все ще можна використовувати). За допомогою RA ваші пристрої автоматично знайдуть інформацію, необхідну для маршрутизації та DNS." #: ../../configexamples/zone-policy.rst:253 msgid "Even if the two zones will never communicate, it is a good idea to create the zone-pair-direction rulesets and set enable-default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts." -msgstr "Even if the two zones will never communicate, it is a good idea to create the zone-pair-direction rulesets and set enable-default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts." +msgstr "Навіть якщо дві зони ніколи не спілкуватимуться, доцільно створити набори правил zone-pair-direction і встановити enable-default-log. Це дозволить вам реєструвати спроби доступу до мереж. Без нього ви ніколи не побачите спроб підключення." #: ../../configexamples/ha.rst:472 msgid "Every router **must** have a unique router-id. The 'reference-bandwidth' is used because when OSPF was originally designed, the idea of a link faster than 1gbit was unheard of, and it does not scale correctly." -msgstr "Every router **must** have a unique router-id. The 'reference-bandwidth' is used because when OSPF was originally designed, the idea of a link faster than 1gbit was unheard of, and it does not scale correctly." +msgstr "Кожен маршрутизатор **повинен** мати унікальний ідентифікатор маршрутизатора. «Reference-bandwidth» використовується тому, що коли OSPF був спочатку розроблений, ідея зв’язку, швидшого за 1 Гбіт, була нечуваною, і вона не масштабується належним чином." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:114 msgid "Every router that provides access to a customer network needs to have the customer network (VRF + VNI) configured. To make our own lives easier, we utilize the same VRF table id (local routing table number) and VNI (Virtual Network Identifier) per tenant on all our routers." -msgstr "Every router that provides access to a customer network needs to have the customer network (VRF + VNI) configured. To make our own lives easier, we utilize the same VRF table id (local routing table number) and VNI (Virtual Network Identifier) per tenant on all our routers." +msgstr "Кожний маршрутизатор, який надає доступ до клієнтської мережі, повинен мати налаштовану клієнтську мережу (VRF + VNI). Щоб полегшити собі життя, ми використовуємо однаковий ідентифікатор таблиці VRF (номер таблиці локальної маршрутизації) та VNI (ідентифікатор віртуальної мережі) для кожного клієнта на всіх наших маршрутизаторах." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:108 msgid "Every tenant is assigned an individual VRF that would support overlapping address ranges for customers blue, red and green. In our example, we do not use overlapping ranges to make it easier when showing debug commands." -msgstr "Every tenant is assigned an individual VRF that would support overlapping address ranges for customers blue, red and green. In our example, we do not use overlapping ranges to make it easier when showing debug commands." +msgstr "Кожному орендарю призначається окремий VRF, який підтримуватиме перекриття діапазонів адрес для клієнтів синього, червоного та зеленого кольорів. У нашому прикладі ми не використовуємо діапазони, що перекриваються, щоб полегшити показ команд налагодження." #: ../../configexamples/azure-vpn-bgp.rst:31 #: ../../configexamples/azure-vpn-dual-bgp.rst:28 msgid "Example" -msgstr "Example" +msgstr "приклад" #: ../../configexamples/wan-load-balancing.rst:12 msgid "Example 1: Distributing load evenly" -msgstr "Example 1: Distributing load evenly" +msgstr "Приклад 1: рівномірний розподіл навантаження" #: ../../configexamples/wan-load-balancing.rst:68 msgid "Example 2: Failover based on interface weights" -msgstr "Example 2: Failover based on interface weights" +msgstr "Приклад 2: відновлення після відмови на основі ваги інтерфейсу" #: ../../configexamples/wan-load-balancing.rst:95 msgid "Example 3: Failover based on rule order" -msgstr "Example 3: Failover based on rule order" +msgstr "Приклад 3: відновлення після відмови на основі порядку правил" #: ../../configexamples/wan-load-balancing.rst:124 msgid "Example 4: Failover based on rule order - priority traffic" -msgstr "Example 4: Failover based on rule order - priority traffic" +msgstr "Приклад 4: відновлення після відмови на основі порядку правил – пріоритетний трафік" #: ../../configexamples/wan-load-balancing.rst:156 msgid "Example 5: Exclude traffic from load balancing" -msgstr "Example 5: Exclude traffic from load balancing" +msgstr "Приклад 5: виключення трафіку з балансування навантаження" #: ../../configexamples/ha.rst:43 msgid "Example Network" -msgstr "Example Network" +msgstr "Приклад мережі" #: ../../configexamples/pppoe-ipv6-basic.rst:38 msgid "Fill ``password`` and ``user`` with the credential provided by your ISP." -msgstr "Fill ``password`` and ``user`` with the credential provided by your ISP." +msgstr "Заповніть ``password`` і ``user`` обліковими даними, наданими вашим провайдером." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:202 msgid "Finally, don't forget the :ref:`firewall`. The usage is identical, except for instead of `set firewall name NAME`, you would use `set firewall ipv6-name NAME`." -msgstr "Finally, don't forget the :ref:`firewall`. The usage is identical, except for instead of `set firewall name NAME`, you would use `set firewall ipv6-name NAME`." +msgstr "Нарешті, не забудьте про :ref:`firewall`. Використання ідентичне, за винятком того, що замість «встановити ім’я брандмауера ІМ’Я» ви використовуєте «встановити ім’я ipv6 брандмауера ІМ’Я»." #: ../../configexamples/l3vpn-hub-and-spoke.rst:985 msgid "Finally, let’s check the reachability between CEs:" -msgstr "Finally, let’s check the reachability between CEs:" +msgstr "Нарешті, давайте перевіримо доступність між CE:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:200 msgid "Firewall" -msgstr "Firewall" +msgstr "Брандмауер" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:123 msgid "Firewall Configuration:" @@ -977,19 +1010,19 @@ msgstr "Firewall Configuration:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:39 msgid "First, we configure the ``vyos-wan`` interface to get a DHCP address." -msgstr "First, we configure the ``vyos-wan`` interface to get a DHCP address." +msgstr "Спочатку ми налаштовуємо інтерфейс ``vyos-wan`` для отримання адреси DHCP." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:28 msgid "First, we configure the transport network and the Tunnel interface." -msgstr "First, we configure the transport network and the Tunnel interface." +msgstr "Спочатку ми налаштовуємо транспортну мережу та інтерфейс тунелю." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:44 msgid "First a CA, a signed server and client ceftificate and a Diffie-Hellman parameter musst be generated and installed. Please look :ref:`here <configuration/pki/index:pki>` for more information." -msgstr "First a CA, a signed server and client ceftificate and a Diffie-Hellman parameter musst be generated and installed. Please look :ref:`here <configuration/pki/index:pki>` for more information." +msgstr "Спочатку необхідно створити та встановити ЦС, підписаний сертифікат сервера та клієнта та параметр Діффі-Хеллмана. Подивіться :ref:`тут<configuration/pki/index:pki> ` для отримання додаткової інформації." #: ../../configexamples/nmp.rst:15 msgid "First prepare our VyOS router for connection to NMP. We have to set up the SNMP protocol and connectivity between the router and NMP." -msgstr "First prepare our VyOS router for connection to NMP. We have to set up the SNMP protocol and connectivity between the router and NMP." +msgstr "Спочатку підготуйте наш маршрутизатор VyOS для підключення до NMP. Нам потрібно налаштувати протокол SNMP і підключення між маршрутизатором і NMP." #: ../../configexamples/site-2-site-cisco.rst:9 msgid "FlexVPN is a newer \"solution\" for deployment of VPNs and it utilizes IKEv2 as the key exchange protocol. The result is a flexible and scalable VPN solution that can be easily adapted to fit various network needs. It can also support a variety of encryption methods, including AES and 3DES." @@ -997,15 +1030,19 @@ msgstr "FlexVPN is a newer \"solution\" for deployment of VPNs and it utilizes I #: ../../configexamples/ha.rst:60 msgid "For connection between sites, we are running a WireGuard link to two REMOTE routers and using OSPF over those links to distribute routes. That remote site is expected to send traffic from anything in 10.201.0.0/16" -msgstr "For connection between sites, we are running a WireGuard link to two REMOTE routers and using OSPF over those links to distribute routes. That remote site is expected to send traffic from anything in 10.201.0.0/16" +msgstr "Для з’єднання між сайтами ми запускаємо зв’язок WireGuard із двома ВІДДАЛЕНИМИ маршрутизаторами та використовуємо OSPF для цих посилань для розподілу маршрутів. Очікується, що цей віддалений сайт надсилатиме трафік із будь-якого місця в 10.201.0.0/16" #: ../../configexamples/pppoe-ipv6-basic.rst:56 msgid "For home network users, most of time ISP only provides /64 prefix, hence there is no need to set SLA ID and prefix length. See :ref:`pppoe-interface` for more information." -msgstr "For home network users, most of time ISP only provides /64 prefix, hence there is no need to set SLA ID and prefix length. See :ref:`pppoe-interface` for more information." +msgstr "Для користувачів домашньої мережі провайдер здебільшого надає лише префікс /64, тому немає необхідності встановлювати ідентифікатор SLA та довжину префікса. Перегляньте :ref:`pppoe-interface` для отримання додаткової інформації." #: ../../configexamples/azure-vpn-bgp.rst:11 msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" -msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" +msgstr "Для надлишкових/активних-активних конфігурацій див. :ref:`examples-azure-vpn-dual-bgp`" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." +msgstr "For simplicity, configuration and tests are done only using IPv4, and firewall configuration is done only on one router." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." @@ -1013,23 +1050,23 @@ msgstr "For simplicity, configuration and tests are done only using ipv4, and fi #: ../../configexamples/ha.rst:146 msgid "For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every command is identical, this will not be specified unless different things need to be performed on different hosts." -msgstr "For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every command is identical, this will not be specified unless different things need to be performed on different hosts." +msgstr "Для апаратного маршрутизатора замініть ``eth0`` на ``bond0``. Оскільки (майже) кожна команда ідентична, це не буде вказано, якщо на різних хостах не потрібно виконувати різні дії." #: ../../configexamples/ha.rst:88 msgid "From Datacenter - This connects into port 1 on both switches, and is tagged as VLAN 50" -msgstr "From Datacenter - This connects into port 1 on both switches, and is tagged as VLAN 50" +msgstr "З центру обробки даних - це підключення до порту 1 на обох комутаторах і позначене як VLAN 50" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:427 msgid "From Management to LAN1/LAN2" -msgstr "From Management to LAN1/LAN2" +msgstr "Від керування до LAN1/LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:469 msgid "From Management to Outside (fails as intended)" -msgstr "From Management to Outside (fails as intended)" +msgstr "Від управління до зовнішнього (виходить з ладу, як передбачалося)" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:614 msgid "Full configuration from all devices" -msgstr "Full configuration from all devices" +msgstr "Повна конфігурація з усіх пристроїв" #: ../../configexamples/site-2-site-cisco.rst:23 msgid "GRE:" @@ -1037,59 +1074,59 @@ msgstr "GRE:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:19 msgid "General information about L3VPNs can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." -msgstr "General information about L3VPNs can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." +msgstr "Загальну інформацію про L3VPN можна знайти в розділі :ref:`configuration/vrf/index:L3VPN VRF`." #: ../../configexamples/l3vpn-hub-and-spoke.rst:49 msgid "General information can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." -msgstr "General information can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." +msgstr "Загальну інформацію можна знайти в розділі :ref:`configuration/vrf/index:L3VPN VRFs`." #: ../../configexamples/bgp-ipv6-unnumbered.rst:9 msgid "General information can be found in the :ref:`routing-bgp` chapter." -msgstr "General information can be found in the :ref:`routing-bgp` chapter." +msgstr "Загальну інформацію можна знайти в розділі :ref:`routing-bgp`." #: ../../configexamples/ospf-unnumbered.rst:9 msgid "General information can be found in the :ref:`routing-ospf` chapter." -msgstr "General information can be found in the :ref:`routing-ospf` chapter." +msgstr "Загальну інформацію можна знайти в розділі :ref:`routing-ospf`." #: ../../configexamples/ha.rst:74 msgid "Hardware" -msgstr "Hardware" +msgstr "Обладнання" #: ../../configexamples/ha.rst:91 msgid "Hardware Router - Port 8 of each switch" -msgstr "Hardware Router - Port 8 of each switch" +msgstr "Апаратний маршрутизатор - порт 8 кожного комутатора" #: ../../configexamples/zone-policy.rst:282 msgid "Here is an example of an IPv6 DMZ-WAN ruleset." -msgstr "Here is an example of an IPv6 DMZ-WAN ruleset." +msgstr "Ось приклад набору правил IPv6 DMZ-WAN." #: ../../configexamples/segment-routing-isis.rst:178 msgid "Here is the routing tables showing the MPLS segment routing label operations:" -msgstr "Here is the routing tables showing the MPLS segment routing label operations:" +msgstr "Ось таблиці маршрутизації, що показують операції міток маршрутизації сегмента MPLS:" #: ../../configexamples/pppoe-ipv6-basic.rst:76 msgid "Here we set the prefix to ``::/64`` to indicate advertising any /64 prefix the LAN interface is assigned." -msgstr "Here we set the prefix to ``::/64`` to indicate advertising any /64 prefix the LAN interface is assigned." +msgstr "Тут ми встановлюємо префікс ``::/64``, щоб позначити рекламу будь-якого префікса /64, призначеного інтерфейсу LAN." #: ../../configexamples/pppoe-ipv6-basic.rst:54 msgid "Here we use the prefix to configure the address of eth1 (LAN) to form ``<prefix>::64``, where ``64`` is hexadecimal of address 100." -msgstr "Here we use the prefix to configure the address of eth1 (LAN) to form ``<prefix>::64``, where ``64`` is hexadecimal of address 100." +msgstr "Тут ми використовуємо префікс для налаштування адреси eth1 (LAN) у формі ``<prefix> ::64``, де ``64`` є шістнадцятковим адресою 100." #: ../../configexamples/ha.rst:7 msgid "High Availability Walkthrough" -msgstr "High Availability Walkthrough" +msgstr "Покрокове керівництво щодо високої доступності" #: ../../configexamples/l3vpn-hub-and-spoke.rst:65 msgid "How does it work?" -msgstr "How does it work?" +msgstr "Як це працює?" #: ../../configexamples/l3vpn-hub-and-spoke.rst:88 msgid "Hub" -msgstr "Hub" +msgstr "Хаб" #: ../../configexamples/l3vpn-hub-and-spoke.rst:6 msgid "IP/MPLS technology is widely used by various service providers and large enterprises in order to achieve better network scalability, manageability and flexibility. It also provides the possibility to deliver different services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a type of VPN mode that is built and delivered through OSI layer 3 networking technologies. Often the border gateway protocol (BGP) is used to send and receive VPN-related data that is responsible for the control plane. L3VPN utilizes virtual routing and forwarding (VRF) techniques to receive and deliver user data as well as separate data planes of the end-users. It is built using a combination of IP- and MPLS-based information. Generally, L3VPNs are used to send data on back-end VPN infrastructures, such as for VPN connections between data centres, HQs and branches." -msgstr "IP/MPLS technology is widely used by various service providers and large enterprises in order to achieve better network scalability, manageability and flexibility. It also provides the possibility to deliver different services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a type of VPN mode that is built and delivered through OSI layer 3 networking technologies. Often the border gateway protocol (BGP) is used to send and receive VPN-related data that is responsible for the control plane. L3VPN utilizes virtual routing and forwarding (VRF) techniques to receive and deliver user data as well as separate data planes of the end-users. It is built using a combination of IP- and MPLS-based information. Generally, L3VPNs are used to send data on back-end VPN infrastructures, such as for VPN connections between data centres, HQs and branches." +msgstr "Технологія IP/MPLS широко використовується різними постачальниками послуг і великими підприємствами для досягнення кращої масштабованості, керованості та гнучкості мережі. Це також забезпечує можливість безперебійного надання різних послуг клієнтам. VPN рівня 3 (L3VPN) — це тип режиму VPN, створений і надається за допомогою мережевих технологій рівня 3 OSI. Часто протокол прикордонного шлюзу (BGP) використовується для надсилання та отримання даних, пов’язаних з VPN, які відповідають за площину керування. L3VPN використовує методи віртуальної маршрутизації та переадресації (VRF) для отримання та доставки даних користувачів, а також окремих рівнів даних кінцевих користувачів. Він створений з використанням комбінації інформації на основі IP та MPLS. Зазвичай L3VPN використовуються для надсилання даних у внутрішні інфраструктури VPN, наприклад для VPN-з’єднань між центрами обробки даних, штаб-квартирами та філіями." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:65 msgid "IPSec configuration:" @@ -1097,7 +1134,7 @@ msgstr "IPSec configuration:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:82 msgid "IP Schema" -msgstr "IP Schema" +msgstr "IP-схема" #: ../../configexamples/site-2-site-cisco.rst:34 msgid "IPsec:" @@ -1105,23 +1142,23 @@ msgstr "IPsec:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "IPv4 Network" -msgstr "IPv4 Network" +msgstr "Мережа IPv4" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "IPv6 Network" -msgstr "IPv6 Network" +msgstr "Мережа IPv6" #: ../../configexamples/zone-policy.rst:383 msgid "IPv6 Tunnel" -msgstr "IPv6 Tunnel" +msgstr "Тунель IPv6" #: ../../configexamples/segment-routing-isis.rst:17 msgid "ISIS-SR example network" -msgstr "ISIS-SR example network" +msgstr "Приклад мережі ISIS-SR" #: ../../configexamples/segment-routing-isis.rst:17 msgid "ISIS-SR network" -msgstr "ISIS-SR network" +msgstr "Мережа ІДІЛ-СР" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:739 @@ -1130,87 +1167,91 @@ msgstr "ISP" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:64 msgid "I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP sessions are established via a dummy interfaces (similar to the loopback, but in Linux you can have only one loopback, while there can be many dummy interfaces) on the PE routers. In case of a link failure, traffic is diverted in the other direction in this triangle setup and BGP sessions will not go down. One could even enable BFD (Bidirectional Forwarding Detection) on the links for a faster failover and resilience in the network." -msgstr "I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP sessions are established via a dummy interfaces (similar to the loopback, but in Linux you can have only one loopback, while there can be many dummy interfaces) on the PE routers. In case of a link failure, traffic is diverted in the other direction in this triangle setup and BGP sessions will not go down. One could even enable BFD (Bidirectional Forwarding Detection) on the links for a faster failover and resilience in the network." +msgstr "Я вирішив запустити OSPF як IGP (Interior Gateway Protocol). Усі необхідні сеанси BGP встановлюються за допомогою фіктивних інтерфейсів (подібно до loopback, але в Linux ви можете мати лише один loopback, тоді як фіктивних інтерфейсів може бути багато) на маршрутизаторах PE. У разі збою з’єднання трафік перенаправляється в іншому напрямку в цьому трикутнику, і сеанси BGP не припиняються. Можна навіть увімкнути BFD (Bidirectional Forwarding Detection) на з’єднаннях для швидшого відмовостійкості та стійкості мережі." #: ../../configexamples/zone-policy.rst:171 msgid "I create/configure the interfaces first. Build out the rulesets for each zone-pair-direction which includes at least the three state rules. Then I setup the zone-policies." -msgstr "I create/configure the interfaces first. Build out the rulesets for each zone-pair-direction which includes at least the three state rules. Then I setup the zone-policies." +msgstr "Спочатку я створюю/налаштовую інтерфейси. Створіть набори правил для кожної зони-пари-напрямку, які включають принаймні три правила стану. Потім я встановлюю політику зони." #: ../../configexamples/zone-policy.rst:100 msgid "I name rule sets to indicate which zone-pair-direction they represent. eg. ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN." -msgstr "I name rule sets to indicate which zone-pair-direction they represent. eg. ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN." +msgstr "Я називаю набори правил, щоб вказати, яку зону-пару-напрямок вони представляють. напр. ЗонаА-ЗонаБ або ЗонаБ-ЗонаА. LAN-DMZ, DMZ-LAN." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:14 msgid "I named the customers blue, red and green which is common practice in VRF (Virtual Routing and Forwarding) documentation scenarios." -msgstr "I named the customers blue, red and green which is common practice in VRF (Virtual Routing and Forwarding) documentation scenarios." +msgstr "Я назвав клієнтів синім, червоним і зеленим, що є звичайною практикою в сценаріях документації VRF (віртуальна маршрутизація та пересилання)." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:9 msgid "I spun up a new lab in EVE-NG, which represents this as the \"Foo Bar - Service Provider Inc.\" that has 3 points of presence (PoP) in random datacenters/sites named PE1, PE2, and PE3. Each PoP aggregates at least two customers." -msgstr "I spun up a new lab in EVE-NG, which represents this as the \"Foo Bar - Service Provider Inc.\" that has 3 points of presence (PoP) in random datacenters/sites named PE1, PE2, and PE3. Each PoP aggregates at least two customers." +msgstr "Я створив нову лабораторію в EVE-NG, яка представляє це як "Foo Bar - Service Provider Inc." який має 3 точки присутності (PoP) у випадкових центрах обробки даних/сайтах під назвою PE1, PE2 і PE3. Кожен PoP об’єднує принаймні двох клієнтів." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:256 msgid "If the client is connect successfully you can check the output with" -msgstr "If the client is connect successfully you can check the output with" +msgstr "Якщо клієнт підключено успішно, ви можете перевірити вихід за допомогою" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:236 msgid "If we need to retrieve information about a specific host/network inside the EVPN network we need to run" -msgstr "If we need to retrieve information about a specific host/network inside the EVPN network we need to run" +msgstr "Якщо нам потрібно отримати інформацію про певний хост/мережу всередині мережі EVPN, нам потрібно запустити" #: ../../configexamples/ha.rst:34 msgid "If you are following through this document, it is strongly suggested you complete the entire document, ONLY doing the virtual router1 steps, and then come back and walk through it AGAIN on the backup hardware router." -msgstr "If you are following through this document, it is strongly suggested you complete the entire document, ONLY doing the virtual router1 steps, and then come back and walk through it AGAIN on the backup hardware router." +msgstr "Якщо ви дотримуєтеся цього документа, наполегливо рекомендуємо пройти весь документ, ЛИШЕ виконавши кроки віртуального маршрутизатора1, а потім повернутися та переглянути його ЩЕ РАВНО на резервному апаратному маршрутизаторі." #: ../../configexamples/zone-policy.rst:385 msgid "If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interfaces. One for v4 and one for v6." -msgstr "If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interfaces. One for v4 and one for v6." +msgstr "Якщо ви використовуєте тунель IPv6 від HE.net або когось іншого, основа така сама, за винятком того, що у вас є два інтерфейси WAN. Один для v4 і один для v6." #: ../../configexamples/ha.rst:354 msgid "If you use a routing protocol itself, you solve two problems at once. This is only a basic example, and is provided as a starting point." -msgstr "If you use a routing protocol itself, you solve two problems at once. This is only a basic example, and is provided as a starting point." +msgstr "Якщо ви використовуєте сам протокол маршрутизації, ви вирішуєте дві проблеми одночасно. Це лише базовий приклад, який надається як відправна точка." #: ../../configexamples/zone-policy.rst:110 msgid "If your computer is on the LAN and you need to SSH into your VyOS box, you would need a rule to allow it in the LAN-Local ruleset. If you want to access a webpage from your VyOS box, you need a rule to allow it in the Local-LAN ruleset." -msgstr "If your computer is on the LAN and you need to SSH into your VyOS box, you would need a rule to allow it in the LAN-Local ruleset. If you want to access a webpage from your VyOS box, you need a rule to allow it in the Local-LAN ruleset." +msgstr "Якщо ваш комп’ютер під’єднано до локальної мережі, і вам потрібно підключитися через SSH до свого блоку VyOS, вам знадобиться правило, яке дозволятиме це в наборі правил LAN-Local. Якщо ви хочете отримати доступ до веб-сторінки зі свого вікна VyOS, вам потрібне правило, щоб дозволити це в наборі правил локальної локальної мережі." #: ../../configexamples/l3vpn-hub-and-spoke.rst:44 msgid "Image name: vyos-1.4-rolling-202110310317-amd64.iso" -msgstr "Image name: vyos-1.4-rolling-202110310317-amd64.iso" +msgstr "Назва зображення: vyos-1.4-rolling-202110310317-amd64.iso" #: ../../configexamples/zone-policy.rst:103 msgid "In VyOS, you have to have unique Ruleset names. In the event of overlap, I add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows for each auto-completion and uniqueness." -msgstr "In VyOS, you have to have unique Ruleset names. In the event of overlap, I add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows for each auto-completion and uniqueness." +msgstr "У VyOS ви повинні мати унікальні імена набору правил. У разі збігу я додаю «-6» у кінець наборів правил v6. напр. LAN-DMZ, LAN-DMZ-6. Це забезпечує кожне автозавершення та унікальність." #: ../../configexamples/zone-policy.rst:167 msgid "In VyOS you must have the interfaces created before you can apply it to the zone and the rulesets must be created prior to applying it to a zone-policy." -msgstr "In VyOS you must have the interfaces created before you can apply it to the zone and the rulesets must be created prior to applying it to a zone-policy." +msgstr "У VyOS у вас повинні бути створені інтерфейси, перш ніж ви зможете застосувати його до зони, а набори правил мають бути створені перед застосуванням його до зональної політики." #: ../../configexamples/zone-policy.rst:18 msgid "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone <name>`` to ``firewall zone <name>``." -msgstr "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone <name>`` to ``firewall zone <name>``." +msgstr "У :vytask:`T2199` змінено синтаксис конфігурації зони. Конфігурацію зони переміщено з ``zone-policy zone<name> `` до ``зони брандмауера<name> ``." #: ../../configexamples/zone-policy.rst:115 msgid "In rules, it is good to keep them named consistently. As the number of rules you have grows, the more consistency you have, the easier your life will be." -msgstr "In rules, it is good to keep them named consistently. As the number of rules you have grows, the more consistency you have, the easier your life will be." +msgstr "У правилах добре, щоб вони називалися послідовно. У міру того, як кількість ваших правил зростає, чим більше у вас послідовності, тим легше вам буде жити." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:176 msgid "In the above examples, 1,2,ffff are all chosen by you. You can use 1-ffff (1-65535)." -msgstr "In the above examples, 1,2,ffff are all chosen by you. You can use 1-ffff (1-65535)." +msgstr "У наведених вище прикладах 1,2,ffff вибрано вами. Ви можете використовувати 1-ffff (1-65535)." #: ../../configexamples/qos.rst:157 msgid "In the end, on the router “VyOS2” we will set outgoing bandwidth limits between the “VyOS3” and “VyOS1” routers. Let's set a limit for IP 10.1.1.100 = 5 Mbps(Tx). We will check the result of the work with the help of the “iPerf” utility." -msgstr "In the end, on the router “VyOS2” we will set outgoing bandwidth limits between the “VyOS3” and “VyOS1” routers. Let's set a limit for IP 10.1.1.100 = 5 Mbps(Tx). We will check the result of the work with the help of the “iPerf” utility." +msgstr "Зрештою, на маршрутизаторі “VyOS2” ми встановимо обмеження вихідної смуги пропускання між маршрутизаторами “VyOS3” і “VyOS1”. Давайте встановимо обмеження для IP 10.1.1.100 = 5 Мбіт/с (Tx). Результат роботи перевіримо за допомогою утиліти «iPerf»." #: ../../configexamples/qos.rst:35 msgid "In the end, we will configure the traffic shaper using QoS mechanisms on the “VYOS2” router." -msgstr "In the end, we will configure the traffic shaper using QoS mechanisms on the “VYOS2” router." +msgstr "На завершення ми налаштуємо формувач трафіку за допомогою механізмів QoS на маршрутизаторі «VYOS2»." #: ../../configexamples/nmp.rst:66 msgid "In the end, you'll get a powerful instrument for monitoring the VyOS systems." -msgstr "In the end, you'll get a powerful instrument for monitoring the VyOS systems." +msgstr "У підсумку ви отримаєте потужний інструмент для моніторингу систем VyOS." #: ../../configexamples/zone-policy.rst:377 msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." -msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." +msgstr "Зрештою, ви отримаєте щось на зразок цієї конфігурації. Я видалив усе, окрім розділів Firewall, Interfaces і zone-policy. Він досить довгий як є." + +#: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use Ansible with jinja2 templates and variables." #: ../../configexamples/ansible.rst:216 msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." @@ -1218,23 +1259,23 @@ msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 te #: ../../configexamples/ha.rst:154 msgid "In this case, the hardware router has a different IP, so it would be" -msgstr "In this case, the hardware router has a different IP, so it would be" +msgstr "У цьому випадку апаратний маршрутизатор має іншу IP-адресу, тому так і буде" #: ../../configexamples/qos.rst:12 msgid "In this case, we'll try to make a simple lab using QoS and the general ability of the VyOS system. We recommend you to go through the main article about `QoS <https://docs.vyos.io/en/latest/configuration/trafficpolicy/index.html>`_ first." -msgstr "In this case, we'll try to make a simple lab using QoS and the general ability of the VyOS system. We recommend you to go through the main article about `QoS <https://docs.vyos.io/en/latest/configuration/trafficpolicy/index.html>`_ first." +msgstr "У цьому випадку ми спробуємо зробити просту лабораторну роботу, використовуючи QoS і загальні можливості системи VyOS. Ми рекомендуємо вам переглянути основну статтю про `QoS<https://docs.vyos.io/en/latest/configuration/trafficpolicy/index.html> `_ перший." #: ../../configexamples/zone-policy.rst:365 msgid "In this case, we are setting the v6 ruleset that represents traffic sourced from the LAN, destined for the DMZ. Because the zone-policy firewall syntax is a little awkward, I keep it straight by thinking of it backwards." -msgstr "In this case, we are setting the v6 ruleset that represents traffic sourced from the LAN, destined for the DMZ. Because the zone-policy firewall syntax is a little awkward, I keep it straight by thinking of it backwards." +msgstr "У цьому випадку ми встановлюємо набір правил v6, який представляє трафік, отриманий з локальної мережі, призначений для DMZ. Оскільки синтаксис брандмауера політики зони трохи незграбний, я тримаю його чітким, думаючи про це в зворотному порядку." #: ../../configexamples/ha.rst:45 msgid "In this document, we have been allocated 203.0.113.0/24 by our upstream provider, which we are publishing on VLAN100." -msgstr "In this document, we have been allocated 203.0.113.0/24 by our upstream provider, which we are publishing on VLAN100." +msgstr "У цьому документі наш вихідний постачальник виділив нам 203.0.113.0/24, який ми публікуємо на VLAN100." #: ../../configexamples/wan-load-balancing.rst:76 msgid "In this example, eth0 is the primary interface and eth1 is the secondary interface. To provide simple failover functionality. If eth0 fails, eth1 takes over." -msgstr "In this example, eth0 is the primary interface and eth1 is the secondary interface. To provide simple failover functionality. If eth0 fails, eth1 takes over." +msgstr "У цьому прикладі eth0 є основним інтерфейсом, а eth1 — вторинним. Для забезпечення простої функції відновлення після відмови. Якщо eth0 не вдається, eth1 бере на себе." #: ../../configexamples/ansible.rst:12 msgid "In this example, we will set up a simple use of Ansible to configure multiple VyoS routers. We have four pre-configured routers with this configuration:" @@ -1242,27 +1283,43 @@ msgstr "In this example, we will set up a simple use of Ansible to configure mul #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:42 msgid "In this example OpenVPN will be setup with a client certificate and username / password authentication." -msgstr "In this example OpenVPN will be setup with a client certificate and username / password authentication." +msgstr "У цьому прикладі OpenVPN буде налаштовано за допомогою сертифіката клієнта та автентифікації за іменем користувача/паролем." #: ../../configexamples/wan-load-balancing.rst:158 msgid "In this example two LAN interfaces exist in different subnets instead of one like in the previous examples:" -msgstr "In this example two LAN interfaces exist in different subnets instead of one like in the previous examples:" +msgstr "У цьому прикладі два інтерфейси LAN існують у різних підмережах замість одного, як у попередніх прикладах:" #: ../../configexamples/zone-policy.rst:107 msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." -msgstr "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." +msgstr "У цьому прикладі ми маємо 4 зони. LAN, WAN, DMZ, локальний. Локальною зоною є сам брандмауер." + +#: ../../configexamples/lac-lns.rst:17 +msgid "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." +msgstr "In this example we use VyOS 1.5 as LNS and Cisco IOS as LAC. All users with domain **vyos.io** will be tunneled to LNS via L2TP." + +#: ../../configexamples/lac-lns.rst:98 +msgid "In this lab we use Windows PPPoE client." +msgstr "In this lab we use Windows PPPoE client." #: ../../configexamples/zone-policy.rst:50 msgid "Inbound WAN connect to DMZ host." -msgstr "Inbound WAN connect to DMZ host." +msgstr "Вхідне підключення WAN до хосту DMZ." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:189 msgid "Information about Ethernet Virtual Private Networks" -msgstr "Information about Ethernet Virtual Private Networks" +msgstr "Інформація про віртуальні приватні мережі Ethernet" #: ../../configexamples/segment-routing-isis.rst:223 msgid "Information about prefix-sid and label-operation from VyOS" -msgstr "Information about prefix-sid and label-operation from VyOS" +msgstr "Інформація про prefix-sid і label-operation від VyOS" + +#: ../../configexamples/ansible.rst:37 +msgid "Install Ansible:" +msgstr "Install Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install Paramiko:" +msgstr "Install Paramiko:" #: ../../configexamples/ansible.rst:37 msgid "Install the Ansible:" @@ -1274,11 +1331,11 @@ msgstr "Install the paramiko:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:3 msgid "Inter-VRF Routing over VRF Lite" -msgstr "Inter-VRF Routing over VRF Lite" +msgstr "Маршрутизація між VRF через VRF Lite" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:603 msgid "Inter-VRF routing is a well-known solution to address complex routing scenarios that enable -in a dynamic way- to leak routes between VRFs. Is recommended to take special consideration while designing route-targets and its application as it can minimize future interventions while creating a new VRF will automatically take the desired effect in its propagation." -msgstr "Inter-VRF routing is a well-known solution to address complex routing scenarios that enable -in a dynamic way- to leak routes between VRFs. Is recommended to take special consideration while designing route-targets and its application as it can minimize future interventions while creating a new VRF will automatically take the desired effect in its propagation." +msgstr "Маршрутизація між VRF є добре відомим рішенням для вирішення складних сценаріїв маршрутизації, які дозволяють динамічно пропускати маршрути між VRF. Рекомендується приділяти особливу увагу під час проектування цілей маршруту та його застосування, оскільки це може мінімізувати майбутні втручання, тоді як створення нового VRF автоматично матиме бажаний ефект у своєму поширенні." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:49 msgid "Interface and routing configuration:" @@ -1286,68 +1343,72 @@ msgstr "Interface and routing configuration:" #: ../../configexamples/ha.rst:195 msgid "Internal Network" -msgstr "Internal Network" +msgstr "Внутрішня мережа" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:30 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108 msgid "Internet" -msgstr "Internet" +msgstr "Інтернет" #: ../../configexamples/zone-policy.rst:40 msgid "Internet - 192.168.200.100 - TCP/25" -msgstr "Internet - 192.168.200.100 - TCP/25" +msgstr "Інтернет - 192.168.200.100 - TCP/25" #: ../../configexamples/zone-policy.rst:39 msgid "Internet - 192.168.200.100 - TCP/443" -msgstr "Internet - 192.168.200.100 - TCP/443" +msgstr "Інтернет - 192.168.200.100 - TCP/443" #: ../../configexamples/zone-policy.rst:41 msgid "Internet - 192.168.200.100 - TCP/53" -msgstr "Internet - 192.168.200.100 - TCP/53" +msgstr "Інтернет - 192.168.200.100 - TCP/53" #: ../../configexamples/zone-policy.rst:38 msgid "Internet - 192.168.200.100 - TCP/80" -msgstr "Internet - 192.168.200.100 - TCP/80" +msgstr "Інтернет - 192.168.200.100 - TCP/80" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:79 msgid "It's important to note that all your existing configurations will be migrated automatically on image upgrade. Nothing to do on your side." -msgstr "It's important to note that all your existing configurations will be migrated automatically on image upgrade. Nothing to do on your side." +msgstr "Важливо зазначити, що всі ваші наявні конфігурації буде автоматично перенесено під час оновлення образу. Нічого робити на вашому боці." #: ../../configexamples/ha.rst:163 msgid "It is assumed that the routers provided by upstream are capable of acting as a default router, add that as a static route." -msgstr "It is assumed that the routers provided by upstream are capable of acting as a default router, add that as a static route." +msgstr "Передбачається, що маршрутизатори, надані вищим потоком, можуть діяти як маршрутизатор за замовчуванням, додайте це як статичний маршрут." #: ../../configexamples/zone-policy.rst:140 msgid "It is good practice to log both accepted and denied traffic. It can save you significant headaches when trying to troubleshoot a connectivity issue." -msgstr "It is good practice to log both accepted and denied traffic. It can save you significant headaches when trying to troubleshoot a connectivity issue." +msgstr "Рекомендується реєструвати як прийнятий, так і заборонений трафік. Це може позбавити вас значних головних болів під час спроб усунути проблему підключення." #: ../../configexamples/zone-policy.rst:60 msgid "It will look something like this:" -msgstr "It will look something like this:" +msgstr "Це буде виглядати приблизно так:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:13 msgid "Keep networks isolated is -in general- a good principle, but there are cases where you might need that some network can access other in a different VRF." -msgstr "Keep networks isolated is -in general- a good principle, but there are cases where you might need that some network can access other in a different VRF." +msgstr "Зберігати ізольовані мережі - це загалом хороший принцип, але є випадки, коли вам може знадобитися, щоб одна мережа мала доступ до іншої в іншому VRF." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:4 msgid "L3VPN EVPN with VyOS" -msgstr "L3VPN EVPN with VyOS" +msgstr "L3VPN EVPN з VyOS" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:-1 msgid "L3VPN EVPN with VyOS topology image" -msgstr "L3VPN EVPN with VyOS topology image" +msgstr "L3VPN EVPN із зображенням топології VyOS" #: ../../configexamples/l3vpn-hub-and-spoke.rst:83 msgid "L3VPN configuration parameters table:" -msgstr "L3VPN configuration parameters table:" +msgstr "Таблиця параметрів конфігурації L3VPN:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:4 msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" -msgstr "L3VPN for Hub-and-Spoke connectivity with VyOS" +msgstr "L3VPN для підключення Hub-and-Spoke із VyOS" + +#: ../../configexamples/lac-lns.rst:32 +msgid "LAC" +msgstr "LAC" #: ../../configexamples/zone-policy.rst:392 msgid "LAN, WAN, DMZ, local and TUN (tunnel)" -msgstr "LAN, WAN, DMZ, local and TUN (tunnel)" +msgstr "LAN, WAN, DMZ, локальний і TUN (тунель)" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 @@ -1357,11 +1418,11 @@ msgstr "LAN1" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:575 msgid "LAN1 to LAN2" -msgstr "LAN1 to LAN2" +msgstr "LAN1 до LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:520 msgid "LAN1 to Outside" -msgstr "LAN1 to Outside" +msgstr "LAN1 назовні" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104 @@ -1371,31 +1432,39 @@ msgstr "LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:27 msgid "LAN 1" -msgstr "LAN 1" +msgstr "І 1" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:28 msgid "LAN 2" -msgstr "LAN 2" +msgstr "І 2" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:100 msgid "LAN Configuration" -msgstr "LAN Configuration" +msgstr "Конфігурація локальної мережі" #: ../../configexamples/zone-policy.rst:47 msgid "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." -msgstr "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." +msgstr "Хости LAN і DMZ мають базовий вихідний доступ: Web, FTP, SSH." #: ../../configexamples/zone-policy.rst:48 msgid "LAN can access DMZ resources." -msgstr "LAN can access DMZ resources." +msgstr "LAN може отримати доступ до ресурсів DMZ." + +#: ../../configexamples/lac-lns.rst:72 +msgid "LNS" +msgstr "LNS" #: ../../configexamples/l3vpn-hub-and-spoke.rst:551 msgid "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" -msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" +msgstr "Давайте перевіримо інформацію про маршрутизацію IPv4 та MPLS на вузлах провайдера (та сама процедура для всіх вузлів P):" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:25 msgid "Let’s say we have a requirement to have multiple networks." -msgstr "Let’s say we have a requirement to have multiple networks." +msgstr "Скажімо, у нас є вимога мати кілька мереж." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source NAT." +msgstr "Local subnets should be able to reach internet using source NAT." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 msgid "Local subnets should be able to reach internet using source nat." @@ -1403,73 +1472,88 @@ msgstr "Local subnets should be able to reach internet using source nat." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:58 msgid "MP-BGP or MultiProtocol BGP introduces two main concepts to solve this limitation: - Route Distinguisher (RD): Is used to distinguish between different VRFs –called VPNs- inside the BGP Process. The RD is appended to each IPv4 Network that is advertised into BGP for that VPN making it a unique VPNv4 route. - Route Target (RT): This is an extended BGP community append to the VPNv4 route in the Import/Export process. When a route passes from the VRF routing table into the BGP process it will add the configured export extended community(ies) for that VPN. When that route needs to go from BGP into the VRF routing table will only pass if that given VPN import policy matches any of the appended community(ies) into that prefix." -msgstr "MP-BGP or MultiProtocol BGP introduces two main concepts to solve this limitation: - Route Distinguisher (RD): Is used to distinguish between different VRFs –called VPNs- inside the BGP Process. The RD is appended to each IPv4 Network that is advertised into BGP for that VPN making it a unique VPNv4 route. - Route Target (RT): This is an extended BGP community append to the VPNv4 route in the Import/Export process. When a route passes from the VRF routing table into the BGP process it will add the configured export extended community(ies) for that VPN. When that route needs to go from BGP into the VRF routing table will only pass if that given VPN import policy matches any of the appended community(ies) into that prefix." +msgstr "MP-BGP або MultiProtocol BGP вводить дві основні концепції для усунення цього обмеження: - Розрізнювач маршруту (RD): використовується для розрізнення різних VRF – званих VPN – у процесі BGP. RD додається до кожної мережі IPv4, яка рекламується в BGP для цієї VPN, що робить її унікальним маршрутом VPNv4. - Route Target (RT): це розширене додавання спільноти BGP до маршруту VPNv4 у процесі імпорту/експорту. Коли маршрут проходить із таблиці маршрутизації VRF у процес BGP, він додає налаштовану розширену спільноту експорту для цієї VPN. Коли цей маршрут має перейти від BGP до таблиці маршрутизації VRF, він пройде, лише якщо дана політика імпорту VPN збігається з будь-якою спільнотою, доданою до цього префікса." #: ../../configexamples/qos.rst:60 msgid "Main rules:" -msgstr "Main rules:" +msgstr "Основні правила:" #: ../../configexamples/ha.rst:414 msgid "Make sure you can ping 10.254.60.1 and .2 from both routers." -msgstr "Make sure you can ping 10.254.60.1 and .2 from both routers." +msgstr "Переконайтеся, що ви можете пінгувати 10.254.60.1 і .2 з обох маршрутизаторів." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:29 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:727 msgid "Management" -msgstr "Management" +msgstr "управління" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:26 msgid "Management VRF" -msgstr "Management VRF" +msgstr "Управління VRF" #: ../../configexamples/ha.rst:114 msgid "Many other Hypervisors do this, and I'm hoping that this document will be expanded to document how to do this for others." -msgstr "Many other Hypervisors do this, and I'm hoping that this document will be expanded to document how to do this for others." +msgstr "Багато інших гіпервізорів роблять це, і я сподіваюся, що цей документ буде розширено, щоб документувати, як це робити для інших." #: ../../configexamples/ha.rst:297 msgid "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." -msgstr "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." +msgstr "Маскарадний трафік, що надходить із 10.200.201.0/24, що надходить через публічний інтерфейс." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:254 +#: ../../configexamples/lac-lns.rst:106 msgid "Monitoring" -msgstr "Monitoring" +msgstr "Моніторинг" + +#: ../../configexamples/lac-lns.rst:117 +msgid "Monitoring on LAC side" +msgstr "Monitoring on LAC side" + +#: ../../configexamples/lac-lns.rst:108 +msgid "Monitoring on LNS side" +msgstr "Monitoring on LNS side" + +#: ../../configexamples/lac-lns.rst:140 +msgid "Monitoring on RADIUS Server side" +msgstr "Monitoring on RADIUS Server side" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162 msgid "Multiple LAN/DMZ Setup" -msgstr "Multiple LAN/DMZ Setup" +msgstr "Налаштування декількох LAN/DMZ" #: ../../configexamples/ha.rst:295 msgid "NAT and conntrack-sync" -msgstr "NAT and conntrack-sync" +msgstr "NAT і conntrack-sync" #: ../../configexamples/nmp.rst:7 msgid "NMP example" -msgstr "NMP example" +msgstr "Приклад НМП" #: ../../configexamples/zone-policy.rst:23 msgid "Native IPv4 and IPv6" -msgstr "Native IPv4 and IPv6" +msgstr "Власний IPv4 та IPv6" #: ../../configexamples/ha.rst:86 msgid "Network Cabling" -msgstr "Network Cabling" +msgstr "Мережевий кабель" +#: ../../configexamples/lac-lns.rst:21 #: ../../configexamples/pppoe-ipv6-basic.rst:18 msgid "Network Topology" -msgstr "Network Topology" +msgstr "Топологія мережі" #: ../../configexamples/ansible.rst:-1 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:-1 #: ../../configexamples/l3vpn-hub-and-spoke.rst:-1 +#: ../../configexamples/lac-lns.rst:-1 #: ../../configexamples/nmp.rst:-1 #: ../../configexamples/pppoe-ipv6-basic.rst:-1 #: ../../configexamples/qos.rst:-1 #: ../../configexamples/wan-load-balancing.rst:-1 #: ../../configexamples/zone-policy.rst:-1 msgid "Network Topology Diagram" -msgstr "Network Topology Diagram" +msgstr "Схема топології мережі" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:14 msgid "Network Topology and requirements" @@ -1477,140 +1561,140 @@ msgstr "Network Topology and requirements" #: ../../configexamples/qos.rst:31 msgid "Next, we will replace only all CS4 labels on the “VyOS2” router." -msgstr "Next, we will replace only all CS4 labels on the “VyOS2” router." +msgstr "Далі ми замінимо лише всі мітки CS4 на маршрутизаторі «VyOS2»." #: ../../configexamples/nmp.rst:28 msgid "Next, you just should follow the pictures:" -msgstr "Next, you just should follow the pictures:" +msgstr "Далі слід просто стежити за картинками:" #: ../../configexamples/qos.rst:106 msgid "Next on the router VyOS2 we will change labels on all incoming traffic only from CS4-> CS6" -msgstr "Next on the router VyOS2 we will change labels on all incoming traffic only from CS4-> CS6" +msgstr "Далі на роутері VyOS2 ми змінимо мітки на весь вхідний трафік тільки з CS4-> CS6" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:42 msgid "Next thing to do, is to create a wireguard keypair on each side. After this, the public key can be displayed, to save for later." -msgstr "Next thing to do, is to create a wireguard keypair on each side. After this, the public key can be displayed, to save for later." +msgstr "Наступне, що потрібно зробити, це створити пару ключів для захисту проводів з кожного боку. Після цього відкритий ключ можна буде відобразити, щоб зберегти на потім." #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "Node" -msgstr "Node" +msgstr "Вузол" #: ../../configexamples/ha.rst:83 msgid "Note that router1 is a VM that runs on one of the compute nodes." -msgstr "Note that router1 is a VM that runs on one of the compute nodes." +msgstr "Зауважте, що router1 — це віртуальна машина, яка працює на одному з обчислювальних вузлів." #: ../../configexamples/pppoe-ipv6-basic.rst:115 msgid "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." -msgstr "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." +msgstr "Зверніть увагу, щоб дозволити маршрутизатору отримувати відповідь DHCPv6 від провайдера. Нам потрібно дозволити пакети з портом джерела 547 (сервер) і портом призначення 546 (клієнт)." #: ../../configexamples/zone-policy.rst:411 msgid "Notice, none go to WAN since WAN wouldn't have a v6 address on it." -msgstr "Notice, none go to WAN since WAN wouldn't have a v6 address on it." +msgstr "Зауважте, ніхто не переходить до WAN, оскільки WAN не матиме адреси v6." #: ../../configexamples/l3vpn-hub-and-spoke.rst:831 msgid "Now, let’s check routing information on out Hub PE:" -msgstr "Now, let’s check routing information on out Hub PE:" +msgstr "Тепер давайте перевіримо інформацію про маршрутизацію на нашому Hub PE:" #: ../../configexamples/ha.rst:322 msgid "Now enable replication between nodes. Replace eth0.201 with bond0.201 on the hardware router." -msgstr "Now enable replication between nodes. Replace eth0.201 with bond0.201 on the hardware router." +msgstr "Тепер увімкніть реплікацію між вузлами. Замініть eth0.201 на bond0.201 на апаратному маршрутизаторі." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:54 msgid "Now generate all required certificates on the ovpn-server:" -msgstr "Now generate all required certificates on the ovpn-server:" +msgstr "Тепер згенеруйте всі необхідні сертифікати на ovpn-сервері:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:144 msgid "Now the Client is able to ping a public IPv6 address" -msgstr "Now the Client is able to ping a public IPv6 address" +msgstr "Тепер клієнт може перевіряти загальнодоступну адресу IPv6" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:45 msgid "Now we are able to setup the tunnel interface." -msgstr "Now we are able to setup the tunnel interface." +msgstr "Тепер ми можемо налаштувати інтерфейс тунелю." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:425 msgid "Now we perform some end-to-end testing" -msgstr "Now we perform some end-to-end testing" +msgstr "Тепер ми проводимо наскрізне тестування" #: ../../configexamples/l3vpn-hub-and-spoke.rst:636 msgid "Now we’re checking iBGP status and routes from route-reflector nodes to other devices:" -msgstr "Now we’re checking iBGP status and routes from route-reflector nodes to other devices:" +msgstr "Зараз ми перевіряємо статус iBGP і маршрути від вузлів маршрутизатора до інших пристроїв:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:57 msgid "Now you should be able to ping a public IPv6 Address" -msgstr "Now you should be able to ping a public IPv6 Address" +msgstr "Тепер ви зможете перевіряти загальнодоступну IPv6-адресу" #: ../../configexamples/ha.rst:348 msgid "OSPF Over WireGuard" -msgstr "OSPF Over WireGuard" +msgstr "OSPF через WireGuard" #: ../../configexamples/ospf-unnumbered.rst:7 msgid "OSPF unnumbered with ECMP" -msgstr "OSPF unnumbered with ECMP" +msgstr "OSPF без нумерації з ECMP" #: ../../configexamples/azure-vpn-bgp.rst:36 #: ../../configexamples/azure-vpn-dual-bgp.rst:33 msgid "On-premises address space" -msgstr "On-premises address space" +msgstr "Локальний адресний простір" #: ../../configexamples/qos.rst:88 msgid "On the router, VyOS4 set all traffic as CS4. We have to configure the default class and class for changing all labels from CS0 to CS4" -msgstr "On the router, VyOS4 set all traffic as CS4. We have to configure the default class and class for changing all labels from CS0 to CS4" +msgstr "На маршрутизаторі VyOS4 встановив весь трафік як CS4. Нам потрібно налаштувати клас за замовчуванням і клас для зміни всіх міток із CS0 на CS4" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:105 msgid "Once all routers can be safely remotely managed and the core network is operational, we can now setup the tenant networks." -msgstr "Once all routers can be safely remotely managed and the core network is operational, we can now setup the tenant networks." +msgstr "Коли всіма маршрутизаторами можна буде безпечно віддалено керувати, а базова мережа запрацює, ми зможемо налаштувати мережі орендарів." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:87 msgid "Once all the required certificates and keys are installed, the remaining OpenVPN Server configuration can be carried out." -msgstr "Once all the required certificates and keys are installed, the remaining OpenVPN Server configuration can be carried out." +msgstr "Після встановлення всіх необхідних сертифікатів і ключів можна виконати решту конфігурації сервера OpenVPN." #: ../../configexamples/zone-policy.rst:355 msgid "Once you have all of your rulesets built, then you need to create your zone-policy." -msgstr "Once you have all of your rulesets built, then you need to create your zone-policy." +msgstr "Коли ви створите всі набори правил, вам потрібно створити політику зони." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:96 msgid "One advantage of having the client certificate stored is the ability to create the client configuration." -msgstr "One advantage of having the client certificate stored is the ability to create the client configuration." +msgstr "Однією з переваг збереження сертифіката клієнта є можливість створити конфігурацію клієнта." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:47 msgid "One cable/logical connection between LAN1 and Internet" -msgstr "One cable/logical connection between LAN1 and Internet" +msgstr "Один кабель/логічне з'єднання між LAN1 та Інтернетом" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:46 msgid "One cable/logical connection between LAN1 and LAN2" -msgstr "One cable/logical connection between LAN1 and LAN2" +msgstr "Один кабель/логічне з'єднання між LAN1 і LAN2" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:49 msgid "One cable/logical connection between LAN1 and Management" -msgstr "One cable/logical connection between LAN1 and Management" +msgstr "Один кабель/логічне з'єднання між LAN1 і керуванням" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:48 msgid "One cable/logical connection between LAN2 and Internet" -msgstr "One cable/logical connection between LAN2 and Internet" +msgstr "Один кабель/логічне з'єднання між LAN2 та Інтернетом" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:50 msgid "One cable/logical connection between LAN2 and Management" -msgstr "One cable/logical connection between LAN2 and Management" +msgstr "Один кабель/логічне з'єднання між LAN2 і керуванням" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:5 msgid "OpenVPN with LDAP" -msgstr "OpenVPN with LDAP" +msgstr "OpenVPN з LDAP" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:-1 msgid "OpenVPN with LDAP topology image" -msgstr "OpenVPN with LDAP topology image" +msgstr "OpenVPN із зображенням топології LDAP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:42 msgid "Operating system: VyOS" -msgstr "Operating system: VyOS" +msgstr "Операційна система: VyOS" #: ../../configexamples/ha.rst:100 msgid "Our implementation uses VMware's Distributed Port Groups, which allows VMware to use LACP. This is a part of the ENTERPRISE licence, and is not available on a free licence. If you are implementing this and do not have access to DPGs, you should not use VMware, and use some other virtualization platform instead." -msgstr "Our implementation uses VMware's Distributed Port Groups, which allows VMware to use LACP. This is a part of the ENTERPRISE licence, and is not available on a free licence. If you are implementing this and do not have access to DPGs, you should not use VMware, and use some other virtualization platform instead." +msgstr "Наша реалізація використовує розподілені групи портів VMware, що дозволяє VMware використовувати LACP. Це частина ліцензії ENTERPRISE і недоступна для безкоштовної ліцензії. Якщо ви реалізуєте це і не маєте доступу до DPG, вам не слід використовувати VMware, а використовувати іншу платформу віртуалізації." #: ../../configexamples/ha.rst:52 msgid "Our routers are going to have a floating IP address of 203.0.113.1, and use .2 and .3 as their fixed IPs." -msgstr "Our routers are going to have a floating IP address of 203.0.113.1, and use .2 and .3 as their fixed IPs." +msgstr "Наші маршрутизатори матимуть плаваючу IP-адресу 203.0.113.1 і використовуватимуть .2 і .3 як фіксовані IP-адреси." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:23 #: ../../configexamples/wan-load-balancing.rst:23 @@ -1618,7 +1702,7 @@ msgstr "Our routers are going to have a floating IP address of 203.0.113.1, and #: ../../configexamples/wan-load-balancing.rst:104 #: ../../configexamples/wan-load-balancing.rst:135 msgid "Overview" -msgstr "Overview" +msgstr "Огляд" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:82 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:123 @@ -1627,7 +1711,7 @@ msgstr "PE1" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:17 msgid "PE1 is located in an industrial area that holds multiple office buildings. All customers have a site in this area." -msgstr "PE1 is located in an industrial area that holds multiple office buildings. All customers have a site in this area." +msgstr "PE1 знаходиться в промисловій зоні, яка містить кілька офісних будівель. У всіх клієнтів є сайти в цьому районі." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:88 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:129 @@ -1636,7 +1720,7 @@ msgstr "PE2" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:19 msgid "PE2 is located in a smaller area where by coincidence two customers (blue and red) share an office building." -msgstr "PE2 is located in a smaller area where by coincidence two customers (blue and red) share an office building." +msgstr "PE2 розташовано в меншому районі, де випадково двоє клієнтів (синій і червоний) ділять офісну будівлю." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:94 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:135 @@ -1645,32 +1729,36 @@ msgstr "PE3" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:21 msgid "PE3 is located in a smaller area where by coincidence two customers (blue and green) are located." -msgstr "PE3 is located in a smaller area where by coincidence two customers (blue and green) are located." +msgstr "PE3 знаходиться в меншій зоні, де за збігом обставин знаходяться два клієнти (синій і зелений)." #: ../../configexamples/pppoe-ipv6-basic.rst:7 msgid "PPPoE IPv6 Basic Setup for Home Network" -msgstr "PPPoE IPv6 Basic Setup for Home Network" +msgstr "Базове налаштування PPPoE IPv6 для домашньої мережі" #: ../../configexamples/pppoe-ipv6-basic.rst:29 msgid "PPPoE Setup" -msgstr "PPPoE Setup" +msgstr "Налаштування PPPoE" + +#: ../../configexamples/lac-lns.rst:7 +msgid "PPPoE over L2TP" +msgstr "PPPoE over L2TP" #: ../../configexamples/segment-routing-isis.rst:255 msgid "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" -msgstr "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" +msgstr "Проведіть пінг між VyOS-P1 / VyOS-P2, щоб підтвердити доступність:" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:73 msgid "Ping the Client from the DHCP Server." -msgstr "Ping the Client from the DHCP Server." +msgstr "Передайте клієнту ping із сервера DHCP." #: ../../configexamples/wan-load-balancing.rst:26 msgid "Pings will be sent to four targets for health testing (33.44.55.66, 44.55.66.77, 55.66.77.88 and 66.77.88.99)." -msgstr "Pings will be sent to four targets for health testing (33.44.55.66, 44.55.66.77, 55.66.77.88 and 66.77.88.99)." +msgstr "Пінги будуть надіслані до чотирьох цілей для перевірки справності (33.44.55.66, 44.55.66.77, 55.66.77.88 і 66.77.88.99)." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:128 #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:195 msgid "Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively." -msgstr "Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively." +msgstr "Зауважте, що «autonomous-flag» і «on-link-flag» увімкнено за умовчанням, «valid-lifetime» і «preferred-lifetime» встановлено значення за замовчуванням 30 днів і 4 години відповідно." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:5 msgid "Policy-Based Site-to-Site VPN and Firewall Configuration" @@ -1679,17 +1767,21 @@ msgstr "Policy-Based Site-to-Site VPN and Firewall Configuration" #: ../../configexamples/azure-vpn-bgp.rst:48 #: ../../configexamples/azure-vpn-dual-bgp.rst:47 msgid "Pre-shared key" -msgstr "Pre-shared key" +msgstr "Попередньо спільний ключ" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:14 #: ../../configexamples/azure-vpn-bgp.rst:16 #: ../../configexamples/azure-vpn-dual-bgp.rst:13 msgid "Prerequisites" -msgstr "Prerequisites" +msgstr "передумови" #: ../../configexamples/ha.rst:520 msgid "Priorities" -msgstr "Priorities" +msgstr "Пріоритети" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." +msgstr "Protect the router on 'WAN' interface, allowing only IPSec connections and SSH access from trusted IPs." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." @@ -1697,11 +1789,11 @@ msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections a #: ../../configexamples/ha.rst:230 msgid "Public Network" -msgstr "Public Network" +msgstr "Публічна мережа" #: ../../configexamples/qos.rst:7 msgid "QoS example" -msgstr "QoS example" +msgstr "Приклад QoS" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 @@ -1710,7 +1802,7 @@ msgstr "RD" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:97 msgid "RD & RT Schema" -msgstr "RD & RT Schema" +msgstr "Схема RD & RT" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 msgid "RT" @@ -1718,122 +1810,122 @@ msgstr "RT" #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "RT export" -msgstr "RT export" +msgstr "RT експорт" #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "RT import" -msgstr "RT import" +msgstr "RT імпорт" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:73 msgid "Regular VyOS users will notice that the BGP syntax has changed in VyOS 1.4 from even the prior post about this subject. This is due to T1711, where it was finally decided to get rid of the redundant BGP ASN (Autonomous System Number) specification on the CLI and move it to a single leaf node (set protocols bgp local-as)." -msgstr "Regular VyOS users will notice that the BGP syntax has changed in VyOS 1.4 from even the prior post about this subject. This is due to T1711, where it was finally decided to get rid of the redundant BGP ASN (Autonomous System Number) specification on the CLI and move it to a single leaf node (set protocols bgp local-as)." +msgstr "Звичайні користувачі VyOS помітять, що синтаксис BGP змінився у VyOS 1.4 навіть з попередньої публікації на цю тему. Це пов’язано з T1711, де було нарешті вирішено позбутися надлишкової специфікації BGP ASN (Autonomous System Number) на CLI та перенести її на один кінцевий вузол (встановити протоколи bgp local-as)." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:120 msgid "Remote Networks" -msgstr "Remote Networks" +msgstr "Віддалені мережі" #: ../../configexamples/ha.rst:368 msgid "Replace the 203.0.113.3 with whatever the other router's IP address is." -msgstr "Replace the 203.0.113.3 with whatever the other router's IP address is." +msgstr "Замініть 203.0.113.3 IP-адресою іншого маршрутизатора." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:20 msgid "Requested a \"Regular Tunnel\". You want to choose a location that is closest to your physical location for the best response time." -msgstr "Requested a \"Regular Tunnel\". You want to choose a location that is closest to your physical location for the best response time." +msgstr "Запитав "Звичайний тунель". Ви хочете вибрати місце, яке є найближчим до вашого фізичного розташування для найкращого часу відповіді." #: ../../configexamples/bgp-ipv6-unnumbered.rst:55 #: ../../configexamples/ospf-unnumbered.rst:50 msgid "Results" -msgstr "Results" +msgstr "Результати" #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 msgid "Role" -msgstr "Role" +msgstr "Роль" #: ../../configexamples/azure-vpn-dual-bgp.rst:6 msgid "Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" -msgstr "Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" +msgstr "Маршрутизована надлишкова мережева VPN до Azure (BGP через IKEv2/IPsec)" #: ../../configexamples/azure-vpn-bgp.rst:6 msgid "Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" -msgstr "Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" +msgstr "VPN на основі маршруту Site-to-Site VPN до Azure (BGP через IKEv2/IPsec)" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:767 msgid "Route-Filtering" -msgstr "Route-Filtering" +msgstr "Фільтрація маршруту" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:110 msgid "Routed /48. This is something you can request by clicking the \"Assign /48\" link in the Tunnelbroker.net tunnel config. It allows you to have up to 65k" -msgstr "Routed /48. This is something you can request by clicking the \"Assign /48\" link in the Tunnelbroker.net tunnel config. It allows you to have up to 65k" +msgstr "Розбитий /48. Це те, що ви можете запросити, натиснувши посилання «Призначити /48» у конфігурації тунелю Tunnelbroker.net. Це дозволяє мати до 65 тис" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:107 msgid "Routed /64. This is the default assignment. In IPv6-land, it's good for a single \"LAN\", and is somewhat equivalent to a /24." -msgstr "Routed /64. This is the default assignment. In IPv6-land, it's good for a single \"LAN\", and is somewhat equivalent to a /24." +msgstr "Розбитий /64. Це призначення за замовчуванням. У країнах IPv6 це добре для однієї «LAN» і дещо еквівалентно /24." #: ../../configexamples/bgp-ipv6-unnumbered.rst:14 #: ../../configexamples/bgp-ipv6-unnumbered.rst:57 #: ../../configexamples/ospf-unnumbered.rst:14 #: ../../configexamples/ospf-unnumbered.rst:52 msgid "Router A:" -msgstr "Router A:" +msgstr "Маршрутизатор A:" #: ../../configexamples/pppoe-ipv6-basic.rst:61 msgid "Router Advertisement" -msgstr "Router Advertisement" +msgstr "Оголошення про маршрутизатор" #: ../../configexamples/bgp-ipv6-unnumbered.rst:34 #: ../../configexamples/bgp-ipv6-unnumbered.rst:118 #: ../../configexamples/ospf-unnumbered.rst:31 #: ../../configexamples/ospf-unnumbered.rst:87 msgid "Router B:" -msgstr "Router B:" +msgstr "Маршрутизатор B:" #: ../../configexamples/ha.rst:538 msgid "Router id's must be unique." -msgstr "Router id's must be unique." +msgstr "Ідентифікатори маршрутизатора мають бути унікальними." #: ../../configexamples/zone-policy.rst:98 msgid "Ruleset are created per zone-pair-direction." -msgstr "Ruleset are created per zone-pair-direction." +msgstr "Набір правил створюється для зони-пари-напрямку." #: ../../configexamples/segment-routing-isis.rst:7 msgid "Segment-routing IS-IS example" -msgstr "Segment-routing IS-IS example" +msgstr "Приклад сегментної маршрутизації IS-IS" #: ../../configexamples/pppoe-ipv6-basic.rst:73 msgid "Set DNS server address in the advertisement so that clients can obtain it by using RDNSS option. Most operating systems (Windows, Linux, Mac) should already support it." -msgstr "Set DNS server address in the advertisement so that clients can obtain it by using RDNSS option. Most operating systems (Windows, Linux, Mac) should already support it." +msgstr "Встановіть адресу DNS-сервера в оголошенні, щоб клієнти могли отримати її за допомогою параметра RDNSS. Більшість операційних систем (Windows, Linux, Mac) вже мають підтримувати його." #: ../../configexamples/qos.rst:40 msgid "Set IP addresses on all VPCs and a default gateway 172.17.1.1. We'll use in this case only static routes. On the VyOS3 router, we need to change the 'dscp' labels for the VPCs. To do this, we use this configuration." -msgstr "Set IP addresses on all VPCs and a default gateway 172.17.1.1. We'll use in this case only static routes. On the VyOS3 router, we need to change the 'dscp' labels for the VPCs. To do this, we use this configuration." +msgstr "Установіть IP-адреси на всіх VPC і шлюз за замовчуванням 172.17.1.1. Ми будемо використовувати в цьому випадку тільки статичні маршрути. На маршрутизаторі VyOS3 нам потрібно змінити мітки «dscp» для VPC. Для цього ми використовуємо цю конфігурацію." #: ../../configexamples/pppoe-ipv6-basic.rst:72 msgid "Set MTU in advertisement to 1492 because of PPPoE header overhead." -msgstr "Set MTU in advertisement to 1492 because of PPPoE header overhead." +msgstr "Встановіть MTU в оголошенні на 1492 через накладні витрати заголовка PPPoE." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:143 msgid "Set the VRF name and Table ID, set interface address and bind it to the VRF. Last add the static route to the remote network." -msgstr "Set the VRF name and Table ID, set interface address and bind it to the VRF. Last add the static route to the remote network." +msgstr "Встановіть назву VRF та ідентифікатор таблиці, установіть адресу інтерфейсу та прив’яжіть її до VRF. Останнім додайте статичний маршрут до віддаленої мережі." #: ../../configexamples/ha.rst:522 msgid "Set the cost on the secondary links to be 200. This means that they will not be used unless the primary links are down." -msgstr "Set the cost on the secondary links to be 200. This means that they will not be used unless the primary links are down." +msgstr "Встановіть вартість вторинних посилань на 200. Це означає, що вони не використовуватимуться, якщо первинні посилання не працюють." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:27 msgid "Set the local subnet on eth2 and the public ip address eth1 on each site." -msgstr "Set the local subnet on eth2 and the public ip address eth1 on each site." +msgstr "Встановіть локальну підмережу на eth2 та публічну IP-адресу eth1 на кожному сайті." #: ../../configexamples/qos.rst:159 msgid "Set up bandwidth limits on the eth2 interface of the router “VyOS2”." -msgstr "Set up bandwidth limits on the eth2 interface of the router “VyOS2”." +msgstr "Налаштуйте обмеження пропускної здатності на інтерфейсі eth2 роутера «VyOS2»." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:139 msgid "Sets your LAN interface's IP address" -msgstr "Sets your LAN interface's IP address" +msgstr "Встановлює IP-адресу вашого інтерфейсу локальної мережі" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:235 msgid "Setting BGP global local-as as well inside the VRF. Redistribute static routes to inject configured networks into the BGP process but still inside the VRF." -msgstr "Setting BGP global local-as as well inside the VRF. Redistribute static routes to inject configured networks into the BGP process but still inside the VRF." +msgstr "Налаштування глобального локального BGP, а також усередині VRF. Перерозподіліть статичні маршрути, щоб додати налаштовані мережі в процес BGP, але все ще всередині VRF." #: ../../configexamples/ansible.rst:10 msgid "Setting up Ansible on a server running the Debian operating system." @@ -1841,19 +1933,19 @@ msgstr "Setting up Ansible on a server running the Debian operating system." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:51 msgid "Setup the ipv6 default route to the tunnel interface" -msgstr "Setup the ipv6 default route to the tunnel interface" +msgstr "Налаштуйте стандартний маршрут ipv6 до інтерфейсу тунелю" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:148 msgid "Show routes for all VRFs" -msgstr "Show routes for all VRFs" +msgstr "Показати маршрути для всіх VRF" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:206 msgid "Similarly, to attach the firewall, you would use `set interfaces ethernet eth0 firewall in ipv6-name` or `et firewall zone LOCAL from WAN firewall ipv6-name`." -msgstr "Similarly, to attach the firewall, you would use `set interfaces ethernet eth0 firewall in ipv6-name` or `et firewall zone LOCAL from WAN firewall ipv6-name`." +msgstr "Подібним чином, щоб під’єднати брандмауер, ви повинні використати `set interfaces ethernet eth0 firewall in ipv6-name` або `et firewall zone LOCAL from WAN firewall ipv6-name`." #: ../../configexamples/pppoe-ipv6-basic.rst:78 msgid "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." -msgstr "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." +msgstr "Оскільки деякі інтернет-провайдери відключають безперервне з’єднання кожні 2–3 дні, ми встановлюємо ``valid-lifetime`` на 2 дні, щоб дозволити ПК поступово відключати стару адресу." #: ../../configexamples/site-2-site-cisco.rst:128 msgid "Since the tunnel is a point-to-point GRE tunnel, it behaves like any other point-to-point interface (for example: serial, dialer), and it is possible to run any Interior Gateway Protocol (IGP)/Exterior Gateway Protocol (EGP) over the link in order to exchange routing information" @@ -1861,15 +1953,15 @@ msgstr "Since the tunnel is a point-to-point GRE tunnel, it behaves like any oth #: ../../configexamples/zone-policy.rst:236 msgid "Since we have 4 zones, we need to setup the following rulesets." -msgstr "Since we have 4 zones, we need to setup the following rulesets." +msgstr "Оскільки у нас 4 зони, нам потрібно налаштувати наступні набори правил." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:119 msgid "Single LAN Setup" -msgstr "Single LAN Setup" +msgstr "Налаштування однієї локальної мережі" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:121 msgid "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker Routed /64 prefix:" -msgstr "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker Routed /64 prefix:" +msgstr "Налаштування однієї локальної мережі, де eth2 є вашим інтерфейсом локальної мережі. Використовуйте префікс Tunnelbroker Routed /64:" #: ../../configexamples/site-2-site-cisco.rst:4 msgid "Site-to-Site IPSec VPN to Cisco using FlexVPN" @@ -1877,20 +1969,20 @@ msgstr "Site-to-Site IPSec VPN to Cisco using FlexVPN" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:179 msgid "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" -msgstr "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" +msgstr "Отже, коли ваша локальна мережа — eth1, ваша DMZ — eth2, ваші камери — на eth3 тощо:" #: ../../configexamples/zone-policy.rst:416 msgid "Something like:" -msgstr "Something like:" +msgstr "Щось на зразок:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:91 #: ../../configexamples/l3vpn-hub-and-spoke.rst:93 msgid "Spoke" -msgstr "Spoke" +msgstr "Говорив" #: ../../configexamples/zone-policy.rst:358 msgid "Start by setting the interface and default action for each zone." -msgstr "Start by setting the interface and default action for each zone." +msgstr "Почніть із встановлення інтерфейсу та дії за замовчуванням для кожної зони." #: ../../configexamples/ansible.rst:122 msgid "Start the playbook:" @@ -1902,65 +1994,65 @@ msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure ca #: ../../configexamples/l3vpn-hub-and-spoke.rst:105 msgid "Step-1: Configuring IGP and enabling MPLS LDP" -msgstr "Step-1: Configuring IGP and enabling MPLS LDP" +msgstr "Крок 1: Налаштування IGP і ввімкнення MPLS LDP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:322 msgid "Step-2: Configuring iBGP for L3VPN control-plane" -msgstr "Step-2: Configuring iBGP for L3VPN control-plane" +msgstr "Крок 2: Налаштування iBGP для рівня керування L3VPN" #: ../../configexamples/l3vpn-hub-and-spoke.rst:407 msgid "Step-3: Configuring L3VPN VRFs on PE nodes" -msgstr "Step-3: Configuring L3VPN VRFs on PE nodes" +msgstr "Крок 3: Налаштування VRF L3VPN на вузлах PE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:482 msgid "Step-4: Configuring CE nodes" -msgstr "Step-4: Configuring CE nodes" +msgstr "Крок 4: Налаштування вузлів CE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:545 msgid "Step-5: Verification" -msgstr "Step-5: Verification" +msgstr "Крок 5: Перевірка" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:137 msgid "Step 1: VRF and Configurations to remote networks" -msgstr "Step 1: VRF and Configurations to remote networks" +msgstr "Крок 1: VRF і налаштування для віддалених мереж" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:228 msgid "Step 2: BGP Configuration for VRF-Lite" -msgstr "Step 2: BGP Configuration for VRF-Lite" +msgstr "Крок 2: Конфігурація BGP для VRF-Lite" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:287 msgid "Step 3: VPN Configuration" -msgstr "Step 3: VPN Configuration" +msgstr "Крок 3: Конфігурація VPN" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:422 msgid "Step 4: End to End verification" -msgstr "Step 4: End to End verification" +msgstr "Крок 4: Наскрізна перевірка" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:103 msgid "Tenant networks (VRFs)" -msgstr "Tenant networks (VRFs)" +msgstr "Мережі орендарів (VRF)" #: ../../configexamples/ha.rst:489 msgid "Test OSPF" -msgstr "Test OSPF" +msgstr "Тест OSPF" #: ../../configexamples/ha.rst:412 msgid "Test WireGuard" -msgstr "Test WireGuard" +msgstr "Перевірте WireGuard" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:71 msgid "Test the result" -msgstr "Test the result" +msgstr "Перевірте результат" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:6 msgid "Testdate: 2023-02-24" -msgstr "Testdate: 2023-02-24" +msgstr "Дата тестування: 24.02.2023" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:6 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:6 #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:7 msgid "Testdate: 2023-05-11" -msgstr "Testdate: 2023-05-11" +msgstr "Дата тестування: 2023-05-11" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:6 #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:7 @@ -1975,96 +2067,96 @@ msgstr "Testdate: 2024-01-13" #: ../../configexamples/ha.rst:276 #: ../../configexamples/ha.rst:337 msgid "Testing" -msgstr "Testing" +msgstr "Тестування" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:143 #: ../../configexamples/autotest/Wireguard/Wireguard.rst:85 msgid "Testing and debugging" -msgstr "Testing and debugging" +msgstr "Тестування та налагодження" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:164 msgid "That's how you can expand the example above. Use the `Routed /48` information. This allows you to assign a different /64 to every interface, LAN, or even device. Or you could break your network into smaller chunks like /56 or /60." -msgstr "That's how you can expand the example above. Use the `Routed /48` information. This allows you to assign a different /64 to every interface, LAN, or even device. Or you could break your network into smaller chunks like /56 or /60." +msgstr "Таким чином ви можете розширити наведений вище приклад. Використовуйте інформацію `Routed /48`. Це дозволяє призначати різні /64 для кожного інтерфейсу, локальної мережі чи навіть пристрою. Або ви можете розбити свою мережу на менші частини, наприклад /56 або /60." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:23 msgid "The Lab asume a full running Active Directory on the Windows Server. Here are some PowerShell commands to quickly add a Test Active Directory." -msgstr "The Lab asume a full running Active Directory on the Windows Server. Here are some PowerShell commands to quickly add a Test Active Directory." +msgstr "Лабораторія припускає повноцінну роботу Active Directory на Windows Server. Ось кілька команд PowerShell для швидкого додавання тестового Active Directory." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:15 msgid "The Topology are consists of:" -msgstr "The Topology are consists of:" +msgstr "Топологія складається з:" #: ../../configexamples/zone-policy.rst:57 msgid "The VyOS interface is assigned the .1/:1 address of their respective networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30." -msgstr "The VyOS interface is assigned the .1/:1 address of their respective networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30." +msgstr "Інтерфейсу VyOS призначається адреса .1/:1 відповідних мереж. WAN знаходиться у VLAN 10, LAN у VLAN 20, а DMZ у VLAN 30." #: ../../configexamples/ha.rst:30 msgid "The ``commit`` command is implied after every section. If you make an error, ``commit`` will warn you and you can fix it before getting too far into things. Please ensure you commit early and commit often." -msgstr "The ``commit`` command is implied after every section. If you make an error, ``commit`` will warn you and you can fix it before getting too far into things. Please ensure you commit early and commit often." +msgstr "Після кожного розділу мається на увазі команда ``commit``. Якщо ви зробите помилку, ``commit`` попередить вас, і ви зможете виправити її, перш ніж заглиблюватися в речі. Будь ласка, переконайтеся, що ви зобов’язуєтесь рано та часто." #: ../../configexamples/ha.rst:543 msgid "The ``redistribute ospf`` command is there purely as an example of how this can be expanded. In this walkthrough, it will be filtered by BGPOUT rule 10000, as it is not 203.0.113.0/24." -msgstr "The ``redistribute ospf`` command is there purely as an example of how this can be expanded. In this walkthrough, it will be filtered by BGPOUT rule 10000, as it is not 203.0.113.0/24." +msgstr "Команда ``redistribute ospf`` є лише як приклад того, як це можна розширити. У цьому покроковому керівництві його буде відфільтровано за правилом BGPOUT 10000, оскільки це не 203.0.113.0/24." #: ../../configexamples/segment-routing-isis.rst:19 msgid "The below configuration is used as example where we keep focus on VyOS-P1/VyOS-P2/XRv-P3 which we share the settings." -msgstr "The below configuration is used as example where we keep focus on VyOS-P1/VyOS-P2/XRv-P3 which we share the settings." +msgstr "Наведена нижче конфігурація використовується як приклад, де ми зосереджуємось на VyOS-P1/VyOS-P2/XRv-P3, налаштування яких ми ділимо." #: ../../configexamples/wan-load-balancing.rst:82 msgid "The configuration steps are the same as in the previous example, except rule 10. So we keep the configuration, remove rule 10 and add a new rule for the failover mode:" -msgstr "The configuration steps are the same as in the previous example, except rule 10. So we keep the configuration, remove rule 10 and add a new rule for the failover mode:" +msgstr "Кроки конфігурації такі ж, як і в попередньому прикладі, за винятком правила 10. Тому ми зберігаємо конфігурацію, видаляємо правило 10 і додаємо нове правило для режиму відновлення після відмови:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:28 msgid "The example topology has 2 VyOS routers. One as The WAN Router and on as a Client, to test a single LAN setup" -msgstr "The example topology has 2 VyOS routers. One as The WAN Router and on as a Client, to test a single LAN setup" +msgstr "Приклад топології містить 2 маршрутизатори VyOS. Один як WAN-маршрутизатор і як клієнт, щоб перевірити налаштування однієї локальної мережі" #: ../../configexamples/zone-policy.rst:133 msgid "The first two rules are to deal with the idiosyncrasies of VyOS and iptables." -msgstr "The first two rules are to deal with the idiosyncrasies of VyOS and iptables." +msgstr "Перші два правила стосуються особливостей VyOS та iptables." #: ../../configexamples/zone-policy.rst:182 msgid "The following are the rules that were created for this example (may not be complete), both in IPv4 and IPv6. If there is no IP specified, then the source/destination address is not explicit." -msgstr "The following are the rules that were created for this example (may not be complete), both in IPv4 and IPv6. If there is no IP specified, then the source/destination address is not explicit." +msgstr "Нижче наведено правила, створені для цього прикладу (можуть бути неповними) як для IPv4, так і для IPv6. Якщо IP-адреса не вказана, адреса джерела/одержувача не є явною." #: ../../configexamples/l3vpn-hub-and-spoke.rst:40 msgid "The following software was used in the creation of this document:" -msgstr "The following software was used in the creation of this document:" +msgstr "Для створення цього документа використовувалося наступне програмне забезпечення:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:122 msgid "The following template configuration can be used in each remote router based in our topology." -msgstr "The following template configuration can be used in each remote router based in our topology." +msgstr "Наступну конфігурацію шаблону можна використовувати в кожному віддаленому маршрутизаторі в нашій топології." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:169 msgid "The format of these addresses:" -msgstr "The format of these addresses:" +msgstr "Формат цих адрес:" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:42 msgid "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." -msgstr "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." +msgstr "Лабораторія, яку я створив, використовує VRF (називається **mgmt**) для забезпечення позасмугового доступу SSH до маршрутизаторів PE (Provider Edge)." #: ../../configexamples/site-2-site-cisco.rst:14 msgid "The lab was built using EVE-NG." msgstr "The lab was built using EVE-NG." -#: ../../configexamples/index.rst:32 +#: ../../configexamples/index.rst:33 msgid "The next pages contains automatic full tested configuration examples." -msgstr "The next pages contains automatic full tested configuration examples." +msgstr "Наступні сторінки містять автоматичні повні протестовані приклади конфігурації." #: ../../configexamples/wan-load-balancing.rst:97 msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." -msgstr "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." +msgstr "У попередньому прикладі використано команду відновлення після відмови, щоб відправити трафік через eth1, якщо eth0 не вдається. У цьому прикладі функція відновлення після збоїв надається порядком правил." -#: ../../configexamples/index.rst:40 +#: ../../configexamples/index.rst:41 msgid "The process will do the following steps:" -msgstr "The process will do the following steps:" +msgstr "Процес виконуватиме такі кроки:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:16 msgid "The scope of this document is to cover such cases in a dynamic way without the use of MPLS-LDP." -msgstr "The scope of this document is to cover such cases in a dynamic way without the use of MPLS-LDP." +msgstr "Метою цього документа є охоплення таких випадків динамічним способом без використання MPLS-LDP." #: ../../configexamples/wan-load-balancing.rst:14 msgid "The setup used in this example is shown in the following diagram:" -msgstr "The setup used in this example is shown in the following diagram:" +msgstr "Налаштування, використане в цьому прикладі, показано на наступній діаграмі:" #: ../../configexamples/ansible.rst:161 msgid "The simple way without configuration of the hostname (one task for all routers):" @@ -2072,55 +2164,59 @@ msgstr "The simple way without configuration of the hostname (one task for all r #: ../../configexamples/ha.rst:339 msgid "The simplest way to test is to look at the connection tracking stats on the standby hardware router with the command ``show conntrack-sync statistics``. The numbers should be very close to the numbers on the primary router." -msgstr "The simplest way to test is to look at the connection tracking stats on the standby hardware router with the command ``show conntrack-sync statistics``. The numbers should be very close to the numbers on the primary router." +msgstr "Найпростіший спосіб перевірити — переглянути статистику відстеження з’єднання на резервному апаратному маршрутизаторі за допомогою команди ``show conntrack-sync statistics``. Цифри мають бути дуже близькими до цифр на основному маршрутизаторі." #: ../../configexamples/ha.rst:267 msgid "The sync group is used to replicate connection tracking. It needs to be assigned to a random VRRP group, and we are creating a sync group called ``sync`` using the vrrp group ``int``." -msgstr "The sync group is used to replicate connection tracking. It needs to be assigned to a random VRRP group, and we are creating a sync group called ``sync`` using the vrrp group ``int``." +msgstr "Група синхронізації використовується для реплікації відстеження підключення. Його потрібно призначити випадковій групі VRRP, і ми створюємо групу синхронізації під назвою ``sync`` за допомогою групи vrrp ``int``." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:17 msgid "The topology has 3 VyOS routers and one client. Between the DHCP Server and the DHCP Relay is a GRE tunnel. The `transport` VyOS represent a large Network." -msgstr "The topology has 3 VyOS routers and one client. Between the DHCP Server and the DHCP Relay is a GRE tunnel. The `transport` VyOS represent a large Network." +msgstr "Топологія включає 3 маршрутизатори VyOS і один клієнт. Між сервером DHCP і ретранслятором DHCP є тунель GRE. `Транспорт` VyOS представляє собою велику мережу." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:17 msgid "The topology have a central and a branch VyOS router and one client, to test, in each site." -msgstr "The topology have a central and a branch VyOS router and one client, to test, in each site." +msgstr "Топологія містить центральний маршрутизатор VyOS і маршрутизатор філії та один клієнт для тестування на кожному сайті." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:803 msgid "Then add a route-map and reference to above prefix. Consider that the actions taken inside the prefix will MATCH the routes that will be affected by the actions inside the rules of the route-map." -msgstr "Then add a route-map and reference to above prefix. Consider that the actions taken inside the prefix will MATCH the routes that will be affected by the actions inside the rules of the route-map." +msgstr "Потім додайте карту маршруту та посилання на префікс вище. Вважайте, що дії, виконані всередині префікса, ВІДПОВІДАЮТЬ маршрутам, на які впливатимуть дії всередині правил карти маршруту." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:820 msgid "Then we need to attach the policy to the BGP process. This needs to be under the import statement in the vrf we need to filter." -msgstr "Then we need to attach the policy to the BGP process. This needs to be under the import statement in the vrf we need to filter." +msgstr "Потім нам потрібно приєднати політику до процесу BGP. Це має бути під оператором імпорту у vrf, який нам потрібно відфільтрувати." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:317 msgid "There are some cases where this is not needed -for example, in some DDoS appliance- but most inter-vrf routing designs use the above configurations." -msgstr "There are some cases where this is not needed -for example, in some DDoS appliance- but most inter-vrf routing designs use the above configurations." +msgstr "У деяких випадках це не потрібно, наприклад, у деяких пристроях DDoS, але більшість проектів маршрутизації між vrf використовують наведені вище конфігурації." #: ../../configexamples/ha.rst:360 msgid "There is plenty of instructions and documentation on setting up Wireguard. The only important thing you need to remember is to only use one WireGuard interface per OSPF connection." -msgstr "There is plenty of instructions and documentation on setting up Wireguard. The only important thing you need to remember is to only use one WireGuard interface per OSPF connection." +msgstr "Існує багато інструкцій та документації щодо налаштування Wireguard. Єдина важлива річ, про яку вам потрібно пам’ятати, це використання лише одного інтерфейсу WireGuard для кожного з’єднання OSPF." #: ../../configexamples/ha.rst:67 msgid "These are the vlans we will be using:" -msgstr "These are the vlans we will be using:" +msgstr "Це vlans, які ми будемо використовувати:" #: ../../configexamples/ha.rst:48 msgid "They want us to establish a BGP session to their routers on 192.0.2.11 and 192.0.2.12 from our routers 192.0.2.21 and 192.0.2.22. They are AS 65550 and we are AS 65551." -msgstr "They want us to establish a BGP session to their routers on 192.0.2.11 and 192.0.2.12 from our routers 192.0.2.21 and 192.0.2.22. They are AS 65550 and we are AS 65551." +msgstr "Вони хочуть, щоб ми встановили сеанс BGP до їхніх маршрутизаторів на 192.0.2.11 і 192.0.2.12 з наших маршрутизаторів 192.0.2.21 і 192.0.2.22. Вони AS 65550, а ми AS 65551." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:10 msgid "This LAB show how to uwe OpenVPN with a Active Directory authentication backend." -msgstr "This LAB show how to uwe OpenVPN with a Active Directory authentication backend." +msgstr "Ця ЛАБ показує, як використовувати OpenVPN із серверною частиною автентифікації Active Directory." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:137 msgid "This accomplishes a few things:" -msgstr "This accomplishes a few things:" +msgstr "Це досягає кількох речей:" #: ../../configexamples/index.rst:6 msgid "This chapter contains various configuration examples:" -msgstr "This chapter contains various configuration examples:" +msgstr "Цей розділ містить різні приклади конфігурації:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists of:" +msgstr "This configuration example and the requirments consists of:" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 msgid "This configuration example and the requirments consists on:" @@ -2128,27 +2224,31 @@ msgstr "This configuration example and the requirments consists on:" #: ../../configexamples/ha.rst:13 msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." -msgstr "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." +msgstr "У цьому документі описано, як усе налаштувати, щоб ви могли перезавантажити будь-який комп’ютер і не втратити більше кількох секунд підключення." + +#: ../../configexamples/lac-lns.rst:9 +msgid "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." +msgstr "This document is to describe a basic setup using PPPoE over L2TP. LAC and LNS are components of the broadband topology. LAC - L2TP access concentrator LNS - L2TP Network Server LAC and LNS forms L2TP tunnel. LAC receives packets from PPPoE clients and forward them to LNS. LNS is the termination point that comes from PPP packets from the remote client." #: ../../configexamples/pppoe-ipv6-basic.rst:9 msgid "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." -msgstr "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." +msgstr "У цьому документі описується базове налаштування за допомогою PPPoE з DHCPv6-PD + SLAAC для побудови типової домашньої мережі. Користувач може виконати описані тут кроки, щоб швидко налаштувати робочу мережу та використовувати це як відправну точку для подальшого налаштування або точного налаштування інших параметрів." #: ../../configexamples/ha.rst:9 msgid "This document walks you through a complete HA setup of two VyOS machines. This design is based on a VM as the primary router and a physical machine as a backup, using VRRP, BGP, OSPF, and conntrack sharing." -msgstr "This document walks you through a complete HA setup of two VyOS machines. This design is based on a VM as the primary router and a physical machine as a backup, using VRRP, BGP, OSPF, and conntrack sharing." +msgstr "Цей документ проведе вас через повне налаштування високої доступності двох машин VyOS. Ця конструкція базується на віртуальній машині як основному маршрутизаторі та фізичній машині як резервній, використовуючи VRRP, BGP, OSPF і спільне використання conntrack." #: ../../configexamples/ha.rst:38 msgid "This ensures you don't go too fast or miss a step. However, it will make your life easier to configure the fixed IP address and default route now on the hardware router." -msgstr "This ensures you don't go too fast or miss a step. However, it will make your life easier to configure the fixed IP address and default route now on the hardware router." +msgstr "Це гарантує, що ви не їдете надто швидко або не пропустите крок. Однак це полегшить ваше життя, якщо налаштувати фіксовану IP-адресу та маршрут за замовчуванням зараз на апаратному маршрутизаторі." #: ../../configexamples/wan-load-balancing.rst:70 msgid "This example uses the failover mode." -msgstr "This example uses the failover mode." +msgstr "У цьому прикладі використовується режим відновлення після відмови." #: ../../configexamples/segment-routing-isis.rst:112 msgid "This gives us MPLS segment routing enabled and labels forwarding :" -msgstr "This gives us MPLS segment routing enabled and labels forwarding :" +msgstr "Це дає нам можливість сегментної маршрутизації MPLS і пересилання міток:" #: ../../configexamples/site-2-site-cisco.rst:6 msgid "This guide shows a sample configuration for FlexVPN site-to-site Internet Protocol Security (IPsec)/Generic Routing Encapsulation (GRE) tunnel." @@ -2156,99 +2256,107 @@ msgstr "This guide shows a sample configuration for FlexVPN site-to-site Interne #: ../../configexamples/azure-vpn-dual-bgp.rst:8 msgid "This guide shows an example of a redundant (active-active) route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." -msgstr "This guide shows an example of a redundant (active-active) route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." +msgstr "У цьому посібнику наведено приклад резервної (активний-активний) маршрутної мережі IKEv2 між сайтами VPN до Azure із використанням VTI та BGP для динамічного оновлення маршрутизації." #: ../../configexamples/azure-vpn-bgp.rst:8 msgid "This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." -msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." +msgstr "У цьому посібнику наведено приклад міжсайтової VPN IKEv2 на основі маршруту до Azure з використанням VTI та BGP для динамічного оновлення маршрутизації." #: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." -msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." +msgstr "Цей посібник розповідає про налаштування https://www.tunnelbroker.net/ для тунелю IPv6." #: ../../configexamples/ha.rst:197 msgid "This has a floating IP address of 10.200.201.1/24, using virtual router ID 201. The difference between them is the interface name, hello-source-address, and peer-address." -msgstr "This has a floating IP address of 10.200.201.1/24, using virtual router ID 201. The difference between them is the interface name, hello-source-address, and peer-address." +msgstr "Він має плаваючу IP-адресу 10.200.201.1/24, використовує ідентифікатор віртуального маршрутизатора 201. Різниця між ними полягає в імені інтерфейсу, привітній адресі джерела та одноранговій адресі." #: ../../configexamples/ha.rst:232 msgid "This has a floating IP address of 203.0.113.1/24, using virtual router ID 113. The virtual router ID is just a random number between 1 and 254, and can be set to whatever you want. Best practices suggest you try to keep them unique enterprise-wide." -msgstr "This has a floating IP address of 203.0.113.1/24, using virtual router ID 113. The virtual router ID is just a random number between 1 and 254, and can be set to whatever you want. Best practices suggest you try to keep them unique enterprise-wide." +msgstr "Він має плаваючу IP-адресу 203.0.113.1/24 із використанням ідентифікатора віртуального маршрутизатора 113. Ідентифікатор віртуального маршрутизатора — це лише випадкове число від 1 до 254, яке можна встановити будь-яким. Рекомендації з найкращих практик рекомендують вам намагатися зберегти їх унікальними для всього підприємства." #: ../../configexamples/zone-policy.rst:258 msgid "This is an example of the three base rules." -msgstr "This is an example of the three base rules." +msgstr "Це приклад трьох основних правил." #: ../../configexamples/ha.rst:20 msgid "This is based on a real-life production design. One of the complex issues is ensuring you have redundant data INTO your network. We do this with a pair of Cisco Nexus switches and using Virtual PortChannels that are spanned across them. As a bonus, this also allows for complete switch failure without an outage. How you achieve this yourself is left as an exercise to the reader. But our setup is documented here." -msgstr "This is based on a real-life production design. One of the complex issues is ensuring you have redundant data INTO your network. We do this with a pair of Cisco Nexus switches and using Virtual PortChannels that are spanned across them. As a bonus, this also allows for complete switch failure without an outage. How you achieve this yourself is left as an exercise to the reader. But our setup is documented here." +msgstr "Це засновано на реальному виробничому проекті. Однією зі складних проблем є забезпечення надлишкових даних у вашій мережі. Ми робимо це за допомогою пари комутаторів Cisco Nexus і віртуальних каналів портів, які охоплюють їх. Як бонус, це також дозволяє повністю відмовити комутатор без відключення. Читачеві залишиться для вправи, як ви досягнете цього самостійно. Але наше налаштування задокументовано тут." #: ../../configexamples/ha.rst:391 msgid "This is connecting back to the STATIC IP of router1, not the floating." -msgstr "This is connecting back to the STATIC IP of router1, not the floating." +msgstr "Це зворотне підключення до СТАТИЧНОЇ IP-адреси router1, а не до плаваючої." #: ../../configexamples/ha.rst:583 msgid "This is identical, but you use the BGPPREPENDOUT route-map to advertise the route with a longer path." -msgstr "This is identical, but you use the BGPPREPENDOUT route-map to advertise the route with a longer path." +msgstr "Це ідентично, але ви використовуєте карту маршруту BGPPREPENDOUT для оголошення маршруту з довшим шляхом." #: ../../configexamples/ha.rst:96 msgid "This is ignoring the extra Out-of-band management networking, which should be on totally different switches, and a different feed into the rack, and is out of scope of this." -msgstr "This is ignoring the extra Out-of-band management networking, which should be on totally different switches, and a different feed into the rack, and is out of scope of this." +msgstr "Це ігнорує додаткову мережу позасмугового керування, яка має бути на зовсім інших комутаторах, і іншу подачу в стійку, і це виходить за рамки цього." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:38 msgid "This scenario could be a nightmare applying regular routing and might need filtering in multiple interfaces." -msgstr "This scenario could be a nightmare applying regular routing and might need filtering in multiple interfaces." +msgstr "Цей сценарій може стати кошмаром із застосуванням звичайної маршрутизації та потребує фільтрації в кількох інтерфейсах." #: ../../configexamples/l3vpn-hub-and-spoke.rst:547 msgid "This section describes verification commands for MPLS/BGP/LDP protocols and L3VPN related routes as well as diagnosis and reachability checks between CE nodes." -msgstr "This section describes verification commands for MPLS/BGP/LDP protocols and L3VPN related routes as well as diagnosis and reachability checks between CE nodes." +msgstr "У цьому розділі описано команди перевірки для протоколів MPLS/BGP/LDP і пов’язаних з L3VPN маршрутів, а також перевірки діагностики та доступності між вузлами CE." #: ../../configexamples/l3vpn-hub-and-spoke.rst:409 msgid "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." -msgstr "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." +msgstr "У цьому розділі наведено кроки конфігурації для налаштування VRF на наших вузлах PE, включаючи інтерфейси, спрямовані на CE, BGP, rd та імпорт/експорт цільового маршруту на основі попередньо визначених параметрів." + +#: ../../configexamples/lac-lns.rst:91 +msgid "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." +msgstr "This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ppp-options disable-ccp`` accomplishes that." #: ../../configexamples/autotest/Wireguard/Wireguard.rst:10 msgid "This simple structure show how to connect two offices. One remote branch and the central office." -msgstr "This simple structure show how to connect two offices. One remote branch and the central office." +msgstr "Ця проста структура показує, як з'єднати два офіси. Одне віддалене відділення та центральний офіс." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:10 msgid "This simple structure shows how to configure a DHCP Relay over a GRE Bridge interface." -msgstr "This simple structure shows how to configure a DHCP Relay over a GRE Bridge interface." +msgstr "Ця проста структура показує, як налаштувати DHCP Relay через інтерфейс GRE Bridge." #: ../../configexamples/ha.rst:531 msgid "This will be visible in 'show ip route'." -msgstr "This will be visible in 'show ip route'." +msgstr "Це буде видно в «show ip route»." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:112 msgid "Thus you can easily match it to one of the devices/networks below." -msgstr "Thus you can easily match it to one of the devices/networks below." +msgstr "Таким чином, ви можете легко підключити його до одного з пристроїв/мереж нижче." #: ../../configexamples/pppoe-ipv6-basic.rst:14 msgid "To achieve this, your ISP is required to support DHCPv6-PD. If you're not sure, please contact your ISP for more information." -msgstr "To achieve this, your ISP is required to support DHCPv6-PD. If you're not sure, please contact your ISP for more information." +msgstr "Для цього ваш провайдер повинен підтримувати DHCPv6-PD. Якщо ви не впевнені, будь ласка, зверніться до свого провайдера для отримання додаткової інформації." #: ../../configexamples/zone-policy.rst:144 msgid "To add logging to the default rule, do:" -msgstr "To add logging to the default rule, do:" +msgstr "Щоб додати журналювання до правила за замовчуванням, виконайте:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:54 msgid "To address this scenario we will use to our advantage an extension of the BGP routing protocol that will help us in the “Export” between VRFs without the need for MPLS." -msgstr "To address this scenario we will use to our advantage an extension of the BGP routing protocol that will help us in the “Export” between VRFs without the need for MPLS." +msgstr "Для вирішення цього сценарію ми використаємо розширення протоколу маршрутизації BGP, яке допоможе нам здійснювати «Експорт» між VRF без потреби в MPLS." #: ../../configexamples/l3vpn-hub-and-spoke.rst:31 msgid "To deploy a Layer3 VPN with MPLS on VyOS, we should meet a couple requirements in order to properly implement the solution. We'll use the following nodes in our LAB environment:" -msgstr "To deploy a Layer3 VPN with MPLS on VyOS, we should meet a couple requirements in order to properly implement the solution. We'll use the following nodes in our LAB environment:" +msgstr "Щоб розгорнути Layer3 VPN з MPLS на VyOS, ми повинні відповідати кільком вимогам, щоб правильно реалізувати рішення. Ми будемо використовувати наступні вузли в нашому середовищі LAB:" #: ../../configexamples/pppoe-ipv6-basic.rst:84 msgid "To have basic protection while keeping IPv6 network functional, we need to:" -msgstr "To have basic protection while keeping IPv6 network functional, we need to:" +msgstr "Щоб мати базовий захист і підтримувати роботу мережі IPv6, нам потрібно:" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:68 msgid "To reach the network, a route must be set on each VyOS host. In this structure, a static interface route will fit the requirements." -msgstr "To reach the network, a route must be set on each VyOS host. In this structure, a static interface route will fit the requirements." +msgstr "Щоб отримати доступ до мережі, на кожному хості VyOS потрібно встановити маршрут. У цій структурі вимогам відповідатиме статичний маршрут інтерфейсу." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:15 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:52 @@ -2257,15 +2365,15 @@ msgstr "To reach the network, a route must be set on each VyOS host. In this str #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:72 #: ../../configexamples/l3vpn-hub-and-spoke.rst:55 msgid "Topology" -msgstr "Topology" +msgstr "Топологія" #: ../../configexamples/zone-policy.rst:95 msgid "Traffic flows from zone A to zone B. That flow is what I refer to as a zone-pair-direction. eg. A->B and B->A are two zone-pair-destinations." -msgstr "Traffic flows from zone A to zone B. That flow is what I refer to as a zone-pair-direction. eg. A->B and B->A are two zone-pair-destinations." +msgstr "Трафік рухається із зони A в зону B. Цей потік я називаю напрямком пари зон. напр. A->B і B->A є двома зонами призначення." #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:31 msgid "Transport:" -msgstr "Transport:" +msgstr "Транспорт:" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:5 msgid "Tunnelbroker.net (IPv6)" @@ -2273,7 +2381,7 @@ msgstr "Tunnelbroker.net (IPv6)" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:-1 msgid "Tunnelbroker topology image" -msgstr "Tunnelbroker topology image" +msgstr "Зображення топології Tunnelbroker" #: ../../configexamples/policy-based-ipsec-and-firewall.rst:18 msgid "Two VyOS routers with public IP address." @@ -2281,32 +2389,32 @@ msgstr "Two VyOS routers with public IP address." #: ../../configexamples/wan-load-balancing.rst:105 msgid "Two rules will be created, the first rule directs traffic coming in from eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails the first rule is bypassed and the second rule matches, directing traffic to eth1." -msgstr "Two rules will be created, the first rule directs traffic coming in from eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails the first rule is bypassed and the second rule matches, directing traffic to eth1." +msgstr "Буде створено два правила: перше правило спрямовує трафік, що надходить від eth2 до eth0, а друге правило спрямовує трафік до eth1. Якщо eth0 виходить з ладу, перше правило обходиться, а друге правило збігається, спрямовуючи трафік на eth1." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:113 msgid "Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to ignore the assigned /64, and request the /48 and use that." -msgstr "Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to ignore the assigned /64, and request the /48 and use that." +msgstr "На відміну від IPv4, IPv6 справді не призначений для розбивання меншого ніж /64. Отже, якщо ви коли-небудь захочете мати кілька локальних мереж, VLAN, DMZ тощо, ви захочете проігнорувати призначений /64 і запросити /48 і використовувати його." #: ../../configexamples/ansible.rst:15 #: ../../configexamples/qos.rst:16 msgid "Using the general schema for example:" -msgstr "Using the general schema for example:" +msgstr "Використовуючи загальну схему, наприклад:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:783 msgid "Using this command we are also able to check the transport and customer label (inner/outer) for Hub network prefix (10.0.0.100/32):" -msgstr "Using this command we are also able to check the transport and customer label (inner/outer) for Hub network prefix (10.0.0.100/32):" +msgstr "За допомогою цієї команди ми також можемо перевірити транспортну та клієнтську мітку (внутрішню/зовнішню) для префікса мережі Hub (10.0.0.100/32):" #: ../../configexamples/ha.rst:143 msgid "VLAN 100 and 201 will have floating IP addresses, but VLAN50 does not, as this is talking directly to upstream. Create our IP address on vlan50." -msgstr "VLAN 100 and 201 will have floating IP addresses, but VLAN50 does not, as this is talking directly to upstream. Create our IP address on vlan50." +msgstr "VLAN 100 і 201 матимуть плаваючі IP-адреси, а VLAN50 – ні, оскільки це напряму спілкується з висхідним. Створіть нашу IP-адресу на vlan50." #: ../../configexamples/ha.rst:65 msgid "VLANs" -msgstr "VLANs" +msgstr "VLAN" #: ../../configexamples/ha.rst:120 msgid "VMware: You must DISABLE SECURITY on this Port group. Make sure that ``Promiscuous Mode``\\ , ``MAC address changes`` and ``Forged transmits`` are enabled. All of these will be done as part of failover." -msgstr "VMware: You must DISABLE SECURITY on this Port group. Make sure that ``Promiscuous Mode``\\ , ``MAC address changes`` and ``Forged transmits`` are enabled. All of these will be done as part of failover." +msgstr "VMware: ви повинні ВИМКНУТИ БЕЗПЕКУ для цієї групи портів. Переконайтеся, що ``Promiscuous Mode``\\ , ``MAC address changes`` і ``Forged transmits`` увімкнено. Усе це буде зроблено в рамках відновлення після відмови." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 #: ../../configexamples/l3vpn-hub-and-spoke.rst:86 @@ -2315,7 +2423,7 @@ msgstr "VRF" #: ../../configexamples/ha.rst:189 msgid "VRRP Configuration" -msgstr "VRRP Configuration" +msgstr "Конфігурація VRRP" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:160 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:248 @@ -2323,17 +2431,17 @@ msgstr "VRRP Configuration" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:829 #: ../../configexamples/site-2-site-cisco.rst:134 msgid "Verification" -msgstr "Verification" +msgstr "Перевірка" #: ../../configexamples/l3vpn-hub-and-spoke.rst:43 msgid "Version: 1.4-rolling-202110310317" -msgstr "Version: 1.4-rolling-202110310317" +msgstr "Версія: 1.4-rolling-202110310317" #: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:7 #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:7 #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:8 msgid "Version: 1.4-rolling-202305100734" -msgstr "Version: 1.4-rolling-202305100734" +msgstr "Версія: 1.4-rolling-202305100734" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:8 @@ -2347,7 +2455,7 @@ msgstr "Version: 1.5-rolling-202401121239" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 msgid "Version: vyos-1.4-rolling-202302150317" -msgstr "Version: vyos-1.4-rolling-202302150317" +msgstr "Версія: vyos-1.4-rolling-202302150317" #: ../../configexamples/site-2-site-cisco.rst:21 msgid "VyOS" @@ -2355,11 +2463,11 @@ msgstr "VyOS" #: ../../configexamples/l3vpn-hub-and-spoke.rst:1025 msgid "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" -msgstr "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" +msgstr "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:1026 msgid "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" -msgstr "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" +msgstr "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" #: ../../configexamples/l3vpn-hub-and-spoke.rst:507 msgid "VyOS-CE1-HUB:" @@ -2371,7 +2479,7 @@ msgstr "VyOS-CE1-SPOKE:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:987 msgid "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" -msgstr "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" +msgstr "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" #: ../../configexamples/l3vpn-hub-and-spoke.rst:525 msgid "VyOS-CE2-SPOKE:" @@ -2379,7 +2487,7 @@ msgstr "VyOS-CE2-SPOKE:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:1085 msgid "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" -msgstr "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" +msgstr "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" #: ../../configexamples/l3vpn-hub-and-spoke.rst:112 #: ../../configexamples/segment-routing-isis.rst:26 @@ -2445,80 +2553,80 @@ msgstr "VyOS-RR2:" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:38 msgid "VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing) and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, IS-IS, and BGP for individual VRFs." -msgstr "VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing) and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, IS-IS, and BGP for individual VRFs." +msgstr "У VyOS 1.3 додано початкову підтримку для VRF (включаючи статичну маршрутизацію IPv4/IPv6), а VyOS 1.4 тепер забезпечує повну підтримку протоколу динамічної маршрутизації для OSPF, IS-IS і BGP для окремих VRF." #: ../../configexamples/zone-policy.rst:42 msgid "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall." -msgstr "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall." +msgstr "VyOS діє як DHCP, DNS-переадресатор, NAT, маршрутизатор і брандмауер." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:15 msgid "VyOS as Client" -msgstr "VyOS as Client" +msgstr "VyOS як клієнт" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:14 msgid "VyOS as a OpenVPN Server" -msgstr "VyOS as a OpenVPN Server" +msgstr "VyOS як сервер OpenVPN" #: ../../configexamples/segment-routing-isis.rst:148 msgid "VyOS is able to check MSD per devices:" -msgstr "VyOS is able to check MSD per devices:" +msgstr "VyOS може перевіряти MSD на пристрої:" #: ../../configexamples/azure-vpn-bgp.rst:50 #: ../../configexamples/azure-vpn-dual-bgp.rst:49 msgid "Vyos ASN" -msgstr "Vyos ASN" +msgstr "Виос АСН" #: ../../configexamples/azure-vpn-bgp.rst:56 #: ../../configexamples/azure-vpn-dual-bgp.rst:55 msgid "Vyos configuration" -msgstr "Vyos configuration" +msgstr "Ваша конфігурація" #: ../../configexamples/azure-vpn-bgp.rst:42 #: ../../configexamples/azure-vpn-dual-bgp.rst:39 msgid "Vyos private IP" -msgstr "Vyos private IP" +msgstr "Виос приватний IP" #: ../../configexamples/azure-vpn-bgp.rst:40 #: ../../configexamples/azure-vpn-dual-bgp.rst:37 msgid "Vyos public IP" -msgstr "Vyos public IP" +msgstr "Ваш публічний IP" #: ../../configexamples/azure-vpn-bgp.rst:34 #: ../../configexamples/azure-vpn-dual-bgp.rst:31 msgid "WAN Interface" -msgstr "WAN Interface" +msgstr "Інтерфейс WAN" #: ../../configexamples/wan-load-balancing.rst:8 msgid "WAN Load Balancer examples" -msgstr "WAN Load Balancer examples" +msgstr "Приклади балансування навантаження WAN" #: ../../configexamples/ha.rst:28 msgid "Walkthrough suggestion" -msgstr "Walkthrough suggestion" +msgstr "Пропозиція покрокового керівництва" #: ../../configexamples/ha.rst:55 msgid "We are going to use 10.200.201.0/24 for an 'internal' network on VLAN201." -msgstr "We are going to use 10.200.201.0/24 for an 'internal' network on VLAN201." +msgstr "Ми збираємося використовувати 10.200.201.0/24 для «внутрішньої» мережі на VLAN201." #: ../../configexamples/ha.rst:191 msgid "We are setting up VRRP so that it does NOT fail back when a machine returns into service, and it prioritizes router1 over router2." -msgstr "We are setting up VRRP so that it does NOT fail back when a machine returns into service, and it prioritizes router1 over router2." +msgstr "Ми налаштовуємо VRRP так, щоб він НЕ виходив з ладу, коли машина повертається в експлуатацію, і він надавав пріоритет маршрутизатору1 над маршрутизатором2." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:815 msgid "We are using a \"white list\" approach by allowing only what is necessary. In case that need to implement a \"black list\" approach then you will need to change the action in the route-map for a deny BUT you need to add a rule that permits the rest due to the implicit deny in the route-map." -msgstr "We are using a \"white list\" approach by allowing only what is necessary. In case that need to implement a \"black list\" approach then you will need to change the action in the route-map for a deny BUT you need to add a rule that permits the rest due to the implicit deny in the route-map." +msgstr "Ми використовуємо підхід «білого списку», дозволяючи лише те, що є необхідним. У випадку, якщо потрібно застосувати підхід із «чорним списком», вам потрібно буде змінити дію в карті маршруту для заборони, АЛЕ вам потрібно додати правило, яке дозволяє решту через неявну заборону в карті маршруту." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:778 msgid "We create a prefix-list first and add all the routes we need to." -msgstr "We create a prefix-list first and add all the routes we need to." +msgstr "Спочатку ми створюємо список префіксів і додаємо всі маршрути, які нам потрібні." #: ../../configexamples/ha.rst:300 msgid "We explicitly exclude the primary upstream network so that BGP or OSPF traffic doesn't accidentally get NAT'ed." -msgstr "We explicitly exclude the primary upstream network so that BGP or OSPF traffic doesn't accidentally get NAT'ed." +msgstr "Ми явно виключаємо основну вихідну мережу, щоб трафік BGP або OSPF випадково не отримав NAT." #: ../../configexamples/qos.rst:23 msgid "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." -msgstr "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." +msgstr "У нас є чотири хости в локальній мережі 172.17.1.0/24. Усі хости за замовчуванням позначені CS0. Нам потрібно замінити мітки на всіх хостах, крім vpc8. Замінимо мітки на найближчому роутері «VyOS3» на IP-адреси джерел." #: ../../configexamples/ansible.rst:22 msgid "We have four pre-configured routers with this configuration:" @@ -2526,83 +2634,87 @@ msgstr "We have four pre-configured routers with this configuration:" #: ../../configexamples/zone-policy.rst:25 msgid "We have three networks." -msgstr "We have three networks." +msgstr "У нас три мережі." #: ../../configexamples/wan-load-balancing.rst:112 msgid "We keep the configuration from the previous example, delete rule 10 and create the two new rules as described:" -msgstr "We keep the configuration from the previous example, delete rule 10 and create the two new rules as described:" +msgstr "Ми зберігаємо конфігурацію з попереднього прикладу, видаляємо правило 10 і створюємо два нових правила, як описано:" #: ../../configexamples/wan-load-balancing.rst:143 msgid "We keep the configuration from the previous example, delete rule 20 and create a new rule as described:" -msgstr "We keep the configuration from the previous example, delete rule 20 and create a new rule as described:" +msgstr "Ми зберігаємо конфігурацію з попереднього прикладу, видаляємо правило 20 і створюємо нове правило, як описано:" #: ../../configexamples/pppoe-ipv6-basic.rst:63 msgid "We need to enable router advertisement for LAN network so that PC can receive the prefix and use SLAAC to configure the address automatically." -msgstr "We need to enable router advertisement for LAN network so that PC can receive the prefix and use SLAAC to configure the address automatically." +msgstr "Нам потрібно ввімкнути оголошення маршрутизатора для мережі LAN, щоб ПК міг отримати префікс і використовувати SLAAC для автоматичного налаштування адреси." #: ../../configexamples/ha.rst:419 msgid "We only want to export the networks we know. Always do a whitelist on your route filters, both importing and exporting. A good rule of thumb is **'If you are not the default router for a network, don't advertise it'**. This means we explicitly do not want to advertise the 192.0.2.0/24 network (but do want to advertise 10.200.201.0 and 203.0.113.0, which we ARE the default route for). This filter is applied to ``redistribute connected``. If we WERE to advertise it, the remote machines would see 192.0.2.21 available via their default route, establish the connection, and then OSPF would say '192.0.2.0/24 is available via this tunnel', at which point the tunnel would break, OSPF would drop the routes, and then 192.0.2.0/24 would be reachable via default again. This is called 'flapping'." -msgstr "We only want to export the networks we know. Always do a whitelist on your route filters, both importing and exporting. A good rule of thumb is **'If you are not the default router for a network, don't advertise it'**. This means we explicitly do not want to advertise the 192.0.2.0/24 network (but do want to advertise 10.200.201.0 and 203.0.113.0, which we ARE the default route for). This filter is applied to ``redistribute connected``. If we WERE to advertise it, the remote machines would see 192.0.2.21 available via their default route, establish the connection, and then OSPF would say '192.0.2.0/24 is available via this tunnel', at which point the tunnel would break, OSPF would drop the routes, and then 192.0.2.0/24 would be reachable via default again. This is called 'flapping'." +msgstr "Ми хочемо експортувати лише ті мережі, які знаємо. Завжди створюйте білий список для фільтрів маршрутів, як імпорту, так і експорту. Хорошим емпіричним правилом є **"Якщо ви не є маршрутизатором за умовчанням для мережі, не рекламуйте це"**. Це означає, що ми явно не хочемо рекламувати мережу 192.0.2.0/24 (але хочемо рекламувати 10.200.201.0 і 203.0.113.0, для яких ми Є маршрутом за замовчуванням). Цей фільтр застосовується до ``перерозподілу підключених``. Якби ми МАЛИ це рекламувати, віддалені машини бачили б 192.0.2.21 доступним через їхній маршрут за замовчуванням, встановлювали б з’єднання, а потім OSPF скаже, що «192.0.2.0/24 доступний через цей тунель», після чого тунель перерветься. , OSPF видалить маршрути, а потім 192.0.2.0/24 знову стане доступним за умовчанням. Це називається «махання»." #: ../../configexamples/ha.rst:450 msgid "We only want to import networks we know. Our OSPF peer should only be advertising networks in the 10.201.0.0/16 range. Note that this is an INVERSE MATCH. You deny in access-list 100 to accept the route." -msgstr "We only want to import networks we know. Our OSPF peer should only be advertising networks in the 10.201.0.0/16 range. Note that this is an INVERSE MATCH. You deny in access-list 100 to accept the route." +msgstr "Ми хочемо імпортувати лише знайомі нам мережі. Наш партнер OSPF має бути лише рекламними мережами в діапазоні 10.201.0.0/16. Зверніть увагу, що це ЗВЕРНЕНА ВІДПОВІДНІСТЬ. Ви забороняєте в списку доступу 100 приймати маршрут." #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:115 msgid "We use a static route configuration in between the Core and each LAN and Management router, and BGP between the Core router and the ISP router but any dynamic routing protocol can be used." -msgstr "We use a static route configuration in between the Core and each LAN and Management router, and BGP between the Core router and the ISP router but any dynamic routing protocol can be used." +msgstr "Ми використовуємо статичну конфігурацію маршруту між ядром і кожним маршрутизатором локальної мережі та керування, а також BGP між маршрутизатором ядра та маршрутизатором ISP, але можна використовувати будь-який протокол динамічної маршрутизації." #: ../../configexamples/ha.rst:364 msgid "We use small /30's from 10.254.60/24 for the point-to-point links." -msgstr "We use small /30's from 10.254.60/24 for the point-to-point links." +msgstr "Ми використовуємо маленькі /30 з 10.254.60/24 для зв’язків «точка-точка»." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:54 msgid "We use the following network topology in this example:" -msgstr "We use the following network topology in this example:" +msgstr "У цьому прикладі ми використовуємо наступну топологію мережі:" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:770 msgid "When importing routes using MP-BGP it is possible to filter a subset of them before are injected in the BGP table. One of the most common case is to use a route-map with an prefix-list." -msgstr "When importing routes using MP-BGP it is possible to filter a subset of them before are injected in the BGP table. One of the most common case is to use a route-map with an prefix-list." +msgstr "Під час імпорту маршрутів за допомогою MP-BGP можна відфільтрувати їх підмножину перед тим, як їх додати до таблиці BGP. Одним із найпоширеніших випадків є використання маршрутної карти зі списком префіксів." #: ../../configexamples/ha.rst:57 msgid "When traffic is originated from the 10.200.201.0/24 network, it will be masqueraded to 203.0.113.1" -msgstr "When traffic is originated from the 10.200.201.0/24 network, it will be masqueraded to 203.0.113.1" +msgstr "Коли трафік надходить із мережі 10.200.201.0/24, він маскується під 203.0.113.1" #: ../../configexamples/segment-routing-isis.rst:9 msgid "When utilizing VyOS in an environment with Cisco IOS-XR gear you can use this blue print as an initial setup to get MPLS ISIS-SR working between those two devices.The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`." -msgstr "When utilizing VyOS in an environment with Cisco IOS-XR gear you can use this blue print as an initial setup to get MPLS ISIS-SR working between those two devices.The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`." +msgstr "Використовуючи VyOS у середовищі з обладнанням Cisco IOS-XR, ви можете використати цей план як початкове налаштування, щоб MPLS ISIS-SR працював між цими двома пристроями. Лабораторію було створено за допомогою :abbr:`EVE-NG (емульоване віртуальне середовище). НГ)`." #: ../../configexamples/ha.rst:343 msgid "When you have both routers up, you should be able to establish a connection from a NAT'ed machine out to the internet, reboot the active machine, and that connection should be preserved, and will not drop out." -msgstr "When you have both routers up, you should be able to establish a connection from a NAT'ed machine out to the internet, reboot the active machine, and that connection should be preserved, and will not drop out." +msgstr "Коли у вас підключено обидва маршрутизатори, ви зможете встановити з’єднання від машини з NAT до Інтернету, перезавантажте активну машину, і це з’єднання має бути збережено та не розривається." #: ../../configexamples/ha.rst:491 msgid "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" -msgstr "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" +msgstr "Коли ви ввімкнули OSPF на обох маршрутизаторах, ви зможете бачити один одного за допомогою команди ``show ip ospf neighbour``. Стан має бути «Повний» або «2-сторонній». Якщо це не так, між хостами виникла проблема мережевого з’єднання. Це часто спричинено проблемами NAT або MTU. Ви не повинні побачити жодних нових маршрутів (якщо це не другий прохід) у виводі ``show ip route``" + +#: ../../configexamples/lac-lns.rst:-1 +msgid "Window PPPoE Client Configuration" +msgstr "Window PPPoE Client Configuration" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:13 msgid "Windows Server 2019 with a running Active Directory" -msgstr "Windows Server 2019 with a running Active Directory" +msgstr "Windows Server 2019 із запущеною Active Directory" #: ../../configexamples/autotest/Wireguard/Wireguard.rst:3 msgid "Wireguard" -msgstr "Wireguard" +msgstr "WireGuard" #: ../../configexamples/ha.rst:350 msgid "Wireguard doesn't have the concept of an up or down link, due to its design. This complicates AND simplifies using it for network transport, as for reliable state detection you need to use SOMETHING to detect when the link is down." -msgstr "Wireguard doesn't have the concept of an up or down link, due to its design. This complicates AND simplifies using it for network transport, as for reliable state detection you need to use SOMETHING to detect when the link is down." +msgstr "Wireguard не має концепції висхідного або низхідного зв’язку через свою конструкцію. Це ускладнює ТА спрощує його використання для мережевого транспорту, оскільки для надійного виявлення стану потрібно використовувати ЩОСЬ, щоб виявити, коли з’єднання не працює." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:105 msgid "With Tunnelbroker.net, you have two options:" -msgstr "With Tunnelbroker.net, you have two options:" +msgstr "З Tunnelbroker.net у вас є два варіанти:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:907 msgid "With this command we are able to check the transport and customer label (inner/outer) for network spokes prefixes 10.0.0.80/32 - 10.0.0.90/32" -msgstr "With this command we are able to check the transport and customer label (inner/outer) for network spokes prefixes 10.0.0.80/32 - 10.0.0.90/32" +msgstr "За допомогою цієї команди ми можемо перевірити транспортну та клієнтську мітку (внутрішню/зовнішню) для префіксів спілок мережі 10.0.0.80/32 - 10.0.0.90/32" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:293 msgid "Within the VRF we set the Route-Distinguisher (RD) and Route-Targets (RT), then we enable the export/import VPN." -msgstr "Within the VRF we set the Route-Distinguisher (RD) and Route-Targets (RT), then we enable the export/import VPN." +msgstr "У VRF ми встановлюємо Route-Distinguisher (RD) і Route-Targets (RT), а потім вмикаємо експорт/імпорт VPN." #: ../../configexamples/segment-routing-isis.rst:48 msgid "XRv-P3:" @@ -2610,79 +2722,79 @@ msgstr "XRv-P3:" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:145 msgid "You managed to come this far, now we want to see the network and routing tables in action." -msgstr "You managed to come this far, now we want to see the network and routing tables in action." +msgstr "Вам вдалося зайти так далеко, тепер ми хочемо побачити мережу та таблиці маршрутизації в дії." #: ../../configexamples/ha.rst:292 msgid "You should be able to ping to and from all the IPs you have allocated." -msgstr "You should be able to ping to and from all the IPs you have allocated." +msgstr "Ви повинні мати можливість перевіряти зв’язок із усіма IP-адресами, які ви виділили." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:81 msgid "You should now be able to ping something by IPv6 DNS name:" -msgstr "You should now be able to ping something by IPv6 DNS name:" +msgstr "Тепер ви повинні мати можливість запитувати щось за DNS-іменем IPv6:" #: ../../configexamples/ha.rst:511 msgid "You should now be able to see the advertised network on the other host." -msgstr "You should now be able to see the advertised network on the other host." +msgstr "Тепер ви зможете побачити рекламовану мережу на іншому хості." #: ../../configexamples/zone-policy.rst:388 msgid "You would have 5 zones instead of just 4 and you would configure your v6 ruleset between your tunnel interface and your LAN/DMZ zones instead of to the WAN." -msgstr "You would have 5 zones instead of just 4 and you would configure your v6 ruleset between your tunnel interface and your LAN/DMZ zones instead of to the WAN." +msgstr "У вас буде 5 зон замість 4, і ви налаштуєте свій набір правил v6 між інтерфейсом тунелю та зонами LAN/DMZ замість WAN." #: ../../configexamples/zone-policy.rst:413 msgid "You would have to add a couple of rules on your wan-local ruleset to allow protocol 41 in." -msgstr "You would have to add a couple of rules on your wan-local ruleset to allow protocol 41 in." +msgstr "Вам потрібно буде додати пару правил у свій набір правил wan-local, щоб дозволити протокол 41 in." #: ../../configexamples/zone-policy.rst:6 msgid "Zone-Policy example" -msgstr "Zone-Policy example" +msgstr "Приклад Zone-Policy" #: ../../configexamples/zone-policy.rst:89 msgid "Zones Basics" -msgstr "Zones Basics" +msgstr "Основи зон" #: ../../configexamples/zone-policy.rst:136 msgid "Zones and Rulesets both have a default action statement. When using Zone-Policies, the default action is set by the zone-policy statement and is represented by rule 10000." -msgstr "Zones and Rulesets both have a default action statement. When using Zone-Policies, the default action is set by the zone-policy statement and is represented by rule 10000." +msgstr "І зони, і набори правил мають оператор дії за замовчуванням. Під час використання Zone-Policies дія за умовчанням встановлюється оператором zone-policy і представлена правилом 10000." #: ../../configexamples/zone-policy.rst:175 msgid "Zones do not allow for a default action of accept; either drop or reject. It is important to remember this because if you apply an interface to a zone and commit, any active connections will be dropped. Specifically, if you are SSH’d into VyOS and add local or the interface you are connecting through to a zone and do not have rulesets in place to allow SSH and established sessions, you will not be able to connect." -msgstr "Zones do not allow for a default action of accept; either drop or reject. It is important to remember this because if you apply an interface to a zone and commit, any active connections will be dropped. Specifically, if you are SSH’d into VyOS and add local or the interface you are connecting through to a zone and do not have rulesets in place to allow SSH and established sessions, you will not be able to connect." +msgstr "Зони не дозволяють дії за замовчуванням прийняти; або відкинути, або відхилити. Важливо пам’ятати про це, оскільки якщо ви застосуєте інтерфейс до зони та зафіксуєте, будь-які активні з’єднання будуть розірвані. Зокрема, якщо ви використовуєте SSH у VyOS і додаєте локальний або інтерфейс, через який ви підключаєтеся, до зони та не маєте наборів правил, які дозволяють SSH і встановлені сеанси, ви не зможете підключитися." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:172 msgid "`2001:470:xxxx:1::/64`: A subnet suitable for a LAN" -msgstr "`2001:470:xxxx:1::/64`: A subnet suitable for a LAN" +msgstr "`2001:470:xxxx:1::/64`: підмережа, придатна для локальної мережі" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:173 msgid "`2001:470:xxxx:2::/64`: Another subnet" -msgstr "`2001:470:xxxx:2::/64`: Another subnet" +msgstr "`2001:470:xxxx:2::/64`: інша підмережа" #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:171 msgid "`2001:470:xxxx::/48`: The whole subnet. xxxx should come from Tunnelbroker." -msgstr "`2001:470:xxxx::/48`: The whole subnet. xxxx should come from Tunnelbroker." +msgstr "`2001:470:xxxx::/48`: уся підмережа. xxxx має надходити від Tunnelbroker." #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:174 msgid "`2001:470:xxxx:ffff:/64`: The last usable /64 subnet." -msgstr "`2001:470:xxxx:ffff:/64`: The last usable /64 subnet." +msgstr "`2001:470:xxxx:ffff:/64`: остання доступна підмережа /64." #: ../../configexamples/pppoe-ipv6-basic.rst:39 msgid "``service-name`` can be an arbitrary string." -msgstr "``service-name`` can be an arbitrary string." +msgstr "``service-name`` може бути довільним рядком." #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:75 msgid "after all these steps the config look like this:" -msgstr "after all these steps the config look like this:" +msgstr "після всіх цих кроків конфігурація виглядає так:" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:62 msgid "after this create a signed server and a client certificate" -msgstr "after this create a signed server and a client certificate" +msgstr "після цього створіть підписаний сервер і сертифікат клієнта" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:69 msgid "and last the DH Key" -msgstr "and last the DH Key" +msgstr "і останній ключ DH" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:119 msgid "blue uses local routing table id and VNI 2000" -msgstr "blue uses local routing table id and VNI 2000" +msgstr "синій використовує ідентифікатор локальної таблиці маршрутизації та VNI 2000" #: ../../configexamples/azure-vpn-bgp.rst:48 #: ../../configexamples/azure-vpn-dual-bgp.rst:47 @@ -2691,7 +2803,7 @@ msgstr "ch00s3-4-s3cur3-psk" #: ../../configexamples/ha.rst:92 msgid "compute1 - Port 9 of each switch" -msgstr "compute1 - Port 9 of each switch" +msgstr "compute1 – порт 9 кожного комутатора" #: ../../configexamples/ha.rst:78 msgid "compute1 (VMware ESXi 6.5)" @@ -2699,7 +2811,7 @@ msgstr "compute1 (VMware ESXi 6.5)" #: ../../configexamples/ha.rst:93 msgid "compute2 - Port 10 of each switch" -msgstr "compute2 - Port 10 of each switch" +msgstr "compute2 – порт 10 кожного комутатора" #: ../../configexamples/ha.rst:79 msgid "compute2 (VMware ESXi 6.5)" @@ -2707,23 +2819,23 @@ msgstr "compute2 (VMware ESXi 6.5)" #: ../../configexamples/ha.rst:94 msgid "compute3 - Port 11 of each switch" -msgstr "compute3 - Port 11 of each switch" +msgstr "compute3 – порт 11 кожного комутатора" #: ../../configexamples/ha.rst:80 msgid "compute3 (VMware ESXi 6.5)" msgstr "compute3 (VMware ESXi 6.5)" -#: ../../configexamples/index.rst:43 +#: ../../configexamples/index.rst:44 msgid "configure each host in the lab" -msgstr "configure each host in the lab" +msgstr "налаштувати кожен хост у лабораторії" -#: ../../configexamples/index.rst:42 +#: ../../configexamples/index.rst:43 msgid "create the lab on a eve-ng server" -msgstr "create the lab on a eve-ng server" +msgstr "створити лабораторію на сервері eve-ng" -#: ../../configexamples/index.rst:44 +#: ../../configexamples/index.rst:45 msgid "do some defined tests" -msgstr "do some defined tests" +msgstr "виконати певні тести" #: ../../configexamples/azure-vpn-bgp.rst:34 #: ../../configexamples/azure-vpn-dual-bgp.rst:31 @@ -2732,63 +2844,63 @@ msgstr "eth0" #: ../../configexamples/wan-load-balancing.rst:30 msgid "eth0 is set to be removed from the load balancer's interface pool after 5 ping failures, eth1 will be removed after 4 ping failures." -msgstr "eth0 is set to be removed from the load balancer's interface pool after 5 ping failures, eth1 will be removed after 4 ping failures." +msgstr "eth0 налаштовано на видалення з пулу інтерфейсу балансувальника навантаження після 5 помилок ping, eth1 буде видалено після 4 помилок ping." #: ../../configexamples/l3vpn-hub-and-spoke.rst:941 msgid "extended community and remote label of specific destination" -msgstr "extended community and remote label of specific destination" +msgstr "розширена спільнота та віддалена мітка конкретного призначення" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:56 msgid "first the PCA" -msgstr "first the PCA" +msgstr "спочатку PCA" -#: ../../configexamples/index.rst:46 +#: ../../configexamples/index.rst:47 msgid "generate the documentation and include files" -msgstr "generate the documentation and include files" +msgstr "створити документацію та включити файли" #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:121 msgid "green uses local routing table id and VNI 4000" -msgstr "green uses local routing table id and VNI 4000" +msgstr "зелений використовує ідентифікатор локальної таблиці маршрутизації та VNI 4000" #: ../../configexamples/l3vpn-hub-and-spoke.rst:764 msgid "information between PE and CE:" -msgstr "information between PE and CE:" +msgstr "інформація між PE та CE:" -#: ../../configexamples/index.rst:45 +#: ../../configexamples/index.rst:46 msgid "optional do an upgrade to a higher version and do step 3 again." -msgstr "optional do an upgrade to a higher version and do step 3 again." +msgstr "за бажанням виконайте оновлення до вищої версії та повторіть крок 3." #: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:120 msgid "red uses local routing table id and VNI 3000" -msgstr "red uses local routing table id and VNI 3000" +msgstr "червоний використовує ідентифікатор локальної таблиці маршрутизації та VNI 3000" #: ../../configexamples/ha.rst:81 msgid "router2 (Random 1RU machine with 4 NICs)" -msgstr "router2 (Random 1RU machine with 4 NICs)" +msgstr "router2 (випадкова машина 1RU з 4 мережевими картами)" #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:102 msgid "save the output to a file and import it in nearly all openvpn clients." -msgstr "save the output to a file and import it in nearly all openvpn clients." +msgstr "зберегти вихідні дані у файл та імпортувати їх у майже всі клієнти openvpn." -#: ../../configexamples/index.rst:47 +#: ../../configexamples/index.rst:48 msgid "shutdown and destroy the lab, if there is no error" -msgstr "shutdown and destroy the lab, if there is no error" +msgstr "вимкнути та знищити лабораторію, якщо помилки немає" #: ../../configexamples/l3vpn-hub-and-spoke.rst:806 msgid "specific VPNv4 destination including extended community and remotelabel information. This procedure is the same on all Spoke nodes:" -msgstr "specific VPNv4 destination including extended community and remotelabel information. This procedure is the same on all Spoke nodes:" +msgstr "конкретне призначення VPNv4, включаючи розширену інформацію про спільноту та віддалену мітку. Ця процедура однакова для всіх вузлів Spoke:" #: ../../configexamples/ha.rst:76 msgid "switch1 (Nexus 10gb Switch)" -msgstr "switch1 (Nexus 10gb Switch)" +msgstr "switch1 (коммутатор Nexus 10 Гб)" #: ../../configexamples/ha.rst:77 msgid "switch2 (Nexus 10gb Switch)" -msgstr "switch2 (Nexus 10gb Switch)" +msgstr "switch2 (коммутатор Nexus 10 Гб)" #: ../../configexamples/zone-policy.rst:394 msgid "v6 pairs would be:" -msgstr "v6 pairs would be:" +msgstr "v6 пари будуть:" #: ../../configexamples/ansible.rst:34 msgid "vyos10 - 192.0.2.108" @@ -2808,72 +2920,72 @@ msgstr "vyos9 - 192.0.2.107" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:571 msgid "we are using \"source-address\" option cause we are not redistributing connected interfaces into BGP on the Core router hence there is no comeback route and ping will fail." -msgstr "we are using \"source-address\" option cause we are not redistributing connected interfaces into BGP on the Core router hence there is no comeback route and ping will fail." +msgstr "ми використовуємо опцію «адреса джерела», оскільки ми не перерозподіляємо підключені інтерфейси в BGP на основному маршрутизаторі, отже, немає маршруту повернення, і пінг не вдасться." #: ../../configexamples/l3vpn-hub-and-spoke.rst:736 msgid "within VRFs:" -msgstr "within VRFs:" +msgstr "в межах VRF:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:639 msgid "“show bgp ipv4 vpn summary” for checking BGP VPNv4 neighbors:" -msgstr "“show bgp ipv4 vpn summary” for checking BGP VPNv4 neighbors:" +msgstr "«показати підсумок bgp ipv4 vpn» для перевірки сусідів BGP VPNv4:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:834 msgid "“show bgp ipv4 vpn summary” for checking iBGP neighbors again" -msgstr "“show bgp ipv4 vpn summary” for checking iBGP neighbors again" +msgstr "«показати підсумок bgp ipv4 vpn» для повторної перевірки сусідів iBGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:719 msgid "“show bgp ipv4 vpn summary” for checking iBGP neighbors against route-reflector devices:" -msgstr "“show bgp ipv4 vpn summary” for checking iBGP neighbors against route-reflector devices:" +msgstr "«показати підсумок bgp ipv4 vpn» для перевірки сусідів iBGP на пристроях відбивача маршрутів:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:941 msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking best-path," -msgstr "“show bgp ipv4 vpn x.x.x.x/32” for checking best-path," +msgstr "«показати bgp ipv4 vpn xxxx/32» для перевірки найкращого шляху," #: ../../configexamples/l3vpn-hub-and-spoke.rst:807 msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking the best-path to the" -msgstr "“show bgp ipv4 vpn x.x.x.x/32” for checking the best-path to the" +msgstr "«показати bgp ipv4 vpn xxxx/32» для перевірки найкращого шляху до" #: ../../configexamples/l3vpn-hub-and-spoke.rst:698 msgid "“show bgp ipv4 vpn x.x.x.x/x” for checking best path selected for specific VPNv4 destination" -msgstr "“show bgp ipv4 vpn x.x.x.x/x” for checking best path selected for specific VPNv4 destination" +msgstr "«показати bgp ipv4 vpn xxxx/x» для перевірки найкращого шляху, вибраного для певного призначення VPNv4" #: ../../configexamples/l3vpn-hub-and-spoke.rst:658 msgid "“show bgp ipv4 vpn” for checking all VPNv4 prefixes information:" -msgstr "“show bgp ipv4 vpn” for checking all VPNv4 prefixes information:" +msgstr "«показати bgp ipv4 vpn» для перевірки всіх префіксів VPNv4:" #: ../../configexamples/l3vpn-hub-and-spoke.rst:891 msgid "“show bgp vrf BLUE_HUB summary” for checking EBGP neighbor" -msgstr "“show bgp vrf BLUE_HUB summary” for checking EBGP neighbor" +msgstr "«показати підсумок bgp vrf BLUE_HUB» для перевірки сусіда EBGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:764 msgid "“show bgp vrf BLUE_SPOKE summary” for checking EBGP neighbor" -msgstr "“show bgp vrf BLUE_SPOKE summary” for checking EBGP neighbor" +msgstr "«показати підсумок bgp vrf BLUE_SPOKE» для перевірки сусіда EBGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:736 msgid "“show bgp vrf all” for checking all the prefix learning on BGP" -msgstr "“show bgp vrf all” for checking all the prefix learning on BGP" +msgstr "«показати всі bgp vrf» для перевірки всіх префіксів, які навчаються на BGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:851 msgid "“show bgp vrf all” for checking all the prefixes learning on BGP" -msgstr "“show bgp vrf all” for checking all the prefixes learning on BGP" +msgstr "«показати всі bgp vrf» для перевірки всіх префіксів, які навчаються на BGP" #: ../../configexamples/l3vpn-hub-and-spoke.rst:554 msgid "“show ip ospf neighbor” for checking ospf relationship" -msgstr "“show ip ospf neighbor” for checking ospf relationship" +msgstr "«показати сусіда ip ospf» для перевірки зв’язку ospf" #: ../../configexamples/l3vpn-hub-and-spoke.rst:909 msgid "“show ip route vrf BLUE_HUB” to view the RIB in our Hub PE." -msgstr "“show ip route vrf BLUE_HUB” to view the RIB in our Hub PE." +msgstr "«show ip route vrf BLUE_HUB», щоб переглянути RIB у нашому Hub PE." #: ../../configexamples/l3vpn-hub-and-spoke.rst:784 msgid "“show ip route vrf BLUE_SPOKE” for viewing the RIB in our Spoke PE." -msgstr "“show ip route vrf BLUE_SPOKE” for viewing the RIB in our Spoke PE." +msgstr "«show ip route vrf BLUE_SPOKE» для перегляду RIB у нашому Spoke PE." #: ../../configexamples/l3vpn-hub-and-spoke.rst:579 msgid "“show mpls ldp binding” for checking mpls label assignment" -msgstr "“show mpls ldp binding” for checking mpls label assignment" +msgstr "«показати прив’язку mpls ldp» для перевірки призначення міток mpls" #: ../../configexamples/l3vpn-hub-and-spoke.rst:567 msgid "“show mpls ldp neighbor “ for checking ldp neighbors" -msgstr "“show mpls ldp neighbor “ for checking ldp neighbors" +msgstr "«показати сусіда mpls ldp» для перевірки сусідів ldp" diff --git a/docs/_locale/uk/configuration.pot b/docs/_locale/uk/configuration.pot index 62a76e08..3f9e7bd2 100644 --- a/docs/_locale/uk/configuration.pot +++ b/docs/_locale/uk/configuration.pot @@ -10,35 +10,35 @@ msgstr "" #: ../../configuration/policy/route.rst:74 msgid "!<h:h:h:h:h:h:h:h/x>: Match everything except the specified prefix." -msgstr "!<h:h:h:h:h:h:h:h/x>: Match everything except the specified prefix." +msgstr "!<h:h:h:h:h:h:h:h/x> : відповідність усім, крім зазначеного префікса." #: ../../configuration/policy/route.rst:75 msgid "!<h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h>: Match everything except the specified range." -msgstr "!<h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h>: Match everything except the specified range." +msgstr "!<h:h:h:h:h:h:h:h> -<h:h:h:h:h:h:h:h> : відповідність усім, крім указаного діапазону." #: ../../configuration/policy/route.rst:73 msgid "!<h:h:h:h:h:h:h:h>: Match everything except the specified address." -msgstr "!<h:h:h:h:h:h:h:h>: Match everything except the specified address." +msgstr "!<h:h:h:h:h:h:h:h> : відповідність усім, крім зазначеної адреси." #: ../../configuration/policy/route.rst:66 msgid "!<x.x.x.x/x>: Match everything except the specified subnet." -msgstr "!<x.x.x.x/x>: Match everything except the specified subnet." +msgstr "!<x.x.x.x/x> : відповідність усім, крім зазначеної підмережі." #: ../../configuration/policy/route.rst:67 msgid "!<x.x.x.x>-<x.x.x.x>: Match everything except the specified range." -msgstr "!<x.x.x.x>-<x.x.x.x>: Match everything except the specified range." +msgstr "!<x.x.x.x> -<x.x.x.x> : відповідність усім, крім указаного діапазону." #: ../../configuration/policy/route.rst:65 msgid "!<x.x.x.x>: Match everything except the specified address." -msgstr "!<x.x.x.x>: Match everything except the specified address." +msgstr "!<x.x.x.x> : відповідність усім, крім зазначеної адреси." #: ../../configuration/service/router-advert.rst:1 msgid "\"Managed address configuration\" flag" -msgstr "\"Managed address configuration\" flag" +msgstr "Прапорець "Конфігурація керованої адреси"." #: ../../configuration/service/router-advert.rst:1 msgid "\"Other configuration\" flag" -msgstr "\"Other configuration\" flag" +msgstr "Прапор «Інша конфігурація»." #: ../../configuration/firewall/flowtables.rst:5 msgid "###################ä############# Flowtables Firewall Configuration #################################" @@ -46,48 +46,56 @@ msgstr "###################ä############# Flowtables Firewall Configuration ### #: ../../configuration/protocols/babel.rst:146 msgid "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." -msgstr "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." +msgstr "**1-254** – інтерфейси з номером каналу створюють перешкоди інтерфейсам, що створюють перешкоди, і інтерфейсам з таким же номером каналу. **Interfering** – передбачається, що інтерфейси, що створюють перешкоди, створюють перешкоди всім іншим каналам, крім каналів, які не створюють перешкод. **noninterfering** – передбачається, що неперешкоджаючі інтерфейси заважають лише самі собі." #: ../../configuration/system/flow-accounting.rst:102 msgid "**10** - :abbr:`IPFIX (IP Flow Information Export)` as per :rfc:`3917`" -msgstr "**10** - :abbr:`IPFIX (IP Flow Information Export)` as per :rfc:`3917`" +msgstr "**10** - :abbr:`IPFIX (Експорт інформації про потік IP)` згідно з :rfc:`3917`" #: ../../configuration/interfaces/tunnel.rst:235 msgid "**1. Confirm IP connectivity between tunnel source-address and remote:**" -msgstr "**1. Confirm IP connectivity between tunnel source-address and remote:**" +msgstr "**1. Підтвердьте IP-з’єднання між адресою джерела тунелю та дистанційним керуванням:**" #: ../../configuration/interfaces/tunnel.rst:250 msgid "**2. Confirm the link type has been set to GRE:**" -msgstr "**2. Confirm the link type has been set to GRE:**" +msgstr "**2. Переконайтеся, що тип посилання встановлено на GRE:**" #: ../../configuration/interfaces/tunnel.rst:267 msgid "**3. Confirm IP connectivity across the tunnel:**" -msgstr "**3. Confirm IP connectivity across the tunnel:**" +msgstr "**3. Підтвердьте IP-з’єднання через тунель:**" #: ../../configuration/system/flow-accounting.rst:100 msgid "**5** - Most common version, but restricted to IPv4 flows only" -msgstr "**5** - Most common version, but restricted to IPv4 flows only" +msgstr "**5** – найпоширеніша версія, але обмежена лише потоками IPv4" #: ../../configuration/system/flow-accounting.rst:101 msgid "**9** - NetFlow version 9 (default)" -msgstr "**9** - NetFlow version 9 (default)" +msgstr "**9** - NetFlow версії 9 (за замовчуванням)" #: ../../configuration/protocols/bgp.rst:75 msgid "**AS path length check**" -msgstr "**AS path length check**" +msgstr "**Перевірка довжини шляху AS**" + +#: ../../configuration/service/dhcp-server.rst:175 +msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." +msgstr "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." + +#: ../../configuration/service/dhcp-server.rst:178 +msgid "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." +msgstr "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." #: ../../configuration/protocols/bgp.rst:106 msgid "**Already-selected external check**" -msgstr "**Already-selected external check**" +msgstr "**Вже вибраний зовнішній чек**" #: ../../configuration/trafficpolicy/index.rst:547 -#: ../../configuration/trafficpolicy/index.rst:1181 +#: ../../configuration/trafficpolicy/index.rst:1249 msgid "**Applies to:** Inbound traffic." -msgstr "**Applies to:** Inbound traffic." +msgstr "**Застосовується до:** Вхідного трафіку." #: ../../configuration/trafficpolicy/index.rst:444 msgid "**Applies to:** Outbound Traffic." -msgstr "**Applies to:** Outbound Traffic." +msgstr "**Застосовується до:** вихідного трафіку." #: ../../configuration/trafficpolicy/index.rst:355 #: ../../configuration/trafficpolicy/index.rst:387 @@ -97,12 +105,13 @@ msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:916 #: ../../configuration/trafficpolicy/index.rst:961 #: ../../configuration/trafficpolicy/index.rst:1020 +#: ../../configuration/trafficpolicy/index.rst:1154 msgid "**Applies to:** Outbound traffic." -msgstr "**Applies to:** Outbound traffic." +msgstr "**Застосовується до:** вихідного трафіку." #: ../../configuration/trafficpolicy/index.rst:32 msgid "**Apply the traffic policy to an interface ingress or egress**." -msgstr "**Apply the traffic policy to an interface ingress or egress**." +msgstr "**Застосуйте політику трафіку до входу або виходу інтерфейсу**." #: ../../configuration/firewall/index.rst:22 msgid "**Bridge Port?**: choose appropiate path based on if interface were the packet was received is part of a bridge, or not." @@ -114,19 +123,19 @@ msgstr "**Bridge Port?**: choose appropriate path based on whether interface whe #: ../../configuration/interfaces/tunnel.rst:137 msgid "**Cisco IOS Router:**" -msgstr "**Cisco IOS Router:**" +msgstr "**Маршрутизатор Cisco IOS:**" #: ../../configuration/service/pppoe-server.rst:66 msgid "**Client IP address via IP range definition**" -msgstr "**Client IP address via IP range definition**" +msgstr "**IP-адреса клієнта через визначення діапазону IP-адрес**" #: ../../configuration/service/pppoe-server.rst:89 msgid "**Client IP subnets via CIDR notation**" -msgstr "**Client IP subnets via CIDR notation**" +msgstr "**ІР-підмережі клієнта через нотацію CIDR**" #: ../../configuration/protocols/bgp.rst:120 msgid "**Cluster-List length check**" -msgstr "**Cluster-List length check**" +msgstr "**Перевірка довжини списку кластерів**" #: ../../configuration/firewall/index.rst:35 msgid "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``." @@ -134,7 +143,7 @@ msgstr "**Conntrack Ignore**: rules defined under ``set system conntrack ignore #: ../../configuration/trafficpolicy/index.rst:30 msgid "**Create a traffic policy**." -msgstr "**Create a traffic policy**." +msgstr "**Створіть політику дорожнього руху**." #: ../../configuration/interfaces/wwan.rst:53 #: ../../_include/interface-common-with-dhcp.txt:9 @@ -145,7 +154,7 @@ msgstr "**DHCP(v6)**" #: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 msgid "**DHCPv6 Prefix Delegation (PD)**" -msgstr "**DHCPv6 Prefix Delegation (PD)**" +msgstr "**Делегування префікса DHCPv6 (PD)**" #: ../../configuration/firewall/index.rst:41 msgid "**Destination NAT**: rules defined under ``set [nat | nat66] destination...``." @@ -166,21 +175,23 @@ msgstr "**Documentation under development**" #: ../../configuration/trafficpolicy/index.rst:169 msgid "**Ethernet (protocol, destination address or source address)**" -msgstr "**Ethernet (protocol, destination address or source address)**" +msgstr "**Ethernet (протокол, адреса призначення або адреса джерела)**" -#: ../../configuration/service/dhcp-server.rst:200 -#: ../../configuration/service/dhcp-server.rst:587 -#: ../../configuration/service/dhcp-server.rst:626 +#: ../../configuration/service/dhcp-server.rst:63 +#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:646 +#: ../../configuration/service/dhcp-server.rst:687 msgid "**Example:**" -msgstr "**Example:**" +msgstr "**Приклад:**" #: ../../configuration/protocols/bgp.rst:89 msgid "**External check**" -msgstr "**External check**" +msgstr "**Зовнішня перевірка**" #: ../../configuration/trafficpolicy/index.rst:175 msgid "**Firewall mark**" -msgstr "**Firewall mark**" +msgstr "**Позначка брандмауера**" #: ../../configuration/firewall/flowtables.rst:51 msgid "**Flowtable Reference:** https://docs.kernel.org/networking/nf_flowtable.html" @@ -208,19 +219,19 @@ msgstr "**Hardware offload:** should be supported by the NICs used." #: ../../configuration/protocols/bgp.rst:94 msgid "**IGP cost check**" -msgstr "**IGP cost check**" +msgstr "**Перевірка вартості IGP**" #: ../../configuration/trafficpolicy/index.rst:171 msgid "**IPv4 (DSCP value, maximum packet length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" -msgstr "**IPv4 (DSCP value, maximum packet length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" +msgstr "**IPv4 (значення DSCP, максимальна довжина пакета, протокол, адреса джерела,** **адреса призначення, порт джерела, порт призначення або позначки TCP)**" #: ../../configuration/trafficpolicy/index.rst:173 msgid "**IPv6 (DSCP value, maximum payload length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" -msgstr "**IPv6 (DSCP value, maximum payload length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" +msgstr "**IPv6 (значення DSCP, максимальна довжина корисного навантаження, протокол, адреса джерела,** **адреса призначення, порт джерела, порт призначення або позначки TCP)**" #: ../../configuration/trafficpolicy/index.rst:345 msgid "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues <embed>` **as FQ-CoDel**." -msgstr "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues <embed>` **as FQ-CoDel**." +msgstr "**Якщо ви шукаєте політику для свого вихідного трафіку**, але ви не знаєте, яка вам потрібна, і не хочете переглядати всі можливі політики, показані тут, **ми впевнені, що ви, швидше за все, є шукаєте** політику Shaper_ **і хочете** :ref:`встановити її черги<embed> ` **як FQ-CoDel**." #: ../../configuration/firewall/general-legacy.rst:9 msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" @@ -255,7 +266,7 @@ msgstr "**Important note on usage of terms:** The firewall makes use of the term #: ../../configuration/firewall/general-legacy.rst:24 msgid "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." -msgstr "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." +msgstr "**Важлива примітка щодо використання термінів:** брандмауер використовує терміни `in`, `out` і `local` для політики брандмауера. Користувачі, які мають досвід роботи з netfilter, часто плутають `in` як посилання на ланцюжок `INPUT`, а `out` — ланцюжок `OUTPUT` від netfilter. Це не той випадок. Натомість вони вказують на використання ланцюжка `FORWARD` та інтерфейсу введення або виведення. Ланцюжок `INPUT`, який використовується для локального трафіку до ОС, є посиланням на `локальний` щодо його вхідного інтерфейсу." #: ../../configuration/firewall/index.rst:48 msgid "**Input**: stage where traffic destinated to the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" @@ -267,13 +278,13 @@ msgstr "**Input**: stage where traffic destined for the router itself can be fil #: ../../configuration/trafficpolicy/index.rst:170 msgid "**Interface name**" -msgstr "**Interface name**" +msgstr "**Назва інтерфейсу**" -#: ../../configuration/vpn/site2site_ipsec.rst:303 +#: ../../configuration/vpn/site2site_ipsec.rst:306 msgid "**LEFT**" msgstr "**LEFT**" -#: ../../configuration/vpn/site2site_ipsec.rst:287 +#: ../../configuration/vpn/site2site_ipsec.rst:290 msgid "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" msgstr "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" @@ -283,11 +294,11 @@ msgstr "**Layer 3 bridge**: When an IP address is assigned to the bridge interfa #: ../../configuration/interfaces/vxlan.rst:235 msgid "**Leaf2 configuration:**" -msgstr "**Leaf2 configuration:**" +msgstr "**Конфігурація Leaf2:**" #: ../../configuration/interfaces/vxlan.rst:260 msgid "**Leaf3 configuration:**" -msgstr "**Leaf3 configuration:**" +msgstr "**Конфігурація Leaf3:**" #: ../../configuration/interfaces/tunnel.rst:159 msgid "**Linux systemd-networkd:**" @@ -295,27 +306,27 @@ msgstr "**Linux systemd-networkd:**" #: ../../configuration/protocols/bgp.rst:67 msgid "**Local preference check**" -msgstr "**Local preference check**" +msgstr "**Перевірка місцевих переваг**" #: ../../configuration/protocols/bgp.rst:71 msgid "**Local route check**" -msgstr "**Local route check**" +msgstr "**Перевірка місцевого маршруту**" #: ../../configuration/protocols/bgp.rst:84 msgid "**MED check**" -msgstr "**MED check**" +msgstr "**З чеком**" #: ../../configuration/protocols/bgp.rst:98 msgid "**Multi-path check**" -msgstr "**Multi-path check**" +msgstr "**Багатохідна перевірка**" -#: ../../configuration/protocols/bgp.rst:1193 +#: ../../configuration/protocols/bgp.rst:1215 msgid "**Node1:**" -msgstr "**Node1:**" +msgstr "**Вузол1:**" -#: ../../configuration/protocols/bgp.rst:1221 +#: ../../configuration/protocols/bgp.rst:1243 msgid "**Node2:**" -msgstr "**Node2:**" +msgstr "**Вузол 2:**" #: ../../configuration/protocols/ospf.rst:840 #: ../../configuration/protocols/ospf.rst:913 @@ -323,13 +334,13 @@ msgstr "**Node2:**" #: ../../configuration/protocols/ospf.rst:1350 #: ../../configuration/protocols/segment-routing.rst:281 msgid "**Node 1**" -msgstr "**Node 1**" +msgstr "**Вузол 1**" #: ../../configuration/protocols/babel.rst:192 -#: ../../configuration/protocols/bgp.rst:1103 -#: ../../configuration/protocols/bgp.rst:1130 -#: ../../configuration/protocols/bgp.rst:1148 -#: ../../configuration/protocols/bgp.rst:1176 +#: ../../configuration/protocols/bgp.rst:1125 +#: ../../configuration/protocols/bgp.rst:1152 +#: ../../configuration/protocols/bgp.rst:1170 +#: ../../configuration/protocols/bgp.rst:1198 #: ../../configuration/protocols/isis.rst:341 #: ../../configuration/protocols/isis.rst:416 #: ../../configuration/protocols/isis.rst:457 @@ -339,7 +350,7 @@ msgstr "**Node 1**" #: ../../configuration/protocols/rip.rst:243 #: ../../configuration/protocols/segment-routing.rst:195 msgid "**Node 1:**" -msgstr "**Node 1:**" +msgstr "**Вузол 1:**" #: ../../configuration/protocols/ospf.rst:850 #: ../../configuration/protocols/ospf.rst:930 @@ -347,13 +358,13 @@ msgstr "**Node 1:**" #: ../../configuration/protocols/ospf.rst:1365 #: ../../configuration/protocols/segment-routing.rst:296 msgid "**Node 2**" -msgstr "**Node 2**" +msgstr "**Вузол 2**" #: ../../configuration/protocols/babel.rst:202 -#: ../../configuration/protocols/bgp.rst:1114 #: ../../configuration/protocols/bgp.rst:1136 -#: ../../configuration/protocols/bgp.rst:1160 +#: ../../configuration/protocols/bgp.rst:1158 #: ../../configuration/protocols/bgp.rst:1182 +#: ../../configuration/protocols/bgp.rst:1204 #: ../../configuration/protocols/isis.rst:352 #: ../../configuration/protocols/isis.rst:432 #: ../../configuration/protocols/isis.rst:511 @@ -361,35 +372,39 @@ msgstr "**Node 2**" #: ../../configuration/protocols/rip.rst:251 #: ../../configuration/protocols/segment-routing.rst:211 msgid "**Node 2:**" -msgstr "**Node 2:**" +msgstr "**Вузол 2:**" #: ../../configuration/policy/examples.rst:136 msgid "**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from PBR" -msgstr "**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from PBR" +msgstr "**НЕОБОВ’ЯЗКОВО:** Виключити трафік між VLAN (між VLAN10 і VLAN11) із PBR" #: ../../configuration/protocols/ospf.rst:731 msgid "**OSPF network routing table** – includes a list of acquired routes for all accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag means that route destination is in the area to which the router is not connected, i.e. it’s an inter-area path. In square brackets a summary metric for all links through which a path lies to this network is specified. \"via\" prefix defines a router-gateway, i.e. the first router on the way to the destination (next hop). **OSPF router routing table** – includes a list of acquired routes to all accessible ABRs and ASBRs. **OSPF external routing table** – includes a list of acquired routes that are external to the OSPF process. \"E\" flag points to the external link metric type (E1 – metric type 1, E2 – metric type 2). External link metric is printed in the \"<metric of the router which advertised the link>/<link metric>\" format." -msgstr "**OSPF network routing table** – includes a list of acquired routes for all accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag means that route destination is in the area to which the router is not connected, i.e. it’s an inter-area path. In square brackets a summary metric for all links through which a path lies to this network is specified. \"via\" prefix defines a router-gateway, i.e. the first router on the way to the destination (next hop). **OSPF router routing table** – includes a list of acquired routes to all accessible ABRs and ASBRs. **OSPF external routing table** – includes a list of acquired routes that are external to the OSPF process. \"E\" flag points to the external link metric type (E1 – metric type 1, E2 – metric type 2). External link metric is printed in the \"<metric of the router which advertised the link>/<link metric>\" format." +msgstr "**Таблиця мережевої маршрутизації OSPF** – містить список отриманих маршрутів для всіх доступних мереж (або агрегованих діапазонів зон) системи OSPF. Прапор «IA» означає, що пункт призначення маршруту знаходиться в зоні, до якої маршрутизатор не підключений, тобто це міжзональний шлях. У квадратних дужках вказується підсумкова метрика для всіх посилань, через які пролягає шлях до цієї мережі. Префікс "via" визначає маршрутизатор-шлюз, тобто перший маршрутизатор на шляху до пункту призначення (наступного переходу). **Таблиця маршрутизації маршрутизатора OSPF** – містить список отриманих маршрутів до всіх доступних ABR і ASBR. **Зовнішня таблиця маршрутизації OSPF** – містить список отриманих маршрутів, зовнішніх щодо процесу OSPF. Прапорець "E" вказує на тип метрики зовнішнього посилання (E1 – тип метрики 1, E2 – тип метрики 2). Метрика зовнішнього посилання надрукована в "<metric of the router which advertised the link> /<link metric> "формат." #: ../../configuration/protocols/failover.rst:65 msgid "**One gateway:**" -msgstr "**One gateway:**" +msgstr "**Один шлюз:**" #: ../../configuration/protocols/bgp.rst:79 msgid "**Origin check**" -msgstr "**Origin check**" +msgstr "**Перевірка походження**" #: ../../configuration/firewall/index.rst:64 msgid "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:65 +msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/protocols/bgp.rst:125 msgid "**Peer address**" -msgstr "**Peer address**" +msgstr "**Адреса аналога**" #: ../../configuration/firewall/index.rst:38 msgid "**Policy Route**: rules defined under ``set policy [route | route6] ...``." @@ -397,7 +412,7 @@ msgstr "**Policy Route**: rules defined under ``set policy [route | route6] ...` #: ../../configuration/policy/examples.rst:5 msgid "**Policy definition:**" -msgstr "**Policy definition:**" +msgstr "**Визначення політики:**" #: ../../configuration/firewall/index.rst:76 msgid "**Postrouting**: as in **Prerouting**, several actions defined in different parts of VyOS configuration are performed in this stage. This includes:" @@ -411,49 +426,53 @@ msgstr "**Prerouting**: several actions can be done in this stage, and currently msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" -#: ../../configuration/service/dhcp-server.rst:391 +#: ../../configuration/service/dhcp-server.rst:448 msgid "**Primary**" -msgstr "**Primary**" +msgstr "**Первинний**" #: ../../configuration/trafficpolicy/index.rst:443 msgid "**Queueing discipline** Fair/Flow Queue CoDel." -msgstr "**Queueing discipline** Fair/Flow Queue CoDel." +msgstr "**Дисципліна черги** Fair/Flow Queue CoDel." #: ../../configuration/trafficpolicy/index.rst:960 msgid "**Queueing discipline:** Deficit Round Robin." -msgstr "**Queueing discipline:** Deficit Round Robin." +msgstr "**Дисципліна стояння в черзі:** Дефіцитна кругова система." + +#: ../../configuration/trafficpolicy/index.rst:1153 +msgid "**Queueing discipline:** Deficit mode." +msgstr "**Queueing discipline:** Deficit mode." #: ../../configuration/trafficpolicy/index.rst:766 msgid "**Queueing discipline:** Generalized Random Early Drop." -msgstr "**Queueing discipline:** Generalized Random Early Drop." +msgstr "**Дисципліна черги: ** Узагальнене випадкове раннє скидання." #: ../../configuration/trafficpolicy/index.rst:1019 msgid "**Queueing discipline:** Hierarchical Token Bucket." -msgstr "**Queueing discipline:** Hierarchical Token Bucket." +msgstr "**Дисципліна черги: ** Ієрархічне відро маркерів." #: ../../configuration/trafficpolicy/index.rst:546 msgid "**Queueing discipline:** Ingress policer." -msgstr "**Queueing discipline:** Ingress policer." +msgstr "**Дисципліна стояння в черзі: ** Офіцер." #: ../../configuration/trafficpolicy/index.rst:354 msgid "**Queueing discipline:** PFIFO (Packet First In First Out)." -msgstr "**Queueing discipline:** PFIFO (Packet First In First Out)." +msgstr "**Дисципліна постановки в чергу:** PFIFO (пакет першим прийшов, першим вийшов)." #: ../../configuration/trafficpolicy/index.rst:690 msgid "**Queueing discipline:** PRIO." -msgstr "**Queueing discipline:** PRIO." +msgstr "**Дисципліна черги:** PRIO." #: ../../configuration/trafficpolicy/index.rst:386 msgid "**Queueing discipline:** SFQ (Stochastic Fairness Queuing)." -msgstr "**Queueing discipline:** SFQ (Stochastic Fairness Queuing)." +msgstr "**Дисципліна черги: ** SFQ (Stochastic Fairness Queuing)." #: ../../configuration/trafficpolicy/index.rst:915 msgid "**Queueing discipline:** Tocken Bucket Filter." -msgstr "**Queueing discipline:** Tocken Bucket Filter." +msgstr "**Дисципліна постановки в чергу: ** Фільтр відра Tocken." #: ../../configuration/trafficpolicy/index.rst:621 msgid "**Queueing discipline:** netem (Network Emulator) + TBF (Token Bucket Filter)." -msgstr "**Queueing discipline:** netem (Network Emulator) + TBF (Token Bucket Filter)." +msgstr "**Дисципліна черги:** netem (емулятор мережі) + TBF (фільтр маркерів)." #: ../../configuration/interfaces/bonding.rst:407 #: ../../configuration/interfaces/macsec.rst:159 @@ -475,43 +494,43 @@ msgstr "**R2 Static Key**" #: ../../configuration/service/pppoe-server.rst:91 msgid "**RADIUS based IP pools (Framed-IP-Address)**" -msgstr "**RADIUS based IP pools (Framed-IP-Address)**" +msgstr "**IP-пули на основі RADIUS (IP-адреса в рамці)**" #: ../../configuration/service/pppoe-server.rst:115 msgid "**RADIUS sessions management DM/CoA**" -msgstr "**RADIUS sessions management DM/CoA**" +msgstr "**Управління сеансами RADIUS DM/CoA**" -#: ../../configuration/vpn/site2site_ipsec.rst:343 +#: ../../configuration/vpn/site2site_ipsec.rst:346 msgid "**RIGHT**" msgstr "**RIGHT**" -#: ../../configuration/vpn/site2site_ipsec.rst:293 +#: ../../configuration/vpn/site2site_ipsec.rst:296 msgid "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" #: ../../configuration/protocols/bgp.rst:113 msgid "**Router-ID check**" -msgstr "**Router-ID check**" +msgstr "**Перевірка ідентифікатора маршрутизатора**" #: ../../configuration/protocols/pim.rst:228 msgid "**Router 1**" -msgstr "**Router 1**" +msgstr "**Маршрутизатор 1**" #: ../../configuration/protocols/pim.rst:256 msgid "**Router 2**" -msgstr "**Router 2**" +msgstr "**Маршрутизатор 2**" #: ../../configuration/protocols/pim.rst:241 msgid "**Router 3**" -msgstr "**Router 3**" +msgstr "**Маршрутизатор 3**" #: ../../configuration/policy/examples.rst:36 msgid "**Routes learned after routing policy applied:**" -msgstr "**Routes learned after routing policy applied:**" +msgstr "**Маршрути, отримані після застосування політики маршрутизації:**" #: ../../configuration/policy/examples.rst:21 msgid "**Routes learned before routing policy applied:**" -msgstr "**Routes learned before routing policy applied:**" +msgstr "**Маршрути, отримані до застосування політики маршрутизації:**" #: ../../configuration/interfaces/bonding.rst:443 msgid "**SW1**" @@ -521,17 +540,17 @@ msgstr "**SW1**" msgid "**SW2**" msgstr "**SW2**" -#: ../../configuration/service/dhcp-server.rst:400 +#: ../../configuration/service/dhcp-server.rst:458 msgid "**Secondary**" -msgstr "**Secondary**" +msgstr "**Вторинний**" -#: ../../configuration/vpn/ipsec.rst:261 +#: ../../configuration/vpn/ipsec.rst:265 msgid "**Setting up IPSec**" -msgstr "**Setting up IPSec**" +msgstr "**Налаштування IPSec**" -#: ../../configuration/vpn/ipsec.rst:237 +#: ../../configuration/vpn/ipsec.rst:241 msgid "**Setting up the GRE tunnel**" -msgstr "**Setting up the GRE tunnel**" +msgstr "**Налаштування тунелю GRE**" #: ../../configuration/firewall/index.rst:80 msgid "**Source NAT**: rules defined under ``set [nat | nat66] destination...``." @@ -539,19 +558,19 @@ msgstr "**Source NAT**: rules defined under ``set [nat | nat66] destination...`` #: ../../configuration/interfaces/vxlan.rst:212 msgid "**Spine1 Configuration:**" -msgstr "**Spine1 Configuration:**" +msgstr "**Конфігурація Spine1:**" #: ../../configuration/protocols/ospf.rst:1380 msgid "**Status**" -msgstr "**Status**" +msgstr "**Статус**" #: ../../configuration/protocols/ospf.rst:1338 msgid "**To see the redistributed routes:**" -msgstr "**To see the redistributed routes:**" +msgstr "**Щоб переглянути перерозподілені маршрути:**" #: ../../configuration/protocols/failover.rst:85 msgid "**Two gateways and different metrics:**" -msgstr "**Two gateways and different metrics:**" +msgstr "**Два шлюзи та різні показники:**" #: ../../configuration/trafficpolicy/index.rst:176 msgid "**VLAN ID**" @@ -560,96 +579,150 @@ msgstr "**VLAN ID**" #: ../../configuration/interfaces/tunnel.rst:128 #: ../../configuration/interfaces/tunnel.rst:149 msgid "**VyOS Router:**" -msgstr "**VyOS Router:**" +msgstr "**Маршрутизатор VyOS:**" #: ../../configuration/protocols/bgp.rst:63 msgid "**Weight check**" -msgstr "**Weight check**" +msgstr "**Перевірка ваги**" + +#: ../../configuration/trafficpolicy/index.rst:1208 +msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." +msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" -msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" +msgstr "**адресу** можна вказати кілька разів, наприклад 192.168.100.1 та/або 192.168.100.0/24" #: ../../_include/interface-address-with-dhcp.txt:7 #: ../../_include/interface-address.txt:6 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" -msgstr "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" +msgstr "**address** можна вказати декілька разів як адресу IPv4 та/або IPv6, наприклад 192.0.2.1/24 та/або 2001:db8::1/64" + +#: ../../configuration/service/pppoe-server.rst:474 +#: ../../configuration/vpn/l2tp.rst:428 +#: ../../configuration/vpn/pptp.rst:352 +#: ../../configuration/vpn/sstp.rst:386 +msgid "**allow** - Negotiate IPv4 only if client requests (Default value)" +msgstr "**allow** - Negotiate IPv4 only if client requests (Default value)" + +#: ../../configuration/service/pppoe-server.rst:349 +#: ../../configuration/vpn/l2tp.rst:293 +#: ../../configuration/vpn/pptp.rst:217 +#: ../../configuration/vpn/sstp.rst:251 +msgid "**allow** - Negotiate IPv6 only if client requests" +msgstr "**allow** - Negotiate IPv6 only if client requests" #: ../../configuration/container/index.rst:38 msgid "**allow-host-networks** cannot be used with **network**" -msgstr "**allow-host-networks** cannot be used with **network**" +msgstr "**allow-host-networks** не можна використовувати з **network**" -#: ../../configuration/container/index.rst:102 +#: ../../configuration/container/index.rst:107 msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" -msgstr "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" +msgstr "**завжди**: перезапускати контейнери, коли вони виходять, незалежно від статусу, повторюючи спроби на невизначений час" #: ../../configuration/service/dhcp-relay.rst:71 msgid "**append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet." -msgstr "**append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet." +msgstr "**додавання:** Агенту ретрансляції дозволено додавати власну інформацію ретрансляції до отриманого пакету DHCP, не враховуючи інформацію ретрансляції, яка вже є в пакеті." #: ../../configuration/system/flow-accounting.rst:32 msgid "**application**: analyzes received flow data in the context of intrusion detection or traffic profiling, for example" -msgstr "**application**: analyzes received flow data in the context of intrusion detection or traffic profiling, for example" +msgstr "**додаток**: аналізує отримані дані потоку, наприклад, у контексті виявлення вторгнень або профілювання трафіку" #: ../../configuration/protocols/babel.rst:69 msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." -msgstr "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." +msgstr "**auto** – автоматично визначає тип інтерфейсу. **wired** – дозволяє оптимізувати дротові інтерфейси. **wireless** – вимикає низку оптимізацій, які є правильними лише для дротових інтерфейсів. Зазначення бездротового зв’язку завжди є правильним, але це може спричинити повільнішу конвергенцію та додатковий трафік маршрутизації." + +#: ../../configuration/service/ids.rst:90 +msgid "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." +msgstr "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." #: ../../configuration/protocols/ospf.rst:435 msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." -msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." +msgstr "**broadcast** – широкомовний розподіл IP-адрес. **non-broadcast** – розподіл адрес у топології мереж NBMA. **точка-багато точок** – розподіл адрес у мережах «точка-багато точок». **точка-точка** – розподіл адрес у мережах «точка-точка»." #: ../../configuration/protocols/ospf.rst:1175 msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." -msgstr "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." +msgstr "**broadcast** – широкомовний розподіл IP-адрес. **точка-точка** – розподіл адрес у мережах «точка-точка»." + +#: ../../configuration/service/pppoe-server.rst:401 +#: ../../configuration/vpn/l2tp.rst:345 +#: ../../configuration/vpn/pptp.rst:269 +#: ../../configuration/vpn/sstp.rst:303 +msgid "**calling-sid** - Calculate interface identifier from calling-station-id." +msgstr "**calling-sid** - Calculate interface identifier from calling-station-id." #: ../../configuration/protocols/ospf.rst:121 msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." -msgstr "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." +msgstr "**cisco** – маршрутизатор буде вважатися ABR, якщо він має кілька налаштованих з’єднань з мережами в різних областях, одна з яких є магістральною. Крім того, зв'язок з магістральною зоною має бути активним (працюючим). **ibm** – ідентична моделі "cisco", але в цьому випадку магістральний канал може бути неактивним. **стандартний** – маршрутизатор має кілька активних посилань на різні області. **ярлик** – ідентичний «стандартному», але в цій моделі маршрутизатору дозволено використовувати топологію підключених областей без залучення магістральної області для міжзональних з’єднань." #: ../../configuration/system/flow-accounting.rst:30 msgid "**collector**: responsible for reception, storage and pre-processing of flow data received from a flow exporter" -msgstr "**collector**: responsible for reception, storage and pre-processing of flow data received from a flow exporter" +msgstr "**збирач**: відповідає за прийом, зберігання та попередню обробку даних потоку, отриманих від експортера потоку" #: ../../configuration/protocols/ospf.rst:329 msgid "**default** – this area will be used for shortcutting only if ABR does not have a link to the backbone area or this link was lost. **enable** – the area will be used for shortcutting every time the route that goes through it is cheaper. **disable** – this area is never used by ABR for routes shortcutting." -msgstr "**default** – this area will be used for shortcutting only if ABR does not have a link to the backbone area or this link was lost. **enable** – the area will be used for shortcutting every time the route that goes through it is cheaper. **disable** – this area is never used by ABR for routes shortcutting." +msgstr "**за замовчуванням** – ця область використовуватиметься для швидкого доступу, лише якщо ABR не має зв’язку з магістральною областю або цей зв’язок було втрачено. **увімкнути** – область використовуватиметься для скорочення кожного разу, коли маршрут, що проходить через неї, є дешевшим. **вимкнути** – ця область ніколи не використовується ABR для скорочення маршрутів." #: ../../configuration/protocols/babel.rst:82 msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." -msgstr "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." - -#: ../../configuration/vpn/sstp.rst:199 +msgstr "**за замовчуванням** – увімкнути розділений горизонт на дротових інтерфейсах і вимкнути розділений горизонт на бездротових інтерфейсах. **enable** – увімкнути split-horizon на цьому інтерфейсі. **disable** – вимкнути split-horizon на цьому інтерфейсі." + +#: ../../configuration/service/pppoe-server.rst:566 +msgid "**deny**: Deny second session authorization." +msgstr "**deny**: Deny second session authorization." + +#: ../../configuration/service/pppoe-server.rst:475 +#: ../../configuration/vpn/l2tp.rst:429 +#: ../../configuration/vpn/pptp.rst:353 +#: ../../configuration/vpn/sstp.rst:387 +msgid "**deny** - Do not negotiate IPv4" +msgstr "**deny** - Do not negotiate IPv4" + +#: ../../configuration/service/pppoe-server.rst:350 +#: ../../configuration/vpn/l2tp.rst:294 +#: ../../configuration/vpn/pptp.rst:218 +#: ../../configuration/vpn/sstp.rst:252 +msgid "**deny** - Do not negotiate IPv6 (default value)" +msgstr "**deny** - Do not negotiate IPv6 (default value)" + +#: ../../configuration/service/pppoe-server.rst:507 +#: ../../configuration/vpn/l2tp.rst:461 +#: ../../configuration/vpn/pptp.rst:385 +#: ../../configuration/vpn/sstp.rst:419 msgid "**deny** - deny mppe" -msgstr "**deny** - deny mppe" +msgstr "**deny** - заборонити mppe" #: ../../configuration/nat/nat44.rst:213 msgid "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." -msgstr "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." +msgstr "**destination** - вкажіть, до яких пакетів буде застосовано переклад, лише на основі налаштованої адреси призначення та/або номера порту." #: ../../_include/interface-address-with-dhcp.txt:9 msgid "**dhcp** interface address is received by DHCP from a DHCP server on this segment." -msgstr "**dhcp** interface address is received by DHCP from a DHCP server on this segment." +msgstr "Адреса інтерфейсу **dhcp** отримується DHCP від сервера DHCP у цьому сегменті." #: ../../_include/interface-address-with-dhcp.txt:11 msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." -msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." +msgstr "Адреса інтерфейсу **dhcpv6** отримується DHCPv6 від сервера DHCPv6 у цьому сегменті." + +#: ../../configuration/service/pppoe-server.rst:565 +msgid "**disable**: Disables session control." +msgstr "**disable**: Disables session control." #: ../../configuration/service/dhcp-relay.rst:75 msgid "**discard:** Received packets which already contain relay information will be discarded." -msgstr "**discard:** Received packets which already contain relay information will be discarded." +msgstr "**відкинути:** Отримані пакети, які вже містять інформацію про ретрансляцію, будуть відхилені." #: ../../configuration/protocols/igmp-proxy.rst:23 msgid "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." -msgstr "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." +msgstr "**низхідний канал:** Низхідні мережеві інтерфейси – це інтерфейси розподілу до мереж призначення, де багатоадресні клієнти можуть приєднуватися до груп і отримувати багатоадресні дані. Необхідно налаштувати один або кілька вихідних інтерфейсів." #: ../../configuration/system/flow-accounting.rst:28 msgid "**exporter**: aggregates packets into flows and exports flow records towards one or more flow collectors" -msgstr "**exporter**: aggregates packets into flows and exports flow records towards one or more flow collectors" +msgstr "**експортер**: об’єднує пакети в потоки та експортує записи потоків до одного або кількох збирачів потоків" #: ../../configuration/firewall/general-legacy.rst:51 msgid "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" -msgstr "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" +msgstr "**firewall all-ping** впливає лише на LOCAL і завжди веде себе максимально обмежено" #: ../../configuration/firewall/global-options.rst:36 msgid "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" @@ -657,175 +730,315 @@ msgstr "**firewall global-options all-ping** affects only to LOCAL and it always #: ../../configuration/service/dhcp-relay.rst:78 msgid "**forward:** All packets are forwarded, relay information already present will be ignored." -msgstr "**forward:** All packets are forwarded, relay information already present will be ignored." +msgstr "**forward:** Усі пакети пересилаються, інформація про реле, яка вже є, ігноруватиметься." #: ../../configuration/nat/nat44.rst:159 msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." -msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." +msgstr "**inbound-interface** - застосовується лише до :ref:`destination-nat`. Він налаштовує інтерфейс, який використовується для внутрішнього трафіку, до якого застосовується правило перекладу." #: ../../configuration/nat/nat44.rst:165 msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." +#: ../../configuration/service/pppoe-server.rst:400 +#: ../../configuration/vpn/l2tp.rst:344 +#: ../../configuration/vpn/pptp.rst:268 +#: ../../configuration/vpn/sstp.rst:302 +msgid "**ipv4-addr** - Calculate interface identifier from IPv4 address." +msgstr "**ipv4-addr** - Calculate interface identifier from IPv4 address." + +#: ../../configuration/service/ipoe-server.rst:91 +msgid "**l2**: It means that clients are on same network where interface is.**(default)**" +msgstr "**l2**: It means that clients are on same network where interface is.**(default)**" + #: ../../configuration/interfaces/bonding.rst:161 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" -msgstr "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" +msgstr "**layer2** – використовує XOR апаратних MAC-адрес і поля ідентифікатора типу пакета для створення хешу. Формула така" #: ../../configuration/interfaces/bonding.rst:174 msgid "**layer2+3** - This policy uses a combination of layer2 and layer3 protocol information to generate the hash. Uses XOR of hardware MAC addresses and IP addresses to generate the hash. The formula is:" -msgstr "**layer2+3** - This policy uses a combination of layer2 and layer3 protocol information to generate the hash. Uses XOR of hardware MAC addresses and IP addresses to generate the hash. The formula is:" +msgstr "**layer2+3** – ця політика використовує комбінацію інформації про протоколи рівня 2 і 3 для створення хешу. Використовує XOR апаратних MAC-адрес та IP-адрес для створення хешу. Формула така:" #: ../../configuration/interfaces/bonding.rst:200 msgid "**layer3+4** - This policy uses upper layer protocol information, when available, to generate the hash. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves." -msgstr "**layer3+4** - This policy uses upper layer protocol information, when available, to generate the hash. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves." +msgstr "**layer3+4** – ця політика використовує інформацію протоколу верхнього рівня, якщо вона доступна, для створення хешу. Це дозволяє трафіку до певного мережевого вузла охоплювати кілька підлеглих пристроїв, хоча одне з’єднання не охоплюватиме кілька підлеглих пристроїв." #: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "**left**" -msgstr "**left**" +msgstr "**ліворуч**" #: ../../configuration/protocols/isis.rst:87 msgid "**level-1** - Act as a station (Level 1) router only." -msgstr "**level-1** - Act as a station (Level 1) router only." +msgstr "**level-1** - діяти лише як маршрутизатор станції (рівень 1)." #: ../../configuration/protocols/isis.rst:153 msgid "**level-1** - Level-1 only adjacencies are formed." -msgstr "**level-1** - Level-1 only adjacencies are formed." +msgstr "**level-1** - на рівні 1 формуються лише суміжності." #: ../../configuration/protocols/isis.rst:88 msgid "**level-1-2** - Act as a station (Level 1) router and area (Level 2) router." -msgstr "**level-1-2** - Act as a station (Level 1) router and area (Level 2) router." +msgstr "**level-1-2** - Виконувати функції маршрутизатора станції (Рівень 1) і маршрутизатора області (Рівень 2)." #: ../../configuration/protocols/isis.rst:154 msgid "**level-1-2** - Level-1-2 adjacencies are formed" -msgstr "**level-1-2** - Level-1-2 adjacencies are formed" +msgstr "**level-1-2** - формуються примикання рівня 1-2" #: ../../configuration/protocols/isis.rst:89 msgid "**level-2-only** - Act as an area (Level 2) router only." -msgstr "**level-2-only** - Act as an area (Level 2) router only." +msgstr "**level-2-only** - діяти лише як зональний (рівень 2) маршрутизатор." #: ../../configuration/protocols/isis.rst:155 msgid "**level-2-only** - Level-2 only adjacencies are formed" -msgstr "**level-2-only** - Level-2 only adjacencies are formed" +msgstr "**level-2-only** – формуються суміжності лише рівня 2" -#: ../../configuration/vpn/sstp.rst:105 +#: ../../configuration/service/ipoe-server.rst:65 +#: ../../configuration/service/pppoe-server.rst:43 +#: ../../configuration/vpn/l2tp.rst:31 +#: ../../configuration/vpn/pptp.rst:32 +#: ../../configuration/vpn/sstp.rst:58 msgid "**local**: All authentication queries are handled locally." -msgstr "**local**: All authentication queries are handled locally." +msgstr "**локальний**: усі запити автентифікації обробляються локально." + +#: ../../configuration/service/ipoe-server.rst:93 +msgid "**local**: It means that client are behind some router." +msgstr "**local**: It means that client are behind some router." #: ../../configuration/interfaces/wireguard.rst:140 msgid "**local side - commands**" -msgstr "**local side - commands**" +msgstr "**локальна сторона - команди**" #: ../../configuration/service/dns.rst:83 msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." -msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +msgstr "**log-fail** У цьому режимі рекурсор намагатиметься перевірити всі дані, які він отримує з авторитетних серверів, незалежно від бажань DNSSEC клієнта, і реєструватиме результат перевірки. Цей режим можна використовувати для визначення додаткового навантаження та кількості ймовірно фальшивих відповідей перед увімкненням повномасштабної перевірки. Відповіді на запити клієнта такі ж, як і на процес." + +#: ../../configuration/service/dns.rst:197 +msgid "**lookup-a** A Flag." +msgstr "**lookup-a** A Flag." + +#: ../../configuration/service/dns.rst:199 +msgid "**lookup-srv** S flag." +msgstr "**lookup-srv** S flag." #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." -msgstr "**narrow** - Use old style of TLVs with narrow metric." +msgstr "**вузький** – використовуйте старий стиль TLV з вузькою метрикою." -#: ../../configuration/container/index.rst:119 +#: ../../configuration/container/index.rst:124 msgid "**net-admin**: Network operations (interface, firewall, routing tables)" -msgstr "**net-admin**: Network operations (interface, firewall, routing tables)" +msgstr "**net-admin**: мережеві операції (інтерфейс, брандмауер, таблиці маршрутизації)" -#: ../../configuration/container/index.rst:120 +#: ../../configuration/container/index.rst:125 msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" -msgstr "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" +msgstr "**net-bind-service**: прив’язує сокет до привілейованих портів (номер порту менше 1024)" -#: ../../configuration/container/index.rst:121 +#: ../../configuration/container/index.rst:126 msgid "**net-raw**: Permission to create raw network sockets" -msgstr "**net-raw**: Permission to create raw network sockets" +msgstr "**net-raw**: дозвіл на створення необроблених мережевих сокетів" -#: ../../configuration/container/index.rst:100 +#: ../../configuration/container/index.rst:105 msgid "**no**: Do not restart containers on exit" -msgstr "**no**: Do not restart containers on exit" +msgstr "**ні**: не перезапускайте контейнери після виходу" + +#: ../../configuration/service/ipoe-server.rst:66 +msgid "**noauth**: Authentication disabled" +msgstr "**noauth**: Authentication disabled" + +#: ../../configuration/service/pppoe-server.rst:44 +#: ../../configuration/vpn/pptp.rst:33 +msgid "**noauth**: Authentication disabled." +msgstr "**noauth**: Authentication disabled." #: ../../configuration/service/dns.rst:66 msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." -msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." +msgstr "**вимкнено** У цьому режимі обробка DNSSEC не відбувається. Рекурсор не встановлюватиме біт DNSSEC OK (DO) у вихідних запитах і ігноруватиме біти DO та AD у запитах." -#: ../../configuration/container/index.rst:101 +#: ../../configuration/container/index.rst:106 msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" -msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +msgstr "**on-failure**: перезапускати контейнери, коли вони виходять із ненульовим кодом виходу, повторювати спроби на невизначений час (за замовчуванням)" + +#: ../../configuration/service/dns.rst:201 +msgid "**order** Rule order. Requires `<value>`." +msgstr "**order** Rule order. Requires `<value>`." #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." -msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." +msgstr "**outbound-interface** - застосовується лише до :ref:`source-nat`. Він налаштовує інтерфейс, який використовується для зовнішнього трафіку, до якого застосовується це правило перекладу." #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." -#: ../../configuration/vpn/sstp.rst:198 +#: ../../configuration/service/pppoe-server.rst:473 +#: ../../configuration/vpn/l2tp.rst:427 +#: ../../configuration/vpn/pptp.rst:351 +#: ../../configuration/vpn/sstp.rst:385 +msgid "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" + +#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/vpn/l2tp.rst:292 +#: ../../configuration/vpn/pptp.rst:216 +#: ../../configuration/vpn/sstp.rst:250 +msgid "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" +msgstr "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" + +#: ../../configuration/vpn/sstp.rst:204 msgid "**prefer** - ask client for mppe, if it rejects don't fail" -msgstr "**prefer** - ask client for mppe, if it rejects don't fail" +msgstr "**prefer** - запитувати у клієнта mppe, якщо він відхиляє, не виконуйте помилок" + +#: ../../configuration/service/pppoe-server.rst:506 +#: ../../configuration/vpn/l2tp.rst:460 +#: ../../configuration/vpn/pptp.rst:384 +#: ../../configuration/vpn/sstp.rst:418 +msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" +msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" + +#: ../../configuration/service/dns.rst:203 +msgid "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." +msgstr "**preference** Rule preference. Requires `<value>`. Defaults to 0 if not set." #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." -msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." +msgstr "**process** Коли dnssec налаштовано на обробку, поведінка подібна до процесу без підтвердження. Однак рекурсор спробує перевірити дані, якщо в запиті встановлено хоча б один із бітів DO або AD; у такому випадку він встановлює біт AD у відповідь, коли дані успішно перевірені, або надсилає SERVFAIL, коли перевірка виявляється фальшивою." #: ../../configuration/service/dns.rst:70 msgid "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." -msgstr "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." +msgstr "**process-no-validate** У цьому режимі рекурсор діє як «сервер імен, що підтримує безпеку, не перевіряє», тобто він встановлюватиме біт DO для вихідних запитів і надаватиме RRsets, пов’язані з DNSSEC (NSEC, RRSIG). клієнти, які запитують їх (за допомогою біта DO в запиті), за винятком зон, наданих через налаштування auth-zones. Він не виконуватиме жодної перевірки в цьому режимі, навіть якщо запитує клієнт." #: ../../configuration/nat/nat44.rst:181 msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." -msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." +msgstr "**протокол** - вкажіть, до яких типів протоколів застосовується це правило перекладу. Лише пакети, що відповідають зазначеному протоколу, піддаються NAT. За замовчуванням це стосується `всіх` протоколів." + +#: ../../configuration/service/dns.rst:205 +msgid "**protocol-specific** P flag." +msgstr "**protocol-specific** P flag." -#: ../../configuration/vpn/sstp.rst:103 +#: ../../configuration/service/ipoe-server.rst:63 +#: ../../configuration/service/pppoe-server.rst:41 +#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/vpn/pptp.rst:30 +#: ../../configuration/vpn/sstp.rst:56 msgid "**radius**: All authentication queries are handled by a configured RADIUS server." -msgstr "**radius**: All authentication queries are handled by a configured RADIUS server." +msgstr "**радіус**: усі запити автентифікації обробляються налаштованим сервером RADIUS." + +#: ../../configuration/service/pppoe-server.rst:391 +#: ../../configuration/service/pppoe-server.rst:398 +#: ../../configuration/vpn/l2tp.rst:335 +#: ../../configuration/vpn/l2tp.rst:342 +#: ../../configuration/vpn/pptp.rst:259 +#: ../../configuration/vpn/pptp.rst:266 +#: ../../configuration/vpn/sstp.rst:293 +#: ../../configuration/vpn/sstp.rst:300 +msgid "**random** - Random interface identifier for IPv6" +msgstr "**random** - Random interface identifier for IPv6" + +#: ../../configuration/service/dns.rst:207 +msgid "**regexp** Regular expression. Requires `<value>`." +msgstr "**regexp** Regular expression. Requires `<value>`." #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" -msgstr "**remote side - commands**" +msgstr "**віддалена сторона - команди**" + +#: ../../configuration/service/pppoe-server.rst:567 +msgid "**replace**: Terminate first session when second is authorized **(default)**" +msgstr "**replace**: Terminate first session when second is authorized **(default)**" #: ../../configuration/service/dhcp-relay.rst:81 msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." -msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." - -#: ../../configuration/vpn/sstp.rst:197 +msgstr "**replace:** Інформація про ретрансляцію, яка вже є в пакеті, видаляється та замінюється власним набором інформації про реле маршрутизатора." + +#: ../../configuration/service/dns.rst:209 +msgid "**replacement** Replacement DNS name." +msgstr "**replacement** Replacement DNS name." + +#: ../../configuration/service/pppoe-server.rst:472 +#: ../../configuration/vpn/l2tp.rst:426 +#: ../../configuration/vpn/pptp.rst:350 +#: ../../configuration/vpn/sstp.rst:384 +msgid "**require** - Require IPv4 negotiation" +msgstr "**require** - Require IPv4 negotiation" + +#: ../../configuration/service/pppoe-server.rst:347 +#: ../../configuration/vpn/l2tp.rst:291 +#: ../../configuration/vpn/pptp.rst:215 +#: ../../configuration/vpn/sstp.rst:249 +msgid "**require** - Require IPv6 negotiation" +msgstr "**require** - Require IPv6 negotiation" + +#: ../../configuration/service/pppoe-server.rst:505 +#: ../../configuration/vpn/l2tp.rst:459 +#: ../../configuration/vpn/pptp.rst:383 +#: ../../configuration/vpn/sstp.rst:417 msgid "**require** - ask client for mppe, if it rejects drop connection" -msgstr "**require** - ask client for mppe, if it rejects drop connection" +msgstr "**require** - запитувати у клієнта mppe, якщо він відхиляє розрив з'єднання" + +#: ../../configuration/service/dns.rst:211 +msgid "**resolve-uri** U flag." +msgstr "**resolve-uri** U flag." #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" -msgstr "**right**" +msgstr "**право**" -#: ../../configuration/container/index.rst:122 +#: ../../configuration/service/dns.rst:213 +msgid "**service** Service type. Requires `<value>`." +msgstr "**service** Service type. Requires `<value>`." + +#: ../../configuration/container/index.rst:127 msgid "**setpcap**: Capability sets (from bounded or inherited set)" -msgstr "**setpcap**: Capability sets (from bounded or inherited set)" +msgstr "**setpcap**: набори можливостей (з обмеженого або успадкованого набору)" + +#: ../../configuration/service/ipoe-server.rst:99 +msgid "**shared**: Multiple clients share the same network. **(default)**" +msgstr "**shared**: Multiple clients share the same network. **(default)**" #: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." -msgstr "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." +msgstr "**джерело** - визначає, до яких пакетів застосовується правило трансляції NAT на основі IP-адреси джерела пакетів і/або порту джерела. Для NAT розглядаються лише збігаються пакети." -#: ../../configuration/container/index.rst:123 +#: ../../configuration/container/index.rst:128 msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" -msgstr "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" +msgstr "**sys-admin**: операції адміністрування (quotactl, mount, sethostname, setdomainame)" -#: ../../configuration/container/index.rst:124 +#: ../../configuration/container/index.rst:129 msgid "**sys-time**: Permission to set system clock" -msgstr "**sys-time**: Permission to set system clock" +msgstr "**sys-time**: дозвіл на встановлення системного годинника" #: ../../configuration/protocols/isis.rst:101 msgid "**transition** - Send and accept both styles of TLVs during transition." -msgstr "**transition** - Send and accept both styles of TLVs during transition." +msgstr "**перехід** – надсилайте та приймайте обидва стилі TLV під час переходу." #: ../../configuration/protocols/igmp-proxy.rst:19 msgid "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." -msgstr "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." +msgstr "**upstream:** мережевий інтерфейс висхідного потоку – це вихідний інтерфейс, який відповідає за обмін даними з доступними джерелами багатоадресних даних. Може бути лише один висхідний інтерфейс." #: ../../configuration/service/dns.rst:90 msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." -msgstr "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." +msgstr "**validate** Найвищий режим обробки DNSSEC. У цьому режимі всі запити перевірятимуться та отримуватимуть відповідь SERVFAIL у разі фальшивих даних, незалежно від запиту клієнта." + +#: ../../configuration/service/ipoe-server.rst:100 +msgid "**vlan**: One VLAN per client." +msgstr "**vlan**: One VLAN per client." #: ../../configuration/protocols/isis.rst:102 msgid "**wide** - Use new style of TLVs to carry wider metric." -msgstr "**wide** - Use new style of TLVs to carry wider metric." +msgstr "**wide** – Використовуйте новий стиль TLV для ширшої метрики." + +#: ../../configuration/service/pppoe-server.rst:392 +#: ../../configuration/service/pppoe-server.rst:399 +#: ../../configuration/vpn/l2tp.rst:336 +#: ../../configuration/vpn/l2tp.rst:343 +#: ../../configuration/vpn/pptp.rst:260 +#: ../../configuration/vpn/pptp.rst:267 +#: ../../configuration/vpn/sstp.rst:294 +#: ../../configuration/vpn/sstp.rst:301 +msgid "**x:x:x:x** - Specify interface identifier for IPv6" +msgstr "**x:x:x:x** - Specify interface identifier for IPv6" #: ../../configuration/protocols/bgp.rst:143 msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." -msgstr "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." +msgstr "*bgpd* підтримує багатопротокольне розширення для BGP. Отже, якщо віддалений вузол підтримує протокол, *bgpd* може обмінюватися інформацією про IPv6 та/або групову маршрутизацію." #: ../../configuration/system/syslog.rst:112 #: ../../configuration/system/syslog.rst:171 @@ -881,13 +1094,13 @@ msgstr "0: Disable DAD" #: ../../configuration/highavailability/index.rst:267 msgid "0 if not defined, which means no refreshing." -msgstr "0 if not defined, which means no refreshing." +msgstr "0, якщо не визначено, що означає відсутність оновлення." #: ../../configuration/highavailability/index.rst:249 msgid "0 if not defined." -msgstr "0 if not defined." +msgstr "0, якщо не визначено." -#: ../../configuration/service/dhcp-server.rst:237 +#: ../../configuration/service/dhcp-server.rst:293 #: ../../configuration/system/syslog.rst:114 #: ../../configuration/system/syslog.rst:173 #: ../../configuration/trafficpolicy/index.rst:801 @@ -897,7 +1110,7 @@ msgstr "1" #: ../../configuration/nat/nat44.rst:612 msgid "1-to-1 NAT" -msgstr "1-to-1 NAT" +msgstr "1-до-1 NAT" #: ../../configuration/system/syslog.rst:132 #: ../../configuration/trafficpolicy/index.rst:269 @@ -907,11 +1120,11 @@ msgstr "10" #: ../../configuration/interfaces/ethernet.rst:51 msgid "100000 - 100 GBit/s" -msgstr "100000 - 100 GBit/s" +msgstr "100000 - 100 Гбіт/с" #: ../../configuration/interfaces/ethernet.rst:47 msgid "10000 - 10 GBit/s" -msgstr "10000 - 10 GBit/s" +msgstr "10000 - 10 Гбіт/с" #: ../../configuration/trafficpolicy/index.rst:287 msgid "100010" @@ -919,7 +1132,7 @@ msgstr "100010" #: ../../configuration/interfaces/ethernet.rst:44 msgid "1000 - 1 GBit/s" -msgstr "1000 - 1 GBit/s" +msgstr "1000 - 1 Гбіт/с" #: ../../configuration/trafficpolicy/index.rst:289 msgid "100100" @@ -931,7 +1144,7 @@ msgstr "100110" #: ../../configuration/interfaces/ethernet.rst:43 msgid "100 - 100 MBit/s" -msgstr "100 - 100 MBit/s" +msgstr "100 - 100 Мбіт/с" #: ../../configuration/trafficpolicy/index.rst:265 msgid "101110" @@ -939,18 +1152,18 @@ msgstr "101110" #: ../../configuration/nat/nat44.rst:38 msgid "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)" -msgstr "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)" +msgstr "10.0.0.0 до 10.255.255.255 (CIDR: 10.0.0.0/8)" #: ../../configuration/interfaces/ethernet.rst:42 msgid "10 - 10 MBit/s" -msgstr "10 - 10 MBit/s" +msgstr "10 - 10 Мбіт/с" #: ../../configuration/system/syslog.rst:134 #: ../../configuration/trafficpolicy/index.rst:874 msgid "11" msgstr "11" -#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:375 msgid "119" msgstr "119" @@ -960,11 +1173,11 @@ msgstr "119" msgid "12" msgstr "12" -#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:380 msgid "121, 249" msgstr "121, 249" -#: ../../configuration/service/dhcp-server.rst:304 +#: ../../configuration/service/dhcp-server.rst:360 #: ../../configuration/system/syslog.rst:138 #: ../../configuration/trafficpolicy/index.rst:870 msgid "13" @@ -976,7 +1189,7 @@ msgstr "13" msgid "14" msgstr "14" -#: ../../configuration/service/dhcp-server.rst:264 +#: ../../configuration/service/dhcp-server.rst:320 #: ../../configuration/system/syslog.rst:142 #: ../../configuration/trafficpolicy/index.rst:866 msgid "15" @@ -993,25 +1206,25 @@ msgstr "17" #: ../../configuration/nat/nat44.rst:39 msgid "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" -msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" +msgstr "172.16.0.0 до 172.31.255.255 (CIDR: 172.16.0.0/12)" #: ../../configuration/system/syslog.rst:148 #: ../../configuration/trafficpolicy/index.rst:275 msgid "18" msgstr "18" -#: ../../configuration/service/dhcp-server.rst:269 +#: ../../configuration/service/dhcp-server.rst:325 #: ../../configuration/system/syslog.rst:150 msgid "19" msgstr "19" #: ../../configuration/nat/nat44.rst:40 msgid "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" -msgstr "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" +msgstr "192.168.0.0 до 192.168.255.255 (CIDR: 192.168.0.0/16)" #: ../../configuration/service/eventhandler.rst:32 msgid "1. Create an event handler" -msgstr "1. Create an event handler" +msgstr "1. Створіть обробник події" #: ../../configuration/firewall/flowtables.rst:144 msgid "1. First packet is received on eht0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." @@ -1023,9 +1236,9 @@ msgstr "1: Enable DAD (default)" #: ../../configuration/highavailability/index.rst:277 msgid "1 if not defined." -msgstr "1 if not defined." +msgstr "1, якщо не визначено." -#: ../../configuration/service/dhcp-server.rst:243 +#: ../../configuration/service/dhcp-server.rst:299 #: ../../configuration/system/syslog.rst:116 #: ../../configuration/system/syslog.rst:178 #: ../../configuration/trafficpolicy/index.rst:799 @@ -1053,13 +1266,13 @@ msgstr "23" #: ../../configuration/interfaces/ethernet.rst:48 msgid "25000 - 25 GBit/s" -msgstr "25000 - 25 GBit/s" +msgstr "25000 - 25 Гбіт/с" #: ../../configuration/interfaces/ethernet.rst:45 msgid "2500 - 2.5 GBit/s" -msgstr "2500 - 2.5 GBit/s" +msgstr "2500 - 2,5 Гбіт/с" -#: ../../configuration/service/dhcp-server.rst:329 +#: ../../configuration/service/dhcp-server.rst:385 msgid "252" msgstr "252" @@ -1073,11 +1286,11 @@ msgstr "28" #: ../../configuration/vpn/openconnect.rst:59 msgid "2FA OTP support" -msgstr "2FA OTP support" +msgstr "Підтримка 2FA OTP" #: ../../configuration/service/eventhandler.rst:40 msgid "2. Add regex to the script" -msgstr "2. Add regex to the script" +msgstr "2. Додайте регулярний вираз до сценарію" #: ../../configuration/firewall/flowtables.rst:148 msgid "2. Since this is the first packet, connection status of this connection, so far is **new**. So neither rule 10 nor 20 are valid." @@ -1087,7 +1300,7 @@ msgstr "2. Since this is the first packet, connection status of this connection, msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." -#: ../../configuration/service/dhcp-server.rst:249 +#: ../../configuration/service/dhcp-server.rst:305 #: ../../configuration/system/syslog.rst:118 #: ../../configuration/system/syslog.rst:181 #: ../../configuration/trafficpolicy/index.rst:797 @@ -1113,9 +1326,9 @@ msgstr "38" #: ../../configuration/service/eventhandler.rst:51 msgid "3. Add a full path to the script" -msgstr "3. Add a full path to the script" +msgstr "3. Додайте повний шлях до сценарію" -#: ../../configuration/service/dhcp-server.rst:254 +#: ../../configuration/service/dhcp-server.rst:310 #: ../../configuration/system/syslog.rst:120 #: ../../configuration/system/syslog.rst:183 #: ../../configuration/trafficpolicy/index.rst:795 @@ -1125,17 +1338,17 @@ msgstr "4" #: ../../configuration/interfaces/ethernet.rst:49 msgid "40000 - 40 GBit/s" -msgstr "40000 - 40 GBit/s" +msgstr "40000 - 40 Гбіт/с" #: ../../configuration/interfaces/wireless.rst:170 msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." -msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." +msgstr "Канали 40 МГц можуть перемикати свої первинні та вторинні канали, якщо це необхідно, або створення каналу 40 МГц може бути відхилено на основі накладання BSS. Ці зміни виконуються автоматично, коли hostapd налаштовує канал 40 МГц." -#: ../../configuration/service/dhcp-server.rst:274 +#: ../../configuration/service/dhcp-server.rst:330 msgid "42" msgstr "42" -#: ../../configuration/service/dhcp-server.rst:279 +#: ../../configuration/service/dhcp-server.rst:335 msgid "44" msgstr "44" @@ -1145,7 +1358,7 @@ msgstr "46" #: ../../configuration/service/eventhandler.rst:60 msgid "4. Add optional parameters" -msgstr "4. Add optional parameters" +msgstr "4. Додайте додаткові параметри" #: ../../configuration/firewall/flowtables.rst:153 msgid "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 10." @@ -1160,13 +1373,13 @@ msgstr "5" #: ../../configuration/interfaces/ethernet.rst:50 msgid "50000 - 50 GBit/s" -msgstr "50000 - 50 GBit/s" +msgstr "50000 - 50 Гбіт/с" #: ../../configuration/interfaces/ethernet.rst:46 msgid "5000 - 5 GBit/s" -msgstr "5000 - 5 GBit/s" +msgstr "5000 - 5 Гбіт/с" -#: ../../configuration/service/dhcp-server.rst:284 +#: ../../configuration/service/dhcp-server.rst:340 msgid "54" msgstr "54" @@ -1177,9 +1390,9 @@ msgstr "5. Second packet for this connection is received by the router. Since co #: ../../configuration/highavailability/index.rst:257 #: ../../configuration/highavailability/index.rst:288 msgid "5 if not defined." -msgstr "5 if not defined." +msgstr "5, якщо не визначено." -#: ../../configuration/service/dhcp-server.rst:259 +#: ../../configuration/service/dhcp-server.rst:315 #: ../../configuration/system/syslog.rst:124 #: ../../configuration/system/syslog.rst:189 #: ../../configuration/trafficpolicy/index.rst:791 @@ -1187,19 +1400,19 @@ msgstr "5 if not defined." msgid "6" msgstr "6" -#: ../../configuration/service/dhcp-server.rst:294 +#: ../../configuration/service/dhcp-server.rst:350 msgid "66" msgstr "66" #: ../../configuration/loadbalancing/wan.rst:74 msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." -msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic." +msgstr "66% трафіку спрямовується на eth0, eth1 отримує 33% трафіку." -#: ../../configuration/service/dhcp-server.rst:299 +#: ../../configuration/service/dhcp-server.rst:355 msgid "67" msgstr "67" -#: ../../configuration/service/dhcp-server.rst:309 +#: ../../configuration/service/dhcp-server.rst:365 msgid "69" msgstr "69" @@ -1213,7 +1426,7 @@ msgstr "6in4 (SIT)" #: ../../configuration/interfaces/tunnel.rst:83 msgid "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose IP headers have the IP protocol number set to 41. This protocol number is specifically designated for IPv6 encapsulation, the IPv4 packet header is immediately followed by the IPv6 packet being carried. The encapsulation overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation. This tunneling technique is frequently used by IPv6 tunnel brokers like `Hurricane Electric`_." -msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose IP headers have the IP protocol number set to 41. This protocol number is specifically designated for IPv6 encapsulation, the IPv4 packet header is immediately followed by the IPv6 packet being carried. The encapsulation overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation. This tunneling technique is frequently used by IPv6 tunnel brokers like `Hurricane Electric`_." +msgstr "6in4 використовує тунелювання для інкапсуляції трафіку IPv6 через посилання IPv4, як визначено в :rfc:`4213`. Трафік 6in4 надсилається через IPv4 всередині пакетів IPv4, IP-заголовки яких мають номер IP-протоколу, встановлений на 41. Цей номер протоколу спеціально призначено для інкапсуляції IPv6, за заголовком пакету IPv4 одразу слідує пакет IPv6, що переноситься. Накладні витрати на інкапсуляцію — це розмір заголовка IPv4 у 20 байт, тому з MTU 1500 байт пакети IPv6 розміром 1480 байт можна надсилати без фрагментації. Ця техніка тунелювання часто використовується посередниками тунелів IPv6, такими як `Hurricane Electric`_." #: ../../configuration/system/syslog.rst:126 #: ../../configuration/system/syslog.rst:191 @@ -1222,7 +1435,7 @@ msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defin msgid "7" msgstr "7" -#: ../../configuration/service/dhcp-server.rst:314 +#: ../../configuration/service/dhcp-server.rst:370 msgid "70" msgstr "70" @@ -1232,7 +1445,7 @@ msgstr "8" #: ../../_include/interface-vlan-8021q.txt:21 msgid "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." -msgstr "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." +msgstr "Інтерфейси VLAN 802.1q представлені у VyOS як віртуальні підінтерфейси. Для цього використовується термін ``vif``." #: ../../configuration/system/syslog.rst:130 #: ../../configuration/trafficpolicy/index.rst:878 @@ -1241,23 +1454,23 @@ msgstr "9" #: ../../configuration/policy/route.rst:98 msgid "<1-65535>: Numbered port." -msgstr "<1-65535>: Numbered port." +msgstr "<1-65535>: Пронумерований порт." #: ../../configuration/policy/extcommunity-list.rst:38 msgid "<aa:nn:nn>: Extended community list regular expression." -msgstr "<aa:nn:nn>: Extended community list regular expression." +msgstr "<aa:nn:nn>: Регулярний вираз розширеного списку спільноти." #: ../../configuration/policy/route.rst:71 msgid "<h:h:h:h:h:h:h:h/x>: IPv6 prefix to match." -msgstr "<h:h:h:h:h:h:h:h/x>: IPv6 prefix to match." +msgstr "<h:h:h:h:h:h:h:h/x>: префікс IPv6 для відповідності." #: ../../configuration/policy/route.rst:72 msgid "<h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h>: IPv6 range to match." -msgstr "<h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h>: IPv6 range to match." +msgstr "<h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h> : відповідний діапазон IPv6." #: ../../configuration/policy/route.rst:70 msgid "<h:h:h:h:h:h:h:h>: IPv6 address to match." -msgstr "<h:h:h:h:h:h:h:h>: IPv6 address to match." +msgstr "<h:h:h:h:h:h:h:h>: адреса IPv6 для відповідності." #: ../../configuration/system/syslog.rst:230 msgid "<lines>" @@ -1265,290 +1478,306 @@ msgstr "<lines>" #: ../../configuration/interfaces/wireless.rst:251 msgid "<number> must be from 34 - 173. For 80 MHz channels it should be channel + 6." -msgstr "<number> must be from 34 - 173. For 80 MHz channels it should be channel + 6." +msgstr "<number>має бути від 34 до 173. Для каналів 80 МГц має бути канал +6." #: ../../configuration/protocols/ospf.rst:346 msgid "<number> – area identifier through which a virtual link goes. <A.B.C.D> – ABR router-id with which a virtual link is established. Virtual link must be configured on both routers." -msgstr "<number> – area identifier through which a virtual link goes. <A.B.C.D> – ABR router-id with which a virtual link is established. Virtual link must be configured on both routers." +msgstr "<number>– ідентифікатор області, через яку проходить віртуальне посилання.<A.B.C.D> – ідентифікатор маршрутизатора ABR, за допомогою якого встановлюється віртуальне з’єднання. Віртуальний канал має бути налаштований на обох маршрутизаторах." #: ../../configuration/policy/route.rst:97 msgid "<port name>: Named port (any name in /etc/services, e.g., http)." -msgstr "<port name>: Named port (any name in /etc/services, e.g., http)." +msgstr "<port name>: Іменований порт (будь-яка назва в /etc/services, наприклад, http)." #: ../../configuration/policy/extcommunity-list.rst:39 msgid "<rt aa:nn:nn>: Route Target regular expression." -msgstr "<rt aa:nn:nn>: Route Target regular expression." +msgstr "<rt aa:nn:nn>: регулярний вираз цільового маршруту." #: ../../configuration/policy/extcommunity-list.rst:40 msgid "<soo aa:nn:nn>: Site of Origin regular expression." -msgstr "<soo aa:nn:nn>: Site of Origin regular expression." +msgstr "<soo aa:nn:nn>: регулярний вираз Site of Origin." #: ../../configuration/policy/route.rst:99 msgid "<start>-<end>: Numbered port range (e.g., 1001-1005)." -msgstr "<start>-<end>: Numbered port range (e.g., 1001-1005)." +msgstr "<start>-<end> : діапазон нумерованих портів (наприклад, 1001-1005)." #: ../../configuration/policy/route.rst:63 msgid "<x.x.x.x/x>: Subnet to match." -msgstr "<x.x.x.x/x>: Subnet to match." +msgstr "<x.x.x.x/x>: відповідна підмережа." #: ../../configuration/policy/route.rst:64 msgid "<x.x.x.x>-<x.x.x.x>: IP range to match." -msgstr "<x.x.x.x>-<x.x.x.x>: IP range to match." +msgstr "<x.x.x.x>-<x.x.x.x> : відповідний діапазон IP." #: ../../configuration/policy/route.rst:62 msgid "<x.x.x.x>: IP address to match." -msgstr "<x.x.x.x>: IP address to match." +msgstr "<x.x.x.x>: IP-адреса для відповідності." -#: ../../configuration/pki/index.rst:252 +#: ../../configuration/pki/index.rst:283 msgid "ACME" msgstr "ACME" -#: ../../configuration/pki/index.rst:281 +#: ../../configuration/pki/index.rst:312 msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." -#: ../../configuration/service/https.rst:59 +#: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" -#: ../../configuration/protocols/static.rst:150 +#: ../../configuration/protocols/static.rst:183 msgid "ARP" msgstr "ARP" #: ../../configuration/firewall/groups.rst:129 msgid "A **domain group** represents a collection of domains." -msgstr "A **domain group** represents a collection of domains." +msgstr "**Група доменів** представляє набір доменів." #: ../../configuration/firewall/groups.rst:111 msgid "A **mac group** represents a collection of mac addresses." -msgstr "A **mac group** represents a collection of mac addresses." +msgstr "**група mac** представляє набір mac-адрес." #: ../../configuration/firewall/groups.rst:86 msgid "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." -msgstr "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." +msgstr "**Група портів** представляє лише номери портів, а не протокол. Групи портів можуть посилатися на TCP або UDP. Рекомендується створювати групи TCP і UDP окремо, щоб уникнути випадкового фільтрування непотрібних портів. Діапазони портів можна вказати за допомогою `-`." #: ../../configuration/trafficpolicy/index.rst:84 msgid "A *bit* is written as **bit**," -msgstr "A *bit* is written as **bit**," +msgstr "*біт* записується як **біт**," #: ../../configuration/protocols/rpki.rst:21 msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." -msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." +msgstr "Маршрутизатор, що розмовляє BGP, як-от VyOS, може отримувати інформацію про ROA з RPKI «програмного забезпечення перевіряючої сторони» (часто його називають просто «сервер RPKI» або «валідатор RPKI») за допомогою протоколу :abbr:`RTR (RPKI до маршрутизатора)`. Є кілька реалізацій з відкритим вихідним кодом на вибір, наприклад Routinator_ від NLNetLabs (написано на Rust), GoRTR_ і OctoRPKI_ від Cloudflare (написано на Go) і RPKI Validator_ RIPE NCC (написано на Java). Протокол RTR описано в :rfc:`8210`." -#: ../../configuration/protocols/bgp.rst:929 +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." +msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." + +#: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" -msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" +msgstr "Конфедерація BGP поділяє нашу AS на підсистеми, щоб зменшити кількість необхідних однорангових IBGP. У межах підсистеми AS нам все ще потрібен повнокомпонентний IBGP, але між цими підсистемами ми використовуємо щось, що виглядає як EBGP, але поводиться як IBGP (називається BGP конфедерації). Механізм конфедерації описано в :rfc:`5065`" #: ../../configuration/interfaces/bridge.rst:9 msgid "A Bridge is a way to connect two Ethernet segments together in a protocol independent way. Packets are forwarded based on Ethernet address, rather than IP address (like a router). Since forwarding is done at Layer 2, all protocols can go transparently through a bridge. The Linux bridge code implements a subset of the ANSI/IEEE 802.1d standard." -msgstr "A Bridge is a way to connect two Ethernet segments together in a protocol independent way. Packets are forwarded based on Ethernet address, rather than IP address (like a router). Since forwarding is done at Layer 2, all protocols can go transparently through a bridge. The Linux bridge code implements a subset of the ANSI/IEEE 802.1d standard." +msgstr "Міст — це спосіб з’єднати два сегменти Ethernet у незалежний від протоколу спосіб. Пакети пересилаються на основі адреси Ethernet, а не IP-адреси (як маршрутизатор). Оскільки пересилання здійснюється на рівні 2, усі протоколи можуть проходити прозоро через міст. Код мосту Linux реалізує підмножину стандарту ANSI/IEEE 802.1d." #: ../../configuration/interfaces/tunnel.rst:108 msgid "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." -msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." +msgstr "Тунель GRE працює на рівні 3 моделі OSI і представлений протоколом IP 47. Основна перевага тунелю GRE полягає в тому, що ви можете передавати кілька протоколів в одному тунелі. GRE також підтримує багатоадресний трафік і підтримує протоколи маршрутизації, які використовують багатоадресну передачу для формування сусідніх мереж." #: ../../configuration/firewall/general-legacy.rst:749 msgid "A Rule-Set can be applied to every interface:" -msgstr "A Rule-Set can be applied to every interface:" +msgstr "Набір правил можна застосувати до кожного інтерфейсу:" -#: ../../configuration/service/dhcp-server.rst:561 +#: ../../configuration/service/dhcp-server.rst:620 msgid "A SNTP server address can be specified for DHCPv6 clients." -msgstr "A SNTP server address can be specified for DHCPv6 clients." +msgstr "Для клієнтів DHCPv6 можна вказати адресу сервера SNTP." #: ../../configuration/vrf/index.rst:18 msgid "A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device." -msgstr "A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device." +msgstr "Пристрій VRF створюється з пов’язаною таблицею маршрутів. Потім мережеві інтерфейси підпорядковані пристрою VRF." #: ../../configuration/interfaces/tunnel.rst:114 msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." +msgstr "Тунель VyOS GRE може передавати трафік як IPv4, так і IPv6, а також може бути створений через IPv4 (gre) або IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:162 +#: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." -msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." +msgstr "Маршрутизатор VyOS із двома інтерфейсами — eth0 (WAN) і eth1 (LAN) — потрібен для реалізації конфігурації DNS із розділеним горизонтом для example.com." -#: ../../configuration/service/dhcp-server.rst:533 +#: ../../configuration/service/dhcp-server.rst:592 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." -msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." +msgstr "Домен :abbr:`NIS (Network Information Service)` можна налаштувати для використання клієнтами DHCPv6." #: ../../configuration/interfaces/tunnel.rst:121 msgid "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." -msgstr "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." +msgstr "Для базової конфігурації потрібен джерело тунелю (адреса джерела), призначення тунелю (віддалений), тип інкапсуляції (gre) та адреса (ipv4/ipv6). Нижче наведено базовий приклад конфігурації лише для IPv4, взятий із маршрутизатора VyOS і маршрутизатора Cisco IOS. Основна відмінність між цими двома конфігураціями полягає в тому, що VyOS вимагає явного налаштування типу інкапсуляції. Маршрутизатор Cisco за замовчуванням має IP-адресу GRE, інакше його також потрібно було б налаштувати." #: ../../configuration/firewall/zone.rst:73 msgid "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." -#: ../../configuration/interfaces/bridge.rst:195 -#: ../../configuration/interfaces/bridge.rst:229 +#: ../../configuration/interfaces/bridge.rst:204 +#: ../../configuration/interfaces/bridge.rst:238 msgid "A bridge named `br100`" -msgstr "A bridge named `br100`" +msgstr "Міст під назвою `бр100`" + +#: ../../configuration/container/index.rst:144 +msgid "A brief description what this network is all about." +msgstr "A brief description what this network is all about." #: ../../configuration/trafficpolicy/index.rst:147 msgid "A class can have multiple match filters:" -msgstr "A class can have multiple match filters:" +msgstr "Клас може мати кілька фільтрів відповідності:" #: ../../configuration/trafficpolicy/index.rst:307 msgid "A common example is the case of some policies which, in order to be effective, they need to be applied to an interface that is directly connected where the bottleneck is. If your router is not directly connected to the bottleneck, but some hop before it, you can emulate the bottleneck by embedding your non-shaping policy into a classful shaping one so that it takes effect." -msgstr "A common example is the case of some policies which, in order to be effective, they need to be applied to an interface that is directly connected where the bottleneck is. If your router is not directly connected to the bottleneck, but some hop before it, you can emulate the bottleneck by embedding your non-shaping policy into a classful shaping one so that it takes effect." +msgstr "Типовим прикладом є випадок деяких політик, які, щоб бути ефективними, мають бути застосовані до інтерфейсу, безпосередньо підключеного до вузького місця. Якщо ваш маршрутизатор не під’єднаний напряму до вузького місця, але є кілька стрибків перед ним, ви можете емулювати вузьке місце, вставивши свою політику неформування в політику класового формування, щоб вона набула чинності." #: ../../configuration/interfaces/openvpn.rst:538 msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" -msgstr "A complete LDAP auth OpenVPN configuration could look like the following example:" +msgstr "Повна конфігурація аутентифікації LDAP OpenVPN може виглядати так:" -#: ../../configuration/vpn/sstp.rst:335 +#: ../../configuration/service/ids.rst:84 +msgid "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" +msgstr "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" + +#: ../../configuration/vpn/sstp.rst:508 msgid "A connection attempt will be shown as:" -msgstr "A connection attempt will be shown as:" +msgstr "Спроба підключення буде показана як:" #: ../../configuration/interfaces/pppoe.rst:343 msgid "A default route is automatically installed once the interface is up. To change this behavior use the ``no-default-route`` CLI option." -msgstr "A default route is automatically installed once the interface is up. To change this behavior use the ``no-default-route`` CLI option." +msgstr "Маршрут за замовчуванням автоматично встановлюється після запуску інтерфейсу. Щоб змінити цю поведінку, скористайтеся параметром CLI ``no-default-route``." #: ../../configuration/service/broadcast-relay.rst:22 msgid "A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/appliactions." -msgstr "A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/appliactions." +msgstr "Для кожного унікального ідентифікатора реле можна додати опис. Це корисно для розрізнення кількох різних портів/програм." #: ../../configuration/highavailability/index.rst:78 msgid "A disabled group will be removed from the VRRP process and your router will not participate in VRRP for that VRID. It will disappear from operational mode commands output, rather than enter the backup state." -msgstr "A disabled group will be removed from the VRRP process and your router will not participate in VRRP for that VRID. It will disappear from operational mode commands output, rather than enter the backup state." +msgstr "Вимкнену групу буде видалено з процесу VRRP, і ваш маршрутизатор не братиме участі у VRRP для цього VRID. Він зникне з вихідних команд робочого режиму, а не перейде в резервний стан." #: ../../configuration/system/host-name.rst:34 msgid "A domain name is the label (name) assigned to a computer network and is thus unique. VyOS appends the domain name as a suffix to any unqualified name. For example, if you set the domain name `example.com`, and you would ping the unqualified name of `crux`, then VyOS qualifies the name to `crux.example.com`." -msgstr "A domain name is the label (name) assigned to a computer network and is thus unique. VyOS appends the domain name as a suffix to any unqualified name. For example, if you set the domain name `example.com`, and you would ping the unqualified name of `crux`, then VyOS qualifies the name to `crux.example.com`." +msgstr "Доменне ім’я – це мітка (ім’я), присвоєна комп’ютерній мережі, і тому вона є унікальною. VyOS додає доменне ім’я як суфікс до будь-якого некваліфікованого імені. Наприклад, якщо ви встановили ім’я домену `example.com` і ви б пінгували некваліфіковане ім’я `crux`, тоді VyOS кваліфікує це ім’я як `crux.example.com`." #: ../../configuration/nat/nat44.rst:709 msgid "A dummy interface for the provider-assigned IP;" -msgstr "A dummy interface for the provider-assigned IP;" +msgstr "Фіктивний інтерфейс для IP-адреси, призначеної постачальником;" -#: ../../configuration/highavailability/index.rst:426 +#: ../../configuration/highavailability/index.rst:436 msgid "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." -msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." +msgstr "Позначка брандмауера ``fwmark`` дозволяє використовувати кілька портів для віртуального сервера високої доступності. Він використовує значення fwmark." #: ../../configuration/interfaces/tunnel.rst:102 msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." -msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here <examples-tunnelbroker-ipv6>`." +msgstr "Повний приклад конфігурації Tunnelbroker.net можна знайти :ref:`тут<examples-tunnelbroker-ipv6> `." -#: ../../configuration/service/dhcp-server.rst:152 +#: ../../configuration/service/dhcp-server.rst:201 msgid "A generic `<name>` referencing this sync service." -msgstr "A generic `<name>` referencing this sync service." +msgstr "Загальний `<name> ` посилання на цю службу синхронізації." #: ../../configuration/system/host-name.rst:18 msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." -msgstr "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." +msgstr "Ім’я хоста — це мітка (ім’я), призначена мережевому пристрою (хосту) у мережі та використовується для відмінності одного пристрою від іншого в певних мережах або через Інтернет. З іншого боку, це буде ім’я, яке з’явиться в командному рядку." -#: ../../configuration/pki/index.rst:189 +#: ../../configuration/pki/index.rst:191 msgid "A human readable description what this CA is about." -msgstr "A human readable description what this CA is about." +msgstr "Зрозумілий для людини опис того, про що цей CA." -#: ../../configuration/pki/index.rst:228 +#: ../../configuration/pki/index.rst:230 msgid "A human readable description what this certificate is about." -msgstr "A human readable description what this certificate is about." +msgstr "Зрозумілий опис змісту цього сертифіката." #: ../../configuration/interfaces/loopback.rst:17 msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." -msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "Інтерфейс ретроспективного перегляду завжди активний, тому його можна використовувати для керування трафіком або як джерело/призначення для :abbr:`IGP (Interior Gateway Protocol)`, наприклад :ref:`routing-bgp`, тому ваше внутрішнє посилання BGP не залежить на стані фізичного зв’язку та декілька маршрутів до місця призначення. Інтерфейсу :ref:`dummy-interface` завжди слід надавати перевагу над інтерфейсом :ref:`loopback-interface`." + +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." -msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." +msgstr "Керований пристрій — це мережевий вузол, який реалізує інтерфейс SNMP, що забезпечує односпрямований (лише читання) або двонаправлений (читання та запис) доступ до інформації вузла. Керовані пристрої обмінюються інформацією про вузли з NMS. Керовані пристрої, які іноді називають елементами мережі, можуть бути будь-якими типами пристроїв, включаючи, але не обмежуючись, маршрутизатори, сервери доступу, комутатори, кабельні модеми, мости, концентратори, IP-телефони, IP-відеокамери, комп’ютерні хости та принтери." #: ../../configuration/trafficpolicy/index.rst:154 msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." -msgstr "A match filter can contain multiple criteria and will match traffic if all those criteria are true." +msgstr "Фільтр відповідності може містити кілька критеріїв і відповідатиме трафіку, якщо всі ці критерії відповідають дійсності." -#: ../../configuration/protocols/bfd.rst:138 +#: ../../configuration/protocols/bfd.rst:145 msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." -msgstr "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." +msgstr "Контрольований статичний маршрут обумовлює інсталяцію до RIB у стані роботи сеансу BFD: коли сеанс BFD активний, маршрут установлюється до RIB, але коли сеанс BFD не працює, він видаляється з RIB." #: ../../configuration/service/snmp.rst:54 msgid "A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network." -msgstr "A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network." +msgstr "Станція керування мережею виконує програми, які відстежують і контролюють керовані пристрої. NMS забезпечують основну частину ресурсів обробки та пам'яті, необхідних для керування мережею. Одна чи декілька NMS можуть існувати в будь-якій керованій мережі." #: ../../configuration/interfaces/bonding.rst:337 msgid "A new interface becomes present ``Port-channel1``, all configuration like allowed VLAN interfaces, STP will happen here." -msgstr "A new interface becomes present ``Port-channel1``, all configuration like allowed VLAN interfaces, STP will happen here." +msgstr "Новий інтерфейс стає присутнім ``Port-channel1``, уся конфігурація, як дозволені інтерфейси VLAN, STP відбуватиметься тут." #: ../../configuration/loadbalancing/wan.rst:79 msgid "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" -msgstr "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" +msgstr "Обмеження швидкості пакетів можна встановити для правила, щоб застосувати правило до трафіку вище або нижче вказаного порогу. Щоб налаштувати обмеження швидкості, використовуйте:" #: ../../configuration/firewall/flowtables.rst:44 msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." -#: ../../configuration/protocols/bgp.rst:698 +#: ../../configuration/protocols/bgp.rst:720 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." -msgstr "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." +msgstr "Штраф у розмірі 1000 нараховується щоразу, коли маршрут не виконується. Коли штрафні санкції досягають попередньо визначеного порогу (значення придушення), маршрутизатор припиняє рекламувати маршрут." #: ../../configuration/interfaces/macsec.rst:44 msgid "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." -msgstr "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." +msgstr "Для підключення цього екземпляра MACsec потрібен фізичний інтерфейс. Трафік, що виходить із цього інтерфейсу, тепер буде автентифікований/зашифрований." #: ../../configuration/nat/nat44.rst:374 msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" -msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" +msgstr "Пул адрес можна визначити за допомогою дефіса між двома IP-адресами:" -#: ../../configuration/firewall/ipv4.rst:485 +#: ../../configuration/firewall/ipv4.rst:508 #: ../../configuration/firewall/ipv6.rst:491 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." -msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." +msgstr "Порт можна встановити за допомогою номера порту або імені, визначеного тут: ``/etc/services``." #: ../../configuration/service/dns.rst:115 msgid "A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server. In practice, caches can become saturated with hundreds of thousands of hosts which are tried only once." -msgstr "A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server. In practice, caches can become saturated with hundreds of thousands of hosts which are tried only once." +msgstr "Запит, на який офіційно немає відповіді, кешується, щоб пізніше швидко заперечити існування запису, не створюючи великого навантаження на віддалений сервер. На практиці кеші можуть бути насичені сотнями тисяч хостів, які пробуються лише один раз." #: ../../configuration/vpn/dmvpn.rst:134 msgid "A received NHRP Traffic Indication will trigger the resolution and establishment of a shortcut route." -msgstr "A received NHRP Traffic Indication will trigger the resolution and establishment of a shortcut route." +msgstr "Отримана індикація дорожнього руху NHRP ініціює вирішення та встановлення скороченого маршруту." #: ../../configuration/vrf/index.rst:30 msgid "A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance." -msgstr "A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance." +msgstr "Ідентифікатор таблиці маршрутизації не можна змінити після його призначення. Його можна змінити, лише видаливши та повторно додавши екземпляр VRF." #: ../../configuration/firewall/general-legacy.rst:272 msgid "A rule-set is a named collection of firewall rules that can be applied to an interface or a zone. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." -msgstr "A rule-set is a named collection of firewall rules that can be applied to an interface or a zone. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." +msgstr "Набір правил — це іменована колекція правил брандмауера, які можна застосувати до інтерфейсу або зони. Кожне правило пронумеровано, має дію, яку слід застосувати, якщо правило збігається, і можливість вказати критерії відповідності. Пакети даних проходять правила від 1 до 999999, при першому збігу буде виконано дію правила." #: ../../configuration/policy/route.rst:12 msgid "A rule-set is a named collection of rules that can be applied to an interface. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." -msgstr "A rule-set is a named collection of rules that can be applied to an interface. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." +msgstr "Набір правил — це іменований набір правил, які можна застосувати до інтерфейсу. Кожне правило пронумеровано, має дію, яку слід застосувати, якщо правило збігається, і можливість вказати критерії відповідності. Пакети даних проходять правила від 1 до 999999, при першому збігу буде виконано дію правила." #: ../../configuration/loadbalancing/wan.rst:250 msgid "A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:" -msgstr "A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:" +msgstr "Сценарій можна запустити, коли відбувається зміна стану інтерфейсу. Сценарії запускаються з /config/scripts, для іншого розташування вкажіть повний шлях:" #: ../../configuration/protocols/segment-routing.rst:91 #: ../../configuration/protocols/segment-routing.rst:169 msgid "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" -msgstr "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" +msgstr "Ідентифікатор сегмента, який містить префікс IP-адреси, розрахований IGP у базовій мережі постачальника послуг. Префікс SID є глобально унікальним, це значення ідентифікує його" #: ../../_include/interface-disable-flow-control.txt:11 msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." -msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." +msgstr "Станція-відправник (комп’ютер або мережевий комутатор) може передавати дані швидше, ніж інший кінець з’єднання може прийняти їх. Використовуючи керування потоком, станція-одержувач може сигналізувати відправнику, вимагаючи призупинення передачі, поки одержувач не наздожене." -#: ../../configuration/service/dhcp-server.rst:589 +#: ../../configuration/service/dhcp-server.rst:648 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" -msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" +msgstr "Спільна мережа під назвою ``NET1`` обслуговує підмережу ``2001:db8::/64``" -#: ../../configuration/protocols/bgp.rst:1146 +#: ../../configuration/protocols/bgp.rst:1168 msgid "A simple BGP configuration via IPv6." -msgstr "A simple BGP configuration via IPv6." +msgstr "Проста конфігурація BGP через IPv6." #: ../../configuration/trafficpolicy/index.rst:769 msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." -msgstr "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." +msgstr "Проста політика випадкового раннього виявлення (RED) почне випадково відкидати пакети з черги до того, як вона досягне ліміту черги, таким чином уникаючи перевантаження. Це добре для TCP-з’єднань, оскільки поступове відкидання пакетів діє як сигнал для відправника щодо зниження швидкості передачі." -#: ../../configuration/protocols/bgp.rst:1101 +#: ../../configuration/protocols/bgp.rst:1123 msgid "A simple eBGP configuration:" -msgstr "A simple eBGP configuration:" +msgstr "Проста конфігурація eBGP:" #: ../../configuration/trafficpolicy/index.rst:1124 msgid "A simple example of Shaper using priorities." -msgstr "A simple example of Shaper using priorities." +msgstr "Простий приклад Shaper з використанням пріоритетів." #: ../../configuration/trafficpolicy/index.rst:532 msgid "A simple example of an FQ-CoDel policy working inside a Shaper one." -msgstr "A simple example of an FQ-CoDel policy working inside a Shaper one." +msgstr "Простий приклад політики FQ-CoDel, що працює всередині політики Shaper." #: ../../configuration/firewall/index.rst:14 msgid "A simplified traffic flow, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths can take." @@ -1560,35 +1789,35 @@ msgstr "A simplified traffic flow diagram, based on Netfilter packet flow, is sh #: ../../configuration/nat/nat66.rst:28 msgid "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." -msgstr "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." +msgstr "Єдина внутрішня мережа і зовнішня мережа. Використовуйте пристрій NAT66 для підключення однієї внутрішньої мережі до загальнодоступної мережі, а хости у внутрішній мережі використовують префікси адрес IPv6, які підтримують маршрутизацію лише в межах локального діапазону. Коли хост у внутрішній мережі отримує доступ до зовнішньої мережі, префікс адреси джерела IPv6 у повідомленні буде перетворено пристроєм NAT66 на префікс глобальної одноадресної адреси IPv6." #: ../../configuration/interfaces/wireless.rst:19 msgid "A station acts as a Wi-Fi client accessing the network through an available WAP" -msgstr "A station acts as a Wi-Fi client accessing the network through an available WAP" +msgstr "Станція діє як клієнт Wi-Fi, який отримує доступ до мережі через доступний WAP" #: ../../configuration/highavailability/index.rst:110 msgid "A sync group allows VRRP groups to transition together." -msgstr "A sync group allows VRRP groups to transition together." +msgstr "Група синхронізації дозволяє групам VRRP переходити разом." #: ../../configuration/protocols/ospf.rst:1318 msgid "A typical configuration using 2 nodes." -msgstr "A typical configuration using 2 nodes." +msgstr "Типова конфігурація з використанням 2 вузлів." #: ../../configuration/nat/nat44.rst:414 msgid "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." -msgstr "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." +msgstr "Типовою проблемою використання NAT і розміщення загальнодоступних серверів є можливість внутрішніх систем отримати доступ до внутрішнього сервера за допомогою його зовнішньої IP-адреси. Рішенням цього зазвичай є використання split-DNS для правильного вказівки хост-систем на внутрішню адресу під час внутрішніх запитів. Оскільки в багатьох невеликих мережах відсутня інфраструктура DNS, для полегшення трафіку зазвичай розгортається обхідний шлях шляхом NAT-перетворення запиту від внутрішніх хостів на адресу джерела внутрішнього інтерфейсу на брандмауері." #: ../../configuration/service/console-server.rst:40 msgid "A user friendly alias for this connection. Can be used instead of the device name when connecting." -msgstr "A user friendly alias for this connection. Can be used instead of the device name when connecting." +msgstr "Зручний псевдонім для цього підключення. Може використовуватися замість назви пристрою під час підключення." #: ../../configuration/service/console-server.rst:36 msgid "A user friendly description identifying the connected peripheral." -msgstr "A user friendly description identifying the connected peripheral." +msgstr "Зручний опис підключеного периферійного пристрою." #: ../../configuration/interfaces/bonding.rst:260 msgid "A value of 0 disables ARP monitoring. The default value is 0." -msgstr "A value of 0 disables ARP monitoring. The default value is 0." +msgstr "Значення 0 вимикає моніторинг ARP. Значення за замовчуванням 0." #: ../../configuration/interfaces/pppoe.rst:152 msgid "A value of 296 works well on very slow links (40 bytes for TCP/IP header + 256 bytes of data)." @@ -1596,194 +1825,225 @@ msgstr "A value of 296 works well on very slow links (40 bytes for TCP/IP header #: ../../configuration/trafficpolicy/index.rst:943 msgid "A very small buffer will soon start dropping packets." -msgstr "A very small buffer will soon start dropping packets." +msgstr "Дуже маленький буфер незабаром почне скидати пакети." #: ../../configuration/firewall/zone.rst:52 msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." -msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." +msgstr "Зону необхідно налаштувати перед тим, як їй призначити інтерфейс, а інтерфейс можна призначити лише одній зоні." -#: ../../configuration/service/dns.rst:397 +#: ../../configuration/service/dns.rst:411 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." msgstr "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." #: ../../configuration/vpn/l2tp.rst:173 msgid "Above command will use `10.0.0.3` as source IPv4 address for all RADIUS queries on this NAS." -msgstr "Above command will use `10.0.0.3` as source IPv4 address for all RADIUS queries on this NAS." +msgstr "Наведена вище команда використовуватиме `10.0.0.3` як вихідну адресу IPv4 для всіх запитів RADIUS на цьому NAS." #: ../../configuration/system/acceleration.rst:5 msgid "Acceleration" -msgstr "Acceleration" +msgstr "Прискорення" #: ../../configuration/service/console-server.rst:68 msgid "Accept SSH connections for the given `<device>` on TCP port `<port>`. After successfull authentication the user will be directly dropped to the connected serial device." -msgstr "Accept SSH connections for the given `<device>` on TCP port `<port>`. After successfull authentication the user will be directly dropped to the connected serial device." +msgstr "Приймати підключення SSH для вказаного `<device> `на порт TCP`<port> `. Після успішної автентифікації користувача буде безпосередньо перекинуто на підключений послідовний пристрій." #: ../../configuration/service/conntrack-sync.rst:42 msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." -msgstr "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." +msgstr "Приймати лише певні протоколи: ви можете відтворити стан потоків залежно від протоколу рівня 4." + +#: ../../configuration/service/pppoe-server.rst:384 +#: ../../configuration/vpn/l2tp.rst:328 +#: ../../configuration/vpn/pptp.rst:252 +#: ../../configuration/vpn/sstp.rst:286 +msgid "Accept peer interface identifier. By default is not defined." +msgstr "Accept peer interface identifier. By default is not defined." + +#: ../../configuration/service/ipoe-server.rst:364 +#: ../../configuration/service/pppoe-server.rst:530 +#: ../../configuration/vpn/l2tp.rst:484 +#: ../../configuration/vpn/pptp.rst:408 +#: ../../configuration/vpn/sstp.rst:442 +msgid "Acceptable rate of connections (e.g. 1/min, 60/sec)" +msgstr "Acceptable rate of connections (e.g. 1/min, 60/sec)" #: ../../configuration/policy/access-list.rst:3 msgid "Access List Policy" -msgstr "Access List Policy" +msgstr "Політика списку доступу" #: ../../configuration/policy/access-list.rst:16 msgid "Access Lists" -msgstr "Access Lists" +msgstr "Списки доступу" #: ../../configuration/system/syslog.rst:173 msgid "Action must be taken immediately - A condition that should be corrected immediately, such as a corrupted system database." -msgstr "Action must be taken immediately - A condition that should be corrected immediately, such as a corrupted system database." +msgstr "Необхідно негайно вжити заходів. Стан, який слід негайно виправити, наприклад, пошкоджена системна база даних." #: ../../configuration/system/option.rst:15 msgid "Action which will be run once the ctrl-alt-del keystroke is received." -msgstr "Action which will be run once the ctrl-alt-del keystroke is received." +msgstr "Дія, яка буде виконана після отримання клавіші ctrl-alt-del." #: ../../configuration/firewall/bridge.rst:65 #: ../../configuration/firewall/ipv4.rst:81 #: ../../configuration/firewall/ipv6.rst:81 #: ../../configuration/policy/route.rst:238 msgid "Actions" -msgstr "Actions" +msgstr "Дії" #: ../../configuration/interfaces/openvpn.rst:483 msgid "Active Directory" -msgstr "Active Directory" +msgstr "Активна Директорія" #: ../../configuration/loadbalancing/reverse-proxy.rst:135 msgid "Active health check backend server" -msgstr "Active health check backend server" +msgstr "Сервер активної перевірки справності" #: ../../configuration/service/dns.rst:45 msgid "Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC." -msgstr "Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC." +msgstr "Додайте NTA (негативний якір довіри) для цього домену. Це потрібно встановити, якщо домен не підтримує DNSSEC." #: ../../configuration/interfaces/wireless.rst:105 msgid "Add Power Constraint element to Beacon and Probe Response frames." -msgstr "Add Power Constraint element to Beacon and Probe Response frames." +msgstr "Додайте елемент Power Constraint до кадрів Beacon і Probe Response." #: ../../configuration/interfaces/l2tpv3.rst:113 msgid "Add a forwarding rule matching UDP port on your internet router." -msgstr "Add a forwarding rule matching UDP port on your internet router." +msgstr "Додайте правило переадресації, що відповідає порту UDP на вашому інтернет-маршрутизаторі." -#: ../../configuration/container/index.rst:113 +#: ../../configuration/container/index.rst:118 msgid "Add a host device to the container." -msgstr "Add a host device to the container." +msgstr "Додайте хост-пристрій до контейнера." #: ../../configuration/service/ssh.rst:84 msgid "Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: ``deny-users``, ``allow-users``, ``deny-groups`` and ``allow-groups``." -msgstr "Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: ``deny-users``, ``allow-users``, ``deny-groups`` and ``allow-groups``." +msgstr "Додайте директиву керування доступом, щоб дозволити або заборонити користувачам і групам. Директиви обробляються в такому порядку пріоритету: ``deny-users``, ``allow-users``, ``deny-groups`` і ``allow-groups``." #: ../../configuration/container/index.rst:58 msgid "Add custom environment variables. Multiple environment variables are allowed. The following commands translate to \"-e key=value\" when the container is created." -msgstr "Add custom environment variables. Multiple environment variables are allowed. The following commands translate to \"-e key=value\" when the container is created." +msgstr "Додайте спеціальні змінні середовища. Дозволено кілька змінних середовища. Наступні команди перетворюються на "-e ключ=значення" під час створення контейнера." #: ../../configuration/policy/examples.rst:109 msgid "Add default routes for routing ``table 10`` and ``table 11``" -msgstr "Add default routes for routing ``table 10`` and ``table 11``" +msgstr "Додати маршрути за замовчуванням для маршрутизації ``table 10`` і ``table 11``" #: ../../configuration/policy/examples.rst:176 msgid "Add multiple source IP in one rule with same priority" -msgstr "Add multiple source IP in one rule with same priority" +msgstr "Додайте кілька вихідних IP-адрес в одне правило з однаковим пріоритетом" #: ../../configuration/service/webproxy.rst:147 msgid "Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443" -msgstr "Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443" +msgstr "Додати новий порт до SSL-портів acl. Порти, включені за замовчуванням у SSL-порти acl: 443" #: ../../configuration/service/webproxy.rst:142 msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" -msgstr "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" +msgstr "Додати новий порт до Safe-ports acl. Порти, включені за замовчуванням у Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" -#: ../../configuration/policy/route-map.rst:221 +#: ../../configuration/policy/route-map.rst:224 msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" -msgstr "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" +msgstr "Додайте або замініть атрибут спільноти BGP у форматі ``<0-65535:0-65535>`` або зі списку загальновідомої спільноти" -#: ../../configuration/policy/route-map.rst:236 +#: ../../configuration/policy/route-map.rst:239 msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" -msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" +msgstr "Додайте або замініть атрибут великої спільноти BGP у форматі ``<0-4294967295:0-4294967295:0-4294967295>``" #: ../../configuration/policy/examples.rst:116 msgid "Add policy route matching VLAN source addresses" -msgstr "Add policy route matching VLAN source addresses" +msgstr "Додайте маршрут політики, що відповідає адресам джерел VLAN" -#: ../../configuration/pki/index.rst:217 +#: ../../configuration/pki/index.rst:219 msgid "Add public key portion for the certificate named `name` to the VyOS CLI." -msgstr "Add public key portion for the certificate named `name` to the VyOS CLI." +msgstr "Додайте частину відкритого ключа для сертифіката під назвою `name` до VyOS CLI." -#: ../../configuration/pki/index.rst:193 +#: ../../configuration/pki/index.rst:195 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." -msgstr "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." +msgstr "Додайте приватний ключ ЦС до VyOS CLI. Це ніколи не повинно залишати систему, і це потрібно лише якщо ви використовуєте VyOS як генератор сертифікатів, як зазначено вище." #: ../../configuration/vpn/remoteaccess_ipsec.rst:163 msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." -#: ../../configuration/pki/index.rst:232 +#: ../../configuration/pki/index.rst:234 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." -msgstr "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Додайте частину приватного ключа цього сертифіката до CLI. Це ніколи не повинно залишати систему, оскільки воно використовується для розшифровки даних." -#: ../../configuration/pki/index.rst:174 +#: ../../configuration/pki/index.rst:176 msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." -msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." +msgstr "Додайте загальнодоступний сертифікат ЦС для ЦС під назвою `name` до VyOS CLI." #: ../../configuration/vpn/openconnect.rst:176 msgid "Adding a 2FA with an OTP-key" -msgstr "Adding a 2FA with an OTP-key" +msgstr "Додавання 2FA з OTP-ключем" -#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +#: ../../configuration/loadbalancing/reverse-proxy.rst:301 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." -msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." +msgstr "Встановлюються додаткові глобальні параметри, включаючи обмеження на максимальну кількість з’єднань у 4000 і мінімальну версію TLS 1.3." #: ../../configuration/service/tftp-server.rst:35 msgid "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" -msgstr "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" +msgstr "Додаткова опція запуску TFTP-сервера в контексті :abbr:`VRF (віртуальна маршрутизація та переадресація)`" #: ../../configuration/interfaces/openvpn.rst:415 msgid "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." -msgstr "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." +msgstr "Крім того, кожному клієнту потрібна копія ca cert і власний ключ клієнта та файли сертифікатів. Файли є відкритими, тому їх можна скопіювати вручну з CLI. Файли ключів клієнта та сертифікатів мають бути підписані належним сертифікатом ca та згенеровані на стороні сервера." #: ../../configuration/nat/nat44.rst:760 msgid "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" -msgstr "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" +msgstr "Крім того, ми хочемо використовувати VPN лише на нашому інтерфейсі eth1 (зовнішній інтерфейс на зображенні вище)" #: ../../configuration/protocols/bgp.rst:296 msgid "Additionally you should keep in mind that this feature fundamentally disables the ability to use widely deployed BGP features. BGP unnumbered, hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities, and graceful restart." -msgstr "Additionally you should keep in mind that this feature fundamentally disables the ability to use widely deployed BGP features. BGP unnumbered, hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities, and graceful restart." +msgstr "Крім того, ви повинні мати на увазі, що ця функція принципово вимикає можливість використання широко розгорнутих функцій BGP. Ненумерований BGP, підтримка імен хостів, AS4, Addpath, оновлення маршруту, ORF, динамічні можливості та плавний перезапуск." #: ../../configuration/highavailability/index.rst:59 msgid "Address" -msgstr "Address" +msgstr "Адреса" #: ../../configuration/nat/nat44.rst:231 msgid "Address Conversion" -msgstr "Address Conversion" +msgstr "Перетворення адрес" #: ../../configuration/protocols/bgp.rst:48 msgid "Address Families" -msgstr "Address Families" +msgstr "Адреса сімей" #: ../../configuration/firewall/groups.rst:19 msgid "Address Groups" -msgstr "Address Groups" +msgstr "Групи адрес" -#: ../../configuration/service/dhcp-server.rst:592 +#: ../../configuration/service/dhcp-server.rst:651 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." -msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." +msgstr "Пул адрес має бути від ``2001:db8::100`` до ``2001:db8::199``." -#: ../../configuration/service/dhcp-server.rst:582 +#: ../../configuration/service/dhcp-server.rst:641 msgid "Address pools" -msgstr "Address pools" +msgstr "Пули адрес" #: ../../configuration/service/https.rst:33 msgid "Address to listen for HTTPS requests" -msgstr "Address to listen for HTTPS requests" +msgstr "Адреса для прослуховування запитів HTTPS" -#: ../../configuration/container/index.rst:136 +#: ../../configuration/container/index.rst:160 +msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." +msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." + +#: ../../configuration/container/index.rst:141 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." -msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." +msgstr "Додає реєстр до списку реєстрів некваліфікованого пошуку. За замовчуванням для будь-якого зображення, яке не містить реєстру в назві зображення, Vyos використовуватиме docker.io як реєстр контейнера." -#: ../../configuration/protocols/bgp.rst:647 +#: ../../configuration/protocols/bgp.rst:669 msgid "Administrative Distance" -msgstr "Administrative Distance" +msgstr "Адміністративна відстань" + +#: ../../configuration/service/ipoe-server.rst:335 +msgid "Advanced Interface Options" +msgstr "Advanced Interface Options" + +#: ../../configuration/service/ipoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:425 +#: ../../configuration/vpn/l2tp.rst:369 +#: ../../configuration/vpn/pptp.rst:293 +#: ../../configuration/vpn/sstp.rst:327 +msgid "Advanced Options" +msgstr "Advanced Options" #: ../../configuration/nat/nat44.rst:301 msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." @@ -1791,83 +2051,95 @@ msgstr "Advanced configuration can be used in order to apply source or destinati #: ../../configuration/interfaces/openvpn.rst:16 msgid "Advantages of OpenVPN are:" -msgstr "Advantages of OpenVPN are:" +msgstr "Перевагами OpenVPN є:" #: ../../configuration/service/router-advert.rst:1 msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" -msgstr "Advertise DNS server per https://tools.ietf.org/html/rfc6106" +msgstr "Оголошуйте DNS-сервер за https://tools.ietf.org/html/rfc6106" + +#: ../../configuration/service/router-advert.rst:78 +msgid "Advertising a NAT64 Prefix" +msgstr "Advertising a NAT64 Prefix" -#: ../../configuration/service/router-advert.rst:53 +#: ../../configuration/service/router-advert.rst:54 msgid "Advertising a Prefix" -msgstr "Advertising a Prefix" +msgstr "Реклама Префікс" #: ../../configuration/service/snmp.rst:165 msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" -msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" +msgstr "Після фіксації паролі відкритого тексту будуть хешовані та збережені у вашій конфігурації. Отримана конфігурація CLI виглядатиме так:" -#: ../../configuration/vrf/index.rst:325 +#: ../../configuration/vrf/index.rst:344 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." -msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." +msgstr "Після фіксації конфігурації ми можемо перевірити, чи встановлено всі виточені маршрути, і спробувати ICMP пінгувати PC1 з PC3." #: ../../configuration/vpn/remoteaccess_ipsec.rst:80 msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." -#: ../../configuration/pki/index.rst:212 +#: ../../configuration/vpn/ipsec.rst:418 +msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." +msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." + +#: ../../configuration/pki/index.rst:214 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." -msgstr "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." +msgstr "Після того, як ми імпортували сертифікат(и) ЦС, тепер ми можемо імпортувати та додавати сертифікати, які використовуються службами на цьому маршрутизаторі." + +#: ../../configuration/vpn/ipsec.rst:399 +msgid "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." +msgstr "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." #: ../../configuration/service/snmp.rst:39 msgid "Agent - software which runs on managed devices" -msgstr "Agent - software which runs on managed devices" +msgstr "Агент - програмне забезпечення, яке працює на керованих пристроях" #: ../../configuration/system/syslog.rst:173 msgid "Alert" -msgstr "Alert" +msgstr "Попередження" -#: ../../configuration/highavailability/index.rst:346 +#: ../../configuration/highavailability/index.rst:356 msgid "Algorithm" -msgstr "Algorithm" +msgstr "Алгоритм" #: ../../configuration/system/host-name.rst:13 msgid "Aliases" -msgstr "Aliases" +msgstr "Псевдоніми" -#: ../../configuration/service/dns.rst:167 +#: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" -msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" +msgstr "Усі DNS-запити для example.com мають бути направлені на DNS-сервер за адресою 192.0.2.254 і 2001:db8:cafe::1" #: ../../configuration/service/snmp.rst:204 msgid "All SNMP MIBs are located in each image of VyOS here: ``/usr/share/snmp/mibs/``" -msgstr "All SNMP MIBs are located in each image of VyOS here: ``/usr/share/snmp/mibs/``" +msgstr "Усі SNMP MIB розташовані в кожному образі VyOS тут: ``/usr/share/snmp/mibs/``" #: ../../configuration/interfaces/wwan.rst:323 msgid "All available WWAN cards have a build in, reprogrammable firmware. Most of the vendors provide a regular update to the firmware used in the baseband chip." -msgstr "All available WWAN cards have a build in, reprogrammable firmware. Most of the vendors provide a regular update to the firmware used in the baseband chip." +msgstr "Усі доступні карти WWAN мають вбудовану мікропрограму з можливістю перепрограмування. Більшість постачальників регулярно оновлюють мікропрограму, яка використовується в чіпі базової смуги." #: ../../configuration/vpn/sstp.rst:22 msgid "All certificates should be stored on VyOS under ``/config/auth``. If certificates are not stored in the ``/config`` directory they will not be migrated during a software update." -msgstr "All certificates should be stored on VyOS under ``/config/auth``. If certificates are not stored in the ``/config`` directory they will not be migrated during a software update." +msgstr "Усі сертифікати мають зберігатися у VyOS у папці ``/config/auth``. Якщо сертифікати не зберігаються в каталозі ``/config``, їх не буде перенесено під час оновлення програмного забезпечення." #: ../../configuration/system/syslog.rst:110 msgid "All facilities" -msgstr "All facilities" +msgstr "Всі зручності" #: ../../configuration/service/dhcp-relay.rst:11 msgid "All interfaces used for the DHCP relay must be configured. This includes the uplink to the DHCP server." -msgstr "All interfaces used for the DHCP relay must be configured. This includes the uplink to the DHCP server." +msgstr "Необхідно налаштувати всі інтерфейси, які використовуються для ретрансляції DHCP. Це включає висхідне з’єднання з сервером DHCP." #: ../../configuration/highavailability/index.rst:142 msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." +msgstr "Усі елементи в групі синхронізації мають бути однаково налаштовані. Якщо для однієї групи VRRP встановлено іншу затримку або пріоритет випередження, це призведе до нескінченного циклу переходу." -#: ../../configuration/service/dns.rst:169 +#: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" -msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" +msgstr "Усі інші DNS-запити будуть перенаправлені на інший набір DNS-серверів за адресами 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff і 2001:db8::2:ffff" #: ../../configuration/service/webproxy.rst:134 msgid "All reply sizes are accepted by default." -msgstr "All reply sizes are accepted by default." +msgstr "Усі розміри відповідей приймаються за замовчуванням." #: ../../configuration/protocols/pim.rst:91 msgid "All routers in the PIM network must agree on these values." @@ -1875,51 +2147,59 @@ msgstr "All routers in the PIM network must agree on these values." #: ../../configuration/system/task-scheduler.rst:10 msgid "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." -msgstr "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." +msgstr "Усі сценарії, які виконуються таким чином, виконуються від імені користувача root - це може бути небезпечно. Разом із :ref:`command-scripting` це можна використовувати для автоматизації (повторної) конфігурації." #: ../../configuration/protocols/bgp.rst:241 msgid "All these rules with OTC will help to detect and mitigate route leaks and happen automatically if local-role is set." -msgstr "All these rules with OTC will help to detect and mitigate route leaks and happen automatically if local-role is set." +msgstr "Усі ці правила з OTC допоможуть виявити та пом’якшити витоки маршрутів і відбуватимуться автоматично, якщо встановлено локальну роль." #: ../../configuration/interfaces/tunnel.rst:15 msgid "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." -msgstr "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." +msgstr "Усі ці протоколи згруповані в ``інтерфейсний тунель`` у VyOS. Давайте детальніше розглянемо протоколи та параметри, які зараз підтримуються VyOS." #: ../../configuration/firewall/zone.rst:55 msgid "All traffic between zones is affected by existing policies" -msgstr "All traffic between zones is affected by existing policies" +msgstr "На весь трафік між зонами впливають існуючі політики" #: ../../configuration/firewall/zone.rst:54 msgid "All traffic to and from an interface within a zone is permitted." -msgstr "All traffic to and from an interface within a zone is permitted." +msgstr "Весь трафік до і від інтерфейсу в межах зони дозволений." #: ../../configuration/vpn/pptp.rst:45 msgid "All tunnel sessions can be checked via:" -msgstr "All tunnel sessions can be checked via:" +msgstr "Усі сеанси тунелю можна перевірити за допомогою:" -#: ../../configuration/vpn/l2tp.rst:209 +#: ../../configuration/service/ipoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:193 +#: ../../configuration/vpn/l2tp.rst:236 +#: ../../configuration/vpn/pptp.rst:176 +#: ../../configuration/vpn/sstp.rst:209 msgid "Allocation clients ip addresses by RADIUS" -msgstr "Allocation clients ip addresses by RADIUS" +msgstr "Розподіл ip-адрес клієнтів за RADIUS" #: ../../configuration/service/ssh.rst:121 msgid "Allow ``ssh`` dynamic-protection." -msgstr "Allow ``ssh`` dynamic-protection." +msgstr "Дозволити динамічний захист ``ssh``." #: ../../configuration/service/webproxy.rst:70 msgid "Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached. It useful for working around problems with \"If-Modified-Since\" checking at certain sites." -msgstr "Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached. It useful for working around problems with \"If-Modified-Since\" checking at certain sites." +msgstr "Дозволити доступ до сайтів у домені без отримання їх із кешу проксі. Якщо вказати "vyos.net", ви зможете отримати доступ до vyos.net, але сторінки, до яких ви отримали доступ, не будуть кешовані. Це корисно для вирішення проблем із перевіркою «If-Modified-Since» на певних сайтах." #: ../../configuration/protocols/bgp.rst:274 msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." +msgstr "Дозволити bgp узгоджувати можливості extended-nexthop зі своїм партнером. Якщо ви переглядаєте локальну адресу IPv6 Link-Local, ця можливість вмикається автоматично. Якщо ви переглядаєте через глобальну адресу IPv6, увімкнення цієї команди дозволить BGP інсталювати маршрути IPv4 із IPv6 nexthops, якщо IPv4 не налаштовано на інтерфейсах." + +#: ../../configuration/service/https.rst:81 +msgid "Allow cross-origin requests from `<origin>`." +msgstr "Allow cross-origin requests from `<origin>`." -#: ../../configuration/service/dns.rst:359 +#: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." -msgstr "Allow explicit IPv6 address for the interface." +msgstr "Дозволити явну адресу IPv6 для інтерфейсу." #: ../../configuration/container/index.rst:32 msgid "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." -msgstr "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." +msgstr "Дозволити підключення до мережі в контейнері. Мережевий стек контейнера не ізольований від хоста та використовуватиме IP-адресу хоста." #: ../../configuration/service/mdns.rst:43 msgid "Allow listing additional custom domains to be browsed (in addition to the default ``local``) so that they can be reflected." @@ -1927,37 +2207,37 @@ msgstr "Allow listing additional custom domains to be browsed (in addition to th #: ../../configuration/protocols/bfd.rst:34 msgid "Allow this BFD peer to not be directly connected" -msgstr "Allow this BFD peer to not be directly connected" +msgstr "Дозволити цьому вузлу BFD не підключатися безпосередньо" #: ../../configuration/firewall/general-legacy.rst:694 msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." -msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." +msgstr "Дозволені значення fpr прапорів TCP: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` При вказівці більше ніж один прапор, прапори слід розділяти комами. ``!`` скасовує вибраний протокол." -#: ../../configuration/firewall/ipv4.rst:812 +#: ../../configuration/firewall/ipv4.rst:835 #: ../../configuration/firewall/ipv6.rst:821 #: ../../configuration/system/conntrack.rst:199 msgid "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." -#: ../../configuration/interfaces/bridge.rst:162 +#: ../../configuration/interfaces/bridge.rst:171 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." -msgstr "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." +msgstr "Дозволяє певним ідентифікаторам VLAN проходити через інтерфейс члена моста. Це може бути окремий ідентифікатор VLAN або діапазон ідентифікаторів VLAN, розділених дефісом." #: ../../configuration/loadbalancing/reverse-proxy.rst:73 msgid "Allows to define URL path matching rules for a specific service." -msgstr "Allows to define URL path matching rules for a specific service." +msgstr "Дозволяє визначати правила відповідності URL-шляху для певної служби." -#: ../../configuration/protocols/static.rst:69 +#: ../../configuration/protocols/static.rst:92 msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." -msgstr "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." +msgstr "Дозволяє налаштувати інтерфейс наступного переходу для статичного маршруту IPv4 на основі інтерфейсу. `<interface> ` буде інтерфейсом наступного стрибка, куди маршрутизується трафік для даного `<subnet> `." -#: ../../configuration/protocols/static.rst:89 +#: ../../configuration/protocols/static.rst:112 msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." -msgstr "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `<interface>` will be the next-hop interface where traffic is routed for the given `<subnet>`." +msgstr "Дозволяє налаштувати наступний інтерфейс для статичного маршруту IPv6 на основі інтерфейсу. `<interface> ` буде інтерфейсом наступного стрибка, куди маршрутизується трафік для даного `<subnet> `." #: ../../configuration/service/ssh.rst:157 msgid "Already learned known_hosts files of clients need an update as the public key will change." -msgstr "Already learned known_hosts files of clients need an update as the public key will change." +msgstr "Вже вивчені файли unknown_hosts клієнтів потребують оновлення, оскільки відкритий ключ зміниться." #: ../../configuration/firewall/bridge.rst:123 #: ../../configuration/firewall/ipv4.rst:166 @@ -1967,7 +2247,7 @@ msgstr "Also, **default-action** is an action that takes place whenever a packet #: ../../configuration/service/dhcp-relay.rst:110 msgid "Also, for backwards compatibility this configuration, which uses generic interface definition, is still valid:" -msgstr "Also, for backwards compatibility this configuration, which uses generic interface definition, is still valid:" +msgstr "Крім того, для зворотної сумісності ця конфігурація, яка використовує загальне визначення інтерфейсу, все ще дійсна:" #: ../../configuration/firewall/index.rst:15 msgid "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" @@ -1975,23 +2255,23 @@ msgstr "Also, for those who haven't updated to newer version, legacy documentati #: ../../configuration/nat/nat44.rst:288 msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." -msgstr "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." +msgstr "Також у :ref:`destination-nat` підтримується переспрямування на локальний хост. Оператор перенаправлення — це спеціальна форма Dnat, яка завжди перетворює адресу призначення на адресу локального хоста." -#: ../../configuration/protocols/static.rst:138 +#: ../../configuration/protocols/static.rst:171 msgid "Alternate Routing Tables" -msgstr "Alternate Routing Tables" +msgstr "Альтернативні таблиці маршрутизації" -#: ../../configuration/protocols/static.rst:142 +#: ../../configuration/protocols/static.rst:175 msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." -msgstr "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." +msgstr "Альтернативні таблиці маршрутизації використовуються з маршрутизацією на основі політики за допомогою :ref:`vrf`." #: ../../configuration/interfaces/vxlan.rst:342 msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" -msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" +msgstr "Як альтернатива груповій розсилці, віддалену IPv4-адресу тунелю VXLAN можна встановити безпосередньо. Давайте змінимо приклад Multicast вище:" -#: ../../configuration/service/dhcp-server.rst:116 +#: ../../configuration/service/dhcp-server.rst:132 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." -msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." +msgstr "Завжди виключайте цю адресу з будь-якого визначеного діапазону. Ця адреса ніколи не буде призначена сервером DHCP." #: ../../configuration/firewall/groups.rst:68 msgid "An **interface group** represents a collection of interfaces." @@ -1999,51 +2279,51 @@ msgstr "An **interface group** represents a collection of interfaces." #: ../../configuration/protocols/bgp.rst:26 msgid "An AS is a connected group of one or more IP prefixes run by one or more network operators which has a SINGLE and CLEARLY DEFINED routing policy." -msgstr "An AS is a connected group of one or more IP prefixes run by one or more network operators which has a SINGLE and CLEARLY DEFINED routing policy." +msgstr "AS — це пов’язана група з одного або кількох IP-префіксів, керованих одним або декількома мережевими операторами, які мають ЄДИНУ та ЧІТКО ВИЗНАЧЕНУ політику маршрутизації." #: ../../configuration/trafficpolicy/index.rst:208 msgid "An IPv4 TCP filter will only match packets with an IPv4 header length of 20 bytes (which is the majority of IPv4 packets anyway)." -msgstr "An IPv4 TCP filter will only match packets with an IPv4 header length of 20 bytes (which is the majority of IPv4 packets anyway)." +msgstr "TCP-фільтр IPv4 зіставлятиме лише пакети з довжиною заголовка IPv4 20 байтів (що в будь-якому випадку становить більшість пакетів IPv4)." #: ../../configuration/service/snmp.rst:36 msgid "An SNMP-managed network consists of three key components:" -msgstr "An SNMP-managed network consists of three key components:" +msgstr "Мережа, керована SNMP, складається з трьох ключових компонентів:" #: ../../configuration/interfaces/bonding.rst:234 msgid "An `<interface>` specifying which slave is the primary device. The specified device will always be the active slave while it is available. Only when the primary is off-line will alternate devices be used. This is useful when one slave is preferred over another, e.g., when one slave has higher throughput than another." -msgstr "An `<interface>` specifying which slave is the primary device. The specified device will always be the active slave while it is available. Only when the primary is off-line will alternate devices be used. This is useful when one slave is preferred over another, e.g., when one slave has higher throughput than another." +msgstr "An `<interface> ` вказуючи, який підлеглий пристрій є основним. Зазначений пристрій завжди буде активним веденим, поки він доступний. Альтернативні пристрої використовуватимуться лише тоді, коли основний не працює. Це корисно, коли одному підлеглому надається перевага над іншим, наприклад, коли один підлеглий пристрій має більшу пропускну здатність, ніж інший." #: ../../configuration/interfaces/wireguard.rst:90 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto." -msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto." +msgstr "Поверх асиметричного шифрування можна використовувати додатковий рівень криптографії з симетричним ключем." #: ../../configuration/interfaces/wireguard.rst:103 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates for you the required CLI command to install this PSK for a given peer." -msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates for you the required CLI command to install this PSK for a given peer." +msgstr "Поверх асиметричного шифрування можна використовувати додатковий рівень криптографії з симетричним ключем. Ця команда автоматично створює для вас необхідну команду CLI для встановлення цього PSK для даного вузла." #: ../../configuration/interfaces/wireguard.rst:247 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This is optional." -msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This is optional." +msgstr "Поверх асиметричного шифрування можна використовувати додатковий рівень криптографії з симетричним ключем. Це необов'язково." #: ../../configuration/vpn/ipsec.rst:11 msgid "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of typical site-to-site setup and you need to add special configuration for it, or adjust the source address for outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for the applications." -msgstr "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of typical site-to-site setup and you need to add special configuration for it, or adjust the source address for outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for the applications." +msgstr "Перевагою цієї схеми є те, що ви отримуєте реальний інтерфейс із власною адресою, що полегшує налаштування статичних маршрутів або використання протоколів динамічної маршрутизації без необхідності змінювати політики IPsec. Інша перевага полягає в тому, що це значно спрощує зв’язок між маршрутизаторами, що може бути складно зі звичайним IPsec, оскільки зовнішня вихідна адреса маршрутизатора зазвичай не відповідає політиці IPsec типового налаштування типу «сайт-сайт», і вам потрібно додати спеціальні конфігурацію для нього або налаштуйте адресу джерела для вихідного трафіку ваших програм. GRE/IPsec не має такої проблеми, і він повністю прозорий для програм." #: ../../configuration/service/snmp.rst:50 msgid "An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form." -msgstr "An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form." +msgstr "Агент — це програмний модуль для керування мережею, який знаходиться на керованому пристрої. Агент має локальні знання інформації про керування та перекладає цю інформацію у форму, специфічну для SNMP, або з неї." #: ../../configuration/protocols/ospf.rst:211 msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" -msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" +msgstr "Альтернативною командою може бути "mpls-te on" (Traffic Engineering)" -#: ../../configuration/firewall/ipv4.rst:373 +#: ../../configuration/firewall/ipv4.rst:396 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." #: ../../configuration/firewall/general-legacy.rst:424 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses <https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt>`_)" -msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses <https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt>`_)" +msgstr "Довільну маску мережі можна застосувати для маскування адрес, щоб відповідати лише певній частині. Це особливо корисно з IPv6 і брандмауером на основі зони, оскільки правила залишатимуться дійсними, якщо префікс IPv6 зміниться, а хост-адреса системної IPv6-адреси стане статичною (наприклад, з адресами SLAAC або `tokenized IPv6<https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt> `_)" #: ../../configuration/firewall/general-legacy.rst:424 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses <https://datatracker.ietf.org/doc/id/draft-chown-6man-tokenised-ipv6-identifiers-02.txt>`_)." @@ -2055,36 +2335,36 @@ msgstr "An arbitrary netmask can be applied to mask addresses to only match agai #: ../../configuration/firewall/zone.rst:43 msgid "An basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." -msgstr "An basic introduction to zone-based firewalls can be found `here <https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, and an example at :ref:`examples-zone-policy`." +msgstr "Базовий вступ до зональних брандмауерів можна знайти тут<https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall> `_, і приклад у :ref:`examples-zone-policy`." #: ../../configuration/interfaces/tunnel.rst:36 #: ../../configuration/interfaces/tunnel.rst:54 #: ../../configuration/interfaces/tunnel.rst:71 #: ../../configuration/interfaces/tunnel.rst:93 #: ../../configuration/interfaces/tunnel.rst:194 -#: ../../configuration/system/login.rst:195 +#: ../../configuration/system/login.rst:199 msgid "An example:" -msgstr "An example:" +msgstr "Приклад:" #: ../../configuration/service/monitoring.rst:136 msgid "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" -msgstr "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" +msgstr "Приклад конфігурації, яка надсилає метрику ``telegraf`` до віддаленої ``InfluxDB 2``" -#: ../../configuration/interfaces/bridge.rst:227 +#: ../../configuration/interfaces/bridge.rst:236 msgid "An example of creating a VLAN-aware bridge is as follows:" -msgstr "An example of creating a VLAN-aware bridge is as follows:" +msgstr "Приклад створення моста з підтримкою VLAN такий:" -#: ../../configuration/system/login.rst:149 +#: ../../configuration/system/login.rst:153 msgid "An example of key generation:" -msgstr "An example of key generation:" +msgstr "Приклад генерації ключів:" #: ../../configuration/vpn/openconnect.rst:298 msgid "An example of the data captured by a FREERADIUS server with sql accounting:" -msgstr "An example of the data captured by a FREERADIUS server with sql accounting:" +msgstr "Приклад даних, зібраних сервером FREERADIUS з обліковим записом sql:" #: ../../configuration/service/dhcp-server.rst:475 msgid "An option that takes a quoted string is set by replacing all quote characters with the string ``"`` inside the static-mapping-parameters value. The resulting line in dhcpd.conf will be ``option pxelinux.configfile \"pxelinux.cfg/01-00-15-17-44-2d-aa\";``." -msgstr "An option that takes a quoted string is set by replacing all quote characters with the string ``"`` inside the static-mapping-parameters value. The resulting line in dhcpd.conf will be ``option pxelinux.configfile \"pxelinux.cfg/01-00-15-17-44-2d-aa\";``." +msgstr "Параметр, який приймає рядок у лапках, установлюється шляхом заміни всіх символів лапок на рядок ``"`` у значенні static-mapping-parameters. Отриманий рядок у dhcpd.conf буде ``option pxelinux.configfile "pxelinux.cfg /01-00-15-17-44-2d-aa";``." #: ../../configuration/firewall/flowtables.rst:142 msgid "Analysis on what happens for desired connection:" @@ -2102,9 +2382,13 @@ msgstr "And base chain for traffic generated by the router is ``set firewall ipv msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" +#: ../../configuration/service/ids.rst:138 +msgid "And content of the script:" +msgstr "And content of the script:" + #: ../../configuration/policy/route.rst:76 msgid "And for ipv6:" -msgstr "And for ipv6:" +msgstr "І для ipv6:" #: ../../configuration/firewall/groups.rst:165 msgid "And next, some configuration example where groups are used:" @@ -2114,64 +2398,68 @@ msgstr "And next, some configuration example where groups are used:" msgid "And op-mode commands:" msgstr "And op-mode commands:" -#: ../../configuration/system/ip.rst:84 +#: ../../configuration/system/ip.rst:97 msgid "And the different IPv4 **reset** commands available:" -msgstr "And the different IPv4 **reset** commands available:" +msgstr "І різні доступні команди **скидання** IPv4:" #: ../../configuration/interfaces/bonding.rst:185 #: ../../configuration/interfaces/bonding.rst:214 msgid "And then hash is reduced modulo slave count." -msgstr "And then hash is reduced modulo slave count." +msgstr "Потім хеш зменшується за модулем кількості підпорядкованих." #: ../../configuration/nat/nat44.rst:614 msgid "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT configuration, both DNAT and SNAT are used to NAT all traffic from an external IP address to an internal IP address and vice-versa." -msgstr "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT configuration, both DNAT and SNAT are used to NAT all traffic from an external IP address to an internal IP address and vice-versa." +msgstr "Інший термін, який часто використовують для DNAT, це **1-to-1 NAT**. Для конфігурації NAT 1-до-1 і DNAT, і SNAT використовуються для NAT усього трафіку із зовнішньої IP-адреси на внутрішню IP-адресу та навпаки." #: ../../configuration/protocols/mpls.rst:63 msgid "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." -msgstr "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." +msgstr "Інша річ, про яку слід пам’ятати щодо LDP, це те, що, подібно до BGP, це протокол, який працює поверх TCP. Однак він не має можливості виконувати щось на кшталт можливості оновлення, наприклад можливості оновлення маршруту BGP. Тому, можливо, доведеться перезавантажити сусіда, щоб зміна можливостей або зміна конфігурації працювала." + +#: ../../configuration/vpn/ipsec.rst:549 +msgid "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/vrf/index.rst:52 #: ../../configuration/vrf/index.rst:62 msgid "Apply a route-map filter to routes for the specified protocol." -msgstr "Apply a route-map filter to routes for the specified protocol." +msgstr "Застосуйте фільтр карти маршруту до маршрутів для зазначеного протоколу." #: ../../configuration/system/ip.rst:39 msgid "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" -msgstr "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" +msgstr "Застосуйте фільтр карти маршруту до маршрутів для зазначеного протоколу. Можна використовувати такі протоколи: any, babel, bgp,connected, eigrp, isis, kernel, ospf, rip, static, table" #: ../../configuration/system/ipv6.rst:35 msgid "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" -msgstr "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" +msgstr "Застосуйте фільтр карти маршруту до маршрутів для зазначеного протоколу. Можна використовувати наступні протоколи: any, babel, bgp,connected, isis, kernel, ospfv3, ripng, static, table" #: ../../configuration/policy/examples.rst:128 msgid "Apply routing policy to **inbound** direction of out VLAN interfaces" -msgstr "Apply routing policy to **inbound** direction of out VLAN interfaces" +msgstr "Застосуйте політику маршрутизації до **вхідного** напрямку вихідних інтерфейсів VLAN" #: ../../configuration/firewall/zone.rst:101 msgid "Applying a Rule-Set to a Zone" -msgstr "Applying a Rule-Set to a Zone" +msgstr "Застосування набору правил до зони" #: ../../configuration/firewall/general-legacy.rst:747 msgid "Applying a Rule-Set to an Interface" -msgstr "Applying a Rule-Set to an Interface" +msgstr "Застосування набору правил до інтерфейсу" -#: ../../configuration/trafficpolicy/index.rst:1150 +#: ../../configuration/trafficpolicy/index.rst:1218 msgid "Applying a traffic policy" -msgstr "Applying a traffic policy" +msgstr "Застосування політики дорожнього руху" #: ../../configuration/protocols/ospf.rst:218 #: ../../configuration/protocols/ospf.rst:1122 msgid "Area Configuration" -msgstr "Area Configuration" +msgstr "Конфігурація області" #: ../../configuration/protocols/isis.rst:55 msgid "Area identifier: ``0001`` IS-IS area number (numberical area ``1``)" -msgstr "Area identifier: ``0001`` IS-IS area number (numberical area ``1``)" +msgstr "Ідентифікатор області: ``0001`` Номер області IS-IS (числова область ``1``)" #: ../../configuration/system/task-scheduler.rst:38 msgid "Arguments which will be passed to the executable." -msgstr "Arguments which will be passed to the executable." +msgstr "Аргументи, які будуть передані у виконуваний файл." #: ../../configuration/interfaces/bonding.rst:396 msgid "Arista EOS" @@ -2179,7 +2467,7 @@ msgstr "Arista EOS" #: ../../configuration/interfaces/bonding.rst:381 msgid "Aruba/HP" -msgstr "Aruba/HP" +msgstr "Аруба/HP" #: ../../configuration/interfaces/pppoe.rst:207 #: ../../configuration/interfaces/pppoe.rst:253 @@ -2187,19 +2475,19 @@ msgstr "Aruba/HP" #: ../../_include/interface-ip.txt:4 #: ../../_include/interface-ipv6.txt:60 msgid "As Internet wide PMTU discovery rarely works, we sometimes need to clamp our TCP MSS value to a specific value. This is a field in the TCP options part of a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'." -msgstr "As Internet wide PMTU discovery rarely works, we sometimes need to clamp our TCP MSS value to a specific value. This is a field in the TCP options part of a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'." +msgstr "Оскільки виявлення PMTU в Інтернеті рідко працює, нам іноді потрібно закріпити значення TCP MSS до певного значення. Це поле в частині параметрів TCP пакета SYN. Встановлюючи значення MSS, ви однозначно повідомляєте віддаленій стороні «не намагайтеся надсилати мені пакети, більші за це значення»." #: ../../configuration/vpn/sstp.rst:19 msgid "As SSTP provides PPP via a SSL/TLS channel the use of either publically signed certificates as well as a private PKI is required." -msgstr "As SSTP provides PPP via a SSL/TLS channel the use of either publically signed certificates as well as a private PKI is required." +msgstr "Оскільки SSTP забезпечує PPP через канал SSL/TLS, потрібне використання публічно підписаних сертифікатів, а також приватного PKI." #: ../../configuration/interfaces/vxlan.rst:61 msgid "As VyOS is Linux based the default port used is not using 4789 as the default IANA-assigned destination UDP port number. Instead VyOS uses the Linux default port of 8472." -msgstr "As VyOS is Linux based the default port used is not using 4789 as the default IANA-assigned destination UDP port number. Instead VyOS uses the Linux default port of 8472." +msgstr "Оскільки VyOS базується на Linux, використовуваний порт за замовчуванням не використовує 4789 як стандартний номер UDP-порту призначення, призначеного IANA. Натомість VyOS використовує стандартний порт Linux 8472." #: ../../configuration/interfaces/vxlan.rst:34 msgid "As VyOS is based on Linux and there was no official IANA port assigned for VXLAN, VyOS uses a default port of 8472. You can change the port on a per VXLAN interface basis to get it working across multiple vendors." -msgstr "As VyOS is based on Linux and there was no official IANA port assigned for VXLAN, VyOS uses a default port of 8472. You can change the port on a per VXLAN interface basis to get it working across multiple vendors." +msgstr "Оскільки VyOS базується на Linux і не було офіційного порту IANA, призначеного для VXLAN, VyOS використовує порт за замовчуванням 8472. Ви можете змінити порт для кожного інтерфейсу VXLAN, щоб він працював у кількох постачальників." #: ../../configuration/firewall/index.rst:7 msgid "As VyOS is based on Linux it leverages its firewall. The Netfilter project created iptables and its successor nftables for the Linux kernel to work directly on packet data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g., a web server OR another device)." @@ -2207,31 +2495,35 @@ msgstr "As VyOS is based on Linux it leverages its firewall. The Netfilter proje #: ../../configuration/interfaces/wwan.rst:326 msgid "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, also the firmware can be reprogrammed." -msgstr "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, also the firmware can be reprogrammed." +msgstr "Оскільки VyOS використовує інтерфейс QMI для підключення до модемних карт WWAN, мікропрограму також можна перепрограмувати." #: ../../configuration/trafficpolicy/index.rst:940 msgid "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte buffer if you want to reach your configured rate." -msgstr "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte buffer if you want to reach your configured rate." +msgstr "Для довідки: для 10 Мбіт/с на Intel вам може знадобитися принаймні 10 Кбайт буфера, якщо ви хочете досягти налаштованої швидкості." #: ../../configuration/interfaces/openvpn.rst:666 msgid "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." -msgstr "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." +msgstr "У результаті обробка кожного пакета стає більш ефективною, потенційно використовуючи підтримку розвантаження апаратного шифрування, доступну в ядрі." #: ../../configuration/firewall/zone.rst:68 msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." -msgstr "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." +msgstr "Як альтернатива безпосередньому застосуванню політики до інтерфейсу можна створити брандмауер на основі зони, щоб спростити налаштування, коли кілька інтерфейсів належать до однієї зони безпеки. Замість того, щоб застосовувати набори правил до інтерфейсів, вони застосовуються до пар вихідної зони та зони призначення." + +#: ../../configuration/vpn/ipsec.rst:523 +msgid "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." +msgstr "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." #: ../../configuration/firewall/flowtables.rst:109 msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." -#: ../../configuration/system/option.rst:80 +#: ../../configuration/system/option.rst:110 msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." -msgstr "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." +msgstr "Оскільки все більше і більше маршрутизаторів працюють на гіпервізорах, особливо з :abbr:`NOS (мережевою операційною системою)` як VyOS, стає все менше сенсу використовувати статичні прив’язки ресурсів, такі як ``smp-affinity``, наявні у VyOS 1.2 і раніше, щоб закріпити певні обробники переривань для конкретних процесорів." #: ../../configuration/nat/nat44.rst:26 msgid "As network address translation modifies the IP address information in packets, NAT implementations may vary in their specific behavior in various addressing cases and their effect on network traffic. The specifics of NAT behavior are not commonly documented by vendors of equipment containing NAT implementations." -msgstr "As network address translation modifies the IP address information in packets, NAT implementations may vary in their specific behavior in various addressing cases and their effect on network traffic. The specifics of NAT behavior are not commonly documented by vendors of equipment containing NAT implementations." +msgstr "Оскільки трансляція мережевої адреси змінює інформацію IP-адреси в пакетах, реалізація NAT може відрізнятися за своєю конкретною поведінкою в різних випадках адресації та своїм впливом на мережевий трафік. Специфіка поведінки NAT зазвичай не документується постачальниками обладнання, що містить реалізацію NAT." #: ../../configuration/interfaces/openvpn.rst:48 msgid "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys or x.509 certificates." @@ -2239,7 +2531,7 @@ msgstr "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys #: ../../configuration/vpn/pptp.rst:10 msgid "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." -msgstr "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." +msgstr "За замовчуванням і якщо не визначено інше, mschap-v2 використовується для автентифікації, а mppe 128-bit (без стану) для шифрування. Якщо в конфігурації не встановлено адресу шлюзу, використовується найнижча IP-адреса з /24 клієнтського IP-пулу. Наприклад, у прикладі нижче це буде 192.168.0.1." #: ../../configuration/firewall/groups.rst:147 msgid "As said before, once firewall groups are created, they can be referenced either in firewall, nat, nat66 and/or policy-route rules." @@ -2247,11 +2539,11 @@ msgstr "As said before, once firewall groups are created, they can be referenced #: ../../configuration/trafficpolicy/index.rst:196 msgid "As shown in the example above, one of the possibilities to match packets is based on marks done by the firewall, `that can give you a great deal of flexibility`_." -msgstr "As shown in the example above, one of the possibilities to match packets is based on marks done by the firewall, `that can give you a great deal of flexibility`_." +msgstr "Як показано в наведеному вище прикладі, одна з можливостей зіставлення пакетів базується на позначках, зроблених брандмауером, «що може надати вам велику гнучкість»." #: ../../configuration/trafficpolicy/index.rst:323 msgid "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies." -msgstr "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies." +msgstr "Як показано в останній команді прикладу вище, параметр `queue-type` дозволяє ці комбінації. Ви зможете використовувати його в багатьох політиках." #: ../../configuration/firewall/index.rst:176 msgid "As the example image below shows, the device now needs rules to allow/block traffic to or from the services running on the device that have open connections on that interface." @@ -2263,187 +2555,202 @@ msgstr "As the example image below shows, the device was configured with rules b #: ../../configuration/interfaces/tunnel.rst:69 msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." -msgstr "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." +msgstr "Як випливає з назви, це IPv4, інкапсульований у IPv6, як це просто." -#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/l2tp.rst:86 msgid "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" -msgstr "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" +msgstr "А також наведене нижче, щоб дозволити проходження NAT (коли NAT виявляється клієнтом VPN, ESP інкапсулюється в UDP для проходження NAT):" #: ../../configuration/trafficpolicy/index.rst:997 msgid "As with other policies, Round-Robin can embed_ another policy into a class through the ``queue-type`` setting." -msgstr "As with other policies, Round-Robin can embed_ another policy into a class through the ``queue-type`` setting." +msgstr "Як і в інших політиках, Round-Robin може вставляти іншу політику в клас за допомогою параметра ``queue-type``." #: ../../configuration/trafficpolicy/index.rst:1076 msgid "As with other policies, Shaper can embed_ other policies into its classes through the ``queue-type`` setting and then configure their parameters." -msgstr "As with other policies, Shaper can embed_ other policies into its classes through the ``queue-type`` setting and then configure their parameters." +msgstr "Як і з іншими політиками, Shaper може вбудовувати_ інші політики у свої класи за допомогою параметра ``queue-type``, а потім налаштовувати їхні параметри." #: ../../configuration/trafficpolicy/index.rst:718 msgid "As with other policies, you can define different type of matching rules for your classes:" -msgstr "As with other policies, you can define different type of matching rules for your classes:" +msgstr "Як і в інших політиках, ви можете визначити різні типи правил відповідності для своїх класів:" #: ../../configuration/trafficpolicy/index.rst:734 msgid "As with other policies, you can embed_ other policies into the classes (and default) of your Priority Queue policy through the ``queue-type`` setting:" -msgstr "As with other policies, you can embed_ other policies into the classes (and default) of your Priority Queue policy through the ``queue-type`` setting:" +msgstr "Як і з іншими політиками, ви можете вставляти інші політики в класи (і за замовчуванням) вашої політики пріоритетної черги за допомогою параметра ``queue-type``:" #: ../../configuration/interfaces/vxlan.rst:285 msgid "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" -msgstr "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" +msgstr "Як бачите, конфігурація Leaf2 і Leaf3 майже ідентична. Вище наведено багато команд, я спробую розповісти їх детальніше нижче, опис команд розміщено під вікнами команд:" #: ../../configuration/firewall/general-legacy.rst:770 msgid "As you can see in the example here, you can assign the same rule-set to several interfaces. An interface can only have one rule-set per chain." -msgstr "As you can see in the example here, you can assign the same rule-set to several interfaces. An interface can only have one rule-set per chain." +msgstr "Як ви можете бачити в прикладі тут, ви можете призначити той самий набір правил кільком інтерфейсам. Інтерфейс може мати лише один набір правил на ланцюг." #: ../../configuration/interfaces/bridge.rst:35 msgid "Assign `<member>` interface to bridge `<interface>`. A completion helper will help you with all allowed interfaces which can be bridged. This includes :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless-interface`, :ref:`tunnel-interface` and :ref:`geneve-interface`." -msgstr "Assign `<member>` interface to bridge `<interface>`. A completion helper will help you with all allowed interfaces which can be bridged. This includes :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless-interface`, :ref:`tunnel-interface` and :ref:`geneve-interface`." +msgstr "Призначити `<member> `інтерфейс до мосту`<interface> `. Помічник завершення допоможе вам з усіма дозволеними інтерфейсами, які можна з’єднати мостом. Це включає :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless -interface`, :ref:`tunnel-interface` і :ref:`geneve-interface`." #: ../../configuration/loadbalancing/reverse-proxy.rst:86 msgid "Assign a specific backend to a rule" -msgstr "Assign a specific backend to a rule" +msgstr "Призначте певну серверну частину до правила" -#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:98 msgid "Assign interface identified by `<interface>` to VRF named `<name>`." -msgstr "Assign interface identified by `<interface>` to VRF named `<name>`." +msgstr "Призначити інтерфейс, позначений `<interface> ` до VRF під назвою `<name> `." #: ../../configuration/interfaces/bonding.rst:324 msgid "Assign member interfaces to PortChannel" -msgstr "Assign member interfaces to PortChannel" +msgstr "Призначте інтерфейси учасників для PortChannel" -#: ../../configuration/vpn/sstp.rst:80 +#: ../../configuration/service/pppoe-server.rst:437 +#: ../../configuration/vpn/l2tp.rst:381 +#: ../../configuration/vpn/pptp.rst:305 +#: ../../configuration/vpn/sstp.rst:339 msgid "Assign static IP address to `<user>` account." -msgstr "Assign static IP address to `<user>` account." +msgstr "Призначте статичну IP-адресу для `<user> ` обліковий запис." -#: ../../configuration/service/dhcp-server.rst:97 +#: ../../configuration/service/dhcp-server.rst:113 msgid "Assign the IP address to this machine for `<time>` seconds." -msgstr "Assign the IP address to this machine for `<time>` seconds." +msgstr "Призначте IP-адресу цій машині для `<time> ` секунд." -#: ../../configuration/system/login.rst:62 +#: ../../configuration/system/login.rst:66 msgid "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." -msgstr "Assign the SSH public key portion `<key>` identified by per-key `<identifier>` to the local user `<username>`." +msgstr "Призначте частину відкритого ключа SSH `<key> ` ідентифікований за ключем `<identifier> ` локальному користувачеві `<username> `." #: ../../configuration/interfaces/wireguard.rst:174 msgid "Associates the previously generated private key to a specific WireGuard interface. The private key can be generate via the command" -msgstr "Associates the previously generated private key to a specific WireGuard interface. The private key can be generate via the command" +msgstr "Пов’язує раніше згенерований закритий ключ із певним інтерфейсом WireGuard. Закритий ключ можна згенерувати за допомогою команди" #: ../../configuration/interfaces/wireguard.rst:232 msgid "Assure that your firewall rules allow the traffic, in which case you have a working VPN using WireGuard." -msgstr "Assure that your firewall rules allow the traffic, in which case you have a working VPN using WireGuard." +msgstr "Переконайтеся, що ваші правила брандмауера дозволяють трафік, і в цьому випадку у вас є робоча VPN за допомогою WireGuard." #: ../../configuration/trafficpolicy/index.rst:269 msgid "Assured Forwarding(AF) 11" -msgstr "Assured Forwarding(AF) 11" +msgstr "Гарантована пересилка (AF) 11" #: ../../configuration/trafficpolicy/index.rst:271 msgid "Assured Forwarding(AF) 12" -msgstr "Assured Forwarding(AF) 12" +msgstr "Гарантована пересилка (AF) 12" #: ../../configuration/trafficpolicy/index.rst:273 msgid "Assured Forwarding(AF) 13" -msgstr "Assured Forwarding(AF) 13" +msgstr "Гарантована пересилка (AF) 13" #: ../../configuration/trafficpolicy/index.rst:275 msgid "Assured Forwarding(AF) 21" -msgstr "Assured Forwarding(AF) 21" +msgstr "Гарантована пересилка (AF) 21" #: ../../configuration/trafficpolicy/index.rst:277 msgid "Assured Forwarding(AF) 22" -msgstr "Assured Forwarding(AF) 22" +msgstr "Гарантована пересилка (AF) 22" #: ../../configuration/trafficpolicy/index.rst:279 msgid "Assured Forwarding(AF) 23" -msgstr "Assured Forwarding(AF) 23" +msgstr "Гарантована пересилка (AF) 23" #: ../../configuration/trafficpolicy/index.rst:281 msgid "Assured Forwarding(AF) 31" -msgstr "Assured Forwarding(AF) 31" +msgstr "Гарантована пересилка (AF) 31" #: ../../configuration/trafficpolicy/index.rst:283 msgid "Assured Forwarding(AF) 32" -msgstr "Assured Forwarding(AF) 32" +msgstr "Гарантована пересилка (AF) 32" #: ../../configuration/trafficpolicy/index.rst:285 msgid "Assured Forwarding(AF) 33" -msgstr "Assured Forwarding(AF) 33" +msgstr "Гарантована пересилка (AF) 33" #: ../../configuration/trafficpolicy/index.rst:287 msgid "Assured Forwarding(AF) 41" -msgstr "Assured Forwarding(AF) 41" +msgstr "Гарантована пересилка (AF) 41" #: ../../configuration/trafficpolicy/index.rst:289 msgid "Assured Forwarding(AF) 42" -msgstr "Assured Forwarding(AF) 42" +msgstr "Гарантована пересилка (AF) 42" #: ../../configuration/trafficpolicy/index.rst:291 msgid "Assured Forwarding(AF) 43" -msgstr "Assured Forwarding(AF) 43" +msgstr "Гарантована пересилка (AF) 43" #: ../../configuration/trafficpolicy/index.rst:980 msgid "At every round, the deficit counter adds the quantum so that even large packets will have their opportunity to be dequeued." -msgstr "At every round, the deficit counter adds the quantum so that even large packets will have their opportunity to be dequeued." +msgstr "У кожному раунді лічильник дефіциту додає квант, щоб навіть великі пакети мали можливість вийти з черги." #: ../../configuration/firewall/general-legacy.rst:972 msgid "At the moment it not possible to look at the whole firewall log with VyOS operational commands. All logs will save to ``/var/logs/messages``. For example: ``grep '10.10.0.10' /var/log/messages``" -msgstr "At the moment it not possible to look at the whole firewall log with VyOS operational commands. All logs will save to ``/var/logs/messages``. For example: ``grep '10.10.0.10' /var/log/messages``" +msgstr "На даний момент неможливо переглянути весь журнал брандмауера за допомогою операційних команд VyOS. Усі журнали будуть збережені в ``/var/logs/messages``. Наприклад: ``grep '10.10.0.10' /var/log/messages``" #: ../../configuration/system/lcd.rst:31 msgid "At the time of this writing the following displays are supported:" -msgstr "At the time of this writing the following displays are supported:" +msgstr "На момент написання цієї статті підтримуються такі дисплеї:" #: ../../configuration/trafficpolicy/index.rst:490 msgid "At very low rates (below 3Mbit), besides tuning `quantum` (300 keeps being ok) you may also want to increase `target` to something like 15ms and increase `interval` to something around 150 ms." -msgstr "At very low rates (below 3Mbit), besides tuning `quantum` (300 keeps being ok) you may also want to increase `target` to something like 15ms and increase `interval` to something around 150 ms." +msgstr "На дуже низьких швидкостях (нижче 3 Мбіт), окрім налаштування `quantum` (300 продовжує бути нормальним), ви також можете збільшити `target` приблизно до 15 мс і збільшити `interval` приблизно до 150 мс." #: ../../configuration/container/index.rst:42 msgid "Attaches user-defined network to a container. Only one network must be specified and must already exist." -msgstr "Attaches user-defined network to a container. Only one network must be specified and must already exist." +msgstr "Приєднує визначену користувачем мережу до контейнера. Потрібно вказати лише одну мережу, яка вже має існувати." #: ../../configuration/service/webproxy.rst:152 msgid "Authentication" -msgstr "Authentication" +msgstr "Аутентифікація" -#: ../../configuration/interfaces/ethernet.rst:99 +#: ../../configuration/service/ipoe-server.rst:310 +#: ../../configuration/service/pppoe-server.rst:428 +#: ../../configuration/vpn/l2tp.rst:372 +#: ../../configuration/vpn/pptp.rst:296 +#: ../../configuration/vpn/sstp.rst:330 +msgid "Authentication Advanced Options" +msgstr "Authentication Advanced Options" + +#: ../../configuration/interfaces/ethernet.rst:115 msgid "Authentication (EAPoL)" -msgstr "Authentication (EAPoL)" +msgstr "Автентифікація (EAPoL)" #: ../../configuration/service/monitoring.rst:10 msgid "Authentication application client-id." -msgstr "Authentication application client-id." +msgstr "Ідентифікатор клієнта програми автентифікації." #: ../../configuration/service/monitoring.rst:14 msgid "Authentication application client-secret." -msgstr "Authentication application client-secret." +msgstr "Програма автентифікації клієнт-секрет." #: ../../configuration/service/monitoring.rst:18 msgid "Authentication application tenant-id" -msgstr "Authentication application tenant-id" +msgstr "Ідентифікатор клієнта програми автентифікації" #: ../../configuration/interfaces/openvpn.rst:449 msgid "Authentication is done by using the ``openvpn-auth-ldap.so`` plugin which is shipped with every VyOS installation. A dedicated configuration file is required. It is best practise to store it in ``/config`` to survive image updates" -msgstr "Authentication is done by using the ``openvpn-auth-ldap.so`` plugin which is shipped with every VyOS installation. A dedicated configuration file is required. It is best practise to store it in ``/config`` to survive image updates" +msgstr "Автентифікація здійснюється за допомогою плагіна ``openvpn-auth-ldap.so``, який постачається з кожною інсталяцією VyOS. Потрібен спеціальний файл конфігурації. Найкраще зберігати його в ``/config``, щоб витримати оновлення зображення" #: ../../configuration/service/monitoring.rst:114 msgid "Authentication organization name" -msgstr "Authentication organization name" +msgstr "Назва організації автентифікації" #: ../../configuration/service/monitoring.rst:118 msgid "Authentication token" -msgstr "Authentication token" +msgstr "маркер аутентифікації" #: ../../configuration/service/snmp.rst:140 msgid "Authentication – to verify that the message is from a valid source." -msgstr "Authentication – to verify that the message is from a valid source." +msgstr "Автентифікація – щоб переконатися, що повідомлення надійшло з дійсного джерела." + +#: ../../configuration/service/dns.rst:147 +msgid "Authoritative zones" +msgstr "Authoritative zones" #: ../../configuration/service/monitoring.rst:92 msgid "Authorization token" -msgstr "Authorization token" +msgstr "Маркер авторизації" -#: ../../configuration/service/pppoe-server.rst:159 +#: ../../configuration/service/pppoe-server.rst:228 msgid "Automatic VLAN Creation" -msgstr "Automatic VLAN Creation" +msgstr "Автоматичне створення VLAN" -#: ../../configuration/service/ipoe-server.rst:96 +#: ../../configuration/service/ipoe-server.rst:97 msgid "Automatic VLAN creation" -msgstr "Automatic VLAN creation" +msgstr "Автоматичне створення VLAN" #: ../../configuration/protocols/pim.rst:137 msgid "Automatically create BFD session for each RIP peer discovered in this interface. When the BFD session monitor signalize that the link is down the RIP peer is removed and all the learned routes associated with that peer are removed." @@ -2451,31 +2758,31 @@ msgstr "Automatically create BFD session for each RIP peer discovered in this in #: ../../configuration/system/option.rst:19 msgid "Automatically reboot system on kernel panic after 60 seconds." -msgstr "Automatically reboot system on kernel panic after 60 seconds." +msgstr "Автоматичне перезавантаження системи при паніці ядра через 60 секунд." #: ../../configuration/protocols/bgp.rst:22 msgid "Autonomous Systems" -msgstr "Autonomous Systems" +msgstr "Автономні системи" #: ../../configuration/nat/nat44.rst:384 msgid "Avoiding \"leaky\" NAT" -msgstr "Avoiding \"leaky\" NAT" +msgstr "Уникнення "дірявого" NAT" #: ../../configuration/service/monitoring.rst:5 msgid "Azure-data-explorer" -msgstr "Azure-data-explorer" +msgstr "Провідник даних Azure" #: ../../configuration/protocols/bfd.rst:9 msgid "BFD" msgstr "BFD" -#: ../../configuration/protocols/bfd.rst:136 +#: ../../configuration/protocols/bfd.rst:143 msgid "BFD Static Route Monitoring" -msgstr "BFD Static Route Monitoring" +msgstr "Моніторинг статичного маршруту BFD" #: ../../configuration/protocols/bfd.rst:17 msgid "BFD sends lots of small UDP packets very quickly to ensures that the peer is still alive." -msgstr "BFD sends lots of small UDP packets very quickly to ensures that the peer is still alive." +msgstr "BFD надсилає багато маленьких UDP-пакетів дуже швидко, щоб переконатися, що одноранговий пристрій все ще живий." #: ../../configuration/protocols/bgp.rst:5 msgid "BGP" @@ -2483,114 +2790,120 @@ msgstr "BGP" #: ../../configuration/policy/as-path-list.rst:3 msgid "BGP - AS Path Policy" -msgstr "BGP - AS Path Policy" +msgstr "BGP - політика шляху AS" #: ../../configuration/policy/community-list.rst:3 msgid "BGP - Community List" -msgstr "BGP - Community List" +msgstr "BGP - Список спільноти" #: ../../configuration/policy/extcommunity-list.rst:3 msgid "BGP - Extended Community List" -msgstr "BGP - Extended Community List" +msgstr "BGP - розширений список спільноти" #: ../../configuration/policy/large-community-list.rst:3 msgid "BGP - Large Community List" -msgstr "BGP - Large Community List" +msgstr "BGP - великий список спільноти" #: ../../configuration/policy/examples.rst:3 msgid "BGP Example" -msgstr "BGP Example" +msgstr "Приклад BGP" #: ../../configuration/protocols/bgp.rst:169 msgid "BGP Router Configuration" -msgstr "BGP Router Configuration" +msgstr "Конфігурація маршрутизатора BGP" -#: ../../configuration/protocols/bgp.rst:888 +#: ../../configuration/protocols/bgp.rst:910 msgid "BGP Scaling Configuration" -msgstr "BGP Scaling Configuration" +msgstr "Конфігурація масштабування BGP" #: ../../configuration/policy/route-map.rst:197 msgid "BGP aggregator attribute: AS number or IP address of an aggregation." -msgstr "BGP aggregator attribute: AS number or IP address of an aggregation." +msgstr "Атрибут агрегатора BGP: номер AS або IP-адреса агрегату." #: ../../configuration/policy/route-map.rst:41 msgid "BGP as-path list to match." -msgstr "BGP as-path list to match." +msgstr "Список BGP as-path для відповідності." -#: ../../configuration/policy/route-map.rst:216 +#: ../../configuration/policy/route-map.rst:219 msgid "BGP atomic aggregate attribute." -msgstr "BGP atomic aggregate attribute." +msgstr "Атрибут атомарного агрегату BGP." #: ../../configuration/policy/route-map.rst:46 msgid "BGP community-list to match." -msgstr "BGP community-list to match." +msgstr "Список спільноти BGP для відповідності." #: ../../configuration/policy/route-map.rst:56 msgid "BGP extended community to match." -msgstr "BGP extended community to match." +msgstr "Розширена спільнота BGP відповідає." #: ../../configuration/protocols/bgp.rst:212 msgid "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" -msgstr "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add route leak prevention, detection and mitigation. The local Role value is negotiated with the new BGP Role capability which has a built-in check of the corresponding value. In case of a mismatch the new OPEN Roles Mismatch Notification <2, 11> would be sent. The correct Role pairs are:" +msgstr "Ролі BGP визначені в RFC :rfc:`9234` і забезпечують простий спосіб додавання запобігання витоку маршруту, виявлення та пом’якшення. Значення локальної ролі узгоджується з новою можливістю ролі BGP, яка має вбудовану перевірку відповідного значення. У разі невідповідності буде надіслано нове сповіщення про невідповідність ролей OPEN <2, 11>. Правильні пари ролей:" -#: ../../configuration/protocols/bgp.rst:890 +#: ../../configuration/protocols/bgp.rst:912 msgid "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." -msgstr "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." +msgstr "Маршрутизатори BGP, підключені всередині однієї AS через BGP, належать до внутрішнього сеансу BGP або IBGP. Щоб запобігти зацикленню таблиці маршрутизації, вузол IBGP не рекламує маршрути, отримані IBGP, іншому вузлу IBGP (механізм Split Horizon). Таким чином, IBGP вимагає повної сітки всіх однорангових пристроїв. Для великих мереж це швидко стає немасштабованим." -#: ../../configuration/vrf/index.rst:413 +#: ../../configuration/vrf/index.rst:432 msgid "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." -msgstr "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." +msgstr "Маршрути BGP можуть просочуватися (тобто копіюватися) між одноадресним VRF RIB і VPN SAFI RIB VRF за замовчуванням для використання в L3VPN на основі MPLS. Одноадресні маршрути також можуть просочуватися між будь-якими VRF (включно з одноадресним RIB екземпляра BGP за замовчуванням). Також доступний синтаксис швидкого доступу для визначення витоку з одного VRF до іншого VRF, використовуючи VPN RIB за замовчуванням як посередника. Поширеним застосуванням функції VRF-VRF є підключення приватного домену маршрутизації клієнта до служби VPN постачальника. Витік налаштовується з точки зору окремого VRF: імпорт стосується маршрутів, витоку з VPN до одноадресної VRF, тоді як експорт стосується маршрутів, витоку з одноадресної VRF до VPN." #: ../../configuration/protocols/babel.rst:5 msgid "Babel" -msgstr "Babel" +msgstr "Бабель" #: ../../configuration/protocols/babel.rst:14 msgid "Babel a dual stack protocol. A single Babel instance is able to perform routing for both IPv4 and IPv6." -msgstr "Babel a dual stack protocol. A single Babel instance is able to perform routing for both IPv4 and IPv6." +msgstr "Babel — протокол подвійного стеку. Один екземпляр Babel може виконувати маршрутизацію як для IPv4, так і для IPv6." #: ../../configuration/protocols/babel.rst:7 msgid "Babel is a modern routing protocol designed to be robust and efficient both in ordinary wired networks and in wireless mesh networks. By default, it uses hop-count on wired networks and a variant of ETX on wireless links, It can be configured to take radio diversity into account and to automatically compute a link's latency and include it in the metric. It is defined in :rfc:`8966`." -msgstr "Babel is a modern routing protocol designed to be robust and efficient both in ordinary wired networks and in wireless mesh networks. By default, it uses hop-count on wired networks and a variant of ETX on wireless links, It can be configured to take radio diversity into account and to automatically compute a link's latency and include it in the metric. It is defined in :rfc:`8966`." +msgstr "Babel — це сучасний протокол маршрутизації, розроблений як надійний і ефективний як у звичайних дротових мережах, так і в бездротових сітчастих мережах. За замовчуванням він використовує підрахунок переходів у дротових мережах і варіант ETX у бездротових з’єднаннях. Його можна налаштувати для врахування рознесеності радіозв’язку та автоматичного обчислення затримки зв’язку та включення його до метрики. Він визначений у :rfc:`8966`." #: ../../configuration/loadbalancing/reverse-proxy.rst:95 msgid "Backend" msgstr "Backend" +#: ../../configuration/loadbalancing/reverse-proxy.rst:339 +msgid "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." +msgstr "Backend service certificates are checked against the certificate authority specified in the configuration, which could be an internal CA." + #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "Balance algorithms:" -msgstr "Balance algorithms:" +msgstr "Алгоритми балансу:" #: ../../configuration/loadbalancing/wan.rst:36 msgid "Balancing Rules" -msgstr "Balancing Rules" +msgstr "Правила балансування" -#: ../../configuration/loadbalancing/reverse-proxy.rst:211 +#: ../../configuration/loadbalancing/reverse-proxy.rst:252 msgid "Balancing based on domain name" -msgstr "Balancing based on domain name" +msgstr "Балансування на основі доменного імені" -#: ../../configuration/service/ipoe-server.rst:122 -#: ../../configuration/service/pppoe-server.rst:182 -#: ../../configuration/vpn/l2tp.rst:113 +#: ../../configuration/loadbalancing/reverse-proxy.rst:365 +msgid "Balancing with HTTP health checks" +msgstr "Balancing with HTTP health checks" + +#: ../../configuration/service/pppoe-server.rst:251 msgid "Bandwidth Shaping" -msgstr "Bandwidth Shaping" +msgstr "Формування пропускної здатності" -#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/ipoe-server.rst:129 #: ../../configuration/vpn/l2tp.rst:118 msgid "Bandwidth Shaping for local users" -msgstr "Bandwidth Shaping for local users" +msgstr "Формування пропускної здатності для локальних користувачів" -#: ../../configuration/service/pppoe-server.rst:184 +#: ../../configuration/service/pppoe-server.rst:253 msgid "Bandwidth rate limits can be set for local users or RADIUS based attributes." -msgstr "Bandwidth rate limits can be set for local users or RADIUS based attributes." +msgstr "Обмеження швидкості смуги пропускання можна встановити для локальних користувачів або атрибутів на основі RADIUS." #: ../../configuration/vpn/l2tp.rst:115 msgid "Bandwidth rate limits can be set for local users or via RADIUS based attributes." -msgstr "Bandwidth rate limits can be set for local users or via RADIUS based attributes." +msgstr "Обмеження швидкості пропускання можна встановити для локальних користувачів або за допомогою атрибутів на основі RADIUS." -#: ../../configuration/service/ipoe-server.rst:124 +#: ../../configuration/service/ipoe-server.rst:125 msgid "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." -msgstr "Bandwidth rate limits can be set for local users within the configuration or via RADIUS based attributes." +msgstr "Обмеження пропускної здатності можна встановити для локальних користувачів у конфігурації або за допомогою атрибутів на основі RADIUS." #: ../../configuration/firewall/ipv4.rst:54 msgid "Base chain is for traffic toward the router is ``set firewall ipv4 input filter ...``" @@ -2602,143 +2915,151 @@ msgstr "Base chain is for traffic toward the router is ``set firewall ipv6 input #: ../../configuration/vpn/dmvpn.rst:34 msgid "Baseline DMVPN topology" -msgstr "Baseline DMVPN topology" +msgstr "Базова топологія DMVPN" #: ../../configuration/protocols/bgp.rst:17 msgid "Basic Concepts" -msgstr "Basic Concepts" +msgstr "Основні поняття" #: ../../configuration/protocols/pim6.rst:26 msgid "Basic commands" -msgstr "Basic commands" +msgstr "Основні команди" #: ../../configuration/policy/access-list.rst:9 msgid "Basic filtering can be done using access-list and access-list6." -msgstr "Basic filtering can be done using access-list and access-list6." +msgstr "Базову фільтрацію можна виконати за допомогою access-list і access-list6." #: ../../configuration/policy/access-list.rst:46 msgid "Basic filtering could also be applied to IPv6 traffic." -msgstr "Basic filtering could also be applied to IPv6 traffic." +msgstr "Базову фільтрацію також можна застосувати до трафіку IPv6." #: ../../configuration/highavailability/index.rst:26 msgid "Basic setup" -msgstr "Basic setup" +msgstr "Базове налаштування" #: ../../configuration/vpn/openconnect.rst:262 msgid "Be sure to set a sane default config in the default config file, this will be loaded in the case that a user is authenticated and no file is found in the configured directory matching the users username/group." -msgstr "Be sure to set a sane default config in the default config file, this will be loaded in the case that a user is authenticated and no file is found in the configured directory matching the users username/group." +msgstr "Обов’язково встановіть правильну конфігурацію за замовчуванням у файлі конфігурації за замовчуванням, вона буде завантажена у випадку, якщо користувач автентифікований і в налаштованому каталозі не знайдено жодного файлу, який би відповідав імені користувача/групі користувачів." #: ../../configuration/interfaces/wireless.rst:235 msgid "Beamforming capabilities:" -msgstr "Beamforming capabilities:" +msgstr "Можливості формування променя:" #: ../../configuration/interfaces/bonding.rst:142 msgid "Because an aggregator cannot be active without at least one available link, setting this option to 0 or to 1 has the exact same effect." -msgstr "Because an aggregator cannot be active without at least one available link, setting this option to 0 or to 1 has the exact same effect." +msgstr "Оскільки агрегатор не може бути активним без принаймні одного доступного посилання, встановлення цього параметра на 0 або на 1 має точно такий самий ефект." #: ../../configuration/loadbalancing/wan.rst:235 msgid "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" -msgstr "Because existing sessions do not automatically fail over to a new path, the session table can be flushed on each connection state change:" +msgstr "Оскільки наявні сеанси не переходять автоматично на новий шлях, таблицю сеансів можна скидати під час кожної зміни стану з’єднання:" -#: ../../configuration/interfaces/ethernet.rst:70 +#: ../../configuration/interfaces/ethernet.rst:86 msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." -msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." +msgstr "Перш ніж увімкнути будь-яке розвантаження сегментації апаратного забезпечення, у GSO потрібне відповідне розвантаження програмного забезпечення. Інакше стає можливим перенаправлення кадру між пристроями та його передача буде неможливою." #: ../../configuration/firewall/zone.rst:103 msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." -msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." +msgstr "Перш ніж ви зможете застосувати набір правил до зони, вам потрібно спочатку створити зони." + +#: ../../configuration/service/dns.rst:169 +msgid "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" +msgstr "Below are a list of record types available to be configured within VyOS. Some records support special `<name>` keywords:" -#: ../../configuration/vpn/site2site_ipsec.rst:422 +#: ../../configuration/vpn/site2site_ipsec.rst:425 msgid "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." -msgstr "Below flow-chart could be a quick reference for the close-action combination depending on how the peer is configured." +msgstr "Наведена нижче блок-схема може бути короткою довідкою для комбінації близьких дій залежно від того, як налаштовано одноранговий вузол." #: ../../configuration/vpn/l2tp.rst:93 msgid "Below is an example to configure a LNS:" -msgstr "Below is an example to configure a LNS:" +msgstr "Нижче наведено приклад налаштування LNS:" #: ../../configuration/trafficpolicy/index.rst:267 msgid "Best effort traffic, default" -msgstr "Best effort traffic, default" +msgstr "Максимальний трафік, за умовчанням" #: ../../configuration/service/console-server.rst:23 msgid "Between computers, the most common configuration used was \"8N1\": eight bit characters, with one start bit, one stop bit, and no parity bit. Thus 10 Baud times are used to send a single character, and so dividing the signalling bit-rate by ten results in the overall transmission speed in characters per second. This is also the default setting if none of those options are defined." -msgstr "Between computers, the most common configuration used was \"8N1\": eight bit characters, with one start bit, one stop bit, and no parity bit. Thus 10 Baud times are used to send a single character, and so dividing the signalling bit-rate by ten results in the overall transmission speed in characters per second. This is also the default setting if none of those options are defined." +msgstr "Серед комп’ютерів найпоширенішою конфігурацією була «8N1»: вісім бітових символів з одним початковим бітом, одним стоп-бітом і без біта парності. Таким чином, для надсилання одного символу використовується 10 бод, і тому розділення бітрейту сигналу на десять призводить до загальної швидкості передачі в символах за секунду. Це також налаштування за замовчуванням, якщо жоден із цих параметрів не визначено." #: ../../configuration/nat/nat44.rst:104 msgid "Bidirectional NAT" -msgstr "Bidirectional NAT" +msgstr "Двонаправлений NAT" #: ../../configuration/trafficpolicy/index.rst:262 msgid "Binary value" -msgstr "Binary value" +msgstr "Двійкова величина" + +#: ../../configuration/container/index.rst:153 +msgid "Bind container network to a given VRF instance." +msgstr "Bind container network to a given VRF instance." #: ../../configuration/protocols/bfd.rst:39 msgid "Bind listener to specific interface/address, mandatory for IPv6" -msgstr "Bind listener to specific interface/address, mandatory for IPv6" +msgstr "Прив’язати слухача до певного інтерфейсу/адреси, обов’язково для IPv6" #: ../../configuration/interfaces/vxlan.rst:306 msgid "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." -msgstr "Binds eth1.241 and vxlan241 to each other by making them both member interfaces of the same bridge." +msgstr "Пов’язує eth1.241 і vxlan241 один з одним, роблячи їх інтерфейсами-членами одного мосту." -#: ../../configuration/protocols/static.rst:108 +#: ../../configuration/protocols/static.rst:142 msgid "Blackhole" -msgstr "Blackhole" +msgstr "Чорна діра" #: ../../configuration/service/ssh.rst:130 msgid "Block source IP in seconds. Subsequent blocks increase by a factor of 1.5 The default is 120." -msgstr "Block source IP in seconds. Subsequent blocks increase by a factor of 1.5 The default is 120." +msgstr "Заблокуйте вихідний IP за лічені секунди. Наступні блоки збільшуються в 1,5 рази. За замовчуванням 120." #: ../../configuration/service/ssh.rst:139 msgid "Block source IP when their cumulative attack score exceeds threshold. The default is 30." -msgstr "Block source IP when their cumulative attack score exceeds threshold. The default is 30." +msgstr "Блокувати вихідну IP-адресу, коли їхній сукупний показник атаки перевищує порогове значення. За замовчуванням 30." #: ../../configuration/loadbalancing/wan.rst:264 msgid "Blocking call with no timeout. System will become unresponsive if script does not return!" -msgstr "Blocking call with no timeout. System will become unresponsive if script does not return!" +msgstr "Блокування виклику без тайм-ауту. Система перестане відповідати, якщо сценарій не повернеться!" #: ../../configuration/policy/route-map.rst:155 msgid "Boarder Gateway Protocol (BGP) origin code to match." -msgstr "Boarder Gateway Protocol (BGP) origin code to match." +msgstr "Код джерела протоколу BGP (Borderer Gateway Protocol) для відповідності." #: ../../configuration/interfaces/bonding.rst:7 msgid "Bond / Link Aggregation" -msgstr "Bond / Link Aggregation" +msgstr "Об’єднання / Агрегація посилань" #: ../../configuration/interfaces/bonding.rst:34 msgid "Bond options" -msgstr "Bond options" +msgstr "Опціони облігацій" -#: ../../configuration/service/dhcp-server.rst:306 +#: ../../configuration/service/dhcp-server.rst:362 msgid "Boot image length in 512-octet blocks" -msgstr "Boot image length in 512-octet blocks" +msgstr "Довжина завантажувального образу в блоках по 512 октетів" -#: ../../configuration/service/dhcp-server.rst:301 +#: ../../configuration/service/dhcp-server.rst:357 msgid "Bootstrap file name" -msgstr "Bootstrap file name" +msgstr "Ім'я файлу початкового завантаження" #: ../../configuration/interfaces/vxlan.rst:123 msgid "Both IPv4 and IPv6 multicast is possible." -msgstr "Both IPv4 and IPv6 multicast is possible." +msgstr "Можлива багатоадресна передача як IPv4, так і IPv6." #: ../../configuration/system/login.rst:13 msgid "Both local administered and remote administered :abbr:`RADIUS (Remote Authentication Dial-In User Service)` accounts are supported." -msgstr "Both local administered and remote administered :abbr:`RADIUS (Remote Authentication Dial-In User Service)` accounts are supported." +msgstr "Підтримуються як локальні, так і віддалені облікові записи :abbr:`RADIUS (Remote Authentication Dial-In User Service)`." #: ../../_include/interface-ip.txt:88 msgid "Both replies and requests type gratuitous arp will trigger the ARP table to be updated, if this setting is on." -msgstr "Both replies and requests type gratuitous arp will trigger the ARP table to be updated, if this setting is on." +msgstr "Як відповіді, так і запити типу gratuitous arp ініціюватимуть оновлення таблиці ARP, якщо цей параметр увімкнено." #: ../../configuration/interfaces/openvpn.rst:428 msgid "Branch 1's router might have the following lines:" -msgstr "Branch 1's router might have the following lines:" +msgstr "Маршрутизатор гілки 1 може мати такі рядки:" #: ../../configuration/interfaces/bridge.rst:7 msgid "Bridge" -msgstr "Bridge" +msgstr "Міст" #: ../../configuration/interfaces/l2tpv3.rst:165 msgid "Bridge:" -msgstr "Bridge:" +msgstr "міст:" #: ../../configuration/firewall/bridge.rst:7 msgid "Bridge Firewall Configuration" @@ -2746,156 +3067,172 @@ msgstr "Bridge Firewall Configuration" #: ../../configuration/interfaces/bridge.rst:66 msgid "Bridge Options" -msgstr "Bridge Options" +msgstr "Параметри мосту" #: ../../configuration/firewall/bridge.rst:56 msgid "Bridge Rules" msgstr "Bridge Rules" -#: ../../configuration/interfaces/bridge.rst:198 -#: ../../configuration/interfaces/bridge.rst:233 +#: ../../configuration/interfaces/bridge.rst:207 +#: ../../configuration/interfaces/bridge.rst:242 msgid "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" -msgstr "Bridge answers on IP address 192.0.2.1/24 and 2001:db8::ffff/64" +msgstr "Bridge відповідає на IP-адресу 192.0.2.1/24 і 2001:db8::ffff/64" #: ../../configuration/interfaces/bridge.rst:74 msgid "Bridge maximum aging `<time>` in seconds (default: 20)." -msgstr "Bridge maximum aging `<time>` in seconds (default: 20)." +msgstr "Міст максимального старіння `<time> ` у секундах (за замовчуванням: 20)." + +#: ../../configuration/service/ipoe-server.rst:360 +#: ../../configuration/service/pppoe-server.rst:526 +#: ../../configuration/vpn/l2tp.rst:480 +#: ../../configuration/vpn/pptp.rst:404 +#: ../../configuration/vpn/sstp.rst:438 +msgid "Burst count" +msgstr "Burst count" #: ../../configuration/interfaces/pppoe.rst:41 msgid "Business Users" -msgstr "Business Users" +msgstr "Бізнес-користувачі" #: ../../configuration/trafficpolicy/index.rst:35 msgid "But before learning to configure your policy, we will warn you about the different units you can use and also show you what *classes* are and how they work, as some policies may require you to configure them." -msgstr "But before learning to configure your policy, we will warn you about the different units you can use and also show you what *classes* are and how they work, as some policies may require you to configure them." +msgstr "Але перш ніж навчитися налаштовувати вашу політику, ми попередимо вас про різні одиниці, які ви можете використовувати, а також покажемо вам, що таке *класи* і як вони працюють, оскільки деякі політики можуть вимагати їх налаштування." #: ../../configuration/protocols/bgp.rst:155 msgid "By default, FRR will bring up peering with minimal common capability for the both sides. For example, if the local router has unicast and multicast capabilities and the remote router only has unicast capability the local router will establish the connection with unicast only capability. When there are no common capabilities, FRR sends Unsupported Capability error and then resets the connection." -msgstr "By default, FRR will bring up peering with minimal common capability for the both sides. For example, if the local router has unicast and multicast capabilities and the remote router only has unicast capability the local router will establish the connection with unicast only capability. When there are no common capabilities, FRR sends Unsupported Capability error and then resets the connection." +msgstr "За замовчуванням FRR викличе піринг із мінімальними спільними можливостями для обох сторін. Наприклад, якщо локальний маршрутизатор має можливості одноадресної та багатоадресної передачі, а віддалений маршрутизатор має лише можливість одноадресної передачі, локальний маршрутизатор встановить з’єднання лише з можливістю одноадресної передачі. Якщо загальних можливостей немає, FRR надсилає повідомлення про помилку Unsupported Capability, а потім скидає з’єднання." #: ../../configuration/protocols/bgp.rst:519 msgid "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." -msgstr "By default, VyOS does not advertise a default route (0.0.0.0/0) even if it is in routing table. When you want to announce default routes to the peer, use this command. Using optional argument :cfgcmd:`route-map` you can inject the default route to given neighbor only if the conditions in the route map are met." +msgstr "За замовчуванням VyOS не рекламує маршрут за замовчуванням (0.0.0.0/0), навіть якщо він є в таблиці маршрутизації. Якщо ви хочете оголосити маршрути за замовчуванням одноранговому вузлу, використовуйте цю команду. Використовуючи необов’язковий аргумент :cfgcmd:`route-map`, ви можете додати маршрут за замовчуванням до заданого сусіда лише за умови виконання умов у карті маршруту." -#: ../../configuration/system/login.rst:126 +#: ../../configuration/system/login.rst:130 msgid "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." -msgstr "By default, a new token is generated every 30 seconds by the mobile application. In order to compensate for possible time-skew between the client and the server, an extra token before and after the current time is allowed. This allows for a time skew of up to 30 seconds between authentication server and client." +msgstr "За замовчуванням мобільний додаток генерує новий маркер кожні 30 секунд. Щоб компенсувати можливу розбіжність у часі між клієнтом і сервером, допускається додатковий маркер до та після поточного часу. Це дозволяє до 30 секунд розбіжності між сервером автентифікації та клієнтом." -#: ../../configuration/service/dns.rst:393 +#: ../../configuration/service/dns.rst:495 msgid "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." -msgstr "By default, ddclient_ will update a dynamic dns record using the IP address directly attached to the interface. If your VyOS instance is behind NAT, your record will be updated to point to your internal IP." +msgstr "За замовчуванням ddclient_ оновлюватиме динамічний запис DNS, використовуючи IP-адресу, безпосередньо приєднану до інтерфейсу. Якщо ваш екземпляр VyOS знаходиться за NAT, ваш запис буде оновлено, щоб вказати на вашу внутрішню IP-адресу." -#: ../../configuration/protocols/rpki.rst:91 +#: ../../configuration/protocols/rpki.rst:89 msgid "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." -msgstr "By default, enabling RPKI does not change best path selection. In particular, invalid prefixes will still be considered during best path selection. However, the router can be configured to ignore all invalid prefixes." +msgstr "За замовчуванням увімкнення RPKI не змінює вибір найкращого шляху. Зокрема, під час вибору найкращого шляху розглядатимуться недійсні префікси. Однак маршрутизатор можна налаштувати так, щоб він ігнорував усі недійсні префікси." #: ../../configuration/protocols/ospf.rst:534 #: ../../configuration/protocols/ospf.rst:1246 msgid "By default, it supports both planned and unplanned outages." -msgstr "By default, it supports both planned and unplanned outages." +msgstr "За замовчуванням він підтримує як планові, так і незаплановані відключення." + +#: ../../configuration/protocols/bgp.rst:661 +msgid "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." +msgstr "By default, locally advertised prefixes use the implicit-null label to encode in the outgoing NLRI." #: ../../configuration/service/https.rst:45 msgid "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." -msgstr "By default, nginx exposes the local API on all virtual servers. Use this to restrict nginx to one or more virtual hosts." +msgstr "За замовчуванням nginx надає локальний API на всіх віртуальних серверах. Використовуйте це, щоб обмежити nginx одним або кількома віртуальними хостами." #: ../../configuration/system/flow-accounting.rst:60 msgid "By default, recorded flows will be saved internally and can be listed with the CLI command. You may disable using the local in-memory table with the command:" -msgstr "By default, recorded flows will be saved internally and can be listed with the CLI command. You may disable using the local in-memory table with the command:" +msgstr "За замовчуванням записані потоки будуть збережені всередині та можуть бути перераховані за допомогою команди CLI. Ви можете вимкнути використання локальної таблиці в пам'яті за допомогою команди:" #: ../../configuration/protocols/bgp.rst:507 msgid "By default, the BGP prefix is advertised even if it's not present in the routing table. This behaviour differs from the implementation of some vendors." -msgstr "By default, the BGP prefix is advertised even if it's not present in the routing table. This behaviour differs from the implementation of some vendors." +msgstr "За замовчуванням префікс BGP оголошується, навіть якщо його немає в таблиці маршрутизації. Така поведінка відрізняється від реалізації деяких постачальників." #: ../../configuration/interfaces/wireless.rst:73 msgid "By default, this bridging is allowed." -msgstr "By default, this bridging is allowed." +msgstr "За замовчуванням це перемикання дозволено." #: ../../configuration/firewall/global-options.rst:27 msgid "By default, when VyOS receives an ICMP echo request packet destined for itself, it will answer with an ICMP echo reply, unless you avoid it through its firewall." -msgstr "By default, when VyOS receives an ICMP echo request packet destined for itself, it will answer with an ICMP echo reply, unless you avoid it through its firewall." +msgstr "За замовчуванням, коли VyOS отримує призначений для себе пакет ехо-запиту ICMP, він відповість ехо-відповіддю ICMP, якщо ви не уникнете цього через брандмауер." #: ../../configuration/highavailability/index.rst:190 msgid "By default VRRP uses multicast packets. If your network does not support multicast for whatever reason, you can make VRRP use unicast communication instead." -msgstr "By default VRRP uses multicast packets. If your network does not support multicast for whatever reason, you can make VRRP use unicast communication instead." +msgstr "За замовчуванням VRRP використовує багатоадресні пакети. Якщо ваша мережа з будь-якої причини не підтримує багатоадресну передачу, ви можете налаштувати VRRP на використання одноадресної передачі." #: ../../configuration/highavailability/index.rst:155 msgid "By default VRRP uses preemption. You can disable it with the \"no-preempt\" option:" -msgstr "By default VRRP uses preemption. You can disable it with the \"no-preempt\" option:" +msgstr "За замовчуванням VRRP використовує випередження. Ви можете вимкнути його за допомогою опції "no-preempt":" #: ../../configuration/protocols/ospf.rst:520 #: ../../configuration/protocols/ospf.rst:1232 msgid "By default `strict-lsa-checking` is configured then the helper will abort the Graceful Restart when a LSA change occurs which affects the restarting router." -msgstr "By default `strict-lsa-checking` is configured then the helper will abort the Graceful Restart when a LSA change occurs which affects the restarting router." +msgstr "За замовчуванням налаштовано `strict-lsa-checking`, тоді помічник перериватиме витончений перезапуск, коли відбувається зміна LSA, яка впливає на перезапуск маршрутизатора." #: ../../configuration/vrf/index.rst:35 msgid "By default the scope of the port bindings for unbound sockets is limited to the default VRF. That is, it will not be matched by packets arriving on interfaces enslaved to a VRF and processes may bind to the same port if they bind to a VRF." -msgstr "By default the scope of the port bindings for unbound sockets is limited to the default VRF. That is, it will not be matched by packets arriving on interfaces enslaved to a VRF and processes may bind to the same port if they bind to a VRF." +msgstr "За замовчуванням область прив’язки портів для неприв’язаних сокетів обмежена стандартним VRF. Тобто пакети, які надходять на інтерфейси, підпорядковані VRF, не будуть відповідати йому, і процеси можуть прив’язуватися до того самого порту, якщо вони прив’язуються до VRF." #: ../../configuration/interfaces/pseudo-ethernet.rst:14 msgid "By using Pseudo-Ethernet interfaces there will be less system overhead compared to running a traditional bridging approach. Pseudo-Ethernet interfaces can also be used to workaround the general limit of 4096 virtual LANs (VLANs) per physical Ethernet port, since that limit is with respect to a single MAC address." -msgstr "By using Pseudo-Ethernet interfaces there will be less system overhead compared to running a traditional bridging approach. Pseudo-Ethernet interfaces can also be used to workaround the general limit of 4096 virtual LANs (VLANs) per physical Ethernet port, since that limit is with respect to a single MAC address." +msgstr "Використовуючи інтерфейси Pseudo-Ethernet, системні накладні витрати будуть меншими порівняно з використанням традиційного підходу з’єднання. Інтерфейси псевдо-Ethernet також можна використовувати для обходу загального обмеження в 4096 віртуальних локальних мереж (VLAN) на фізичний порт Ethernet, оскільки це обмеження стосується однієї MAC-адреси." #: ../../configuration/service/webproxy.rst:393 msgid "Bypassing the webproxy" -msgstr "Bypassing the webproxy" +msgstr "Обхід webproxy" + +#: ../../configuration/trafficpolicy/index.rst:1151 +msgid "CAKE" +msgstr "CAKE" -#: ../../configuration/pki/index.rst:170 +#: ../../configuration/pki/index.rst:172 msgid "CA (Certificate Authority)" -msgstr "CA (Certificate Authority)" +msgstr "CA (Центр сертифікації)" #: ../../configuration/trafficpolicy/index.rst:793 msgid "CRITIC/ECP" -msgstr "CRITIC/ECP" +msgstr "КРИТИК/ЕКП" #: ../../configuration/policy/route-map.rst:29 msgid "Call another route-map policy on match." -msgstr "Call another route-map policy on match." +msgstr "Викличте іншу політику карти маршруту на матчі." #: ../../configuration/protocols/bgp.rst:133 #: ../../configuration/protocols/bgp.rst:263 msgid "Capability Negotiation" -msgstr "Capability Negotiation" +msgstr "Обговорення можливостей" #: ../../configuration/service/broadcast-relay.rst:7 msgid "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." -msgstr "Certain vendors use broadcasts to identify their equipment within one ethernet segment. Unfortunately if you split your network with multiple VLANs you loose the ability of identifying your equipment." +msgstr "Деякі постачальники використовують трансляції для ідентифікації свого обладнання в одному сегменті Ethernet. На жаль, якщо ви розділите свою мережу на кілька VLAN, ви втратите можливість ідентифікувати ваше обладнання." -#: ../../configuration/pki/index.rst:33 +#: ../../configuration/pki/index.rst:35 msgid "Certificate Authority (CA)" -msgstr "Certificate Authority (CA)" +msgstr "Центр сертифікації (CA)" -#: ../../configuration/pki/index.rst:185 +#: ../../configuration/pki/index.rst:187 msgid "Certificate revocation list in PEM format." -msgstr "Certificate revocation list in PEM format." +msgstr "Список відкликаних сертифікатів у форматі PEM." -#: ../../configuration/pki/index.rst:63 +#: ../../configuration/pki/index.rst:65 #: ../../configuration/vpn/sstp.rst:27 msgid "Certificates" -msgstr "Certificates" +msgstr "Сертифікати" -#: ../../configuration/system/option.rst:66 +#: ../../configuration/system/option.rst:96 msgid "Change system keyboard layout to given language." -msgstr "Change system keyboard layout to given language." +msgstr "Змінити розкладку системної клавіатури на задану мову." #: ../../configuration/firewall/zone.rst:94 msgid "Change the default-action with this setting." -msgstr "Change the default-action with this setting." +msgstr "Змініть дію за умовчанням за допомогою цього параметра." #: ../../configuration/protocols/bgp.rst:387 msgid "Changes in BGP policies require the BGP session to be cleared. Clearing has a large negative impact on network operations. Soft reconfiguration enables you to generate inbound updates from a neighbor, change and activate BGP policies without clearing the BGP session." -msgstr "Changes in BGP policies require the BGP session to be cleared. Clearing has a large negative impact on network operations. Soft reconfiguration enables you to generate inbound updates from a neighbor, change and activate BGP policies without clearing the BGP session." +msgstr "Зміни в політиках BGP вимагають очищення сесії BGP. Кліринг має великий негативний вплив на роботу мережі. Програма реконфігурації дає змогу генерувати вхідні оновлення від сусіда, змінювати й активувати політики BGP без очищення сеансу BGP." #: ../../configuration/nat/nat44.rst:126 msgid "Changes to the NAT system only affect newly established connections. Already established connections are not affected." -msgstr "Changes to the NAT system only affect newly established connections. Already established connections are not affected." +msgstr "Зміни в системі NAT впливають лише на нові з’єднання. Вже встановлені з'єднання не впливають." -#: ../../configuration/system/option.rst:70 +#: ../../configuration/system/option.rst:100 msgid "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." -msgstr "Changing the keymap only has an effect on the system console, using SSH or Serial remote access to the device is not affected as the keyboard layout here corresponds to your access system." +msgstr "Зміна розкладки клавіш впливає лише на системну консоль. Віддалений доступ до пристрою за допомогою SSH або послідовного порту не впливає, оскільки розкладка клавіатури тут відповідає вашій системі доступу." #: ../../configuration/interfaces/wireless.rst:44 msgid "Channel number (IEEE 802.11), for 2.4Ghz (802.11 b/g/n) channels range from 1-14. On 5Ghz (802.11 a/h/j/n/ac) channels available are 0, 34 to 173" -msgstr "Channel number (IEEE 802.11), for 2.4Ghz (802.11 b/g/n) channels range from 1-14. On 5Ghz (802.11 a/h/j/n/ac) channels available are 0, 34 to 173" +msgstr "Номер каналу (IEEE 802.11) для каналів 2,4 ГГц (802.11 b/g/n) варіюється від 1 до 14. На 5 ГГц (802.11 a/h/j/n/ac) доступні канали від 0, 34 до 173" #: ../../configuration/system/updates.rst:28 msgid "Check:" @@ -2903,19 +3240,19 @@ msgstr "Check:" #: ../../configuration/system/acceleration.rst:32 msgid "Check if the Intel® QAT device is up and ready to do the job." -msgstr "Check if the Intel® QAT device is up and ready to do the job." +msgstr "Перевірте, чи пристрій Intel® QAT запущений і готовий виконувати роботу." #: ../../configuration/interfaces/openvpn.rst:706 msgid "Check status" -msgstr "Check status" +msgstr "Перевірте статус" -#: ../../configuration/system/ipv6.rst:64 +#: ../../configuration/system/ipv6.rst:77 msgid "Check the many parameters available for the `show ipv6 route` command:" -msgstr "Check the many parameters available for the `show ipv6 route` command:" +msgstr "Перевірте багато параметрів, доступних для команди `show ipv6 route`:" -#: ../../configuration/service/pppoe-server.rst:307 +#: ../../configuration/service/pppoe-server.rst:315 msgid "Checking connections" -msgstr "Checking connections" +msgstr "Перевірка з'єднань" #: ../../configuration/firewall/flowtables.rst:165 msgid "Checks" @@ -2923,7 +3260,7 @@ msgstr "Checks" #: ../../configuration/service/tftp-server.rst:21 msgid "Choose your ``directory`` location carefully or you will loose the content on image upgrades. Any directory under ``/config`` is save at this will be migrated." -msgstr "Choose your ``directory`` location carefully or you will loose the content on image upgrades. Any directory under ``/config`` is save at this will be migrated." +msgstr "Уважно вибирайте розташування свого ``каталогу``, інакше ви втратите вміст під час оновлення зображення. Будь-який каталог у ``/config``, збережений у цьому, буде перенесено." #: ../../configuration/interfaces/bonding.rst:322 msgid "Cisco Catalyst" @@ -2931,87 +3268,95 @@ msgstr "Cisco Catalyst" #: ../../_include/interface-ip.txt:168 msgid "Cisco and Allied Telesyn call it Private VLAN" -msgstr "Cisco and Allied Telesyn call it Private VLAN" +msgstr "Cisco та Allied Telesyn називають це приватною VLAN" #: ../../configuration/policy/examples.rst:187 msgid "Clamp MSS for a specific IP" -msgstr "Clamp MSS for a specific IP" +msgstr "Затискаємо MSS для конкретного IP" #: ../../configuration/trafficpolicy/index.rst:227 msgid "Class treatment" -msgstr "Class treatment" +msgstr "Клас лікування" #: ../../configuration/trafficpolicy/index.rst:107 msgid "Classes" -msgstr "Classes" +msgstr "Заняття" -#: ../../configuration/service/dhcp-server.rst:326 +#: ../../configuration/service/dhcp-server.rst:382 msgid "Classless static route" -msgstr "Classless static route" +msgstr "Безкласовий статичний маршрут" -#: ../../configuration/policy/route-map.rst:269 +#: ../../configuration/policy/route-map.rst:272 msgid "Clear all BGP extcommunities." -msgstr "Clear all BGP extcommunities." +msgstr "Очистити всі зовнішні спільноти BGP." #: ../../configuration/interfaces/openvpn.rst:571 msgid "Client" -msgstr "Client" +msgstr "Клієнт" #: ../../configuration/service/tftp-server.rst:67 msgid "Client:" -msgstr "Client:" +msgstr "Клієнт:" #: ../../configuration/service/pppoe-server.rst:57 msgid "Client Address Pools" -msgstr "Client Address Pools" +msgstr "Пули клієнтських адрес" #: ../../configuration/interfaces/openvpn.rst:440 msgid "Client Authentication" -msgstr "Client Authentication" +msgstr "Автентифікація клієнта" #: ../../configuration/vpn/remoteaccess_ipsec.rst:137 msgid "Client Configuration" msgstr "Client Configuration" -#: ../../configuration/vpn/sstp.rst:289 +#: ../../configuration/service/ipoe-server.rst:328 +#: ../../configuration/service/pppoe-server.rst:446 +#: ../../configuration/vpn/l2tp.rst:400 +#: ../../configuration/vpn/pptp.rst:324 +#: ../../configuration/vpn/sstp.rst:358 +msgid "Client IP Pool Advanced Options" +msgstr "Client IP Pool Advanced Options" + +#: ../../configuration/vpn/sstp.rst:358 msgid "Client IP addresses will be provided from pool `192.0.2.0/25`" -msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" +msgstr "IP-адреси клієнта надаватимуться з пулу `192.0.2.0/25`" #: ../../configuration/interfaces/openvpn.rst:614 msgid "Client Side" -msgstr "Client Side" +msgstr "Клієнтська сторона" -#: ../../configuration/service/ipoe-server.rst:184 +#: ../../configuration/service/ipoe-server.rst:186 msgid "Client configuration" -msgstr "Client configuration" +msgstr "Конфігурація клієнта" -#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:322 msgid "Client domain name" -msgstr "Client domain name" +msgstr "Ім'я домену клієнта" -#: ../../configuration/service/dhcp-server.rst:321 +#: ../../configuration/service/dhcp-server.rst:377 msgid "Client domain search" -msgstr "Client domain search" +msgstr "Пошук домену клієнта" #: ../../configuration/interfaces/wireless.rst:70 msgid "Client isolation can be used to prevent low-level bridging of frames between associated stations in the BSS." -msgstr "Client isolation can be used to prevent low-level bridging of frames between associated stations in the BSS." +msgstr "Ізоляція клієнта може бути використана для запобігання низькорівневому з’єднанню кадрів між асоційованими станціями в BSS." #: ../../configuration/interfaces/openvpn.rst:399 msgid "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" -msgstr "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" +msgstr "Клієнти ідентифікуються за полем CN їхніх сертифікатів x.509, у цьому прикладі CN – це ``client0``:" -#: ../../configuration/service/dhcp-server.rst:514 +#: ../../configuration/service/dhcp-server.rst:573 msgid "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." -msgstr "Clients receiving advertise messages from multiple servers choose the server with the highest preference value. The range for this value is ``0...255``." +msgstr "Клієнти, які отримують рекламні повідомлення з кількох серверів, вибирають сервер із найвищим значенням переваги. Діапазон цього значення становить ``0...255``." #: ../../configuration/system/syslog.rst:130 msgid "Clock daemon" -msgstr "Clock daemon" +msgstr "Демон годинника" #: ../../configuration/system/time-zone.rst:17 msgid "Command completion can be used to list available time zones. The adjustment for daylight time will take place automatically based on the time of year." -msgstr "Command completion can be used to list available time zones. The adjustment for daylight time will take place automatically based on the time of year." +msgstr "Завершення команди можна використовувати для перерахування доступних часових поясів. Коригування на світловий час відбуватиметься автоматично залежно від пори року." #: ../../configuration/firewall/bridge.rst:216 #: ../../configuration/firewall/ipv4.rst:298 @@ -3019,22 +3364,22 @@ msgstr "Command completion can be used to list available time zones. The adjustm msgid "Command for disabling a rule but keep it in the configuration." msgstr "Command for disabling a rule but keep it in the configuration." -#: ../../configuration/vrf/index.rst:128 +#: ../../configuration/vrf/index.rst:147 msgid "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." -msgstr "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." +msgstr "Можливо, команду слід розширити, щоб також перелічити реальні інтерфейси, призначені цьому одному VRF, щоб отримати кращий огляд." -#: ../../configuration/firewall/ipv4.rst:1179 +#: ../../configuration/firewall/ipv4.rst:1202 #: ../../configuration/firewall/ipv6.rst:1195 msgid "Command used to update GeoIP database and firewall sets." -msgstr "Command used to update GeoIP database and firewall sets." +msgstr "Команда, яка використовується для оновлення бази даних GeoIP і наборів брандмауера." #: ../../configuration/firewall/flowtables.rst:119 msgid "Commands" msgstr "Commands" -#: ../../configuration/service/dhcp-server.rst:379 +#: ../../configuration/service/dhcp-server.rst:436 msgid "Common configuration, valid for both primary and secondary node." -msgstr "Common configuration, valid for both primary and secondary node." +msgstr "Загальна конфігурація, дійсна як для основного, так і для вторинного вузла." #: ../../configuration/interfaces/bonding.rst:20 #: ../../configuration/interfaces/bridge.rst:24 @@ -3053,19 +3398,19 @@ msgstr "Common configuration, valid for both primary and secondary node." #: ../../configuration/interfaces/wireless.rst:33 #: ../../configuration/interfaces/wwan.rst:19 msgid "Common interface configuration" -msgstr "Common interface configuration" +msgstr "Загальна конфігурація інтерфейсу" #: ../../configuration/protocols/bgp.rst:585 msgid "Common parameters" -msgstr "Common parameters" +msgstr "Загальні параметри" -#: ../../configuration/protocols/bgp.rst:927 +#: ../../configuration/protocols/bgp.rst:949 msgid "Confederation Configuration" -msgstr "Confederation Configuration" +msgstr "Конфігурація конфедерації" #: ../../configuration/service/snmp.rst:134 msgid "Confidentiality – Encryption of packets to prevent snooping by an unauthorized source." -msgstr "Confidentiality – Encryption of packets to prevent snooping by an unauthorized source." +msgstr "Конфіденційність – шифрування пакетів для запобігання перегляду з боку несанкціонованого джерела." #: ../../configuration/container/index.rst:12 #: ../../configuration/firewall/global-options.rst:23 @@ -3098,28 +3443,28 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/policy/local-route.rst:9 #: ../../configuration/policy/prefix-list.rst:16 #: ../../configuration/policy/route-map.rst:10 -#: ../../configuration/protocols/bfd.rst:143 +#: ../../configuration/protocols/bfd.rst:150 #: ../../configuration/protocols/bgp.rst:164 #: ../../configuration/protocols/igmp-proxy.rst:14 #: ../../configuration/protocols/isis.rst:28 #: ../../configuration/protocols/ospf.rst:22 #: ../../configuration/protocols/ospf.rst:1076 -#: ../../configuration/protocols/rpki.rst:104 +#: ../../configuration/protocols/rpki.rst:102 #: ../../configuration/service/broadcast-relay.rst:18 #: ../../configuration/service/conntrack-sync.rst:38 #: ../../configuration/service/console-server.rst:21 #: ../../configuration/service/dhcp-relay.rst:19 #: ../../configuration/service/dhcp-relay.rst:137 #: ../../configuration/service/dhcp-server.rst:22 -#: ../../configuration/service/dhcp-server.rst:510 +#: ../../configuration/service/dhcp-server.rst:569 #: ../../configuration/service/dns.rst:8 -#: ../../configuration/service/dns.rst:227 +#: ../../configuration/service/dns.rst:308 #: ../../configuration/service/https.rst:14 -#: ../../configuration/service/ipoe-server.rst:28 +#: ../../configuration/service/ids.rst:20 #: ../../configuration/service/lldp.rst:36 #: ../../configuration/service/mdns.rst:19 #: ../../configuration/service/ntp.rst:40 -#: ../../configuration/service/pppoe-server.rst:17 +#: ../../configuration/service/router-advert.rst:28 #: ../../configuration/service/salt-minion.rst:25 #: ../../configuration/service/ssh.rst:36 #: ../../configuration/service/tftp-server.rst:14 @@ -3127,20 +3472,20 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/system/default-route.rst:12 #: ../../configuration/system/flow-accounting.rst:43 #: ../../configuration/system/lcd.rst:17 -#: ../../configuration/system/login.rst:241 -#: ../../configuration/system/login.rst:310 +#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:314 #: ../../configuration/system/sflow.rst:12 #: ../../configuration/system/updates.rst:8 #: ../../configuration/vpn/dmvpn.rst:38 #: ../../configuration/vpn/dmvpn.rst:182 #: ../../configuration/vpn/openconnect.rst:21 -#: ../../configuration/vpn/sstp.rst:65 +#: ../../configuration/vpn/sstp.rst:40 #: ../../configuration/vrf/index.rst:16 -#: ../../configuration/vrf/index.rst:253 -#: ../../configuration/vrf/index.rst:288 -#: ../../configuration/vrf/index.rst:436 +#: ../../configuration/vrf/index.rst:272 +#: ../../configuration/vrf/index.rst:307 +#: ../../configuration/vrf/index.rst:455 msgid "Configuration" -msgstr "Configuration" +msgstr "Конфігурація" #: ../../configuration/firewall/flowtables.rst:100 #: ../../configuration/protocols/babel.rst:188 @@ -3148,123 +3493,155 @@ msgstr "Configuration" #: ../../configuration/protocols/pim6.rst:78 #: ../../configuration/protocols/rip.rst:239 #: ../../configuration/protocols/segment-routing.rst:187 -#: ../../configuration/system/login.rst:279 -#: ../../configuration/system/login.rst:350 +#: ../../configuration/system/login.rst:283 +#: ../../configuration/system/login.rst:354 msgid "Configuration Example" -msgstr "Configuration Example" +msgstr "Приклад конфігурації" #: ../../configuration/nat/nat44.rst:325 #: ../../configuration/nat/nat64.rst:38 #: ../../configuration/nat/nat66.rst:109 msgid "Configuration Examples" -msgstr "Configuration Examples" +msgstr "Приклади конфігурації" #: ../../configuration/index.rst:3 msgid "Configuration Guide" -msgstr "Configuration Guide" +msgstr "Керівництво з налаштування" #: ../../configuration/protocols/mpls.rst:70 msgid "Configuration Options" -msgstr "Configuration Options" +msgstr "Параметри конфігурації" #: ../../configuration/firewall/global-options.rst:17 msgid "Configuration commands covered in this section:" msgstr "Configuration commands covered in this section:" -#: ../../configuration/vpn/ipsec.rst:284 +#: ../../configuration/vpn/ipsec.rst:288 msgid "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" -msgstr "Configuration commands for the private and public key will be displayed on the screen which needs to be set on the router first. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" +msgstr "Команди конфігурації для закритого та відкритого ключів відображатимуться на екрані, який спочатку потрібно встановити на маршрутизаторі. Зверніть увагу на команду з відкритим ключем (встановити відкритий ключ pki key-pair ipsec-LEFT 'MIIBIjANBgkqh...'). Потім виконайте те ж саме на протилежному роутері:" #: ../../configuration/vpn/rsa-keys.rst:26 msgid "Configuration commands will display. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" -msgstr "Configuration commands will display. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" +msgstr "Відобразяться команди конфігурації. Зверніть увагу на команду з відкритим ключем (встановити відкритий ключ pki key-pair ipsec-LEFT 'MIIBIjANBgkqh...'). Потім виконайте те ж саме на протилежному роутері:" #: ../../configuration/firewall/bridge.rst:323 msgid "Configuration example:" msgstr "Configuration example:" -#: ../../configuration/vrf/index.rst:430 +#: ../../configuration/vrf/index.rst:449 msgid "Configuration for these exported routes must, at a minimum, specify these two parameters." -msgstr "Configuration for these exported routes must, at a minimum, specify these two parameters." +msgstr "Конфігурація для цих експортованих маршрутів повинна містити принаймні ці два параметри." #: ../../configuration/system/default-route.rst:39 msgid "Configuration of :ref:`routing-static`" -msgstr "Configuration of :ref:`routing-static`" +msgstr "Конфігурація :ref:`routing-static`" -#: ../../configuration/service/dhcp-server.rst:371 +#: ../../configuration/service/dhcp-server.rst:427 +msgid "Configuration of a DHCP HA pair:" +msgstr "Configuration of a DHCP HA pair:" + +#: ../../configuration/service/dhcp-server.rst:411 msgid "Configuration of a DHCP failover pair" -msgstr "Configuration of a DHCP failover pair" +msgstr "Конфігурація пари відновлення після відмови DHCP" -#: ../../configuration/vrf/index.rst:438 +#: ../../configuration/vrf/index.rst:457 msgid "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." -msgstr "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." +msgstr "Конфігурація витоку маршруту між одноадресним VRF RIB і VPN SAFI RIB VRF за замовчуванням виконується за допомогою команд у контексті сімейства адрес VRF." -#: ../../configuration/protocols/static.rst:166 +#: ../../configuration/protocols/static.rst:199 #: ../../configuration/system/conntrack.rst:12 msgid "Configure" -msgstr "Configure" +msgstr "Налаштувати" #: ../../configuration/protocols/bfd.rst:22 msgid "Configure BFD" -msgstr "Configure BFD" +msgstr "Налаштувати BFD" -#: ../../configuration/service/dns.rst:258 +#: ../../configuration/service/dns.rst:339 msgid "Configure DNS `<record>` which should be updated. This can be set multiple times." -msgstr "Configure DNS `<record>` which should be updated. This can be set multiple times." +msgstr "Налаштувати DNS `<record> ` який слід оновити. Це можна встановити кілька разів." -#: ../../configuration/service/dns.rst:253 +#: ../../configuration/service/dns.rst:335 msgid "Configure DNS `<zone>` to be updated." -msgstr "Configure DNS `<zone>` to be updated." +msgstr "Налаштувати DNS `<zone> ` буде оновлено." #: ../../configuration/interfaces/geneve.rst:53 msgid "Configure GENEVE tunnel far end/remote tunnel endpoint." -msgstr "Configure GENEVE tunnel far end/remote tunnel endpoint." +msgstr "Налаштуйте тунель GENEVE дальню/віддалену кінцеву точку тунелю." #: ../../configuration/protocols/ospf.rst:511 #: ../../configuration/protocols/ospf.rst:1223 msgid "Configure Graceful Restart :rfc:`3623` helper support. By default, helper support is disabled for all neighbours. This config enables/disables helper support on this router for all neighbours." -msgstr "Configure Graceful Restart :rfc:`3623` helper support. By default, helper support is disabled for all neighbours. This config enables/disables helper support on this router for all neighbours." +msgstr "Налаштуйте підтримку допоміжного засобу Graceful Restart :rfc:`3623`. За замовчуванням підтримка допоміжних пристроїв вимкнена для всіх сусідів. Ця конфігурація вмикає/вимикає допоміжну підтримку на цьому маршрутизаторі для всіх сусідів." #: ../../configuration/protocols/ospf.rst:502 #: ../../configuration/protocols/ospf.rst:1214 msgid "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." -msgstr "Configure Graceful Restart :rfc:`3623` restarting support. When enabled, the default grace period is 120 seconds." +msgstr "Налаштувати підтримку перезапуску Graceful Restart :rfc:`3623`. Якщо ввімкнено, пільговий період за замовчуванням становить 120 секунд." + +#: ../../configuration/service/ids.rst:69 +msgid "Configure ICMP threshold parameters." +msgstr "Configure ICMP threshold parameters." #: ../../configuration/service/dhcp-relay.rst:40 msgid "Configure IP address of the DHCP `<server>` which will handle the relayed packets." -msgstr "Configure IP address of the DHCP `<server>` which will handle the relayed packets." +msgstr "Налаштуйте IP-адресу DHCP `<server> `, яка оброблятиме передані пакети." -#: ../../configuration/vpn/sstp.rst:214 +#: ../../configuration/service/ipoe-server.rst:162 +#: ../../configuration/service/pppoe-server.rst:124 +#: ../../configuration/vpn/l2tp.rst:167 +#: ../../configuration/vpn/pptp.rst:107 +#: ../../configuration/vpn/sstp.rst:140 msgid "Configure RADIUS `<server>` and its required port for authentication requests." -msgstr "Configure RADIUS `<server>` and its required port for authentication requests." +msgstr "Налаштувати RADIUS `<server> ` і його необхідний порт для запитів автентифікації." -#: ../../configuration/vpn/sstp.rst:218 +#: ../../configuration/service/ipoe-server.rst:128 +#: ../../configuration/service/pppoe-server.rst:90 +#: ../../configuration/vpn/l2tp.rst:133 +#: ../../configuration/vpn/pptp.rst:73 +#: ../../configuration/vpn/sstp.rst:106 msgid "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." -msgstr "Configure RADIUS `<server>` and its required shared `<secret>` for communicating with the RADIUS server." +msgstr "Налаштувати RADIUS `<server> ` і його обов’язковий спільний доступ `<secret> ` для зв’язку з сервером RADIUS." #: ../../configuration/nat/nat44.rst:222 msgid "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." -msgstr "Configure SNAT rule (40) to only NAT packets with a destination address of 192.0.2.1." +msgstr "Налаштуйте правило SNAT (40) лише для пакетів NAT з адресою призначення 192.0.2.1." + +#: ../../configuration/service/ids.rst:74 +msgid "Configure TCP threshold parameters" +msgstr "Configure TCP threshold parameters" + +#: ../../configuration/service/ids.rst:79 +msgid "Configure UDP threshold parameters" +msgstr "Configure UDP threshold parameters" #: ../../_include/interface-mtu.txt:4 msgid "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." -msgstr "Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It is the size (in bytes) of the largest ethernet frame sent on this link." +msgstr "Налаштуйте :abbr:`MTU (максимальна одиниця передачі)` на заданому`<interface> `. Це розмір (у байтах) найбільшого кадру Ethernet, надісланого за цим посиланням." -#: ../../configuration/system/login.rst:375 +#: ../../configuration/system/login.rst:379 msgid "Configure `<message>` which is shown after user has logged in to the system." -msgstr "Configure `<message>` which is shown after user has logged in to the system." +msgstr "Налаштувати `<message> `, який відображається після входу користувача в систему." -#: ../../configuration/system/login.rst:370 +#: ../../configuration/system/login.rst:374 msgid "Configure `<message>` which is shown during SSH connect and before a user is logged in." -msgstr "Configure `<message>` which is shown during SSH connect and before a user is logged in." +msgstr "Налаштувати `<message> `, який відображається під час з’єднання SSH і перед входом користувача." -#: ../../configuration/service/dns.rst:341 +#: ../../configuration/service/dns.rst:440 +msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:355 msgid "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." -msgstr "Configure `<password>` used when authenticating the update request for DynDNS service identified by `<service>`." +msgstr "Налаштувати `<password> ` використовується під час автентифікації запиту на оновлення для служби DynDNS, ідентифікованої `<service> `." -#: ../../configuration/service/dns.rst:334 +#: ../../configuration/service/dns.rst:435 +msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." +msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:348 msgid "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." -msgstr "Configure `<username>` used when authenticating the update request for DynDNS service identified by `<service>`. For Namecheap, set the <domain> you wish to update." +msgstr "Налаштувати `<username> ` використовується під час автентифікації запиту на оновлення для служби DynDNS, ідентифікованої `<service> `. Для Namecheap встановіть<domain> ви хочете оновити." #: ../../configuration/system/updates.rst:17 msgid "Configure a URL that contains information about images." @@ -3272,49 +3649,53 @@ msgstr "Configure a URL that contains information about images." #: ../../configuration/system/flow-accounting.rst:158 msgid "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." -msgstr "Configure a sFlow agent address. It can be IPv4 or IPv6 address, but you must set the same protocol, which is used for sFlow collector addresses. By default, using router-id from BGP or OSPF protocol, or the primary IP address from the first interface." +msgstr "Налаштуйте адресу агента sFlow. Це може бути адреса IPv4 або IPv6, але ви повинні встановити той самий протокол, який використовується для адрес колектора sFlow. За замовчуванням використовується ідентифікатор маршрутизатора з протоколу BGP або OSPF або основна IP-адреса з першого інтерфейсу." -#: ../../configuration/protocols/bfd.rst:154 -#: ../../configuration/protocols/bfd.rst:167 +#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:174 msgid "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." -msgstr "Configure a static route for <subnet> using gateway <address> , use source address to indentify the peer when is multi-hop session and the gateway address as BFD peer destination address." +msgstr "Налаштувати статичний маршрут для<subnet> за допомогою шлюзу<address> , використовуйте адресу джерела для ідентифікації однорангового вузла під час сеансу з кількома переходами та адресу шлюзу як адресу призначення однорангового вузла BFD." -#: ../../configuration/protocols/bfd.rst:148 -#: ../../configuration/protocols/bfd.rst:161 +#: ../../configuration/protocols/bfd.rst:155 +#: ../../configuration/protocols/bfd.rst:168 msgid "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." -msgstr "Configure a static route for <subnet> using gateway <address> and use the gateway address as BFD peer destination address." +msgstr "Налаштувати статичний маршрут для<subnet> за допомогою шлюзу<address> і використовувати адресу шлюзу як адресу призначення BFD." #: ../../configuration/system/flow-accounting.rst:106 msgid "Configure address of NetFlow collector. NetFlow server at `<address>` can be both listening on an IPv4 or IPv6 address." -msgstr "Configure address of NetFlow collector. NetFlow server at `<address>` can be both listening on an IPv4 or IPv6 address." +msgstr "Налаштувати адресу колектора NetFlow. Сервер NetFlow за адресою `<address> ` може одночасно прослуховувати адресу IPv4 або IPv6." #: ../../configuration/system/sflow.rst:45 msgid "Configure address of sFlow collector. sFlow server at <address> can be both listening on an IPv4 or IPv6 address." -msgstr "Configure address of sFlow collector. sFlow server at <address> can be both listening on an IPv4 or IPv6 address." +msgstr "Налаштувати адресу колектора sFlow. Сервер sFlow на<address> може одночасно прослуховувати адресу IPv4 або IPv6." #: ../../configuration/system/flow-accounting.rst:148 msgid "Configure address of sFlow collector. sFlow server at `<address>` can be an IPv4 or IPv6 address. But you cannot export to both IPv4 and IPv6 collectors at the same time!" -msgstr "Configure address of sFlow collector. sFlow server at `<address>` can be an IPv4 or IPv6 address. But you cannot export to both IPv4 and IPv6 collectors at the same time!" +msgstr "Налаштувати адресу колектора sFlow. Сервер sFlow на `<address> ` може бути адресою IPv4 або IPv6. Але ви не можете одночасно експортувати в колектори IPv4 і IPv6!" #: ../../configuration/system/sflow.rst:21 msgid "Configure agent IP address associated with this interface." -msgstr "Configure agent IP address associated with this interface." +msgstr "Налаштуйте IP-адресу агента, пов’язану з цим інтерфейсом." #: ../../configuration/protocols/ospf.rst:481 msgid "Configure aggregation delay timer interval." -msgstr "Configure aggregation delay timer interval." +msgstr "Налаштуйте інтервал таймера затримки агрегації." + +#: ../../configuration/service/ids.rst:24 +msgid "Configure alert script that will be executed when an attack is detected." +msgstr "Configure alert script that will be executed when an attack is detected." #: ../../configuration/vpn/openconnect.rst:285 msgid "Configure an accounting server and enable accounting with:" -msgstr "Configure an accounting server and enable accounting with:" +msgstr "Налаштуйте обліковий сервер і ввімкніть облік за допомогою:" #: ../../configuration/system/sflow.rst:30 msgid "Configure and enable collection of flow information for the interface identified by <interface>." -msgstr "Configure and enable collection of flow information for the interface identified by <interface>." +msgstr "Налаштуйте та ввімкніть збір інформації про потік для інтерфейсу, ідентифікованого<interface> ." #: ../../configuration/system/flow-accounting.rst:50 msgid "Configure and enable collection of flow information for the interface identified by `<interface>`." -msgstr "Configure and enable collection of flow information for the interface identified by `<interface>`." +msgstr "Налаштуйте та ввімкніть збір інформації про потік для інтерфейсу, позначеного `<interface> `." #: ../../configuration/system/updates.rst:12 msgid "Configure auto-checking for new images" @@ -3322,23 +3703,35 @@ msgstr "Configure auto-checking for new images" #: ../../configuration/loadbalancing/reverse-proxy.rst:114 msgid "Configure backend `<name>` mode TCP or HTTP" -msgstr "Configure backend `<name>` mode TCP or HTTP" +msgstr "Налаштувати бекенд `<name> ` режим TCP або HTTP" #: ../../configuration/nat/nat66.rst:148 msgid "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" msgstr "Configure both routers (a and b) for DHCPv6-PD via dummy interface:" +#: ../../configuration/service/ids.rst:33 +msgid "Configure direction for processing traffic." +msgstr "Configure direction for processing traffic." + #: ../../configuration/service/console-server.rst:49 msgid "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." -msgstr "Configure either one or two stop bits. This defaults to one stop bits if left unconfigured." +msgstr "Налаштуйте один або два стоп-біти. За замовчуванням це один стоп-біт, якщо не налаштовано." #: ../../configuration/service/console-server.rst:31 msgid "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." -msgstr "Configure either seven or eight data bits. This defaults to eight data bits if left unconfigured." +msgstr "Налаштуйте сім або вісім бітів даних. За замовчуванням значення становить вісім бітів даних, якщо не налаштувати." + +#: ../../configuration/service/ids.rst:64 +msgid "Configure general threshold parameters." +msgstr "Configure general threshold parameters." + +#: ../../configuration/service/ids.rst:28 +msgid "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." +msgstr "Configure how long an IP (attacker) should be kept in blocked state. Default value is 1900." #: ../../configuration/interfaces/bridge.rst:46 msgid "Configure individual bridge port `<priority>`." -msgstr "Configure individual bridge port `<priority>`." +msgstr "Налаштувати окремий порт мосту `<priority> `." #: ../../configuration/interfaces/pppoe.rst:223 #: ../../configuration/interfaces/pppoe.rst:269 @@ -3346,96 +3739,116 @@ msgstr "Configure individual bridge port `<priority>`." #: ../../_include/interface-ip.txt:59 #: ../../_include/interface-ipv6.txt:48 msgid "Configure interface-specific Host/Router behaviour. If set, the interface will switch to host mode and IPv6 forwarding will be disabled on this interface." -msgstr "Configure interface-specific Host/Router behaviour. If set, the interface will switch to host mode and IPv6 forwarding will be disabled on this interface." +msgstr "Налаштування поведінки хоста/маршрутизатора для конкретного інтерфейсу. Якщо встановлено, інтерфейс перейде в режим хоста, а пересилання IPv6 буде вимкнено на цьому інтерфейсі." #: ../../_include/interface-address-with-dhcp.txt:5 #: ../../_include/interface-address.txt:3 msgid "Configure interface `<interface>` with one or more interface addresses." -msgstr "Configure interface `<interface>` with one or more interface addresses." +msgstr "Налаштувати інтерфейс `<interface> ` з однією або кількома адресами інтерфейсу." + +#: ../../configuration/service/ids.rst:42 +msgid "Configure listen interface for mirroring traffic." +msgstr "Configure listen interface for mirroring traffic." + +#: ../../configuration/service/ids.rst:55 +msgid "Configure local IPv4 address to listen for sflow." +msgstr "Configure local IPv4 address to listen for sflow." #: ../../configuration/service/snmp.rst:148 msgid "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" -msgstr "Configure new SNMP user named \"vyos\" with password \"vyos12345678\"" +msgstr "Налаштуйте нового користувача SNMP під назвою "vyos" із паролем "vyos12345678"" #: ../../configuration/protocols/failover.rst:17 msgid "Configure next-hop `<address>` and `<target-address>` for an IPv4 static route. Specify the target IPv4 address for health checking." -msgstr "Configure next-hop `<address>` and `<target-address>` for an IPv4 static route. Specify the target IPv4 address for health checking." +msgstr "Налаштувати наступний крок `<address> ` і `<target-address> ` для статичного маршруту IPv4. Укажіть цільову адресу IPv4 для перевірки справності." #: ../../configuration/protocols/static.rst:24 msgid "Configure next-hop `<address>` for an IPv4 static route. Multiple static routes can be created." -msgstr "Configure next-hop `<address>` for an IPv4 static route. Multiple static routes can be created." +msgstr "Налаштувати наступний крок `<address> ` для статичного маршруту IPv4. Можна створити кілька статичних маршрутів." #: ../../configuration/protocols/static.rst:44 msgid "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." -msgstr "Configure next-hop `<address>` for an IPv6 static route. Multiple static routes can be created." +msgstr "Налаштувати наступний крок `<address> ` для статичного маршруту IPv6. Можна створити кілька статичних маршрутів." -#: ../../configuration/system/option.rst:95 +#: ../../configuration/system/option.rst:125 msgid "Configure one of the predefined system performance profiles." -msgstr "Configure one of the predefined system performance profiles." +msgstr "Налаштуйте один із попередньо визначених профілів продуктивності системи." #: ../../configuration/service/ntp.rst:55 msgid "Configure one or more attributes to the given NTP server." -msgstr "Configure one or more attributes to the given NTP server." +msgstr "Налаштуйте один або кілька атрибутів для даного сервера NTP." #: ../../configuration/service/ntp.rst:44 msgid "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." -msgstr "Configure one or more servers for synchronisation. Server name can be either an IP address or :abbr:`FQDN (Fully Qualified Domain Name)`." +msgstr "Налаштуйте один або кілька серверів для синхронізації. Ім’я сервера може бути або IP-адресою, або :abbr:`FQDN (повним доменним іменем)`." -#: ../../configuration/service/dns.rst:264 +#: ../../configuration/service/dns.rst:343 msgid "Configure optional TTL value on the given resource record. This defaults to 600 seconds." -msgstr "Configure optional TTL value on the given resource record. This defaults to 600 seconds." +msgstr "Налаштуйте додаткове значення TTL для даного запису ресурсу. За замовчуванням це 600 секунд." #: ../../configuration/interfaces/ethernet.rst:28 msgid "Configure physical interface duplex setting." -msgstr "Configure physical interface duplex setting." +msgstr "Налаштуйте дуплексне налаштування фізичного інтерфейсу." #: ../../configuration/interfaces/ethernet.rst:39 msgid "Configure physical interface speed setting." -msgstr "Configure physical interface speed setting." +msgstr "Налаштувати швидкість фізичного інтерфейсу." #: ../../_include/interface-mirror.txt:16 msgid "Configure port mirroring for `interface` inbound traffic and copy the traffic to `monitor-interface`" -msgstr "Configure port mirroring for `interface` inbound traffic and copy the traffic to `monitor-interface`" +msgstr "Налаштуйте віддзеркалення портів для вхідного трафіку `interface` і скопіюйте трафік до `monitor-interface`" #: ../../_include/interface-mirror.txt:28 msgid "Configure port mirroring for `interface` outbound traffic and copy the traffic to `monitor-interface`" -msgstr "Configure port mirroring for `interface` outbound traffic and copy the traffic to `monitor-interface`" +msgstr "Налаштуйте віддзеркалення портів для вихідного трафіку `interface` і скопіюйте трафік до `monitor-interface`" #: ../../configuration/interfaces/vxlan.rst:59 msgid "Configure port number of remote VXLAN endpoint." -msgstr "Configure port number of remote VXLAN endpoint." +msgstr "Налаштуйте номер порту віддаленої кінцевої точки VXLAN." + +#: ../../configuration/service/ids.rst:59 +msgid "Configure port number to be used for sflow conection. Default port is 6343." +msgstr "Configure port number to be used for sflow conection. Default port is 6343." #: ../../configuration/system/syslog.rst:73 msgid "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." -msgstr "Configure protocol used for communication to remote syslog host. This can be either UDP or TCP." +msgstr "Налаштувати протокол, який використовується для зв’язку з віддаленим хостом системного журналу. Це може бути UDP або TCP." #: ../../configuration/system/proxy.rst:18 msgid "Configure proxy port if it does not listen to the default port 80." -msgstr "Configure proxy port if it does not listen to the default port 80." +msgstr "Налаштуйте проксі-порт, якщо він не слухає порт за замовчуванням 80." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:150 +msgid "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" +msgstr "Configure requests to the backend server to use SSL encryption and authenticate backend against <ca-certificate>" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:155 +msgid "Configure requests to the backend server to use SSL encryption without validating server certificate" +msgstr "Configure requests to the backend server to use SSL encryption without validating server certificate" #: ../../configuration/system/sflow.rst:16 msgid "Configure sFlow agent IPv4 or IPv6 address" -msgstr "Configure sFlow agent IPv4 or IPv6 address" +msgstr "Налаштуйте адресу агента sFlow IPv4 або IPv6" #: ../../configuration/system/sflow.rst:37 msgid "Configure schedule counter-polling in seconds (default: 30)" -msgstr "Configure schedule counter-polling in seconds (default: 30)" +msgstr "Налаштувати розклад зустрічного опитування за секунди (за замовчуванням: 30)" #: ../../configuration/loadbalancing/reverse-proxy.rst:36 msgid "Configure service `<name>` mode TCP or HTTP" -msgstr "Configure service `<name>` mode TCP or HTTP" +msgstr "Налаштувати службу `<name> ` режим TCP або HTTP" #: ../../configuration/loadbalancing/reverse-proxy.rst:41 msgid "Configure service `<name>` to use the backend <name>" -msgstr "Configure service `<name>` to use the backend <name>" +msgstr "Налаштувати службу `<name> ` для використання серверної частини<name>" -#: ../../configuration/system/login.rst:394 +#: ../../configuration/system/login.rst:398 msgid "Configure session timeout after which the user will be logged out." -msgstr "Configure session timeout after which the user will be logged out." +msgstr "Налаштуйте тайм-аут сеансу, після якого користувач буде виведений із системи." #: ../../configuration/system/host-name.rst:41 msgid "Configure system domain name. A domain name must start and end with a letter or digit, and have as interior characters only letters, digits, or a hyphen." -msgstr "Configure system domain name. A domain name must start and end with a letter or digit, and have as interior characters only letters, digits, or a hyphen." +msgstr "Налаштувати доменне ім'я системи. Доменне ім’я має починатися й закінчуватися літерою чи цифрою, а внутрішніми символами повинні бути лише літери, цифри чи дефіс." #: ../../configuration/nat/nat66.rst:182 msgid "Configure the A-side router for NPTv6 using the prefixes above:" @@ -3445,33 +3858,37 @@ msgstr "Configure the A-side router for NPTv6 using the prefixes above:" msgid "Configure the B-side router for NPTv6 using the prefixes above:" msgstr "Configure the B-side router for NPTv6 using the prefixes above:" -#: ../../configuration/service/dns.rst:247 +#: ../../configuration/service/dns.rst:330 msgid "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." -msgstr "Configure the DNS `<server>` IP/FQDN used when updating this dynamic assignment." +msgstr "Налаштуйте DNS `<server> ` IP/FQDN, що використовується під час оновлення цього динамічного призначення." #: ../../configuration/service/tftp-server.rst:27 msgid "Configure the IPv4 or IPv6 listen address of the TFTP server. Multiple IPv4 and IPv6 addresses can be given. There will be one TFTP server instances listening on each IP address." -msgstr "Configure the IPv4 or IPv6 listen address of the TFTP server. Multiple IPv4 and IPv6 addresses can be given. There will be one TFTP server instances listening on each IP address." +msgstr "Налаштуйте адресу прослуховування IPv4 або IPv6 сервера TFTP. Можна надати декілька адрес IPv4 та IPv6. Буде один екземпляр TFTP-сервера, який прослуховуватиме кожну IP-адресу." #: ../../configuration/system/conntrack.rst:43 msgid "Configure the connection tracking protocol helper modules. All modules are enable by default." -msgstr "Configure the connection tracking protocol helper modules. All modules are enable by default." +msgstr "Налаштуйте допоміжні модулі протоколу відстеження з’єднань. Усі модулі ввімкнено за замовчуванням." -#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:256 msgid "Configure the discrete port under which the RADIUS server can be reached." -msgstr "Configure the discrete port under which the RADIUS server can be reached." +msgstr "Налаштуйте дискретний порт, через який доступний сервер RADIUS." -#: ../../configuration/system/login.rst:321 +#: ../../configuration/system/login.rst:325 msgid "Configure the discrete port under which the TACACS server can be reached." -msgstr "Configure the discrete port under which the TACACS server can be reached." +msgstr "Налаштуйте дискретний порт, через який можна отримати доступ до сервера TACACS." -#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +#: ../../configuration/loadbalancing/reverse-proxy.rst:212 msgid "Configure the load-balancing reverse-proxy service for HTTP." -msgstr "Configure the load-balancing reverse-proxy service for HTTP." +msgstr "Налаштуйте службу зворотного проксі-сервера балансування навантаження для HTTP." + +#: ../../configuration/service/ids.rst:46 +msgid "Configure traffic capture mode." +msgstr "Configure traffic capture mode." #: ../../_include/interface-mac.txt:4 msgid "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." -msgstr "Configure user defined :abbr:`MAC (Media Access Control)` address on given `<interface>`." +msgstr "Налаштуйте визначену користувачем :abbr:`MAC (Media Access Control)` адресу на вказану `<interface> `." #: ../../configuration/protocols/pim.rst:180 msgid "Configure watermark warning generation for an IGMP group limit. Generates warning once the configured group limit is reached while adding new groups." @@ -3479,40 +3896,92 @@ msgstr "Configure watermark warning generation for an IGMP group limit. Generate #: ../../configuration/vrf/index.rst:28 msgid "Configured routing table `<id>` is used by VRF `<name>`." -msgstr "Configured routing table `<id>` is used by VRF `<name>`." +msgstr "Налаштована таблиця маршрутизації `<id> ` використовується VRF `<name> `." #: ../../configuration/trafficpolicy/index.rst:262 msgid "Configured value" -msgstr "Configured value" +msgstr "Налаштоване значення" #: ../../configuration/protocols/bgp.rst:455 msgid "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." -msgstr "Configures the BGP speaker so that it only accepts inbound connections from, but does not initiate outbound connections to the peer or peer group." +msgstr "Налаштовує спікер BGP так, щоб він приймав лише вхідні з’єднання від однорангового вузла або групи однорангових вузлів, але не ініціював вихідні з’єднання." + +#: ../../configuration/service/ipoe-server.rst:27 +msgid "Configuring IPoE Server" +msgstr "Configuring IPoE Server" + +#: ../../configuration/vpn/l2tp.rst:57 +msgid "Configuring IPsec" +msgstr "Configuring IPsec" + +#: ../../configuration/vpn/l2tp.rst:12 +msgid "Configuring L2TP Server" +msgstr "Configuring L2TP Server" + +#: ../../configuration/vpn/l2tp.rst:270 +msgid "Configuring LNS (L2TP Network Server)" +msgstr "Configuring LNS (L2TP Network Server)" + +#: ../../configuration/service/pppoe-server.rst:18 +msgid "Configuring PPPoE Server" +msgstr "Configuring PPPoE Server" + +#: ../../configuration/vpn/pptp.rst:13 +msgid "Configuring PPTP Server" +msgstr "Configuring PPTP Server" #: ../../configuration/vpn/openconnect.rst:279 msgid "Configuring RADIUS accounting" -msgstr "Configuring RADIUS accounting" +msgstr "Налаштування обліку RADIUS" + +#: ../../configuration/service/ipoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:76 +#: ../../configuration/vpn/l2tp.rst:119 +#: ../../configuration/vpn/pptp.rst:59 +#: ../../configuration/vpn/sstp.rst:92 +msgid "Configuring RADIUS authentication" +msgstr "Configuring RADIUS authentication" + +#: ../../configuration/vpn/sstp.rst:24 +msgid "Configuring SSTP Server" +msgstr "Configuring SSTP Server" + +#: ../../configuration/vpn/sstp.rst:476 +msgid "Configuring SSTP client" +msgstr "Configuring SSTP client" + +#: ../../configuration/vpn/ipsec.rst:494 +msgid "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." +msgstr "Configuring VyOS to act as your IPSec access concentrator is one thing, but you probably need to setup your client connecting to the server so they can talk to the IPSec gateway." #: ../../configuration/service/tftp-server.rst:39 msgid "Configuring a listen-address is essential for the service to work." -msgstr "Configuring a listen-address is essential for the service to work." +msgstr "Налаштування адреси прослуховування має важливе значення для роботи служби." #: ../../configuration/interfaces/pppoe.rst:309 #: ../../configuration/interfaces/sstp-client.rst:140 msgid "Connect/Disconnect" -msgstr "Connect/Disconnect" +msgstr "Підключення/Відключення" -#: ../../configuration/vpn/sstp.rst:155 +#: ../../configuration/service/ipoe-server.rst:376 +#: ../../configuration/service/pppoe-server.rst:546 +#: ../../configuration/vpn/l2tp.rst:500 +#: ../../configuration/vpn/pptp.rst:424 +#: ../../configuration/vpn/sstp.rst:458 msgid "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." -msgstr "Connected client should use `<address>` as their DNS server. This command accepts both IPv4 and IPv6 addresses. Up to two nameservers can be configured for IPv4, up to three for IPv6." +msgstr "Підключений клієнт повинен використовувати `<address> ` як їхній DNS-сервер. Ця команда приймає як адреси IPv4, так і IPv6. Для IPv4 можна налаштувати до двох серверів імен, для IPv6 – до трьох." -#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:143 msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." #: ../../configuration/protocols/rpki.rst:129 msgid "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." -msgstr "Connections to the RPKI caching server can not only be established by HTTP/TLS but you can also rely on a secure SSH session to the server. To enable SSH you first need to create yoursels an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +msgstr "З’єднання з сервером кешування RPKI можна встановити не лише за допомогою HTTP/TLS, але ви також можете покладатися на безпечний сеанс SSH із сервером. Щоб увімкнути SSH, вам спочатку потрібно створити пару ключів клієнта SSH за допомогою ``generate ssh client-key /config/auth/id_rsa_rpki``. Після створення ключа можна налаштувати з’єднання." + +#: ../../configuration/protocols/rpki.rst:141 +msgid "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." +msgstr "Connections to the RPKI caching server can not only be established by TCP using the RTR protocol but you can also rely on a secure SSH session to the server. This provides transport integrity and confidentiality and it is a good idea if your validation software supports it. To enable SSH, first you need to create an SSH client keypair using ``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup the connection." #: ../../configuration/system/conntrack.rst:4 msgid "Conntrack" @@ -3524,7 +3993,7 @@ msgstr "Conntrack Sync" #: ../../configuration/service/conntrack-sync.rst:-1 msgid "Conntrack Sync Example" -msgstr "Conntrack Sync Example" +msgstr "Приклад синхронізації Conntrack" #: ../../configuration/system/conntrack.rst:178 msgid "Conntrack ignore rules" @@ -3536,19 +4005,27 @@ msgstr "Conntrack log" #: ../../configuration/system/syslog.rst:21 msgid "Console" -msgstr "Console" +msgstr "Консоль" #: ../../configuration/service/console-server.rst:5 msgid "Console Server" -msgstr "Console Server" +msgstr "Консольний сервер" -#: ../../configuration/container/index.rst:106 +#: ../../configuration/container/index.rst:111 msgid "Constrain the memory available to the container." -msgstr "Constrain the memory available to the container." +msgstr "Обмеження доступної для контейнера пам’яті." #: ../../configuration/container/index.rst:5 msgid "Container" -msgstr "Container" +msgstr "Контейнер" + +#: ../../configuration/container/index.rst:136 +msgid "Container Networks" +msgstr "Container Networks" + +#: ../../configuration/container/index.rst:156 +msgid "Container Registry" +msgstr "Container Registry" #: ../../configuration/system/conntrack.rst:65 msgid "Contrack Timeouts" @@ -3556,107 +4033,122 @@ msgstr "Contrack Timeouts" #: ../../configuration/nat/nat66.rst:98 msgid "Convert the address prefix of a single `fc00::/64` network to `fc01::/64`" -msgstr "Convert the address prefix of a single `fc00::/64` network to `fc01::/64`" +msgstr "Перетворіть префікс адреси окремої мережі `fc00::/64` на `fc01::/64`" #: ../../configuration/nat/nat66.rst:80 msgid "Convert the address prefix of a single `fc01::/64` network to `fc00::/64`" -msgstr "Convert the address prefix of a single `fc01::/64` network to `fc00::/64`" +msgstr "Перетворіть префікс адреси окремої мережі `fc01::/64` на `fc00::/64`" #: ../../configuration/interfaces/wireguard.rst:255 msgid "Copy the key, as it is not stored on the local filesystem. Because it is a symmetric key, only you and your peer should have knowledge of its content. Make sure you distribute the key in a safe manner," -msgstr "Copy the key, as it is not stored on the local filesystem. Because it is a symmetric key, only you and your peer should have knowledge of its content. Make sure you distribute the key in a safe manner," +msgstr "Скопіюйте ключ, оскільки він не зберігається в локальній файловій системі. Оскільки це симетричний ключ, лише ви та ваш колега повинні знати його вміст. Переконайтеся, що ви поширюєте ключ безпечним способом," #: ../../configuration/interfaces/wireless.rst:49 msgid "Country code (ISO/IEC 3166-1). Used to set regulatory domain. Set as needed to indicate country in which device is operating. This can limit available channels and transmit power." -msgstr "Country code (ISO/IEC 3166-1). Used to set regulatory domain. Set as needed to indicate country in which device is operating. This can limit available channels and transmit power." +msgstr "Код країни (ISO/IEC 3166-1). Використовується для встановлення нормативного домену. Встановіть за потреби, щоб вказати країну, у якій працює пристрій. Це може обмежити доступні канали та потужність передачі." #: ../../configuration/policy/community-list.rst:17 msgid "Creat community-list policy identified by name <text>." -msgstr "Creat community-list policy identified by name <text>." +msgstr "Створіть політику списків спільнот, визначену за назвою<text> ." #: ../../configuration/policy/extcommunity-list.rst:17 msgid "Creat extcommunity-list policy identified by name <text>." -msgstr "Creat extcommunity-list policy identified by name <text>." +msgstr "Створити політику списку зовнішньої спільноти, ідентифіковану за назвою<text> ." -#: ../../configuration/service/dhcp-server.rst:104 +#: ../../configuration/service/dhcp-server.rst:120 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." -msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool starts at address `<address>`." +msgstr "Створіть діапазон адрес DHCP з ідентифікатором діапазону `<n> `. Оренда DHCP береться з цього пулу. Пул починається за адресою `<address> `." -#: ../../configuration/service/dhcp-server.rst:110 +#: ../../configuration/service/dhcp-server.rst:126 msgid "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." -msgstr "Create DHCP address range with a range id of `<n>`. DHCP leases are taken from this pool. The pool stops with address `<address>`." +msgstr "Створіть діапазон адрес DHCP з ідентифікатором діапазону `<n> `. Оренда DHCP береться з цього пулу. Пул зупиняється з адресою `<address> `." #: ../../configuration/service/dhcp-server.rst:26 msgid "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" -msgstr "Create DNS record per client lease, by adding clients to /etc/hosts file. Entry will have format: `<shared-network-name>_<hostname>.<domain-name>`" +msgstr "Створіть запис DNS для кожного клієнта, додавши клієнтів до файлу /etc/hosts. Формат запису: `<shared-network-name> _<hostname> .<domain-name> `" -#: ../../configuration/vpn/sstp.rst:70 +#: ../../configuration/service/pppoe-server.rst:49 +#: ../../configuration/vpn/l2tp.rst:36 +#: ../../configuration/vpn/pptp.rst:38 +#: ../../configuration/vpn/sstp.rst:63 msgid "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." -msgstr "Create `<user>` for local authentication on this system. The users password will be set to `<pass>`." +msgstr "Створити `<user> ` для локальної автентифікації в цій системі. Пароль користувача буде встановлено на `<pass> `." + +#: ../../configuration/service/dhcp-server.rst:160 +msgid "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." +msgstr "Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of Unifi controller at ``172.16.100.1`` to clients of that subnet." + +#: ../../configuration/pki/index.rst:373 +msgid "Create a CA chain and leaf certificates" +msgstr "Create a CA chain and leaf certificates" -#: ../../configuration/interfaces/bridge.rst:190 +#: ../../configuration/interfaces/bridge.rst:199 msgid "Create a basic bridge" -msgstr "Create a basic bridge" +msgstr "Створіть базовий міст" #: ../../configuration/service/snmp.rst:252 msgid "Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using the following content:" -msgstr "Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using the following content:" +msgstr "Створіть файл із назвою ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands``, використовуючи такий вміст:" #: ../../configuration/loadbalancing/wan.rst:44 msgid "Create a load balancing rule, it can be a number between 1 and 9999:" -msgstr "Create a load balancing rule, it can be a number between 1 and 9999:" +msgstr "Створіть правило балансування навантаження, це може бути число від 1 до 9999:" + +#: ../../configuration/service/dhcp-server.rst:239 +msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." +msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its DHCP unique identifier (DUID) `<identifier>`." -#: ../../configuration/service/dhcp-server.rst:183 +#: ../../configuration/service/dhcp-server.rst:233 msgid "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." -msgstr "Create a new DHCP static mapping named `<description>` which is valid for the host identified by its MAC `<address>`." +msgstr "Створіть нове статичне відображення DHCP під назвою `<description> ` який дійсний для хоста, визначеного його MAC `<address> `." #: ../../_include/interface-vlan-8021q.txt:26 msgid "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." -msgstr "Create a new VLAN interface on interface `<interface>` using the VLAN number provided via `<vlan-id>`." +msgstr "Створіть новий інтерфейс VLAN на інтерфейсі `<interface> ` використовуючи номер VLAN, наданий через `<vlan-id> `." -#: ../../configuration/pki/index.rst:40 -#: ../../configuration/pki/index.rst:45 +#: ../../configuration/pki/index.rst:42 +#: ../../configuration/pki/index.rst:47 msgid "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." -msgstr "Create a new :abbr:`CA (Certificate Authority)` and output the CAs public and private key on the console." +msgstr "Створіть новий :abbr:`CA (Certificate Authority)` і виведіть відкритий і закритий ключ CA на консоль." -#: ../../configuration/pki/index.rst:67 -#: ../../configuration/pki/index.rst:71 +#: ../../configuration/pki/index.rst:69 +#: ../../configuration/pki/index.rst:73 msgid "Create a new public/private keypair and output the certificate on the console." -msgstr "Create a new public/private keypair and output the certificate on the console." +msgstr "Створіть нову пару відкритих/приватних ключів і виведіть сертифікат на консоль." -#: ../../configuration/pki/index.rst:89 -#: ../../configuration/pki/index.rst:94 +#: ../../configuration/pki/index.rst:91 +#: ../../configuration/pki/index.rst:96 msgid "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." -msgstr "Create a new public/private keypair which is signed by the CA referenced by `ca-name`. The signed certificate is then output to the console." +msgstr "Створіть нову пару відкритих/приватних ключів, підписану ЦС, на яку посилається `ca-name`. Потім підписаний сертифікат виводиться на консоль." -#: ../../configuration/pki/index.rst:77 -#: ../../configuration/pki/index.rst:82 +#: ../../configuration/pki/index.rst:79 +#: ../../configuration/pki/index.rst:84 msgid "Create a new self-signed certificate. The public/private is then shown on the console." -msgstr "Create a new self-signed certificate. The public/private is then shown on the console." +msgstr "Створіть новий самопідписаний сертифікат. Публічний/приватний потім буде показано на консолі." -#: ../../configuration/pki/index.rst:52 +#: ../../configuration/pki/index.rst:54 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." -msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `ca-name`." +msgstr "Створіть новий підпорядкований :abbr:`CA (Центр сертифікації)` та підпишіть його за допомогою закритого ключа, на який посилається `ca-name`." -#: ../../configuration/pki/index.rst:57 +#: ../../configuration/pki/index.rst:59 msgid "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." -msgstr "Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it using the private key referenced by `name`." +msgstr "Створіть новий підпорядкований :abbr:`CA (Центр сертифікації)` та підпишіть його за допомогою закритого ключа, на який посилається `name`." #: ../../configuration/protocols/bgp.rst:198 msgid "Create a peer as you would when you specify an ASN, except that if the peers ASN is different than mine as specified under the :cfgcmd:`protocols bgp <asn>` command the connection will be denied." -msgstr "Create a peer as you would when you specify an ASN, except that if the peers ASN is different than mine as specified under the :cfgcmd:`protocols bgp <asn>` command the connection will be denied." +msgstr "Створіть одноранговий вузол, як ви робите, коли вказуєте ASN, за винятком того, що ASN однорангового вузла відрізняється від мого, як зазначено в :cfgcmd:`protocols bgp<asn> ` підключення буде заборонено." #: ../../configuration/protocols/bgp.rst:205 msgid "Create a peer as you would when you specify an ASN, except that if the peers ASN is the same as mine as specified under the :cfgcmd:`protocols bgp <asn>` command the connection will be denied." -msgstr "Create a peer as you would when you specify an ASN, except that if the peers ASN is the same as mine as specified under the :cfgcmd:`protocols bgp <asn>` command the connection will be denied." +msgstr "Створіть одноранговий вузол, як і коли ви вказуєте ASN, за винятком того, що ASN однорангового вузла такий самий, як мій, як зазначено в :cfgcmd:`protocols bgp<asn> ` підключення буде заборонено." #: ../../configuration/system/host-name.rst:58 msgid "Create a static hostname mapping which will always resolve the name `<hostname>` to IP address `<address>`." -msgstr "Create a static hostname mapping which will always resolve the name `<hostname>` to IP address `<address>`." +msgstr "Створіть статичне відображення імені хоста, яке завжди розпізнаватиме ім’я `<hostname> ` на IP-адресу `<address> `." #: ../../configuration/policy/as-path-list.rst:17 msgid "Create as-path-policy identified by name <text>." -msgstr "Create as-path-policy identified by name <text>." +msgstr "Створіть політику as-path, ідентифіковану за назвою<text> ." #: ../../configuration/firewall/flowtables.rst:64 msgid "Create firewall rule: create a firewall rule, setting action to ``offload`` and using desired flowtable for ``offload-target``." @@ -3676,39 +4168,48 @@ msgstr "Create flowtable: create flowtable, which includes the interfaces that a #: ../../configuration/policy/large-community-list.rst:17 msgid "Create large-community-list policy identified by name <text>." -msgstr "Create large-community-list policy identified by name <text>." +msgstr "Створіть політику списку великої спільноти, визначену назвою<text> ." #: ../../configuration/system/host-name.rst:64 msgid "Create named `<alias>` for the configured static mapping for `<hostname>`. Thus the address configured as :cfgcmd:`set system static-host-mapping host-name <hostname> inet <address>` can be reached via multiple names." -msgstr "Create named `<alias>` for the configured static mapping for `<hostname>`. Thus the address configured as :cfgcmd:`set system static-host-mapping host-name <hostname> inet <address>` can be reached via multiple names." +msgstr "Створити під назвою `<alias> ` для налаштованого статичного відображення для `<hostname> `. Таким чином, адреса налаштована як :cfgcmd:`set system static-host-mapping host-name<hostname> інет<address> ` можна отримати за допомогою кількох імен." #: ../../configuration/vrf/index.rst:23 msgid "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." -msgstr "Create new VRF instance with `<name>`. The name is used when placing individual interfaces into the VRF." +msgstr "Створіть новий екземпляр VRF за допомогою `<name> `. Назва використовується під час розміщення окремих інтерфейсів у VRF." -#: ../../configuration/service/dns.rst:234 +#: ../../configuration/service/dns.rst:248 msgid "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." -msgstr "Create new :rfc:`2136` DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +msgstr "Створіть нову :rfc:`2136` конфігурацію оновлення DNS, яка оновить IP-адресу, призначену `<interface> ` на службі, яку ви налаштували в `<service-name> `." + +#: ../../configuration/service/dns.rst:315 +#: ../../configuration/service/dns.rst:420 +msgid "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." +msgstr "Create new dynamic DNS update configuration which will update the IP address assigned to `<interface>` on the service you configured under `<service-name>`." #: ../../configuration/system/login.rst:21 msgid "Create new system user with username `<name>` and real-name specified by `<string>`." -msgstr "Create new system user with username `<name>` and real-name specified by `<string>`." +msgstr "Створіть нового користувача системи з іменем користувача `<name> ` і справжнє ім'я, визначене `<string> `." #: ../../configuration/loadbalancing/reverse-proxy.rst:31 msgid "Create service `<name>` to listen on <port>" -msgstr "Create service `<name>` to listen on <port>" +msgstr "Створити послугу `<name> ` слухати<port>" -#: ../../configuration/container/index.rst:132 +#: ../../configuration/container/index.rst:140 msgid "Creates a named container network" -msgstr "Creates a named container network" +msgstr "Створює іменовану контейнерну мережу" + +#: ../../configuration/service/ipoe-server.rst:55 +msgid "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" +msgstr "Creates local IPoE user with username=**<interface>** and password=**<MAC>** (mac-address)" #: ../../configuration/vpn/dmvpn.rst:83 msgid "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." -msgstr "Creates static peer mapping of protocol-address to :abbr:`NBMA (Non-broadcast multiple-access network)` address." +msgstr "Створює статичне зіставлення однорангової адреси протоколу з адресою :abbr:`NBMA (неширокомовна мережа множинного доступу)." -#: ../../configuration/interfaces/bridge.rst:192 +#: ../../configuration/interfaces/bridge.rst:201 msgid "Creating a bridge interface is very simple. In this example, we will have:" -msgstr "Creating a bridge interface is very simple. In this example, we will have:" +msgstr "Створити інтерфейс моста дуже просто. У цьому прикладі ми матимемо:" #: ../../configuration/firewall/flowtables.rst:67 msgid "Creating a flow table:" @@ -3716,19 +4217,23 @@ msgstr "Creating a flow table:" #: ../../configuration/trafficpolicy/index.rst:335 msgid "Creating a traffic policy" -msgstr "Creating a traffic policy" +msgstr "Створення політики дорожнього руху" #: ../../configuration/firewall/flowtables.rst:85 msgid "Creating rules for using flow tables:" msgstr "Creating rules for using flow tables:" +#: ../../configuration/container/index.rst:173 +msgid "Credentials can be defined here and will only be used when adding a container image to the system." +msgstr "Credentials can be defined here and will only be used when adding a container image to the system." + #: ../../configuration/system/syslog.rst:178 msgid "Critical" -msgstr "Critical" +msgstr "Критичний" #: ../../configuration/system/syslog.rst:178 msgid "Critical conditions - e.g. hard drive errors." -msgstr "Critical conditions - e.g. hard drive errors." +msgstr "Критичні умови - наприклад, помилки жорсткого диска." #: ../../configuration/system/lcd.rst:33 msgid "Crystalfontz CFA-533" @@ -3752,15 +4257,15 @@ msgstr "Cur Hop Limit" #: ../../configuration/vpn/dmvpn.rst:120 msgid "Currently does not do much as caching is not implemented." -msgstr "Currently does not do much as caching is not implemented." +msgstr "Наразі це мало, оскільки кешування не реалізовано." -#: ../../configuration/vrf/index.rst:86 +#: ../../configuration/vrf/index.rst:105 msgid "Currently dynamic routing is supported for the following protocols:" -msgstr "Currently dynamic routing is supported for the following protocols:" +msgstr "Наразі динамічна маршрутизація підтримується для таких протоколів:" #: ../../configuration/system/syslog.rst:32 msgid "Custom File" -msgstr "Custom File" +msgstr "Спеціальний файл" #: ../../configuration/firewall/bridge.rst:44 msgid "Custom bridge firewall chains can be create with command ``set firewall bridge name <name> ...``. In order to use such custom chain, a rule with action jump, and the appropiate target should be defined in a base chain." @@ -3778,65 +4283,73 @@ msgstr "Custom firewall chains can be created, with commands ``set firewall ipv4 msgid "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." msgstr "Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use such custom chain, a rule with **action jump**, and the appropiate **target** should be defined in a base chain." -#: ../../configuration/highavailability/index.rst:373 +#: ../../configuration/highavailability/index.rst:383 msgid "Custom health-check script allows checking real-server availability" -msgstr "Custom health-check script allows checking real-server availability" +msgstr "Спеціальний скрипт перевірки працездатності дозволяє перевірити доступність реального сервера" #: ../../configuration/system/conntrack.rst:180 msgid "Customized ignore rules, based on a packet and flow selector." -msgstr "Customized ignore rules, based on a packet and flow selector." +msgstr "Налаштовані правила ігнорування на основі селектора пакетів і потоків." #: ../../configuration/interfaces/openvpn.rst:685 msgid "DCO can be enabled for both new and existing tunnels,VyOS adds an option in each tunnel configuration where we can enable this function .The current best practice is to create a new tunnel with DCO to minimize the chance of problems with existing clients." -msgstr "DCO can be enabled for both new and existing tunnels,VyOS adds an option in each tunnel configuration where we can enable this function .The current best practice is to create a new tunnel with DCO to minimize the chance of problems with existing clients." +msgstr "DCO можна ввімкнути як для нових, так і для існуючих тунелів, VyOS додає опцію в конфігурації кожного тунелю, де ми можемо ввімкнути цю функцію. Поточна найкраща практика полягає у створенні нового тунелю за допомогою DCO, щоб мінімізувати ймовірність проблем із наявними клієнтами." #: ../../configuration/interfaces/openvpn.rst:681 msgid "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." -msgstr "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." +msgstr "Підтримка DCO є опцією для кожного тунелю, і вона не вмикається автоматично за замовчуванням для нових або оновлених тунелів. Існуючі тунелі продовжуватимуть функціонувати, як і раніше." + +#: ../../configuration/service/ids.rst:5 +msgid "DDoS Protection" +msgstr "DDoS Protection" + +#: ../../configuration/service/dhcp-server.rst:181 +msgid "DHCP High Availability must be configured explicitly by the following statements on both servers:" +msgstr "DHCP High Availability must be configured explicitly by the following statements on both servers:" #: ../../configuration/service/dhcp-relay.rst:5 msgid "DHCP Relay" -msgstr "DHCP Relay" +msgstr "Ретрансляція DHCP" #: ../../configuration/service/dhcp-server.rst:5 msgid "DHCP Server" -msgstr "DHCP Server" +msgstr "Сервер DHCP" -#: ../../configuration/service/dhcp-server.rst:351 +#: ../../configuration/service/dhcp-server.rst:407 msgid "DHCP failover parameters" -msgstr "DHCP failover parameters" +msgstr "Параметри відновлення після відмови DHCP" -#: ../../configuration/service/dhcp-server.rst:341 +#: ../../configuration/service/dhcp-server.rst:397 msgid "DHCP lease range" -msgstr "DHCP lease range" +msgstr "Діапазон оренди DHCP" -#: ../../configuration/service/dhcp-server.rst:377 +#: ../../configuration/service/dhcp-server.rst:434 msgid "DHCP range spans from `192.168.189.10` - `192.168.189.250`" -msgstr "DHCP range spans from `192.168.189.10` - `192.168.189.250`" +msgstr "Діапазон DHCP від «192.168.189.10» до «192.168.189.250»" #: ../../configuration/service/dhcp-relay.rst:96 msgid "DHCP relay example" -msgstr "DHCP relay example" +msgstr "Приклад ретрансляції DHCP" #: ../../configuration/service/dhcp-relay.rst:88 msgid "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." -msgstr "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``." +msgstr "Сервер DHCP розташований за адресою IPv4 10.0.1.4 на ``eth2``." -#: ../../configuration/service/dhcp-server.rst:584 +#: ../../configuration/service/dhcp-server.rst:643 msgid "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." -msgstr "DHCPv6 address pools must be configured for the system to act as a DHCPv6 server. The following example describes a common scenario." +msgstr "Щоб система діяла як сервер DHCPv6, потрібно налаштувати пули адрес DHCPv6. У наступному прикладі описано типовий сценарій." #: ../../configuration/service/dhcp-relay.rst:184 msgid "DHCPv6 relay example" -msgstr "DHCPv6 relay example" +msgstr "Приклад ретрансляції DHCPv6" #: ../../configuration/service/dhcp-relay.rst:176 msgid "DHCPv6 requests are received by the router on `listening interface` ``eth1``" -msgstr "DHCPv6 requests are received by the router on `listening interface` ``eth1``" +msgstr "Запити DHCPv6 отримує маршрутизатор на `інтерфейсі прослуховування` ``eth1``" #: ../../configuration/nat/nat44.rst:757 msgid "DH Group 14" -msgstr "DH Group 14" +msgstr "DH Група 14" #: ../../configuration/vpn/dmvpn.rst:5 msgid "DMVPN" @@ -3844,19 +4357,19 @@ msgstr "DMVPN" #: ../../configuration/vpn/dmvpn.rst:171 msgid "DMVPN example network" -msgstr "DMVPN example network" +msgstr "Приклад мережі DMVPN" #: ../../configuration/vpn/dmvpn.rst:171 msgid "DMVPN network" -msgstr "DMVPN network" +msgstr "Мережа DMVPN" #: ../../configuration/vpn/dmvpn.rst:26 msgid "DMVPN only automates the tunnel endpoint discovery and setup. A complete solution also incorporates the use of a routing protocol. BGP is particularly well suited for use with DMVPN." -msgstr "DMVPN only automates the tunnel endpoint discovery and setup. A complete solution also incorporates the use of a routing protocol. BGP is particularly well suited for use with DMVPN." +msgstr "DMVPN лише автоматизує виявлення та налаштування кінцевої точки тунелю. Повне рішення також включає використання протоколу маршрутизації. BGP особливо добре підходить для використання з DMVPN." #: ../../configuration/nat/nat44.rst:89 msgid "DNAT" -msgstr "DNAT" +msgstr "ДНАТ" #: ../../configuration/nat/nat66.rst:53 msgid "DNAT66" @@ -3864,11 +4377,11 @@ msgstr "DNAT66" #: ../../configuration/nat/nat44.rst:514 msgid "DNAT is typically referred to as a **Port Forward**. When using VyOS as a NAT router and firewall, a common configuration task is to redirect incoming traffic to a system behind the firewall." -msgstr "DNAT is typically referred to as a **Port Forward**. When using VyOS as a NAT router and firewall, a common configuration task is to redirect incoming traffic to a system behind the firewall." +msgstr "DNAT зазвичай називають **Port Forward**. Під час використання VyOS як NAT-маршрутизатора та брандмауера типовим завданням конфігурації є перенаправлення вхідного трафіку до системи за брандмауером." #: ../../configuration/nat/nat44.rst:280 msgid "DNAT rule 10 replaces the destination address of an inbound packet with 192.0.2.10" -msgstr "DNAT rule 10 replaces the destination address of an inbound packet with 192.0.2.10" +msgstr "Правило DNAT 10 замінює адресу призначення вхідного пакета на 192.0.2.10" #: ../../configuration/service/router-advert.rst:1 msgid "DNSSL" @@ -3876,49 +4389,49 @@ msgstr "DNSSL" #: ../../configuration/service/dns.rst:5 msgid "DNS Forwarding" -msgstr "DNS Forwarding" +msgstr "Переадресація DNS" #: ../../configuration/system/name-server.rst:12 #: ../../configuration/system/name-server.rst:17 msgid "DNS name servers" -msgstr "DNS name servers" +msgstr "DNS-сервери імен" #: ../../configuration/service/router-advert.rst:1 msgid "DNS search list to advertise" -msgstr "DNS search list to advertise" +msgstr "Список пошуку DNS для реклами" -#: ../../configuration/service/dhcp-server.rst:261 +#: ../../configuration/service/dhcp-server.rst:317 msgid "DNS server IPv4 address" -msgstr "DNS server IPv4 address" +msgstr "IPv4-адреса DNS-сервера" -#: ../../configuration/service/dhcp-server.rst:591 +#: ../../configuration/service/dhcp-server.rst:650 msgid "DNS server is located at ``2001:db8::ffff``" -msgstr "DNS server is located at ``2001:db8::ffff``" +msgstr "DNS-сервер розташований за адресою ``2001:db8::ffff``" #: ../../configuration/trafficpolicy/index.rst:259 msgid "DSCP values as per :rfc:`2474` and :rfc:`4595`:" -msgstr "DSCP values as per :rfc:`2474` and :rfc:`4595`:" +msgstr "Значення DSCP відповідно до :rfc:`2474` і :rfc:`4595`:" #: ../../configuration/interfaces/wireless.rst:182 msgid "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" -msgstr "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" +msgstr "Режим DSSS/CCK у 40 МГц, це встановлює ``[DSSS_CCK-40]``" -#: ../../configuration/firewall/ipv4.rst:444 +#: ../../configuration/firewall/ipv4.rst:467 #: ../../configuration/firewall/ipv6.rst:451 msgid "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." -msgstr "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." +msgstr "Дані надаються DB-IP.com за ліцензією CC-BY-4.0. Потрібне посилання на авторство, дозволяє перерозподіл, щоб ми могли включити базу даних у зображення (~3 МБ стиснутих). Включає сценарій cron (викликається вручну за допомогою оновленого режиму geoip) для оновлення бази даних і правил." #: ../../configuration/system/syslog.rst:191 msgid "Debug" -msgstr "Debug" +msgstr "Відлагоджувати" #: ../../configuration/system/syslog.rst:191 msgid "Debug-level messages - Messages that contain information normally of use only when debugging a program." -msgstr "Debug-level messages - Messages that contain information normally of use only when debugging a program." +msgstr "Повідомлення рівня налагодження - повідомлення, які містять інформацію, яка зазвичай використовується лише під час налагодження програми." #: ../../configuration/trafficpolicy/index.rst:217 msgid "Default" -msgstr "Default" +msgstr "За замовчуванням" #: ../../_include/interface-ipv6.txt:94 msgid "Default: 1" @@ -3930,95 +4443,102 @@ msgstr "Default: 443" #: ../../configuration/protocols/failover.rst:58 msgid "Default 1." -msgstr "Default 1." +msgstr "За замовчуванням 1." #: ../../configuration/system/default-route.rst:5 msgid "Default Gateway/Route" -msgstr "Default Gateway/Route" +msgstr "Шлюз/маршрут за замовчуванням" #: ../../configuration/service/router-advert.rst:1 msgid "Default Router Preference" -msgstr "Default Router Preference" +msgstr "Налаштування маршрутизатора за замовчуванням" -#: ../../configuration/vpn/sstp.rst:201 +#: ../../configuration/service/pppoe-server.rst:509 +#: ../../configuration/vpn/l2tp.rst:463 +#: ../../configuration/vpn/pptp.rst:387 +#: ../../configuration/vpn/sstp.rst:421 msgid "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." -msgstr "Default behavior - don't ask client for mppe, but allow it if client wants. Please note that RADIUS may override this option by MS-MPPE-Encryption-Policy attribute." +msgstr "Поведінка за замовчуванням - не запитувати у клієнта mppe, але дозволити це, якщо клієнт хоче. Зауважте, що RADIUS може замінити цей параметр атрибутом MS-MPPE-Encryption-Policy." -#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:431 msgid "Default gateway and DNS server is at `192.0.2.254`" -msgstr "Default gateway and DNS server is at `192.0.2.254`" +msgstr "Шлюз за замовчуванням і DNS-сервер мають адресу `192.0.2.254`" -#: ../../configuration/container/index.rst:108 +#: ../../configuration/container/index.rst:113 msgid "Default is 512 MB. Use 0 MB for unlimited memory." -msgstr "Default is 512 MB. Use 0 MB for unlimited memory." +msgstr "За замовчуванням 512 МБ. Використовуйте 0 МБ для необмеженої пам'яті." #: ../../configuration/protocols/failover.rst:46 msgid "Default is ``any-available``." -msgstr "Default is ``any-available``." +msgstr "За замовчуванням ``будь-який-доступний``." #: ../../configuration/protocols/failover.rst:33 msgid "Default is ``icmp``." -msgstr "Default is ``icmp``." +msgstr "Типовим є ``icmp``." #: ../../_include/interface-disable-link-detect.txt:7 msgid "Default is to detects physical link state changes." -msgstr "Default is to detects physical link state changes." +msgstr "За умовчанням виявляє зміни стану фізичного з’єднання." #: ../../configuration/service/webproxy.rst:52 msgid "Default port is 3128." -msgstr "Default port is 3128." +msgstr "Стандартний порт 3128." #: ../../configuration/service/webproxy.rst:294 msgid "Defaults to 'uid'" -msgstr "Defaults to 'uid'" +msgstr "За замовчуванням "uid"" #: ../../configuration/service/conntrack-sync.rst:85 msgid "Defaults to 225.0.0.50." -msgstr "Defaults to 225.0.0.50." +msgstr "За замовчуванням 225.0.0.50." -#: ../../configuration/system/option.rst:68 +#: ../../configuration/system/option.rst:98 msgid "Defaults to ``us``." -msgstr "Defaults to ``us``." +msgstr "За замовчуванням ``us``." #: ../../configuration/system/conntrack.rst:51 msgid "Define Conection Timeouts" -msgstr "Define Conection Timeouts" +msgstr "Визначте час очікування підключення" #: ../../configuration/service/lldp.rst:44 msgid "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." -msgstr "Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses can be defined. Only addresses connected to the system will be transmitted." +msgstr "Визначте адресу керування IPv4/IPv6, що передається через LLDP. Можна визначити кілька адрес. Будуть передані лише адреси, підключені до системи." + +#: ../../configuration/container/index.rst:148 +msgid "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." +msgstr "Define IPv4 or IPv6 prefix for a given network name. Only one IPv4 and one IPv6 prefix can be used per network name." #: ../../configuration/firewall/groups.rst:52 msgid "Define a IPv4 or IPv6 Network group." -msgstr "Define a IPv4 or IPv6 Network group." +msgstr "Визначте мережеву групу IPv4 або IPv6." #: ../../configuration/firewall/groups.rst:28 msgid "Define a IPv4 or a IPv6 address group" -msgstr "Define a IPv4 or a IPv6 address group" +msgstr "Визначте групу адрес IPv4 або IPv6" #: ../../configuration/firewall/zone.rst:78 msgid "Define a Zone" -msgstr "Define a Zone" +msgstr "Визначте зону" #: ../../configuration/nat/nat44.rst:258 msgid "Define a discrete source IP address of 100.64.0.1 for SNAT rule 20" -msgstr "Define a discrete source IP address of 100.64.0.1 for SNAT rule 20" +msgstr "Визначте дискретну IP-адресу джерела 100.64.0.1 для правила SNAT 20" #: ../../configuration/firewall/groups.rst:133 msgid "Define a domain group." -msgstr "Define a domain group." +msgstr "Визначте доменну групу." #: ../../configuration/firewall/groups.rst:115 msgid "Define a mac group." -msgstr "Define a mac group." +msgstr "Визначте групу Mac." #: ../../configuration/firewall/groups.rst:95 msgid "Define a port group. A port name can be any name defined in /etc/services. e.g.: http" -msgstr "Define a port group. A port name can be any name defined in /etc/services. e.g.: http" +msgstr "Визначте групу портів. Ім’ям порту може бути будь-яке ім’я, визначене в /etc/services. наприклад: http" #: ../../configuration/service/ssh.rst:50 msgid "Define allowed ciphers used for the SSH connection. A number of allowed ciphers can be specified, use multiple occurrences to allow multiple ciphers." -msgstr "Define allowed ciphers used for the SSH connection. A number of allowed ciphers can be specified, use multiple occurrences to allow multiple ciphers." +msgstr "Визначте дозволені шифри, які використовуються для з’єднання SSH. Можна вказати кількість дозволених шифрів, використовуйте кілька входжень, щоб дозволити кілька шифрів." #: ../../configuration/firewall/groups.rst:72 msgid "Define an interface group. Wildcard are accepted too." @@ -4026,19 +4546,23 @@ msgstr "Define an interface group. Wildcard are accepted too." #: ../../_include/interface-ip.txt:85 msgid "Define behavior for gratuitous ARP frames who's IP is not already present in the ARP table. If configured create new entries in the ARP table." -msgstr "Define behavior for gratuitous ARP frames who's IP is not already present in the ARP table. If configured create new entries in the ARP table." +msgstr "Визначте поведінку для безкоштовних кадрів ARP, IP-адреса яких ще не присутня в таблиці ARP. Якщо налаштовано, створювати нові записи в таблиці ARP." #: ../../_include/interface-ip.txt:69 msgid "Define different modes for IP directed broadcast forwarding as described in :rfc:`1812` and :rfc:`2644`." -msgstr "Define different modes for IP directed broadcast forwarding as described in :rfc:`1812` and :rfc:`2644`." +msgstr "Визначте різні режими для IP-адреси широкомовної переадресації, як описано в :rfc:`1812` і :rfc:`2644`." #: ../../_include/interface-ip.txt:121 msgid "Define different modes for sending replies in response to received ARP requests that resolve local target IP addresses:" -msgstr "Define different modes for sending replies in response to received ARP requests that resolve local target IP addresses:" +msgstr "Визначте різні режими для надсилання відповідей у відповідь на отримані запити ARP, які розпізнають локальні цільові IP-адреси:" #: ../../_include/interface-ip.txt:101 msgid "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." -msgstr "Define different restriction levels for announcing the local source IP address from IP packets in ARP requests sent on interface." +msgstr "Визначте різні рівні обмежень для оголошення IP-адреси локального джерела з IP-пакетів у запитах ARP, надісланих через інтерфейс." + +#: ../../configuration/service/ntp.rst:88 +msgid "Define how to handle leaf-seonds." +msgstr "Define how to handle leaf-seonds." #: ../../configuration/firewall/flowtables.rst:71 msgid "Define interfaces to be used in the flowtable." @@ -4048,215 +4572,294 @@ msgstr "Define interfaces to be used in the flowtable." #: ../../configuration/firewall/ipv4.rst:252 #: ../../configuration/firewall/ipv6.rst:252 msgid "Define length of packet payload to include in netlink message. Only applicable if rule log is enable and log group is defined." -msgstr "Define length of packet payload to include in netlink message. Only applicable if rule log is enable and log group is defined." +msgstr "Визначте довжину корисного навантаження пакета для включення в повідомлення мережі. Застосовується, лише якщо ввімкнено журнал правил і визначено групу журналу." #: ../../configuration/firewall/bridge.rst:173 #: ../../configuration/firewall/ipv4.rst:230 #: ../../configuration/firewall/ipv6.rst:230 msgid "Define log-level. Only applicable if rule log is enable." -msgstr "Define log-level. Only applicable if rule log is enable." +msgstr "Визначте рівень журналу. Застосовується, лише якщо журнал правил увімкнено." #: ../../configuration/firewall/bridge.rst:180 #: ../../configuration/firewall/ipv4.rst:241 #: ../../configuration/firewall/ipv6.rst:241 msgid "Define log group to send message to. Only applicable if rule log is enable." -msgstr "Define log group to send message to. Only applicable if rule log is enable." +msgstr "Визначте групу журналу для надсилання повідомлення. Застосовується, лише якщо журнал правил увімкнено." #: ../../configuration/firewall/bridge.rst:195 #: ../../configuration/firewall/ipv4.rst:264 #: ../../configuration/firewall/ipv6.rst:264 msgid "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." -msgstr "Define number of packets to queue inside the kernel before sending them to userspace. Only applicable if rule log is enable and log group is defined." +msgstr "Визначте кількість пакетів у черзі всередині ядра перед надсиланням їх у простір користувача. Застосовується, лише якщо ввімкнено журнал правил і визначено групу журналу." -#: ../../configuration/protocols/rpki.rst:108 +#: ../../configuration/service/dhcp-server.rst:187 +msgid "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" +msgstr "Define operation mode of High Availability feature. Default value if command is not specified is `active-active`" + +#: ../../configuration/protocols/rpki.rst:106 msgid "Define the time interval to update the local cache" -msgstr "Define the time interval to update the local cache" +msgstr "Визначте інтервал часу для оновлення локального кешу" #: ../../configuration/firewall/zone.rst:89 msgid "Define the zone as a local zone. A local zone has no interfaces and will be applied to the router itself." -msgstr "Define the zone as a local zone. A local zone has no interfaces and will be applied to the router itself." +msgstr "Визначте зону як локальну зону. Локальна зона не має інтерфейсів і буде застосована до самого маршрутизатора." #: ../../configuration/firewall/flowtables.rst:80 msgid "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." msgstr "Define type of offload to be used by the flowtable: ``hardware`` or ``software``. By default, ``software`` offload is used." -#: ../../configuration/protocols/rpki.rst:114 +#: ../../configuration/interfaces/bridge.rst:135 +msgid "Define used ethertype of bridge interface." +msgstr "Define used ethertype of bridge interface." + +#: ../../configuration/protocols/rpki.rst:126 msgid "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." -msgstr "Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching instance which is used." +msgstr "Визначено IPv4, IPv6 або FQDN і номер порту екземпляра кешування RPKI, який використовується." #: ../../configuration/protocols/igmp-proxy.rst:30 msgid "Defines alternate sources for multicasting and IGMP data. The network address must be on the following format 'a.b.c.d/n'. By default, the router will accept data from sources on the same network as configured on an interface. If the multicast source lies on a remote network, one must define from where traffic should be accepted." -msgstr "Defines alternate sources for multicasting and IGMP data. The network address must be on the following format 'a.b.c.d/n'. By default, the router will accept data from sources on the same network as configured on an interface. If the multicast source lies on a remote network, one must define from where traffic should be accepted." +msgstr "Визначає альтернативні джерела для багатоадресної передачі та даних IGMP. Адреса мережі має бути у форматі «abcd/n». За замовчуванням маршрутизатор прийматиме дані з джерел у тій же мережі, що налаштована на інтерфейсі. Якщо джерело багатоадресної передачі знаходиться у віддаленій мережі, необхідно визначити, звідки має прийматися трафік." #: ../../configuration/vpn/dmvpn.rst:148 msgid "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." -msgstr "Defines an off-NBMA network prefix for which the GRE interface will act as a gateway. This an alternative to defining local interfaces with shortcut-destination flag." +msgstr "Визначає мережевий префікс поза NBMA, для якого інтерфейс GRE діятиме як шлюз. Це альтернатива визначенню локальних інтерфейсів за допомогою прапора ярлика призначення." -#: ../../configuration/protocols/static.rst:120 -#: ../../configuration/protocols/static.rst:133 +#: ../../configuration/protocols/static.rst:154 +#: ../../configuration/protocols/static.rst:167 msgid "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." -msgstr "Defines blackhole distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +msgstr "Визначає відстань чорної діри для цього маршруту, маршрути з меншою адміністративною відстанню обираються перед маршрутами з більшою відстанню." + +#: ../../configuration/service/pppoe-server.rst:496 +#: ../../configuration/vpn/l2tp.rst:450 +#: ../../configuration/vpn/pptp.rst:374 +#: ../../configuration/vpn/sstp.rst:408 +msgid "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." +msgstr "Defines minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Default value is **100**." #: ../../configuration/protocols/static.rst:34 #: ../../configuration/protocols/static.rst:54 -#: ../../configuration/protocols/static.rst:81 -#: ../../configuration/protocols/static.rst:101 +#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:124 msgid "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." -msgstr "Defines next-hop distance for this route, routes with smaller administrative distance are elected prior to those with a higher distance." +msgstr "Визначає відстань наступного переходу для цього маршруту, маршрути з меншою адміністративною відстанню обираються перед маршрутами з більшою відстанню." + +#: ../../configuration/service/pppoe-server.rst:515 +#: ../../configuration/vpn/l2tp.rst:469 +#: ../../configuration/vpn/pptp.rst:393 +#: ../../configuration/vpn/sstp.rst:427 +msgid "Defines preferred MRU. By default is not defined." +msgstr "Defines preferred MRU. By default is not defined." #: ../../configuration/protocols/failover.rst:31 msgid "Defines protocols for checking ARP, ICMP, TCP" -msgstr "Defines protocols for checking ARP, ICMP, TCP" +msgstr "Визначає протоколи для перевірки ARP, ICMP, TCP" -#: ../../configuration/vpn/sstp.rst:178 +#: ../../configuration/vpn/sstp.rst:184 msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." -msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset." +msgstr "Визначає максимум `<number> ` ехо-запитів без відповіді. При досягненні значення `<number> `, сеанс буде скинуто." + +#: ../../configuration/service/pppoe-server.rst:479 +#: ../../configuration/vpn/l2tp.rst:433 +#: ../../configuration/vpn/pptp.rst:357 +#: ../../configuration/vpn/sstp.rst:391 +msgid "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." +msgstr "Defines the maximum `<number>` of unanswered echo requests. Upon reaching the value `<number>`, the session will be reset. Default value is **3**." + +#: ../../configuration/trafficpolicy/index.rst:1213 +msgid "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." +msgstr "Defines the round-trip time used for active queue management (AQM) in milliseconds. The default value is 100." #: ../../configuration/system/console.rst:21 msgid "Defines the specified device as a system console. Available console devices can be (see completion helper):" -msgstr "Defines the specified device as a system console. Available console devices can be (see completion helper):" +msgstr "Визначає вказаний пристрій як системну консоль. Доступні консольні пристрої (див. помічник завершення):" #: ../../configuration/protocols/bgp.rst:186 msgid "Defining Peers" -msgstr "Defining Peers" +msgstr "Визначення однолітків" -#: ../../configuration/service/dhcp-server.rst:579 +#: ../../configuration/service/dhcp-server.rst:638 msgid "Delegate prefixes from the range indicated by the start and stop qualifier." -msgstr "Delegate prefixes from the range indicated by the start and stop qualifier." +msgstr "Делегуйте префікси з діапазону, зазначеного кваліфікатором початку та завершення." -#: ../../configuration/policy/route-map.rst:231 +#: ../../configuration/policy/route-map.rst:234 msgid "Delete BGP communities matching the community-list." -msgstr "Delete BGP communities matching the community-list." +msgstr "Видалити спільноти BGP, які відповідають списку спільнот." -#: ../../configuration/policy/route-map.rst:246 +#: ../../configuration/policy/route-map.rst:249 msgid "Delete BGP communities matching the large-community-list." -msgstr "Delete BGP communities matching the large-community-list." +msgstr "Видалити спільноти BGP, які відповідають списку великих спільнот." #: ../../configuration/system/syslog.rst:240 msgid "Delete Logs" -msgstr "Delete Logs" +msgstr "Видалити журнали" -#: ../../configuration/policy/route-map.rst:226 +#: ../../configuration/container/index.rst:211 +msgid "Delete a particular container image based on it's image ID. You can also delete all container images at once." +msgstr "Delete a particular container image based on it's image ID. You can also delete all container images at once." + +#: ../../configuration/policy/route-map.rst:229 msgid "Delete all BGP communities" -msgstr "Delete all BGP communities" +msgstr "Видалити всі спільноти BGP" -#: ../../configuration/policy/route-map.rst:241 +#: ../../configuration/policy/route-map.rst:244 msgid "Delete all BGP large-communities" -msgstr "Delete all BGP large-communities" +msgstr "Видалити всі великі спільноти BGP" #: ../../configuration/system/default-route.rst:22 msgid "Delete default route from the system." -msgstr "Delete default route from the system." +msgstr "Видалити маршрут за замовчуванням із системи." #: ../../configuration/system/syslog.rst:244 msgid "Deletes the specified user-defined file <text> in the /var/log/user directory" -msgstr "Deletes the specified user-defined file <text> in the /var/log/user directory" +msgstr "Видаляє вказаний файл, визначений користувачем<text> у каталозі /var/log/user" #: ../../configuration/interfaces/wireless.rst:161 msgid "Depending on the location, not all of these channels may be available for use!" -msgstr "Depending on the location, not all of these channels may be available for use!" +msgstr "Залежно від місця розташування, не всі ці канали можуть бути доступні для використання!" #: ../../configuration/service/router-advert.rst:1 #: ../../configuration/system/syslog.rst:107 #: ../../configuration/system/syslog.rst:167 #: ../../configuration/trafficpolicy/index.rst:262 msgid "Description" -msgstr "Description" +msgstr "Опис" #: ../../configuration/trafficpolicy/index.rst:366 msgid "Despite the Drop-Tail policy does not slow down packets, if many packets are to be sent, they could get dropped when trying to get enqueued at the tail. This can happen if the queue has still not been able to release enough packets from its head." -msgstr "Despite the Drop-Tail policy does not slow down packets, if many packets are to be sent, they could get dropped when trying to get enqueued at the tail. This can happen if the queue has still not been able to release enough packets from its head." +msgstr "Незважаючи на те, що політика Drop-Tail не сповільнює пакети, якщо потрібно надіслати багато пакетів, вони можуть бути відкинуті під час спроби потрапити в чергу в кінці. Це може статися, якщо черга все ще не змогла вивільнити достатню кількість пакетів із голови." #: ../../configuration/interfaces/openvpn.rst:485 msgid "Despite the fact that AD is a superset of LDAP" -msgstr "Despite the fact that AD is a superset of LDAP" +msgstr "Незважаючи на те, що AD є надмножиною LDAP" #: ../../configuration/nat/nat44.rst:273 msgid "Destination Address" -msgstr "Destination Address" +msgstr "Адреса призначення" #: ../../configuration/nat/nat44.rst:512 msgid "Destination NAT" -msgstr "Destination NAT" +msgstr "Призначення NAT" #: ../../configuration/nat/nat66.rst:90 msgid "Destination Prefix" -msgstr "Destination Prefix" +msgstr "Префікс призначення" #: ../../configuration/protocols/ospf.rst:131 msgid "Detailed information about \"cisco\" and \"ibm\" models differences can be found in :rfc:`3509`. A \"shortcut\" model allows ABR to create routes between areas based on the topology of the areas connected to this router but not using a backbone area in case if non-backbone route will be cheaper. For more information about \"shortcut\" model, see :t:`ospf-shortcut-abr-02.txt`" -msgstr "Detailed information about \"cisco\" and \"ibm\" models differences can be found in :rfc:`3509`. A \"shortcut\" model allows ABR to create routes between areas based on the topology of the areas connected to this router but not using a backbone area in case if non-backbone route will be cheaper. For more information about \"shortcut\" model, see :t:`ospf-shortcut-abr-02.txt`" +msgstr "Детальну інформацію про відмінності моделей "cisco" та "ibm" можна знайти в :rfc:`3509`. Модель «ярлика» дозволяє ABR створювати маршрути між областями на основі топології областей, підключених до цього маршрутизатора, але не використовуючи магістральну область у випадку, якщо безмагістральний маршрут буде дешевшим. Для отримання додаткової інформації про модель "ярлика" див. :t:`ospf-shortcut-abr-02.txt`" #: ../../configuration/vpn/dmvpn.rst:100 msgid "Determines how opennhrp daemon should soft switch the multicast traffic. Currently, multicast traffic is captured by opennhrp daemon using a packet socket, and resent back to proper destinations. This means that multicast packet sending is CPU intensive." -msgstr "Determines how opennhrp daemon should soft switch the multicast traffic. Currently, multicast traffic is captured by opennhrp daemon using a packet socket, and resent back to proper destinations. This means that multicast packet sending is CPU intensive." +msgstr "Визначає, як демон opennhrp має м’яко перемикати багатоадресний трафік. Наразі багатоадресний трафік захоплюється демоном opennhrp за допомогою пакетного сокета та повторно надсилається назад до належних місць призначення. Це означає, що багатоадресне надсилання пакетів інтенсивно використовує ЦП." #: ../../configuration/interfaces/wireless.rst:141 msgid "Device is incapable of 40 MHz, do not advertise. This sets ``[40-INTOLERANT]``" -msgstr "Device is incapable of 40 MHz, do not advertise. This sets ``[40-INTOLERANT]``" +msgstr "Пристрій не підтримує 40 МГц, не рекламуйте. Це встановлює ``[40-INTOLERANT]``" #: ../../configuration/nat/nat44.rst:63 msgid "Devices evaluating whether an IPv4 address is public must be updated to recognize the new address space. Allocating more private IPv4 address space for NAT devices might prolong the transition to IPv6." -msgstr "Devices evaluating whether an IPv4 address is public must be updated to recognize the new address space. Allocating more private IPv4 address space for NAT devices might prolong the transition to IPv6." +msgstr "Пристрої, які оцінюють, чи є адреса IPv4 загальнодоступною, мають бути оновлені, щоб розпізнавати новий адресний простір. Виділення більшого простору приватних адрес IPv4 для пристроїв NAT може продовжити перехід на IPv6." #: ../../configuration/nat/nat44.rst:71 #: ../../configuration/nat/nat64.rst:21 #: ../../configuration/nat/nat66.rst:18 msgid "Different NAT Types" -msgstr "Different NAT Types" +msgstr "Різні типи NAT" -#: ../../configuration/pki/index.rst:100 +#: ../../configuration/pki/index.rst:102 msgid "Diffie-Hellman parameters" -msgstr "Diffie-Hellman parameters" +msgstr "Параметри Діффі-Хеллмана" + +#: ../../configuration/service/ids.rst:93 +msgid "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." +msgstr "Direction: **in** and **out**. Protect public network from external attacks, and identify internal attacks towards internet." + +#: ../../configuration/system/option.rst:46 +msgid "Disable CPU power saving mechanisms also known as C states." +msgstr "Disable CPU power saving mechanisms also known as C states." + +#: ../../configuration/service/pppoe-server.rst:457 +#: ../../configuration/vpn/l2tp.rst:411 +#: ../../configuration/vpn/pptp.rst:335 +#: ../../configuration/vpn/sstp.rst:369 +msgid "Disable Compression Control Protocol (CCP). CCP is enabled by default." +msgstr "Disable Compression Control Protocol (CCP). CCP is enabled by default." #: ../../configuration/protocols/pim6.rst:37 msgid "Disable MLD reports and query on the interface." msgstr "Disable MLD reports and query on the interface." -#: ../../configuration/vpn/sstp.rst:75 +#: ../../configuration/system/login.rst:39 +msgid "Disable (lock) account. User will not be able to log in." +msgstr "Disable (lock) account. User will not be able to log in." + +#: ../../configuration/service/pppoe-server.rst:432 +#: ../../configuration/vpn/l2tp.rst:376 +#: ../../configuration/vpn/pptp.rst:300 +#: ../../configuration/vpn/sstp.rst:334 msgid "Disable `<user>` account." -msgstr "Disable `<user>` account." +msgstr "Вимкнути `<user> ` обліковий запис." #: ../../configuration/protocols/bfd.rst:57 msgid "Disable a BFD peer" -msgstr "Disable a BFD peer" +msgstr "Вимкнути BFD-пір" -#: ../../configuration/container/index.rst:128 +#: ../../configuration/container/index.rst:133 msgid "Disable a container." -msgstr "Disable a container." +msgstr "Вимкнути контейнер." + +#: ../../configuration/container/index.rst:166 +msgid "Disable a given container registry" +msgstr "Disable a given container registry" + +#: ../../configuration/system/option.rst:35 +msgid "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." +msgstr "Disable all optional CPU mitigations. This improves system performance, but it may also expose users to several CPU vulnerabilities." -#: ../../configuration/firewall/ipv4.rst:930 +#: ../../configuration/service/conntrack-sync.rst:103 +msgid "Disable connection logging via Syslog." +msgstr "Disable connection logging via Syslog." + +#: ../../configuration/firewall/ipv4.rst:953 #: ../../configuration/firewall/ipv6.rst:939 msgid "Disable conntrack loose track option" msgstr "Disable conntrack loose track option" #: ../../configuration/service/dhcp-relay.rst:50 msgid "Disable dhcp-relay service." -msgstr "Disable dhcp-relay service." +msgstr "Вимкнути службу dhcp-relay." #: ../../configuration/service/dhcp-relay.rst:155 msgid "Disable dhcpv6-relay service." -msgstr "Disable dhcpv6-relay service." +msgstr "Вимкнути службу ретрансляції dhcpv6." #: ../../_include/interface-disable.txt:4 msgid "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." -msgstr "Disable given `<interface>`. It will be placed in administratively down (``A/D``) state." +msgstr "Вимкнути дані `<interface> `. Його буде поміщено в адміністративно вимкнений стан (``A/D``)." -#: ../../configuration/protocols/bgp.rst:616 +#: ../../configuration/service/dns.rst:153 +msgid "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." +msgstr "Disable hosting authoritative zone for `<domain-name>` without deleting from configuration." + +#: ../../configuration/protocols/bgp.rst:628 msgid "Disable immediate session reset if peer's connected link goes down." -msgstr "Disable immediate session reset if peer's connected link goes down." +msgstr "Вимкніть негайне скидання сеансу, якщо підключене з’єднання однорангового вузла не працює." #: ../../configuration/service/ssh.rst:59 msgid "Disable password based authentication. Login via SSH keys only. This hardens security!" -msgstr "Disable password based authentication. Login via SSH keys only. This hardens security!" +msgstr "Вимкнути автентифікацію на основі пароля. Вхід лише за допомогою ключів SSH. Це посилює безпеку!" #: ../../configuration/protocols/pim.rst:167 msgid "Disable sending and receiving PIM control packets on the interface." msgstr "Disable sending and receiving PIM control packets on the interface." +#: ../../configuration/service/dns.rst:159 +msgid "Disable specific record without deleting it from configuration." +msgstr "Disable specific record without deleting it from configuration." + #: ../../configuration/service/ssh.rst:64 msgid "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." -msgstr "Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible." +msgstr "Вимкніть перевірку хосту за допомогою зворотного пошуку DNS - це може прискорити час входу, коли зворотний пошук неможливий." #: ../../configuration/interfaces/macsec.rst:69 msgid "Disable the peer configuration" @@ -4264,380 +4867,417 @@ msgstr "Disable the peer configuration" #: ../../configuration/protocols/static.rst:29 msgid "Disable this IPv4 static route entry." -msgstr "Disable this IPv4 static route entry." +msgstr "Вимкніть цей запис статичного маршруту IPv4." #: ../../configuration/protocols/static.rst:49 msgid "Disable this IPv6 static route entry." -msgstr "Disable this IPv6 static route entry." +msgstr "Вимкніть цей запис статичного маршруту IPv6." #: ../../configuration/protocols/igmp-proxy.rst:56 msgid "Disable this service." -msgstr "Disable this service." +msgstr "Вимкніть цю послугу." #: ../../configuration/service/lldp.rst:54 msgid "Disable transmit of LLDP frames on given `<interface>`. Useful to exclude certain interfaces from LLDP when ``all`` have been enabled." -msgstr "Disable transmit of LLDP frames on given `<interface>`. Useful to exclude certain interfaces from LLDP when ``all`` have been enabled." +msgstr "Вимкнути передачу кадрів LLDP на заданому `<interface> `. Корисно виключити певні інтерфейси з LLDP, коли ``всі`` увімкнено." #: ../../configuration/interfaces/openvpn.rst:695 msgid "Disabled by default - no kernel module loaded." -msgstr "Disabled by default - no kernel module loaded." +msgstr "Вимкнено за замовчуванням – модуль ядра не завантажено." #: ../../configuration/vpn/dmvpn.rst:117 msgid "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." -msgstr "Disables caching of peer information from forwarded NHRP Resolution Reply packets. This can be used to reduce memory consumption on big NBMA subnets." +msgstr "Вимикає кешування однорангової інформації з пересланих пакетів відповіді NHRP Resolution Reply. Це можна використовувати для зменшення споживання пам’яті у великих підмережах NBMA." -#: ../../configuration/protocols/static.rst:76 +#: ../../configuration/trafficpolicy/index.rst:1173 +msgid "Disables flow isolation, all traffic passes through a single queue." +msgstr "Disables flow isolation, all traffic passes through a single queue." + +#: ../../configuration/protocols/static.rst:99 msgid "Disables interface-based IPv4 static route." -msgstr "Disables interface-based IPv4 static route." +msgstr "Вимикає статичний маршрут IPv4 на основі інтерфейсу." -#: ../../configuration/protocols/static.rst:96 +#: ../../configuration/protocols/static.rst:119 msgid "Disables interface-based IPv6 static route." -msgstr "Disables interface-based IPv6 static route." +msgstr "Вимикає статичний маршрут IPv6 на основі інтерфейсу." #: ../../configuration/protocols/igmp-proxy.rst:43 msgid "Disables quickleave mode. In this mode the daemon will not send a Leave IGMP message upstream as soon as it receives a Leave message for any downstream interface. The daemon will not ask for Membership reports on the downstream interfaces, and if a report is received the group is not joined again the upstream." -msgstr "Disables quickleave mode. In this mode the daemon will not send a Leave IGMP message upstream as soon as it receives a Leave message for any downstream interface. The daemon will not ask for Membership reports on the downstream interfaces, and if a report is received the group is not joined again the upstream." +msgstr "Вимикає режим швидкого виходу. У цьому режимі демон не надсилатиме повідомлення Leave IGMP вгору, щойно він отримає повідомлення Leave для будь-якого інтерфейсу нижче. Демон не запитуватиме звіти про членство на нижніх інтерфейсах, і якщо звіт буде отримано, група не приєднається знову на верхніх інтерфейсах." #: ../../configuration/service/webproxy.rst:322 msgid "Disables web filtering without discarding configuration." -msgstr "Disables web filtering without discarding configuration." +msgstr "Вимикає веб-фільтрацію без скидання конфігурації." #: ../../configuration/service/webproxy.rst:93 msgid "Disables web proxy transparent mode at a listening address." -msgstr "Disables web proxy transparent mode at a listening address." +msgstr "Вимикає прозорий режим веб-проксі на адресі прослуховування." -#: ../../configuration/service/router-advert.rst:73 +#: ../../configuration/service/router-advert.rst:99 msgid "Disabling Advertisements" -msgstr "Disabling Advertisements" +msgstr "Вимкнення реклами" #: ../../configuration/highavailability/index.rst:70 msgid "Disabling a VRRP group" -msgstr "Disabling a VRRP group" +msgstr "Вимкнення групи VRRP" #: ../../configuration/interfaces/macsec.rst:199 msgid "Disabling the encryption on the link by removing ``security encrypt`` will show the unencrypted but authenticated content." -msgstr "Disabling the encryption on the link by removing ``security encrypt`` will show the unencrypted but authenticated content." +msgstr "Якщо вимкнути шифрування посилання шляхом видалення ``шифрування безпеки``, відобразиться незашифрований, але автентифікований вміст." #: ../../configuration/interfaces/openvpn.rst:26 msgid "Disadvantages are:" -msgstr "Disadvantages are:" +msgstr "Недоліки:" #: ../../configuration/interfaces/wireless.rst:62 msgid "Disassociate stations based on excessive transmission failures or other indications of connection loss." -msgstr "Disassociate stations based on excessive transmission failures or other indications of connection loss." +msgstr "Від’єднайте станції на основі надмірних збоїв передачі або інших ознак втрати з’єднання." -#: ../../configuration/vrf/index.rst:142 +#: ../../configuration/vrf/index.rst:161 msgid "Display IPv4 routing table for VRF identified by `<name>`." -msgstr "Display IPv4 routing table for VRF identified by `<name>`." +msgstr "Відображати таблицю маршрутизації IPv4 для VRF, позначену `<name> `." -#: ../../configuration/vrf/index.rst:161 +#: ../../configuration/vrf/index.rst:180 msgid "Display IPv6 routing table for VRF identified by `<name>`." -msgstr "Display IPv6 routing table for VRF identified by `<name>`." +msgstr "Відображати таблицю маршрутизації IPv6 для VRF, позначену `<name> `." #: ../../configuration/system/syslog.rst:198 msgid "Display Logs" -msgstr "Display Logs" +msgstr "Відображення журналів" -#: ../../configuration/system/login.rst:188 +#: ../../configuration/system/login.rst:192 msgid "Display OTP key for user" -msgstr "Display OTP key for user" +msgstr "Відображення ключа OTP для користувача" #: ../../configuration/system/syslog.rst:222 msgid "Display all authorization attempts of the specified image" -msgstr "Display all authorization attempts of the specified image" +msgstr "Показати всі спроби авторизації вказаного зображення" -#: ../../configuration/protocols/static.rst:200 +#: ../../configuration/protocols/static.rst:233 msgid "Display all known ARP table entries on a given interface only (`eth1`):" -msgstr "Display all known ARP table entries on a given interface only (`eth1`):" +msgstr "Відображати всі відомі записи таблиці ARP лише на певному інтерфейсі (`eth1`):" -#: ../../configuration/protocols/static.rst:188 +#: ../../configuration/protocols/static.rst:221 msgid "Display all known ARP table entries spanning across all interfaces" -msgstr "Display all known ARP table entries spanning across all interfaces" +msgstr "Відображати всі відомі записи таблиці ARP, що охоплюють усі інтерфейси" #: ../../configuration/system/syslog.rst:226 msgid "Display contents of a specified user-defined log file of the specified image" -msgstr "Display contents of a specified user-defined log file of the specified image" +msgstr "Відображення вмісту визначеного користувачем файлу журналу вказаного зображення" #: ../../configuration/system/syslog.rst:220 msgid "Display contents of all master log files of the specified image" -msgstr "Display contents of all master log files of the specified image" +msgstr "Показати вміст усіх головних файлів журналу вказаного зображення" #: ../../configuration/system/syslog.rst:229 msgid "Display last lines of the system log of the specified image" -msgstr "Display last lines of the system log of the specified image" +msgstr "Відобразити останні рядки системного журналу вказаного зображення" #: ../../configuration/system/syslog.rst:224 msgid "Display list of all user-defined log files of the specified image" -msgstr "Display list of all user-defined log files of the specified image" +msgstr "Показати список усіх визначених користувачем файлів журналу вказаного зображення" #: ../../configuration/system/syslog.rst:202 msgid "Display log files of given category on the console. Use tab completion to get a list of available categories. Thos categories could be: all, authorization, cluster, conntrack-sync, dhcp, directory, dns, file, firewall, https, image lldp, nat, openvpn, snmp, tail, vpn, vrrp" -msgstr "Display log files of given category on the console. Use tab completion to get a list of available categories. Thos categories could be: all, authorization, cluster, conntrack-sync, dhcp, directory, dns, file, firewall, https, image lldp, nat, openvpn, snmp, tail, vpn, vrrp" +msgstr "Відображати файли журналів заданої категорії на консолі. Використовуйте завершення табуляції, щоб отримати список доступних категорій. Ці категорії можуть бути: усі, авторизація, кластер, conntrack-sync, dhcp, каталог, dns, файл, брандмауер, https, образ lldp, nat, openvpn, snmp, tail, vpn, vrrp" #: ../../configuration/service/lldp.rst:75 msgid "Displays information about all neighbors discovered via LLDP." -msgstr "Displays information about all neighbors discovered via LLDP." +msgstr "Відображає інформацію про всіх сусідів, виявлених через LLDP." #: ../../configuration/interfaces/pppoe.rst:299 msgid "Displays queue information for a PPPoE interface." -msgstr "Displays queue information for a PPPoE interface." +msgstr "Відображає інформацію про чергу для інтерфейсу PPPoE." -#: ../../configuration/vrf/index.rst:213 +#: ../../configuration/vrf/index.rst:232 msgid "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." -msgstr "Displays the route packets taken to a network host utilizing VRF instance identified by `<name>`. When using the IPv4 or IPv6 option, displays the route packets taken to the given hosts IP address family. This option is useful when the host is specified as a hostname rather than an IP address." +msgstr "Відображає пакети маршруту, що відправляються до хосту мережі, що використовує екземпляр VRF, позначений `<name> `. Якщо використовується параметр IPv4 або IPv6, відображає пакети маршруту, спрямовані до вказаного сімейства IP-адрес хостів. Цей параметр корисний, коли хост вказано як ім’я хоста, а не IP-адресу." #: ../../configuration/system/host-name.rst:52 msgid "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." -msgstr "Do *not* manually edit `/etc/hosts`. This file will automatically be regenerated on boot based on the settings in this section, which means you'll lose all your manual edits. Instead, configure static host mappings as follows." +msgstr "*Не* редагуйте вручну `/etc/hosts`. Цей файл буде автоматично відновлено під час завантаження на основі налаштувань у цьому розділі, що означає, що ви втратите всі внесені вручну зміни. Натомість налаштуйте зіставлення статичних хостів наступним чином." + +#: ../../configuration/system/ip.rst:55 +#: ../../configuration/vrf/index.rst:79 +#: ../../configuration/vrf/index.rst:85 +msgid "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv4 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." + +#: ../../configuration/system/ipv6.rst:51 +msgid "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." +msgstr "Do not allow IPv6 nexthop tracking to resolve via the default route. This parameter is configured per-VRF, so the command is also available in the VRF subnode." #: ../../_include/interface-ipv6.txt:37 msgid "Do not assign a link-local IPv6 address to this interface." -msgstr "Do not assign a link-local IPv6 address to this interface." +msgstr "Не призначайте локальну IPv6-адресу для цього інтерфейсу." -#: ../../configuration/trafficpolicy/index.rst:1208 +#: ../../configuration/trafficpolicy/index.rst:1278 msgid "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." -msgstr "Do not configure IFB as the first step. First create everything else of your traffic-policy, and then you can configure IFB. Otherwise you might get the ``RTNETLINK answer: File exists`` error, which can be solved with ``sudo ip link delete ifb0``." +msgstr "Не налаштовуйте IFB як перший крок. Спочатку створіть усе інше у своїй політиці трафіку, а потім можете налаштувати IFB. Інакше ви можете отримати помилку ``RTNETLINK answer: File exists``, яку можна вирішити за допомогою ``sudo ip link delete ifb0``." + +#: ../../configuration/service/https.rst:90 +msgid "Do not leave introspection enabled in production, it is a security risk." +msgstr "Do not leave introspection enabled in production, it is a security risk." + +#: ../../configuration/protocols/bgp.rst:609 +msgid "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." +msgstr "Do not send Hard Reset CEASE Notification for \"Administrative Reset\" events. When set and Graceful Restart Notification capability is exchanged between the peers, Graceful Restart procedures apply, and routes will be retained." #: ../../configuration/service/dns.rst:103 msgid "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." -msgstr "Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP server will use this file to add resolvers to assigned addresses." +msgstr "Не використовуйте локальний файл ``/etc/hosts`` для розпізнавання імен. DHCP-сервер VyOS використовуватиме цей файл для додавання резолверів до призначених адрес." #: ../../_include/interface-ip.txt:162 msgid "Does not need to be used together with proxy_arp." -msgstr "Does not need to be used together with proxy_arp." +msgstr "Не потрібно використовувати разом із proxy_arp." #: ../../configuration/system/host-name.rst:11 msgid "Domain" -msgstr "Domain" +msgstr "домен" #: ../../configuration/firewall/groups.rst:127 msgid "Domain Groups" -msgstr "Domain Groups" +msgstr "Групи доменів" #: ../../configuration/system/host-name.rst:32 msgid "Domain Name" -msgstr "Domain Name" +msgstr "Доменне ім'я" #: ../../configuration/service/https.rst:50 msgid "Domain name(s) for which to obtain certificate" -msgstr "Domain name(s) for which to obtain certificate" +msgstr "Доменне ім’я (імена), для якого потрібно отримати сертифікат" #: ../../configuration/system/name-server.rst:57 msgid "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." -msgstr "Domain names can include letters, numbers, hyphens and periods with a maximum length of 253 characters." +msgstr "Доменні імена можуть містити літери, цифри, дефіси та крапки з максимальною довжиною 253 символи." -#: ../../configuration/pki/index.rst:259 +#: ../../configuration/pki/index.rst:290 msgid "Domain names to apply, multiple domain-names can be specified." msgstr "Domain names to apply, multiple domain-names can be specified." #: ../../configuration/system/name-server.rst:13 #: ../../configuration/system/name-server.rst:45 msgid "Domain search order" -msgstr "Domain search order" +msgstr "Порядок пошуку домену" -#: ../../configuration/pki/index.rst:25 +#: ../../configuration/pki/index.rst:27 msgid "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" -msgstr "Don't be afraid that you need to re-do your configuration. Key transformation is handled, as always, by our migration scripts, so this will be a smooth transition for you!" +msgstr "Не бійтеся, що вам доведеться переробити конфігурацію. Перетворення ключів, як завжди, виконується нашими сценаріями міграції, тож це буде плавний перехід для вас!" -#: ../../configuration/protocols/bgp.rst:1172 +#: ../../configuration/protocols/bgp.rst:1194 msgid "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -msgstr "Don't forget, the CIDR declared in the network statement **MUST exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" +msgstr "Не забувайте, що CIDR, оголошений у операторі мережі **ПОВИНЕН існувати у вашій таблиці маршрутизації (динамічній чи статичній), найкращий спосіб переконатися, що це правда, – створити статичний маршрут:**" -#: ../../configuration/protocols/bgp.rst:1126 +#: ../../configuration/protocols/bgp.rst:1148 msgid "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" -msgstr "Don't forget, the CIDR declared in the network statement MUST **exist in your routing table (dynamic or static), the best way to make sure that is true is creating a static route:**" +msgstr "Не забувайте, що CIDR, оголошений у операторі мережі, ПОВИНЕН **існувати у вашій таблиці маршрутизації (динамічній чи статичній), найкращий спосіб переконатися, що це правда, – створити статичний маршрут:**" -#: ../../configuration/vpn/site2site_ipsec.rst:299 +#: ../../configuration/vpn/site2site_ipsec.rst:302 msgid "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." -msgstr "Don't get confused about the used /31 tunnel subnet. :rfc:`3021` gives you additional information for using /31 subnets on point-to-point links." +msgstr "Не заплутайтеся щодо використаної підмережі тунелю /31. :rfc:`3021` надає додаткову інформацію про використання підмереж /31 у зв’язках «точка-точка»." #: ../../configuration/service/webproxy.rst:346 msgid "Download/Update complete blacklist" -msgstr "Download/Update complete blacklist" +msgstr "Завантажити/оновити повний чорний список" #: ../../configuration/service/webproxy.rst:377 msgid "Download/Update partial blacklist." -msgstr "Download/Update partial blacklist." +msgstr "Завантажити/оновити частковий чорний список." -#: ../../configuration/vpn/sstp.rst:85 +#: ../../configuration/service/pppoe-server.rst:262 +#: ../../configuration/vpn/l2tp.rst:386 +#: ../../configuration/vpn/pptp.rst:310 +#: ../../configuration/vpn/sstp.rst:344 msgid "Download bandwidth limit in kbit/s for `<user>`." -msgstr "Download bandwidth limit in kbit/s for `<user>`." +msgstr "Обмеження пропускної здатності завантаження в кбіт/с для `<user> `." + +#: ../../configuration/service/ipoe-server.rst:320 +msgid "Download bandwidth limit in kbit/s for user on interface `<interface>`." +msgstr "Download bandwidth limit in kbit/s for user on interface `<interface>`." #: ../../configuration/policy/route-map.rst:202 msgid "Drop AS-NUMBER from the BGP AS path." -msgstr "Drop AS-NUMBER from the BGP AS path." +msgstr "Видаліть AS-NUMBER зі шляху AS BGP." #: ../../configuration/trafficpolicy/index.rst:352 msgid "Drop Tail" -msgstr "Drop Tail" +msgstr "Відкинути хвіст" #: ../../configuration/trafficpolicy/index.rst:262 msgid "Drop rate" -msgstr "Drop rate" +msgstr "Швидкість падіння" #: ../../configuration/system/sflow.rst:26 msgid "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" -msgstr "Dropped packets reported on DROPMON Netlink channel by Linux kernel are exported via the standard sFlow v5 extension for reporting dropped packets" +msgstr "Відкинуті пакети, про які повідомляє канал DROPMON Netlink ядром Linux, експортуються через стандартне розширення sFlow v5 для звітування про відкинуті пакети." -#: ../../configuration/service/pppoe-server.rst:367 +#: ../../configuration/service/pppoe-server.rst:625 msgid "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" -msgstr "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation" +msgstr "Dual-Stack IPv4/IPv6 із делегуванням префіксів" #: ../../configuration/interfaces/dummy.rst:7 msgid "Dummy" -msgstr "Dummy" +msgstr "манекен" #: ../../configuration/nat/nat44.rst:716 msgid "Dummy interface" -msgstr "Dummy interface" +msgstr "Фіктивний інтерфейс" #: ../../configuration/interfaces/dummy.rst:13 msgid "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." -msgstr "Dummy interfaces can be used as interfaces that always stay up (in the same fashion to loopbacks in Cisco IOS), or for testing purposes." +msgstr "Фіктивні інтерфейси можна використовувати як інтерфейси, які завжди залишаються в робочому стані (так само, як петлі в Cisco IOS), або для цілей тестування." -#: ../../configuration/vrf/index.rst:193 +#: ../../configuration/vrf/index.rst:212 msgid "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." -msgstr "Duplicate packets are not included in the packet loss calculation, although the round-trip time of these packets is used in calculating the minimum/ average/maximum round-trip time numbers." +msgstr "Дубльовані пакети не включаються в розрахунок втрати пакетів, хоча час проходження цих пакетів використовується для розрахунку мінімального/середнього/максимального часу проходження в обидві сторони." -#: ../../configuration/pki/index.rst:285 +#: ../../configuration/pki/index.rst:316 msgid "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" msgstr "During initial deployment we recommend using the staging API of LetsEncrypt to prevent and blacklisting of your system. The API endpoint is https://acme-staging-v02.api.letsencrypt.org/directory" +#: ../../configuration/vpn/ipsec.rst:568 +msgid "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." +msgstr "During profile import, the user is asked to enter its IPSec credentials (username and password) which is stored on the mobile." + #: ../../configuration/service/ssh.rst:113 msgid "Dynamic-protection" -msgstr "Dynamic-protection" +msgstr "Динамічний захист" -#: ../../configuration/service/dns.rst:212 +#: ../../configuration/service/dns.rst:293 msgid "Dynamic DNS" -msgstr "Dynamic DNS" +msgstr "Динамічний DNS" #: ../../_include/interface-eapol.txt:6 msgid "EAPoL comes with an identify option. We automatically use the interface MAC address as identity parameter." -msgstr "EAPoL comes with an identify option. We automatically use the interface MAC address as identity parameter." +msgstr "EAPoL поставляється з опцією ідентифікації. Ми автоматично використовуємо MAC-адресу інтерфейсу як параметр ідентифікації." #: ../../configuration/nat/nat44.rst:753 msgid "ESP Phase:" -msgstr "ESP Phase:" +msgstr "Фаза ESP:" -#: ../../configuration/vpn/ipsec.rst:111 +#: ../../configuration/vpn/ipsec.rst:113 msgid "ESP (Encapsulating Security Payload) Attributes" -msgstr "ESP (Encapsulating Security Payload) Attributes" +msgstr "Атрибути ESP (Encapsulating Security Payload)." -#: ../../configuration/vpn/ipsec.rst:112 +#: ../../configuration/vpn/ipsec.rst:115 msgid "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" -msgstr "ESP is used to provide confidentiality, data origin authentication, connectionless integrity, an anti-replay service (a form of partial sequence integrity), and limited traffic flow confidentiality. https://datatracker.ietf.org/doc/html/rfc4303" +msgstr "ESP використовується для забезпечення конфіденційності, автентифікації джерела даних, цілісності без встановлення з’єднання, служби запобігання відтворення (форма часткової цілісності послідовності) та обмеженої конфіденційності потоку трафіку. https://datatracker.ietf.org/doc/html/rfc4303" #: ../../configuration/service/conntrack-sync.rst:23 msgid "Each Netfilter connection is uniquely identified by a (layer-3 protocol, source address, destination address, layer-4 protocol, layer-4 key) tuple. The layer-4 key depends on the transport protocol; for TCP/UDP it is the port numbers, for tunnels it can be their tunnel ID, but otherwise is just zero, as if it were not part of the tuple. To be able to inspect the TCP port in all cases, packets will be mandatorily defragmented." -msgstr "Each Netfilter connection is uniquely identified by a (layer-3 protocol, source address, destination address, layer-4 protocol, layer-4 key) tuple. The layer-4 key depends on the transport protocol; for TCP/UDP it is the port numbers, for tunnels it can be their tunnel ID, but otherwise is just zero, as if it were not part of the tuple. To be able to inspect the TCP port in all cases, packets will be mandatorily defragmented." +msgstr "Кожне підключення Netfilter унікально ідентифікується за допомогою кортежу (протокол рівня 3, адреса джерела, адреса призначення, протокол рівня 4, ключ рівня 4). Ключ рівня 4 залежить від транспортного протоколу; для TCP/UDP це номери портів, для тунелів це може бути їхній ідентифікатор тунелю, але в інших випадках це просто нуль, ніби він не є частиною кортежу. Щоб у всіх випадках мати можливість перевірити TCP-порт, пакети обов’язково дефрагментуються." #: ../../configuration/interfaces/vxlan.rst:53 msgid "Each VXLAN segment is identified through a 24-bit segment ID, termed the :abbr:`VNI (VXLAN Network Identifier (or VXLAN Segment ID))`, This allows up to 16M VXLAN segments to coexist within the same administrative domain." -msgstr "Each VXLAN segment is identified through a 24-bit segment ID, termed the :abbr:`VNI (VXLAN Network Identifier (or VXLAN Segment ID))`, This allows up to 16M VXLAN segments to coexist within the same administrative domain." +msgstr "Кожен сегмент VXLAN ідентифікується за допомогою 24-бітового ідентифікатора сегмента, який називається :abbr:`VNI (ідентифікатор мережі VXLAN (або ідентифікатор сегмента VXLAN)). Це дозволяє до 16 млн сегментів VXLAN співіснувати в одному адміністративному домені." #: ../../configuration/protocols/bgp.rst:29 msgid "Each :abbr:`AS (Autonomous System)` has an identifying number associated with it called an :abbr:`ASN (Autonomous System Number)`. This is a two octet value ranging in value from 1 to 65535. The AS numbers 64512 through 65535 are defined as private AS numbers. Private AS numbers must not be advertised on the global Internet. The 2-byte AS number range has been exhausted. 4-byte AS numbers are specified in :rfc:`6793`, and provide a pool of 4294967296 AS numbers." -msgstr "Each :abbr:`AS (Autonomous System)` has an identifying number associated with it called an :abbr:`ASN (Autonomous System Number)`. This is a two octet value ranging in value from 1 to 65535. The AS numbers 64512 through 65535 are defined as private AS numbers. Private AS numbers must not be advertised on the global Internet. The 2-byte AS number range has been exhausted. 4-byte AS numbers are specified in :rfc:`6793`, and provide a pool of 4294967296 AS numbers." +msgstr "Кожна :abbr:`AS (Autonomous System)` має пов’язаний з нею ідентифікаційний номер, який називається :abbr:`ASN (Autonomous System Number)`. Це двооктетне значення в діапазоні значень від 1 до 65535. Номери AS від 64512 до 65535 визначені як приватні номери AS. Приватні номери AS не можна рекламувати в глобальній мережі Інтернет. 2-байтовий діапазон номерів AS вичерпано. 4-байтові номери AS указано в :rfc:`6793` і надають пул із 4294967296 номерів AS." #: ../../configuration/interfaces/bridge.rst:48 msgid "Each bridge has a relative priority and cost. Each interface is associated with a port (number) in the STP code. Each has a priority and a cost, that is used to decide which is the shortest path to forward a packet. The lowest cost path is always used unless the other path is down. If you have multiple bridges and interfaces then you may need to adjust the priorities to achieve optimum performance." -msgstr "Each bridge has a relative priority and cost. Each interface is associated with a port (number) in the STP code. Each has a priority and a cost, that is used to decide which is the shortest path to forward a packet. The lowest cost path is always used unless the other path is down. If you have multiple bridges and interfaces then you may need to adjust the priorities to achieve optimum performance." +msgstr "Кожен міст має відносний пріоритет і вартість. Кожен інтерфейс пов’язаний з портом (номером) у коді STP. Кожен має пріоритет і вартість, які використовуються для визначення найкоротшого шляху для пересилання пакета. Шлях із найменшою вартістю завжди використовується, якщо інший шлях не працює. Якщо у вас є кілька мостів та інтерфейсів, вам може знадобитися налаштувати пріоритети для досягнення оптимальної продуктивності." #: ../../configuration/service/broadcast-relay.rst:43 msgid "Each broadcast relay instance can be individually disabled without deleting the configured node by using the following command:" -msgstr "Each broadcast relay instance can be individually disabled without deleting the configured node by using the following command:" +msgstr "Кожен екземпляр широкомовної ретрансляції можна окремо вимкнути без видалення налаштованого вузла за допомогою такої команди:" #: ../../configuration/trafficpolicy/index.rst:1027 msgid "Each class can have a guaranteed part of the total bandwidth defined for the whole policy, so all those shares together should not be higher than the policy's whole bandwidth." -msgstr "Each class can have a guaranteed part of the total bandwidth defined for the whole policy, so all those shares together should not be higher than the policy's whole bandwidth." +msgstr "Кожен клас може мати гарантовану частину загальної пропускної здатності, визначеної для всієї політики, тому всі ці частки разом не повинні перевищувати повну пропускну здатність політики." #: ../../configuration/trafficpolicy/index.rst:967 msgid "Each class is assigned a deficit counter (the number of bytes that a flow is allowed to transmit when it is its turn) initialized to quantum. Quantum is a parameter you configure which acts like a credit of fix bytes the counter receives on each round. Then the Round-Robin policy starts moving its Round Robin pointer through the queues. If the deficit counter is greater than the packet's size at the head of the queue, this packet will be sent and the value of the counter will be decremented by the packet size. Then, the size of the next packet will be compared to the counter value again, repeating the process. Once the queue is empty or the value of the counter is insufficient, the Round-Robin pointer will move to the next queue. If the queue is empty, the value of the deficit counter is reset to 0." -msgstr "Each class is assigned a deficit counter (the number of bytes that a flow is allowed to transmit when it is its turn) initialized to quantum. Quantum is a parameter you configure which acts like a credit of fix bytes the counter receives on each round. Then the Round-Robin policy starts moving its Round Robin pointer through the queues. If the deficit counter is greater than the packet's size at the head of the queue, this packet will be sent and the value of the counter will be decremented by the packet size. Then, the size of the next packet will be compared to the counter value again, repeating the process. Once the queue is empty or the value of the counter is insufficient, the Round-Robin pointer will move to the next queue. If the queue is empty, the value of the deficit counter is reset to 0." +msgstr "Кожному класу призначається лічильник дефіциту (кількість байтів, яку потік може передати, коли настає його черга), ініціалізований квантовим значенням. Квант — це параметр, який ви налаштовуєте та діє як кредит фіксованих байтів, які лічильник отримує під час кожного раунду. Тоді політика Round-Robin починає переміщувати свій вказівник Round Robin по чергах. Якщо лічильник дефіциту перевищує розмір пакета на початку черги, цей пакет буде надіслано, а значення лічильника буде зменшено на розмір пакета. Потім розмір наступного пакету буде знову порівняно зі значенням лічильника, повторюючи процес. Коли черга порожня або значення лічильника недостатнє, вказівник Round-Robin переміститься до наступної черги. Якщо черга порожня, значення лічильника дефіциту скидається на 0." #: ../../configuration/vpn/dmvpn.rst:60 msgid "Each dynamic NHS will get a peer entry with the configured network address and the discovered NBMA address." -msgstr "Each dynamic NHS will get a peer entry with the configured network address and the discovered NBMA address." +msgstr "Кожен динамічний NHS отримає одноранговий запис із налаштованою мережевою адресою та виявленою адресою NBMA." #: ../../configuration/loadbalancing/wan.rst:158 msgid "Each health check is configured in its own test, tests are numbered and processed in numeric order. For multi target health checking multiple tests can be defined:" -msgstr "Each health check is configured in its own test, tests are numbered and processed in numeric order. For multi target health checking multiple tests can be defined:" +msgstr "Кожна перевірка працездатності налаштовується у власному тесті, тести нумеруються та обробляються в порядку чисел. Для багатоцільової перевірки працездатності можна визначити кілька тестів:" #: ../../configuration/service/console-server.rst:62 msgid "Each individual configured console-server device can be directly exposed to the outside world. A user can directly connect via SSH to the configured port." -msgstr "Each individual configured console-server device can be directly exposed to the outside world. A user can directly connect via SSH to the configured port." +msgstr "Кожен окремий налаштований консольно-серверний пристрій може мати прямий доступ до зовнішнього світу. Користувач може безпосередньо підключатися через SSH до налаштованого порту." #: ../../configuration/vpn/dmvpn.rst:173 msgid "Each node (Hub and Spoke) uses an IP address from the network 172.16.253.128/29." -msgstr "Each node (Hub and Spoke) uses an IP address from the network 172.16.253.128/29." +msgstr "Кожен вузол (Hub і Spoke) використовує IP-адресу з мережі 172.16.253.128/29." #: ../../configuration/vpn/openconnect.rst:141 msgid "Each of the install command should be applied to the configuration and commited before using under the openconnect configuration:" -msgstr "Each of the install command should be applied to the configuration and commited before using under the openconnect configuration:" +msgstr "Кожну команду встановлення слід застосувати до конфігурації та зафіксувати перед використанням у конфігурації openconnect:" #: ../../configuration/vpn/site2site_ipsec.rst:16 msgid "Each site-to-site peer has the next options:" -msgstr "Each site-to-site peer has the next options:" +msgstr "Кожен вузол між сайтами має наступні параметри:" #: ../../configuration/interfaces/vxlan.rst:77 msgid "Eenables the Generic Protocol extension (VXLAN-GPE). Currently, this is only supported together with the external keyword." -msgstr "Eenables the Generic Protocol extension (VXLAN-GPE). Currently, this is only supported together with the external keyword." +msgstr "Вмикає розширення Generic Protocol (VXLAN-GPE). Наразі це підтримується лише разом із зовнішнім ключовим словом." #: ../../configuration/service/https.rst:54 msgid "Email address to associate with certificate" -msgstr "Email address to associate with certificate" +msgstr "Адреса електронної пошти для пов’язування із сертифікатом" -#: ../../configuration/pki/index.rst:265 +#: ../../configuration/pki/index.rst:296 msgid "Email used for registration and recovery contact." msgstr "Email used for registration and recovery contact." #: ../../configuration/trafficpolicy/index.rst:300 msgid "Embedding one policy into another one" -msgstr "Embedding one policy into another one" +msgstr "Вбудовування однієї політики в іншу" #: ../../configuration/system/syslog.rst:171 msgid "Emergency" -msgstr "Emergency" +msgstr "надзвичайна ситуація" -#: ../../configuration/protocols/bfd.rst:89 +#: ../../configuration/protocols/bfd.rst:96 msgid "Enable BFD for ISIS on an interface" -msgstr "Enable BFD for ISIS on an interface" +msgstr "Увімкніть BFD для ISIS на інтерфейсі" -#: ../../configuration/protocols/bfd.rst:77 +#: ../../configuration/protocols/bfd.rst:84 msgid "Enable BFD for OSPF on an interface" -msgstr "Enable BFD for OSPF on an interface" +msgstr "Увімкніть BFD для OSPF на інтерфейсі" -#: ../../configuration/protocols/bfd.rst:81 +#: ../../configuration/protocols/bfd.rst:88 msgid "Enable BFD for OSPFv3 on an interface" -msgstr "Enable BFD for OSPFv3 on an interface" +msgstr "Увімкніть BFD для OSPFv3 на інтерфейсі" -#: ../../configuration/protocols/bfd.rst:61 +#: ../../configuration/protocols/bfd.rst:68 msgid "Enable BFD in BGP" -msgstr "Enable BFD in BGP" +msgstr "Увімкніть BFD у BGP" -#: ../../configuration/protocols/bfd.rst:85 +#: ../../configuration/protocols/bfd.rst:92 msgid "Enable BFD in ISIS" -msgstr "Enable BFD in ISIS" +msgstr "Увімкніть BFD в ISIS" -#: ../../configuration/protocols/bfd.rst:73 +#: ../../configuration/protocols/bfd.rst:80 msgid "Enable BFD in OSPF" -msgstr "Enable BFD in OSPF" +msgstr "Увімкніть BFD в OSPF" -#: ../../configuration/protocols/bfd.rst:69 +#: ../../configuration/protocols/bfd.rst:76 msgid "Enable BFD on a BGP peer group" -msgstr "Enable BFD on a BGP peer group" +msgstr "Увімкніть BFD для однорангової групи BGP" -#: ../../configuration/protocols/bfd.rst:65 +#: ../../configuration/protocols/bfd.rst:72 msgid "Enable BFD on a single BGP neighbor" -msgstr "Enable BFD on a single BGP neighbor" +msgstr "Увімкніть BFD на одному сусідньому BGP" #: ../../configuration/service/dhcp-server.rst:168 msgid "Enable DHCP failover configuration for this address pool." -msgstr "Enable DHCP failover configuration for this address pool." +msgstr "Увімкніть конфігурацію відмов DHCP для цього пулу адрес." + +#: ../../configuration/service/https.rst:88 +msgid "Enable GraphQL Schema introspection." +msgstr "Enable GraphQL Schema introspection." #: ../../configuration/interfaces/wireless.rst:178 msgid "Enable HT-delayed Block Ack ``[DELAYED-BA]``" -msgstr "Enable HT-delayed Block Ack ``[DELAYED-BA]``" +msgstr "Увімкнути HT-Delayed Block Ack ``[DELAYED-BA]``" #: ../../configuration/system/frr.rst:24 msgid "Enable ICMP Router Discovery Protocol support" @@ -4645,98 +5285,110 @@ msgstr "Enable ICMP Router Discovery Protocol support" #: ../../configuration/interfaces/bridge.rst:81 msgid "Enable IGMP and MLD querier." -msgstr "Enable IGMP and MLD querier." +msgstr "Увімкніть запитувач IGMP і MLD." #: ../../configuration/interfaces/bridge.rst:85 msgid "Enable IGMP and MLD snooping." -msgstr "Enable IGMP and MLD snooping." +msgstr "Увімкніть відстеження IGMP і MLD." -#: ../../configuration/service/dhcp-server.rst:271 +#: ../../configuration/service/dhcp-server.rst:327 msgid "Enable IP forwarding on client" -msgstr "Enable IP forwarding on client" +msgstr "Увімкніть IP-переадресацію на клієнті" #: ../../configuration/protocols/isis.rst:339 msgid "Enable IS-IS" -msgstr "Enable IS-IS" +msgstr "Увімкнути IS-IS" #: ../../configuration/protocols/isis.rst:455 msgid "Enable IS-IS and IGP-LDP synchronization" -msgstr "Enable IS-IS and IGP-LDP synchronization" +msgstr "Увімкніть синхронізацію IS-IS та IGP-LDP" #: ../../configuration/protocols/isis.rst:414 msgid "Enable IS-IS and redistribute routes not natively in IS-IS" -msgstr "Enable IS-IS and redistribute routes not natively in IS-IS" +msgstr "Увімкніть IS-IS і перерозподіл маршрутів не в IS-IS" #: ../../configuration/protocols/isis.rst:493 #: ../../configuration/protocols/segment-routing.rst:193 msgid "Enable IS-IS with Segment Routing (Experimental)" -msgstr "Enable IS-IS with Segment Routing (Experimental)" +msgstr "Увімкнути IS-IS за допомогою сегментної маршрутизації (експериментально)" #: ../../configuration/interfaces/wireless.rst:194 msgid "Enable L-SIG TXOP protection capability" -msgstr "Enable L-SIG TXOP protection capability" +msgstr "Увімкніть функцію захисту L-SIG TXOP" #: ../../configuration/interfaces/wireless.rst:263 msgid "Enable LDPC (Low Density Parity Check) coding capability" -msgstr "Enable LDPC (Low Density Parity Check) coding capability" +msgstr "Увімкніть можливість кодування LDPC (Low Density Parity Check)." #: ../../configuration/interfaces/wireless.rst:190 msgid "Enable LDPC coding capability" -msgstr "Enable LDPC coding capability" +msgstr "Увімкнути можливість кодування LDPC" #: ../../configuration/service/lldp.rst:40 msgid "Enable LLDP service" -msgstr "Enable LLDP service" +msgstr "Увімкнути службу LLDP" #: ../../configuration/protocols/ospf.rst:838 msgid "Enable OSPF" -msgstr "Enable OSPF" +msgstr "Увімкніть OSPF" #: ../../configuration/protocols/ospf.rst:946 msgid "Enable OSPF and IGP-LDP synchronization:" -msgstr "Enable OSPF and IGP-LDP synchronization:" +msgstr "Увімкнути синхронізацію OSPF і IGP-LDP:" #: ../../configuration/protocols/ospf.rst:983 #: ../../configuration/protocols/segment-routing.rst:279 msgid "Enable OSPF with Segment Routing (Experimental):" -msgstr "Enable OSPF with Segment Routing (Experimental):" +msgstr "Увімкнути OSPF із сегментною маршрутизацією (експериментально):" #: ../../configuration/protocols/ospf.rst:911 msgid "Enable OSPF with route redistribution of the loopback and default originate:" -msgstr "Enable OSPF with route redistribution of the loopback and default originate:" +msgstr "Увімкніть OSPF із перерозподілом маршруту петлі та джерела за замовчуванням:" -#: ../../configuration/system/login.rst:103 +#: ../../configuration/system/login.rst:107 msgid "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." -msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by `<key>`." +msgstr "Увімкніть OTP 2FA для користувача `username` із налаштуваннями за замовчуванням, використовуючи ключ 2FA/MFA у кодуванні BASE32, визначений `<key> `." #: ../../configuration/interfaces/openvpn.rst:692 msgid "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." -msgstr "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." +msgstr "Увімкніть функцію розвантаження каналу даних OpenVPN, завантаживши відповідний модуль ядра." + +#: ../../configuration/service/router-advert.rst:82 +msgid "Enable PREF64 option as outlined in :rfc:`8781`." +msgstr "Enable PREF64 option as outlined in :rfc:`8781`." + +#: ../../configuration/service/ipoe-server.rst:386 +#: ../../configuration/service/pppoe-server.rst:575 +#: ../../configuration/vpn/l2tp.rst:510 +#: ../../configuration/vpn/pptp.rst:434 +#: ../../configuration/vpn/sstp.rst:468 +msgid "Enable SNMP" +msgstr "Enable SNMP" #: ../../configuration/service/lldp.rst:59 msgid "Enable SNMP queries of the LLDP database" -msgstr "Enable SNMP queries of the LLDP database" +msgstr "Увімкнути запити SNMP до бази даних LLDP" #: ../../configuration/system/frr.rst:28 msgid "Enable SNMP support for an individual routing daemon." msgstr "Enable SNMP support for an individual routing daemon." -#: ../../configuration/interfaces/bridge.rst:197 -#: ../../configuration/interfaces/bridge.rst:232 +#: ../../configuration/interfaces/bridge.rst:206 +#: ../../configuration/interfaces/bridge.rst:241 msgid "Enable STP" -msgstr "Enable STP" +msgstr "Увімкнути STP" #: ../../configuration/service/tftp-server.rst:18 msgid "Enable TFTP service by specifying the `<directory>` which will be used to serve files." -msgstr "Enable TFTP service by specifying the `<directory>` which will be used to serve files." +msgstr "Увімкніть службу TFTP, вказавши `<directory> `, яка буде використовуватися для обслуговування файлів." #: ../../configuration/interfaces/wireless.rst:294 msgid "Enable VHT TXOP Power Save Mode" -msgstr "Enable VHT TXOP Power Save Mode" +msgstr "Увімкніть режим енергозбереження VHT TXOP" #: ../../configuration/interfaces/bridge.rst:126 msgid "Enable VLAN-Aware Bridge" -msgstr "Enable VLAN-Aware Bridge" +msgstr "Увімкніть VLAN-Aware Bridge" #: ../../configuration/system/frr.rst:13 msgid "Enable :abbr:`BMP (BGP Monitoring Protocol)` support" @@ -4748,19 +5400,19 @@ msgstr "Enable automatic redirect from http to https." #: ../../configuration/vpn/dmvpn.rst:132 msgid "Enable creation of shortcut routes." -msgstr "Enable creation of shortcut routes." +msgstr "Увімкнути створення маршрутів швидкого доступу." #: ../../configuration/interfaces/ethernet.rst:62 msgid "Enable different types of hardware offloading on the given NIC." -msgstr "Enable different types of hardware offloading on the given NIC." +msgstr "Увімкніть різні типи апаратного розвантаження на даному мережевому адаптері." #: ../../configuration/service/lldp.rst:63 msgid "Enable given legacy protocol on this LLDP instance. Legacy protocols include:" -msgstr "Enable given legacy protocol on this LLDP instance. Legacy protocols include:" +msgstr "Увімкнути заданий застарілий протокол для цього екземпляра LLDP. Успадковані протоколи включають:" #: ../../configuration/loadbalancing/reverse-proxy.rst:119 msgid "Enable layer 7 HTTP health check" -msgstr "Enable layer 7 HTTP health check" +msgstr "Увімкнути перевірку працездатності HTTP рівня 7" #: ../../configuration/firewall/bridge.rst:157 #: ../../configuration/firewall/ipv4.rst:206 @@ -4770,80 +5422,88 @@ msgstr "Enable logging for the matched packet. If this configuration command is #: ../../configuration/firewall/global-options.rst:114 msgid "Enable or Disable VyOS to be :rfc:`1337` conform. The following system parameter will be altered:" -msgstr "Enable or Disable VyOS to be :rfc:`1337` conform. The following system parameter will be altered:" +msgstr "Увімкніть або вимкніть VyOS для відповідності :rfc:`1337`. Буде змінено наступний системний параметр:" #: ../../configuration/firewall/global-options.rst:106 msgid "Enable or Disable if VyOS use IPv4 TCP SYN Cookies. The following system parameter will be altered:" -msgstr "Enable or Disable if VyOS use IPv4 TCP SYN Cookies. The following system parameter will be altered:" +msgstr "Увімкніть або вимкніть, якщо VyOS використовує файли cookie IPv4 TCP SYN. Буде змінено наступний системний параметр:" #: ../../configuration/firewall/ipv4.rst:173 #: ../../configuration/firewall/ipv6.rst:173 msgid "Enable or disable logging for the matched packet." -msgstr "Enable or disable logging for the matched packet." +msgstr "Увімкніть або вимкніть ведення журналу для відповідного пакета." #: ../../configuration/protocols/ospf.rst:360 msgid "Enable ospf on an interface and set associated area." -msgstr "Enable ospf on an interface and set associated area." +msgstr "Увімкніть ospf на інтерфейсі та встановіть пов’язану область." #: ../../configuration/interfaces/pppoe.rst:228 #: ../../configuration/interfaces/sstp-client.rst:100 #: ../../_include/interface-ip.txt:177 msgid "Enable policy for source validation by reversed path, as specified in :rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict mode to prevent IP spoofing from DDos attacks. If using asymmetric routing or other complicated routing, then loose mode is recommended." -msgstr "Enable policy for source validation by reversed path, as specified in :rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict mode to prevent IP spoofing from DDos attacks. If using asymmetric routing or other complicated routing, then loose mode is recommended." +msgstr "Увімкнути політику для перевірки джерела зворотним шляхом, як зазначено в :rfc:`3704`. Поточна рекомендована практика в :rfc:`3704` полягає в тому, щоб увімкнути суворий режим, щоб запобігти підробці IP-адреси через DDos-атаки. Якщо використовується асиметрична маршрутизація або інша складна маршрутизація, то рекомендується вільний режим." #: ../../configuration/interfaces/wireless.rst:213 #: ../../configuration/interfaces/wireless.rst:286 msgid "Enable receiving PPDU using STBC (Space Time Block Coding)" -msgstr "Enable receiving PPDU using STBC (Space Time Block Coding)" +msgstr "Увімкнути отримання PPDU за допомогою STBC (простірно-часове блочне кодування)" #: ../../configuration/system/flow-accounting.rst:154 msgid "Enable sampling of packets, which will be transmitted to sFlow collectors." -msgstr "Enable sampling of packets, which will be transmitted to sFlow collectors." +msgstr "Увімкнути вибірку пакетів, які будуть передані до колекторів sFlow." #: ../../configuration/interfaces/wireless.rst:217 #: ../../configuration/interfaces/wireless.rst:290 msgid "Enable sending PPDU using STBC (Space Time Block Coding)" -msgstr "Enable sending PPDU using STBC (Space Time Block Coding)" +msgstr "Увімкнути надсилання PPDU за допомогою STBC (простірно-часове блочне кодування)" #: ../../configuration/vpn/dmvpn.rst:124 msgid "Enable sending of Cisco style NHRP Traffic Indication packets. If this is enabled and opennhrp detects a forwarded packet, it will send a message to the original sender of the packet instructing it to create a direct connection with the destination. This is basically a protocol independent equivalent of ICMP redirect." -msgstr "Enable sending of Cisco style NHRP Traffic Indication packets. If this is enabled and opennhrp detects a forwarded packet, it will send a message to the original sender of the packet instructing it to create a direct connection with the destination. This is basically a protocol independent equivalent of ICMP redirect." +msgstr "Увімкнути надсилання пакетів індикації трафіку NHRP у стилі Cisco. Якщо це ввімкнено, і opennhrp виявить пересланий пакет, він надішле повідомлення початковому відправнику пакета з інструкцією створити пряме з’єднання з одержувачем. По суті, це незалежний від протоколу еквівалент перенаправлення ICMP." #: ../../configuration/interfaces/bridge.rst:100 msgid "Enable spanning tree protocol. STP is disabled by default." -msgstr "Enable spanning tree protocol. STP is disabled by default." +msgstr "Увімкнути протокол охоплюючого дерева. STP вимкнено за замовчуванням." #: ../../configuration/protocols/segment-routing.rst:127 msgid "Enable the Opaque-LSA capability (rfc2370), necessary to transport label on IGP" -msgstr "Enable the Opaque-LSA capability (rfc2370), necessary to transport label on IGP" +msgstr "Увімкніть функцію Opaque-LSA (rfc2370), необхідну для транспортування мітки на IGP" #: ../../configuration/interfaces/openvpn.rst:697 msgid "Enable this feature causes an interface reset." -msgstr "Enable this feature causes an interface reset." +msgstr "Увімкнення цієї функції призводить до скидання інтерфейсу." #: ../../configuration/service/lldp.rst:49 msgid "Enable transmission of LLDP information on given `<interface>`. You can also say ``all`` here so LLDP is turned on on every interface." -msgstr "Enable transmission of LLDP information on given `<interface>`. You can also say ``all`` here so LLDP is turned on on every interface." +msgstr "Увімкнути передачу інформації LLDP для даного `<interface> `. Тут також можна сказати ``усі``, щоб LLDP було ввімкнено на кожному інтерфейсі." #: ../../configuration/interfaces/pppoe.rst:115 msgid "Enabled on-demand PPPoE connections bring up the link only when traffic needs to pass this link. If the link fails for any reason, the link is brought back up automatically once traffic passes the interface again. If you configure an on-demand PPPoE connection, you must also configure the idle timeout period, after which an idle PPPoE link will be disconnected. A non-zero idle timeout will never disconnect the link after it first came up." -msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic needs to pass this link. If the link fails for any reason, the link is brought back up automatically once traffic passes the interface again. If you configure an on-demand PPPoE connection, you must also configure the idle timeout period, after which an idle PPPoE link will be disconnected. A non-zero idle timeout will never disconnect the link after it first came up." +msgstr "Увімкнені з’єднання PPPoE на вимогу викликають посилання лише тоді, коли трафік має пройти через це посилання. Якщо з будь-якої причини зв’язок не вдається зв’язатися, воно автоматично відновлюється, коли трафік знову пройде через інтерфейс. Якщо ви налаштовуєте підключення PPPoE на вимогу, ви також повинні налаштувати період простою, після якого неактивне з’єднання PPPoE буде відключено. Ненульовий тайм-аут простою ніколи не від’єднає посилання після його першого встановлення." #: ../../configuration/vpn/dmvpn.rst:48 msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." -msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." +msgstr "Вмикає автентифікацію в стилі Cisco для пакетів NHRP. Це вбудовує секретний відкритий пароль у вихідні пакети NHRP. Вхідні пакети NHRP на цьому інтерфейсі відхиляються, якщо немає секретного пароля. Максимальна довжина секрету – 8 символів." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:166 +msgid "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." +msgstr "Enables HTTP health checks using OPTION HTTP requests against '/' and expecting a successful response code in the 200-399 range." -#: ../../configuration/vrf/index.rst:461 +#: ../../configuration/vrf/index.rst:480 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." -msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." +msgstr "Дозволяє додавати мітку MPLS до маршруту, експортованого з поточного одноадресного VRF до VPN. Якщо вказано значення auto, значення мітки автоматично призначається з пулу, який підтримується." -#: ../../configuration/vpn/sstp.rst:277 +#: ../../configuration/service/ipoe-server.rst:220 +#: ../../configuration/service/pppoe-server.rst:182 +#: ../../configuration/vpn/l2tp.rst:225 +#: ../../configuration/vpn/pptp.rst:165 +#: ../../configuration/vpn/sstp.rst:198 msgid "Enables bandwidth shaping via RADIUS." -msgstr "Enables bandwidth shaping via RADIUS." +msgstr "Вмикає формування пропускної здатності через RADIUS." -#: ../../configuration/vrf/index.rst:483 +#: ../../configuration/vrf/index.rst:502 msgid "Enables import or export of routes between the current unicast VRF and VPN." -msgstr "Enables import or export of routes between the current unicast VRF and VPN." +msgstr "Вмикає імпорт або експорт маршрутів між поточним одноадресним VRF і VPN." #: ../../configuration/interfaces/vxlan.rst:72 msgid "Enables the Generic Protocol extension (VXLAN-GPE). Currently, this is only supported together with the external keyword." @@ -4851,55 +5511,63 @@ msgstr "Enables the Generic Protocol extension (VXLAN-GPE). Currently, this is o #: ../../configuration/protocols/bfd.rst:30 msgid "Enables the echo transmission mode" -msgstr "Enables the echo transmission mode" +msgstr "Вмикає режим передачі ехо" + +#: ../../configuration/system/option.rst:27 +msgid "Enables the root partition auto-extension and resizes to the maximum available space on system boot." +msgstr "Enables the root partition auto-extension and resizes to the maximum available space on system boot." #: ../../configuration/service/router-advert.rst:27 msgid "Enabling Advertisments" -msgstr "Enabling Advertisments" +msgstr "Увімкнення реклами" #: ../../configuration/interfaces/openvpn.rst:679 msgid "Enabling OpenVPN DCO" -msgstr "Enabling OpenVPN DCO" +msgstr "Увімкнення OpenVPN DCO" #: ../../configuration/service/ssh.rst:40 msgid "Enabling SSH only requires you to specify the port ``<port>`` you want SSH to listen on. By default, SSH runs on port 22." -msgstr "Enabling SSH only requires you to specify the port ``<port>`` you want SSH to listen on. By default, SSH runs on port 22." +msgstr "Щоб увімкнути SSH, потрібно лише вказати порт ``<port> `` ви хочете, щоб SSH прослуховував. За замовчуванням SSH працює на порту 22." #: ../../configuration/protocols/igmp-proxy.rst:52 msgid "Enabling this function increases the risk of bandwidth saturation." -msgstr "Enabling this function increases the risk of bandwidth saturation." +msgstr "Увімкнення цієї функції збільшує ризик насичення смуги пропускання." #: ../../configuration/service/https.rst:73 msgid "Enforce strict path checking" -msgstr "Enforce strict path checking" +msgstr "Забезпечити сувору перевірку шляху" + +#: ../../configuration/service/https.rst:77 +msgid "Enforce strict path checking." +msgstr "Enforce strict path checking." #: ../../configuration/interfaces/bonding.rst:31 msgid "Enslave `<member>` interface to bond `<interface>`." -msgstr "Enslave `<member>` interface to bond `<interface>`." +msgstr "Поневолити`<member> `інтерфейс для облігації`<interface> `." -#: ../../configuration/protocols/bgp.rst:764 +#: ../../configuration/protocols/bgp.rst:786 msgid "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." -msgstr "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." +msgstr "Переконайтеся, що під час порівняння маршрутів, де обидва є однаковими за більшістю показників, включаючи локальні параметри, довжину AS_PATH, вартість IGP, MED, зв’язок розривається на основі ідентифікатора маршрутизатора." #: ../../configuration/interfaces/openvpn.rst:445 msgid "Enterprise installations usually ship a kind of directory service which is used to have a single password store for all employees. VyOS and OpenVPN support using LDAP/AD as single user backend." -msgstr "Enterprise installations usually ship a kind of directory service which is used to have a single password store for all employees. VyOS and OpenVPN support using LDAP/AD as single user backend." +msgstr "Корпоративні інсталяції зазвичай постачають свого роду службу каталогів, яка використовується для єдиного сховища паролів для всіх співробітників. Підтримка VyOS і OpenVPN з використанням LDAP/AD як серверної частини для одного користувача." #: ../../_include/interface-ip.txt:172 msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)" -msgstr "Ericsson call it MAC-Forced Forwarding (RFC Draft)" +msgstr "Ericsson називає це MAC-Forced Forwarding (RFC Draft)" #: ../../configuration/system/syslog.rst:181 msgid "Error" -msgstr "Error" +msgstr "Помилка" #: ../../configuration/system/syslog.rst:181 msgid "Error conditions" -msgstr "Error conditions" +msgstr "Умови помилок" #: ../../configuration/vpn/l2tp.rst:76 msgid "Established sessions can be viewed using the **show l2tp-server sessions** operational command" -msgstr "Established sessions can be viewed using the **show l2tp-server sessions** operational command" +msgstr "Встановлені сеанси можна переглянути за допомогою операційної команди **show l2tp-server sessions**" #: ../../configuration/interfaces/ethernet.rst:7 msgid "Ethernet" @@ -4907,70 +5575,78 @@ msgstr "Ethernet" #: ../../_include/interface-disable-flow-control.txt:4 msgid "Ethernet flow control is a mechanism for temporarily stopping the transmission of data on Ethernet family computer networks. The goal of this mechanism is to ensure zero packet loss in the presence of network congestion." -msgstr "Ethernet flow control is a mechanism for temporarily stopping the transmission of data on Ethernet family computer networks. The goal of this mechanism is to ensure zero packet loss in the presence of network congestion." +msgstr "Контроль потоку Ethernet — це механізм для тимчасової зупинки передачі даних у комп’ютерних мережах сімейства Ethernet. Метою цього механізму є забезпечення нульової втрати пакетів за наявності перевантаження мережі." #: ../../configuration/interfaces/ethernet.rst:24 msgid "Ethernet options" -msgstr "Ethernet options" +msgstr "Опції Ethernet" + +#: ../../configuration/interfaces/bridge.rst:137 +msgid "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." +msgstr "Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used for ``802.1ad``." #: ../../configuration/service/eventhandler.rst:5 msgid "Event Handler" -msgstr "Event Handler" +msgstr "Обробник подій" #: ../../configuration/service/eventhandler.rst:29 msgid "Event Handler Configuration Steps" -msgstr "Event Handler Configuration Steps" +msgstr "Етапи налаштування обробника подій" #: ../../configuration/service/eventhandler.rst:9 msgid "Event Handler Technology Overview" -msgstr "Event Handler Technology Overview" +msgstr "Огляд технології обробки подій" #: ../../configuration/service/eventhandler.rst:11 msgid "Event handler allows you to execute scripts when a string that matches a regex or a regex with a service name appears in journald logs. You can pass variables, arguments, and a full matching string to the script." -msgstr "Event handler allows you to execute scripts when a string that matches a regex or a regex with a service name appears in journald logs. You can pass variables, arguments, and a full matching string to the script." +msgstr "Обробник подій дозволяє виконувати сценарії, коли в журналах журналу з’являється рядок, який відповідає регулярному виразу або регулярному виразу з назвою служби. Ви можете передати в сценарій змінні, аргументи та повний відповідний рядок." #: ../../configuration/service/eventhandler.rst:95 msgid "Event handler script" -msgstr "Event handler script" +msgstr "Скрипт обробника подій" #: ../../configuration/service/eventhandler.rst:85 msgid "Event handler that monitors the state of interface eth0." -msgstr "Event handler that monitors the state of interface eth0." +msgstr "Обробник подій, який відстежує стан інтерфейсу eth0." #: ../../configuration/nat/nat44.rst:233 msgid "Every NAT rule has a translation command defined. The address defined for the translation is the address used when the address information in a packet is replaced." -msgstr "Every NAT rule has a translation command defined. The address defined for the translation is the address used when the address information in a packet is replaced." +msgstr "Кожне правило NAT має визначену команду перекладу. Адреса, визначена для перекладу, — це адреса, яка використовується під час заміни адресної інформації в пакеті." #: ../../configuration/nat/nat66.rst:71 msgid "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" -msgstr "Every SNAT66 rule has a translation command defined. The prefix defined for the translation is the prefix used when the address information in a packet is replaced.、" +msgstr "Кожне правило SNAT66 має визначену команду перекладу. Префікс, визначений для перекладу, є префіксом, який використовується під час заміни адресної інформації в пакеті.、" -#: ../../configuration/system/login.rst:47 +#: ../../configuration/system/login.rst:51 msgid "Every SSH key comes in three parts:" -msgstr "Every SSH key comes in three parts:" +msgstr "Кожен ключ SSH складається з трьох частин:" -#: ../../configuration/system/login.rst:68 +#: ../../configuration/system/login.rst:72 msgid "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" -msgstr "Every SSH public key portion referenced by `<identifier>` requires the configuration of the `<type>` of public-key used. This type can be any of:" +msgstr "Кожна частина відкритого ключа SSH, на яку посилається `<identifier> ` вимагає конфігурації `<type> ` використаного відкритого ключа. Цей тип може бути будь-яким із:" #: ../../configuration/service/broadcast-relay.rst:14 msgid "Every UDP port which will be forward requires one unique ID. Currently we support 99 IDs!" -msgstr "Every UDP port which will be forward requires one unique ID. Currently we support 99 IDs!" +msgstr "Для кожного UDP-порту, який пересилатиметься, потрібен один унікальний ідентифікатор. На даний момент ми підтримуємо 99 ID!" #: ../../configuration/interfaces/pseudo-ethernet.rst:20 msgid "Every Virtual Ethernet interfaces behaves like a real Ethernet interface. They can have IPv4/IPv6 addresses configured, or can request addresses by DHCP/ DHCPv6 and are associated/mapped with a real ethernet port. This also makes Pseudo-Ethernet interfaces interesting for testing purposes. A Pseudo-Ethernet device will inherit characteristics (speed, duplex, ...) from its physical parent (the so called link) interface." -msgstr "Every Virtual Ethernet interfaces behaves like a real Ethernet interface. They can have IPv4/IPv6 addresses configured, or can request addresses by DHCP/ DHCPv6 and are associated/mapped with a real ethernet port. This also makes Pseudo-Ethernet interfaces interesting for testing purposes. A Pseudo-Ethernet device will inherit characteristics (speed, duplex, ...) from its physical parent (the so called link) interface." +msgstr "Кожен інтерфейс Virtual Ethernet працює як справжній інтерфейс Ethernet. Вони можуть мати налаштовані адреси IPv4/IPv6 або можуть запитувати адреси через DHCP/DHCPv6 і пов’язувати/відображати зі справжнім портом Ethernet. Це також робить інтерфейси Pseudo-Ethernet цікавими для цілей тестування. Пристрій Pseudo-Ethernet успадковує характеристики (швидкість, дуплекс тощо) від свого фізичного батьківського (так званого каналу) інтерфейсу." #: ../../configuration/interfaces/wwan.rst:72 msgid "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." -msgstr "Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is used by the client to dial into the ISPs network. This is a mandatory parameter. Contact your Service Provider for correct APN." +msgstr "Для кожного WWAN-з’єднання потрібен :abbr:`APN (назва точки доступу)`, який використовується клієнтом для підключення до мережі провайдера. Це обов'язковий параметр. Щоб отримати правильний APN, зверніться до свого постачальника послуг." + +#: ../../configuration/vpn/ipsec.rst:439 +msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." +msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the 192.0.2.128/25 prefix and an IPv6 address from the 2001:db8:2000::/64 prefix. We can also send some DNS nameservers down to our clients used on their connection." #: ../../configuration/vpn/remoteaccess_ipsec.rst:98 msgid "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." msgstr "Every connection/remote-access pool we configure also needs a pool where we can draw our client IP addresses from. We provide one IPv4 and IPv6 pool. Authorized clients will receive an IPv4 address from the configured IPv4 prefix and an IPv6 address from the IPv6 prefix. We can also send some DNS nameservers down to our clients used on their connection." #: ../../configuration/firewall/bridge.rst:321 -#: ../../configuration/highavailability/index.rst:397 +#: ../../configuration/highavailability/index.rst:407 #: ../../configuration/interfaces/bonding.rst:291 #: ../../configuration/interfaces/l2tpv3.rst:86 #: ../../configuration/interfaces/pppoe.rst:323 @@ -4980,23 +5656,24 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/protocols/failover.rst:63 #: ../../configuration/protocols/igmp-proxy.rst:61 #: ../../configuration/protocols/pim.rst:217 -#: ../../configuration/protocols/rpki.rst:156 +#: ../../configuration/protocols/rpki.rst:166 #: ../../configuration/service/broadcast-relay.rst:55 -#: ../../configuration/service/conntrack-sync.rst:186 +#: ../../configuration/service/conntrack-sync.rst:195 #: ../../configuration/service/dhcp-relay.rst:85 #: ../../configuration/service/dhcp-relay.rst:174 -#: ../../configuration/service/dhcp-server.rst:362 -#: ../../configuration/service/dns.rst:160 -#: ../../configuration/service/dns.rst:276 +#: ../../configuration/service/dhcp-server.rst:418 +#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:354 #: ../../configuration/service/eventhandler.rst:83 -#: ../../configuration/service/ipoe-server.rst:150 +#: ../../configuration/service/ids.rst:82 #: ../../configuration/service/mdns.rst:50 #: ../../configuration/service/monitoring.rst:134 +#: ../../configuration/service/router-advert.rst:108 #: ../../configuration/service/snmp.rst:94 #: ../../configuration/service/snmp.rst:145 #: ../../configuration/service/tftp-server.rst:47 #: ../../configuration/system/acceleration.rst:58 -#: ../../configuration/system/login.rst:397 +#: ../../configuration/system/login.rst:401 #: ../../configuration/system/name-server.rst:28 #: ../../configuration/system/name-server.rst:63 #: ../../configuration/system/sflow.rst:49 @@ -5005,15 +5682,14 @@ msgstr "Every connection/remote-access pool we configure also needs a pool where #: ../../configuration/trafficpolicy/index.rst:1122 #: ../../configuration/vpn/dmvpn.rst:161 #: ../../configuration/vpn/openconnect.rst:97 -#: ../../configuration/vpn/sstp.rst:286 -#: ../../configuration/vrf/index.rst:99 -#: ../../configuration/vrf/index.rst:232 +#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:251 msgid "Example" -msgstr "Example" +msgstr "приклад" #: ../../configuration/service/pppoe-server.rst:131 msgid "Example, from radius-server send command for disconnect client with username test" -msgstr "Example, from radius-server send command for disconnect client with username test" +msgstr "Наприклад, з radius-сервера надсилається команда для відключення клієнта з перевіркою імені користувача" #: ../../configuration/interfaces/pppoe.rst:127 #: ../../configuration/interfaces/pppoe.rst:140 @@ -5028,16 +5704,18 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../configuration/nat/nat44.rst:425 #: ../../configuration/nat/nat66.rst:78 #: ../../configuration/nat/nat66.rst:96 -#: ../../configuration/protocols/static.rst:174 -#: ../../configuration/service/dns.rst:363 +#: ../../configuration/protocols/static.rst:67 +#: ../../configuration/protocols/static.rst:135 +#: ../../configuration/protocols/static.rst:207 +#: ../../configuration/service/dns.rst:460 #: ../../configuration/service/monitoring.rst:69 #: ../../configuration/service/monitoring.rst:98 #: ../../configuration/service/ssh.rst:165 #: ../../configuration/service/ssh.rst:200 #: ../../configuration/system/flow-accounting.rst:164 -#: ../../configuration/vpn/l2tp.rst:41 -#: ../../configuration/vpn/site2site_ipsec.rst:162 -#: ../../configuration/vpn/site2site_ipsec.rst:273 +#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:276 #: ../../_include/interface-address-with-dhcp.txt:22 #: ../../_include/interface-address.txt:9 #: ../../_include/interface-description.txt:7 @@ -5067,146 +5745,146 @@ msgstr "Example, from radius-server send command for disconnect client with user #: ../../_include/interface-per-client-thread.txt:10 #: ../../_include/interface-vrf.txt:9 msgid "Example:" -msgstr "Example:" +msgstr "приклад:" #: ../../_include/interface-dhcpv6-prefix-delegation.txt:36 msgid "Example: Delegate a /64 prefix to interface eth8 which will use a local address on this router of ``<prefix>::ffff``, as the address 65534 will correspond to ``ffff`` in hexadecimal notation." -msgstr "Example: Delegate a /64 prefix to interface eth8 which will use a local address on this router of ``<prefix>::ffff``, as the address 65534 will correspond to ``ffff`` in hexadecimal notation." +msgstr "Приклад: делегуйте префікс /64 інтерфейсу eth8, який використовуватиме локальну адресу на цьому маршрутизаторі ``<prefix> ::ffff``, оскільки адреса 65534 відповідатиме ``ffff`` у шістнадцятковій системі числення." #: ../../configuration/nat/nat44.rst:371 msgid "Example: For an ~8,000 host network a source NAT pool of 32 IP addresses is recommended." -msgstr "Example: For an ~8,000 host network a source NAT pool of 32 IP addresses is recommended." +msgstr "Приклад: для мережі з приблизно 8000 хостів рекомендований вихідний пул NAT з 32 IP-адрес." #: ../../_include/interface-dhcpv6-prefix-delegation.txt:54 msgid "Example: If ID is 1 and the client is delegated an IPv6 prefix 2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6 prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified interface." -msgstr "Example: If ID is 1 and the client is delegated an IPv6 prefix 2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6 prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified interface." +msgstr "Приклад: якщо ID дорівнює 1, а клієнту делеговано префікс IPv6 2001:db8:ffff::/48, dhcp6c об’єднає два значення в один префікс IPv6 2001:db8:ffff:1::/64 і налаштувати префікс на вказаному інтерфейсі." #: ../../_include/interface-mirror.txt:19 msgid "Example: Mirror the inbound traffic of `bond1` port to `eth3`" -msgstr "Example: Mirror the inbound traffic of `bond1` port to `eth3`" +msgstr "Приклад: віддзеркалення вхідного трафіку порту `bond1` до `eth3`" #: ../../_include/interface-mirror.txt:19 msgid "Example: Mirror the inbound traffic of `br1` port to `eth3`" -msgstr "Example: Mirror the inbound traffic of `br1` port to `eth3`" +msgstr "Приклад: віддзеркалення вхідного трафіку порту `br1` до `eth3`" #: ../../_include/interface-mirror.txt:19 msgid "Example: Mirror the inbound traffic of `eth1` port to `eth3`" -msgstr "Example: Mirror the inbound traffic of `eth1` port to `eth3`" +msgstr "Приклад: віддзеркалення вхідного трафіку порту `eth1` до `eth3`" #: ../../_include/interface-mirror.txt:31 msgid "Example: Mirror the outbound traffic of `bond1` port to `eth3`" -msgstr "Example: Mirror the outbound traffic of `bond1` port to `eth3`" +msgstr "Приклад: віддзеркалення вихідного трафіку порту `bond1` до `eth3`" #: ../../_include/interface-mirror.txt:31 msgid "Example: Mirror the outbound traffic of `br1` port to `eth3`" -msgstr "Example: Mirror the outbound traffic of `br1` port to `eth3`" +msgstr "Приклад: віддзеркалення вихідного трафіку порту `br1` до `eth3`" #: ../../_include/interface-mirror.txt:31 msgid "Example: Mirror the outbound traffic of `eth1` port to `eth3`" -msgstr "Example: Mirror the outbound traffic of `eth1` port to `eth3`" +msgstr "Приклад: віддзеркалення вихідного трафіку порту `eth1` до `eth3`" -#: ../../configuration/interfaces/bridge.rst:166 +#: ../../configuration/interfaces/bridge.rst:175 msgid "Example: Set `eth0` member port to be allowed VLAN 4" -msgstr "Example: Set `eth0` member port to be allowed VLAN 4" +msgstr "Приклад: встановіть порт члена `eth0` як дозволений VLAN 4" -#: ../../configuration/interfaces/bridge.rst:172 +#: ../../configuration/interfaces/bridge.rst:181 msgid "Example: Set `eth0` member port to be allowed VLAN 6-8" -msgstr "Example: Set `eth0` member port to be allowed VLAN 6-8" +msgstr "Приклад: встановіть порт члена `eth0` як дозволений VLAN 6-8" -#: ../../configuration/interfaces/bridge.rst:153 +#: ../../configuration/interfaces/bridge.rst:162 msgid "Example: Set `eth0` member port to be native VLAN 2" -msgstr "Example: Set `eth0` member port to be native VLAN 2" +msgstr "Приклад: встановіть порт члена `eth0` як рідну VLAN 2" #: ../../configuration/service/webproxy.rst:28 msgid "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." -msgstr "Example: to be appended is set to ``vyos.net`` and the URL received is ``www/foo.html``, the system will use the generated, final URL of ``www.vyos.net/foo.html``." +msgstr "Приклад: для додавання встановлено значення ``vyos.net``, а отримана URL-адреса ``www/foo.html``, система використовуватиме згенеровану кінцеву URL-адресу ``www.vyos.net/foo``. html``." -#: ../../configuration/container/index.rst:177 -#: ../../configuration/service/https.rst:77 -#: ../../configuration/service/router-advert.rst:80 +#: ../../configuration/container/index.rst:216 +#: ../../configuration/service/https.rst:110 msgid "Example Configuration" -msgstr "Example Configuration" +msgstr "Приклад конфігурації" -#: ../../configuration/service/dns.rst:378 +#: ../../configuration/service/dns.rst:478 msgid "Example IPv6 only:" -msgstr "Example IPv6 only:" +msgstr "Лише приклад IPv6:" #: ../../configuration/nat/nat44.rst:690 msgid "Example Network" -msgstr "Example Network" +msgstr "Приклад мережі" -#: ../../configuration/firewall/ipv4.rst:1130 +#: ../../configuration/firewall/ipv4.rst:1153 #: ../../configuration/firewall/ipv6.rst:1153 msgid "Example Partial Config" -msgstr "Example Partial Config" +msgstr "Приклад часткової конфігурації" #: ../../configuration/protocols/ospf.rst:1348 msgid "Example configuration for WireGuard interfaces:" -msgstr "Example configuration for WireGuard interfaces:" +msgstr "Приклад конфігурації для інтерфейсів WireGuard:" #: ../../configuration/service/pppoe-server.rst:147 msgid "Example for changing rate-limit via RADIUS CoA." -msgstr "Example for changing rate-limit via RADIUS CoA." +msgstr "Приклад зміни ліміту швидкості через RADIUS CoA." #: ../../configuration/vpn/l2tp.rst:12 msgid "Example for configuring a simple L2TP over IPsec VPN for remote access (works with native Windows and Mac VPN clients):" -msgstr "Example for configuring a simple L2TP over IPsec VPN for remote access (works with native Windows and Mac VPN clients):" +msgstr "Приклад налаштування простого L2TP через IPsec VPN для віддаленого доступу (працює з рідними клієнтами VPN для Windows і Mac):" #: ../../configuration/nat/nat44.rst:292 msgid "Example of redirection:" -msgstr "Example of redirection:" +msgstr "Приклад перенаправлення:" -#: ../../configuration/firewall/ipv4.rst:925 +#: ../../configuration/firewall/ipv4.rst:948 #: ../../configuration/firewall/ipv6.rst:934 msgid "Example synproxy" msgstr "Example synproxy" #: ../../configuration/firewall/groups.rst:145 -#: ../../configuration/interfaces/bridge.rst:187 +#: ../../configuration/interfaces/bridge.rst:196 #: ../../configuration/interfaces/macsec.rst:153 #: ../../configuration/interfaces/wireless.rst:541 -#: ../../configuration/loadbalancing/reverse-proxy.rst:187 +#: ../../configuration/loadbalancing/reverse-proxy.rst:227 +#: ../../configuration/pki/index.rst:370 #: ../../configuration/policy/index.rst:46 -#: ../../configuration/protocols/bgp.rst:1096 +#: ../../configuration/protocols/bgp.rst:1118 #: ../../configuration/protocols/isis.rst:336 #: ../../configuration/protocols/ospf.rst:834 -#: ../../configuration/service/pppoe-server.rst:343 +#: ../../configuration/service/pppoe-server.rst:601 #: ../../configuration/service/webproxy.rst:419 msgid "Examples" -msgstr "Examples" +msgstr "Приклади" #: ../../configuration/nat/nat44.rst:154 -#: ../../configuration/vpn/site2site_ipsec.rst:157 +#: ../../configuration/vpn/site2site_ipsec.rst:160 msgid "Examples:" -msgstr "Examples:" +msgstr "приклади:" #: ../../configuration/policy/index.rst:48 msgid "Examples of policies usage:" -msgstr "Examples of policies usage:" +msgstr "Приклади використання політик:" #: ../../configuration/highavailability/index.rst:85 msgid "Exclude IP addresses from ``VRRP packets``. This option ``excluded-address`` is used when you want to set IPv4 + IPv6 addresses on the same virtual interface or when used more than 20 IP addresses." -msgstr "Exclude IP addresses from ``VRRP packets``. This option ``excluded-address`` is used when you want to set IPv4 + IPv6 addresses on the same virtual interface or when used more than 20 IP addresses." +msgstr "Виключити IP-адреси з ``VRRP-пакетів``. Цей параметр ``excluded-address`` використовується, коли ви хочете встановити адреси IPv4 + IPv6 на одному віртуальному інтерфейсі або коли використовується більше 20 IP-адрес." #: ../../configuration/highavailability/index.rst:83 msgid "Exclude address" -msgstr "Exclude address" +msgstr "Виключити адресу" #: ../../configuration/loadbalancing/wan.rst:113 msgid "Exclude traffic" -msgstr "Exclude traffic" +msgstr "Виключити трафік" #: ../../configuration/policy/route-map.rst:192 msgid "Exit policy on match: go to next sequence number." -msgstr "Exit policy on match: go to next sequence number." +msgstr "Політика виходу під час збігу: перехід до наступного порядкового номера." #: ../../configuration/policy/route-map.rst:188 msgid "Exit policy on match: go to rule <1-65535>" -msgstr "Exit policy on match: go to rule <1-65535>" +msgstr "Політика виходу з матчу: перейдіть до правила <1-65535>" #: ../../configuration/trafficpolicy/index.rst:265 msgid "Expedited forwarding (EF)" -msgstr "Expedited forwarding (EF)" +msgstr "Прискорене пересилання (EF)" #: ../../configuration/firewall/flowtables.rst:140 msgid "Explanation" @@ -5214,15 +5892,19 @@ msgstr "Explanation" #: ../../configuration/service/salt-minion.rst:33 msgid "Explicitly declare ID for this minion to use (default: hostname)" -msgstr "Explicitly declare ID for this minion to use (default: hostname)" +msgstr "Явно оголосити ідентифікатор для цього міньйона (за замовчуванням: ім’я хоста)" #: ../../configuration/service/dhcp-relay.rst:178 msgid "External DHCPv6 server is at 2001:db8::4" -msgstr "External DHCPv6 server is at 2001:db8::4" +msgstr "Зовнішній сервер DHCPv6 має адресу 2001:db8::4" #: ../../configuration/protocols/ospf.rst:474 msgid "External Route Summarisation" -msgstr "External Route Summarisation" +msgstr "Підсумок зовнішнього маршруту" + +#: ../../configuration/service/ids.rst:101 +msgid "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" +msgstr "External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be blocked" #: ../../configuration/trafficpolicy/index.rst:441 msgid "FQ-CoDel" @@ -5230,19 +5912,19 @@ msgstr "FQ-CoDel" #: ../../configuration/trafficpolicy/index.rst:450 msgid "FQ-CoDel fights bufferbloat and reduces latency without the need of complex configurations. It has become the new default Queueing Discipline for the interfaces of some GNU/Linux distributions." -msgstr "FQ-CoDel fights bufferbloat and reduces latency without the need of complex configurations. It has become the new default Queueing Discipline for the interfaces of some GNU/Linux distributions." +msgstr "FQ-CoDel бореться з буфером і зменшує затримку без необхідності складних конфігурацій. Він став новою стандартною дисципліною черги для інтерфейсів деяких дистрибутивів GNU/Linux." #: ../../configuration/trafficpolicy/index.rst:460 msgid "FQ-CoDel is based on a modified Deficit Round Robin (DRR_) queue scheduler with the CoDel Active Queue Management (AQM) algorithm operating on each queue." -msgstr "FQ-CoDel is based on a modified Deficit Round Robin (DRR_) queue scheduler with the CoDel Active Queue Management (AQM) algorithm operating on each queue." +msgstr "FQ-CoDel базується на модифікованому планувальнику черги Deficit Round Robin (DRR_) з алгоритмом CoDel Active Queue Management (AQM), що працює в кожній черзі." #: ../../configuration/trafficpolicy/index.rst:474 msgid "FQ-CoDel is tuned to run ok with its default parameters at 10Gbit speeds. It might work ok too at other speeds without configuring anything, but here we will explain some cases when you might want to tune its parameters." -msgstr "FQ-CoDel is tuned to run ok with its default parameters at 10Gbit speeds. It might work ok too at other speeds without configuring anything, but here we will explain some cases when you might want to tune its parameters." +msgstr "FQ-CoDel налаштовано для нормальної роботи з параметрами за замовчуванням на швидкості 10 Гбіт. Він також може добре працювати на інших швидкостях, не налаштовуючи нічого, але тут ми пояснимо деякі випадки, коли ви можете налаштувати його параметри." #: ../../configuration/trafficpolicy/index.rst:465 msgid "FQ-Codel is a non-shaping (work-conserving) policy, so it will only be useful if your outgoing interface is really full. If it is not, VyOS will not own the queue and FQ-Codel will have no effect. If there is bandwidth available on the physical link, you can embed_ FQ-Codel into a classful shaping policy to make sure it owns the queue. If you are not sure if you need to embed your FQ-CoDel policy into a Shaper, do it." -msgstr "FQ-Codel is a non-shaping (work-conserving) policy, so it will only be useful if your outgoing interface is really full. If it is not, VyOS will not own the queue and FQ-Codel will have no effect. If there is bandwidth available on the physical link, you can embed_ FQ-Codel into a classful shaping policy to make sure it owns the queue. If you are not sure if you need to embed your FQ-CoDel policy into a Shaper, do it." +msgstr "FQ-Codel — це політика без формування (збереження роботи), тому вона буде корисною, лише якщо ваш вихідний інтерфейс дійсно заповнений. Якщо це не так, VyOS не буде володіти чергою, і FQ-Codel не матиме жодного ефекту. Якщо на фізичному каналі є доступна пропускна здатність, ви можете вбудувати FQ-Codel у політику класового формування, щоб переконатися, що він володіє чергою. Якщо ви не впевнені, чи потрібно вам вбудовувати політику FQ-CoDel у Shaper, зробіть це." #: ../../configuration/system/frr.rst:5 msgid "FRR" @@ -5250,7 +5932,7 @@ msgstr "FRR" #: ../../configuration/protocols/ospf.rst:213 msgid "FRR offers only partial support for some of the routing protocol extensions that are used with MPLS-TE; it does not support a complete RSVP-TE solution." -msgstr "FRR offers only partial support for some of the routing protocol extensions that are used with MPLS-TE; it does not support a complete RSVP-TE solution." +msgstr "FRR пропонує лише часткову підтримку для деяких розширень протоколу маршрутизації, які використовуються з MPLS-TE; він не підтримує повне рішення RSVP-TE." #: ../../configuration/interfaces/vxlan.rst:159 msgid "FRR supports a new way of configuring VLAN-to-VNI mappings for EVPN-VXLAN, when working with the Linux kernel. In this new way, the mapping of a VLAN to a :abbr:`VNI (VXLAN Network Identifier (or VXLAN Segment ID))` is configured against a container VXLAN interface which is referred to as a :abbr:`SVD (Single VXLAN device)`." @@ -5258,94 +5940,108 @@ msgstr "FRR supports a new way of configuring VLAN-to-VNI mappings for EVPN-VXLA #: ../../configuration/system/syslog.rst:134 msgid "FTP daemon" -msgstr "FTP daemon" +msgstr "Демон FTP" #: ../../configuration/system/syslog.rst:96 msgid "Facilities" -msgstr "Facilities" +msgstr "Зручності" #: ../../configuration/system/syslog.rst:104 msgid "Facilities can be adjusted to meet the needs of the user:" -msgstr "Facilities can be adjusted to meet the needs of the user:" +msgstr "Послуги можна налаштувати відповідно до потреб користувача:" #: ../../configuration/system/syslog.rst:107 msgid "Facility Code" -msgstr "Facility Code" +msgstr "Код об'єкта" #: ../../configuration/loadbalancing/wan.rst:218 #: ../../configuration/protocols/failover.rst:3 -#: ../../configuration/service/dhcp-server.rst:136 -#: ../../configuration/service/dhcp-server.rst:369 msgid "Failover" -msgstr "Failover" +msgstr "Перехід після відмови" #: ../../configuration/protocols/failover.rst:12 msgid "Failover Routes" -msgstr "Failover Routes" +msgstr "Відмовостійкі маршрути" #: ../../configuration/service/conntrack-sync.rst:61 msgid "Failover mechanism to use for conntrack-sync." -msgstr "Failover mechanism to use for conntrack-sync." +msgstr "Механізм відновлення після збоїв для conntrack-sync." #: ../../configuration/protocols/failover.rst:5 msgid "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." -msgstr "Failover routes are manually configured routes, but they install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target will be available." +msgstr "Маршрути відмов — це маршрути, налаштовані вручну, але вони встановлюються в таблицю маршрутизації, якщо ціль перевірки працездатності активна. Якщо мета не жива, маршрут видаляється з таблиці маршрутизації, доки мета не стане доступною." + +#: ../../configuration/protocols/failover.rst:5 +msgid "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." +msgstr "Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table until the target becomes available." #: ../../configuration/trafficpolicy/index.rst:384 msgid "Fair Queue" -msgstr "Fair Queue" +msgstr "Чесна черга" #: ../../configuration/trafficpolicy/index.rst:429 msgid "Fair Queue is a non-shaping (work-conserving) policy, so it will only be useful if your outgoing interface is really full. If it is not, VyOS will not own the queue and Fair Queue will have no effect. If there is bandwidth available on the physical link, you can embed_ Fair-Queue into a classful shaping policy to make sure it owns the queue." -msgstr "Fair Queue is a non-shaping (work-conserving) policy, so it will only be useful if your outgoing interface is really full. If it is not, VyOS will not own the queue and Fair Queue will have no effect. If there is bandwidth available on the physical link, you can embed_ Fair-Queue into a classful shaping policy to make sure it owns the queue." +msgstr "Справедлива черга — це політика без формування (збереження роботи), тому вона буде корисною, лише якщо ваш вихідний інтерфейс дійсно заповнений. Якщо це не так, VyOS не буде володіти чергою, і Fair Queue не матиме ефекту. Якщо на фізичному каналі є доступна пропускна здатність, ви можете вбудувати Fair-Queue у політику класового формування, щоб переконатися, що вона володіє чергою." #: ../../configuration/trafficpolicy/index.rst:389 msgid "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." -msgstr "Fair Queue is a work-conserving scheduler which schedules the transmission of packets based on flows, that is, it balances traffic distributing it through different sub-queues in order to ensure fairness so that each flow is able to send data in turn, preventing any single one from drowning out the rest." +msgstr "Справедлива черга — це планувальник, що зберігає роботу, планує передачу пакетів на основі потоків, тобто балансує трафік, розподіляючи його між різними підчергами, щоб забезпечити справедливість, щоб кожен потік міг надсилати дані по черзі, запобігаючи будь-якому один, щоб не заглушити решту." -#: ../../configuration/protocols/rpki.rst:78 +#: ../../configuration/service/ids.rst:9 +msgid "FastNetMon" +msgstr "FastNetMon" + +#: ../../configuration/service/ids.rst:11 +msgid "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." +msgstr "FastNetMon is a high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AF_PACKET (port mirror). It can detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second and perform a configurable action to handle that event, such as calling a custom script." + +#: ../../configuration/protocols/rpki.rst:76 msgid "Features of the Current Implementation" -msgstr "Features of the Current Implementation" +msgstr "Особливості поточної реалізації" #: ../../configuration/service/router-advert.rst:1 msgid "Field" -msgstr "Field" +msgstr "Поле" -#: ../../configuration/service/dns.rst:241 +#: ../../configuration/service/dns.rst:325 +msgid "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." +msgstr "File identified by `<filename>` containing the TSIG authentication key for RFC2136 nsupdate on remote DNS server." + +#: ../../configuration/service/dns.rst:255 msgid "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." -msgstr "File identified by `<keyfile>` containing the secret RNDC key shared with remote DNS server." +msgstr "Файл, ідентифікований `<keyfile> ` містить секретний ключ RNDC, спільний з віддаленим сервером DNS." -#: ../../configuration/service/pppoe-server.rst:228 +#: ../../configuration/service/pppoe-server.rst:302 msgid "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" -msgstr "Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream rate)" +msgstr "Filter-Id=2000/3000 (означає швидкість низхідного потоку 2000 Кбіт і швидкість вихідного потоку 3000 Кбіт)" #: ../../configuration/service/pppoe-server.rst:154 msgid "Filter-Id=5000/4000 (means 5000Kbit down-stream rate and 4000Kbit up-stream rate) If attribute Filter-Id redefined, replace it in RADIUS CoA request." -msgstr "Filter-Id=5000/4000 (means 5000Kbit down-stream rate and 4000Kbit up-stream rate) If attribute Filter-Id redefined, replace it in RADIUS CoA request." +msgstr "Filter-Id=5000/4000 (означає швидкість низхідного потоку 5000 Кбіт і швидкість висхідного потоку 4000 Кбіт). Якщо атрибут Filter-Id перевизначено, замініть його в запиті RADIUS CoA." #: ../../configuration/protocols/ospf.rst:306 msgid "Filter Type-3 summary-LSAs announced to other areas originated from intra- area paths from specified area. This command makes sense in ABR only." -msgstr "Filter Type-3 summary-LSAs announced to other areas originated from intra- area paths from specified area. This command makes sense in ABR only." +msgstr "Підсумок фільтра типу 3 – LSA, оголошені іншим областям, виникли з внутрішньообласних шляхів із зазначеної області. Ця команда має сенс лише в ABR." #: ../../configuration/policy/index.rst:16 msgid "Filter traffic based on source/destination address." -msgstr "Filter traffic based on source/destination address." +msgstr "Фільтруйте трафік на основі адреси джерела/одержувача." #: ../../configuration/service/webproxy.rst:335 msgid "Filtering" -msgstr "Filtering" +msgstr "Фільтрування" #: ../../configuration/policy/access-list.rst:5 msgid "Filtering is used for both input and output of the routing information. Once filtering is defined, it can be applied in any direction. VyOS makes filtering possible using acls and prefix lists." -msgstr "Filtering is used for both input and output of the routing information. Once filtering is defined, it can be applied in any direction. VyOS makes filtering possible using acls and prefix lists." +msgstr "Фільтрування використовується як для введення, так і для виведення інформації про маршрут. Після визначення фільтрації її можна застосовувати в будь-якому напрямку. VyOS робить можливим фільтрування за допомогою acl і списків префіксів." #: ../../configuration/policy/examples.rst:81 msgid "Finally, to apply the policy route to ingress traffic on our LAN interface, we use:" -msgstr "Finally, to apply the policy route to ingress traffic on our LAN interface, we use:" +msgstr "Нарешті, щоб застосувати маршрут політики до вхідного трафіку на нашому інтерфейсі локальної мережі, ми використовуємо:" #: ../../configuration/firewall/index.rst:5 msgid "Firewall" -msgstr "Firewall" +msgstr "Брандмауер" #: ../../configuration/firewall/general-legacy.rst:7 msgid "Firewall-Legacy" @@ -5376,7 +6072,7 @@ msgstr "Firewall Description" #: ../../configuration/interfaces/openvpn.rst:209 #: ../../configuration/interfaces/wireguard.rst:207 msgid "Firewall Exceptions" -msgstr "Firewall Exceptions" +msgstr "Винятки брандмауера" #: ../../configuration/firewall/bridge.rst:149 #: ../../configuration/firewall/ipv4.rst:196 @@ -5402,19 +6098,19 @@ msgstr "Firewall groups represent collections of IP addresses, networks, ports, #: ../../configuration/firewall/general-legacy.rst:155 msgid "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." -msgstr "Firewall groups represent collections of IP addresses, networks, ports, mac addresses or domains. Once created, a group can be referenced by firewall, nat and policy route rules as either a source or destination matcher. Members can be added or removed from a group without changes to, or the need to reload, individual firewall rules." +msgstr "Групи брандмауера представляють набори IP-адрес, мереж, портів, Mac-адрес або доменів. Після створення на групу можуть посилатися правила маршрутизації брандмауера, nat і політики як джерело або місце призначення. Учасників можна додавати або видаляти з групи без змін чи необхідності перезавантаження окремих правил брандмауера." -#: ../../configuration/highavailability/index.rst:381 +#: ../../configuration/highavailability/index.rst:391 msgid "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" -msgstr "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" +msgstr "Знак брандмауера. Можливе балансування трафіку на основі значення ``fwmark``" #: ../../configuration/interfaces/openvpn.rst:311 msgid "Firewall policy can also be applied to the tunnel interface for `local`, `in`, and `out` directions and functions identically to ethernet interfaces." -msgstr "Firewall policy can also be applied to the tunnel interface for `local`, `in`, and `out` directions and functions identically to ethernet interfaces." +msgstr "Політика брандмауера також може бути застосована до інтерфейсу тунелю для `локальних`, `вхідних` та `вихідних` напрямків і функціонує так само, як інтерфейси Ethernet." #: ../../configuration/nat/nat44.rst:644 msgid "Firewall rules are written as normal, using the internal IP address as the source of outbound rules and the destination of inbound rules." -msgstr "Firewall rules are written as normal, using the internal IP address as the source of outbound rules and the destination of inbound rules." +msgstr "Правила брандмауера записуються як звичайні, використовуючи внутрішню IP-адресу як джерело вихідних правил і призначення вхідних правил." #: ../../configuration/nat/nat44.rst:572 msgid "Firewall rules for Destination NAT" @@ -5422,19 +6118,23 @@ msgstr "Firewall rules for Destination NAT" #: ../../configuration/interfaces/wwan.rst:321 msgid "Firmware Update" -msgstr "Firmware Update" +msgstr "Оновлення мікропрограми" #: ../../configuration/vpn/rsa-keys.rst:9 msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." -msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair nam>>\". You may choose different length than 2048 of course." +msgstr "Спочатку на обох маршрутизаторах виконайте операційну команду «generate pki key-pair install<key-pair nam> >". Звичайно, ви можете вибрати іншу довжину, ніж 2048." -#: ../../configuration/vpn/ipsec.rst:267 +#: ../../configuration/vpn/ipsec.rst:271 msgid "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." -msgstr "First, on both routers run the operational command \"generate pki key-pair install <key-pair name>\". You may choose different length than 2048 of course." +msgstr "Спочатку на обох маршрутизаторах виконайте операційну команду «generate pki key-pair install<key-pair name> ". Звичайно, ви можете вибрати іншу довжину, ніж 2048." #: ../../configuration/interfaces/openvpn.rst:51 msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." -msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki>` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +msgstr "Спочатку одна із систем генерує ключ за допомогою :ref:`generate pki openvpn shared-secret<configuration/pki/index:pki> ` команда. Після створення вам потрібно буде встановити цей ключ у локальній системі, а потім скопіювати та встановити цей ключ на віддалений маршрутизатор." + +#: ../../configuration/pki/index.rst:393 +msgid "First, we create the root certificate authority." +msgstr "First, we create the root certificate authority." #: ../../configuration/interfaces/openvpn.rst:176 msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install <name>`` from configuration mode. You can use any name, we will use ``s2s``." @@ -5442,7 +6142,7 @@ msgstr "First, you need to generate a key by running ``run generate pki openvpn #: ../../configuration/policy/route-map.rst:60 msgid "First hop interface of a route to match." -msgstr "First hop interface of a route to match." +msgstr "Інтерфейс першого переходу маршруту, який відповідає." #: ../../configuration/vpn/remoteaccess_ipsec.rst:20 msgid "First of all, we need to create a CA root certificate and server certificate on the server side." @@ -5450,7 +6150,7 @@ msgstr "First of all, we need to create a CA root certificate and server certifi #: ../../configuration/protocols/bgp.rst:171 msgid "First of all you must configure BGP router with the :abbr:`ASN (Autonomous System Number)`. The AS number is an identifier for the autonomous system. The BGP protocol uses the AS number for detecting whether the BGP connection is internal or external. VyOS does not have a special command to start the BGP process. The BGP process starts when the first neighbor is configured." -msgstr "First of all you must configure BGP router with the :abbr:`ASN (Autonomous System Number)`. The AS number is an identifier for the autonomous system. The BGP protocol uses the AS number for detecting whether the BGP connection is internal or external. VyOS does not have a special command to start the BGP process. The BGP process starts when the first neighbor is configured." +msgstr "Перш за все, ви повинні налаштувати маршрутизатор BGP за допомогою :abbr:`ASN (Autonomous System Number)`. Номер AS є ідентифікатором автономної системи. Протокол BGP використовує номер AS для визначення внутрішнього чи зовнішнього підключення BGP. VyOS не має спеціальної команди для запуску процесу BGP. Процес BGP починається, коли налаштовано першого сусіда." #: ../../configuration/nat/nat44.rst:659 msgid "First scenario: apply destination NAT for all HTTP traffic comming through interface eth0, and user 4 backends. First backend should received 30% of the request, second backend should get 20%, third 15% and the fourth 35% We will use source and destination address for hash generation." @@ -5458,23 +6158,27 @@ msgstr "First scenario: apply destination NAT for all HTTP traffic comming throu #: ../../configuration/service/pppoe-server.rst:21 msgid "First steps" -msgstr "First steps" +msgstr "Перші кроки" #: ../../configuration/vpn/openconnect.rst:178 msgid "First the OTP keys must be generated and sent to the user and to the configuration:" -msgstr "First the OTP keys must be generated and sent to the user and to the configuration:" +msgstr "Спочатку потрібно створити ключі OTP і надіслати їх користувачеві та конфігурації:" #: ../../configuration/interfaces/openvpn.rst:342 msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." -msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." +msgstr "Спочатку нам потрібно вказати основні налаштування. 1194/UDP є типовим. Рекомендується опція ``persistent-tunnel``, вона запобігає закриттю пристрою TUN/TAP після скидання з’єднання або перезавантаження демона." + +#: ../../configuration/protocols/rpki.rst:40 +msgid "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." +msgstr "First you will need to deploy an RPKI validator for your routers to use. NLnet Labs provides a collection of software_ you can compare and settle on one. Once your server is running you can start validating announcements." #: ../../configuration/protocols/rpki.rst:41 msgid "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." -msgstr "First you will need to deploy an RPKI validator for your routers to use. The RIPE NCC helpfully provide `some instructions`_ to get you started with several different options. Once your server is running you can start validating announcements." +msgstr "Спочатку вам потрібно буде розгорнути валідатор RPKI, щоб ваші маршрутизатори могли використовувати його. RIPE NCC надає `деякі інструкції`_, які допоможуть вам почати роботу з кількома різними варіантами. Коли ваш сервер запрацює, ви можете розпочати перевірку оголошень." #: ../../configuration/trafficpolicy/index.rst:797 msgid "Flash" -msgstr "Flash" +msgstr "СПАЛАХ" #: ../../configuration/trafficpolicy/index.rst:795 msgid "Flash Override" @@ -5482,19 +6186,43 @@ msgstr "Flash Override" #: ../../configuration/system/flow-accounting.rst:5 msgid "Flow Accounting" -msgstr "Flow Accounting" +msgstr "Облік потоків" #: ../../configuration/system/flow-accounting.rst:86 msgid "Flow Export" -msgstr "Flow Export" +msgstr "Експорт потоку" #: ../../configuration/loadbalancing/wan.rst:95 msgid "Flow and packet-based balancing" -msgstr "Flow and packet-based balancing" +msgstr "Балансування потоків і пакетів" + +#: ../../configuration/trafficpolicy/index.rst:1196 +msgid "Flows are defined by source-destination host pairs." +msgstr "Flows are defined by source-destination host pairs." + +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over destination addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1186 +msgid "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." +msgstr "Flows are defined by the 5-tuple. Fairness is applied first over source addresses, then over individual flows." + +#: ../../configuration/trafficpolicy/index.rst:1191 +msgid "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." +msgstr "Flows are defined by the entire 5-tuple (source IP address, source port, destination IP address, destination port, transport protocol)." + +#: ../../configuration/trafficpolicy/index.rst:1177 +msgid "Flows are defined only by destination address." +msgstr "Flows are defined only by destination address." + +#: ../../configuration/trafficpolicy/index.rst:1204 +msgid "Flows are defined only by source address." +msgstr "Flows are defined only by source address." #: ../../configuration/system/flow-accounting.rst:10 msgid "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." -msgstr "Flows can be exported via two different protocols: NetFlow (versions 5, 9 and 10/IPFIX) and sFlow. Additionally, you may save flows to an in-memory table internally in a router." +msgstr "Потоки можна експортувати за допомогою двох різних протоколів: NetFlow (версії 5, 9 і 10/IPFIX) і sFlow. Крім того, ви можете зберігати потоки у внутрішній таблиці в пам’яті маршрутизатора." #: ../../configuration/firewall/flowtables.rst:57 msgid "Flowtable Configuration" @@ -5510,7 +6238,7 @@ msgstr "Flowtables allows you to define a fastpath through the flowtable datapa #: ../../configuration/loadbalancing/wan.rst:244 msgid "Flushing the session table will cause other connections to fall back from flow-based to packet-based balancing until each flow is reestablished." -msgstr "Flushing the session table will cause other connections to fall back from flow-based to packet-based balancing until each flow is reestablished." +msgstr "Очищення таблиці сеансів призведе до того, що інші з’єднання перейдуть із балансування на основі потоку до балансування на основі пакетів, доки кожен потік не буде відновлено." #: ../../configuration/service/ssh.rst:236 msgid "Follow the SSH dynamic-protection log." @@ -5522,11 +6250,11 @@ msgstr "Follow the SSH server log." #: ../../configuration/vpn/openconnect.rst:102 msgid "Follow the instructions to generate CA cert (in configuration mode):" -msgstr "Follow the instructions to generate CA cert (in configuration mode):" +msgstr "Дотримуйтесь інструкцій, щоб створити сертифікат CA (у режимі конфігурації):" #: ../../configuration/vpn/openconnect.rst:120 msgid "Follow the instructions to generate server cert (in configuration mode):" -msgstr "Follow the instructions to generate server cert (in configuration mode):" +msgstr "Дотримуйтесь інструкцій, щоб створити сертифікат сервера (у режимі конфігурації):" #: ../../configuration/service/mdns.rst:91 msgid "Follow the logs for mDNS repeater service." @@ -5534,71 +6262,71 @@ msgstr "Follow the logs for mDNS repeater service." #: ../../configuration/interfaces/openvpn.rst:258 msgid "For Encryption:" -msgstr "For Encryption:" +msgstr "Для шифрування:" #: ../../configuration/interfaces/openvpn.rst:295 msgid "For Hashing:" -msgstr "For Hashing:" +msgstr "Для хешування:" #: ../../configuration/protocols/isis.rst:33 msgid "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." -msgstr "For IS-IS top operate correctly, one must do the equivalent of a Router ID in CLNS. This Router ID is called the :abbr:`NET (Network Entity Title)`. This must be unique for each and every router that is operating in IS-IS. It also must not be duplicated otherwise the same issues that occur within OSPF will occur within IS-IS when it comes to said duplication." +msgstr "Щоб IS-IS top працював правильно, потрібно зробити еквівалент ідентифікатора маршрутизатора в CLNS. Цей ідентифікатор маршрутизатора називається :abbr:`NET (Network Entity Title)`. Це має бути унікальним для кожного маршрутизатора, який працює в IS-IS. Його також не можна дублювати, інакше ті самі проблеми, які виникають у OSPF, виникнуть у IS-IS, коли мова йде про дублювання." -#: ../../configuration/policy/route-map.rst:311 +#: ../../configuration/policy/route-map.rst:314 msgid "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." -msgstr "For Incoming and Import Route-maps if we receive a v6 global and v6 LL address for the route, then prefer to use the global address as the nexthop." +msgstr "Для вхідних та імпортних карт маршрутів, якщо ми отримуємо глобальну адресу v6 та v6 LL для маршруту, тоді віддаємо перевагу використанню глобальної адреси як наступного переходу." -#: ../../configuration/service/pppoe-server.rst:188 +#: ../../configuration/service/pppoe-server.rst:257 msgid "For Local Users" -msgstr "For Local Users" +msgstr "Для локальних користувачів" -#: ../../configuration/service/pppoe-server.rst:223 +#: ../../configuration/service/pppoe-server.rst:297 msgid "For RADIUS users" -msgstr "For RADIUS users" +msgstr "Для користувачів RADIUS" #: ../../configuration/service/console-server.rst:18 msgid "For USB port information please refor to: :ref:`hardware_usb`." -msgstr "For USB port information please refor to: :ref:`hardware_usb`." +msgstr "Щоб отримати інформацію про USB-порт, перейдіть за адресою: :ref:`hardware_usb`." #: ../../configuration/nat/nat44.rst:137 msgid "For :ref:`bidirectional-nat` a rule for both :ref:`source-nat` and :ref:`destination-nat` needs to be created." -msgstr "For :ref:`bidirectional-nat` a rule for both :ref:`source-nat` and :ref:`destination-nat` needs to be created." +msgstr "Для :ref:`bidirectional-nat` потрібно створити правило як для :ref:`source-nat`, так і для :ref:`destination-nat`." #: ../../configuration/nat/nat44.rst:275 msgid "For :ref:`destination-nat` rules the packets destination address will be replaced by the specified address in the `translation address` command." -msgstr "For :ref:`destination-nat` rules the packets destination address will be replaced by the specified address in the `translation address` command." +msgstr "Для правил :ref:`destination-nat` адресу призначення пакетів буде замінено адресою, зазначеною в команді `translation address`." #: ../../configuration/nat/nat44.rst:240 msgid "For :ref:`source-nat` rules the packets source address will be replaced with the address specified in the translation command. A port translation can also be specified and is part of the translation address." -msgstr "For :ref:`source-nat` rules the packets source address will be replaced with the address specified in the translation command. A port translation can also be specified and is part of the translation address." +msgstr "Для правил :ref:`source-nat` адресу джерела пакетів буде замінено адресою, зазначеною в команді перекладу. Переклад порту також може бути вказаний і є частиною адреси перекладу." #: ../../configuration/interfaces/bonding.rst:383 msgid "For a headstart you can use the below example on how to build a bond,port-channel with two interfaces from VyOS to a Aruba/HP 2510G switch." -msgstr "For a headstart you can use the below example on how to build a bond,port-channel with two interfaces from VyOS to a Aruba/HP 2510G switch." +msgstr "Для початку ви можете використати наведений нижче приклад того, як побудувати зв’язок, порт-канал із двома інтерфейсами від VyOS до комутатора Aruba/HP 2510G." #: ../../configuration/interfaces/bonding.rst:354 msgid "For a headstart you can use the below example on how to build a bond with two interfaces from VyOS to a Juniper EX Switch system." -msgstr "For a headstart you can use the below example on how to build a bond with two interfaces from VyOS to a Juniper EX Switch system." +msgstr "Для початку ви можете використати наведений нижче приклад того, як побудувати зв’язок за допомогою двох інтерфейсів від VyOS до системи Juniper EX Switch." #: ../../configuration/nat/nat44.rst:260 msgid "For a large amount of private machines behind the NAT your address pool might to be bigger. Use any address in the range 100.64.0.10 - 100.64.0.20 on SNAT rule 40 when doing the translation" -msgstr "For a large amount of private machines behind the NAT your address pool might to be bigger. Use any address in the range 100.64.0.10 - 100.64.0.20 on SNAT rule 40 when doing the translation" +msgstr "Для великої кількості приватних машин за NAT ваш пул адрес може бути більшим. Використовуйте будь-яку адресу в діапазоні 100.64.0.10 - 100.64.0.20 за правилом SNAT 40 під час виконання перекладу" #: ../../configuration/interfaces/pppoe.rst:34 msgid "For a simple home network using just the ISP's equipment, this is usually desirable. But if you want to run VyOS as your firewall and router, this will result in having a double NAT and firewall setup. This results in a few extra layers of complexity, particularly if you use some NAT or tunnel features." -msgstr "For a simple home network using just the ISP's equipment, this is usually desirable. But if you want to run VyOS as your firewall and router, this will result in having a double NAT and firewall setup. This results in a few extra layers of complexity, particularly if you use some NAT or tunnel features." +msgstr "Для простої домашньої мережі, яка використовує лише обладнання провайдера, це зазвичай бажано. Але якщо ви хочете запустити VyOS як брандмауер і маршрутизатор, це призведе до встановлення подвійного NAT і брандмауера. Це призводить до кількох додаткових рівнів складності, особливо якщо ви використовуєте деякі функції NAT або тунелювання." #: ../../configuration/system/flow-accounting.rst:35 msgid "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." -msgstr "For connectionless protocols as like ICMP and UDP, a flow is considered complete once no more packets for this flow appear after configurable timeout." +msgstr "Для протоколів без з’єднання, таких як ICMP і UDP, потік вважається завершеним, якщо більше не з’являються пакети для цього потоку після настроюваного часу очікування." -#: ../../configuration/system/login.rst:132 +#: ../../configuration/system/login.rst:136 msgid "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." -msgstr "For example, if problems with poor time synchronization are experienced, the window can be increased from its default size of 3 permitted codes (one previous code, the current code, the next code) to 17 permitted codes (the 8 previous codes, the current code, and the 8 next codes). This will permit for a time skew of up to 4 minutes between client and server." +msgstr "Наприклад, якщо виникають проблеми з поганою синхронізацією часу, вікно можна збільшити з розміру за замовчуванням із 3 дозволених кодів (один попередній код, поточний код, наступний код) до 17 дозволених кодів (8 попередніх кодів, поточний код). і 8 наступних кодів). Це дозволить мати розбіжності в часі до 4 хвилин між клієнтом і сервером." #: ../../configuration/trafficpolicy/index.rst:157 msgid "For example:" -msgstr "For example:" +msgstr "Наприклад:" #: ../../configuration/firewall/general.rst:59 msgid "For firewall filtering, configuration should be done in ``set firewall [ipv4 | ipv6] ...``" @@ -5612,23 +6340,23 @@ msgstr "For firewall filtering, firewall rules needs to be created. Each rule is #: ../../configuration/interfaces/bonding.rst:219 msgid "For fragmented TCP or UDP packets and all other IPv4 and IPv6 protocol traffic, the source and destination port information is omitted. For non-IP traffic, the formula is the same as for the layer2 transmit hash policy." -msgstr "For fragmented TCP or UDP packets and all other IPv4 and IPv6 protocol traffic, the source and destination port information is omitted. For non-IP traffic, the formula is the same as for the layer2 transmit hash policy." +msgstr "Для фрагментованих пакетів TCP або UDP і всього іншого трафіку протоколів IPv4 і IPv6 інформація про порт джерела та призначення пропускається. Для не-IP-трафіку формула така ж, як і для хеш-політики передачі рівня 2." #: ../../configuration/vpn/openconnect.rst:74 msgid "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" -msgstr "For generating an OTP key in VyOS, you can use the CLI command (operational mode):" +msgstr "Для створення ключа OTP у VyOS можна використовувати команду CLI (робочий режим):" -#: ../../configuration/protocols/bgp.rst:823 +#: ../../configuration/protocols/bgp.rst:845 msgid "For inbound updates the order of preference is:" -msgstr "For inbound updates the order of preference is:" +msgstr "Для вхідних оновлень порядок переваг такий:" #: ../../configuration/trafficpolicy/index.rst:254 msgid "For instance, with :code:`set qos policy shaper MY-SHAPER class 30 set-dscp EF` you would be modifying the DSCP field value of packets in that class to Expedite Forwarding." -msgstr "For instance, with :code:`set qos policy shaper MY-SHAPER class 30 set-dscp EF` you would be modifying the DSCP field value of packets in that class to Expedite Forwarding." +msgstr "Наприклад, за допомогою :code:`set qos policy shaper MY-SHAPER class 30 set-dscp EF` ви змінюватимете значення поля DSCP пакетів у цьому класі на прискорене пересилання." #: ../../configuration/policy/route.rst:67 msgid "For ipv4:" -msgstr "For ipv4:" +msgstr "Для ipv4:" #: ../../configuration/firewall/zone.rst:9 msgid "For latest releases, refer the `firewall <https://docs.vyos.io/en/latest/configuration/firewall/general.html#interface-groups>`_ main page to configure zone based rules. New syntax was introduced here :vytask:`T5160`" @@ -5640,19 +6368,23 @@ msgstr "For latest releases, refer the `firewall (interface-groups) <https://doc #: ../../configuration/protocols/mpls.rst:27 msgid "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." -msgstr "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." +msgstr "Щоб дізнатися більше про те, як працює перемикання міток MPLS, відвідайте `Wikipedia (MPLS)`_." -#: ../../configuration/service/pppoe-server.rst:299 +#: ../../configuration/protocols/bfd.rst:61 +msgid "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." +msgstr "For multi hop sessions only. Configure the minimum expected TTL for an incoming BFD control packet." + +#: ../../configuration/service/pppoe-server.rst:307 msgid "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." -msgstr "For network maintenance, it's a good idea to direct users to a backup server so that the primary server can be safely taken out of service. It's possible to switch your PPPoE server to maintenance mode where it maintains already established connections, but refuses new connection attempts." +msgstr "Для обслуговування мережі доцільно направляти користувачів на резервний сервер, щоб основний сервер можна було безпечно вивести з експлуатації. Сервер PPPoE можна перевести в режим обслуговування, коли він підтримує вже встановлені з’єднання, але відмовляється від нових спроб з’єднання." #: ../../configuration/interfaces/vxlan.rst:152 msgid "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." -msgstr "For optimal scalability, Multicast shouldn't be used at all, but instead use BGP to signal all connected devices between leaves. Unfortunately, VyOS does not yet support this." +msgstr "Для оптимальної масштабованості Multicast взагалі не слід використовувати, натомість використовуйте BGP для сигналізації всіх підключених пристроїв між листами. На жаль, VyOS ще не підтримує це." -#: ../../configuration/protocols/bgp.rst:829 +#: ../../configuration/protocols/bgp.rst:851 msgid "For outbound updates the order of preference is:" -msgstr "For outbound updates the order of preference is:" +msgstr "Для вихідних оновлень порядок переваг такий:" #: ../../configuration/firewall/bridge.rst:201 msgid "For reference, a description can be defined for every defined custom chain." @@ -5665,39 +6397,39 @@ msgstr "For reference, a description can be defined for every single rule, and f #: ../../configuration/service/webproxy.rst:84 msgid "For security, the listen address should only be used on internal/trusted networks!" -msgstr "For security, the listen address should only be used on internal/trusted networks!" +msgstr "З міркувань безпеки адресу прослуховування слід використовувати лише у внутрішніх/довірених мережах!" #: ../../configuration/system/lcd.rst:25 msgid "For serial via USB port information please refor to: :ref:`hardware_usb`." -msgstr "For serial via USB port information please refor to: :ref:`hardware_usb`." +msgstr "Щоб отримати інформацію про послідовний порт USB, перейдіть до: :ref:`hardware_usb`." #: ../../configuration/vpn/ipsec.rst:24 msgid "For simplicity we'll assume that the protocol is GRE, it's not hard to guess what needs to be changed to make it work with a different protocol. We assume that IPsec will use pre-shared secret authentication and will use AES128/SHA1 for the cipher and hash. Adjust this as necessary." -msgstr "For simplicity we'll assume that the protocol is GRE, it's not hard to guess what needs to be changed to make it work with a different protocol. We assume that IPsec will use pre-shared secret authentication and will use AES128/SHA1 for the cipher and hash. Adjust this as necessary." +msgstr "Для простоти ми припустимо, що це протокол GRE, неважко здогадатися, що потрібно змінити, щоб він працював з іншим протоколом. Ми припускаємо, що IPsec використовуватиме попередньо спільну секретну автентифікацію та використовуватиме AES128/SHA1 для шифру та хешу. Налаштуйте це за потреби." #: ../../configuration/interfaces/openvpn.rst:211 msgid "For the OpenVPN traffic to pass through the WAN interface, you must create a firewall exception." -msgstr "For the OpenVPN traffic to pass through the WAN interface, you must create a firewall exception." +msgstr "Щоб трафік OpenVPN проходив через інтерфейс WAN, необхідно створити виняток брандмауера." #: ../../configuration/interfaces/wireguard.rst:209 msgid "For the WireGuard traffic to pass through the WAN interface, you must create a firewall exception." -msgstr "For the WireGuard traffic to pass through the WAN interface, you must create a firewall exception." +msgstr "Щоб трафік WireGuard проходив через інтерфейс WAN, необхідно створити виняток брандмауера." #: ../../configuration/nat/nat66.rst:92 msgid "For the :ref:`destination-nat66` rule, the destination address of the packet isreplaced by the address calculated from the specified address or prefix in the `translation address` command" -msgstr "For the :ref:`destination-nat66` rule, the destination address of the packet isreplaced by the address calculated from the specified address or prefix in the `translation address` command" +msgstr "Для правила :ref:`destination-nat66` адреса призначення пакета замінюється адресою, обчисленою на основі вказаної адреси або префікса в команді `translation address`" #: ../../configuration/system/console.rst:7 msgid "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." -msgstr "For the average user a serial console has no advantage over a console offered by a directly attached keyboard and screen. Serial consoles are much slower, taking up to a second to fill a 80 column by 24 line screen. Serial consoles generally only support non-proportional ASCII text, with limited support for languages other than English." +msgstr "Для звичайного користувача послідовна консоль не має переваг перед консоллю, що пропонується безпосередньо підключеною клавіатурою та екраном. Послідовні консолі набагато повільніші, їм потрібна до секунди, щоб заповнити екран із 80 стовпців на 24 рядки. Послідовні консолі зазвичай підтримують лише непропорційний текст ASCII з обмеженою підтримкою інших мов, крім англійської." -#: ../../configuration/trafficpolicy/index.rst:1183 +#: ../../configuration/trafficpolicy/index.rst:1251 msgid "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." -msgstr "For the ingress traffic of an interface, there is only one policy you can directly apply, a **Limiter** policy. You cannot apply a shaping policy directly to the ingress traffic of any interface because shaping only works for outbound traffic." +msgstr "Для вхідного трафіку інтерфейсу існує лише одна політика, яку можна застосувати безпосередньо, політика **Limiter**. Ви не можете застосувати політику формування безпосередньо до вхідного трафіку будь-якого інтерфейсу, оскільки формування працює лише для вихідного трафіку." -#: ../../configuration/container/index.rst:179 +#: ../../configuration/container/index.rst:218 msgid "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." -msgstr "For the sake of demonstration, `example #1 in the official documentation <https://www.zabbix.com/documentation/current/manual/installation/containers>`_ to the declarative VyOS CLI syntax." +msgstr "Для демонстрації приклад №1 в офіційній документації<https://www.zabbix.com/documentation/current/manual/installation/containers> `_ до декларативного синтаксису CLI VyOS." #: ../../configuration/firewall/general.rst:66 msgid "For traffic originated by the router, base chain is **output filter**: ``set firewall [ipv4 | ipv6] output filter ...``" @@ -5729,33 +6461,37 @@ msgstr "For transit traffic, which is received by the router and forwarded, base msgid "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" msgstr "For transit traffic, which is received by the router and forwarded, base chain is **forward filter**: ``set firewall [ipv4 | ipv6] forward filter ...``" +#: ../../configuration/loadbalancing/reverse-proxy.rst:161 +msgid "For web application providing information about their state HTTP health checks can be used to determine their availability." +msgstr "For web application providing information about their state HTTP health checks can be used to determine their availability." + #: ../../configuration/protocols/ospf.rst:350 msgid "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." -msgstr "Formally, a virtual link looks like a point-to-point network connecting two ABR from one area one of which physically connected to a backbone area. This pseudo-network is considered to belong to a backbone area." +msgstr "Формально віртуальне з’єднання виглядає як мережа «точка-точка», що з’єднує два ABR з однієї області, одна з яких фізично з’єднана з магістральною областю. Вважається, що ця псевдомережа належить до магістральної області." #: ../../configuration/service/dns.rst:21 msgid "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." -msgstr "Forward incoming DNS queries to the DNS servers configured under the ``system name-server`` nodes." +msgstr "Пересилайте вхідні DNS-запити на DNS-сервери, налаштовані під вузлами ``системного сервера імен``." -#: ../../configuration/highavailability/index.rst:362 +#: ../../configuration/highavailability/index.rst:372 msgid "Forward method" -msgstr "Forward method" +msgstr "Форвардний метод" #: ../../configuration/service/dns.rst:36 msgid "Forward received queries for a particular domain (specified via `domain-name`) to a given nameserver. Multiple nameservers can be specified. You can use this feature for a DNS split-horizon configuration." -msgstr "Forward received queries for a particular domain (specified via `domain-name`) to a given nameserver. Multiple nameservers can be specified. You can use this feature for a DNS split-horizon configuration." +msgstr "Пересилати отримані запити для певного домену (вказаного через `domain-name`) на вказаний сервер імен. Можна вказати кілька серверів імен. Цю функцію можна використовувати для конфігурації розділеного горизонту DNS." #: ../../configuration/service/dhcp-relay.rst:69 msgid "Four policies for reforwarding DHCP packets exist:" -msgstr "Four policies for reforwarding DHCP packets exist:" +msgstr "Існує чотири правила переадресації пакетів DHCP:" #: ../../configuration/protocols/bgp.rst:24 msgid "From :rfc:`1930`:" -msgstr "From :rfc:`1930`:" +msgstr "З :rfc:`1930`:" #: ../../configuration/interfaces/wireguard.rst:400 msgid "From a security perspective, it is not recommended to let a third party create and share the private key for a secured connection. You should create the private portion on your own and only hand out the public key. Please keep this in mind when using this convenience feature." -msgstr "From a security perspective, it is not recommended to let a third party create and share the private key for a secured connection. You should create the private portion on your own and only hand out the public key. Please keep this in mind when using this convenience feature." +msgstr "З точки зору безпеки, не рекомендується дозволяти третім особам створювати та ділитися закритим ключем для захищеного з’єднання. Вам слід створити приватну частину самостійно та надати лише відкритий ключ. Пам’ятайте про це, користуючись цією зручною функцією." #: ../../configuration/firewall/bridge.rst:21 #: ../../configuration/firewall/flowtables.rst:20 @@ -5765,59 +6501,64 @@ msgstr "From a security perspective, it is not recommended to let a third party msgid "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" msgstr "From main structure defined in :doc:`Firewall Overview</configuration/firewall/index>` in this section you can find detailed information only for the next part of the general structure:" -#: ../../configuration/highavailability/index.rst:380 +#: ../../configuration/highavailability/index.rst:390 msgid "Fwmark" msgstr "Fwmark" #: ../../configuration/interfaces/geneve.rst:7 msgid "GENEVE" -msgstr "GENEVE" +msgstr "ЖЕНЕВА" #: ../../configuration/interfaces/geneve.rst:16 msgid "GENEVE is designed to support network virtualization use cases, where tunnels are typically established to act as a backplane between the virtual switches residing in hypervisors, physical switches, or middleboxes or other appliances. An arbitrary IP network can be used as an underlay although Clos networks - A technique for composing network fabrics larger than a single switch while maintaining non-blocking bandwidth across connection points. ECMP is used to divide traffic across the multiple links and switches that constitute the fabric. Sometimes termed \"leaf and spine\" or \"fat tree\" topologies." -msgstr "GENEVE is designed to support network virtualization use cases, where tunnels are typically established to act as a backplane between the virtual switches residing in hypervisors, physical switches, or middleboxes or other appliances. An arbitrary IP network can be used as an underlay although Clos networks - A technique for composing network fabrics larger than a single switch while maintaining non-blocking bandwidth across connection points. ECMP is used to divide traffic across the multiple links and switches that constitute the fabric. Sometimes termed \"leaf and spine\" or \"fat tree\" topologies." +msgstr "GENEVE розроблено для підтримки випадків використання мережевої віртуалізації, де зазвичай встановлюються тунелі, які виконують роль об’єднавчої плати між віртуальними комутаторами, розташованими в гіпервізорах, фізичних комутаторах, проміжних блоках чи інших пристроях. Довільна IP-мережа може бути використана як підкладка, хоча мережі Clos — техніка створення мережевих структур, розмір яких перевищує один комутатор, із збереженням неблокуючої пропускної здатності між точками з’єднання. ECMP використовується для розподілу трафіку між декількома зв’язками та комутаторами, які утворюють структуру. Іноді їх називають топологією «листя та хребта» або «товстого дерева»." #: ../../configuration/interfaces/geneve.rst:49 msgid "GENEVE options" -msgstr "GENEVE options" +msgstr "Варіанти GENEVE" #: ../../configuration/vpn/ipsec.rst:21 msgid "GRE/IPIP/SIT and IPsec are widely accepted standards, which make this scheme easy to implement between VyOS and virtually any other router." -msgstr "GRE/IPIP/SIT and IPsec are widely accepted standards, which make this scheme easy to implement between VyOS and virtually any other router." +msgstr "GRE/IPIP/SIT і IPsec є загальноприйнятими стандартами, завдяки яким цю схему легко використовувати між VyOS і практично будь-яким іншим маршрутизатором." #: ../../configuration/interfaces/tunnel.rst:211 msgid "GRETAP" -msgstr "GRETAP" +msgstr "ГРЕТАП" #: ../../configuration/interfaces/tunnel.rst:229 msgid "GRE is a well defined standard that is common in most networks. While not inherently difficult to configure there are a couple of things to keep in mind to make sure the configuration performs as expected. A common cause for GRE tunnels to fail to come up correctly include ACL or Firewall configurations that are discarding IP protocol 47 or blocking your source/destination traffic." -msgstr "GRE is a well defined standard that is common in most networks. While not inherently difficult to configure there are a couple of things to keep in mind to make sure the configuration performs as expected. A common cause for GRE tunnels to fail to come up correctly include ACL or Firewall configurations that are discarding IP protocol 47 or blocking your source/destination traffic." +msgstr "GRE — це чітко визначений стандарт, поширений у більшості мереж. Хоча конфігурація за своєю суттю не складна, потрібно пам’ятати кілька речей, щоб переконатися, що конфігурація працює належним чином. Поширеною причиною того, що тунелі GRE не відображаються належним чином, є конфігурації ACL або брандмауера, які відкидають IP-протокол 47 або блокують трафік джерела/одержувача." #: ../../configuration/interfaces/tunnel.rst:189 msgid "GRE is also the only classic protocol that allows creating multiple tunnels with the same source and destination due to its support for tunnel keys. Despite its name, this feature has nothing to do with security: it's simply an identifier that allows routers to tell one tunnel from another." -msgstr "GRE is also the only classic protocol that allows creating multiple tunnels with the same source and destination due to its support for tunnel keys. Despite its name, this feature has nothing to do with security: it's simply an identifier that allows routers to tell one tunnel from another." +msgstr "GRE також є єдиним класичним протоколом, який дозволяє створювати кілька тунелів з однаковим джерелом і призначенням завдяки підтримці тунельних ключів. Незважаючи на свою назву, ця функція не має нічого спільного з безпекою: це просто ідентифікатор, який дозволяє маршрутизаторам відрізняти один тунель від іншого." #: ../../configuration/interfaces/tunnel.rst:10 msgid "GRE is often seen as a one size fits all solution when it comes to classic IP tunneling protocols, and for a good reason. However, there are more specialized options, and many of them are supported by VyOS. There are also rather obscure GRE options that can be useful." -msgstr "GRE is often seen as a one size fits all solution when it comes to classic IP tunneling protocols, and for a good reason. However, there are more specialized options, and many of them are supported by VyOS. There are also rather obscure GRE options that can be useful." +msgstr "GRE часто розглядається як єдине рішення для всіх, коли мова йде про класичні протоколи IP-тунелювання, і з поважної причини. Однак є більш спеціалізовані варіанти, і багато з них підтримуються VyOS. Є також досить незрозумілі параметри GRE, які можуть бути корисними." #: ../../configuration/pki/index.rst:121 #: ../../configuration/pki/index.rst:126 msgid "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." -msgstr "Genearate a new OpenVPN shared secret. The generated secred is the output to the console." +msgstr "Створіть новий спільний секрет OpenVPN. Згенерований secred є виводом на консоль." + +#: ../../configuration/pki/index.rst:123 +#: ../../configuration/pki/index.rst:128 +msgid "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." +msgstr "Genearate a new OpenVPN shared secret. The generated secret is the output to the console." #: ../../configuration/protocols/isis.rst:25 #: ../../configuration/protocols/ospf.rst:25 #: ../../configuration/protocols/ospf.rst:1081 #: ../../configuration/system/option.rst:11 msgid "General" -msgstr "General" +msgstr "Загальні" #: ../../configuration/protocols/babel.rst:18 #: ../../configuration/protocols/bgp.rst:582 #: ../../configuration/protocols/rip.rst:23 msgid "General Configuration" -msgstr "General Configuration" +msgstr "Загальна конфігурація" #: ../../configuration/firewall/bridge.rst:291 msgid "General commands for firewall configuration, counter and statiscits:" @@ -5825,78 +6566,90 @@ msgstr "General commands for firewall configuration, counter and statiscits:" #: ../../configuration/interfaces/wireguard.rst:29 msgid "Generate Keypair" -msgstr "Generate Keypair" +msgstr "Створити пару ключів" #: ../../configuration/interfaces/macsec.rst:119 msgid "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key." -msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key." +msgstr "Згенеруйте :abbr:`MKA (протокол узгодження ключа MACsec)` ключ CAK." #: ../../configuration/interfaces/macsec.rst:110 msgid "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." -msgstr "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 bits." +msgstr "Згенерувати :abbr:`MKA (протокол узгодження ключа MACsec)` ключ CAK 128 або 256 біт." -#: ../../configuration/pki/index.rst:153 -#: ../../configuration/pki/index.rst:157 +#: ../../configuration/pki/index.rst:155 +#: ../../configuration/pki/index.rst:159 msgid "Generate a WireGuard pre-shared secret used for peers to communicate." -msgstr "Generate a WireGuard pre-shared secret used for peers to communicate." +msgstr "Створіть попередньо спільний секрет WireGuard, який використовується для спілкування однорангових користувачів." -#: ../../configuration/pki/index.rst:136 -#: ../../configuration/pki/index.rst:141 +#: ../../configuration/pki/index.rst:138 +#: ../../configuration/pki/index.rst:143 msgid "Generate a new WireGuard public/private key portion and output the result to the console." -msgstr "Generate a new WireGuard public/private key portion and output the result to the console." +msgstr "Згенеруйте нову частину відкритого/приватного ключа WireGuard і виведіть результат на консоль." -#: ../../configuration/pki/index.rst:104 -#: ../../configuration/pki/index.rst:111 +#: ../../configuration/pki/index.rst:106 +#: ../../configuration/pki/index.rst:113 msgid "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." -msgstr "Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size is requested by the CLI and defaults to 2048 bit." +msgstr "Згенеруйте новий набір параметрів :abbr:`DH (Diffie-Hellman)`. Розмір ключа запитується CLI і за замовчуванням становить 2048 біт." #: ../../configuration/service/ssh.rst:194 msgid "Generate the configuration mode commands to add a public key for :ref:`ssh_key_based_authentication`. ``<location>`` can be a local path or a URL pointing at a remote file." -msgstr "Generate the configuration mode commands to add a public key for :ref:`ssh_key_based_authentication`. ``<location>`` can be a local path or a URL pointing at a remote file." +msgstr "Згенеруйте команди режиму конфігурації, щоб додати відкритий ключ для :ref:`ssh_key_based_authentication`. ``<location> `` може бути локальним шляхом або URL-адресою, що вказує на віддалений файл." #: ../../configuration/interfaces/wireguard.rst:44 msgid "Generates a keypair, which includes the public and private parts, and build a configuration command to install this key to ``interface``." -msgstr "Generates a keypair, which includes the public and private parts, and build a configuration command to install this key to ``interface``." +msgstr "Створює пару ключів, яка включає публічну та приватну частини, і створює команду конфігурації для встановлення цього ключа в ``інтерфейс``." #: ../../configuration/interfaces/tunnel.rst:106 msgid "Generic Routing Encapsulation (GRE)" -msgstr "Generic Routing Encapsulation (GRE)" +msgstr "Загальна інкапсуляція маршрутизації (GRE)" #: ../../configuration/interfaces/geneve.rst:25 msgid "Geneve Header:" -msgstr "Geneve Header:" +msgstr "Женева Заголовок:" #: ../../configuration/interfaces/wireguard.rst:364 msgid "Get a list of all wireguard interfaces" -msgstr "Get a list of all wireguard interfaces" +msgstr "Отримайте список усіх інтерфейсів Wireguard" #: ../../configuration/system/acceleration.rst:50 msgid "Get an overview over the encryption counters." -msgstr "Get an overview over the encryption counters." +msgstr "Отримайте огляд лічильників шифрування." #: ../../configuration/service/lldp.rst:91 msgid "Get detailed information about LLDP neighbors." -msgstr "Get detailed information about LLDP neighbors." +msgstr "Отримайте детальну інформацію про сусідів LLDP." #: ../../configuration/nat/nat66.rst:160 msgid "Get the DHCPv6-PD prefixes from both routers:" msgstr "Get the DHCPv6-PD prefixes from both routers:" -#: ../../configuration/protocols/rpki.rst:39 +#: ../../configuration/protocols/rpki.rst:38 msgid "Getting started" -msgstr "Getting started" +msgstr "Починаємо" #: ../../configuration/service/dns.rst:54 msgid "Given the fact that open DNS recursors could be used on DDoS amplification attacks, you must configure the networks which are allowed to use this recursor. A network of ``0.0.0.0/0`` or ``::/0`` would allow all IPv4 and IPv6 networks to query this server. This is generally a bad idea." -msgstr "Given the fact that open DNS recursors could be used on DDoS amplification attacks, you must configure the networks which are allowed to use this recursor. A network of ``0.0.0.0/0`` or ``::/0`` would allow all IPv4 and IPv6 networks to query this server. This is generally a bad idea." +msgstr "Враховуючи той факт, що відкриті DNS-рекурсори можуть використовуватися для DDoS-атак посилення, ви повинні налаштувати мережі, яким дозволено використовувати цей рекурсор. Мережа ``0.0.0.0/0`` або ``::/0`` дозволить усім мережам IPv4 і IPv6 надсилати запити цьому серверу. Загалом це погана ідея." #: ../../configuration/interfaces/openvpn.rst:577 msgid "Given the following example we have one VyOS router acting as OpenVPN server and another VyOS router acting as OpenVPN client. The server also pushes a static client IP address to the OpenVPN client. Remember, clients are identified using their CN attribute in the SSL certificate." -msgstr "Given the following example we have one VyOS router acting as OpenVPN server and another VyOS router acting as OpenVPN client. The server also pushes a static client IP address to the OpenVPN client. Remember, clients are identified using their CN attribute in the SSL certificate." +msgstr "У наведеному нижче прикладі ми маємо один маршрутизатор VyOS, який діє як сервер OpenVPN, і інший маршрутизатор VyOS, який діє як клієнт OpenVPN. Сервер також надсилає статичну IP-адресу клієнта клієнту OpenVPN. Пам’ятайте, що клієнти ідентифікуються за допомогою атрибута CN у сертифікаті SSL." #: ../../configuration/loadbalancing/reverse-proxy.rst:150 msgid "Gloabal" -msgstr "Gloabal" +msgstr "Глобальний" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +msgid "Global" +msgstr "Global" + +#: ../../configuration/service/ipoe-server.rst:352 +#: ../../configuration/service/pppoe-server.rst:518 +#: ../../configuration/vpn/l2tp.rst:472 +#: ../../configuration/vpn/pptp.rst:396 +#: ../../configuration/vpn/sstp.rst:430 +msgid "Global Advanced options" +msgstr "Global Advanced options" #: ../../configuration/firewall/general.rst:84 msgid "Global Options" @@ -5908,36 +6661,40 @@ msgstr "Global Options Firewall Configuration" #: ../../configuration/highavailability/index.rst:224 msgid "Global options" -msgstr "Global options" +msgstr "Глобальні опції" -#: ../../configuration/loadbalancing/reverse-proxy.rst:152 +#: ../../configuration/loadbalancing/reverse-proxy.rst:192 msgid "Global parameters" -msgstr "Global parameters" +msgstr "Глобальні параметри" #: ../../configuration/firewall/general-legacy.rst:36 msgid "Global settings" -msgstr "Global settings" +msgstr "Глобальні налаштування" #: ../../configuration/protocols/ospf.rst:498 #: ../../configuration/protocols/ospf.rst:1210 msgid "Graceful Restart" -msgstr "Graceful Restart" +msgstr "Витончений перезапуск" + +#: ../../configuration/service/https.rst:84 +msgid "GraphQL" +msgstr "GraphQL" #: ../../configuration/highavailability/index.rst:236 msgid "Gratuitous ARP" -msgstr "Gratuitous ARP" +msgstr "Безоплатний ARP" #: ../../configuration/firewall/general-legacy.rst:153 msgid "Groups" -msgstr "Groups" +msgstr "Групи" #: ../../configuration/firewall/general-legacy.rst:161 msgid "Groups need to have unique names. Even though some contain IPv4 addresses and others contain IPv6 addresses, they still need to have unique names, so you may want to append \"-v4\" or \"-v6\" to your group names." -msgstr "Groups need to have unique names. Even though some contain IPv4 addresses and others contain IPv6 addresses, they still need to have unique names, so you may want to append \"-v4\" or \"-v6\" to your group names." +msgstr "Групи повинні мати унікальні назви. Незважаючи на те, що одні містять адреси IPv4, а інші – адреси IPv6, вони все одно повинні мати унікальні імена, тому ви можете додати «-v4» або «-v6» до імен ваших груп." #: ../../configuration/interfaces/openvpn.rst:420 msgid "HQ's router requires the following steps to generate crypto materials for the Branch 1:" -msgstr "HQ's router requires the following steps to generate crypto materials for the Branch 1:" +msgstr "Маршрутизатор штаб-квартири вимагає наступних кроків для генерації криптоматеріалів для філії 1:" #: ../../configuration/service/https.rst:5 msgid "HTTP-API" @@ -5947,86 +6704,90 @@ msgstr "HTTP-API" msgid "HTTP API" msgstr "HTTP API" -#: ../../configuration/service/dns.rst:317 +#: ../../configuration/service/dns.rst:411 msgid "HTTP based services" -msgstr "HTTP based services" +msgstr "Сервіси на основі HTTP" #: ../../configuration/service/monitoring.rst:51 #: ../../configuration/service/monitoring.rst:55 msgid "HTTP basic authentication username" -msgstr "HTTP basic authentication username" +msgstr "Ім'я користувача базової автентифікації HTTP" -#: ../../configuration/system/option.rst:27 +#: ../../configuration/system/option.rst:57 msgid "HTTP client" -msgstr "HTTP client" +msgstr "HTTP клієнт" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:160 +msgid "HTTP health check" +msgstr "HTTP health check" #: ../../configuration/interfaces/wireless.rst:137 msgid "HT (High Throughput) capabilities (802.11n)" -msgstr "HT (High Throughput) capabilities (802.11n)" +msgstr "Можливості HT (High Throughput) (802.11n)" #: ../../configuration/nat/nat44.rst:412 msgid "Hairpin NAT/NAT Reflection" -msgstr "Hairpin NAT/NAT Reflection" +msgstr "Шпилька NAT/NAT Reflection" -#: ../../configuration/service/dhcp-server.rst:573 +#: ../../configuration/service/dhcp-server.rst:632 msgid "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." -msgstr "Hand out prefixes of size `<length>` to clients in subnet `<prefix>` when they request for prefix delegation." +msgstr "Роздайте префікси розміру `<length> ` клієнтам у підмережі `<prefix> ` коли вони запитують делегування префікса." #: ../../configuration/loadbalancing/wan.rst:268 msgid "Handling and monitoring" -msgstr "Handling and monitoring" +msgstr "Обробка та моніторинг" #: ../../configuration/nat/nat44.rst:403 msgid "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." -msgstr "Having control over the matching of INVALID state traffic, e.g. the ability to selectively log, is an important troubleshooting tool for observing broken protocol behavior. For this reason, VyOS does not globally drop invalid state traffic, instead allowing the operator to make the determination on how the traffic is handled." +msgstr "Контроль над узгодженням трафіку стану INVALID, наприклад, можливість вибіркового журналювання, є важливим інструментом усунення несправностей для спостереження за поведінкою порушеного протоколу. З цієї причини VyOS глобально не видаляє трафік із недійсним станом, а натомість дозволяє оператору визначати, як обробляється трафік." -#: ../../configuration/highavailability/index.rst:372 +#: ../../configuration/highavailability/index.rst:382 msgid "Health-check" -msgstr "Health-check" +msgstr "Перевірка здоров'я" #: ../../configuration/highavailability/index.rst:308 msgid "Health check scripts" -msgstr "Health check scripts" +msgstr "Скрипти перевірки працездатності" #: ../../configuration/loadbalancing/wan.rst:124 msgid "Health checks" -msgstr "Health checks" +msgstr "Перевірки стану здоров'я" #: ../../configuration/nat/nat44.rst:626 msgid "Here's an extract of a simple 1-to-1 NAT configuration with one internal and one external interface:" -msgstr "Here's an extract of a simple 1-to-1 NAT configuration with one internal and one external interface:" +msgstr "Ось уривок простої конфігурації NAT 1-to-1 з одним внутрішнім і одним зовнішнім інтерфейсом:" #: ../../configuration/nat/nat44.rst:692 msgid "Here's one example of a network environment for an ASP. The ASP requests that all connections from this company should come from 172.29.41.89 - an address that is assigned by the ASP and not in use at the customer site." -msgstr "Here's one example of a network environment for an ASP. The ASP requests that all connections from this company should come from 172.29.41.89 - an address that is assigned by the ASP and not in use at the customer site." +msgstr "Ось один приклад мережевого середовища для ASP. ASP просить, щоб усі підключення від цієї компанії надходили з 172.29.41.89 – адреси, призначеної ASP і не використовується на сайті клієнта." #: ../../configuration/protocols/isis.rst:385 msgid "Here's the IP routes that are populated. Just the loopback:" -msgstr "Here's the IP routes that are populated. Just the loopback:" +msgstr "Ось заповнені маршрути IP. Просто петля:" #: ../../configuration/protocols/ospf.rst:862 msgid "Here's the neighbors up:" -msgstr "Here's the neighbors up:" +msgstr "Ось сусіди:" #: ../../configuration/protocols/ospf.rst:878 msgid "Here's the routes:" -msgstr "Here's the routes:" +msgstr "Ось маршрути:" #: ../../configuration/firewall/general-legacy.rst:759 msgid "Here are some examples for applying a rule-set to an interface" -msgstr "Here are some examples for applying a rule-set to an interface" +msgstr "Ось кілька прикладів застосування набору правил до інтерфейсу" #: ../../configuration/interfaces/tunnel.rst:146 msgid "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS router and a Linux host using systemd-networkd." -msgstr "Here is a second example of a dual-stack tunnel over IPv6 between a VyOS router and a Linux host using systemd-networkd." +msgstr "Ось другий приклад подвійного стекового тунелю через IPv6 між маршрутизатором VyOS і хостом Linux за допомогою systemd-networkd." #: ../../configuration/protocols/isis.rst:44 msgid "Here is an example :abbr:`NET (Network Entity Title)` value:" -msgstr "Here is an example :abbr:`NET (Network Entity Title)` value:" +msgstr "Ось приклад значення :abbr:`NET (Network Entity Title)`:" -#: ../../configuration/protocols/rpki.rst:167 +#: ../../configuration/protocols/rpki.rst:177 msgid "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." -msgstr "Here is an example route-map to apply to routes learned at import. In this filter we reject prefixes with the state `invalid`, and set a higher `local-preference` if the prefix is RPKI `valid` rather than merely `notfound`." +msgstr "Ось приклад карти маршруту для застосування до маршрутів, отриманих під час імпорту. У цьому фільтрі ми відхиляємо префікси зі станом `invalid` і встановлюємо вищий `local-preference`, якщо префікс RPKI `valid`, а не просто `notfound`." #: ../../configuration/firewall/groups.rst:150 msgid "Here is an example were multiple groups are created:" @@ -6037,7 +6798,7 @@ msgstr "Here is an example were multiple groups are created:" #: ../../configuration/protocols/segment-routing.rst:251 #: ../../configuration/protocols/segment-routing.rst:330 msgid "Here is the routing tables showing the MPLS segment routing label operations:" -msgstr "Here is the routing tables showing the MPLS segment routing label operations:" +msgstr "Ось таблиці маршрутизації, що показують операції міток маршрутизації сегмента MPLS:" #: ../../configuration/nat/nat44.rst:657 msgid "Here we provide two examples on how to apply NAT Load Balance." @@ -6045,58 +6806,63 @@ msgstr "Here we provide two examples on how to apply NAT Load Balance." #: ../../_include/interface-ip.txt:170 msgid "Hewlett-Packard call it Source-Port filtering or port-isolation" -msgstr "Hewlett-Packard call it Source-Port filtering or port-isolation" +msgstr "Компанія Hewlett-Packard називає це фільтрацією вихідного порту або ізоляцією порту" #: ../../configuration/trafficpolicy/index.rst:273 #: ../../configuration/trafficpolicy/index.rst:279 #: ../../configuration/trafficpolicy/index.rst:285 #: ../../configuration/trafficpolicy/index.rst:291 msgid "High" -msgstr "High" +msgstr "Високий" + +#: ../../configuration/service/dhcp-server.rst:170 +#: ../../configuration/service/dhcp-server.rst:425 +msgid "High Availability" +msgstr "High Availability" #: ../../configuration/highavailability/index.rst:6 msgid "High availability" -msgstr "High availability" +msgstr "Висока доступність" #: ../../configuration/interfaces/pppoe.rst:28 msgid "Home Users" -msgstr "Home Users" +msgstr "Домашні користувачі" #: ../../configuration/service/router-advert.rst:1 msgid "Hop count field of the outgoing RA packets" -msgstr "Hop count field of the outgoing RA packets" +msgstr "Поле підрахунку переходів вихідних пакетів RA" #: ../../configuration/system/host-name.rst:5 msgid "Host Information" -msgstr "Host Information" +msgstr "Інформація про хоста" #: ../../configuration/system/host-name.rst:10 msgid "Host name" -msgstr "Host name" +msgstr "Ім'я хоста" -#: ../../configuration/service/dhcp-server.rst:630 +#: ../../configuration/service/dhcp-server.rst:691 msgid "Host specific mapping shall be named ``client1``" -msgstr "Host specific mapping shall be named ``client1``" +msgstr "Спеціальне зіставлення хосту має називатися ``client1``" #: ../../configuration/system/host-name.rst:16 msgid "Hostname" -msgstr "Hostname" +msgstr "Ім'я хоста" #: ../../configuration/system/host-name.rst:47 msgid "How an IP address is assigned to an interface in :ref:`ethernet-interface`. This section shows how to statically map an IP address to a hostname for local (meaning on this VyOS instance) name resolution. This is the VyOS equivalent to `/etc/hosts` file entries." -msgstr "How an IP address is assigned to an interface in :ref:`ethernet-interface`. This section shows how to statically map an IP address to a hostname for local (meaning on this VyOS instance) name resolution. This is the VyOS equivalent to `/etc/hosts` file entries." +msgstr "Як IP-адреса призначається інтерфейсу в :ref:`ethernet-interface`. У цьому розділі показано, як статично зіставити IP-адресу з іменем хоста для локального (тобто в цьому екземплярі VyOS) розпізнавання імен. Це еквівалент VyOS до записів у файлі `/etc/hosts`." #: ../../configuration/service/eventhandler.rst:17 msgid "How to configure Event Handler" -msgstr "How to configure Event Handler" +msgstr "Як налаштувати обробник подій" #: ../../configuration/trafficpolicy/index.rst:25 msgid "How to make it work" -msgstr "How to make it work" +msgstr "Як змусити це працювати" -#: ../../configuration/vpn/ipsec.rst:263 +#: ../../configuration/vpn/ipsec.rst:267 msgid "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." -msgstr "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." +msgstr "Однак тепер вам потрібно змусити IPsec працювати з динамічною адресою з одного боку. Складна частина полягає в тому, що попередня спільна секретна автентифікація не працює з динамічною адресою, тому нам доведеться використовувати ключі RSA." #: ../../configuration/interfaces/openvpn.rst:80 msgid "However, since VyOS 1.4, it is possible to verify self-signed certificates using certificate fingerprints." @@ -6104,39 +6870,39 @@ msgstr "However, since VyOS 1.4, it is possible to verify self-signed certificat #: ../../configuration/interfaces/wireguard.rst:319 msgid "However, split-tunneling can be achieved by specifying the remote subnets. This ensures that only traffic destined for the remote site is sent over the tunnel. All other traffic is unaffected." -msgstr "However, split-tunneling can be achieved by specifying the remote subnets. This ensures that only traffic destined for the remote site is sent over the tunnel. All other traffic is unaffected." +msgstr "Однак розділеного тунелювання можна досягти, вказавши віддалені підмережі. Це гарантує, що через тунель надсилається лише трафік, призначений для віддаленого сайту. На весь інший трафік це не впливає." #: ../../configuration/interfaces/wwan.rst:317 msgid "Huawei ME909s-120 miniPCIe card (LTE)" -msgstr "Huawei ME909s-120 miniPCIe card (LTE)" +msgstr "Карта miniPCIe Huawei ME909s-120 (LTE)" #: ../../configuration/interfaces/wwan.rst:316 msgid "Huawei ME909u-521 miniPCIe card (LTE)" -msgstr "Huawei ME909u-521 miniPCIe card (LTE)" +msgstr "Карта miniPCIe Huawei ME909u-521 (LTE)" #: ../../configuration/vpn/dmvpn.rst:185 msgid "Hub" -msgstr "Hub" +msgstr "Хаб" #: ../../configuration/interfaces/macsec.rst:79 msgid "IEEE 802.1X/MACsec pre-shared key mode. This allows configuring MACsec with a pre-shared key using a :abbr:`CAK (MACsec connectivity association key)` and :abbr:`CKN (MACsec connectivity association name)` pair." -msgstr "IEEE 802.1X/MACsec pre-shared key mode. This allows configuring MACsec with a pre-shared key using a :abbr:`CAK (MACsec connectivity association key)` and :abbr:`CKN (MACsec connectivity association name)` pair." +msgstr "Режим попереднього спільного ключа IEEE 802.1X/MACsec. Це дозволяє налаштувати MACsec за допомогою попереднього спільного ключа за допомогою пари :abbr:`CAK (ключ асоціації підключення MACsec)` і :abbr:`CKN (назва асоціації підключення MACsec)`." #: ../../configuration/interfaces/macsec.rst:97 msgid "IEEE 802.1X/MACsec replay protection window. This determines a window in which replay is tolerated, to allow receipt of frames that have been misordered by the network." -msgstr "IEEE 802.1X/MACsec replay protection window. This determines a window in which replay is tolerated, to allow receipt of frames that have been misordered by the network." +msgstr "Вікно захисту від відтворення IEEE 802.1X/MACsec. Це визначає вікно, у якому допускається повторне відтворення, щоб дозволити отримання кадрів, неправильно впорядкованих мережею." #: ../../_include/interface-vlan-8021ad.txt:3 msgid "IEEE 802.1ad_ was an Ethernet networking standard informally known as QinQ as an amendment to IEEE standard 802.1q VLAN interfaces as described above. 802.1ad was incorporated into the base 802.1q_ standard in 2011. The technique is also known as provider bridging, Stacked VLANs, or simply QinQ or Q-in-Q. \"Q-in-Q\" can for supported devices apply to C-tag stacking on C-tag (Ethernet Type = 0x8100)." -msgstr "IEEE 802.1ad_ was an Ethernet networking standard informally known as QinQ as an amendment to IEEE standard 802.1q VLAN interfaces as described above. 802.1ad was incorporated into the base 802.1q_ standard in 2011. The technique is also known as provider bridging, Stacked VLANs, or simply QinQ or Q-in-Q. \"Q-in-Q\" can for supported devices apply to C-tag stacking on C-tag (Ethernet Type = 0x8100)." +msgstr "IEEE 802.1ad_ був мережевим стандартом Ethernet, неофіційно відомим як QinQ, як поправка до інтерфейсів VLAN стандарту IEEE 802.1q, як описано вище. 802.1ad було включено до базового стандарту 802.1q_ у 2011 році. Техніка також відома як об’єднання провайдерів, Stacked VLAN або просто QinQ або Q-in-Q. «Q-in-Q» для підтримуваних пристроїв може застосовуватися до C-тегу, що стекується на C-тегу (Тип Ethernet = 0x8100)." #: ../../_include/interface-vlan-8021q.txt:1 msgid "IEEE 802.1q_, often referred to as Dot1q, is the networking standard that supports virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard defines a system of VLAN tagging for Ethernet frames and the accompanying procedures to be used by bridges and switches in handling such frames. The standard also contains provisions for a quality-of-service prioritization scheme commonly known as IEEE 802.1p and defines the Generic Attribute Registration Protocol." -msgstr "IEEE 802.1q_, often referred to as Dot1q, is the networking standard that supports virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The standard defines a system of VLAN tagging for Ethernet frames and the accompanying procedures to be used by bridges and switches in handling such frames. The standard also contains provisions for a quality-of-service prioritization scheme commonly known as IEEE 802.1p and defines the Generic Attribute Registration Protocol." +msgstr "IEEE 802.1q_, який часто називають Dot1q, є мережевим стандартом, який підтримує віртуальні локальні мережі (VLAN) у мережі Ethernet IEEE 802.3. Стандарт визначає систему тегування VLAN для кадрів Ethernet і супутні процедури, які використовуватимуться мостами та комутаторами при обробці таких кадрів. Стандарт також містить положення щодо схеми пріоритезації якості обслуговування, широко відомої як IEEE 802.1p, і визначає загальний протокол реєстрації атрибутів." #: ../../configuration/nat/nat44.rst:55 msgid "IETF published :rfc:`6598`, detailing a shared address space for use in ISP CGN deployments that can handle the same network prefixes occurring both on inbound and outbound interfaces. ARIN returned address space to the :abbr:`IANA (Internet Assigned Numbers Authority)` for this allocation." -msgstr "IETF published :rfc:`6598`, detailing a shared address space for use in ISP CGN deployments that can handle the same network prefixes occurring both on inbound and outbound interfaces. ARIN returned address space to the :abbr:`IANA (Internet Assigned Numbers Authority)` for this allocation." +msgstr "IETF опублікував :rfc:`6598`, детально описуючи спільний адресний простір для використання в розгортаннях ISP CGN, які можуть обробляти однакові мережеві префікси, що виникають як на вхідних, так і на вихідних інтерфейсах. ARIN повернув адресний простір до :abbr:`IANA (Internet Assigned Numbers Authority)` для цього розподілу." #: ../../configuration/protocols/pim.rst:176 msgid "IGMP - Internet Group Management Protocol)" @@ -6144,28 +6910,32 @@ msgstr "IGMP - Internet Group Management Protocol)" #: ../../configuration/protocols/igmp-proxy.rst:7 msgid "IGMP Proxy" -msgstr "IGMP Proxy" +msgstr "Проксі IGMP" #: ../../configuration/nat/nat44.rst:748 msgid "IKE Phase:" -msgstr "IKE Phase:" +msgstr "Фаза IKE:" #: ../../configuration/vpn/ipsec.rst:34 msgid "IKE (Internet Key Exchange) Attributes" -msgstr "IKE (Internet Key Exchange) Attributes" +msgstr "Атрибути IKE (Internet Key Exchange)." #: ../../configuration/vpn/ipsec.rst:35 msgid "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" -msgstr "IKE performs mutual authentication between two parties and establishes an IKE security association (SA) that includes shared secret information that can be used to efficiently establish SAs for Encapsulating Security Payload (ESP) or Authentication Header (AH) and a set of cryptographic algorithms to be used by the SAs to protect the traffic that they carry. https://datatracker.ietf.org/doc/html/rfc5996" +msgstr "IKE виконує взаємну автентифікацію між двома сторонами та встановлює асоціацію безпеки IKE (SA), яка включає спільну секретну інформацію, яку можна використовувати для ефективного встановлення SA для інкапсуляції корисного навантаження безпеки (ESP) або заголовка автентифікації (AH) і набору криптографічних алгоритмів, які потрібно використовуються SA для захисту трафіку, який вони передають. https://datatracker.ietf.org/doc/html/rfc5996" -#: ../../configuration/vpn/site2site_ipsec.rst:160 +#: ../../configuration/vpn/site2site_ipsec.rst:163 msgid "IKEv1" msgstr "IKEv1" -#: ../../configuration/vpn/site2site_ipsec.rst:271 +#: ../../configuration/vpn/site2site_ipsec.rst:274 msgid "IKEv2" msgstr "IKEv2" +#: ../../configuration/vpn/ipsec.rst:372 +msgid "IKEv2 IPSec road-warriors remote-access VPN" +msgstr "IKEv2 IPSec road-warriors remote-access VPN" + #: ../../configuration/system/ip.rst:3 msgid "IP" msgstr "IP" @@ -6188,210 +6958,221 @@ msgstr "IPSec:" #: ../../configuration/nat/nat44.rst:744 msgid "IPSec IKE and ESP" -msgstr "IPSec IKE and ESP" +msgstr "IPSec IKE та ESP" #: ../../configuration/nat/nat44.rst:711 msgid "IPSec IKE and ESP Groups;" -msgstr "IPSec IKE and ESP Groups;" +msgstr "Групи IPSec IKE та ESP;" #: ../../configuration/vpn/remoteaccess_ipsec.rst:4 msgid "IPSec IKEv2 Remote Access VPN" msgstr "IPSec IKEv2 Remote Access VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN" msgstr "IPSec IKEv2 site2site VPN" -#: ../../configuration/vpn/site2site_ipsec.rst:285 +#: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" -msgstr "IPSec IKEv2 site2site VPN (source ./draw.io/vpn_s2s_ikev2.drawio)" +msgstr "IPSec IKEv2 site2site VPN (джерело ./draw.io/vpn_s2s_ikev2.drawio)" #: ../../configuration/nat/nat44.rst:780 msgid "IPSec VPN Tunnels" -msgstr "IPSec VPN Tunnels" +msgstr "Тунелі IPSec VPN" #: ../../configuration/nat/nat44.rst:712 msgid "IPSec VPN tunnels." -msgstr "IPSec VPN tunnels." +msgstr "Тунелі IPSec VPN." #: ../../configuration/system/host-name.rst:12 msgid "IP address" -msgstr "IP address" +msgstr "IP-адреса" -#: ../../configuration/service/dhcp-server.rst:202 +#: ../../configuration/service/dhcp-server.rst:258 msgid "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" -msgstr "IP address ``192.168.1.100`` shall be statically mapped to client named ``client1``" +msgstr "IP-адреса ``192.168.1.100`` має бути статично зіставлена з клієнтом під назвою ``client1``" #: ../../configuration/interfaces/wireless.rst:349 #: ../../configuration/interfaces/wireless.rst:549 msgid "IP address ``192.168.2.1/24``" -msgstr "IP address ``192.168.2.1/24``" +msgstr "IP-адреса ``192.168.2.1/24``" -#: ../../configuration/service/dhcp-server.rst:286 +#: ../../configuration/service/dhcp-server.rst:342 msgid "IP address for DHCP server identifier" -msgstr "IP address for DHCP server identifier" +msgstr "IP-адреса для ідентифікатора DHCP-сервера" -#: ../../configuration/service/dhcp-server.rst:276 +#: ../../configuration/service/dhcp-server.rst:332 msgid "IP address of NTP server" -msgstr "IP address of NTP server" +msgstr "IP-адреса NTP-сервера" -#: ../../configuration/service/dhcp-server.rst:316 +#: ../../configuration/service/dhcp-server.rst:372 msgid "IP address of POP3 server" -msgstr "IP address of POP3 server" +msgstr "IP-адреса сервера POP3" -#: ../../configuration/service/dhcp-server.rst:311 +#: ../../configuration/service/dhcp-server.rst:367 msgid "IP address of SMTP server" -msgstr "IP address of SMTP server" +msgstr "IP-адреса SMTP-сервера" #: ../../configuration/policy/route-map.rst:65 msgid "IP address of route to match, based on access-list." -msgstr "IP address of route to match, based on access-list." +msgstr "IP-адреса маршруту для відповідності на основі списку доступу." #: ../../configuration/policy/route-map.rst:70 msgid "IP address of route to match, based on prefix-list." -msgstr "IP address of route to match, based on prefix-list." +msgstr "IP-адреса маршруту для відповідності на основі списку префіксів." #: ../../configuration/policy/route-map.rst:75 msgid "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." -msgstr "IP address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." +msgstr "IP-адреса маршруту для відповідності на основі вказаної довжини префікса. Зауважте, що це можна використовувати лише для маршрутів ядра. Не застосовуйте до маршрутів протоколи динамічної маршрутизації (наприклад, BGP, RIP, OSFP), оскільки це може призвести до неочікуваних результатів." -#: ../../configuration/service/dhcp-server.rst:346 +#: ../../configuration/service/dhcp-server.rst:402 msgid "IP address to exclude from DHCP lease range" -msgstr "IP address to exclude from DHCP lease range" +msgstr "IP-адресу, яку потрібно виключити з діапазону оренди DHCP" #: ../../configuration/service/conntrack-sync.rst:67 msgid "IP addresses or networks for which local conntrack entries will not be synced" -msgstr "IP addresses or networks for which local conntrack entries will not be synced" +msgstr "IP-адреси або мережі, для яких локальні записи conntrack не синхронізуються" #: ../../configuration/service/lldp.rst:29 msgid "IP management address" -msgstr "IP management address" +msgstr "IP-адреса керування" #: ../../configuration/nat/nat44.rst:17 msgid "IP masquerading is a technique that hides an entire IP address space, usually consisting of private IP addresses, behind a single IP address in another, usually public address space. The hidden addresses are changed into a single (public) IP address as the source address of the outgoing IP packets so they appear as originating not from the hidden host but from the routing device itself. Because of the popularity of this technique to conserve IPv4 address space, the term NAT has become virtually synonymous with IP masquerading." -msgstr "IP masquerading is a technique that hides an entire IP address space, usually consisting of private IP addresses, behind a single IP address in another, usually public address space. The hidden addresses are changed into a single (public) IP address as the source address of the outgoing IP packets so they appear as originating not from the hidden host but from the routing device itself. Because of the popularity of this technique to conserve IPv4 address space, the term NAT has become virtually synonymous with IP masquerading." +msgstr "IP-маскарадування — це техніка, яка приховує весь простір IP-адрес, який зазвичай складається з приватних IP-адрес, за однією IP-адресою в іншому, як правило, публічному просторі адрес. Приховані адреси змінюються на одну (загальнодоступну) IP-адресу як адресу джерела вихідних IP-пакетів, тому вони виглядають як такі, що походять не від прихованого хоста, а від самого пристрою маршрутизації. Через популярність цієї методики збереження адресного простору IPv4 термін NAT став фактично синонімом маскування IP." #: ../../configuration/policy/route-map.rst:83 msgid "IP next-hop of route to match, based on access-list." -msgstr "IP next-hop of route to match, based on access-list." +msgstr "IP-адреса наступного стрибка маршруту для відповідності на основі списку доступу." #: ../../configuration/policy/route-map.rst:88 msgid "IP next-hop of route to match, based on ip address." -msgstr "IP next-hop of route to match, based on ip address." +msgstr "Наступний стрибок IP-адреси маршруту для відповідності на основі IP-адреси." #: ../../configuration/policy/route-map.rst:98 msgid "IP next-hop of route to match, based on prefix-list." -msgstr "IP next-hop of route to match, based on prefix-list." +msgstr "Наступний стрибок IP-адреси маршруту для відповідності на основі списку префіксів." #: ../../configuration/policy/route-map.rst:93 msgid "IP next-hop of route to match, based on prefix length." -msgstr "IP next-hop of route to match, based on prefix length." +msgstr "IP-адреса наступного стрибка маршруту для відповідності на основі довжини префікса." #: ../../configuration/policy/route-map.rst:103 msgid "IP next-hop of route to match, based on type." -msgstr "IP next-hop of route to match, based on type." +msgstr "IP-адреса наступного стрибка маршруту для відповідності на основі типу." #: ../../configuration/trafficpolicy/index.rst:784 msgid "IP precedence as defined in :rfc:`791`:" -msgstr "IP precedence as defined in :rfc:`791`:" +msgstr "Пріоритет IP, як визначено в :rfc:`791`:" -#: ../../configuration/vpn/l2tp.rst:33 +#: ../../configuration/vpn/l2tp.rst:83 msgid "IP protocol number 50 (ESP)" -msgstr "IP protocol number 50 (ESP)" +msgstr "IP-протокол номер 50 (ESP)" #: ../../configuration/policy/route-map.rst:108 msgid "IP route source of route to match, based on access-list." -msgstr "IP route source of route to match, based on access-list." +msgstr "Джерело IP-маршруту для відповідного маршруту на основі списку доступу." #: ../../configuration/policy/route-map.rst:113 msgid "IP route source of route to match, based on prefix-list." -msgstr "IP route source of route to match, based on prefix-list." +msgstr "Джерело IP-маршруту для відповідного маршруту на основі списку префіксів." -#: ../../configuration/service/ipoe-server.rst:7 +#: ../../configuration/service/ipoe-server.rst:5 msgid "IPoE Server" -msgstr "IPoE Server" +msgstr "Сервер IPoE" -#: ../../configuration/service/ipoe-server.rst:30 +#: ../../configuration/service/ipoe-server.rst:29 msgid "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." -msgstr "IPoE can be configure on different interfaces, it will depend on each specific situation which interface will provide IPoE to clients. The clients mac address and the incoming interface is being used as control parameter, to authenticate a client." +msgstr "IPoE можна налаштувати на різних інтерфейсах, це залежатиме від кожної конкретної ситуації, який інтерфейс надаватиме IPoE клієнтам. Mac-адреса клієнта та вхідний інтерфейс використовуються як контрольний параметр для автентифікації клієнта." -#: ../../configuration/service/ipoe-server.rst:13 +#: ../../configuration/service/ipoe-server.rst:11 msgid "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." -msgstr "IPoE is a method of delivering an IP payload over an Ethernet-based access network or an access network using bridged Ethernet over Asynchronous Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation." +msgstr "IPoE — це спосіб доставки корисного IP-навантаження через мережу доступу на основі Ethernet або мережу доступу за допомогою мосту Ethernet через режим асинхронної передачі (ATM) без використання PPPoE. Він безпосередньо інкапсулює IP-дейтаграми в кадри Ethernet, використовуючи стандартну інкапсуляцію :rfc:`894`." -#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:153 msgid "IPoE server will listen on interfaces eth1.50 and eth1.51" -msgstr "IPoE server will listen on interfaces eth1.50 and eth1.51" +msgstr "Сервер IPoE слухатиме інтерфейси eth1.50 і eth1.51" #: ../../configuration/vpn/ipsec.rst:5 msgid "IPsec" msgstr "IPsec" -#: ../../configuration/vpn/ipsec.rst:172 +#: ../../configuration/vpn/ipsec.rst:176 msgid "IPsec policy matching GRE" -msgstr "IPsec policy matching GRE" +msgstr "Політика IPsec відповідає GRE" -#: ../../configuration/service/pppoe-server.rst:346 +#: ../../configuration/service/pppoe-server.rst:604 msgid "IPv4" msgstr "IPv4" #: ../../configuration/interfaces/vxlan.rst:106 msgid "IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, the remote IPv4/IPv6 address can set directly." -msgstr "IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, the remote IPv4/IPv6 address can set directly." +msgstr "Віддалена адреса IPv4/IPv6 тунелю VXLAN. Як альтернатива груповій розсилці можна встановити віддалену адресу IPv4/IPv6 безпосередньо." #: ../../configuration/firewall/ipv4.rst:7 msgid "IPv4 Firewall Configuration" msgstr "IPv4 Firewall Configuration" -#: ../../configuration/service/dhcp-server.rst:291 +#: ../../configuration/service/dhcp-server.rst:347 msgid "IPv4 address of next bootstrap server" -msgstr "IPv4 address of next bootstrap server" +msgstr "IPv4-адреса наступного початкового сервера" -#: ../../configuration/service/dhcp-server.rst:251 +#: ../../configuration/service/dhcp-server.rst:307 msgid "IPv4 address of router on the client's subnet" -msgstr "IPv4 address of router on the client's subnet" +msgstr "IPv4-адреса маршрутизатора в підмережі клієнта" #: ../../configuration/system/flow-accounting.rst:111 msgid "IPv4 or IPv6 source address of NetFlow packets" -msgstr "IPv4 or IPv6 source address of NetFlow packets" +msgstr "IPv4 або IPv6 адреса джерела пакетів NetFlow" -#: ../../configuration/protocols/bgp.rst:1099 +#: ../../configuration/protocols/bgp.rst:1121 msgid "IPv4 peering" -msgstr "IPv4 peering" +msgstr "Піринг IPv4" #: ../../configuration/service/dhcp-relay.rst:16 msgid "IPv4 relay" -msgstr "IPv4 relay" +msgstr "Реле IPv4" #: ../../configuration/policy/route.rst:5 msgid "IPv4 route and IPv6 route policies are defined in this section. These route policies can then be associated to interfaces." -msgstr "IPv4 route and IPv6 route policies are defined in this section. These route policies can then be associated to interfaces." +msgstr "У цьому розділі визначено політику маршрутизації IPv4 та IPv6. Потім ці політики маршрутів можна асоціювати з інтерфейсами." #: ../../configuration/protocols/babel.rst:161 msgid "IPv4 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospf, rip, static." -msgstr "IPv4 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospf, rip, static." +msgstr "Джерело маршруту IPv4: bgp, підключено, eigrp, isis, kernel, nhrp, ospf, rip, static." #: ../../configuration/service/dhcp-server.rst:11 msgid "IPv4 server" -msgstr "IPv4 server" +msgstr "Сервер IPv4" #: ../../configuration/interfaces/pppoe.rst:244 -#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/service/ipoe-server.rst:256 +#: ../../configuration/service/pppoe-server.rst:341 #: ../../configuration/system/ipv6.rst:3 +#: ../../configuration/vpn/l2tp.rst:286 +#: ../../configuration/vpn/pptp.rst:210 +#: ../../configuration/vpn/sstp.rst:244 msgid "IPv6" msgstr "IPv6" #: ../../configuration/policy/access-list.rst:44 msgid "IPv6 Access List" -msgstr "IPv6 Access List" +msgstr "Список доступу IPv6" + +#: ../../configuration/service/pppoe-server.rst:381 +#: ../../configuration/vpn/l2tp.rst:325 +#: ../../configuration/vpn/pptp.rst:249 +#: ../../configuration/vpn/sstp.rst:283 +msgid "IPv6 Advanced Options" +msgstr "IPv6 Advanced Options" #: ../../configuration/interfaces/pppoe.rst:379 msgid "IPv6 DHCPv6-PD Example" -msgstr "IPv6 DHCPv6-PD Example" +msgstr "Приклад IPv6 DHCPv6-PD" #: ../../configuration/service/ipoe-server.rst:69 msgid "IPv6 DNS addresses are optional." -msgstr "IPv6 DNS addresses are optional." +msgstr "DNS-адреси IPv6 необов’язкові." #: ../../configuration/firewall/ipv6.rst:7 msgid "IPv6 Firewall Configuration" @@ -6403,99 +7184,107 @@ msgstr "IPv6 Multicast" #: ../../configuration/service/pppoe-server.rst:282 msgid "IPv6 Prefix Delegation" -msgstr "IPv6 Prefix Delegation" +msgstr "Делегування префіксу IPv6" #: ../../configuration/policy/prefix-list.rst:50 msgid "IPv6 Prefix Lists" -msgstr "IPv6 Prefix Lists" +msgstr "Списки префіксів IPv6" #: ../../configuration/service/ipoe-server.rst:63 msgid "IPv6 SLAAC and IA-PD" -msgstr "IPv6 SLAAC and IA-PD" +msgstr "IPv6 SLAAC і IA-PD" #: ../../configuration/trafficpolicy/index.rst:212 msgid "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" -msgstr "IPv6 TCP filters will only match IPv6 packets with no header extension, see https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" +msgstr "Фільтри IPv6 TCP відповідатимуть лише пакетам IPv6 без розширення заголовка, див. https://en.wikipedia.org/wiki/IPv6_packet#Extension_headers" -#: ../../configuration/service/dhcp-server.rst:628 +#: ../../configuration/service/dhcp-server.rst:689 msgid "IPv6 address ``2001:db8::101`` shall be statically mapped" -msgstr "IPv6 address ``2001:db8::101`` shall be statically mapped" +msgstr "Адреса IPv6 ``2001:db8::101`` повинна бути зіставлена статично" #: ../../configuration/policy/route-map.rst:118 msgid "IPv6 address of route to match, based on IPv6 access-list." -msgstr "IPv6 address of route to match, based on IPv6 access-list." +msgstr "Адреса IPv6 маршруту для відповідності на основі списку доступу IPv6." #: ../../configuration/policy/route-map.rst:123 msgid "IPv6 address of route to match, based on IPv6 prefix-list." -msgstr "IPv6 address of route to match, based on IPv6 prefix-list." +msgstr "Адреса IPv6 маршруту для відповідності на основі списку префіксів IPv6." #: ../../configuration/policy/route-map.rst:128 msgid "IPv6 address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." -msgstr "IPv6 address of route to match, based on specified prefix-length. Note that this can be used for kernel routes only. Do not apply to the routes of dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to unexpected results.." +msgstr "IPv6-адреса маршруту для відповідності на основі вказаної довжини префікса. Зауважте, що це можна використовувати лише для маршрутів ядра. Не застосовуйте до маршрутів протоколи динамічної маршрутизації (наприклад, BGP, RIP, OSFP), оскільки це може призвести до неочікуваних результатів." + +#: ../../configuration/service/pppoe-server.rst:270 +msgid "IPv6 client's prefix" +msgstr "IPv6 client's prefix" #: ../../configuration/service/pppoe-server.rst:270 msgid "IPv6 client's prefix assignment" -msgstr "IPv6 client's prefix assignment" +msgstr "Призначення префікса клієнта IPv6" + +#: ../../configuration/service/pppoe-server.rst:295 +msgid "IPv6 default client's pool assignment" +msgstr "IPv6 default client's pool assignment" -#: ../../configuration/protocols/bgp.rst:1144 +#: ../../configuration/protocols/bgp.rst:1166 msgid "IPv6 peering" -msgstr "IPv6 peering" +msgstr "Піринг IPv6" #: ../../configuration/policy/prefix-list.rst:72 msgid "IPv6 prefix." -msgstr "IPv6 prefix." +msgstr "Префікс IPv6." -#: ../../configuration/service/dhcp-server.rst:629 +#: ../../configuration/service/dhcp-server.rst:690 msgid "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" -msgstr "IPv6 prefix ``2001:db8:0:101::/64`` shall be statically mapped" +msgstr "Префікс IPv6 ``2001:db8:0:101::/64`` повинен бути зіставлений статично" #: ../../configuration/service/dhcp-relay.rst:132 msgid "IPv6 relay" -msgstr "IPv6 relay" +msgstr "Реле IPv6" #: ../../configuration/protocols/babel.rst:163 msgid "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." -msgstr "IPv6 route source: bgp, connected, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." +msgstr "Джерело маршруту IPv6: bgp, підключено, eigrp, isis, kernel, nhrp, ospfv3, ripng, static." -#: ../../configuration/service/dhcp-server.rst:502 +#: ../../configuration/service/dhcp-server.rst:561 msgid "IPv6 server" -msgstr "IPv6 server" +msgstr "Сервер IPv6" #: ../../configuration/highavailability/index.rst:51 msgid "IPv6 support" -msgstr "IPv6 support" +msgstr "Підтримка IPv6" #: ../../configuration/protocols/isis.rst:7 msgid "IS-IS" -msgstr "IS-IS" +msgstr "Є-Є" #: ../../configuration/protocols/isis.rst:75 msgid "IS-IS Global Configuration" -msgstr "IS-IS Global Configuration" +msgstr "Глобальна конфігурація IS-IS" #: ../../configuration/protocols/segment-routing.rst:35 msgid "IS-IS SR Configuration" -msgstr "IS-IS SR Configuration" +msgstr "Конфігурація IS-IS SR" -#: ../../configuration/service/dhcp-server.rst:233 +#: ../../configuration/service/dhcp-server.rst:289 msgid "ISC-DHCP Option name" -msgstr "ISC-DHCP Option name" +msgstr "Назва параметра ISC-DHCP" #: ../../configuration/vpn/openconnect.rst:233 msgid "Identity Based Configuration" -msgstr "Identity Based Configuration" +msgstr "Конфігурація на основі ідентифікації" #: ../../configuration/trafficpolicy/index.rst:903 msgid "If **max-threshold** is set but **min-threshold is not, then **min-threshold** is scaled to 50% of **max-threshold**." -msgstr "If **max-threshold** is set but **min-threshold is not, then **min-threshold** is scaled to 50% of **max-threshold**." +msgstr "Якщо **max-threshold** установлено, але **min-threshold ні, тоді **min-threshold** масштабується до 50% від **max-threshold**." #: ../../configuration/interfaces/bonding.rst:253 msgid "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." -msgstr "If ARP monitoring is used in an etherchannel compatible mode (modes round-robin and xor-hash), the switch should be configured in a mode that evenly distributes packets across all links. If the switch is configured to distribute the packets in an XOR fashion, all replies from the ARP targets will be received on the same link which could cause the other team members to fail." +msgstr "Якщо ARP-моніторинг використовується в режимі, сумісному з etherchannel (режими циклічного перегляду та xor-хешування), комутатор має бути налаштований у режимі, який рівномірно розподіляє пакети по всіх посиланнях. Якщо комутатор налаштовано на розповсюдження пакетів у режимі XOR, усі відповіді від цілей ARP будуть отримані за тим самим посиланням, що може призвести до збою інших членів команди." -#: ../../configuration/pki/index.rst:249 +#: ../../configuration/pki/index.rst:251 msgid "If CA is present, this certificate will be included in generated CRLs" -msgstr "If CA is present, this certificate will be included in generated CRLs" +msgstr "Якщо CA присутній, цей сертифікат буде включено до створених CRL" #: ../../_include/interface-per-client-thread.txt:8 msgid "If CLI option is not specified, this feature is disabled." @@ -6511,28 +7300,32 @@ msgstr "If PIM is using ECMP and an interface goes down, cause PIM to rebalance #: ../../configuration/protocols/bgp.rst:225 msgid "If :cfgcmd:`strict` is set the BGP session won’t become established until the BGP neighbor sets local Role on its side. This configuration parameter is defined in RFC :rfc:`9234` and is used to enforce the corresponding configuration at your counter-parts side." -msgstr "If :cfgcmd:`strict` is set the BGP session won’t become established until the BGP neighbor sets local Role on its side. This configuration parameter is defined in RFC :rfc:`9234` and is used to enforce the corresponding configuration at your counter-parts side." +msgstr "Якщо встановлено :cfgcmd:`strict`, сеанс BGP не буде встановлено, доки сусід BGP не встановить локальну роль на своїй стороні. Цей параметр конфігурації визначено в RFC :rfc:`9234` і використовується для забезпечення відповідної конфігурації на стороні контрагентів." #: ../../configuration/service/console-server.rst:115 msgid "If ``alias`` is set, it can be used instead of the device when connecting." -msgstr "If ``alias`` is set, it can be used instead of the device when connecting." +msgstr "Якщо встановлено ``alias``, його можна використовувати замість пристрою під час підключення." -#: ../../configuration/vpn/l2tp.rst:29 +#: ../../configuration/policy/route-map.rst:204 +msgid "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." +msgstr "If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP path's NLRI." + +#: ../../configuration/vpn/l2tp.rst:79 msgid "If a local firewall policy is in place on your external interface you will need to allow the ports below:" -msgstr "If a local firewall policy is in place on your external interface you will need to allow the ports below:" +msgstr "Якщо на вашому зовнішньому інтерфейсі використовується політика локального брандмауера, вам потрібно буде дозволити наведені нижче порти:" #: ../../configuration/container/index.rst:22 msgid "If a registry is not specified, Docker.io will be used as the container registry unless an alternative registry is specified using **set container registry <name>** or the registry is included in the image name" -msgstr "If a registry is not specified, Docker.io will be used as the container registry unless an alternative registry is specified using **set container registry <name>** or the registry is included in the image name" +msgstr "Якщо реєстр не вказано, Docker.io використовуватиметься як реєстр контейнера, якщо альтернативний реєстр не вказано за допомогою **set container registry<name> ** або реєстр включено в назву зображення" #: ../../configuration/service/dhcp-server.rst:68 #: ../../configuration/service/dhcp-server.rst:157 msgid "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." -msgstr "If a response is heard, the lease is abandoned, and the server does not respond to the client. The lease will remain abandoned for a minimum of abandon-lease-time seconds (defaults to 24 hours)." +msgstr "Якщо почути відповідь, оренда припиняється, і сервер не відповідає клієнту. Оренда залишатиметься припиненою протягом мінімум секунд часу відмови від оренди (за замовчуванням 24 години)." -#: ../../configuration/protocols/bgp.rst:771 +#: ../../configuration/protocols/bgp.rst:793 msgid "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." -msgstr "If a route has an ORIGINATOR_ID attribute because it has been reflected, that ORIGINATOR_ID will be used. Otherwise, the router-ID of the peer the route was received from will be used." +msgstr "Якщо маршрут має атрибут ORIGINATOR_ID, оскільки він був відображений, використовуватиметься цей ORIGINATOR_ID. В іншому випадку буде використано ідентифікатор роутера однорангового вузла, від якого було отримано маршрут." #: ../../configuration/firewall/bridge.rst:67 #: ../../configuration/firewall/ipv4.rst:83 @@ -6542,15 +7335,15 @@ msgstr "If a rule is defined, then an action must be defined for it. This tells #: ../../configuration/service/dhcp-server.rst:161 msgid "If a there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." -msgstr "If a there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." +msgstr "Якщо немає вільних адрес, але є залишені IP-адреси, DHCP-сервер спробує відновити залишену IP-адресу незалежно від значення abandon-lease-time." #: ../../configuration/nat/nat44.rst:43 msgid "If an ISP deploys a :abbr:`CGN (Carrier-grade NAT)`, and uses :rfc:`1918` address space to number customer gateways, the risk of address collision, and therefore routing failures, arises when the customer network already uses an :rfc:`1918` address space." -msgstr "If an ISP deploys a :abbr:`CGN (Carrier-grade NAT)`, and uses :rfc:`1918` address space to number customer gateways, the risk of address collision, and therefore routing failures, arises when the customer network already uses an :rfc:`1918` address space." +msgstr "Якщо провайдер розгортає :abbr:`CGN (Carrier-grade NAT)` і використовує :rfc:`1918` адресний простір для нумерації клієнтських шлюзів, ризик конфлікту адрес і, отже, помилок маршрутизації виникає, коли мережа клієнта вже використовує адресний простір :rfc:`1918`." #: ../../configuration/interfaces/bridge.rst:76 msgid "If an another bridge in the spanning tree does not send out a hello packet for a long period of time, it is assumed to be dead." -msgstr "If an another bridge in the spanning tree does not send out a hello packet for a long period of time, it is assumed to be dead." +msgstr "Якщо інший міст у зв’язуючому дереві не надсилає пакет привітання протягом тривалого періоду часу, вважається, що він не працює." #: ../../configuration/protocols/pim.rst:106 msgid "If choosing a value below 31 seconds be aware that some hardware platforms cannot see data flowing in better than 30 second chunks." @@ -6558,27 +7351,27 @@ msgstr "If choosing a value below 31 seconds be aware that some hardware platfor #: ../../_include/interface-ip.txt:72 msgid "If configured, incoming IP directed broadcast packets on this interface will be forwarded." -msgstr "If configured, incoming IP directed broadcast packets on this interface will be forwarded." +msgstr "Якщо налаштовано, вхідні широкомовні пакети, спрямовані за IP, на цьому інтерфейсі пересилатимуться." #: ../../_include/interface-ip.txt:124 msgid "If configured, reply only if the target IP address is local address configured on the incoming interface." -msgstr "If configured, reply only if the target IP address is local address configured on the incoming interface." +msgstr "Якщо налаштовано, відповідайте, лише якщо цільова IP-адреса є локальною адресою, налаштованою на вхідному інтерфейсі." #: ../../_include/interface-ip.txt:106 msgid "If configured, try to avoid local addresses that are not in the target's subnet for this interface. This mode is useful when target hosts reachable via this interface require the source IP address in ARP requests to be part of their logical network configured on the receiving interface. When we generate the request we will check all our subnets that include the target IP and will preserve the source address if it is from such subnet. If there is no such subnet we select source address according to the rules for level 2." -msgstr "If configured, try to avoid local addresses that are not in the target's subnet for this interface. This mode is useful when target hosts reachable via this interface require the source IP address in ARP requests to be part of their logical network configured on the receiving interface. When we generate the request we will check all our subnets that include the target IP and will preserve the source address if it is from such subnet. If there is no such subnet we select source address according to the rules for level 2." +msgstr "Якщо налаштовано, намагайтеся уникати локальних адрес, які не входять до цільової підмережі для цього інтерфейсу. Цей режим корисний, коли цільові хости, доступні через цей інтерфейс, вимагають, щоб IP-адреса джерела в запитах ARP була частиною їхньої логічної мережі, налаштованої на інтерфейсі прийому. Коли ми генеруємо запит, ми перевіряємо всі наші підмережі, які містять цільову IP-адресу, і зберігаємо вихідну адресу, якщо вона походить із такої підмережі. Якщо такої підмережі немає, вибираємо вихідну адресу за правилами для рівня 2." #: ../../configuration/interfaces/vxlan.rst:30 msgid "If configuring VXLAN in a VyOS virtual machine, ensure that MAC spoofing (Hyper-V) or Forged Transmits (ESX) are permitted, otherwise forwarded frames may be blocked by the hypervisor." -msgstr "If configuring VXLAN in a VyOS virtual machine, ensure that MAC spoofing (Hyper-V) or Forged Transmits (ESX) are permitted, otherwise forwarded frames may be blocked by the hypervisor." +msgstr "Якщо налаштовуєте VXLAN у віртуальній машині VyOS, переконайтеся, що підробка MAC-адрес (Hyper-V) або Forged Transmits (ESX) дозволені, інакше переслані кадри можуть бути заблоковані гіпервізором." #: ../../configuration/nat/nat44.rst:564 msgid "If forwarding traffic to a different port than it is arriving on, you may also configure the translation port using `set nat destination rule [n] translation port`." -msgstr "If forwarding traffic to a different port than it is arriving on, you may also configure the translation port using `set nat destination rule [n] translation port`." +msgstr "Якщо трафік пересилається на порт, відмінний від того, на який він надходить, ви також можете налаштувати порт перекладу за допомогою `set nat destination rule [n] translation port`." #: ../../configuration/trafficpolicy/index.rst:1031 msgid "If guaranteed traffic for a class is met and there is room for more traffic, the ceiling parameter can be used to set how much more bandwidth could be used. If guaranteed traffic is met and there are several classes willing to use their ceilings, the priority parameter will establish the order in which that additional traffic will be allocated. Priority can be any number from 0 to 7. The lower the number, the higher the priority." -msgstr "If guaranteed traffic for a class is met and there is room for more traffic, the ceiling parameter can be used to set how much more bandwidth could be used. If guaranteed traffic is met and there are several classes willing to use their ceilings, the priority parameter will establish the order in which that additional traffic will be allocated. Priority can be any number from 0 to 7. The lower the number, the higher the priority." +msgstr "Якщо гарантований трафік для класу досягнуто та є місце для додаткового трафіку, можна використовувати параметр стелі, щоб установити, наскільки більше пропускної здатності можна використовувати. Якщо гарантований трафік задовольняється і є кілька класів, які бажають використовувати свої стелі, параметр пріоритету встановить порядок, у якому буде розподілятися цей додатковий трафік. Пріоритет може бути будь-яким числом від 0 до 7. Чим менше число, тим вищий пріоритет." #: ../../configuration/firewall/index.rst:82 msgid "If interface were the packet was received is part of a bridge, then packet is processed at the **Bridge Layer**, which contains a ver basic setup where for bridge filtering:" @@ -6590,43 +7383,43 @@ msgstr "If interface were the packet was received isn't part of a bridge, then p #: ../../configuration/protocols/igmp-proxy.rst:49 msgid "If it's vital that the daemon should act exactly like a real multicast client on the upstream interface, this function should be enabled." -msgstr "If it's vital that the daemon should act exactly like a real multicast client on the upstream interface, this function should be enabled." +msgstr "Якщо життєво важливо, щоб демон діяв так само, як справжній багатоадресний клієнт на вихідному інтерфейсі, цю функцію слід увімкнути." #: ../../configuration/interfaces/openvpn.rst:69 msgid "If known, the IP of the remote router can be configured using the ``remote-host`` directive; if unknown, it can be omitted. We will assume a dynamic IP for our remote router." -msgstr "If known, the IP of the remote router can be configured using the ``remote-host`` directive; if unknown, it can be omitted. We will assume a dynamic IP for our remote router." +msgstr "Якщо відомо, IP віддаленого маршрутизатора можна налаштувати за допомогою директиви ``remote-host``; якщо невідомо, його можна опустити. Ми припустимо динамічний IP для нашого віддаленого маршрутизатора." #: ../../configuration/system/syslog.rst:87 msgid "If logging to a local user account is configured, all defined log messages are display on the console if the local user is logged in, if the user is not logged in, no messages are being displayed. For an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." -msgstr "If logging to a local user account is configured, all defined log messages are display on the console if the local user is logged in, if the user is not logged in, no messages are being displayed. For an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." +msgstr "Якщо налаштовано вхід до локального облікового запису користувача, усі визначені повідомлення журналу відображаються на консолі, якщо локальний користувач увійшов у систему; якщо користувач не ввійшов у систему, повідомлення не відображаються. Пояснення ключових слів :ref:`syslog_facilities` і :ref:`syslog_severity_level` див. у таблицях нижче." #: ../../configuration/interfaces/openvpn.rst:314 msgid "If making use of multiple tunnels, OpenVPN must have a way to distinguish between different tunnels aside from the pre-shared-key. This is either by referencing IP address or port number. One option is to dedicate a public IP to each tunnel. Another option is to dedicate a port number to each tunnel (e.g. 1195,1196,1197...)." -msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguish between different tunnels aside from the pre-shared-key. This is either by referencing IP address or port number. One option is to dedicate a public IP to each tunnel. Another option is to dedicate a port number to each tunnel (e.g. 1195,1196,1197...)." +msgstr "Якщо використовується кілька тунелів, OpenVPN має мати спосіб розрізняти різні тунелі, крім попереднього спільного ключа. Це або посилання на IP-адресу, або номер порту. Одним із варіантів є виділення публічної IP-адреси кожному тунелю. Інший варіант — призначити номер порту кожному тунелю (наприклад, 1195,1196,1197...)." #: ../../configuration/protocols/bgp.rst:100 msgid "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." -msgstr "If multi-pathing is enabled, then check whether the routes not yet distinguished in preference may be considered equal. If :cfgcmd:`bgp bestpath as-path multipath-relax` is set, all such routes are considered equal, otherwise routes received via iBGP with identical AS_PATHs or routes received from eBGP neighbours in the same AS are considered equal." +msgstr "Якщо ввімкнуто багатошляхове переміщення, перевірте, чи маршрути, які ще не виділяються за пріоритетністю, можна вважати рівними. Якщо встановлено :cfgcmd:`bgp bestpath as-path multipath-relax`, усі такі маршрути вважаються рівними, інакше маршрути, отримані через iBGP з ідентичними AS_PATH, або маршрути, отримані від сусідів eBGP у тій самій AS, вважаються рівними." -#: ../../configuration/protocols/rpki.rst:86 +#: ../../configuration/protocols/rpki.rst:84 msgid "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." -msgstr "If no connection to an RPKI cache server can be established after a pre-defined timeout, the router will process routes without prefix origin validation. It still will try to establish a connection to an RPKI cache server in the background." +msgstr "Якщо не вдається встановити з’єднання з кеш-сервером RPKI після попередньо визначеного часу очікування, маршрутизатор оброблятиме маршрути без перевірки походження префікса. Він усе ще намагатиметься встановити з’єднання з сервером кешу RPKI у фоновому режимі." #: ../../configuration/nat/nat44.rst:217 msgid "If no destination is specified the rule will match on any destination address and port." -msgstr "If no destination is specified the rule will match on any destination address and port." +msgstr "Якщо призначення не вказано, правило відповідатиме для будь-якої адреси та порту призначення." #: ../../configuration/policy/prefix-list.rst:9 msgid "If no ip prefix list is specified, it acts as permit. If ip prefix list is defined, and no match is found, default deny is applied." -msgstr "If no ip prefix list is specified, it acts as permit. If ip prefix list is defined, and no match is found, default deny is applied." +msgstr "Якщо список префіксів ip не вказано, він діє як дозвіл. Якщо список префіксів ip визначено, але збігів не знайдено, застосовується заборона за замовчуванням." #: ../../configuration/system/syslog.rst:207 msgid "If no option is specified, this defaults to `all`." -msgstr "If no option is specified, this defaults to `all`." +msgstr "Якщо параметр не вказано, за замовчуванням буде `all`." #: ../../_include/interface-ip.txt:42 msgid "If not set (default) allows you to have multiple network interfaces on the same subnet, and have the ARPs for each interface be answered based on whether or not the kernel would route a packet from the ARP'd IP out that interface (therefore you must use source based routing for this to work)." -msgstr "If not set (default) allows you to have multiple network interfaces on the same subnet, and have the ARPs for each interface be answered based on whether or not the kernel would route a packet from the ARP'd IP out that interface (therefore you must use source based routing for this to work)." +msgstr "Якщо не встановлено (за замовчуванням), ви можете мати кілька мережевих інтерфейсів у тій самій підмережі, і запити ARP для кожного інтерфейсу відповідатимуть залежно від того, чи буде ядро маршрутизувати пакет із IP-адресою ARP через цей інтерфейс (тому ви для цього потрібно використовувати маршрутизацію на основі джерела)." #: ../../configuration/protocols/pim.rst:142 msgid "If optional profile parameter is used, select a BFD profile for the BFD sessions created via this interface." @@ -6634,60 +7427,99 @@ msgstr "If optional profile parameter is used, select a BFD profile for the BFD #: ../../configuration/system/ip.rst:17 msgid "If set, IPv4 directed broadcast forwarding will be completely disabled regardless of whether per-interface directed broadcast forwarding is enabled or not." -msgstr "If set, IPv4 directed broadcast forwarding will be completely disabled regardless of whether per-interface directed broadcast forwarding is enabled or not." +msgstr "Якщо встановлено, спрямоване широкомовне пересилання IPv4 буде повністю вимкнено незалежно від того, чи ввімкнено спрямоване широкомовне пересилання для кожного інтерфейсу чи ні." #: ../../_include/interface-ip.txt:36 msgid "If set the kernel can respond to arp requests with addresses from other interfaces. This may seem wrong but it usually makes sense, because it increases the chance of successful communication. IP addresses are owned by the complete host on Linux, not by particular interfaces. Only for more complex setups like load-balancing, does this behaviour cause problems." -msgstr "If set the kernel can respond to arp requests with addresses from other interfaces. This may seem wrong but it usually makes sense, because it increases the chance of successful communication. IP addresses are owned by the complete host on Linux, not by particular interfaces. Only for more complex setups like load-balancing, does this behaviour cause problems." +msgstr "Якщо встановлено, ядро може відповідати на запити arp з адресами з інших інтерфейсів. Це може здатися неправильним, але зазвичай це має сенс, оскільки це збільшує шанси на успішне спілкування. IP-адреси належать повному хосту в Linux, а не окремим інтерфейсам. Лише для більш складних налаштувань, таких як балансування навантаження, ця поведінка викликає проблеми." #: ../../configuration/system/task-scheduler.rst:24 msgid "If suffix is omitted, minutes are implied." -msgstr "If suffix is omitted, minutes are implied." +msgstr "Якщо суфікс опущено, маються на увазі хвилини." #: ../../_include/interface-ip.txt:91 msgid "If the ARP table already contains the IP address of the gratuitous arp frame, the arp table will be updated regardless if this setting is on or off." -msgstr "If the ARP table already contains the IP address of the gratuitous arp frame, the arp table will be updated regardless if this setting is on or off." +msgstr "Якщо таблиця ARP уже містить IP-адресу безкоштовного кадру arp, таблицю arp буде оновлено незалежно від того, увімкнено чи вимкнено цей параметр." #: ../../configuration/protocols/bgp.rst:380 msgid "If the AS-Path for the route has a private ASN between public ASNs, it is assumed that this is a design choice, and the private ASN is not removed." -msgstr "If the AS-Path for the route has a private ASN between public ASNs, it is assumed that this is a design choice, and the private ASN is not removed." +msgstr "Якщо AS-Path для маршруту має приватний ASN між загальнодоступними ASN, припускається, що це вибір дизайну, і приватний ASN не видаляється." #: ../../configuration/protocols/bgp.rst:377 msgid "If the AS-Path for the route has only private ASNs, the private ASNs are removed." -msgstr "If the AS-Path for the route has only private ASNs, the private ASNs are removed." +msgstr "Якщо AS-Path для маршруту містить лише приватні ASN, приватні ASN видаляються." #: ../../configuration/vpn/dmvpn.rst:86 msgid "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." -msgstr "If the IP prefix mask is present, it directs opennhrp to use this peer as a next hop server when sending Resolution Requests matching this subnet." +msgstr "Якщо присутня маска префікса IP, вона вказує opennhrp використовувати цей вузол як наступний сервер під час надсилання запитів на вирішення, що відповідають цій підмережі." + +#: ../../configuration/service/ipoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:205 +#: ../../configuration/vpn/l2tp.rst:248 +#: ../../configuration/vpn/pptp.rst:188 +#: ../../configuration/vpn/sstp.rst:221 +msgid "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Delegated-IPv6-Prefix-Pool``, IPv6 delegation pefix will be allocated from a predefined IPv6 pool ``delegate`` whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:233 +#: ../../configuration/service/pppoe-server.rst:195 +#: ../../configuration/vpn/l2tp.rst:238 +#: ../../configuration/vpn/pptp.rst:178 +#: ../../configuration/vpn/sstp.rst:211 +msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." +msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ``default-pool`` within the CLI config is being ignored." #: ../../configuration/vpn/l2tp.rst:211 msgid "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." -msgstr "If the RADIUS server sends the attribute ``Framed-IP-Address`` then this IP address will be allocated to the client and the option ip-pool within the CLI config is being ignored." +msgstr "Якщо сервер RADIUS надсилає атрибут ``Framed-IP-Address``, ця IP-адреса буде призначена клієнту, а параметр ip-pool у конфігурації CLI ігнорується." + +#: ../../configuration/service/ipoe-server.rst:237 +#: ../../configuration/service/pppoe-server.rst:199 +#: ../../configuration/vpn/l2tp.rst:242 +#: ../../configuration/vpn/pptp.rst:182 +#: ../../configuration/vpn/sstp.rst:215 +msgid "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Framed-Pool``, IP address will be allocated from a predefined IP pool whose name equals the attribute value." + +#: ../../configuration/service/ipoe-server.rst:240 +#: ../../configuration/service/pppoe-server.rst:202 +#: ../../configuration/vpn/l2tp.rst:245 +#: ../../configuration/vpn/pptp.rst:185 +#: ../../configuration/vpn/sstp.rst:218 +msgid "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." +msgstr "If the RADIUS server sends the attribute ``Stateful-IPv6-Address-Pool``, IPv6 address will be allocated from a predefined IPv6 pool ``prefix`` whose name equals the attribute value." -#: ../../configuration/vpn/l2tp.rst:218 +#: ../../configuration/service/pppoe-server.rst:219 +#: ../../configuration/vpn/l2tp.rst:262 +#: ../../configuration/vpn/pptp.rst:202 +#: ../../configuration/vpn/sstp.rst:235 msgid "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." -msgstr "If the RADIUS server uses the attribute ``NAS-Port-Id``, ppp tunnels will be renamed." +msgstr "Якщо сервер RADIUS використовує атрибут ``NAS-Port-Id``, тунелі ppp будуть перейменовані." #: ../../configuration/protocols/bgp.rst:444 msgid "If the :cfgcmd:`no-prepend` attribute is specified, then the supplied local-as is not prepended to the received AS_PATH." -msgstr "If the :cfgcmd:`no-prepend` attribute is specified, then the supplied local-as is not prepended to the received AS_PATH." +msgstr "Якщо вказано атрибут :cfgcmd:`no-prepend`, наданий local-as не додається до отриманого AS_PATH." #: ../../configuration/protocols/bgp.rst:447 msgid "If the :cfgcmd:`replace-as` attribute is specified, then only the supplied local-as is prepended to the AS_PATH when transmitting local-route updates to this peer." -msgstr "If the :cfgcmd:`replace-as` attribute is specified, then only the supplied local-as is prepended to the AS_PATH when transmitting local-route updates to this peer." +msgstr "Якщо вказано атрибут :cfgcmd:`replace-as`, тоді лише наданий local-as додається до AS_PATH під час передачі оновлень локального маршруту цьому вузлу." #: ../../configuration/trafficpolicy/index.rst:892 msgid "If the average queue size is lower than the **min-threshold**, an arriving packet will be placed in the queue." -msgstr "If the average queue size is lower than the **min-threshold**, an arriving packet will be placed in the queue." +msgstr "Якщо середній розмір черги нижчий за **мінімальний поріг**, прибулий пакет буде розміщено в черзі." #: ../../configuration/trafficpolicy/index.rst:899 msgid "If the current queue size is larger than **queue-limit**, then packets will be dropped. The average queue size depends on its former average size and its current one." -msgstr "If the current queue size is larger than **queue-limit**, then packets will be dropped. The average queue size depends on its former average size and its current one." +msgstr "Якщо поточний розмір черги перевищує **queue-limit**, то пакети відкидаються. Середній розмір черги залежить від її попереднього середнього розміру та поточного." #: ../../configuration/firewall/index.rst:83 msgid "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" msgstr "If the interface where the packet was received is part of a bridge, then packetis processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +#: ../../configuration/firewall/index.rst:83 +msgid "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" +msgstr "If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering:" + #: ../../configuration/firewall/index.rst:26 msgid "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" msgstr "If the interface where the packet was received isn't part of a bridge, then packetis processed at the **IP Layer**:" @@ -6695,143 +7527,165 @@ msgstr "If the interface where the packet was received isn't part of a bridge, t #: ../../configuration/interfaces/bonding.rst:187 #: ../../configuration/interfaces/bonding.rst:216 msgid "If the protocol is IPv6 then the source and destination addresses are first hashed using ipv6_addr_hash." -msgstr "If the protocol is IPv6 then the source and destination addresses are first hashed using ipv6_addr_hash." +msgstr "Якщо протокол IPv6, адреси джерела та призначення спочатку хешуються за допомогою ipv6_addr_hash." #: ../../configuration/vpn/dmvpn.rst:75 msgid "If the statically mapped peer is running Cisco IOS, specify the cisco keyword. It is used to fix statically the Registration Request ID so that a matching Purge Request can be sent if NBMA address has changed. This is to work around broken IOS which requires Purge Request ID to match the original Registration Request ID." -msgstr "If the statically mapped peer is running Cisco IOS, specify the cisco keyword. It is used to fix statically the Registration Request ID so that a matching Purge Request can be sent if NBMA address has changed. This is to work around broken IOS which requires Purge Request ID to match the original Registration Request ID." +msgstr "Якщо статично зіставлений вузол працює під керуванням Cisco IOS, укажіть ключове слово cisco. Він використовується для статичної фіксації ідентифікатора запиту на реєстрацію, щоб можна було надіслати відповідний запит на очищення, якщо адреса NBMA змінилася. Це робиться для того, щоб обійти несправну систему IOS, яка вимагає, щоб ідентифікатор запиту на очищення збігався з оригінальним ідентифікатором запиту на реєстрацію." #: ../../configuration/interfaces/wireless.rst:24 msgid "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." -msgstr "If the system detects an unconfigured wireless device, it will be automatically added the configuration tree, specifying any detected settings (for example, its MAC address) and configured to run in monitor mode." +msgstr "Якщо система виявить неналаштований бездротовий пристрій, він автоматично додасть дерево конфігурації із зазначенням усіх виявлених параметрів (наприклад, його MAC-адресу) і налаштує його на роботу в режимі моніторингу." -#: ../../configuration/service/conntrack-sync.rst:126 +#: ../../configuration/service/conntrack-sync.rst:135 msgid "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" -msgstr "If the table is empty and you have a warning message, it means conntrack is not enabled. To enable conntrack, just create a NAT or a firewall rule. :cfgcmd:`set firewall state-policy established action accept`" +msgstr "Якщо таблиця порожня, і у вас є попередження, це означає, що conntrack не ввімкнено. Щоб увімкнути conntrack, просто створіть NAT або правило брандмауера. :cfgcmd:`встановити стан політики брандмауера встановлено дію прийняти`" #: ../../configuration/service/dhcp-server.rst:72 msgid "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." -msgstr "If there are no free addresses but there are abandoned IP addresses, the DHCP server will attempt to reclaim an abandoned IP address regardless of the value of abandon-lease-time." +msgstr "Якщо немає вільних адрес, але є залишені IP-адреси, DHCP-сервер спробує відновити залишену IP-адресу незалежно від значення abandon-lease-time." -#: ../../configuration/vpn/site2site_ipsec.rst:241 +#: ../../configuration/vpn/site2site_ipsec.rst:244 msgid "If there is SNAT rules on eth1, need to add exclude rule" -msgstr "If there is SNAT rules on eth1, need to add exclude rule" +msgstr "Якщо на eth1 є правила SNAT, потрібно додати правило виключення" #: ../../configuration/interfaces/wireguard.rst:57 #: ../../configuration/interfaces/wireguard.rst:120 msgid "If this command is invoked from configure mode with the ``run`` prefix the key is automatically installed to the appropriate interface:" -msgstr "If this command is invoked from configure mode with the ``run`` prefix the key is automatically installed to the appropriate interface:" +msgstr "Якщо ця команда викликається з режиму конфігурації з префіксом ``run``, ключ автоматично встановлюється у відповідний інтерфейс:" #: ../../configuration/service/dhcp-relay.rst:168 msgid "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." -msgstr "If this is set the relay agent will insert the interface ID. This option is set automatically if more than one listening interfaces are in use." +msgstr "Якщо це встановлено, агент ретрансляції вставлятиме ідентифікатор інтерфейсу. Цей параметр встановлюється автоматично, якщо використовується більше одного інтерфейсу прослуховування." -#: ../../configuration/protocols/bgp.rst:768 +#: ../../configuration/protocols/bgp.rst:790 msgid "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." -msgstr "If this option is enabled, then the already-selected check, where already selected eBGP routes are preferred, is skipped." +msgstr "Якщо цей параметр увімкнено, уже вибрану перевірку, де перевага надається вже вибраним маршрутам eBGP, пропускається." -#: ../../configuration/vpn/sstp.rst:183 +#: ../../configuration/vpn/sstp.rst:189 msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." -msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds." +msgstr "Якщо цей параметр указано та більше 0, то модуль PPP надсилатиме пінг LCP ехо-запиту кожні `<interval> ` секунд." + +#: ../../configuration/service/pppoe-server.rst:484 +#: ../../configuration/vpn/l2tp.rst:438 +#: ../../configuration/vpn/pptp.rst:362 +#: ../../configuration/vpn/sstp.rst:396 +msgid "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." +msgstr "If this option is specified and is greater than 0, then the PPP module will send LCP pings of the echo request every `<interval>` seconds. Default value is **30**." #: ../../_include/interface-ip.txt:75 msgid "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." -msgstr "If this option is unset (default), incoming IP directed broadcast packets will not be forwarded." +msgstr "Якщо цей параметр не встановлено (за замовчуванням), вхідні широкомовні пакети, спрямовані за IP, не пересилатимуться." #: ../../_include/interface-ip.txt:127 msgid "If this option is unset (default), reply for any local target IP address, configured on any interface." -msgstr "If this option is unset (default), reply for any local target IP address, configured on any interface." +msgstr "Якщо цей параметр не встановлено (за замовчуванням), відповідь для будь-якої локальної цільової IP-адреси, налаштованої на будь-якому інтерфейсі." #: ../../configuration/interfaces/pppoe.rst:176 msgid "If this parameter is not set, the default holdoff time is 30 seconds." -msgstr "If this parameter is not set, the default holdoff time is 30 seconds." +msgstr "Якщо цей параметр не встановлено, час затримки за замовчуванням становить 30 секунд." #: ../../configuration/interfaces/pppoe.rst:166 msgid "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." -msgstr "If this parameter is not set or 0, an on-demand link will not be taken down when it is idle and after the initial establishment of the connection. It will stay up forever." +msgstr "Якщо цей параметр не встановлено або дорівнює 0, посилання на вимогу не буде видалено, коли воно неактивне та після початкового встановлення з’єднання. Це залишиться назавжди." -#: ../../configuration/system/login.rst:270 +#: ../../configuration/system/login.rst:274 msgid "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." -msgstr "If unset, incoming connections to the RADIUS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." +msgstr "Якщо не налаштовано, вхідні підключення до сервера RADIUS використовуватимуть найближчу адресу інтерфейсу, що вказує на сервер, що робить його схильним до помилок, наприклад, у мережах OSPF, коли зв’язок не вдається та виконується резервний маршрут." -#: ../../configuration/system/login.rst:339 +#: ../../configuration/system/login.rst:343 msgid "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." -msgstr "If unset, incoming connections to the TACACS server will use the nearest interface address pointing towards the server - making it error prone on e.g. OSPF networks when a link fails and a backup route is taken." +msgstr "Якщо не налаштовано, вхідні з’єднання з сервером TACACS використовуватимуть найближчу адресу інтерфейсу, що вказує на сервер, що робить його схильним до помилок, наприклад, у мережах OSPF, коли зв’язок виходить з ладу та виконується резервний маршрут." #: ../../configuration/nat/nat44.rst:810 msgid "If you've completed all the above steps you no doubt want to see if it's all working." -msgstr "If you've completed all the above steps you no doubt want to see if it's all working." +msgstr "Якщо ви виконали всі описані вище кроки, ви, безсумнівно, хочете перевірити, чи все працює." #: ../../configuration/protocols/bgp.rst:489 msgid "If you apply a parameter to an individual neighbor IP address, you override the action defined for a peer group that includes that IP address." -msgstr "If you apply a parameter to an individual neighbor IP address, you override the action defined for a peer group that includes that IP address." +msgstr "Якщо ви застосовуєте параметр до окремої сусідньої IP-адреси, ви замінюєте дію, визначену для однорангової групи, яка включає цю IP-адресу." #: ../../configuration/interfaces/openvpn.rst:637 msgid "If you are a hacker or want to try on your own we support passing raw OpenVPN options to OpenVPN." -msgstr "If you are a hacker or want to try on your own we support passing raw OpenVPN options to OpenVPN." +msgstr "Якщо ви хакер або хочете спробувати самостійно, ми підтримуємо передачу необроблених параметрів OpenVPN до OpenVPN." #: ../../configuration/system/name-server.rst:7 msgid "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." -msgstr "If you are configuring a VRF for management purposes, there is currently no way to force system DNS traffic via a specific VRF." +msgstr "Якщо ви налаштовуєте VRF для цілей керування, наразі немає способу змусити системний трафік DNS через певний VRF." -#: ../../configuration/protocols/rpki.rst:30 +#: ../../configuration/protocols/rpki.rst:29 msgid "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" -msgstr "If you are new to these routing security technologies then there is an `excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very quickly. Their documentation explains everything from what RPKI is to deploying it in production. It also has some `help and operational guidance`_ including \"What can I do about my route having an Invalid state?\"" +msgstr "Якщо ви новачок у цих технологіях безпеки маршрутизації, тоді є `чудовий посібник з RPKI`_ від NLnet Labs, який допоможе вам дуже швидко ознайомитися з ними. Їхня документація пояснює все, від того, що таке RPKI, до його розгортання у виробництві. Він також містить деяку `довідку та оперативні вказівки`_, включаючи "Що я можу зробити, якщо мій маршрут має недійсний стан?"" + +#: ../../configuration/protocols/rpki.rst:62 +msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." #: ../../configuration/protocols/rpki.rst:64 msgid "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." -msgstr "If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ." +msgstr "Якщо ви відповідаєте за глобальні адреси, призначені вашій мережі, будь ласка, переконайтеся, що ваші префікси мають ROA, пов’язані з ними, щоб уникнути «не знайденого» RPKI. Для більшості ASN це включатиме публікацію ROA через ваш :abbr:`RIR (Регіональний Інтернет-реєстр)` (RIPE NCC, APNIC, ARIN, LACNIC або AFRINIC), і це те, що вам рекомендується робити, коли ви плануєте оголошувати адреси в ДФЗ." #: ../../configuration/trafficpolicy/index.rst:483 msgid "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." -msgstr "If you are using FQ-CoDel embedded into Shaper_ and you have large rates (100Mbit and above), you may consider increasing `quantum` to 8000 or higher so that the scheduler saves CPU." +msgstr "Якщо ви використовуєте FQ-CoDel, вбудований у Shaper_, і маєте високі швидкості (100 Мбіт і вище), ви можете збільшити `quantum` до 8000 або вище, щоб планувальник економив ЦП." -#: ../../configuration/vpn/l2tp.rst:165 +#: ../../configuration/service/ipoe-server.rst:146 +#: ../../configuration/service/pppoe-server.rst:108 +#: ../../configuration/vpn/l2tp.rst:151 msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." -msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +msgstr "Якщо ви використовуєте OSPF як IGP, завжди використовується найближчий інтерфейс, підключений до сервера RADIUS. За допомогою VyOS 1.2 ви можете прив’язати всі вихідні RADIUS-запити до однієї IP-адреси джерела, наприклад, інтерфейс петлі." + +#: ../../configuration/vpn/pptp.rst:91 +#: ../../configuration/vpn/sstp.rst:124 +msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." +msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. You can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." #: ../../configuration/interfaces/openvpn.rst:306 msgid "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." -msgstr "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." +msgstr "Якщо ви змінюєте стандартні алгоритми шифрування та хешування, переконайтеся, що локальна та віддалена сторони мають відповідні конфігурації, інакше тунель не відкриється." #: ../../configuration/system/ip.rst:43 #: ../../configuration/system/ipv6.rst:39 #: ../../configuration/vrf/index.rst:57 #: ../../configuration/vrf/index.rst:67 msgid "If you choose any as the option that will cause all protocols that are sending routes to zebra." -msgstr "If you choose any as the option that will cause all protocols that are sending routes to zebra." +msgstr "Якщо ви виберете будь-який варіант, це спричинить усі протоколи, які надсилають маршрути до zebra." #: ../../configuration/trafficpolicy/index.rst:1114 msgid "If you configure a class for **VoIP traffic**, don't give it any *ceiling*, otherwise new VoIP calls could start when the link is available and get suddenly dropped when other classes start using their assigned *bandwidth* share." -msgstr "If you configure a class for **VoIP traffic**, don't give it any *ceiling*, otherwise new VoIP calls could start when the link is available and get suddenly dropped when other classes start using their assigned *bandwidth* share." +msgstr "Якщо ви налаштовуєте клас для **VoIP-трафіку**, не встановлюйте йому *стелі*, інакше нові виклики VoIP можуть початися, коли посилання доступне, і раптово скинутися, коли інші класи почнуть використовувати призначену їм частку *пропускної здатності*." #: ../../configuration/protocols/babel.rst:37 msgid "If you enable this, you will probably want to set diversity-factor and channel below." -msgstr "If you enable this, you will probably want to set diversity-factor and channel below." +msgstr "Якщо ви ввімкнете це, ви, ймовірно, захочете встановити коефіцієнт різноманітності та канал нижче." #: ../../configuration/protocols/pim.rst:54 msgid "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." msgstr "If you enter a value smaller than 60 seconds be aware that this can and will affect convergence at scale." +#: ../../configuration/vpn/ipsec.rst:483 +msgid "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." +msgstr "If you feel better forwarding all authentication requests to your enterprises RADIUS server, use the commands below." + #: ../../configuration/interfaces/bonding.rst:312 msgid "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." -msgstr "If you happen to run this in a virtual environment like by EVE-NG you need to ensure your VyOS NIC is set to use the e1000 driver. Using the default ``virtio-net-pci`` or the ``vmxnet3`` driver will not work. ICMP messages will not be properly processed. They are visible on the virtual wire but will not make it fully up the networking stack." +msgstr "Якщо ви випадково запустите це у віртуальному середовищі, наприклад EVE-NG, вам потрібно переконатися, що мережевий адаптер VyOS налаштовано на використання драйвера e1000. Використання типового драйвера ``virtio-net-pci`` або ``vmxnet3`` не працюватиме. Повідомлення ICMP не оброблятимуться належним чином. Вони видимі на віртуальному дроті, але не повністю поповнять стек мережі." #: ../../configuration/service/snmp.rst:247 msgid "If you happen to use SolarWinds Orion as NMS you can also use the Device Templates Management. A template for VyOS can be easily imported." -msgstr "If you happen to use SolarWinds Orion as NMS you can also use the Device Templates Management. A template for VyOS can be easily imported." +msgstr "Якщо ви випадково використовуєте SolarWinds Orion як NMS, ви також можете скористатися керуванням шаблонами пристроїв. Шаблон для VyOS можна легко імпортувати." #: ../../configuration/service/console-server.rst:15 msgid "If you happened to use a Cisco NM-16A - Sixteen Port Async Network Module or NM-32A - Thirty-two Port Async Network Module - this is your VyOS replacement." -msgstr "If you happened to use a Cisco NM-16A - Sixteen Port Async Network Module or NM-32A - Thirty-two Port Async Network Module - this is your VyOS replacement." +msgstr "Якщо ви випадково використовували Cisco NM-16A — шістнадцятипортовий асинхронний мережевий модуль або NM-32A — тридцятидвохпортовий асинхронний мережевий модуль — це ваша заміна VyOS." #: ../../configuration/protocols/ospf.rst:362 msgid "If you have a lot of interfaces, and/or a lot of subnets, then enabling OSPF via this command may result in a slight performance improvement." -msgstr "If you have a lot of interfaces, and/or a lot of subnets, then enabling OSPF via this command may result in a slight performance improvement." +msgstr "Якщо у вас багато інтерфейсів та/або багато підмереж, увімкнення OSPF за допомогою цієї команди може призвести до незначного покращення продуктивності." #: ../../configuration/nat/nat44.rst:584 msgid "If you have configured the `INSIDE-OUT` policy, you will need to add additional rules to permit inbound NAT traffic." -msgstr "If you have configured the `INSIDE-OUT` policy, you will need to add additional rules to permit inbound NAT traffic." +msgstr "Якщо ви налаштували політику `INSIDE-OUT`, вам потрібно буде додати додаткові правила, щоб дозволити вхідний трафік NAT." #: ../../configuration/protocols/pim.rst:171 msgid "If you have multiple addresses configured on a particular interface and would like PIM to use a specific source address associated with that interface." @@ -6839,133 +7693,177 @@ msgstr "If you have multiple addresses configured on a particular interface and #: ../../configuration/system/flow-accounting.rst:65 msgid "If you need to sample also egress traffic, you may want to configure egress flow-accounting:" -msgstr "If you need to sample also egress traffic, you may want to configure egress flow-accounting:" +msgstr "Якщо вам також потрібно взяти вибірку вихідного трафіку, ви можете налаштувати облік вихідного потоку:" #: ../../configuration/interfaces/openvpn.rst:518 msgid "If you only want to check if the user account is enabled and can authenticate (against the primary group) the following snipped is sufficient:" -msgstr "If you only want to check if the user account is enabled and can authenticate (against the primary group) the following snipped is sufficient:" +msgstr "Якщо ви хочете лише перевірити, чи обліковий запис користувача ввімкнено та чи можна автентифікувати (проти основної групи), достатньо наступного фрагменту:" #: ../../configuration/vpn/l2tp.rst:196 msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." -msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client, which is the vyos router in our example." +msgstr "Якщо ви встановите спеціальний атрибут RADIUS, ви повинні визначити його в обох словниках на RADIUS-сервері та клієнті, яким у нашому прикладі є маршрутизатор vyos." + +#: ../../configuration/service/ipoe-server.rst:215 +#: ../../configuration/service/pppoe-server.rst:177 +#: ../../configuration/vpn/l2tp.rst:220 +#: ../../configuration/vpn/pptp.rst:160 +#: ../../configuration/vpn/sstp.rst:193 +msgid "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." +msgstr "If you set a custom RADIUS attribute you must define it on both dictionaries at RADIUS server and client." #: ../../configuration/system/console.rst:41 msgid "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." -msgstr "If you use USB to serial converters for connecting to your VyOS appliance please note that most of them use software emulation without flow control. This means you should start with a common baud rate (most likely 9600 baud) as otherwise you probably can not connect to the device using high speed baud rates as your serial converter simply can not process this data rate." +msgstr "Якщо ви використовуєте USB-послідовні перетворювачі для підключення до свого пристрою VyOS, зверніть увагу, що більшість із них використовують програмну емуляцію без контролю потоку. Це означає, що ви повинні почати зі звичайної швидкості передачі даних (швидше за все, 9600 бод), оскільки інакше ви, ймовірно, не зможете підключитися до пристрою, використовуючи високу швидкість передачі даних, оскільки ваш послідовний конвертер просто не зможе обробити цю швидкість передачі даних." + +#: ../../configuration/vpn/sstp.rst:482 +msgid "If you use a self-signed certificate, do not forget to install CA on the client side." +msgstr "If you use a self-signed certificate, do not forget to install CA on the client side." + +#: ../../configuration/vpn/ipsec.rst:538 +msgid "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." +msgstr "If you want, need, and should use more advanced encryption ciphers (default is still 3DES) you need to provision your device using a so-called \"Device Profile\". A profile is a simple text file containing XML nodes with a ``.mobileconfig`` file extension that can be sent and opened on any device from an E-Mail." #: ../../configuration/system/flow-accounting.rst:140 msgid "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." -msgstr "If you want to change the maximum number of flows, which are tracking simultaneously, you may do this with this command (default 8192)." +msgstr "Якщо ви хочете змінити максимальну кількість потоків, які відстежуються одночасно, ви можете зробити це за допомогою цієї команди (за замовчуванням 8192)." #: ../../configuration/firewall/general-legacy.rst:375 msgid "If you want to disable a rule but let it in the configuration." -msgstr "If you want to disable a rule but let it in the configuration." +msgstr "Якщо ви хочете вимкнути правило, але залишити його в конфігурації." -#: ../../configuration/system/login.rst:294 +#: ../../configuration/system/login.rst:298 msgid "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." -msgstr "If you want to have admin users to authenticate via RADIUS it is essential to sent the ``Cisco-AV-Pair shell:priv-lvl=15`` attribute. Without the attribute you will only get regular, non privilegued, system users." +msgstr "Якщо ви хочете, щоб користувачі-адміністратори проходили автентифікацію через RADIUS, важливо надіслати атрибут ``Cisco-AV-Pair shell:priv-lvl=15``. Без атрибута ви отримаєте лише звичайних непривілейованих користувачів системи." #: ../../configuration/service/webproxy.rst:340 msgid "If you want to use existing blacklists you have to create/download a database first. Otherwise you will not be able to commit the config changes." -msgstr "If you want to use existing blacklists you have to create/download a database first. Otherwise you will not be able to commit the config changes." +msgstr "Якщо ви хочете використовувати існуючі чорні списки, вам потрібно спочатку створити/завантажити базу даних. Інакше ви не зможете внести зміни конфігурації." #: ../../configuration/service/dhcp-relay.rst:7 msgid "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." -msgstr "If you want your router to forward DHCP requests to an external DHCP server you can configure the system to act as a DHCP relay agent. The DHCP relay agent works with IPv4 and IPv6 addresses." +msgstr "Якщо ви хочете, щоб ваш маршрутизатор пересилав запити DHCP на зовнішній сервер DHCP, ви можете налаштувати систему, щоб вона діяла як агент ретрансляції DHCP. Агент ретрансляції DHCP працює з адресами IPv4 та IPv6." -#: ../../configuration/protocols/bgp.rst:760 +#: ../../configuration/protocols/bgp.rst:782 msgid "Ignore AS_PATH length when selecting a route" -msgstr "Ignore AS_PATH length when selecting a route" +msgstr "Ігноруйте довжину AS_PATH під час вибору маршруту" #: ../../configuration/highavailability/index.rst:181 msgid "Ignore VRRP main interface faults" -msgstr "Ignore VRRP main interface faults" +msgstr "Ігноруйте помилки основного інтерфейсу VRRP" #: ../../configuration/service/snmp.rst:63 msgid "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" -msgstr "Image thankfully borrowed from https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG which is under the GNU Free Documentation License" +msgstr "Зображення, на щастя, запозичено з https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG, який знаходиться під ліцензією GNU Free Documentation License" -#: ../../configuration/vpn/site2site_ipsec.rst:279 +#: ../../configuration/vpn/site2site_ipsec.rst:282 msgid "Imagine the following topology" -msgstr "Imagine the following topology" +msgstr "Уявіть наступну топологію" #: ../../configuration/trafficpolicy/index.rst:799 msgid "Immediate" -msgstr "Immediate" +msgstr "негайно" + +#: ../../configuration/pki/index.rst:254 +msgid "Import files to PKI format" +msgstr "Import files to PKI format" + +#: ../../configuration/pki/index.rst:265 +msgid "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." +msgstr "Import the CAs private key portion to the CLI. This should never leave the system as it is used to decrypt the data. The key is required if you use VyOS as your certificate generator." -#: ../../configuration/protocols/rpki.rst:46 +#: ../../configuration/pki/index.rst:280 +msgid "Import the OpenVPN shared secret stored in file to the VyOS CLI." +msgstr "Import the OpenVPN shared secret stored in file to the VyOS CLI." + +#: ../../configuration/pki/index.rst:271 +msgid "Import the certificate from the file to VyOS CLI." +msgstr "Import the certificate from the file to VyOS CLI." + +#: ../../configuration/pki/index.rst:275 +msgid "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Import the private key of the certificate to the VyOS CLI. This should never leave the system as it is used to decrypt the data." + +#: ../../configuration/pki/index.rst:261 +msgid "Import the public CA certificate from the defined file to VyOS CLI." +msgstr "Import the public CA certificate from the defined file to VyOS CLI." + +#: ../../configuration/protocols/rpki.rst:44 msgid "Imported prefixes during the validation may have values:" -msgstr "Imported prefixes during the validation may have values:" +msgstr "Імпортовані префікси під час перевірки можуть мати значення:" -#: ../../configuration/protocols/static.rst:158 +#: ../../configuration/protocols/static.rst:191 msgid "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." -msgstr "In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is provided by the Neighbor Discovery Protocol (NDP)." +msgstr "У мережах Інтернет-протоколу версії 6 (IPv6) функціональність ARP забезпечується протоколом виявлення сусідів (NDP)." #: ../../configuration/trafficpolicy/index.rst:713 msgid "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." -msgstr "In Priority Queue we do not define clases with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority." +msgstr "У черзі пріоритетів ми визначаємо класи не з безглуздим ідентифікаційним номером класу, а з номером пріоритету класу (1-7). Чим менше число, тим вищий пріоритет." -#: ../../configuration/vpn/ipsec.rst:117 +#: ../../configuration/vpn/ipsec.rst:120 msgid "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." -msgstr "In VyOS, ESP attributes are specified through ESP groups. Multiple proposals can be specified in a single group." +msgstr "У VyOS атрибути ESP вказуються через групи ESP. В одній групі можна вказати декілька пропозицій." #: ../../configuration/vpn/ipsec.rst:42 msgid "In VyOS, IKE attributes are specified through IKE groups. Multiple proposals can be specified in a single group." -msgstr "In VyOS, IKE attributes are specified through IKE groups. Multiple proposals can be specified in a single group." +msgstr "У VyOS атрибути IKE задаються через групи IKE. В одній групі можна вказати декілька пропозицій." #: ../../configuration/trafficpolicy/index.rst:126 msgid "In VyOS, a class is identified by a number you can choose when configuring it." -msgstr "In VyOS, a class is identified by a number you can choose when configuring it." +msgstr "У VyOS клас ідентифікується числом, яке ви можете вибрати під час його налаштування." #: ../../_include/interface-vlan-8021ad.txt:22 msgid "In VyOS the terms ``vif-s`` and ``vif-c`` stand for the ethertype tags that are used." -msgstr "In VyOS the terms ``vif-s`` and ``vif-c`` stand for the ethertype tags that are used." +msgstr "У VyOS терміни ``vif-s`` і ``vif-c`` означають теги ethertype, які використовуються." #: ../../_include/interface-ip.txt:166 msgid "In :rfc:`3069` it is called VLAN Aggregation" -msgstr "In :rfc:`3069` it is called VLAN Aggregation" +msgstr "У :rfc:`3069` це називається VLAN Aggregation" #: ../../configuration/firewall/zone.rst:60 msgid "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone <name>`` to ``firewall zone <name>``." -msgstr "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone <name>`` to ``firewall zone <name>``." +msgstr "У :vytask:`T2199` змінено синтаксис конфігурації зони. Конфігурацію зони переміщено з ``zone-policy zone<name> `` до ``зони брандмауера<name> ``." #: ../../configuration/loadbalancing/wan.rst:14 msgid "In a minimal configuration, the following must be provided:" -msgstr "In a minimal configuration, the following must be provided:" +msgstr "У мінімальній конфігурації має бути надано наступне:" #: ../../_include/interface-vlan-8021ad.txt:16 msgid "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." -msgstr "In a multiple VLAN header context, out of convenience the term \"VLAN tag\" or just \"tag\" for short is often used in place of \"802.1q_ VLAN header\". QinQ allows multiple VLAN tags in an Ethernet frame; together these tags constitute a tag stack. When used in the context of an Ethernet frame, a QinQ frame is a frame that has 2 VLAN 802.1q_ headers (double-tagged)." +msgstr "У контексті кількох заголовків VLAN для зручності замість «802.1q_ заголовка VLAN» часто використовується термін «тег VLAN» або скорочено просто «тег». QinQ допускає декілька тегів VLAN у кадрі Ethernet; разом ці теги складають стек тегів. Коли кадр QinQ використовується в контексті кадру Ethernet, він має 2 заголовки VLAN 802.1q_ (з подвійним тегом)." -#: ../../configuration/protocols/rpki.rst:80 +#: ../../configuration/protocols/rpki.rst:78 msgid "In a nutshell, the current implementation provides the following features:" -msgstr "In a nutshell, the current implementation provides the following features:" +msgstr "У двох словах, поточна реалізація надає такі функції:" #: ../../configuration/system/ipv6.rst:120 msgid "In addition, you can specify many other parameters to get BGP information:" -msgstr "In addition, you can specify many other parameters to get BGP information:" +msgstr "Крім того, ви можете вказати багато інших параметрів для отримання інформації BGP:" -#: ../../configuration/system/login.rst:301 +#: ../../configuration/system/login.rst:305 msgid "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." -msgstr "In addition to :abbr:`RADIUS (Remote Authentication Dial-In User Service)`, :abbr:`TACACS (Terminal Access Controller Access Control System)` can also be found in large deployments." +msgstr "Окрім :abbr:`RADIUS (служба віддаленої автентифікації за телефонним входом користувача)`, :abbr:`TACACS (система контролю доступу до контролера доступу до терміналу)` також можна знайти у великих розгортаннях." #: ../../configuration/system/flow-accounting.rst:88 msgid "In addition to displaying flow accounting information locally, one can also exported them to a collection server." -msgstr "In addition to displaying flow accounting information locally, one can also exported them to a collection server." +msgstr "Окрім локального відображення інформації про облік потоків, їх можна також експортувати на сервер збору." -#: ../../configuration/pki/index.rst:144 -#: ../../configuration/pki/index.rst:159 +#: ../../configuration/pki/index.rst:146 +#: ../../configuration/pki/index.rst:161 #: ../../configuration/pki/pki_cli_import_help.txt:1 msgid "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." -msgstr "In addition to the command above, the output is in a format which can be used to directly import the key into the VyOS CLI by simply copy-pasting the output from op-mode into configuration mode." +msgstr "Окрім наведеної вище команди, вихідні дані мають формат, який можна використовувати для безпосереднього імпорту ключа в VyOS CLI, просто скопіювавши та вставивши вихідні дані з операційного режиму в режим налаштування." + +#: ../../configuration/interfaces/pppoe.rst:388 +msgid "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." +msgstr "In addition we setup IPv6 :abbr:`RA (Router Advertisements)` to make the prefix known on the eth0 link." #: ../../configuration/service/broadcast-relay.rst:48 msgid "In addition you can also disable the whole service without the need to remove it from the current configuration." -msgstr "In addition you can also disable the whole service without the need to remove it from the current configuration." +msgstr "Крім того, ви також можете вимкнути всю службу без необхідності видаляти її з поточної конфігурації." #: ../../configuration/interfaces/wireguard.rst:416 msgid "In addition you will specifiy the IP address or FQDN for the client where it will connect to. The address parameter can be used up to two times and is used to assign the clients specific IPv4 (/32) or IPv6 (/128) address." -msgstr "In addition you will specifiy the IP address or FQDN for the client where it will connect to. The address parameter can be used up to two times and is used to assign the clients specific IPv4 (/32) or IPv6 (/128) address." +msgstr "Крім того, ви вкажете IP-адресу або FQDN для клієнта, до якого він підключатиметься. Параметр адреси можна використовувати до двох разів і використовується для призначення клієнтам конкретної адреси IPv4 (/32) або IPv6 (/128)." #: ../../configuration/interfaces/wireguard.rst:416 msgid "In addition you will specify the IP address or FQDN for the client where it will connect to. The address parameter can be used up to two times and is used to assign the clients specific IPv4 (/32) or IPv6 (/128) address." @@ -6973,7 +7871,7 @@ msgstr "In addition you will specify the IP address or FQDN for the client where #: ../../configuration/firewall/groups.rst:21 msgid "In an **address group** a single IP address or IP address ranges are defined." -msgstr "In an **address group** a single IP address or IP address ranges are defined." +msgstr "У **групі адрес** визначено одну IP-адресу або діапазони IP-адрес." #: ../../configuration/interfaces/openvpn.rst:57 msgid "In both cases, we will use the following settings:" @@ -6981,19 +7879,19 @@ msgstr "In both cases, we will use the following settings:" #: ../../configuration/system/flow-accounting.rst:78 msgid "In case, if you need to catch some logs from flow-accounting daemon, you may configure logging facility:" -msgstr "In case, if you need to catch some logs from flow-accounting daemon, you may configure logging facility:" +msgstr "У випадку, якщо вам потрібно отримати деякі журнали від демона обліку потоків, ви можете налаштувати засіб журналювання:" #: ../../configuration/protocols/bgp.rst:238 msgid "In case of peer-peer relationship routes can be received only if OTC value is equal to your neighbor AS number." -msgstr "In case of peer-peer relationship routes can be received only if OTC value is equal to your neighbor AS number." +msgstr "У випадку однорангових відносин маршрути можуть бути отримані, лише якщо значення OTC дорівнює номеру вашої сусідньої AS." #: ../../configuration/trafficpolicy/index.rst:775 msgid "In contrast to simple RED, VyOS' Random-Detect uses a Generalized Random Early Detect policy that provides different virtual queues based on the IP Precedence value so that some virtual queues can drop more packets than others." -msgstr "In contrast to simple RED, VyOS' Random-Detect uses a Generalized Random Early Detect policy that provides different virtual queues based on the IP Precedence value so that some virtual queues can drop more packets than others." +msgstr "На відміну від простого RED, Random-Detect від VyOS використовує узагальнену політику випадкового раннього виявлення, яка надає різні віртуальні черги на основі значення IP Precedence, щоб деякі віртуальні черги могли скидати більше пакетів, ніж інші." #: ../../configuration/loadbalancing/wan.rst:220 msgid "In failover mode, one interface is set to be the primary interface and other interfaces are secondary or spare. Instead of balancing traffic across all healthy interfaces, only the primary interface is used and in case of failure, a secondary interface selected from the pool of available interfaces takes over. The primary interface is selected based on its weight and health, others become secondary interfaces. Secondary interfaces to take over a failed primary interface are chosen from the load balancer's interface pool, depending on their weight and health. Interface roles can also be selected based on rule order by including interfaces in balancing rules and ordering those rules accordingly. To put the load balancer in failover mode, create a failover rule:" -msgstr "In failover mode, one interface is set to be the primary interface and other interfaces are secondary or spare. Instead of balancing traffic across all healthy interfaces, only the primary interface is used and in case of failure, a secondary interface selected from the pool of available interfaces takes over. The primary interface is selected based on its weight and health, others become secondary interfaces. Secondary interfaces to take over a failed primary interface are chosen from the load balancer's interface pool, depending on their weight and health. Interface roles can also be selected based on rule order by including interfaces in balancing rules and ordering those rules accordingly. To put the load balancer in failover mode, create a failover rule:" +msgstr "У режимі відновлення після відмови один інтерфейс встановлюється як основний, а інші інтерфейси є вторинними або резервними. Замість того, щоб балансувати трафік між усіма справними інтерфейсами, використовується лише основний інтерфейс, а в разі збою вторинний інтерфейс, вибраний із пулу доступних інтерфейсів, бере на себе роботу. Основний інтерфейс вибирається на основі його ваги та здоров’я, інші стають вторинними інтерфейсами. Вторинні інтерфейси, які переймають невдалий основний інтерфейс, вибираються з пулу інтерфейсів балансувальника навантаження залежно від їх ваги та справності. Ролі інтерфейсів також можна вибрати на основі порядку правил, включивши інтерфейси в правила балансування та впорядкувавши ці правила відповідно. Щоб перевести балансувальник навантаження в режим відновлення після відмови, створіть правило відновлення після відмови:" #: ../../configuration/firewall/bridge.rst:70 msgid "In firewall bridge rules, the action can be:" @@ -7001,47 +7899,47 @@ msgstr "In firewall bridge rules, the action can be:" #: ../../configuration/protocols/ospf.rst:339 msgid "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." -msgstr "In general, OSPF protocol requires a backbone area (area 0) to be coherent and fully connected. I.e. any backbone area router must have a route to any other backbone area router. Moreover, every ABR must have a link to backbone area. However, it is not always possible to have a physical link to a backbone area. In this case between two ABR (one of them has a link to the backbone area) in the area (not stub area) a virtual link is organized." +msgstr "Загалом, протокол OSPF вимагає, щоб магістральна область (область 0) була узгодженою та повністю з’єднаною. Тобто будь-який маршрутизатор магістральної області повинен мати маршрут до будь-якого іншого маршрутизатора магістральної області. Крім того, кожен ABR повинен мати зв'язок з магістральною областю. Однак не завжди можливо мати фізичне з’єднання з магістральною областю. У цьому випадку між двома ABR (один з них має зв'язок з магістральною областю) в області (не заглушці) організовується віртуальний зв'язок." -#: ../../configuration/system/login.rst:236 +#: ../../configuration/system/login.rst:240 msgid "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." -msgstr "In large deployments it is not reasonable to configure each user individually on every system. VyOS supports using :abbr:`RADIUS (Remote Authentication Dial-In User Service)` servers as backend for user authentication." +msgstr "У великих розгортаннях недоцільно налаштовувати кожного користувача окремо в кожній системі. VyOS підтримує використання серверів :abbr:`RADIUS (Remote Authentication Dial-In User Service)` як серверної частини для автентифікації користувачів." #: ../../configuration/system/flow-accounting.rst:45 msgid "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." -msgstr "In order for flow accounting information to be collected and displayed for an interface, the interface must be configured for flow accounting." +msgstr "Щоб інформація про облік потоків збиралася та відображалася для інтерфейсу, інтерфейс має бути налаштований для обліку потоків." -#: ../../configuration/service/dhcp-server.rst:161 +#: ../../configuration/service/dhcp-server.rst:211 msgid "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." -msgstr "In order for the primary and the secondary DHCP server to keep their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly." +msgstr "Щоб основний і додатковий сервери DHCP підтримували синхронізацію своїх таблиць оренди, вони повинні мати можливість зв’язуватися один з одним через TCP-порт 647. Якщо у вас діють правила брандмауера, налаштуйте їх відповідно." #: ../../configuration/system/name-server.rst:47 msgid "In order for the system to use and complete unqualified host names, a list can be defined which will be used for domain searches." -msgstr "In order for the system to use and complete unqualified host names, a list can be defined which will be used for domain searches." +msgstr "Щоб система використовувала та заповнювала некваліфіковані імена хостів, можна визначити список, який використовуватиметься для пошуку домену." #: ../../configuration/protocols/mpls.rst:52 msgid "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." -msgstr "In order to allow for LDP on the local router to exchange label advertisements with other routers, a TCP session will be established between automatically discovered and statically assigned routers. LDP will try to establish a TCP session to the **transport address** of other routers. Therefore for LDP to function properly please make sure the transport address is shown in the routing table and reachable to traffic at all times." +msgstr "Щоб LDP на локальному маршрутизаторі міг обмінюватися оголошеннями про мітки з іншими маршрутизаторами, між автоматично виявленими та статично призначеними маршрутизаторами буде встановлено сеанс TCP. LDP намагатиметься встановити TCP-сеанс до **транспортної адреси** інших маршрутизаторів. Тому для належної роботи LDP переконайтеся, що транспортна адреса відображається в таблиці маршрутизації та завжди доступна для трафіку." -#: ../../configuration/protocols/bgp.rst:820 +#: ../../configuration/protocols/bgp.rst:842 msgid "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." -msgstr "In order to control and modify routing information that is exchanged between peers you can use route-map, filter-list, prefix-list, distribute-list." +msgstr "Щоб контролювати та змінювати інформацію про маршрутизацію, якою обмінюються однорангові пристрої, ви можете використовувати карту маршруту, список фільтрів, список префіксів, список розподілу." #: ../../configuration/trafficpolicy/index.rst:121 msgid "In order to define which traffic goes into which class, you define filters (that is, the matching criteria). Packets go through these matching rules (as in the rules of a firewall) and, if a packet matches the filter, it is assigned to that class." -msgstr "In order to define which traffic goes into which class, you define filters (that is, the matching criteria). Packets go through these matching rules (as in the rules of a firewall) and, if a packet matches the filter, it is assigned to that class." +msgstr "Щоб визначити, який трафік належить до якого класу, ви визначаєте фільтри (тобто критерії відповідності). Пакети проходять ці правила відповідності (як правила брандмауера), і, якщо пакет відповідає фільтру, він призначається цьому класу." #: ../../configuration/trafficpolicy/index.rst:27 msgid "In order to have VyOS Traffic Control working you need to follow 2 steps:" -msgstr "In order to have VyOS Traffic Control working you need to follow 2 steps:" +msgstr "Щоб VyOS Traffic Control працював, потрібно виконати 2 кроки:" #: ../../configuration/interfaces/pppoe.rst:43 msgid "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." -msgstr "In order to have full control and make use of multiple static public IP addresses, your VyOS will have to initiate the PPPoE connection and control it. In order for this method to work, you will have to figure out how to make your DSL Modem/Router switch into a Bridged Mode so it only acts as a DSL Transceiver device to connect between the Ethernet link of your VyOS and the phone cable. Once your DSL Transceiver is in Bridge Mode, you should get no IP address from it. Please make sure you connect to the Ethernet Port 1 if your DSL Transceiver has a switch, as some of them only work this way." +msgstr "Щоб мати повний контроль і використовувати кілька статичних загальнодоступних IP-адрес, ваша VyOS повинна буде ініціювати з’єднання PPPoE і контролювати його. Щоб цей метод працював, вам доведеться з’ясувати, як перевести ваш DSL-модем/маршрутизатор у мостовий режим, щоб він діяв лише як пристрій прийому-передавача DSL для з’єднання між каналом Ethernet вашого VyOS і телефонним кабелем. Коли ваш трансивер DSL переходить у режим мосту, ви не повинні отримувати від нього IP-адресу. Будь ласка, переконайтеся, що ви підключилися до порту Ethernet 1, якщо ваш трансивер DSL має перемикач, оскільки деякі з них працюють лише таким чином." -#: ../../configuration/service/dhcp-server.rst:623 +#: ../../configuration/service/dhcp-server.rst:684 msgid "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." -msgstr "In order to map specific IPv6 addresses to specific hosts static mappings can be created. The following example explains the process." +msgstr "Щоб зіставити конкретні IPv6-адреси з певними хостами, можна створити статичні зіставлення. Наступний приклад пояснює процес." #: ../../configuration/interfaces/vxlan.rst:82 msgid "In order to minimize the flooding of ARP and ND messages in the VXLAN network, EVPN includes provisions :rfc:`7432#section-10` that allow participating VTEPs to suppress such messages in case they know the MAC-IP binding and can reply on behalf of the remote host." @@ -7049,15 +7947,19 @@ msgstr "In order to minimize the flooding of ARP and ND messages in the VXLAN ne #: ../../configuration/trafficpolicy/index.rst:402 msgid "In order to separate traffic, Fair Queue uses a classifier based on source address, destination address and source port. The algorithm enqueues packets to hash buckets based on those tree parameters. Each of these buckets should represent a unique flow. Because multiple flows may get hashed to the same bucket, the hashing algorithm is perturbed at configurable intervals so that the unfairness lasts only for a short while. Perturbation may however cause some inadvertent packet reordering to occur. An advisable value could be 10 seconds." -msgstr "In order to separate traffic, Fair Queue uses a classifier based on source address, destination address and source port. The algorithm enqueues packets to hash buckets based on those tree parameters. Each of these buckets should represent a unique flow. Because multiple flows may get hashed to the same bucket, the hashing algorithm is perturbed at configurable intervals so that the unfairness lasts only for a short while. Perturbation may however cause some inadvertent packet reordering to occur. An advisable value could be 10 seconds." +msgstr "Щоб розділити трафік, Fair Queue використовує класифікатор на основі адреси джерела, адреси призначення та вихідного порту. Алгоритм додає пакети до хеш-пакетів на основі цих параметрів дерева. Кожне з цих відер має представляти унікальний потік. Оскільки кілька потоків можуть бути хешовані в одному сегменті, алгоритм хешування порушується через настроювані інтервали, тому несправедливість триває лише короткий час. Проте збурення може спричинити випадкове перевпорядкування пакетів. Рекомендованим значенням може бути 10 секунд." #: ../../configuration/protocols/pim.rst:87 msgid "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." msgstr "In order to use PIM, it is necessary to configure a :abbr:`RP (Rendezvous Point)` for join messages to be sent to. Currently the only methodology to do this is via static rendezvous point commands." +#: ../../configuration/interfaces/ethernet.rst:111 +msgid "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." +msgstr "In order to use TSO/LRO with VMXNET3 adapters, the SG offloading option must also be enabled." + #: ../../configuration/interfaces/ethernet.rst:95 msgid "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." -msgstr "In order to use TSO/LRO with VMXNET3 adaters one must also enable the SG offloading option." +msgstr "Щоб використовувати TSO/LRO з адатерами VMXNET3, потрібно також увімкнути опцію розвантаження SG." #: ../../configuration/firewall/flowtables.rst:59 msgid "In order to use flowtables, the minimal configuration needed includes:" @@ -7065,119 +7967,127 @@ msgstr "In order to use flowtables, the minimal configuration needed includes:" #: ../../configuration/nat/nat44.rst:396 msgid "In other words, connection tracking has already observed the connection be closed and has transition the flow to INVALID to prevent attacks from attempting to reuse the connection." -msgstr "In other words, connection tracking has already observed the connection be closed and has transition the flow to INVALID to prevent attacks from attempting to reuse the connection." +msgstr "Іншими словами, відстеження з’єднання вже спостерігало закриття з’єднання та змінило потік на INVALID, щоб запобігти атакам від повторного використання з’єднання." #: ../../_include/interface-ip.txt:47 msgid "In other words it allows control of which cards (usually 1) will respond to an arp request." -msgstr "In other words it allows control of which cards (usually 1) will respond to an arp request." +msgstr "Іншими словами, це дозволяє контролювати, які картки (зазвичай 1) відповідатимуть на запит arp." #: ../../configuration/interfaces/openvpn.rst:55 msgid "In our example, we used the key name ``openvpn-1`` which we will reference in our configuration." -msgstr "In our example, we used the key name ``openvpn-1`` which we will reference in our configuration." +msgstr "У нашому прикладі ми використали назву ключа ``openvpn-1``, на яку ми будемо посилатися в нашій конфігурації." #: ../../configuration/nat/nat44.rst:527 msgid "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" -msgstr "In our example, we will be forwarding web server traffic to an internal web server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port 80. For other common port numbers, see: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" +msgstr "У нашому прикладі ми будемо перенаправляти трафік веб-сервера на внутрішній веб-сервер на 192.168.0.100. Трафік HTTP використовує протокол TCP на порту 80. Інші поширені номери портів див.: https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers" + +#: ../../configuration/vpn/ipsec.rst:411 +msgid "In our example the certificate name is called vyos:" +msgstr "In our example the certificate name is called vyos:" #: ../../configuration/trafficpolicy/index.rst:906 msgid "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." -msgstr "In principle, values must be :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." +msgstr "У принципі значення мають бути :code:`min-threshold` < :code:`max-threshold` < :code:`queue-limit`." #: ../../configuration/vpn/dmvpn.rst:22 msgid "In short, DMVPN provides the capability for creating a dynamic-mesh VPN network without having to pre-configure (static) all possible tunnel end-point peers." -msgstr "In short, DMVPN provides the capability for creating a dynamic-mesh VPN network without having to pre-configure (static) all possible tunnel end-point peers." +msgstr "Коротше кажучи, DMVPN надає можливість для створення динамічної сітчастої мережі VPN без необхідності попереднього налаштування (статичного) усіх можливих однорангових кінцевих точок тунелю." #: ../../configuration/protocols/ospf.rst:46 msgid "In some cases it may be more convenient to enable OSPF on a per interface/subnet basis :cfgcmd:`set protocols ospf interface <interface> area <x.x.x.x | x>`" -msgstr "In some cases it may be more convenient to enable OSPF on a per interface/subnet basis :cfgcmd:`set protocols ospf interface <interface> area <x.x.x.x | x>`" +msgstr "У деяких випадках може бути зручніше ввімкнути OSPF для кожного інтерфейсу/підмережі :cfgcmd:`встановити протоколи інтерфейс ospf<interface> область<x.x.x.x | x> `" #: ../../configuration/interfaces/openvpn.rst:33 msgid "In the VyOS CLI, a key point often overlooked is that rather than being configured using the `set vpn` stanza, OpenVPN is configured as a network interface using `set interfaces openvpn`." -msgstr "In the VyOS CLI, a key point often overlooked is that rather than being configured using the `set vpn` stanza, OpenVPN is configured as a network interface using `set interfaces openvpn`." +msgstr "У VyOS CLI ключовим моментом, який часто не помічають, є те, що OpenVPN налаштовується як мережевий інтерфейс замість того, щоб налаштовуватися за допомогою частини `set vpn`, за допомогою `set interfaces openvpn`." #: ../../configuration/trafficpolicy/index.rst:109 msgid "In the :ref:`creating_a_traffic_policy` section you will see that some of the policies use *classes*. Those policies let you distribute traffic into different classes according to different parameters you can choose. So, a class is just a specific type of traffic you select." -msgstr "In the :ref:`creating_a_traffic_policy` section you will see that some of the policies use *classes*. Those policies let you distribute traffic into different classes according to different parameters you can choose. So, a class is just a specific type of traffic you select." +msgstr "У розділі :ref:`creating_a_traffic_policy` ви побачите, що деякі політики використовують *класи*. Ці політики дозволяють вам розподіляти трафік на різні класи відповідно до різних параметрів, які ви можете вибрати. Отже, клас – це лише певний тип трафіку, який ви вибираєте." #: ../../configuration/vpn/l2tp.rst:27 msgid "In the above example, an external IP of 192.0.2.2 is assumed." -msgstr "In the above example, an external IP of 192.0.2.2 is assumed." +msgstr "У наведеному вище прикладі зовнішній IP-адреса 192.0.2.2." #: ../../configuration/protocols/bfd.rst:14 msgid "In the age of very fast networks, a second of unreachability may equal millions of lost packets. The idea behind BFD is to detect very quickly when a peer is down and take action extremely fast." -msgstr "In the age of very fast networks, a second of unreachability may equal millions of lost packets. The idea behind BFD is to detect very quickly when a peer is down and take action extremely fast." +msgstr "В епоху дуже швидких мереж секунда недоступності може дорівнювати мільйонам втрачених пакетів. Ідея BFD полягає в тому, щоб дуже швидко виявити, коли одноранговий не працює, і надзвичайно швидко вжити заходів." #: ../../configuration/interfaces/l2tpv3.rst:21 msgid "In the case of L2TPv3, the features lost are teletraffic engineering features considered important in MPLS. However, there is no reason these features could not be re-engineered in or on top of L2TPv3 in later products." -msgstr "In the case of L2TPv3, the features lost are teletraffic engineering features considered important in MPLS. However, there is no reason these features could not be re-engineered in or on top of L2TPv3 in later products." +msgstr "У випадку L2TPv3 втрачені функції є інженерними функціями телетрафіку, які вважаються важливими в MPLS. Однак немає причин, щоб ці функції не могли бути перероблені в L2TPv3 або поверх нього в пізніших продуктах." #: ../../configuration/trafficpolicy/index.rst:895 msgid "In the case the average queue size is between **min-threshold** and **max-threshold**, then an arriving packet would be either dropped or placed in the queue, it will depend on the defined **mark-probability**." -msgstr "In the case the average queue size is between **min-threshold** and **max-threshold**, then an arriving packet would be either dropped or placed in the queue, it will depend on the defined **mark-probability**." +msgstr "У випадку, якщо середній розмір черги знаходиться між **мінімальним порогом** і **максимальним порогом**, пакет, що надходить, буде або відкинутий, або розміщений у черзі, це залежатиме від визначеної **імовірності позначки **." #: ../../configuration/trafficpolicy/index.rst:564 msgid "In the case you want to apply some kind of **shaping** to your **inbound** traffic, check the ingress-shaping_ section." -msgstr "In the case you want to apply some kind of **shaping** to your **inbound** traffic, check the ingress-shaping_ section." +msgstr "Якщо ви хочете застосувати якийсь вид **формування** до свого **вхідного** трафіку, перевірте розділ ingress-shaping_." #: ../../configuration/trafficpolicy/index.rst:142 msgid "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." -msgstr "In the command above, we set the type of policy we are going to work with and the name we choose for it; a class (so that we can differentiate some traffic) and an identifiable number for that class; then we configure a matching rule (or filter) and a name for it." +msgstr "У наведеній вище команді ми встановлюємо тип політики, з якою будемо працювати, і назву, яку ми вибираємо для неї; клас (щоб ми могли відрізнити певний трафік) і ідентифікований номер для цього класу; потім ми налаштовуємо відповідне правило (або фільтр) і назву для нього." + +#: ../../configuration/vpn/ipsec.rst:564 +msgid "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." +msgstr "In the end, an XML structure is generated which can be saved as ``vyos.mobileconfig`` and sent to the device by E-Mail where it later can be imported." -#: ../../configuration/service/pppoe-server.rst:259 +#: ../../configuration/service/pppoe-server.rst:333 msgid "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." -msgstr "In the example above, the first 499 sessions connect without delay. PADO packets will be delayed 50 ms for connection from 500 to 999, this trick allows other PPPoE servers send PADO faster and clients will connect to other servers. Last command says that this PPPoE server can serve only 3000 clients." +msgstr "У наведеному вище прикладі перші 499 сеансів підключаються без затримки. Пакети PADO будуть затримані на 50 мс для підключення від 500 до 999, цей трюк дозволяє іншим серверам PPPoE надсилати PADO швидше, і клієнти підключатимуться до інших серверів. Остання команда говорить, що цей сервер PPPoE може обслуговувати лише 3000 клієнтів." #: ../../configuration/nat/nat44.rst:333 msgid "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" -msgstr "In the example used for the Quick Start configuration above, we demonstrate the following configuration:" +msgstr "У прикладі, який використовується для налаштування швидкого запуску вище, ми демонструємо таку конфігурацію:" -#: ../../configuration/system/login.rst:399 +#: ../../configuration/system/login.rst:403 msgid "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." -msgstr "In the following example, both `User1` and `User2` will be able to SSH into VyOS as user ``vyos`` using their very own keys. `User1` is restricted to only be able to connect from a single IP address. In addition if password base login is wanted for the ``vyos`` user a 2FA/MFA keycode is required in addition to the password." +msgstr "У наступному прикладі і `User1`, і `User2` зможуть підключитися до VyOS через SSH як користувач ``vyos`` за допомогою власних ключів. `User1` може підключатися лише з однієї IP-адреси. Крім того, якщо для користувача ``vyos`` потрібен вхід на основі пароля, окрім пароля потрібен код ключа 2FA/MFA." #: ../../configuration/interfaces/wireguard.rst:272 msgid "In the following example, the IPs for the remote clients are defined in the peers. This allows the peers to interact with one another. In comparison to the site-to-site example the ``persistent-keepalive`` flag is set to 15 seconds to assure the connection is kept alive. This is mainly relevant if one of the peers is behind NAT and can't be connected to if the connection is lost. To be effective this value needs to be lower than the UDP timeout." -msgstr "In the following example, the IPs for the remote clients are defined in the peers. This allows the peers to interact with one another. In comparison to the site-to-site example the ``persistent-keepalive`` flag is set to 15 seconds to assure the connection is kept alive. This is mainly relevant if one of the peers is behind NAT and can't be connected to if the connection is lost. To be effective this value needs to be lower than the UDP timeout." +msgstr "У наступному прикладі IP-адреси для віддалених клієнтів визначено в однорангових вузлах. Це дозволяє одноліткам взаємодіяти один з одним. Порівняно з прикладом між сайтами, прапорець ``persistent-keepalive`` встановлено на 15 секунд, щоб гарантувати, що з’єднання підтримується. Це головним чином актуально, якщо один із однорангових вузлів знаходиться за NAT і до нього неможливо підключитися, якщо з’єднання втрачено. Щоб діяти, це значення має бути нижчим за час очікування UDP." #: ../../configuration/highavailability/index.rst:118 msgid "In the following example, when VLAN9 transitions, VLAN20 will also transition:" -msgstr "In the following example, when VLAN9 transitions, VLAN20 will also transition:" +msgstr "У наступному прикладі, коли VLAN9 переходить, VLAN20 також переходить:" #: ../../configuration/protocols/pim.rst:219 msgid "In the following example we can see a basic multicast setup:" -msgstr "In the following example we can see a basic multicast setup:" +msgstr "У наступному прикладі ми можемо побачити базове налаштування багатоадресної передачі:" #: ../../configuration/interfaces/tunnel.rst:66 msgid "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." -msgstr "In the future this is expected to be a very useful protocol (though there are `other proposals`_)." +msgstr "Очікується, що в майбутньому це буде дуже корисний протокол (хоча є `інші пропозиції`_)." -#: ../../configuration/highavailability/index.rst:400 +#: ../../configuration/highavailability/index.rst:410 msgid "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" -msgstr "In the next example all traffic destined to ``203.0.113.1`` and port ``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and ``192.0.2.12`` to port ``80``" +msgstr "У наступному прикладі весь трафік, спрямований на ``203.0.113.1`` і порт ``8280``, протокол TCP, балансується між 2 реальними серверами ``192.0.2.11`` і ``192.0.2.12`` на порт ``80 ``" #: ../../configuration/system/default-route.rst:7 msgid "In the past (VyOS 1.1) used a gateway-address configured under the system tree (:cfgcmd:`set system gateway-address <address>`), this is no longer supported and existing configurations are migrated to the new CLI command." -msgstr "In the past (VyOS 1.1) used a gateway-address configured under the system tree (:cfgcmd:`set system gateway-address <address>`), this is no longer supported and existing configurations are migrated to the new CLI command." +msgstr "У минулому (VyOS 1.1) використовував адресу шлюзу, налаштовану в дереві системи (:cfgcmd:`встановити адресу шлюзу системи<address> `), це більше не підтримується, і наявні конфігурації перенесено до нової команди CLI." #: ../../configuration/system/acceleration.rst:7 msgid "In this command tree, all hardware acceleration options will be handled. At the moment only `Intel® QAT`_ is supported" -msgstr "In this command tree, all hardware acceleration options will be handled. At the moment only `Intel® QAT`_ is supported" +msgstr "У цьому дереві команд будуть оброблені всі параметри апаратного прискорення. На даний момент підтримується лише `Intel® QAT`_" #: ../../configuration/system/name-server.rst:30 msgid "In this example, some *OpenNIC* servers are used, two IPv4 addresses and two IPv6 addresses:" -msgstr "In this example, some *OpenNIC* servers are used, two IPv4 addresses and two IPv6 addresses:" +msgstr "У цьому прикладі використовуються деякі сервери *OpenNIC*, дві адреси IPv4 і дві адреси IPv6:" #: ../../configuration/nat/nat44.rst:358 msgid "In this example, we use **masquerade** as the translation address instead of an IP address. The **masquerade** target is effectively an alias to say \"use whatever IP address is on the outgoing interface\", rather than a statically configured IP address. This is useful if you use DHCP for your outgoing interface and do not know what the external address will be." -msgstr "In this example, we use **masquerade** as the translation address instead of an IP address. The **masquerade** target is effectively an alias to say \"use whatever IP address is on the outgoing interface\", rather than a statically configured IP address. This is useful if you use DHCP for your outgoing interface and do not know what the external address will be." +msgstr "У цьому прикладі ми використовуємо **masquerade** як адресу перекладу замість IP-адреси. Ціль **masquerade** фактично є псевдонімом, який означає «використовувати будь-яку IP-адресу вихідного інтерфейсу», а не статично налаштовану IP-адресу. Це корисно, якщо ви використовуєте DHCP для вихідного інтерфейсу і не знаєте, якою буде зовнішня адреса." #: ../../configuration/nat/nat44.rst:518 msgid "In this example, we will be using the example Quick Start configuration above as a starting point." -msgstr "In this example, we will be using the example Quick Start configuration above as a starting point." +msgstr "У цьому прикладі ми будемо використовувати приклад конфігурації швидкого запуску вище як відправну точку." -#: ../../configuration/highavailability/index.rst:430 +#: ../../configuration/highavailability/index.rst:440 msgid "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." -msgstr "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." +msgstr "У цьому прикладі весь трафік, спрямований на порти "80, 2222, 8888", протокол TCP позначається як fwmark "111" і збалансований між 2 реальними серверами. Порт "0" необхідний, якщо використовується кілька портів." #: ../../configuration/firewall/index.rst:36 msgid "In this example image, a simplifed traffic flow is shown to help provide context to the terms of `forward`, `input`, and `output` for the new firewall CLI format." @@ -7185,15 +8095,15 @@ msgstr "In this example image, a simplifed traffic flow is shown to help provide #: ../../configuration/interfaces/openvpn.rst:334 msgid "In this example we will use the most complicated case: a setup where each client is a router that has its own subnet (think HQ and branch offices), since simpler setups are subsets of it." -msgstr "In this example we will use the most complicated case: a setup where each client is a router that has its own subnet (think HQ and branch offices), since simpler setups are subsets of it." +msgstr "У цьому прикладі ми використаємо найскладніший випадок: налаштування, де кожен клієнт є маршрутизатором із власною підмережею (наприклад, штаб-квартира та філії), оскільки простіші налаштування є її підмножинами." #: ../../configuration/interfaces/pppoe.rst:30 msgid "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." -msgstr "In this method, the DSL Modem/Router connects to the ISP for you with your credentials preprogrammed into the device. This gives you an :rfc:`1918` address, such as ``192.168.1.0/24`` by default." +msgstr "У цьому методі DSL-модем/маршрутизатор підключається до Інтернет-провайдера за вас за допомогою облікових даних, попередньо запрограмованих у пристрої. Це дає вам адресу :rfc:`1918`, наприклад ``192.168.1.0/24`` за замовчуванням." -#: ../../configuration/service/dns.rst:165 +#: ../../configuration/service/dns.rst:246 msgid "In this scenario:" -msgstr "In this scenario:" +msgstr "У цьому сценарії:" #: ../../configuration/firewall/ipv4.rst:13 msgid "In this section there's useful information of all firewall configuration that can be done regarding IPv4, and appropiate op-mode commands. Configuration commands covered in this section:" @@ -7225,15 +8135,15 @@ msgstr "In this section you can find all useful firewall op-mode commands." #: ../../configuration/service/webproxy.rst:95 msgid "In transparent proxy mode, all traffic arriving on port 80 and destined for the Internet is automatically forwarded through the proxy. This allows immediate proxy forwarding without configuring client browsers." -msgstr "In transparent proxy mode, all traffic arriving on port 80 and destined for the Internet is automatically forwarded through the proxy. This allows immediate proxy forwarding without configuring client browsers." +msgstr "У режимі прозорого проксі весь трафік, що надходить на порт 80 і призначений для Інтернету, автоматично пересилається через проксі. Це дозволяє негайно пересилати проксі-сервер без налаштування клієнтських браузерів." #: ../../configuration/service/snmp.rst:31 msgid "In typical uses of SNMP, one or more administrative computers called managers have the task of monitoring or managing a group of hosts or devices on a computer network. Each managed system executes a software component called an agent which reports information via SNMP to the manager." -msgstr "In typical uses of SNMP, one or more administrative computers called managers have the task of monitoring or managing a group of hosts or devices on a computer network. Each managed system executes a software component called an agent which reports information via SNMP to the manager." +msgstr "У типовому використанні SNMP один або кілька адміністративних комп’ютерів, які називаються менеджерами, виконують завдання моніторингу або керування групою хостів або пристроїв у комп’ютерній мережі. Кожна керована система виконує програмний компонент, який називається агентом, який повідомляє інформацію через SNMP менеджеру." #: ../../configuration/firewall/zone.rst:13 msgid "In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. A Zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network." -msgstr "In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. A Zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network." +msgstr "У політиці на основі зони інтерфейси призначаються зонам, а політика перевірки застосовується до трафіку, що переміщується між зонами, і виконується відповідно до правил брандмауера. Зона — це група інтерфейсів, які мають схожі функції чи особливості. Він встановлює межі безпеки мережі. Зона визначає межу, де трафік підлягає обмеженням політики, коли він перетинає інший регіон мережі." #: ../../configuration/firewall/zone.rst:43 msgid "In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. A zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network." @@ -7241,43 +8151,43 @@ msgstr "In zone-based policy, interfaces are assigned to zones, and inspection p #: ../../configuration/loadbalancing/wan.rst:201 msgid "Inbound connections to a WAN interface can be improperly handled when the reply is sent back to the client." -msgstr "Inbound connections to a WAN interface can be improperly handled when the reply is sent back to the client." +msgstr "Вхідні підключення до інтерфейсу WAN можуть бути неправильно оброблені, коли відповідь надсилається назад клієнту." #: ../../configuration/interfaces/bonding.rst:83 msgid "Incoming traffic is received by the current slave. If the receiving slave fails, another slave takes over the MAC address of the failed receiving slave." -msgstr "Incoming traffic is received by the current slave. If the receiving slave fails, another slave takes over the MAC address of the failed receiving slave." +msgstr "Вхідний трафік отримує поточний підлеглий пристрій. Якщо підпорядкований пристрій-одержувач виходить з ладу, інший підлеглий пристрій приймає MAC-адресу підпорядкованого пристрою-одержувача, який отримав збій." #: ../../configuration/interfaces/wireless.rst:272 msgid "Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octets)" -msgstr "Increase Maximum MPDU length to 7991 or 11454 octets (default 3895 octets)" +msgstr "Збільшити максимальну довжину MPDU до 7991 або 11454 октетів (за замовчуванням 3895 октетів)" #: ../../configuration/loadbalancing/reverse-proxy.rst:68 msgid "Indication" -msgstr "Indication" +msgstr "Індикація" -#: ../../configuration/service/dhcp-server.rst:64 +#: ../../configuration/service/dhcp-server.rst:80 msgid "Individual Client Subnet" -msgstr "Individual Client Subnet" +msgstr "Індивідуальна підмережа клієнта" #: ../../configuration/service/dhcp-server.rst:49 msgid "Inform client that the DNS server can be found at `<address>`." -msgstr "Inform client that the DNS server can be found at `<address>`." +msgstr "Повідомте клієнта, що DNS-сервер можна знайти за адресою `<address> `." #: ../../configuration/service/lldp.rst:20 msgid "Information gathered with LLDP is stored in the device as a :abbr:`MIB (Management Information Database)` and can be queried with :abbr:`SNMP (Simple Network Management Protocol)` as specified in :rfc:`2922`. The topology of an LLDP-enabled network can be discovered by crawling the hosts and querying this database. Information that may be retrieved include:" -msgstr "Information gathered with LLDP is stored in the device as a :abbr:`MIB (Management Information Database)` and can be queried with :abbr:`SNMP (Simple Network Management Protocol)` as specified in :rfc:`2922`. The topology of an LLDP-enabled network can be discovered by crawling the hosts and querying this database. Information that may be retrieved include:" +msgstr "Інформація, зібрана за допомогою LLDP, зберігається на пристрої як :abbr:`MIB (інформаційна база даних керування)` і може бути запитана за допомогою :abbr:`SNMP (простого протоколу керування мережею)`, як зазначено в :rfc:`2922`. Топологію мережі з підтримкою LLDP можна виявити шляхом сканування хостів і запиту до цієї бази даних. Інформація, яку можна отримати, включає:" #: ../../configuration/system/syslog.rst:189 msgid "Informational" -msgstr "Informational" +msgstr "Інформаційний" #: ../../configuration/system/syslog.rst:189 msgid "Informational messages" -msgstr "Informational messages" +msgstr "Інформаційні повідомлення" #: ../../configuration/nat/nat66.rst:100 msgid "Input from `eth0` network interface" -msgstr "Input from `eth0` network interface" +msgstr "Введення з мережевого інтерфейсу `eth0`" #: ../../configuration/firewall/bridge.rst:390 msgid "Inspect logs:" @@ -7285,7 +8195,7 @@ msgstr "Inspect logs:" #: ../../configuration/vpn/pptp.rst:32 msgid "Install the client software via apt and execute pptpsetup to generate the configuration." -msgstr "Install the client software via apt and execute pptpsetup to generate the configuration." +msgstr "Встановіть клієнтське програмне забезпечення через apt і виконайте pptpsetup, щоб створити конфігурацію." #: ../../configuration/interfaces/pppoe.rst:218 #: ../../configuration/interfaces/pppoe.rst:264 @@ -7293,19 +8203,19 @@ msgstr "Install the client software via apt and execute pptpsetup to generate th #: ../../_include/interface-ip.txt:15 #: ../../_include/interface-ipv6.txt:71 msgid "Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to automatically set the proper value." -msgstr "Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to automatically set the proper value." +msgstr "Замість числового значення MSS можна використовувати `clamp-mss-to-pmtu` для автоматичного встановлення належного значення." #: ../../configuration/vpn/openconnect.rst:61 msgid "Instead of password only authentication, 2FA password authentication + OTP key can be used. Alternatively, OTP authentication only, without a password, can be used. To do this, an OTP configuration must be added to the configuration above:" -msgstr "Instead of password only authentication, 2FA password authentication + OTP key can be used. Alternatively, OTP authentication only, without a password, can be used. To do this, an OTP configuration must be added to the configuration above:" +msgstr "Замість автентифікації лише паролем можна використовувати 2FA автентифікацію пароля + ключ OTP. Крім того, можна використовувати лише автентифікацію OTP без пароля. Для цього до наведеної вище конфігурації потрібно додати одноразовий пароль:" #: ../../_include/interface-dhcp-options.txt:19 msgid "Instead of sending the real system hostname to the DHCP server, overwrite the host-name with this given-value." -msgstr "Instead of sending the real system hostname to the DHCP server, overwrite the host-name with this given-value." +msgstr "Замість того, щоб надсилати справжнє ім’я хоста системи на сервер DHCP, перезапишіть ім’я хоста цим заданим значенням." #: ../../configuration/service/snmp.rst:137 msgid "Integrity – Message integrity to ensure that a packet has not been tampered while in transit including an optional packet replay protection mechanism." -msgstr "Integrity – Message integrity to ensure that a packet has not been tampered while in transit including an optional packet replay protection mechanism." +msgstr "Цілісність – цілісність повідомлення, яка гарантує, що пакет не було підроблено під час передачі, включаючи додатковий механізм захисту від повторного відтворення пакетів." #: ../../configuration/interfaces/wireless.rst:602 msgid "Intel AX200" @@ -7317,37 +8227,41 @@ msgstr "Intel® QAT" #: ../../configuration/interfaces/virtual-ethernet.rst:94 msgid "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" -msgstr "Interconnect the global VRF with vrf \"red\" using the veth10 <-> veth 11 pair" +msgstr "З’єднайте глобальний VRF із vrf «red» за допомогою пари veth10 <-> veth 11" + +#: ../../configuration/service/ids.rst:96 +msgid "Interface **eth0** used to connect to upstream." +msgstr "Interface **eth0** used to connect to upstream." #: ../../configuration/protocols/isis.rst:146 #: ../../configuration/protocols/ospf.rst:356 #: ../../configuration/protocols/ospf.rst:1139 msgid "Interface Configuration" -msgstr "Interface Configuration" +msgstr "Конфігурація інтерфейсу" #: ../../configuration/firewall/groups.rst:66 msgid "Interface Groups" msgstr "Interface Groups" -#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:87 msgid "Interface Routes" -msgstr "Interface Routes" +msgstr "Інтерфейсні маршрути" #: ../../configuration/protocols/igmp-proxy.rst:63 msgid "Interface `eth1` LAN is behind NAT. In order to subscribe `10.0.0.0/23` subnet multicast which is in `eth0` WAN we need to configure igmp-proxy." -msgstr "Interface `eth1` LAN is behind NAT. In order to subscribe `10.0.0.0/23` subnet multicast which is in `eth0` WAN we need to configure igmp-proxy." +msgstr "Інтерфейс `eth1` LAN знаходиться за NAT. Щоб підписатися на групову розсилку підмережі `10.0.0.0/23`, яка знаходиться в `eth0` WAN, нам потрібно налаштувати igmp-proxy." #: ../../configuration/interfaces/wireguard.rst:126 msgid "Interface configuration" -msgstr "Interface configuration" +msgstr "Конфігурація інтерфейсу" #: ../../configuration/service/dhcp-relay.rst:36 msgid "Interface for DHCP Relay Agent to forward requests out." -msgstr "Interface for DHCP Relay Agent to forward requests out." +msgstr "Інтерфейс для агента ретрансляції DHCP для пересилання запитів." #: ../../configuration/service/dhcp-relay.rst:32 msgid "Interface for DHCP Relay Agent to listen for requests." -msgstr "Interface for DHCP Relay Agent to listen for requests." +msgstr "Інтерфейс для агента ретрансляції DHCP для прослуховування запитів." #: ../../configuration/protocols/pim.rst:133 #: ../../configuration/protocols/pim.rst:186 @@ -7356,41 +8270,49 @@ msgstr "Interface specific commands" #: ../../configuration/service/conntrack-sync.rst:71 msgid "Interface to use for syncing conntrack entries." -msgstr "Interface to use for syncing conntrack entries." +msgstr "Інтерфейс для синхронізації записів conntrack." #: ../../configuration/interfaces/vxlan.rst:114 msgid "Interface used for VXLAN underlay. This is mandatory when using VXLAN via a multicast network. VXLAN traffic will always enter and exit this interface." -msgstr "Interface used for VXLAN underlay. This is mandatory when using VXLAN via a multicast network. VXLAN traffic will always enter and exit this interface." +msgstr "Інтерфейс, який використовується для підкладки VXLAN. Це є обов’язковим при використанні VXLAN через багатоадресну мережу. Трафік VXLAN завжди входитиме та виходитиме з цього інтерфейсу." #: ../../configuration/loadbalancing/wan.rst:62 msgid "Interface weight" -msgstr "Interface weight" +msgstr "Вага інтерфейсу" #: ../../configuration/interfaces/index.rst:3 -#: ../../configuration/vrf/index.rst:71 +#: ../../configuration/vrf/index.rst:90 msgid "Interfaces" -msgstr "Interfaces" +msgstr "Інтерфейси" #: ../../configuration/loadbalancing/wan.rst:38 msgid "Interfaces, their weight and the type of traffic to be balanced are defined in numbered balancing rule sets. The rule sets are executed in numerical order against outgoing packets. In case of a match the packet is sent through an interface specified in the matching rule. If a packet doesn't match any rule it is sent by using the system routing table. Rule numbers can't be changed." -msgstr "Interfaces, their weight and the type of traffic to be balanced are defined in numbered balancing rule sets. The rule sets are executed in numerical order against outgoing packets. In case of a match the packet is sent through an interface specified in the matching rule. If a packet doesn't match any rule it is sent by using the system routing table. Rule numbers can't be changed." +msgstr "Інтерфейси, їх вага та тип трафіку, що балансується, визначаються в пронумерованих наборах правил балансування. Набори правил виконуються в порядку номерів для вихідних пакетів. У разі збігу пакет надсилається через інтерфейс, указаний у правилі відповідності. Якщо пакет не відповідає жодному правилу, він надсилається за допомогою системної таблиці маршрутизації. Номери правил не можна змінити." #: ../../configuration/protocols/babel.rst:63 #: ../../configuration/protocols/rip.rst:166 msgid "Interfaces Configuration" -msgstr "Interfaces Configuration" +msgstr "Конфігурація інтерфейсів" #: ../../configuration/service/dhcp-relay.rst:23 msgid "Interfaces that participate in the DHCP relay process. If this command is used, at least two entries of it are required: one for the interface that captures the dhcp-requests, and one for the interface to forward such requests. A warning message will be shown if this command is used, since new implementations should use ``listen-interface`` and ``upstream-interface``." -msgstr "Interfaces that participate in the DHCP relay process. If this command is used, at least two entries of it are required: one for the interface that captures the dhcp-requests, and one for the interface to forward such requests. A warning message will be shown if this command is used, since new implementations should use ``listen-interface`` and ``upstream-interface``." +msgstr "Інтерфейси, які беруть участь у процесі ретрансляції DHCP. Якщо використовується ця команда, потрібно принаймні два її записи: один для інтерфейсу, який фіксує dhcp-запити, і один для інтерфейсу для пересилання таких запитів. У разі використання цієї команди буде показано попередження, оскільки нові реалізації мають використовувати ``listen-interface`` і ``upstream-interface``." #: ../../configuration/service/dns.rst:26 msgid "Interfaces whose DHCP client nameservers to forward requests to." -msgstr "Interfaces whose DHCP client nameservers to forward requests to." +msgstr "Інтерфейси, на чиї клієнтські сервери імен DHCP пересилати запити." + +#: ../../configuration/service/ids.rst:105 +msgid "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." +msgstr "Internal attack: an attack from the internal network (generated by a customer) towards the internet is identify. In this case, all connections from this particular IP/Customer will be blocked." #: ../../configuration/system/flow-accounting.rst:70 msgid "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" -msgstr "Internally, in flow-accounting processes exist a buffer for data exchanging between core process and plugins (each export target is a separated plugin). If you have high traffic levels or noted some problems with missed records or stopping exporting, you may try to increase a default buffer size (10 MiB) with the next command:" +msgstr "Всередині процесів обліку потоків існує буфер для обміну даними між основним процесом і плагінами (кожна мета експорту є окремим плагіном). Якщо у вас високий рівень трафіку або ви помітили деякі проблеми з пропущеними записами чи зупинкою експорту, ви можете спробувати збільшити розмір буфера за замовчуванням (10 МБ) за допомогою наступної команди:" + +#: ../../configuration/vpn/ipsec.rst:374 +msgid "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." +msgstr "Internet Key Exchange version 2, IKEv2 for short, is a request/response protocol developed by both Cisco and Microsoft. It is used to establish and secure IPv4/IPv6 connections, be it a site-to-site VPN or from a road-warrior connecting to a hub site. IKEv2, when run in point-to-multipoint, or remote-access/road-warrior mode, secures the server-side with another layer by using an x509 signed server certificate." #: ../../configuration/vpn/remoteaccess_ipsec.rst:6 msgid "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based on IPsec, that establishes a secure VPN communication between VPN devices, and defines negotiation and authentication processes for IPsec security associations (SAs). It is often known as IKEv2/IPSec or IPSec IKEv2 remote-access — or road-warriors as others call it." @@ -7398,76 +8320,76 @@ msgstr "Internet Key Exchange version 2 (IKEv2) is a tunneling protocol, based o #: ../../configuration/trafficpolicy/index.rst:791 msgid "Internetwork Control" -msgstr "Internetwork Control" +msgstr "Мережевий контроль" #: ../../configuration/service/router-advert.rst:1 msgid "Interval" -msgstr "Interval" +msgstr "Інтервал" #: ../../configuration/protocols/bfd.rst:53 msgid "Interval in milliseconds" -msgstr "Interval in milliseconds" +msgstr "Інтервал у мілісекундах" #: ../../configuration/service/salt-minion.rst:37 msgid "Interval in minutes between updates (default: 60)" -msgstr "Interval in minutes between updates (default: 60)" +msgstr "Інтервал у хвилинах між оновленнями (за замовчуванням: 60)" -#: ../../configuration/protocols/bgp.rst:906 +#: ../../configuration/protocols/bgp.rst:928 msgid "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." -msgstr "Introducing route reflectors removes the need for the full-mesh. When you configure a route reflector you have to tell the router whether the other IBGP router is a client or non-client. A client is an IBGP router that the route reflector will “reflect” routes to, the non-client is just a regular IBGP neighbor. Route reflectors mechanism is described in :rfc:`4456` and updated by :rfc:`7606`." +msgstr "Запровадження рефлекторів маршруту усуває потребу в повній сітці. Коли ви налаштовуєте рефлектор маршруту, ви повинні повідомити маршрутизатору, чи є інший маршрутизатор IBGP клієнтом чи не клієнтом. Клієнт — це маршрутизатор IBGP, до якого рефлектор маршрутів «відображатиме» маршрути, а неклієнт — це звичайний сусід IBGP. Механізм відбивачів маршрутів описано в :rfc:`4456` і оновлено :rfc:`7606`." #: ../../configuration/interfaces/openvpn.rst:22 msgid "It's easy to setup and offers very flexible split tunneling" -msgstr "It's easy to setup and offers very flexible split tunneling" +msgstr "Його легко налаштувати та пропонує дуже гнучке розділене тунелювання" #: ../../configuration/interfaces/tunnel.rst:52 msgid "It's not likely that anyone will need it any time soon, but it does exist." -msgstr "It's not likely that anyone will need it any time soon, but it does exist." +msgstr "Навряд чи вона комусь знадобиться найближчим часом, але вона існує." #: ../../configuration/interfaces/openvpn.rst:28 msgid "It's slower than IPsec due to higher protocol overhead and the fact it runs in user mode while IPsec, on Linux, is in kernel mode" -msgstr "It's slower than IPsec due to higher protocol overhead and the fact it runs in user mode while IPsec, on Linux, is in kernel mode" +msgstr "Він повільніший за IPsec через вищі накладні витрати на протокол і той факт, що він працює в режимі користувача, тоді як IPsec у Linux працює в режимі ядра" #: ../../configuration/firewall/flowtables.rst:167 msgid "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" msgstr "It's time to check conntrack table, to see if any connection was accepted, and if was properly offloaded" -#: ../../configuration/system/option.rst:111 +#: ../../configuration/system/option.rst:141 msgid "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." -msgstr "It disables transparent huge pages, and automatic NUMA balancing. It also uses cpupower to set the performance cpufreq governor, and requests a cpu_dma_latency value of 1. It also sets busy_read and busy_poll times to 50 us, and tcp_fastopen to 3." +msgstr "Він вимикає прозорі величезні сторінки та автоматичне балансування NUMA. Він також використовує cpupower для встановлення регулятора продуктивності cpufreq і запитує значення cpu_dma_latency, що дорівнює 1. Він також встановлює час busy_read і busy_poll на 50 us, а tcp_fastopen — на 3." -#: ../../configuration/system/option.rst:102 +#: ../../configuration/system/option.rst:132 msgid "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." -msgstr "It enables transparent huge pages, and uses cpupower to set the performance cpufreq governor. It also sets ``kernel.sched_min_granularity_ns`` to 10 us, ``kernel.sched_wakeup_granularity_ns`` to 15 uss, and ``vm.dirty_ratio`` to 40%." +msgstr "Він забезпечує прозорі величезні сторінки та використовує cpupower для встановлення регулятора продуктивності cpufreq. Він також встановлює ``kernel.sched_min_granularity_ns`` значення 10 uss, ``kernel.sched_wakeup_granularity_ns`` значення 15 uss`` і ``vm.dirty_ratio`` значення 40%." #: ../../configuration/interfaces/wireguard.rst:33 msgid "It generates the keypair, which includes the public and private parts. The key is not stored on the system - only a keypair is generated." -msgstr "It generates the keypair, which includes the public and private parts. The key is not stored on the system - only a keypair is generated." +msgstr "Він генерує пару ключів, яка включає публічну та закриту частини. Ключ не зберігається в системі – генерується лише пара ключів." #: ../../configuration/protocols/ospf.rst:532 #: ../../configuration/protocols/ospf.rst:1244 msgid "It helps to support as HELPER only for planned restarts." -msgstr "It helps to support as HELPER only for planned restarts." +msgstr "Це допомагає підтримувати як HELPER лише для запланованих перезапусків." #: ../../configuration/firewall/zone.rst:106 msgid "It helps to think of the syntax as: (see below). The 'rule-set' should be written from the perspective of: *Source Zone*-to->*Destination Zone*" -msgstr "It helps to think of the syntax as: (see below). The 'rule-set' should be written from the perspective of: *Source Zone*-to->*Destination Zone*" +msgstr "Це допомагає уявити синтаксис як: (див. нижче). «Набір правил» має бути написаний з точки зору: *Зона джерела*-до->*Зона призначення*" #: ../../configuration/vpn/openconnect.rst:93 msgid "It is compatible with Cisco (R) AnyConnect (R) clients." -msgstr "It is compatible with Cisco (R) AnyConnect (R) clients." +msgstr "Він сумісний із клієнтами Cisco (R) AnyConnect (R)." -#: ../../configuration/service/dhcp-server.rst:590 +#: ../../configuration/service/dhcp-server.rst:649 msgid "It is connected to ``eth1``" -msgstr "It is connected to ``eth1``" +msgstr "Він підключений до ``eth1``" -#: ../../configuration/system/login.rst:42 +#: ../../configuration/system/login.rst:46 msgid "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." -msgstr "It is highly recommended to use SSH key authentication. By default there is only one user (``vyos``), and you can assign any number of keys to that user. You can generate a ssh key with the ``ssh-keygen`` command on your local machine, which will (by default) save it as ``~/.ssh/id_rsa.pub``." +msgstr "Настійно рекомендується використовувати автентифікацію ключа SSH. За замовчуванням існує лише один користувач (``vyos``), і ви можете призначити цьому користувачеві будь-яку кількість ключів. Ви можете створити ключ ssh за допомогою команди ``ssh-keygen`` на вашій локальній машині, яка (за умовчанням) збереже його як ``~/.ssh/id_rsa.pub``." #: ../../configuration/protocols/mpls.rst:59 msgid "It is highly recommended to use the same address for both the LDP router-id and the discovery transport address, but for VyOS MPLS LDP to work both parameters must be explicitly set in the configuration." -msgstr "It is highly recommended to use the same address for both the LDP router-id and the discovery transport address, but for VyOS MPLS LDP to work both parameters must be explicitly set in the configuration." +msgstr "Настійно рекомендується використовувати ту саму адресу як для ідентифікатора маршрутизатора LDP, так і для транспортної адреси виявлення, але для роботи VyOS MPLS LDP обидва параметри мають бути явно встановлені в конфігурації." #: ../../configuration/nat/nat44.rst:574 msgid "It is important to note that when creating firewall rules, the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." @@ -7475,112 +8397,125 @@ msgstr "It is important to note that when creating firewall rules, the DNAT tran #: ../../configuration/nat/nat44.rst:549 msgid "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." -msgstr "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." +msgstr "Важливо зауважити, що під час створення правил брандмауера трансляція DNAT відбувається **до** того, як трафік пройде брандмауер. Іншими словами, адресу призначення вже перетворено на 192.168.0.100." -#: ../../configuration/vrf/index.rst:505 +#: ../../configuration/vrf/index.rst:524 msgid "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." -msgstr "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." +msgstr "Недостатньо лише налаштувати VRF L3VPN, але також потрібно підтримувати VRF L3VPN. Для обслуговування VRF L3VPN застосовуються такі робочі команди." -#: ../../configuration/vrf/index.rst:113 +#: ../../configuration/vrf/index.rst:132 msgid "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." -msgstr "It is not sufficient to only configure a VRF but VRFs must be maintained, too. For VRF maintenance the following operational commands are in place." +msgstr "Недостатньо лише налаштувати VRF, але VRF також потрібно підтримувати. Для технічного обслуговування VRF діють такі робочі команди." -#: ../../configuration/interfaces/bridge.rst:136 +#: ../../configuration/interfaces/bridge.rst:145 msgid "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" -msgstr "It is not valid to use the `vif 1` option for VLAN aware bridges because VLAN aware bridges assume that all unlabeled packets belong to the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1" +msgstr "Неможливо використовувати опцію `vif 1` для мостів з підтримкою VLAN, оскільки мости з підтримкою VLAN припускають, що всі пакети без міток належать члену VLAN 1 за замовчуванням і що ідентифікатор VLAN батьківського інтерфейсу мосту завжди дорівнює 1" -#: ../../configuration/system/login.rst:93 +#: ../../configuration/system/login.rst:97 msgid "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." -msgstr "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." +msgstr "Можна підвищити безпеку автентифікації за допомогою функції :abbr:`2FA (двофакторна автентифікація)`/:abbr:`MFA (багатофакторна автентифікація)` разом із :abbr:`OTP (One-Time-Pad) ` на VyOS. :abbr:`2FA (двофакторна автентифікація)`/:abbr:`MFA (багатофакторна автентифікація)` налаштовується окремо для кожного користувача. Якщо для користувача налаштовано ключ OTP, 2FA/MFA автоматично вмикається для цього конкретного користувача. Якщо користувач не має налаштованого ключа OTP, перевірка 2FA/MFA для цього користувача не проводиться." -#: ../../configuration/vrf/index.rst:496 +#: ../../configuration/vrf/index.rst:515 msgid "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." msgstr "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." +#: ../../configuration/protocols/static.rst:64 +#: ../../configuration/protocols/static.rst:132 +msgid "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." +msgstr "It is possible to specify a static route for ipv6 prefixes using an SRv6 segments instruction. The `/` separator can be used to specify multiple segment instructions." + #: ../../configuration/service/conntrack-sync.rst:30 msgid "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" -msgstr "It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the \"peer\" keywork after the specificed interface, as in the following example:" +msgstr "Для синхронізації трафіку відстеження можна використовувати Multicast або Unicast. Більшість наведених нижче прикладів показують групову розсилку, але одноадресну розсилку можна вказати за допомогою ключа «рівноправний» після зазначеного інтерфейсу, як у наступному прикладі:" #: ../../configuration/vpn/dmvpn.rst:112 msgid "It is very easy to misconfigure multicast repeating if you have multiple NHSes." -msgstr "It is very easy to misconfigure multicast repeating if you have multiple NHSes." +msgstr "Дуже легко неправильно налаштувати багатоадресний повтор, якщо у вас є кілька NHS." #: ../../configuration/interfaces/openvpn.rst:18 msgid "It uses a single TCP or UDP connection and does not rely on packet source addresses, so it will work even through a double NAT: perfect for public hotspots and such" -msgstr "It uses a single TCP or UDP connection and does not rely on packet source addresses, so it will work even through a double NAT: perfect for public hotspots and such" +msgstr "Він використовує єдине підключення TCP або UDP і не покладається на адреси джерела пакетів, тому працюватиме навіть через подвійний NAT: ідеально підходить для публічних точок доступу тощо" #: ../../configuration/trafficpolicy/index.rst:454 msgid "It uses a stochastic model to classify incoming packets into different flows and is used to provide a fair share of the bandwidth to all the flows using the queue. Each flow is managed by the CoDel queuing discipline. Reordering within a flow is avoided since Codel internally uses a FIFO queue." -msgstr "It uses a stochastic model to classify incoming packets into different flows and is used to provide a fair share of the bandwidth to all the flows using the queue. Each flow is managed by the CoDel queuing discipline. Reordering within a flow is avoided since Codel internally uses a FIFO queue." +msgstr "Він використовує стохастичну модель для класифікації вхідних пакетів у різні потоки та використовується для забезпечення справедливої частки пропускної здатності для всіх потоків, які використовують чергу. Кожен потік керується дисципліною черги CoDel. Перевпорядкування всередині потоку уникається, оскільки Codel внутрішньо використовує чергу FIFO." #: ../../_include/interface-dhcpv6-prefix-delegation.txt:30 msgid "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." -msgstr "It will be combined with the delegated prefix and the sla-id to form a complete interface address. The default is to use the EUI-64 address of the interface." +msgstr "Його буде об’єднано з делегованим префіксом і sla-id для формування повної адреси інтерфейсу. За замовчуванням використовується адреса інтерфейсу EUI-64." -#: ../../configuration/vrf/index.rst:220 +#: ../../configuration/vrf/index.rst:239 msgid "Join a given VRF. This will open a new subshell within the specified VRF." -msgstr "Join a given VRF. This will open a new subshell within the specified VRF." +msgstr "Приєднайтеся до певного VRF. Це відкриє нову підоболонку в межах зазначеного VRF." #: ../../configuration/policy/route-map.rst:33 msgid "Jump to a different rule in this route-map on a match." -msgstr "Jump to a different rule in this route-map on a match." +msgstr "Перейдіть до іншого правила на цій карті маршруту під час матчу." #: ../../configuration/interfaces/bonding.rst:352 msgid "Juniper EX Switch" -msgstr "Juniper EX Switch" +msgstr "Перемикач Juniper EX" + +#: ../../configuration/system/option.rst:31 +msgid "Kernel" +msgstr "Kernel" #: ../../configuration/system/syslog.rst:112 msgid "Kernel messages" -msgstr "Kernel messages" +msgstr "Повідомлення ядра" -#: ../../configuration/system/login.rst:40 +#: ../../configuration/system/login.rst:44 msgid "Key Based Authentication" -msgstr "Key Based Authentication" +msgstr "Аутентифікація на основі ключа" -#: ../../configuration/pki/index.rst:30 +#: ../../configuration/pki/index.rst:32 msgid "Key Generation" -msgstr "Key Generation" +msgstr "Генерація ключів" #: ../../configuration/interfaces/macsec.rst:72 msgid "Key Management" -msgstr "Key Management" +msgstr "Управління ключами" -#: ../../configuration/vpn/site2site_ipsec.rst:383 +#: ../../configuration/vpn/site2site_ipsec.rst:386 msgid "Key Parameters:" -msgstr "Key Parameters:" +msgstr "Ключові параметри:" #: ../../configuration/firewall/zone.rst:50 msgid "Key Points:" -msgstr "Key Points:" +msgstr "Ключові моменти:" #: ../../configuration/vpn/remoteaccess_ipsec.rst:12 msgid "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." msgstr "Key exchange and payload encryption is done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back). Authentication can be achieved with X.509 certificates." -#: ../../configuration/pki/index.rst:167 +#: ../../configuration/vpn/ipsec.rst:381 +msgid "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." +msgstr "Key exchange and payload encryption is still done using IKE and ESP proposals as known from IKEv1 but the connections are faster to establish, more reliable, and also support roaming from IP to IP (called MOBIKE which makes sure your connection does not drop when changing networks from e.g. WIFI to LTE and back)." + +#: ../../configuration/pki/index.rst:169 msgid "Key usage (CLI)" -msgstr "Key usage (CLI)" +msgstr "Використання ключа (CLI)" -#: ../../configuration/system/option.rst:58 +#: ../../configuration/system/option.rst:88 msgid "Keyboard Layout" -msgstr "Keyboard Layout" +msgstr "Розкладка клавіатури" #: ../../configuration/interfaces/wireguard.rst:23 msgid "Keypairs" -msgstr "Keypairs" +msgstr "Ключові пари" #: ../../configuration/system/syslog.rst:107 #: ../../configuration/system/syslog.rst:167 msgid "Keyword" -msgstr "Keyword" +msgstr "Ключове слово" -#: ../../configuration/vpn/l2tp.rst:4 +#: ../../configuration/vpn/l2tp.rst:5 msgid "L2TP" msgstr "L2TP" #: ../../configuration/vpn/l2tp.rst:10 msgid "L2TP over IPsec" -msgstr "L2TP over IPsec" +msgstr "L2TP через IPsec" #: ../../configuration/interfaces/l2tpv3.rst:9 msgid "L2TPv3" @@ -7592,23 +8527,23 @@ msgstr "L2TPv3:" #: ../../configuration/interfaces/l2tpv3.rst:16 msgid "L2TPv3 can be regarded as being to MPLS what IP is to ATM: a simplified version of the same concept, with much of the same benefit achieved at a fraction of the effort, at the cost of losing some technical features considered less important in the market." -msgstr "L2TPv3 can be regarded as being to MPLS what IP is to ATM: a simplified version of the same concept, with much of the same benefit achieved at a fraction of the effort, at the cost of losing some technical features considered less important in the market." +msgstr "L2TPv3 можна розглядати для MPLS як IP для ATM: спрощена версія тієї самої концепції, з більшою частиною тих самих переваг, досягнутих за невелику частку зусиль, ціною втрати деяких технічних функцій, які вважаються менш важливими на ринку. ." #: ../../configuration/interfaces/l2tpv3.rst:27 msgid "L2TPv3 is described in :rfc:`3921`." -msgstr "L2TPv3 is described in :rfc:`3921`." +msgstr "L2TPv3 описано в :rfc:`3921`." #: ../../configuration/interfaces/l2tpv3.rst:27 msgid "L2TPv3 is described in :rfc:`3931`." -msgstr "L2TPv3 is described in :rfc:`3931`." +msgstr "L2TPv3 описано в :rfc:`3931`." #: ../../configuration/interfaces/l2tpv3.rst:41 msgid "L2TPv3 options" -msgstr "L2TPv3 options" +msgstr "Параметри L2TPv3" -#: ../../configuration/vrf/index.rst:399 +#: ../../configuration/vrf/index.rst:418 msgid "L3VPN VRFs" -msgstr "L3VPN VRFs" +msgstr "VRF L3VPN" #: ../../configuration/interfaces/openvpn.rst:443 #: ../../configuration/service/webproxy.rst:203 @@ -7617,11 +8552,11 @@ msgstr "LDAP" #: ../../configuration/service/webproxy.rst:308 msgid "LDAP protocol version. Defaults to 3 if not specified." -msgstr "LDAP protocol version. Defaults to 3 if not specified." +msgstr "Версія протоколу LDAP. За замовчуванням 3, якщо не вказано." #: ../../configuration/service/webproxy.rst:224 msgid "LDAP search filter to locate the user DN. Required if the users are in a hierarchy below the base DN, or if the login name is not what builds the user specific part of the users DN." -msgstr "LDAP search filter to locate the user DN. Required if the users are in a hierarchy below the base DN, or if the login name is not what builds the user specific part of the users DN." +msgstr "Пошуковий фільтр LDAP для визначення DN користувача. Необхідно, якщо користувачі знаходяться в ієрархії, нижчій від базового DN, або якщо ім’я для входу не є тим, що створює особливу частину DN користувача." #: ../../configuration/service/lldp.rst:5 msgid "LLDP" @@ -7629,31 +8564,35 @@ msgstr "LLDP" #: ../../configuration/service/lldp.rst:14 msgid "LLDP performs functions similar to several proprietary protocols, such as :abbr:`CDP (Cisco Discovery Protocol)`, :abbr:`FDP (Foundry Discovery Protocol)`, :abbr:`NDP (Nortel Discovery Protocol)` and :abbr:`LLTD (Link Layer Topology Discovery)`." -msgstr "LLDP performs functions similar to several proprietary protocols, such as :abbr:`CDP (Cisco Discovery Protocol)`, :abbr:`FDP (Foundry Discovery Protocol)`, :abbr:`NDP (Nortel Discovery Protocol)` and :abbr:`LLTD (Link Layer Topology Discovery)`." +msgstr "LLDP виконує функції, подібні до кількох власних протоколів, таких як :abbr:`CDP (протокол виявлення Cisco)`, :abbr:`FDP (протокол виявлення Foundry)`, :abbr:`NDP (протокол виявлення Nortel)` і :abbr: `LLTD (Виявлення топології канального рівня)`." #: ../../configuration/vpn/l2tp.rst:89 msgid "LNS (L2TP Network Server)" -msgstr "LNS (L2TP Network Server)" +msgstr "LNS (Мережевий сервер L2TP)" -#: ../../configuration/vpn/l2tp.rst:91 +#: ../../configuration/vpn/l2tp.rst:272 msgid "LNS are often used to connect to a LAC (L2TP Access Concentrator)." -msgstr "LNS are often used to connect to a LAC (L2TP Access Concentrator)." +msgstr "LNS часто використовуються для підключення до LAC (L2TP Access Concentrator)." #: ../../configuration/protocols/mpls.rst:40 msgid "Label Distribution Protocol" -msgstr "Label Distribution Protocol" +msgstr "Протокол розподілу етикеток" + +#: ../../configuration/pki/index.rst:447 +msgid "Lastly, we can create the leaf certificates that devices and users will utilise." +msgstr "Lastly, we can create the leaf certificates that devices and users will utilise." #: ../../configuration/interfaces/l2tpv3.rst:11 msgid "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." -msgstr "Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP that can be used as an alternative protocol to :ref:`mpls` for encapsulation of multiprotocol Layer 2 communications traffic over IP networks. Like L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier requirements." +msgstr "Layer 2 Tunneling Protocol Version 3 — це стандарт IETF, пов’язаний із L2TP, який можна використовувати як альтернативний протокол до :ref:`mpls` для інкапсуляції багатопротокольного трафіку зв’язку рівня 2 через IP-мережі. Як і L2TP, L2TPv3 надає послугу псевдодротового зв’язку, але масштабується відповідно до вимог оператора." -#: ../../configuration/service/dhcp-server.rst:593 +#: ../../configuration/service/dhcp-server.rst:652 msgid "Lease time will be left at the default value which is 24 hours" -msgstr "Lease time will be left at the default value which is 24 hours" +msgstr "Час оренди буде залишено на значенні за замовчуванням, яке становить 24 години" -#: ../../configuration/service/dhcp-server.rst:336 +#: ../../configuration/service/dhcp-server.rst:392 msgid "Lease timeout in seconds (default: 86400)" -msgstr "Lease timeout in seconds (default: 86400)" +msgstr "Тайм-аут оренди в секундах (за замовчуванням: 86400)" #: ../../configuration/firewall/index.rst:167 msgid "Legacy Firewall" @@ -7661,248 +8600,260 @@ msgstr "Legacy Firewall" #: ../../configuration/interfaces/vxlan.rst:133 msgid "Let's assume PC4 on Leaf2 wants to ping PC5 on Leaf3. Instead of setting Leaf3 as our remote end manually, Leaf2 encapsulates the packet into a UDP-packet and sends it to its designated multicast-address via Spine1. When Spine1 receives this packet it forwards it to all other leaves who has joined the same multicast-group, in this case Leaf3. When Leaf3 receives the packet it forwards it, while at the same time learning that PC4 is reachable behind Leaf2, because the encapsulated packet had Leaf2's IP address set as source IP." -msgstr "Let's assume PC4 on Leaf2 wants to ping PC5 on Leaf3. Instead of setting Leaf3 as our remote end manually, Leaf2 encapsulates the packet into a UDP-packet and sends it to its designated multicast-address via Spine1. When Spine1 receives this packet it forwards it to all other leaves who has joined the same multicast-group, in this case Leaf3. When Leaf3 receives the packet it forwards it, while at the same time learning that PC4 is reachable behind Leaf2, because the encapsulated packet had Leaf2's IP address set as source IP." +msgstr "Припустімо, PC4 на Leaf2 хоче перевірити PC5 на Leaf3. Замість того, щоб вручну встановлювати Leaf3 як наш віддалений кінець, Leaf2 інкапсулює пакет у UDP-пакет і надсилає його на призначену багатоадресну адресу через Spine1. Коли Spine1 отримує цей пакет, він пересилає його всім іншим листам, які приєдналися до тієї самої багатоадресної групи, у цьому випадку Leaf3. Коли Leaf3 отримує пакет, він пересилає його, в той же час дізнаючись, що PC4 доступний за Leaf2, оскільки інкапсульований пакет мав IP-адресу Leaf2, встановлену як IP-адресу джерела." #: ../../configuration/loadbalancing/wan.rst:19 msgid "Let's assume we have two DHCP WAN interfaces and one LAN (eth2):" -msgstr "Let's assume we have two DHCP WAN interfaces and one LAN (eth2):" +msgstr "Припустімо, що у нас є два інтерфейси DHCP WAN і один LAN (eth2):" #: ../../configuration/system/acceleration.rst:60 msgid "Let's build a simple VPN between 2 Intel® QAT ready devices." -msgstr "Let's build a simple VPN between 2 Intel® QAT ready devices." +msgstr "Давайте створимо просту мережу VPN між 2 пристроями з підтримкою Intel® QAT." #: ../../configuration/loadbalancing/wan.rst:64 msgid "Let's expand the example from above and add weight to the interfaces. The bandwidth from eth0 is larger than eth1. Per default, outbound traffic is distributed randomly across available interfaces. Weights can be assigned to interfaces to influence the balancing." -msgstr "Let's expand the example from above and add weight to the interfaces. The bandwidth from eth0 is larger than eth1. Per default, outbound traffic is distributed randomly across available interfaces. Weights can be assigned to interfaces to influence the balancing." +msgstr "Давайте розгорнемо приклад вище та додамо ваги інтерфейсам. Пропускна здатність від eth0 більша, ніж від eth1. За замовчуванням вихідний трафік розподіляється випадковим чином між доступними інтерфейсами. Для впливу на балансування інтерфейсам можна призначити ваги." #: ../../configuration/service/snmp.rst:147 msgid "Let SNMP daemon listen only on IP address 192.0.2.1" -msgstr "Let SNMP daemon listen only on IP address 192.0.2.1" +msgstr "Дозвольте демону SNMP слухати лише IP-адресу 192.0.2.1" #: ../../configuration/interfaces/bonding.rst:402 msgid "Lets assume the following topology:" -msgstr "Lets assume the following topology:" +msgstr "Припустимо таку топологію:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:190 +#: ../../configuration/loadbalancing/reverse-proxy.rst:230 msgid "Level 4 balancing" -msgstr "Level 4 balancing" +msgstr "4 рівень балансування" #: ../../configuration/service/router-advert.rst:1 msgid "Lifetime associated with the default router in units of seconds" -msgstr "Lifetime associated with the default router in units of seconds" +msgstr "Тривалість життя, пов’язана з маршрутизатором за замовчуванням у секундах" #: ../../configuration/service/https.rst:63 msgid "Lifetime in days; default is 365" -msgstr "Lifetime in days; default is 365" +msgstr "Тривалість життя в днях; за замовчуванням 365" #: ../../configuration/service/router-advert.rst:1 msgid "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" -msgstr "Lifetime is decremented by the number of seconds since the last RA - use in conjunction with a DHCPv6-PD prefix" +msgstr "Тривалість життя зменшується на кількість секунд після останнього RA - використовуйте разом із префіксом DHCPv6-PD" + +#: ../../configuration/vpn/ipsec.rst:535 +msgid "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." +msgstr "Like on Microsoft Windows, Apple iOS/iPadOS out of the box does not expose all available VPN options via the device GUI." -#: ../../configuration/loadbalancing/reverse-proxy.rst:162 +#: ../../configuration/loadbalancing/reverse-proxy.rst:202 msgid "Limit allowed cipher algorithms used during SSL/TLS handshake" -msgstr "Limit allowed cipher algorithms used during SSL/TLS handshake" +msgstr "Обмеження дозволених алгоритмів шифрування, які використовуються під час рукостискання SSL/TLS" -#: ../../configuration/system/login.rst:112 +#: ../../configuration/system/login.rst:116 msgid "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." -msgstr "Limit logins to `<limit>` per every ``rate-time`` seconds. Rate limit must be between 1 and 10 attempts." +msgstr "Обмежити вхід до `<limit> ` за кожну секунду ``ставка-час``. Ліміт частоти має становити від 1 до 10 спроб." -#: ../../configuration/system/login.rst:118 +#: ../../configuration/system/login.rst:122 msgid "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." -msgstr "Limit logins to ``rate-limit`` attemps per every `<seconds>`. Rate time must be between 15 and 600 seconds." +msgstr "Обмежити вхід до ``рейт-ліміт`` спроб за кожну `<seconds> `. Час ставки має становити від 15 до 600 секунд." -#: ../../configuration/loadbalancing/reverse-proxy.rst:157 +#: ../../configuration/loadbalancing/reverse-proxy.rst:197 msgid "Limit maximum number of connections" -msgstr "Limit maximum number of connections" +msgstr "Обмежити максимальну кількість підключень" #: ../../configuration/trafficpolicy/index.rst:544 msgid "Limiter" -msgstr "Limiter" +msgstr "Обмежувач" #: ../../configuration/trafficpolicy/index.rst:549 msgid "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." -msgstr "Limiter is one of those policies that uses classes_ (Ingress qdisc is actually a classless policy but filters do work in it)." +msgstr "Limiter — одна з тих політик, які використовують classes_ (Ingress qdisc насправді є безкласовою політикою, але фільтри в ній працюють)." -#: ../../configuration/system/login.rst:381 +#: ../../configuration/system/login.rst:385 msgid "Limits" -msgstr "Limits" +msgstr "Межі" #: ../../configuration/system/syslog.rst:124 msgid "Line printer subsystem" -msgstr "Line printer subsystem" +msgstr "Підсистема рядкового принтера" #: ../../configuration/service/router-advert.rst:1 msgid "Link MTU value placed in RAs, exluded in RAs if unset" -msgstr "Link MTU value placed in RAs, exluded in RAs if unset" +msgstr "Значення MTU посилання розміщується в RA, виключається в RA, якщо не встановлено" #: ../../configuration/service/lldp.rst:33 msgid "Link aggregation" -msgstr "Link aggregation" +msgstr "Агрегація посилань" #: ../../configuration/nat/nat44.rst:386 msgid "Linux netfilter will not NAT traffic marked as INVALID. This often confuses people into thinking that Linux (or specifically VyOS) has a broken NAT implementation because non-NATed traffic is seen leaving an external interface. This is actually working as intended, and a packet capture of the \"leaky\" traffic should reveal that the traffic is either an additional TCP \"RST\", \"FIN,ACK\", or \"RST,ACK\" sent by client systems after Linux netfilter considers the connection closed. The most common is the additional TCP RST some host implementations send after terminating a connection (which is implementation-specific)." -msgstr "Linux netfilter will not NAT traffic marked as INVALID. This often confuses people into thinking that Linux (or specifically VyOS) has a broken NAT implementation because non-NATed traffic is seen leaving an external interface. This is actually working as intended, and a packet capture of the \"leaky\" traffic should reveal that the traffic is either an additional TCP \"RST\", \"FIN,ACK\", or \"RST,ACK\" sent by client systems after Linux netfilter considers the connection closed. The most common is the additional TCP RST some host implementations send after terminating a connection (which is implementation-specific)." +msgstr "Linux netfilter не буде трафіку NAT, позначеного як INVALID. Це часто змушує людей думати, що Linux (або конкретно VyOS) має несправну реалізацію NAT, оскільки трафік без NAT виходить із зовнішнього інтерфейсу. Насправді це працює належним чином, і захоплення пакетів «витоку» трафіку має виявити, що трафік є додатковим TCP «RST», «FIN,ACK» або «RST,ACK», надісланим клієнтськими системами після Linux netfilter вважає з'єднання закритим. Найпоширенішим є додатковий TCP RST, який деякі реалізації хостів надсилають після завершення з’єднання (що залежить від реалізації)." #: ../../configuration/interfaces/macsec.rst:128 msgid "List all MACsec interfaces." -msgstr "List all MACsec interfaces." +msgstr "Список усіх інтерфейсів MACsec." #: ../../configuration/system/syslog.rst:98 msgid "List of facilities used by syslog. Most facilities names are self explanatory. Facilities local0 - local7 common usage is f.e. as network logs facilities for nodes and network equipment. Generally it depends on the situation how to classify logs and put them to facilities. See facilities more as a tool rather than a directive to follow." -msgstr "List of facilities used by syslog. Most facilities names are self explanatory. Facilities local0 - local7 common usage is f.e. as network logs facilities for nodes and network equipment. Generally it depends on the situation how to classify logs and put them to facilities. See facilities more as a tool rather than a directive to follow." +msgstr "Список засобів, які використовуються syslog. Більшість назв об’єктів не пояснюються. Засоби local0 - local7 зазвичай використовуються як засоби журналу мережі для вузлів і мережевого обладнання. Загалом це залежить від ситуації, як класифікувати колоди та поставити їх на об’єкти. Сприймайте засоби більше як інструмент, а не як директиву, якій слід слідувати." #: ../../configuration/service/ntp.rst:78 msgid "List of networks or client addresses permitted to contact this NTP server." -msgstr "List of networks or client addresses permitted to contact this NTP server." +msgstr "Список мереж або адрес клієнтів, яким дозволено зв’язуватися з цим сервером NTP." #: ../../configuration/service/ssh.rst:73 msgid "List of supported MACs: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``, ``hmac-sha1``, ``hmac-sha1-96``, ``hmac-sha2-256``, ``hmac-sha2-512``, ``umac-64@openssh.com``, ``umac-128@openssh.com``, ``hmac-md5-etm@openssh.com``, ``hmac-md5-96-etm@openssh.com``, ``hmac-ripemd160-etm@openssh.com``, ``hmac-sha1-etm@openssh.com``, ``hmac-sha1-96-etm@openssh.com``, ``hmac-sha2-256-etm@openssh.com``, ``hmac-sha2-512-etm@openssh.com``, ``umac-64-etm@openssh.com``, ``umac-128-etm@openssh.com``" -msgstr "List of supported MACs: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``, ``hmac-sha1``, ``hmac-sha1-96``, ``hmac-sha2-256``, ``hmac-sha2-512``, ``umac-64@openssh.com``, ``umac-128@openssh.com``, ``hmac-md5-etm@openssh.com``, ``hmac-md5-96-etm@openssh.com``, ``hmac-ripemd160-etm@openssh.com``, ``hmac-sha1-etm@openssh.com``, ``hmac-sha1-96-etm@openssh.com``, ``hmac-sha2-256-etm@openssh.com``, ``hmac-sha2-512-etm@openssh.com``, ``umac-64-etm@openssh.com``, ``umac-128-etm@openssh.com``" +msgstr "Список підтримуваних MAC-адрес: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``, ``hmac-sha1``, ``hmac-sha1-96``, `` `hmac-sha2-256``, ``hmac-sha2-512``, ``umac-64@openssh.com``, ``umac-128@openssh.com``, ``hmac-md5-etm`` @openssh.com``, ``hmac-md5-96-etm@openssh.com``, ``hmac-ripemd160-etm@openssh.com``, ``hmac-sha1-etm@openssh.com`` , ``hmac-sha1-96-etm@openssh.com``, ``hmac-sha2-256-etm@openssh.com``, ``hmac-sha2-512-etm@openssh.com``, ` `umac-64-etm@openssh.com``, ``umac-128-etm@openssh.com``" #: ../../configuration/service/ssh.rst:96 msgid "List of supported algorithms: ``diffie-hellman-group1-sha1``, ``diffie-hellman-group14-sha1``, ``diffie-hellman-group14-sha256``, ``diffie-hellman-group16-sha512``, ``diffie-hellman-group18-sha512``, ``diffie-hellman-group-exchange-sha1``, ``diffie-hellman-group-exchange-sha256``, ``ecdh-sha2-nistp256``, ``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``, ``curve25519-sha256`` and ``curve25519-sha256@libssh.org``." -msgstr "List of supported algorithms: ``diffie-hellman-group1-sha1``, ``diffie-hellman-group14-sha1``, ``diffie-hellman-group14-sha256``, ``diffie-hellman-group16-sha512``, ``diffie-hellman-group18-sha512``, ``diffie-hellman-group-exchange-sha1``, ``diffie-hellman-group-exchange-sha256``, ``ecdh-sha2-nistp256``, ``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``, ``curve25519-sha256`` and ``curve25519-sha256@libssh.org``." +msgstr "Список підтримуваних алгоритмів: ``diffie-hellman-group1-sha1``, ``diffie-hellman-group14-sha1``, ``diffie-hellman-group14-sha256``, ``diffie-hellman-group16-sha512`` ``, ``diffie-hellman-group18-sha512``, ``diffie-hellman-group-exchange-sha1``, ``diffie-hellman-group-exchange-sha256``, ``ecdh-sha2-nistp256 ``, ``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``, ``curve25519-sha256`` та ``curve25519-sha256@libssh.org``." #: ../../configuration/service/ssh.rst:53 msgid "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" -msgstr "List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" +msgstr "Список підтримуваних шифрів: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, ``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr`` ``, ``aes256-ctr``, ``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, ``cast128-cbc``" -#: ../../configuration/policy/route-map.rst:362 +#: ../../configuration/policy/route-map.rst:365 msgid "List of well-known communities" -msgstr "List of well-known communities" +msgstr "Список відомих спільнот" #: ../../configuration/service/dhcp-relay.rst:87 msgid "Listen for DHCP requests on interface ``eth1``." -msgstr "Listen for DHCP requests on interface ``eth1``." +msgstr "Прослуховування запитів DHCP на інтерфейсі ``eth1``." -#: ../../configuration/vrf/index.rst:118 +#: ../../configuration/vrf/index.rst:137 msgid "Lists VRFs that have been created" -msgstr "Lists VRFs that have been created" +msgstr "Перераховує створені VRF" #: ../../configuration/loadbalancing/index.rst:5 msgid "Load-balancing" -msgstr "Load-balancing" +msgstr "Балансування навантаження" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:100 +msgid "Load-balancing algorithms to be used for distributed requests among the available servers" +msgstr "Load-balancing algorithms to be used for distributed requests among the available servers" #: ../../configuration/loadbalancing/reverse-proxy.rst:100 msgid "Load-balancing algorithms to be used for distributind requests among the vailable servers" -msgstr "Load-balancing algorithms to be used for distributind requests among the vailable servers" +msgstr "Алгоритми балансування навантаження, які будуть використовуватися для розподілу запитів між доступними серверами" -#: ../../configuration/highavailability/index.rst:347 +#: ../../configuration/highavailability/index.rst:357 msgid "Load-balancing schedule algorithm:" -msgstr "Load-balancing schedule algorithm:" +msgstr "Алгоритм розкладу балансування навантаження:" #: ../../configuration/nat/nat44.rst:656 msgid "Load Balance" msgstr "Load Balance" -#: ../../configuration/service/pppoe-server.rst:243 +#: ../../configuration/service/pppoe-server.rst:317 msgid "Load Balancing" -msgstr "Load Balancing" +msgstr "Балансування навантаження" -#: ../../configuration/system/login.rst:422 +#: ../../configuration/system/login.rst:426 msgid "Load the container image in op-mode." -msgstr "Load the container image in op-mode." +msgstr "Завантажте зображення контейнера в оп-режимі." #: ../../configuration/system/login.rst:17 msgid "Local" -msgstr "Local" +msgstr "Місцевий" #: ../../configuration/interfaces/openvpn.rst:134 #: ../../configuration/interfaces/openvpn.rst:241 msgid "Local Configuration:" -msgstr "Local Configuration:" +msgstr "Локальна конфігурація:" #: ../../configuration/interfaces/openvpn.rst:96 msgid "Local Configuration - Annotated:" -msgstr "Local Configuration - Annotated:" +msgstr "Локальна конфігурація - анотована:" -#: ../../configuration/service/dhcp-server.rst:143 +#: ../../configuration/service/dhcp-server.rst:192 +msgid "Local IP `<address>` used when communicating to the HA peer." +msgstr "Local IP `<address>` used when communicating to the HA peer." + +#: ../../configuration/service/dhcp-server.rst:177 msgid "Local IP `<address>` used when communicating to the failover peer." -msgstr "Local IP `<address>` used when communicating to the failover peer." +msgstr "Локальний IP`<address> ` використовується під час обміну даними з одноранговим сервером." #: ../../configuration/service/monitoring.rst:59 msgid "Local IP addresses to listen on" -msgstr "Local IP addresses to listen on" +msgstr "Локальні IP-адреси для прослуховування" #: ../../configuration/service/conntrack-sync.rst:79 msgid "Local IPv4 addresses for service to listen on." -msgstr "Local IPv4 addresses for service to listen on." +msgstr "Локальні адреси IPv4 для прослуховування служби." #: ../../configuration/policy/local-route.rst:12 msgid "Local Route IPv4" -msgstr "Local Route IPv4" +msgstr "Локальний маршрут IPv4" #: ../../configuration/policy/local-route.rst:31 msgid "Local Route IPv6" -msgstr "Local Route IPv6" +msgstr "Локальний маршрут IPv6" #: ../../configuration/policy/local-route.rst:3 msgid "Local Route Policy" -msgstr "Local Route Policy" +msgstr "Політика місцевого маршруту" #: ../../configuration/system/syslog.rst:83 msgid "Local User Account" -msgstr "Local User Account" +msgstr "Локальний обліковий запис користувача" #: ../../configuration/protocols/rpki.rst:141 msgid "Local path that includes the known hosts file." -msgstr "Local path that includes the known hosts file." +msgstr "Локальний шлях, який містить відомий файл hosts." -#: ../../configuration/protocols/rpki.rst:145 +#: ../../configuration/protocols/rpki.rst:155 msgid "Local path that includes the private key file of the router." -msgstr "Local path that includes the private key file of the router." +msgstr "Локальний шлях, який містить файл закритого ключа маршрутизатора." -#: ../../configuration/protocols/rpki.rst:149 +#: ../../configuration/protocols/rpki.rst:159 msgid "Local path that includes the public key file of the router." -msgstr "Local path that includes the public key file of the router." +msgstr "Локальний шлях, який містить файл відкритого ключа маршрутизатора." #: ../../configuration/policy/examples.rst:153 msgid "Local route" -msgstr "Local route" +msgstr "Місцевий маршрут" #: ../../configuration/service/console-server.rst:99 msgid "Locally connect to serial port identified by `<device>`." -msgstr "Locally connect to serial port identified by `<device>`." +msgstr "Локальне підключення до послідовного порту, позначеного `<device> `." -#: ../../configuration/policy/route-map.rst:273 +#: ../../configuration/policy/route-map.rst:276 msgid "Locally significant administrative distance." -msgstr "Locally significant administrative distance." +msgstr "Адміністративна відстань місцевого значення." #: ../../configuration/system/syslog.rst:140 msgid "Log alert" -msgstr "Log alert" +msgstr "Сповіщення журналу" #: ../../configuration/system/syslog.rst:138 msgid "Log audit" -msgstr "Log audit" +msgstr "Журнал аудиту" #: ../../configuration/system/syslog.rst:169 msgid "Log everything" -msgstr "Log everything" +msgstr "Зареєструйте все" #: ../../configuration/system/syslog.rst:212 msgid "Log messages from a specified image can be displayed on the console. Details of allowed parameters:" -msgstr "Log messages from a specified image can be displayed on the console. Details of allowed parameters:" +msgstr "Повідомлення журналу з указаного зображення можуть відображатися на консолі. Деталі дозволених параметрів:" #: ../../configuration/system/syslog.rst:25 msgid "Log syslog messages to ``/dev/console``, for an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." -msgstr "Log syslog messages to ``/dev/console``, for an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." +msgstr "Реєструйте повідомлення системного журналу в ``/dev/console``, щоб отримати пояснення щодо ключових слів :ref:`syslog_facilities` і :ref:`syslog_severity_level` у таблицях нижче." #: ../../configuration/system/syslog.rst:36 msgid "Log syslog messages to file specified via `<filename>`, for an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." -msgstr "Log syslog messages to file specified via `<filename>`, for an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." +msgstr "Реєструвати повідомлення системного журналу у файл, указаний у `<filename> `, щоб отримати пояснення щодо ключових слів :ref:`syslog_facilities` і :ref:`syslog_severity_level`, перегляньте таблиці нижче." #: ../../configuration/system/syslog.rst:64 msgid "Log syslog messages to remote host specified by `<address>`. The address can be specified by either FQDN or IP address. For an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." -msgstr "Log syslog messages to remote host specified by `<address>`. The address can be specified by either FQDN or IP address. For an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." +msgstr "Реєструвати повідомлення системного журналу на віддалений хост, указаний `<address> `. Адресу можна вказати за допомогою FQDN або IP-адреси. Щоб отримати пояснення щодо ключових слів :ref:`syslog_facilities` і :ref:`syslog_severity_level`, перегляньте таблиці нижче." #: ../../configuration/system/conntrack.rst:224 msgid "Log the connection tracking events per protocol." -msgstr "Log the connection tracking events per protocol." +msgstr "Реєстрація подій відстеження з’єднання для кожного протоколу." #: ../../configuration/system/syslog.rst:14 msgid "Logging" -msgstr "Logging" +msgstr "Лісозаготівля" #: ../../configuration/firewall/bridge.rst:151 #: ../../configuration/firewall/ipv4.rst:198 @@ -7912,19 +8863,19 @@ msgstr "Logging can be enable for every single firewall rule. If enabled, other #: ../../configuration/system/syslog.rst:56 msgid "Logging to a remote host leaves the local logging configuration intact, it can be configured in parallel to a custom file or console logging. You can log to multiple hosts at the same time, using either TCP or UDP. The default is sending the messages via port 514/UDP." -msgstr "Logging to a remote host leaves the local logging configuration intact, it can be configured in parallel to a custom file or console logging. You can log to multiple hosts at the same time, using either TCP or UDP. The default is sending the messages via port 514/UDP." +msgstr "Реєстрація на віддаленому хості залишає локальну конфігурацію журналу незмінною, її можна налаштувати паралельно з користувацьким файлом або журналом консолі. Ви можете входити до кількох хостів одночасно за допомогою TCP або UDP. За замовчуванням повідомлення надсилаються через порт 514/UDP." #: ../../configuration/system/login.rst:7 msgid "Login/User Management" -msgstr "Login/User Management" +msgstr "Логін/Керування користувачами" -#: ../../configuration/system/login.rst:363 +#: ../../configuration/system/login.rst:367 msgid "Login Banner" -msgstr "Login Banner" +msgstr "Банер входу" -#: ../../configuration/system/login.rst:383 +#: ../../configuration/system/login.rst:387 msgid "Login limits" -msgstr "Login limits" +msgstr "Обмеження входу" #: ../../configuration/protocols/isis.rst:306 msgid "Loop Free Alternate (LFA)" @@ -7932,34 +8883,34 @@ msgstr "Loop Free Alternate (LFA)" #: ../../configuration/interfaces/loopback.rst:7 msgid "Loopback" -msgstr "Loopback" +msgstr "Петля" #: ../../configuration/interfaces/pseudo-ethernet.rst:34 msgid "Loopbacks occurs at the IP level the same way as for other interfaces, ethernet frames are not forwarded between Pseudo-Ethernet interfaces." -msgstr "Loopbacks occurs at the IP level the same way as for other interfaces, ethernet frames are not forwarded between Pseudo-Ethernet interfaces." +msgstr "Петлі відбуваються на рівні IP так само, як і для інших інтерфейсів, кадри Ethernet не пересилаються між інтерфейсами псевдо-Ethernet." #: ../../configuration/trafficpolicy/index.rst:269 #: ../../configuration/trafficpolicy/index.rst:275 #: ../../configuration/trafficpolicy/index.rst:281 #: ../../configuration/trafficpolicy/index.rst:287 msgid "Low" -msgstr "Low" +msgstr "Низький" #: ../../configuration/service/lldp.rst:31 msgid "MAC/PHY information" -msgstr "MAC/PHY information" +msgstr "Інформація про MAC/PHY" #: ../../configuration/interfaces/pseudo-ethernet.rst:7 msgid "MACVLAN - Pseudo Ethernet" -msgstr "MACVLAN - Pseudo Ethernet" +msgstr "MACVLAN - Псевдо Ethernet" #: ../../configuration/firewall/groups.rst:109 msgid "MAC Groups" -msgstr "MAC Groups" +msgstr "Групи MAC" #: ../../configuration/interfaces/bridge.rst:70 msgid "MAC address aging `<time`> in seconds (default: 300)." -msgstr "MAC address aging `<time`> in seconds (default: 300)." +msgstr "MAC-адреса старіє `<time`> у секундах (за замовчуванням: 300)." #: ../../configuration/interfaces/macsec.rst:7 msgid "MACsec" @@ -7967,23 +8918,23 @@ msgstr "MACsec" #: ../../configuration/interfaces/macsec.rst:9 msgid "MACsec is an IEEE standard (IEEE 802.1AE) for MAC security, introduced in 2006. It defines a way to establish a protocol independent connection between two hosts with data confidentiality, authenticity and/or integrity, using GCM-AES-128. MACsec operates on the Ethernet layer and as such is a layer 2 protocol, which means it's designed to secure traffic within a layer 2 network, including DHCP or ARP requests. It does not compete with other security solutions such as IPsec (layer 3) or TLS (layer 4), as all those solutions are used for their own specific use cases." -msgstr "MACsec is an IEEE standard (IEEE 802.1AE) for MAC security, introduced in 2006. It defines a way to establish a protocol independent connection between two hosts with data confidentiality, authenticity and/or integrity, using GCM-AES-128. MACsec operates on the Ethernet layer and as such is a layer 2 protocol, which means it's designed to secure traffic within a layer 2 network, including DHCP or ARP requests. It does not compete with other security solutions such as IPsec (layer 3) or TLS (layer 4), as all those solutions are used for their own specific use cases." +msgstr "MACsec — це стандарт IEEE (IEEE 802.1AE) для безпеки MAC, представлений у 2006 році. Він визначає спосіб встановлення незалежного від протоколу з’єднання між двома хостами з конфіденційністю, автентичністю та/або цілісністю даних за допомогою GCM-AES-128. MACsec працює на рівні Ethernet і як такий є протоколом рівня 2, що означає, що він розроблений для захисту трафіку в мережі рівня 2, включаючи запити DHCP або ARP. Він не конкурує з іншими рішеннями безпеки, такими як IPsec (рівень 3) або TLS (рівень 4), оскільки всі ці рішення використовуються для власних конкретних випадків використання." #: ../../configuration/interfaces/macsec.rst:39 msgid "MACsec only provides authentication by default, encryption is optional. This command will enable encryption for all outgoing packets." -msgstr "MACsec only provides authentication by default, encryption is optional. This command will enable encryption for all outgoing packets." +msgstr "MACsec забезпечує лише автентифікацію за замовчуванням, шифрування необов’язкове. Ця команда ввімкне шифрування для всіх вихідних пакетів." #: ../../configuration/interfaces/macsec.rst:30 msgid "MACsec options" -msgstr "MACsec options" +msgstr "Параметри MACsec" #: ../../configuration/service/lldp.rst:32 msgid "MDI power" -msgstr "MDI power" +msgstr "Потужність MDI" -#: ../../configuration/system/login.rst:91 +#: ../../configuration/system/login.rst:95 msgid "MFA/2FA authentication using OTP (one time passwords)" -msgstr "MFA/2FA authentication using OTP (one time passwords)" +msgstr "Аутентифікація MFA/2FA за допомогою OTP (одноразові паролі)" #: ../../configuration/protocols/mpls.rst:5 msgid "MPLS" @@ -7991,26 +8942,26 @@ msgstr "MPLS" #: ../../configuration/protocols/mpls.rst:30 msgid "MPLS support in VyOS is not finished yet, and therefore its functionality is limited. Currently there is no support for MPLS enabled VPN services such as L2VPNs and mVPNs. RSVP support is also not present as the underlying routing stack (FRR) does not implement it. Currently VyOS implements LDP as described in RFC 5036; other LDP standard are the following ones: RFC 6720, RFC 6667, RFC 5919, RFC 5561, RFC 7552, RFC 4447. Because MPLS is already available (FRR also supports RFC 3031)." -msgstr "MPLS support in VyOS is not finished yet, and therefore its functionality is limited. Currently there is no support for MPLS enabled VPN services such as L2VPNs and mVPNs. RSVP support is also not present as the underlying routing stack (FRR) does not implement it. Currently VyOS implements LDP as described in RFC 5036; other LDP standard are the following ones: RFC 6720, RFC 6667, RFC 5919, RFC 5561, RFC 7552, RFC 4447. Because MPLS is already available (FRR also supports RFC 3031)." +msgstr "Підтримка MPLS у VyOS ще не завершена, тому її функціональність обмежена. Наразі немає підтримки для служб VPN із підтримкою MPLS, таких як L2VPN та mVPN. Підтримка RSVP також відсутня, оскільки базовий стек маршрутизації (FRR) не реалізує її. Наразі VyOS реалізує LDP, як описано в RFC 5036; іншими стандартами LDP є наступні: RFC 6720, RFC 6667, RFC 5919, RFC 5561, RFC 7552, RFC 4447. Тому що MPLS вже доступний (FRR також підтримує RFC 3031)." #: ../../configuration/interfaces/pppoe.rst:215 #: ../../configuration/interfaces/sstp-client.rst:87 #: ../../_include/interface-ip.txt:12 msgid "MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes on a 1492 byte MTU." -msgstr "MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes on a 1492 byte MTU." +msgstr "Значення MSS = MTU - 20 (IP-заголовок) - 20 (TCP-заголовок), що призводить до 1452 байтів на 1492 байт MTU." #: ../../configuration/interfaces/pppoe.rst:261 #: ../../_include/interface-ipv6.txt:68 msgid "MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 bytes on a 1492 byte MTU." -msgstr "MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 bytes on a 1492 byte MTU." +msgstr "Значення MSS = MTU - 40 (заголовок IPv6) - 20 (заголовок TCP), що призводить до 1432 байтів на 1492 байт MTU." #: ../../configuration/service/router-advert.rst:1 msgid "MTU" -msgstr "MTU" +msgstr "ОСОБА" #: ../../configuration/system/syslog.rst:116 msgid "Mail system" -msgstr "Mail system" +msgstr "Поштова система" #: ../../configuration/firewall/index.rst:20 msgid "Main notes regarding this packet flow and terminology used in VyOS firewall:" @@ -8024,31 +8975,31 @@ msgstr "Main structure VyOS firewall cli is shown next:" msgid "Main structure is shown next:" msgstr "Main structure is shown next:" -#: ../../configuration/service/pppoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:303 msgid "Maintenance mode" -msgstr "Maintenance mode" +msgstr "Режим обслуговування" -#: ../../configuration/service/conntrack-sync.rst:107 +#: ../../configuration/service/conntrack-sync.rst:116 msgid "Make sure conntrack is enabled by running and show connection tracking table." -msgstr "Make sure conntrack is enabled by running and show connection tracking table." +msgstr "Переконайтеся, що conntrack увімкнено, запустивши та відобразивши таблицю відстеження з’єднань." #: ../../configuration/service/snmp.rst:38 msgid "Managed devices" -msgstr "Managed devices" +msgstr "Керовані пристрої" #: ../../configuration/interfaces/wireless.rst:85 msgid "Management Frame Protection (MFP) according to IEEE 802.11w" -msgstr "Management Frame Protection (MFP) according to IEEE 802.11w" +msgstr "Management Frame Protection (MFP) відповідно до IEEE 802.11w" #: ../../configuration/protocols/isis.rst:31 msgid "Mandatory Settings" -msgstr "Mandatory Settings" +msgstr "Обов'язкові налаштування" #: ../../configuration/protocols/ospf.rst:537 msgid "Manual Neighbor Configuration" -msgstr "Manual Neighbor Configuration" +msgstr "Ручна конфігурація сусідів" -#: ../../configuration/pki/index.rst:336 +#: ../../configuration/pki/index.rst:367 msgid "Manually trigger certificate renewal. This will be done twice a day." msgstr "Manually trigger certificate renewal. This will be done twice a day." @@ -8056,68 +9007,76 @@ msgstr "Manually trigger certificate renewal. This will be done twice a day." msgid "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." msgstr "Maps the VNI to the specified VLAN id. The VLAN can then be consumed by a bridge." -#: ../../configuration/vpn/sstp.rst:223 +#: ../../configuration/service/ipoe-server.rst:166 +#: ../../configuration/service/pppoe-server.rst:128 +#: ../../configuration/vpn/l2tp.rst:171 +#: ../../configuration/vpn/pptp.rst:111 +#: ../../configuration/vpn/sstp.rst:144 msgid "Mark RADIUS server as offline for this given `<time>` in seconds." -msgstr "Mark RADIUS server as offline for this given `<time>` in seconds." +msgstr "Позначити RADIUS-сервер як офлайновий для даного `<time> ` за секунди." -#: ../../configuration/pki/index.rst:206 +#: ../../configuration/pki/index.rst:208 msgid "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." -msgstr "Mark the CAs private key as password protected. User is asked for the password when the key is referenced." +msgstr "Позначте закритий ключ ЦС як захищений паролем. Під час посилання на ключ користувача запитують пароль." -#: ../../configuration/pki/index.rst:244 +#: ../../configuration/pki/index.rst:246 msgid "Mark the private key as password protected. User is asked for the password when the key is referenced." -msgstr "Mark the private key as password protected. User is asked for the password when the key is referenced." +msgstr "Позначте закритий ключ як захищений паролем. Під час посилання на ключ користувача запитують пароль." #: ../../configuration/policy/route-map.rst:141 msgid "Match BGP large communities." -msgstr "Match BGP large communities." +msgstr "Відповідність великим спільнотам BGP." #: ../../configuration/firewall/general-legacy.rst:474 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." -msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_." +msgstr "Зіставте IP-адреси на основі його геолокації. Додаткова інформація: `geoip matching<https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching> `_." -#: ../../configuration/firewall/ipv4.rst:440 +#: ../../configuration/firewall/ipv4.rst:463 #: ../../configuration/firewall/ipv6.rst:447 msgid "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching <https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_. Use inverse-match to match anything except the given country-codes." #: ../../configuration/policy/route-map.rst:180 msgid "Match RPKI validation result." -msgstr "Match RPKI validation result." +msgstr "Відповідність результату перевірки RPKI." #: ../../configuration/policy/route.rst:166 msgid "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." -msgstr "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." +msgstr "Відповідність критеріям протоколу. Номер протоколу або ім’я, визначене в: ``/etc/protocols``. Спеціальними назвами є ``all`` для всіх протоколів і ``tcp_udp`` для пакетів на основі tcp і udp. ``!`` скасовує вибраний протокол." -#: ../../configuration/firewall/ipv4.rst:773 +#: ../../configuration/firewall/ipv4.rst:796 #: ../../configuration/firewall/ipv6.rst:783 msgid "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." -msgstr "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." +msgstr "Відповідність критеріям протоколу. Номер протоколу або назва, яке тут визначено: ``/etc/protocols``. Спеціальними назвами є ``all`` для всіх протоколів і ``tcp_udp`` для пакетів на основі tcp і udp. ``!`` скасовує вибраний протокол." -#: ../../configuration/firewall/ipv4.rst:831 +#: ../../configuration/firewall/ipv4.rst:854 #: ../../configuration/firewall/ipv6.rst:840 msgid "Match against the state of a packet." -msgstr "Match against the state of a packet." +msgstr "Зіставлення зі станом пакета." + +#: ../../configuration/firewall/ipv4.rst:336 +msgid "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." +msgstr "Match based on connection tracking protocol helper module to secure use of that helper module. See below for possible completions `<module>`." -#: ../../configuration/firewall/ipv4.rst:620 +#: ../../configuration/firewall/ipv4.rst:643 #: ../../configuration/firewall/ipv6.rst:630 msgid "Match based on dscp value." -msgstr "Match based on dscp value." +msgstr "Збіг на основі значення dscp." #: ../../configuration/policy/route.rst:115 msgid "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." -msgstr "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." +msgstr "Збіг на основі критеріїв значення dscp. Підтримуються кілька значень від 0 до 63 і діапазони." -#: ../../configuration/firewall/ipv4.rst:631 +#: ../../configuration/firewall/ipv4.rst:654 #: ../../configuration/firewall/ipv6.rst:641 msgid "Match based on fragment criteria." -msgstr "Match based on fragment criteria." +msgstr "Збіг на основі критеріїв фрагментів." -#: ../../configuration/firewall/ipv4.rst:642 +#: ../../configuration/firewall/ipv4.rst:665 msgid "Match based on icmp code and type." msgstr "Match based on icmp code and type." -#: ../../configuration/firewall/ipv4.rst:653 +#: ../../configuration/firewall/ipv4.rst:676 msgid "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." msgstr "Match based on icmp type-name criteria. Use tab for information about what **type-name** criteria are supported." @@ -8128,78 +9087,78 @@ msgstr "Match based on icmpv6 type-name criteria. Use tab for information about #: ../../configuration/firewall/ipv6.rst:652 #: ../../configuration/policy/route.rst:131 msgid "Match based on icmp|icmpv6 code and type." -msgstr "Match based on icmp|icmpv6 code and type." +msgstr "Збіг на основі коду та типу icmp|icmpv6." #: ../../configuration/firewall/general-legacy.rst:610 msgid "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what **type-name** criteria are supported." -msgstr "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what **type-name** criteria are supported." +msgstr "Збіг на основі критеріїв імені типу icmp|icmpv6. Використовуйте вкладку для отримання інформації про те, які критерії **назви типу** підтримуються." #: ../../configuration/policy/route.rst:136 msgid "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what type-name criteria are supported." -msgstr "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what type-name criteria are supported." +msgstr "Збіг на основі критеріїв імені типу icmp|icmpv6. Використовуйте вкладку для отримання інформації про те, які критерії імені типу підтримуються." #: ../../configuration/firewall/general-legacy.rst:622 msgid "Match based on inbound/outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" -msgstr "Match based on inbound/outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" +msgstr "Збіг на основі вхідного/вихідного інтерфейсу. Wilcard ``*`` можна використовувати. Наприклад: ``eth2*``" #: ../../configuration/firewall/general.rst:987 msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:239 -#: ../../configuration/firewall/ipv4.rst:663 +#: ../../configuration/firewall/ipv4.rst:686 #: ../../configuration/firewall/ipv6.rst:673 msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:248 -#: ../../configuration/firewall/ipv4.rst:674 +#: ../../configuration/firewall/ipv4.rst:697 #: ../../configuration/firewall/ipv6.rst:684 msgid "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on inbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:707 +#: ../../configuration/firewall/ipv4.rst:730 #: ../../configuration/firewall/ipv6.rst:717 msgid "Match based on ipsec criteria." -msgstr "Match based on ipsec criteria." +msgstr "Збіг на основі критеріїв ipsec." #: ../../configuration/firewall/general.rst:999 msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/bridge.rst:256 -#: ../../configuration/firewall/ipv4.rst:684 +#: ../../configuration/firewall/ipv4.rst:707 #: ../../configuration/firewall/ipv6.rst:694 msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!eth2``" #: ../../configuration/firewall/bridge.rst:265 -#: ../../configuration/firewall/ipv4.rst:695 +#: ../../configuration/firewall/ipv4.rst:718 #: ../../configuration/firewall/ipv6.rst:705 msgid "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" msgstr "Match based on outbound interface group. Prepending character ``!`` for inverted matching criteria is also supportd. For example ``!IFACE_GROUP``" -#: ../../configuration/firewall/ipv4.rst:750 +#: ../../configuration/firewall/ipv4.rst:773 #: ../../configuration/firewall/ipv6.rst:760 #: ../../configuration/policy/route.rst:176 msgid "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." -msgstr "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." +msgstr "Збіг на основі критеріїв довжини пакета. Підтримуються кілька значень від 1 до 65535 і діапазони." -#: ../../configuration/firewall/ipv4.rst:762 +#: ../../configuration/firewall/ipv4.rst:785 #: ../../configuration/firewall/ipv6.rst:772 #: ../../configuration/policy/route.rst:184 msgid "Match based on packet type criteria." -msgstr "Match based on packet type criteria." +msgstr "Збіг на основі критеріїв типу пакета." -#: ../../configuration/firewall/ipv4.rst:729 +#: ../../configuration/firewall/ipv4.rst:752 #: ../../configuration/firewall/ipv6.rst:739 msgid "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" -msgstr "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" +msgstr "Збіг на основі максимальної середньої ставки, визначеної як **ціле число/одиниця**. Наприклад **5/хв**" -#: ../../configuration/firewall/ipv4.rst:718 +#: ../../configuration/firewall/ipv4.rst:741 #: ../../configuration/firewall/ipv6.rst:728 msgid "Match based on the maximum number of packets to allow in excess of rate." -msgstr "Match based on the maximum number of packets to allow in excess of rate." +msgstr "Збіг на основі максимальної кількості пакетів, щоб дозволити перевищення швидкості." #: ../../configuration/firewall/bridge.rst:273 msgid "Match based on vlan ID. Range is also supported." @@ -8209,22 +9168,22 @@ msgstr "Match based on vlan ID. Range is also supported." msgid "Match based on vlan priority(pcp). Range is also supported." msgstr "Match based on vlan priority(pcp). Range is also supported." -#: ../../configuration/firewall/ipv4.rst:801 +#: ../../configuration/firewall/ipv4.rst:824 #: ../../configuration/firewall/ipv6.rst:810 msgid "Match bases on recently seen sources." -msgstr "Match bases on recently seen sources." +msgstr "Збіг базується на нещодавно переглянутих джерелах." #: ../../configuration/firewall/ipv4.rst:325 #: ../../configuration/firewall/ipv6.rst:325 msgid "Match criteria based on connection mark." -msgstr "Match criteria based on connection mark." +msgstr "Критерії відповідності на основі позначки з’єднання." #: ../../configuration/firewall/ipv4.rst:314 #: ../../configuration/firewall/ipv6.rst:314 msgid "Match criteria based on nat connection status." -msgstr "Match criteria based on nat connection status." +msgstr "Критерії збігу на основі статусу з’єднання nat." -#: ../../configuration/firewall/ipv4.rst:345 +#: ../../configuration/firewall/ipv4.rst:368 #: ../../configuration/firewall/ipv6.rst:345 msgid "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." msgstr "Match criteria based on source and/or destination address. This is similar to the network groups part, but here you are able to negate the matching addresses." @@ -8235,97 +9194,134 @@ msgstr "Match criteria based on source and/or destination mac-address." #: ../../configuration/loadbalancing/reverse-proxy.rst:58 msgid "Match domain name" -msgstr "Match domain name" +msgstr "Збіг доменного імені" + +#: ../../configuration/service/ipoe-server.rst:382 +#: ../../configuration/service/pppoe-server.rst:571 +#: ../../configuration/vpn/l2tp.rst:506 +#: ../../configuration/vpn/pptp.rst:430 +#: ../../configuration/vpn/sstp.rst:464 +msgid "Match firewall mark value" +msgstr "Match firewall mark value" #: ../../configuration/firewall/ipv6.rst:894 #: ../../configuration/policy/route.rst:234 msgid "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." -msgstr "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." +msgstr "Параметр ліміту стрибків відповідності, де «eq» означає «рівний»; «gt» означає «більше ніж», а «lt» означає «менше»." #: ../../configuration/policy/route-map.rst:146 msgid "Match local preference." -msgstr "Match local preference." +msgstr "Відповідати місцевим уподобанням." #: ../../configuration/policy/route-map.rst:150 msgid "Match route metric." -msgstr "Match route metric." +msgstr "Метрика відповідності маршруту." -#: ../../configuration/firewall/ipv4.rst:885 +#: ../../configuration/firewall/ipv4.rst:908 #: ../../configuration/policy/route.rst:229 msgid "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." -msgstr "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." +msgstr "Параметр відповідності часу життя, де «eq» означає «рівний»; «gt» означає «більше ніж», а «lt» означає «менше»." -#: ../../configuration/firewall/ipv4.rst:906 +#: ../../configuration/firewall/ipv4.rst:929 #: ../../configuration/firewall/ipv6.rst:915 msgid "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." -msgstr "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." +msgstr "Збіг, коли кількість з’єднань «count» відображається протягом «time». Ці критерії відповідності можна використовувати для блокування спроб грубої сили." #: ../../configuration/firewall/bridge.rst:219 #: ../../configuration/firewall/ipv4.rst:301 #: ../../configuration/firewall/ipv6.rst:301 #: ../../configuration/policy/route.rst:38 msgid "Matching criteria" -msgstr "Matching criteria" +msgstr "Критерії відповідності" #: ../../configuration/trafficpolicy/index.rst:119 msgid "Matching traffic" -msgstr "Matching traffic" +msgstr "Відповідний трафік" #: ../../configuration/interfaces/wireless.rst:199 msgid "Maximum A-MSDU length 3839 (default) or 7935 octets" -msgstr "Maximum A-MSDU length 3839 (default) or 7935 octets" +msgstr "Максимальна довжина A-MSDU 3839 (за замовчуванням) або 7935 октетів" + +#: ../../configuration/vpn/l2tp.rst:492 +#: ../../configuration/vpn/pptp.rst:416 +msgid "Maximum Transmission Unit (MTU) (default: **1436**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1436**)" + +#: ../../configuration/service/pppoe-server.rst:538 +msgid "Maximum Transmission Unit (MTU) (default: **1492**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1492**)" + +#: ../../configuration/vpn/sstp.rst:450 +msgid "Maximum Transmission Unit (MTU) (default: **1500**)" +msgstr "Maximum Transmission Unit (MTU) (default: **1500**)" #: ../../configuration/service/dns.rst:108 msgid "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." -msgstr "Maximum number of DNS cache entries. 1 million per CPU core will generally suffice for most installations." +msgstr "Максимальна кількість записів кешу DNS. 1 мільйон на ядро ЦП зазвичай буде достатнім для більшості установок." -#: ../../configuration/vpn/sstp.rst:159 +#: ../../configuration/vpn/sstp.rst:165 msgid "Maximum number of IPv4 nameservers" -msgstr "Maximum number of IPv4 nameservers" +msgstr "Максимальна кількість серверів імен IPv4" #: ../../configuration/service/webproxy.rst:160 msgid "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." -msgstr "Maximum number of authenticator processes to spawn. If you start too few Squid will have to wait for them to process a backlog of credential verifications, slowing it down. When password verifications are done via a (slow) network you are likely to need lots of authenticator processes." +msgstr "Максимальна кількість процесів автентифікатора для створення. Якщо ви починаєте занадто мало, Squid доведеться чекати, поки вони оброблять затримку перевірок облікових даних, що сповільнить його роботу. Коли перевірка пароля виконується через (повільну) мережу, ймовірно, знадобиться багато процесів автентифікації." + +#: ../../configuration/service/ipoe-server.rst:372 +#: ../../configuration/service/pppoe-server.rst:542 +#: ../../configuration/vpn/l2tp.rst:496 +#: ../../configuration/vpn/pptp.rst:420 +#: ../../configuration/vpn/sstp.rst:454 +msgid "Maximum number of concurrent session start attempts" +msgstr "Maximum number of concurrent session start attempts" #: ../../configuration/interfaces/wireless.rst:77 msgid "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." -msgstr "Maximum number of stations allowed in station table. New stations will be rejected after the station table is full. IEEE 802.11 has a limit of 2007 different association IDs, so this number should not be larger than that." +msgstr "Максимальна дозволена кількість станцій у таблиці станцій. Нові станції будуть відхилені після заповнення таблиці станцій. IEEE 802.11 має обмеження в 2007 різних ідентифікаторів асоціацій, тому це число не повинно бути більшим за це." #: ../../configuration/service/dns.rst:148 msgid "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." msgstr "Maximum number of times an expired record’s TTL is extended by 30s when serving stale. Extension only occurs if a record cannot be refreshed. A value of 0 means the Serve Stale mechanism is not used. To allow records becoming stale to be served for an hour, use a value of 120." -#: ../../configuration/vpn/sstp.rst:250 +#: ../../configuration/service/ipoe-server.rst:190 +#: ../../configuration/service/pppoe-server.rst:152 +#: ../../configuration/vpn/l2tp.rst:195 +#: ../../configuration/vpn/pptp.rst:135 +#: ../../configuration/vpn/sstp.rst:168 msgid "Maximum number of tries to send Access-Request/Accounting-Request queries" -msgstr "Maximum number of tries to send Access-Request/Accounting-Request queries" +msgstr "Максимальна кількість спроб надсилання запитів Access-Request/Accounting-Request" #: ../../configuration/trafficpolicy/index.rst:271 #: ../../configuration/trafficpolicy/index.rst:277 #: ../../configuration/trafficpolicy/index.rst:283 #: ../../configuration/trafficpolicy/index.rst:289 msgid "Medium" -msgstr "Medium" +msgstr "Середній" #: ../../configuration/interfaces/bonding.rst:27 #: ../../configuration/interfaces/bridge.rst:31 msgid "Member Interfaces" -msgstr "Member Interfaces" +msgstr "Інтерфейси учасників" -#: ../../configuration/interfaces/bridge.rst:196 +#: ../../configuration/interfaces/bridge.rst:205 msgid "Member interfaces `eth1` and VLAN 10 on interface `eth2`" -msgstr "Member interfaces `eth1` and VLAN 10 on interface `eth2`" +msgstr "Членські інтерфейси `eth1` і VLAN 10 на інтерфейсі `eth2`" #: ../../configuration/system/syslog.rst:122 msgid "Messages generated internally by syslogd" -msgstr "Messages generated internally by syslogd" +msgstr "Повідомлення, створені внутрішньо syslogd" #: ../../configuration/service/monitoring.rst:63 msgid "Metris version, the default is ``2``" -msgstr "Metris version, the default is ``2``" +msgstr "Версія Metris, типовим є ``2``" + +#: ../../configuration/vpn/ipsec.rst:510 +msgid "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." +msgstr "Microsoft Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/service/router-advert.rst:1 msgid "Min and max intervals between unsolicited multicast RAs" -msgstr "Min and max intervals between unsolicited multicast RAs" +msgstr "Мінімальний і максимальний інтервали між небажаними багатоадресними RA" #: ../../configuration/firewall/flowtables.rst:106 msgid "Minumum firewall ruleset is provided, which includes some filtering rules, and appropiate rules for using flowtable offload capabilities." @@ -8349,19 +9345,24 @@ msgstr "Modify the time that pim will register suppress a FHR will send register #: ../../configuration/interfaces/wireless.rst:22 msgid "Monitor, the system passively monitors any kind of wireless traffic" -msgstr "Monitor, the system passively monitors any kind of wireless traffic" +msgstr "Монітор, система пасивно відстежує будь-який вид бездротового трафіку" +#: ../../configuration/service/ipoe-server.rst:390 #: ../../configuration/service/monitoring.rst:2 +#: ../../configuration/service/pppoe-server.rst:583 +#: ../../configuration/vpn/l2tp.rst:518 +#: ../../configuration/vpn/pptp.rst:442 +#: ../../configuration/vpn/sstp.rst:538 msgid "Monitoring" -msgstr "Monitoring" +msgstr "Моніторинг" #: ../../configuration/service/monitoring.rst:108 msgid "Monitoring functionality with ``telegraf`` and ``InfluxDB 2`` is provided. Telegraf is the open source server agent to help you collect metrics, events and logs from your routers." -msgstr "Monitoring functionality with ``telegraf`` and ``InfluxDB 2`` is provided. Telegraf is the open source server agent to help you collect metrics, events and logs from your routers." +msgstr "Надається функція моніторингу за допомогою ``telegraf`` і ``InfluxDB 2``. Telegraf — це агент сервера з відкритим кодом, який допоможе вам збирати показники, події та журнали з ваших маршрутизаторів." #: ../../configuration/interfaces/vti.rst:32 msgid "More details about the IPsec and VTI issue and option disable-route-autoinstall https://blog.vyos.io/vyos-1-dot-2-0-development-news-in-july" -msgstr "More details about the IPsec and VTI issue and option disable-route-autoinstall https://blog.vyos.io/vyos-1-dot-2-0-development-news-in-july" +msgstr "Докладніше про проблему IPsec і VTI та опцію disable-route-autoinstall https://blog.vyos.io/vyos-1-dot-2-0-development-news-in-july" #: ../../configuration/vpn/remoteaccess_ipsec.rst:139 msgid "Most operating systems include native client support for IPsec IKEv2 VPN connections, and others typically have an app or add-on package which adds the capability. This section covers IPsec IKEv2 client configuration for Windows 10." @@ -8369,35 +9370,35 @@ msgstr "Most operating systems include native client support for IPsec IKEv2 VPN #: ../../configuration/container/index.rst:85 msgid "Mount a volume into the container" -msgstr "Mount a volume into the container" +msgstr "Встановіть том у контейнер" -#: ../../configuration/service/dhcp-server.rst:235 +#: ../../configuration/service/dhcp-server.rst:291 msgid "Multi" -msgstr "Multi" +msgstr "Мульти" #: ../../configuration/interfaces/openvpn.rst:327 msgid "Multi-client server is the most popular OpenVPN mode on routers. It always uses x.509 authentication and therefore requires a PKI setup. Refer this topic :ref:`configuration/pki/index:pki` to generate a CA certificate, a server certificate and key, a certificate revocation list, a Diffie-Hellman key exchange parameters file. You do not need client certificates and keys for the server setup." -msgstr "Multi-client server is the most popular OpenVPN mode on routers. It always uses x.509 authentication and therefore requires a PKI setup. Refer this topic :ref:`configuration/pki/index:pki` to generate a CA certificate, a server certificate and key, a certificate revocation list, a Diffie-Hellman key exchange parameters file. You do not need client certificates and keys for the server setup." +msgstr "Мультиклієнтський сервер є найпопулярнішим режимом OpenVPN на маршрутизаторах. Він завжди використовує автентифікацію x.509 і тому вимагає налаштування PKI. Зверніться до цієї теми :ref:`configuration/pki/index:pki`, щоб створити сертифікат CA, сертифікат і ключ сервера, список відкликаних сертифікатів, файл параметрів обміну ключами Діффі-Хеллмана. Вам не потрібні клієнтські сертифікати та ключі для налаштування сервера." #: ../../configuration/nat/nat66.rst:42 msgid "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." -msgstr "Multi-homed. In a multi-homed network environment, the NAT66 device connects to an internal network and simultaneously connects to different external networks. Address translation can be configured on each external network side interface of the NAT66 device to convert the same internal network address into different external network addresses, and realize the mapping of the same internal address to multiple external addresses." +msgstr "Багатоквартирний. У мережевому середовищі з кількома адресами пристрій NAT66 підключається до внутрішньої мережі та одночасно з різними зовнішніми мережами. Трансляцію адреси можна налаштувати на кожному зовнішньому мережевому інтерфейсі пристрою NAT66, щоб перетворити ту саму внутрішню мережеву адресу в інші зовнішні мережеві адреси та реалізувати відображення тієї самої внутрішньої адреси в декілька зовнішніх адрес." -#: ../../configuration/service/dhcp-server.rst:359 +#: ../../configuration/service/dhcp-server.rst:415 msgid "Multi: can be specified multiple times." -msgstr "Multi: can be specified multiple times." +msgstr "Multi: можна вказати кілька разів." #: ../../configuration/interfaces/vxlan.rst:110 msgid "Multicast" -msgstr "Multicast" +msgstr "Багатоадресна розсилка" #: ../../configuration/interfaces/vxlan.rst:230 msgid "Multicast-routing is required for the leaves to forward traffic between each other in a more scalable way. This also requires PIM to be enabled towards the leaves so that the Spine can learn what multicast groups each Leaf expects traffic from." -msgstr "Multicast-routing is required for the leaves to forward traffic between each other in a more scalable way. This also requires PIM to be enabled towards the leaves so that the Spine can learn what multicast groups each Leaf expects traffic from." +msgstr "Багатоадресна маршрутизація потрібна для листів, щоб пересилати трафік між собою більш масштабованим способом. Для цього також потрібно ввімкнути PIM для листів, щоб Spine міг дізнатися, з яких груп багатоадресної розсилки кожен лист очікує трафік." #: ../../configuration/service/mdns.rst:8 msgid "Multicast DNS uses the 224.0.0.251 address, which is \"administratively scoped\" and does not leave the subnet. It retransmits mDNS packets from one interface to other interfaces. This enables support for e.g. Apple Airplay devices across multiple VLANs." -msgstr "Multicast DNS uses the 224.0.0.251 address, which is \"administratively scoped\" and does not leave the subnet. It retransmits mDNS packets from one interface to other interfaces. This enables support for e.g. Apple Airplay devices across multiple VLANs." +msgstr "Багатоадресний DNS використовує адресу 224.0.0.251, яка має «адміністративну область» і не виходить за межі підмережі. Він повторно передає пакети mDNS з одного інтерфейсу на інші інтерфейси. Це забезпечує підтримку, наприклад, пристроїв Apple Airplay у кількох VLAN." #: ../../configuration/service/mdns.rst:8 msgid "Multicast DNS uses the reserved address ``224.0.0.251``, which is `\"administratively scoped\"` and does not leave the subnet. mDNS repeater retransmits mDNS packets from one interface to other interfaces. This enables support for devices using mDNS discovery (like network printers, Apple Airplay, Chromecast, various IP based home-automation devices etc) across multiple VLANs." @@ -8405,111 +9406,114 @@ msgstr "Multicast DNS uses the reserved address ``224.0.0.251``, which is `\"adm #: ../../configuration/interfaces/vxlan.rst:126 msgid "Multicast VXLAN" -msgstr "Multicast VXLAN" +msgstr "Багатоадресна розсилка VXLAN" #: ../../configuration/interfaces/vxlan.rst:120 msgid "Multicast group address for VXLAN interface. VXLAN tunnels can be built either via Multicast or via Unicast." -msgstr "Multicast group address for VXLAN interface. VXLAN tunnels can be built either via Multicast or via Unicast." +msgstr "Групова адреса багатоадресної передачі для інтерфейсу VXLAN. Тунелі VXLAN можна побудувати як через Multicast, так і через Unicast." #: ../../configuration/service/conntrack-sync.rst:83 msgid "Multicast group to use for syncing conntrack entries." -msgstr "Multicast group to use for syncing conntrack entries." +msgstr "Група групової розсилки для синхронізації записів conntrack." #: ../../configuration/protocols/pim.rst:22 msgid "Multicast receivers will talk IGMP to their local router, so, besides having PIM configured in every router, IGMP must also be configured in any router where there could be a multicast receiver locally connected." -msgstr "Multicast receivers will talk IGMP to their local router, so, besides having PIM configured in every router, IGMP must also be configured in any router where there could be a multicast receiver locally connected." +msgstr "Одержувачі багатоадресної розсилки спілкуватимуться через IGMP зі своїм локальним маршрутизатором, тому, окрім налаштованого PIM у кожному маршрутизаторі, IGMP також має бути налаштований у будь-якому маршрутизаторі, до якого може бути локально підключений приймач багатоадресної розсилки." #: ../../configuration/protocols/pim6.rst:18 msgid "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." msgstr "Multicast receivers will talk MLD to their local router, so, besides having PIMv6 configured in every router, MLD must also be configured in any router where there could be a multicast receiver locally connected." -#: ../../configuration/service/dhcp-server.rst:54 -#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:108 msgid "Multiple DNS servers can be defined." -msgstr "Multiple DNS servers can be defined." +msgstr "Можна визначити кілька DNS-серверів." -#: ../../configuration/protocols/rpki.rst:121 +#: ../../configuration/protocols/rpki.rst:133 msgid "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." -msgstr "Multiple RPKI caching instances can be supplied and they need a preference in which their result sets are used." +msgstr "Можна надати кілька екземплярів кешування RPKI, і для них потрібні параметри, у яких використовуються їхні набори результатів." #: ../../configuration/policy/examples.rst:90 msgid "Multiple Uplinks" -msgstr "Multiple Uplinks" +msgstr "Кілька вихідних каналів" #: ../../configuration/interfaces/vxlan.rst:165 msgid "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." msgstr "Multiple VLAN to VNI mappings can be configured against the same SVD. This allows for a significant scaling of the number of VNIs since a separate VXLAN interface is no longer required for each VNI." #: ../../configuration/system/host-name.rst:68 +msgid "Multiple aliases can be specified per host-name." +msgstr "Multiple aliases can be specified per host-name." + +#: ../../configuration/system/host-name.rst:68 msgid "Multiple aliases can pe specified per host-name." -msgstr "Multiple aliases can pe specified per host-name." +msgstr "Для кожного імені хоста можна вказати кілька псевдонімів." #: ../../configuration/policy/route.rst:101 msgid "Multiple destination ports can be specified as a comma-separated list. The whole list can also be \"negated\" using '!'. For example: '!22,telnet,http,123,1001-1005'" -msgstr "Multiple destination ports can be specified as a comma-separated list. The whole list can also be \"negated\" using '!'. For example: '!22,telnet,http,123,1001-1005'" +msgstr "Кілька портів призначення можна вказати як список, розділений комами. Весь список також можна "заперечити" за допомогою "!". Наприклад: '!22,telnet,http,123,1001-1005'" #: ../../configuration/system/conntrack.rst:150 msgid "Multiple destination ports can be specified as a comma-separated list. The whole list can also be \"negated\" using '!'. For example: `!22,telnet,http,123,1001-1005``" -msgstr "Multiple destination ports can be specified as a comma-separated list. The whole list can also be \"negated\" using '!'. For example: `!22,telnet,http,123,1001-1005``" +msgstr "Кілька портів призначення можна вказати як список, розділений комами. Весь список також можна "заперечити" за допомогою "!". Наприклад: `!22,telnet,http,123,1001-1005``" #: ../../configuration/service/dhcp-relay.rst:143 msgid "Multiple interfaces may be specified." -msgstr "Multiple interfaces may be specified." +msgstr "Можна вказати кілька інтерфейсів." #: ../../configuration/service/ntp.rst:80 msgid "Multiple networks/client IP addresses can be configured." -msgstr "Multiple networks/client IP addresses can be configured." +msgstr "Можна налаштувати декілька мереж/клієнтських IP-адрес." -#: ../../configuration/system/login.rst:248 -#: ../../configuration/system/login.rst:317 +#: ../../configuration/system/login.rst:252 +#: ../../configuration/system/login.rst:321 msgid "Multiple servers can be specified." -msgstr "Multiple servers can be specified." +msgstr "Можна вказати декілька серверів." -#: ../../configuration/service/dns.rst:374 +#: ../../configuration/service/dns.rst:474 msgid "Multiple services can be used per interface. Just specify as many services per interface as you like!" -msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" +msgstr "Для одного інтерфейсу можна використовувати декілька служб. Просто вкажіть скільки завгодно послуг для кожного інтерфейсу!" -#: ../../configuration/firewall/ipv4.rst:494 +#: ../../configuration/firewall/ipv4.rst:517 #: ../../configuration/firewall/ipv6.rst:500 msgid "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" -msgstr "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" +msgstr "Кілька вихідних портів можна вказати як список, розділений комами. Весь список також можна "заперечити" за допомогою ``!``. Наприклад:" #: ../../configuration/interfaces/bonding.rst:268 msgid "Multiple target IP addresses can be specified. At least one IP address must be given for ARP monitoring to function." -msgstr "Multiple target IP addresses can be specified. At least one IP address must be given for ARP monitoring to function." +msgstr "Можна вказати кілька цільових IP-адрес. Для роботи моніторингу ARP потрібно надати принаймні одну IP-адресу." #: ../../configuration/service/console-server.rst:72 #: ../../configuration/service/console-server.rst:109 msgid "Multiple users can connect to the same serial device but only one is allowed to write to the console port." -msgstr "Multiple users can connect to the same serial device but only one is allowed to write to the console port." +msgstr "Кілька користувачів можуть підключатися до одного послідовного пристрою, але лише одному дозволено записувати до консольного порту." #: ../../configuration/protocols/bgp.rst:50 msgid "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." -msgstr "Multiprotocol extensions enable BGP to carry routing information for multiple network layer protocols. BGP supports an Address Family Identifier (AFI) for IPv4 and IPv6." +msgstr "Багатопротокольні розширення дозволяють BGP передавати інформацію про маршрутизацію для кількох протоколів мережевого рівня. BGP підтримує ідентифікатор родини адрес (AFI) для IPv4 та IPv6." -#: ../../configuration/service/dhcp-server.rst:241 -#: ../../configuration/service/dhcp-server.rst:247 -#: ../../configuration/service/dhcp-server.rst:252 -#: ../../configuration/service/dhcp-server.rst:272 -#: ../../configuration/service/dhcp-server.rst:287 -#: ../../configuration/service/dhcp-server.rst:292 #: ../../configuration/service/dhcp-server.rst:297 -#: ../../configuration/service/dhcp-server.rst:302 -#: ../../configuration/service/dhcp-server.rst:307 -#: ../../configuration/service/dhcp-server.rst:327 -#: ../../configuration/service/dhcp-server.rst:332 -#: ../../configuration/service/dhcp-server.rst:337 +#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:308 +#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:358 +#: ../../configuration/service/dhcp-server.rst:363 +#: ../../configuration/service/dhcp-server.rst:383 +#: ../../configuration/service/dhcp-server.rst:388 +#: ../../configuration/service/dhcp-server.rst:393 msgid "N" -msgstr "N" +msgstr "п" -#: ../../configuration/highavailability/index.rst:363 +#: ../../configuration/highavailability/index.rst:373 #: ../../configuration/nat/index.rst:5 msgid "NAT" msgstr "NAT" #: ../../configuration/nat/nat44.rst:113 msgid "NAT, Routing, Firewall Interaction" -msgstr "NAT, Routing, Firewall Interaction" +msgstr "NAT, маршрутизація, взаємодія з брандмауером" #: ../../configuration/nat/nat44.rst:5 msgid "NAT44" @@ -8523,6 +9527,10 @@ msgstr "NAT64" msgid "NAT64 client configuration:" msgstr "NAT64 client configuration:" +#: ../../configuration/service/router-advert.rst:84 +msgid "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." +msgstr "NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96." + #: ../../configuration/nat/nat64.rst:44 msgid "NAT64 server configuration:" msgstr "NAT64 server configuration:" @@ -8533,7 +9541,7 @@ msgstr "NAT66(NPTv6)" #: ../../configuration/nat/nat44.rst:730 msgid "NAT Configuration" -msgstr "NAT Configuration" +msgstr "Конфігурація NAT" #: ../../configuration/nat/nat44.rst:299 msgid "NAT Load Balance" @@ -8545,23 +9553,23 @@ msgstr "NAT Load Balance uses an algorithm that generates a hash and based on it #: ../../configuration/nat/nat44.rst:119 msgid "NAT Ruleset" -msgstr "NAT Ruleset" +msgstr "Набір правил NAT" #: ../../configuration/nat/nat44.rst:710 msgid "NAT (specifically, Source NAT);" -msgstr "NAT (specifically, Source NAT);" +msgstr "NAT (зокрема, Source NAT);" #: ../../configuration/nat/nat44.rst:648 msgid "NAT before VPN" -msgstr "NAT before VPN" +msgstr "NAT перед VPN" #: ../../configuration/nat/nat44.rst:701 msgid "NAT before VPN Topology" -msgstr "NAT before VPN Topology" +msgstr "Топологія NAT перед VPN" #: ../../configuration/vpn/dmvpn.rst:17 msgid "NHRP provides the dynamic tunnel endpoint discovery mechanism (endpoint registration, and endpoint discovery/lookup), mGRE provides the tunnel encapsulation itself, and the IPSec protocols handle the key exchange, and crypto mechanism." -msgstr "NHRP provides the dynamic tunnel endpoint discovery mechanism (endpoint registration, and endpoint discovery/lookup), mGRE provides the tunnel encapsulation itself, and the IPSec protocols handle the key exchange, and crypto mechanism." +msgstr "NHRP забезпечує динамічний механізм виявлення кінцевої точки тунелю (реєстрація кінцевої точки та виявлення/пошук кінцевої точки), mGRE забезпечує саму інкапсуляцію тунелю, а протоколи IPSec обробляють обмін ключами та механізм шифрування." #: ../../configuration/service/ntp.rst:5 msgid "NTP" @@ -8569,39 +9577,47 @@ msgstr "NTP" #: ../../configuration/service/ntp.rst:12 msgid "NTP is intended to synchronize all participating computers to within a few milliseconds of :abbr:`UTC (Coordinated Universal Time)`. It uses the intersection algorithm, a modified version of Marzullo's algorithm, to select accurate time servers and is designed to mitigate the effects of variable network latency. NTP can usually maintain time to within tens of milliseconds over the public Internet, and can achieve better than one millisecond accuracy in local area networks under ideal conditions. Asymmetric routes and network congestion can cause errors of 100 ms or more." -msgstr "NTP is intended to synchronize all participating computers to within a few milliseconds of :abbr:`UTC (Coordinated Universal Time)`. It uses the intersection algorithm, a modified version of Marzullo's algorithm, to select accurate time servers and is designed to mitigate the effects of variable network latency. NTP can usually maintain time to within tens of milliseconds over the public Internet, and can achieve better than one millisecond accuracy in local area networks under ideal conditions. Asymmetric routes and network congestion can cause errors of 100 ms or more." +msgstr "NTP призначений для синхронізації всіх комп’ютерів-учасників з точністю до кількох мілісекунд :abbr:`UTC (всесвітнього координованого часу)`. Він використовує алгоритм перетину, модифіковану версію алгоритму Марзулло, для вибору точних серверів часу та призначений для пом’якшення впливу змінної затримки мережі. NTP зазвичай може підтримувати час з точністю до десятків мілісекунд у загальнодоступному Інтернеті та може досягати точності вище однієї мілісекунди в локальних мережах за ідеальних умов. Асиметричні маршрути та перевантаження мережі можуть спричинити помилки 100 мс або більше." #: ../../configuration/service/ntp.rst:72 msgid "NTP process will only listen on the specified IP address. You must specify the `<address>` and optionally the permitted clients. Multiple listen addresses can be configured." -msgstr "NTP process will only listen on the specified IP address. You must specify the `<address>` and optionally the permitted clients. Multiple listen addresses can be configured." +msgstr "Процес NTP слухатиме лише вказану IP-адресу. Ви повинні вказати `<address> ` і, за бажанням, дозволені клієнти. Можна налаштувати кілька адрес прослуховування." #: ../../configuration/system/syslog.rst:136 msgid "NTP subsystem" -msgstr "NTP subsystem" +msgstr "підсистема NTP" #: ../../configuration/service/ntp.rst:26 msgid "NTP supplies a warning of any impending leap second adjustment, but no information about local time zones or daylight saving time is transmitted." -msgstr "NTP supplies a warning of any impending leap second adjustment, but no information about local time zones or daylight saving time is transmitted." +msgstr "NTP подає попередження про будь-яке загрозливе коригування високосної секунди, але інформація про місцеві часові пояси чи літній час не передається." #: ../../configuration/service/router-advert.rst:1 msgid "Name Server" -msgstr "Name Server" +msgstr "Сервер імен" -#: ../../configuration/service/dhcp-server.rst:356 +#: ../../configuration/vpn/sstp.rst:84 +msgid "Name of installed certificate authority certificate." +msgstr "Name of installed certificate authority certificate." + +#: ../../configuration/vpn/sstp.rst:88 +msgid "Name of installed server certificate." +msgstr "Name of installed server certificate." + +#: ../../configuration/service/dhcp-server.rst:412 msgid "Name of static mapping" -msgstr "Name of static mapping" +msgstr "Назва статичного відображення" #: ../../configuration/service/monitoring.rst:31 msgid "Name of the single table Only if set group-metrics single-table." -msgstr "Name of the single table Only if set group-metrics single-table." +msgstr "Ім'я єдиної таблиці, лише якщо встановлено group-metrics single-table." -#: ../../configuration/service/dhcp-server.rst:296 +#: ../../configuration/service/dhcp-server.rst:352 msgid "Name or IPv4 address of TFTP server" -msgstr "Name or IPv4 address of TFTP server" +msgstr "Назва або адреса IPv4 сервера TFTP" -#: ../../configuration/service/dhcp-server.rst:281 +#: ../../configuration/service/dhcp-server.rst:337 msgid "NetBIOS over TCP/IP name server" -msgstr "NetBIOS over TCP/IP name server" +msgstr "NetBIOS через сервер імен TCP/IP" #: ../../configuration/system/flow-accounting.rst:92 msgid "NetFlow" @@ -8613,19 +9629,19 @@ msgstr "NetFlow / IPFIX" #: ../../configuration/system/flow-accounting.rst:115 msgid "NetFlow engine-id which will appear in NetFlow data. The range is 0 to 255." -msgstr "NetFlow engine-id which will appear in NetFlow data. The range is 0 to 255." +msgstr "Ідентифікатор механізму NetFlow, який відображатиметься в даних NetFlow. Діапазон від 0 до 255." #: ../../configuration/system/flow-accounting.rst:21 msgid "NetFlow is a feature that was introduced on Cisco routers around 1996 that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administrator can determine things such as the source and destination of traffic, class of service, and the causes of congestion. A typical flow monitoring setup (using NetFlow) consists of three main components:" -msgstr "NetFlow is a feature that was introduced on Cisco routers around 1996 that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administrator can determine things such as the source and destination of traffic, class of service, and the causes of congestion. A typical flow monitoring setup (using NetFlow) consists of three main components:" +msgstr "NetFlow — це функція, яка була представлена на маршрутизаторах Cisco приблизно в 1996 році і забезпечує можливість збору IP-мережевого трафіку під час входу або виходу з інтерфейсу. Аналізуючи дані, надані NetFlow, адміністратор мережі може визначити такі речі, як джерело та призначення трафіку, клас обслуговування та причини перевантаження. Типове налаштування моніторингу потоку (з використанням NetFlow) складається з трьох основних компонентів:" #: ../../configuration/system/flow-accounting.rst:38 msgid "NetFlow is usually enabled on a per-interface basis to limit load on the router components involved in NetFlow, or to limit the amount of NetFlow records exported." -msgstr "NetFlow is usually enabled on a per-interface basis to limit load on the router components involved in NetFlow, or to limit the amount of NetFlow records exported." +msgstr "NetFlow зазвичай вмикається для кожного інтерфейсу, щоб обмежити навантаження на компоненти маршрутизатора, задіяні в NetFlow, або обмежити кількість експортованих записів NetFlow." #: ../../configuration/system/flow-accounting.rst:166 msgid "NetFlow v5 example:" -msgstr "NetFlow v5 example:" +msgstr "Приклад NetFlow v5:" #: ../../configuration/firewall/index.rst:13 msgid "Netfilter based" @@ -8634,116 +9650,136 @@ msgstr "Netfilter based" #: ../../configuration/policy/prefix-list.rst:43 #: ../../configuration/policy/prefix-list.rst:76 msgid "Netmask greater than length." -msgstr "Netmask greater than length." +msgstr "Маска мережі перевищує довжину." #: ../../configuration/policy/prefix-list.rst:47 #: ../../configuration/policy/prefix-list.rst:80 msgid "Netmask less than length" -msgstr "Netmask less than length" +msgstr "Маска мережі менша за довжину" #: ../../configuration/protocols/bgp.rst:500 msgid "Network Advertisement Configuration" -msgstr "Network Advertisement Configuration" +msgstr "Конфігурація мережевої реклами" #: ../../configuration/trafficpolicy/index.rst:789 msgid "Network Control" -msgstr "Network Control" +msgstr "Контроль мережі" #: ../../configuration/trafficpolicy/index.rst:619 msgid "Network Emulator" -msgstr "Network Emulator" +msgstr "Емулятор мережі" #: ../../configuration/firewall/groups.rst:42 msgid "Network Groups" -msgstr "Network Groups" +msgstr "Групи мережі" #: ../../configuration/interfaces/wireless.rst:350 msgid "Network ID (SSID) ``Enterprise-TEST``" -msgstr "Network ID (SSID) ``Enterprise-TEST``" +msgstr "Ідентифікатор мережі (SSID) ``Enterprise-TEST``" #: ../../configuration/interfaces/wireless.rst:550 msgid "Network ID (SSID) ``TEST``" -msgstr "Network ID (SSID) ``TEST``" +msgstr "Ідентифікатор мережі (SSID) ``TEST``" #: ../../configuration/protocols/pim.rst:-1 msgid "Network Topology Diagram" -msgstr "Network Topology Diagram" +msgstr "Схема топології мережі" #: ../../configuration/service/snmp.rst:40 msgid "Network management station (NMS) - software which runs on the manager" -msgstr "Network management station (NMS) - software which runs on the manager" +msgstr "Станція керування мережею (NMS) - програмне забезпечення, яке працює на диспетчері" #: ../../configuration/system/syslog.rst:126 msgid "Network news subsystem" -msgstr "Network news subsystem" +msgstr "Підсистема новин мережі" + +#: ../../configuration/service/ids.rst:87 +msgid "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" +msgstr "Network to be protected: 192.0.2.0/24 (public IPs use by customers)" #: ../../configuration/service/monitoring.rst:47 msgid "Networks allowed to query this server" -msgstr "Networks allowed to query this server" +msgstr "Мережам дозволено надсилати запити цьому серверу" #: ../../configuration/service/snmp.rst:149 msgid "New user will use SHA/AES for authentication and privacy" -msgstr "New user will use SHA/AES for authentication and privacy" +msgstr "Новий користувач використовуватиме SHA/AES для автентифікації та конфіденційності" #: ../../configuration/protocols/failover.rst:51 msgid "Next-hop interface for the route" -msgstr "Next-hop interface for the route" +msgstr "Інтерфейс наступного переходу для маршруту" #: ../../configuration/vpn/openconnect.rst:212 msgid "Next it is necessary to configure 2FA for OpenConnect:" -msgstr "Next it is necessary to configure 2FA for OpenConnect:" +msgstr "Далі необхідно налаштувати 2FA для OpenConnect:" -#: ../../configuration/policy/route-map.rst:279 +#: ../../configuration/policy/route-map.rst:282 msgid "Nexthop IP address." -msgstr "Nexthop IP address." +msgstr "IP-адреса Nexthop." -#: ../../configuration/policy/route-map.rst:298 +#: ../../configuration/policy/route-map.rst:301 msgid "Nexthop IPv6 address." -msgstr "Nexthop IPv6 address." +msgstr "IPv6-адреса Nexthop." #: ../../configuration/policy/route-map.rst:136 msgid "Nexthop IPv6 address to match." -msgstr "Nexthop IPv6 address to match." +msgstr "IPv6-адреса Nexthop для відповідності." + +#: ../../configuration/system/ip.rst:47 +#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/vrf/index.rst:71 +msgid "Nexthop Tracking" +msgstr "Nexthop Tracking" + +#: ../../configuration/system/ip.rst:49 +#: ../../configuration/system/ipv6.rst:45 +#: ../../configuration/vrf/index.rst:73 +msgid "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." +msgstr "Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if you do not wan't to e.g. allow BGP to peer across the default route." + +#: ../../configuration/protocols/rpki.rst:57 +msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." +msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 40%-50% of the prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2024." #: ../../configuration/protocols/rpki.rst:59 msgid "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" -msgstr "No ROA exists which covers that prefix. Unfortunately this is the case for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ (default-free zone)` at the start of 2020" +msgstr "Немає ROA, що охоплює цей префікс. На жаль, це стосується приблизно 80% префіксів IPv4, які були оголошені в :abbr:`DFZ (зона без замовчування)` на початку 2020 року" #: ../../configuration/interfaces/pppoe.rst:328 msgid "No VLAN tagging required by your ISP." -msgstr "No VLAN tagging required by your ISP." +msgstr "Ваш Інтернет-провайдер не потребує тегів VLAN." -#: ../../configuration/protocols/bgp.rst:707 +#: ../../configuration/protocols/bgp.rst:729 msgid "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." -msgstr "No route is suppressed indefinitely. Maximum-suppress-time defines the maximum time a route can be suppressed before it is re-advertised." +msgstr "Жоден маршрут не припиняється на невизначений термін. Maximum-suppress-time визначає максимальний час, протягом якого маршрут може бути заблокований до повторного оголошення." #: ../../configuration/protocols/segment-routing.rst:47 msgid "No support for SRLB" -msgstr "No support for SRLB" +msgstr "Немає підтримки для SRLB" #: ../../configuration/protocols/segment-routing.rst:45 msgid "No support for binding SID" -msgstr "No support for binding SID" +msgstr "Немає підтримки прив'язки SID" #: ../../configuration/protocols/segment-routing.rst:43 msgid "No support for level redistribution (L1 to L2 or L2 to L1)" -msgstr "No support for level redistribution (L1 to L2 or L2 to L1)" +msgstr "Немає підтримки перерозподілу рівнів (L1 на L2 або L2 на L1)" #: ../../configuration/service/webproxy.rst:99 msgid "Non-transparent proxying requires that the client browsers be configured with the proxy settings before requests are redirected. The advantage of this is that the client web browser can detect that a proxy is in use and can behave accordingly. In addition, web-transmitted malware can sometimes be blocked by a non-transparent web proxy, since they are not aware of the proxy settings." -msgstr "Non-transparent proxying requires that the client browsers be configured with the proxy settings before requests are redirected. The advantage of this is that the client web browser can detect that a proxy is in use and can behave accordingly. In addition, web-transmitted malware can sometimes be blocked by a non-transparent web proxy, since they are not aware of the proxy settings." +msgstr "Для непрозорого проксі-сервера перед перенаправленням запитів у клієнтських браузерах потрібно налаштувати параметри проксі-сервера. Перевагою цього є те, що клієнтський веб-браузер може виявити, що проксі-сервер використовується, і може поводитися відповідно. Крім того, зловмисне програмне забезпечення, що передається через Інтернет, іноді може блокуватися непрозорим веб-проксі, оскільки вони не знають про налаштування проксі." #: ../../configuration/interfaces/openvpn.rst:31 msgid "None of the operating systems have client software installed by default" -msgstr "None of the operating systems have client software installed by default" +msgstr "Жодна з операційних систем не має встановленого клієнтського програмного забезпечення за замовчуванням" #: ../../configuration/system/syslog.rst:185 msgid "Normal but significant conditions - conditions that are not error conditions, but that may require special handling." -msgstr "Normal but significant conditions - conditions that are not error conditions, but that may require special handling." +msgstr "Нормальні, але важливі умови - умови, які не є умовами помилки, але можуть вимагати спеціального поводження." #: ../../configuration/interfaces/bonding.rst:51 msgid "Not all transmit policies may be 802.3ad compliant, particularly in regards to the packet misordering requirements of section 43.2.4 of the 802.3ad standard." -msgstr "Not all transmit policies may be 802.3ad compliant, particularly in regards to the packet misordering requirements of section 43.2.4 of the 802.3ad standard." +msgstr "Не всі політики передавання можуть бути сумісними з 802.3ad, особливо щодо вимог щодо неправильного впорядкування пакетів у розділі 43.2.4 стандарту 802.3ad." #: ../../configuration/interfaces/openvpn.rst:127 msgid "Note: certificate names don't matter, we use 'openvpn-local' and 'openvpn-remote' but they can be arbitrary." @@ -8751,52 +9787,56 @@ msgstr "Note: certificate names don't matter, we use 'openvpn-local' and 'openvp #: ../../configuration/system/syslog.rst:246 msgid "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." -msgstr "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." +msgstr "Зауважте, що видалення файлу журналу не зупиняє систему від реєстрації подій. Якщо ви використовуєте цю команду, коли система записує події, старі події журналу буде видалено, але події після операції видалення будуть записані в новий файл. Щоб повністю видалити файл, спочатку видаліть реєстрацію файлу за допомогою команди системного журналу :ref:`custom-file`, а потім видаліть файл." -#: ../../configuration/vpn/ipsec.rst:294 +#: ../../configuration/vpn/ipsec.rst:298 #: ../../configuration/vpn/rsa-keys.rst:35 msgid "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." -msgstr "Note the command with the public key (set pki key-pair ipsec-RIGHT public key 'FAAOCAQ8AMII...')." +msgstr "Зверніть увагу на команду з відкритим ключем (встановити відкритий ключ pki key-pair ipsec-RIGHT 'FAAOCAQ8AMII...')." #: ../../configuration/system/syslog.rst:185 msgid "Notice" -msgstr "Notice" +msgstr "Повідомлення" -#: ../../configuration/service/conntrack-sync.rst:194 +#: ../../configuration/service/conntrack-sync.rst:203 msgid "Now configure conntrack-sync service on ``router1`` **and** ``router2``" -msgstr "Now configure conntrack-sync service on ``router1`` **and** ``router2``" +msgstr "Тепер налаштуйте службу conntrack-sync на ``router1`` **і** ``router2``" -#: ../../configuration/vpn/ipsec.rst:297 +#: ../../configuration/vpn/ipsec.rst:301 msgid "Now the noted public keys should be entered on the opposite routers." -msgstr "Now the noted public keys should be entered on the opposite routers." +msgstr "Тепер зазначені відкриті ключі слід ввести на протилежних маршрутизаторах." #: ../../configuration/service/dhcp-server.rst:503 msgid "Now we add the option to the scope, adapt to your setup" -msgstr "Now we add the option to the scope, adapt to your setup" +msgstr "Тепер ми додаємо опцію до прицілу, адаптуємо її до ваших налаштувань" #: ../../configuration/interfaces/openvpn.rst:385 msgid "Now we need to specify the server network settings. In all cases we need to specify the subnet for client tunnel endpoints. Since we want clients to access a specific network behind our router, we will use a push-route option for installing that route on clients." -msgstr "Now we need to specify the server network settings. In all cases we need to specify the subnet for client tunnel endpoints. Since we want clients to access a specific network behind our router, we will use a push-route option for installing that route on clients." +msgstr "Тепер нам потрібно вказати параметри мережі сервера. У всіх випадках нам потрібно вказати підмережу для кінцевих точок клієнтського тунелю. Оскільки ми хочемо, щоб клієнти отримували доступ до певної мережі за нашим маршрутизатором, ми будемо використовувати опцію push-маршруту для встановлення цього маршруту на клієнтах." #: ../../configuration/vpn/openconnect.rst:219 msgid "Now when connecting the user will first be asked for the password and then the OTP key." -msgstr "Now when connecting the user will first be asked for the password and then the OTP key." +msgstr "Тепер при підключенні у користувача спочатку буде запитуватися пароль, а потім ключ OTP." #: ../../configuration/vpn/rsa-keys.rst:52 msgid "Now you are ready to setup IPsec. The key points:" -msgstr "Now you are ready to setup IPsec. The key points:" +msgstr "Тепер ви готові до налаштування IPsec. Ключові моменти:" -#: ../../configuration/vpn/ipsec.rst:311 +#: ../../configuration/vpn/ipsec.rst:315 msgid "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." -msgstr "Now you are ready to setup IPsec. You'll need to use an ID instead of address for the peer." +msgstr "Тепер ви готові до налаштування IPsec. Вам потрібно буде використовувати ID замість адреси однорангового пристрою." #: ../../configuration/interfaces/wireless.rst:224 msgid "Number of antennas on this card" -msgstr "Number of antennas on this card" +msgstr "Кількість антен на цій картці" + +#: ../../configuration/service/dns.rst:166 +msgid "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." +msgstr "Number of bits of client IPv4 address to pass when sending EDNS Client Subnet address information." #: ../../configuration/system/syslog.rst:231 msgid "Number of lines to be displayed, default 10" -msgstr "Number of lines to be displayed, default 10" +msgstr "Кількість рядків для відображення, за замовчуванням 10" #: ../../configuration/protocols/ospf.rst:5 msgid "OSPF" @@ -8804,15 +9844,15 @@ msgstr "OSPF" #: ../../configuration/protocols/segment-routing.rst:120 msgid "OSPF SR Configuration" -msgstr "OSPF SR Configuration" +msgstr "Конфігурація OSPF SR" #: ../../configuration/protocols/ospf.rst:15 msgid "OSPF is a widely used IGP in large enterprise networks." -msgstr "OSPF is a widely used IGP in large enterprise networks." +msgstr "OSPF є широко використовуваним IGP у великих корпоративних мережах." #: ../../configuration/protocols/ospf.rst:539 msgid "OSPF routing devices normally discover their neighbors dynamically by listening to the broadcast or multicast hello packets on the network. Because an NBMA network does not support broadcast (or multicast), the device cannot discover its neighbors dynamically, so you must configure all the neighbors statically." -msgstr "OSPF routing devices normally discover their neighbors dynamically by listening to the broadcast or multicast hello packets on the network. Because an NBMA network does not support broadcast (or multicast), the device cannot discover its neighbors dynamically, so you must configure all the neighbors statically." +msgstr "Пристрої маршрутизації OSPF зазвичай динамічно виявляють своїх сусідів, прослуховуючи широкомовні або багатоадресні пакети привітання в мережі. Оскільки мережа NBMA не підтримує широкомовну (або групову) передачу, пристрій не може динамічно виявляти своїх сусідів, тому ви повинні налаштувати всіх сусідів статично." #: ../../configuration/protocols/ospf.rst:19 msgid "OSPFv2 (IPv4)" @@ -8822,29 +9862,29 @@ msgstr "OSPFv2 (IPv4)" msgid "OSPFv3 (IPv6)" msgstr "OSPFv3 (IPv6)" -#: ../../configuration/system/login.rst:141 +#: ../../configuration/system/login.rst:145 msgid "OTP-key generation" -msgstr "OTP-key generation" +msgstr "Генерація OTP-ключа" #: ../../configuration/interfaces/ethernet.rst:57 msgid "Offloading" -msgstr "Offloading" +msgstr "Розвантаження" -#: ../../configuration/service/dhcp-server.rst:245 +#: ../../configuration/service/dhcp-server.rst:301 msgid "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" -msgstr "Offset of the client's subnet in seconds from Coordinated Universal Time (UTC)" +msgstr "Зміщення підмережі клієнта в секундах від всесвітнього координованого часу (UTC)" #: ../../configuration/trafficpolicy/index.rst:302 msgid "Often we need to embed one policy into another one. It is possible to do so on classful policies, by attaching a new policy into a class. For instance, you might want to apply different policies to the different classes of a Round-Robin policy you have configured." -msgstr "Often we need to embed one policy into another one. It is possible to do so on classful policies, by attaching a new policy into a class. For instance, you might want to apply different policies to the different classes of a Round-Robin policy you have configured." +msgstr "Часто нам потрібно вбудовувати одну політику в іншу. Це можна зробити на класових політиках, приєднавши нову політику до класу. Наприклад, ви можете застосувати різні політики до різних класів циклічної політики, яку ви налаштували." #: ../../configuration/trafficpolicy/index.rst:219 msgid "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." -msgstr "Often you will also have to configure your *default* traffic in the same way you do with a class. *Default* can be considered a class as it behaves like that. It contains any traffic that did not match any of the defined classes, so it is like an open class, a class without matching filters." +msgstr "Часто вам також доведеться налаштовувати трафік *за замовчуванням* так само, як ви це робите з класом. *Default* можна вважати класом, оскільки він так поводиться. Він містить будь-який трафік, який не відповідає жодному з визначених класів, тому він схожий на відкритий клас, клас без відповідних фільтрів." -#: ../../configuration/service/conntrack-sync.rst:211 +#: ../../configuration/service/conntrack-sync.rst:220 msgid "On active router run:" -msgstr "On active router run:" +msgstr "На активному маршрутизаторі запустити:" #: ../../configuration/interfaces/openvpn.rst:83 msgid "On both sides, you need to generate a self-signed certificate, preferrably using the \"ec\" (elliptic curve) type. You can generate them by executing command ``run generate pki certificate self-signed install <name>`` in the configuration mode. Once the command is complete, it will add the certificate to the configuration session, to the ``pki`` subtree. You can then review the proposed changes and commit them." @@ -8852,58 +9892,58 @@ msgstr "On both sides, you need to generate a self-signed certificate, preferrab #: ../../configuration/trafficpolicy/index.rst:487 msgid "On low rates (below 40Mbit) you may want to tune `quantum` down to something like 300 bytes." -msgstr "On low rates (below 40Mbit) you may want to tune `quantum` down to something like 300 bytes." +msgstr "На низьких швидкостях (нижче 40 Мбіт) ви можете налаштувати `quantum` до приблизно 300 байт." #: ../../configuration/highavailability/index.rst:226 msgid "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." -msgstr "On most scenarios, there's no need to change specific parameters, and using default configuration is enough. But there are cases were extra configuration is needed." +msgstr "У більшості сценаріїв немає необхідності змінювати певні параметри, достатньо використовувати конфігурацію за замовчуванням. Але є випадки, коли потрібна додаткова конфігурація." -#: ../../configuration/service/conntrack-sync.rst:242 +#: ../../configuration/service/conntrack-sync.rst:251 msgid "On standby router run:" -msgstr "On standby router run:" +msgstr "На маршрутизаторі в режимі очікування запустити:" #: ../../configuration/interfaces/dummy.rst:16 msgid "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." -msgstr "On systems with multiple redundant uplinks and routes, it's a good idea to use a dedicated address for management and dynamic routing protocols. However, assigning that address to a physical link is risky: if that link goes down, that address will become inaccessible. A common solution is to assign the management address to a loopback or a dummy interface and advertise that address via all physical links, so that it's reachable through any of them. Since in Linux-based systems, there can be only one loopback interface, it's better to use a dummy interface for that purpose, since they can be added, removed, and taken up and down independently." +msgstr "У системах із кількома надлишковими висхідними лініями зв’язку та маршрутами доцільно використовувати виділену адресу для протоколів керування та динамічної маршрутизації. Однак призначати цю адресу фізичному посиланню ризиковано: якщо це посилання вийде з ладу, ця адреса стане недоступною. Загальним рішенням є призначення адреси керування петлевому або фіктивному інтерфейсу та оголошення цієї адреси через усі фізичні посилання, щоб вона була доступна через будь-яке з них. Оскільки в системах на базі Linux може бути лише один інтерфейс зворотного зв’язку, для цієї мети краще використовувати фіктивний інтерфейс, оскільки їх можна додавати, видаляти, активувати та зменшувати незалежно." -#: ../../configuration/vpn/ipsec.rst:181 -#: ../../configuration/vpn/ipsec.rst:239 -#: ../../configuration/vpn/ipsec.rst:299 +#: ../../configuration/vpn/ipsec.rst:185 +#: ../../configuration/vpn/ipsec.rst:243 +#: ../../configuration/vpn/ipsec.rst:303 #: ../../configuration/vpn/rsa-keys.rst:40 msgid "On the LEFT:" -msgstr "On the LEFT:" +msgstr "Зліва:" -#: ../../configuration/vpn/ipsec.rst:314 +#: ../../configuration/vpn/ipsec.rst:318 #: ../../configuration/vpn/rsa-keys.rst:59 msgid "On the LEFT (static address):" -msgstr "On the LEFT (static address):" +msgstr "ЗЛІВОРУ (статична адреса):" -#: ../../configuration/vpn/ipsec.rst:221 +#: ../../configuration/vpn/ipsec.rst:225 msgid "On the RIGHT, setup by analogy and swap local and remote addresses." -msgstr "On the RIGHT, setup by analogy and swap local and remote addresses." +msgstr "ПРАВОРУ, налаштуйте за аналогією та поміняйте місцеві та віддалені адреси." -#: ../../configuration/vpn/ipsec.rst:250 -#: ../../configuration/vpn/ipsec.rst:305 +#: ../../configuration/vpn/ipsec.rst:254 +#: ../../configuration/vpn/ipsec.rst:309 #: ../../configuration/vpn/rsa-keys.rst:46 msgid "On the RIGHT:" -msgstr "On the RIGHT:" +msgstr "Праворуч:" -#: ../../configuration/vpn/ipsec.rst:339 +#: ../../configuration/vpn/ipsec.rst:343 #: ../../configuration/vpn/rsa-keys.rst:84 msgid "On the RIGHT (dynamic address):" -msgstr "On the RIGHT (dynamic address):" +msgstr "ПРАВОРУЧ (динамічна адреса):" -#: ../../configuration/service/conntrack-sync.rst:207 +#: ../../configuration/service/conntrack-sync.rst:216 msgid "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" -msgstr "On the active router, you should have information in the internal-cache of conntrack-sync. The same current active connections number should be shown in the external-cache of the standby router" +msgstr "На активному маршрутизаторі ви повинні мати інформацію у внутрішньому кеші conntrack-sync. Той самий поточний номер активних з’єднань має відображатися у зовнішньому кеші резервного маршрутизатора" #: ../../configuration/vpn/rsa-keys.rst:56 msgid "On the initiator, we need to set the remote-id option so that it can identify IKE traffic from the responder correctly." -msgstr "On the initiator, we need to set the remote-id option so that it can identify IKE traffic from the responder correctly." +msgstr "На ініціаторі нам потрібно встановити опцію віддаленого ідентифікатора, щоб він міг правильно ідентифікувати трафік IKE від відповідача." #: ../../configuration/vpn/rsa-keys.rst:55 msgid "On the initiator, we set the peer address to its public address, but on the responder we only set the id." -msgstr "On the initiator, we set the peer address to its public address, but on the responder we only set the id." +msgstr "На ініціаторі ми встановлюємо однорангову адресу як публічну адресу, але на респонденті ми встановлюємо лише ідентифікатор." #: ../../configuration/protocols/pim.rst:120 msgid "On the last hop router if it is desired to not switch over to the SPT tree configure this command." @@ -8911,31 +9951,31 @@ msgstr "On the last hop router if it is desired to not switch over to the SPT tr #: ../../configuration/vpn/rsa-keys.rst:57 msgid "On the responder, we need to set the local id so that initiator can know who's talking to it for the point #3 to work." -msgstr "On the responder, we need to set the local id so that initiator can know who's talking to it for the point #3 to work." +msgstr "На відповідачі нам потрібно встановити локальний ідентифікатор, щоб ініціатор міг знати, хто з ним розмовляє, щоб пункт №3 працював." #: ../../configuration/trafficpolicy/index.rst:229 msgid "Once a class has a filter configured, you will also have to define what you want to do with the traffic of that class, what specific Traffic-Control treatment you want to give it. You will have different possibilities depending on the Traffic Policy you are configuring." -msgstr "Once a class has a filter configured, you will also have to define what you want to do with the traffic of that class, what specific Traffic-Control treatment you want to give it. You will have different possibilities depending on the Traffic Policy you are configuring." +msgstr "Коли для класу буде налаштовано фільтр, вам також доведеться визначити, що ви хочете робити з трафіком цього класу, яку конкретну обробку керування трафіком ви хочете йому надати. У вас будуть різні можливості залежно від політики трафіку, яку ви налаштовуєте." #: ../../_include/interface-ip.txt:21 msgid "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." -msgstr "Once a neighbor has been found, the entry is considered to be valid for at least for this specific time. An entry's validity will be extended if it receives positive feedback from higher level protocols." +msgstr "Після того, як сусід знайдено, запис вважається дійсним принаймні протягом цього конкретного часу. Термін дії запису буде продовжено, якщо він отримає позитивний відгук від протоколів вищого рівня." -#: ../../configuration/protocols/bgp.rst:702 +#: ../../configuration/protocols/bgp.rst:724 msgid "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." -msgstr "Once a route is assessed a penalty, the penalty is decreased by half each time a predefined amount of time elapses (half-life-time). When the accumulated penalties fall below a predefined threshold (reuse-value), the route is unsuppressed and added back into the BGP routing table." +msgstr "Щойно маршрут отримує штраф, штраф зменшується вдвічі кожного разу, коли спливає заздалегідь визначений проміжок часу (період напіврозпаду). Коли накопичені штрафні санкції падають нижче попередньо визначеного порогу (значення повторного використання), маршрут не пригнічується та додається назад у таблицю маршрутизації BGP." -#: ../../configuration/trafficpolicy/index.rst:1152 +#: ../../configuration/trafficpolicy/index.rst:1220 msgid "Once a traffic-policy is created, you can apply it to an interface:" -msgstr "Once a traffic-policy is created, you can apply it to an interface:" +msgstr "Після створення політики трафіку ви можете застосувати її до інтерфейсу:" #: ../../configuration/interfaces/pseudo-ethernet.rst:27 msgid "Once created in the system, Pseudo-Ethernet interfaces can be referenced in the exact same way as other Ethernet interfaces. Notes about using Pseudo- Ethernet interfaces:" -msgstr "Once created in the system, Pseudo-Ethernet interfaces can be referenced in the exact same way as other Ethernet interfaces. Notes about using Pseudo- Ethernet interfaces:" +msgstr "Після створення в системі на інтерфейси псевдо-Ethernet можна посилатися точно так само, як на інші інтерфейси Ethernet. Примітки щодо використання інтерфейсів Pseudo-Ethernet:" #: ../../configuration/system/flow-accounting.rst:177 msgid "Once flow accounting is configured on an interfaces it provides the ability to display captured network traffic information for all configured interfaces." -msgstr "Once flow accounting is configured on an interfaces it provides the ability to display captured network traffic information for all configured interfaces." +msgstr "Після налаштування обліку потоків на інтерфейсах він надає можливість відображати отриману інформацію про мережевий трафік для всіх налаштованих інтерфейсів." #: ../../configuration/vpn/remoteaccess_ipsec.rst:73 msgid "Once the command is completed, it will add the certificate to the configuration session, to the pki subtree. You can then review the proposed changes and commit them." @@ -8947,92 +9987,100 @@ msgstr "Once the first packet of the flow successfully goes through the IP forwa #: ../../configuration/service/pppoe-server.rst:63 msgid "Once the local tunnel endpoint ``set service pppoe-server gateway-address '10.1.1.2'`` has been defined, the client IP pool can be either defined as a range or as subnet using CIDR notation. If the CIDR notation is used, multiple subnets can be setup which are used sequentially." -msgstr "Once the local tunnel endpoint ``set service pppoe-server gateway-address '10.1.1.2'`` has been defined, the client IP pool can be either defined as a range or as subnet using CIDR notation. If the CIDR notation is used, multiple subnets can be setup which are used sequentially." +msgstr "Після визначення кінцевої точки локального тунелю ``set service pppoe-server gateway-address '10.1.1.2'`` пул IP-адрес клієнта можна визначити як діапазон або як підмережу за допомогою нотації CIDR. Якщо використовується нотація CIDR, можна налаштувати кілька підмереж, які використовуються послідовно." #: ../../configuration/trafficpolicy/index.rst:576 msgid "Once the matching rules are set for a class, you can start configuring how you want matching traffic to behave." -msgstr "Once the matching rules are set for a class, you can start configuring how you want matching traffic to behave." +msgstr "Після встановлення правил відповідності для класу ви можете почати налаштовувати, як ви хочете, щоб відповідний трафік поводився." #: ../../configuration/service/pppoe-server.rst:211 msgid "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." -msgstr "Once the user is connected, the user session is using the set limits and can be displayed via 'show pppoe-server sessions'." +msgstr "Після підключення користувача сеанс користувача використовує встановлені обмеження, і його можна відобразити за допомогою «показати сеанси сервера pppoe»." + +#: ../../configuration/service/pppoe-server.rst:285 +msgid "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." +msgstr "Once the user is connected, the user session is using the set limits and can be displayed via ``show pppoe-server sessions``." #: ../../configuration/vpn/openconnect.rst:257 msgid "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." -msgstr "Once you commit the above changes you can create a config file in the /config/auth/ocserv/config-per-user directory that matches a username of a user you have created e.g. \"tst\". Now when logging in with the \"tst\" user the config options you set in this file will be loaded." +msgstr "Після того, як ви внесете вищевказані зміни, ви можете створити файл конфігурації в каталозі /config/auth/ocserv/config-per-user, який збігається з іменем користувача, якого ви створили, наприклад, "tst". Тепер під час входу з користувачем "tst" параметри конфігурації, які ви встановили в цьому файлі, будуть завантажені." #: ../../configuration/interfaces/pppoe.rst:52 msgid "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." -msgstr "Once you have an Ethernet device connected, i.e. `eth0`, then you can configure it to open the PPPoE session for you and your DSL Transceiver (Modem/Router) just acts to translate your messages in a way that vDSL/aDSL understands." +msgstr "Після підключення пристрою Ethernet, тобто `eth0`, ви можете налаштувати його для відкриття сеансу PPPoE для вас, а ваш DSL-трансивер (модем/маршрутизатор) просто перекладатиме ваші повідомлення у спосіб, який розуміє vDSL/aDSL." -#: ../../configuration/vpn/sstp.rst:307 +#: ../../configuration/vpn/sstp.rst:478 msgid "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." -msgstr "Once you have setup your SSTP server there comes the time to do some basic testing. The Linux client used for testing is called sstpc_. sstpc_ requires a PPP configuration/peer file." +msgstr "Після налаштування сервера SSTP настає час провести базове тестування. Клієнт Linux, який використовується для тестування, називається sstpc_. sstpc_ потребує конфігурації PPP/файл однорангового зв’язку." + +#: ../../configuration/protocols/rpki.rst:193 +msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." +msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using Cloudflare's test_ website. Keep in mind that in order for this to work, you need to have no default routes or anything else that would still send traffic to RPKI-invalid destinations." -#: ../../configuration/protocols/rpki.rst:183 +#: ../../configuration/protocols/rpki.rst:195 msgid "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." -msgstr "Once your routers are configured to reject RPKI-invalid prefixes, you can test whether the configuration is working correctly using the `RIPE Labs RPKI Test`_ experimental tool." +msgstr "Коли ваші маршрутизатори налаштовані на відхилення недійсних префіксів RPKI, ви можете перевірити, чи конфігурація працює правильно, використовуючи експериментальний інструмент `RIPE Labs RPKI Test`_." #: ../../configuration/protocols/ospf.rst:319 msgid "One Type-3 summary-LSA with routing info <E.F.G.H/M> is announced into backbone area if defined area contains at least one intra-area network (i.e. described with router-LSA or network-LSA) from range <A.B.C.D/M>. This command makes sense in ABR only." -msgstr "One Type-3 summary-LSA with routing info <E.F.G.H/M> is announced into backbone area if defined area contains at least one intra-area network (i.e. described with router-LSA or network-LSA) from range <A.B.C.D/M>. This command makes sense in ABR only." +msgstr "Один тип 3 резюме-LSA з інформацією про маршрутизацію<E.F.G.H/M> оголошується в магістральну область, якщо визначена область містить принаймні одну внутрішньозональну мережу (тобто описану за допомогою маршрутизатора-LSA або мережевого-LSA) з діапазону<A.B.C.D/M> . Ця команда має сенс лише в ABR." #: ../../configuration/service/eventhandler.rst:70 msgid "One implicit environment exists." -msgstr "One implicit environment exists." +msgstr "Існує одне неявне середовище." #: ../../configuration/service/conntrack-sync.rst:7 msgid "One of the important features built on top of the Netfilter framework is connection tracking. Connection tracking allows the kernel to keep track of all logical network connections or sessions, and thereby relate all of the packets which may make up that connection. NAT relies on this information to translate all related packets in the same way, and iptables can use this information to act as a stateful firewall." -msgstr "One of the important features built on top of the Netfilter framework is connection tracking. Connection tracking allows the kernel to keep track of all logical network connections or sessions, and thereby relate all of the packets which may make up that connection. NAT relies on this information to translate all related packets in the same way, and iptables can use this information to act as a stateful firewall." +msgstr "Однією з важливих функцій, побудованих на основі Netfilter framework, є відстеження з’єднань. Відстеження з’єднань дозволяє ядру відстежувати всі логічні мережеві з’єднання або сеанси, і таким чином пов’язувати всі пакети, які можуть складати це з’єднання. NAT покладається на цю інформацію для однакового перекладу всіх пов’язаних пакетів, а iptables може використовувати цю інформацію, щоб діяти як брандмауер із контролем стану." #: ../../configuration/trafficpolicy/index.rst:411 msgid "One of the uses of Fair Queue might be the mitigation of Denial of Service attacks." -msgstr "One of the uses of Fair Queue might be the mitigation of Denial of Service attacks." +msgstr "Одним із застосувань Fair Queue може бути пом’якшення атак типу «відмова в обслуговуванні»." #: ../../_include/interface-vlan-8021q.txt:32 msgid "Only 802.1Q-tagged packets are accepted on Ethernet vifs." -msgstr "Only 802.1Q-tagged packets are accepted on Ethernet vifs." +msgstr "Лише пакети з тегами 802.1Q приймаються на Ethernet vif." #: ../../configuration/service/conntrack-sync.rst:63 msgid "Only VRRP is supported. Required option." -msgstr "Only VRRP is supported. Required option." +msgstr "Підтримується лише VRRP. Обов'язкова опція." #: ../../configuration/service/https.rst:18 msgid "Only allow certain IP addresses or prefixes to access the https webserver." msgstr "Only allow certain IP addresses or prefixes to access the https webserver." -#: ../../configuration/firewall/ipv4.rst:459 +#: ../../configuration/firewall/ipv4.rst:482 #: ../../configuration/firewall/ipv6.rst:466 msgid "Only in the source criteria, you can specify a mac-address." -msgstr "Only in the source criteria, you can specify a mac-address." +msgstr "Лише в критеріях джерела можна вказати mac-адресу." #: ../../configuration/protocols/segment-routing.rst:49 msgid "Only one SRGB and default SPF Algorithm is supported" -msgstr "Only one SRGB and default SPF Algorithm is supported" +msgstr "Підтримується лише один алгоритм SRGB і стандартний SPF" #: ../../_include/interface-dhcp-options.txt:48 msgid "Only request an address from the DHCP server but do not request a default gateway." -msgstr "Only request an address from the DHCP server but do not request a default gateway." +msgstr "Запитуйте лише адресу від сервера DHCP, але не запитуйте шлюз за замовчуванням." #: ../../configuration/interfaces/pppoe.rst:124 msgid "Only request an address from the PPPoE server but do not install any default route." -msgstr "Only request an address from the PPPoE server but do not install any default route." +msgstr "Запитуйте лише адресу від сервера PPPoE, але не встановлюйте маршрут за замовчуванням." #: ../../configuration/interfaces/sstp-client.rst:46 msgid "Only request an address from the SSTP server but do not install any default route." -msgstr "Only request an address from the SSTP server but do not install any default route." +msgstr "Запитуйте адресу лише на сервері SSTP, але не встановлюйте маршрут за замовчуванням." -#: ../../configuration/system/login.rst:51 +#: ../../configuration/system/login.rst:55 msgid "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." -msgstr "Only the type (``ssh-rsa``) and the key (``AAAB3N...``) are used. Note that the key will usually be several hundred characters long, and you will need to copy and paste it. Some terminal emulators may accidentally split this over several lines. Be attentive when you paste it that it only pastes as a single line. The third part is simply an identifier, and is for your own reference." +msgstr "Використовуються лише тип (``ssh-rsa``) і ключ (``AAAB3N...``). Зауважте, що ключ зазвичай має довжину в кілька сотень символів, і його потрібно скопіювати та вставити. Деякі емулятори терміналу можуть випадково розділити це на кілька рядків. Будьте уважні, коли ви вставляєте його, щоб він вставлявся лише одним рядком. Третя частина є просто ідентифікатором і призначена для вашої довідки." #: ../../configuration/interfaces/vxlan.rst:96 msgid "Only works with a VXLAN device with external flag set." msgstr "Only works with a VXLAN device with external flag set." -#: ../../configuration/highavailability/index.rst:457 +#: ../../configuration/highavailability/index.rst:467 msgid "Op-mode check virtual-server status" -msgstr "Op-mode check virtual-server status" +msgstr "Оперативний режим перевірки стану віртуального сервера" #: ../../configuration/vpn/openconnect.rst:5 msgid "OpenConnect" @@ -9040,32 +10088,32 @@ msgstr "OpenConnect" #: ../../configuration/vpn/openconnect.rst:7 msgid "OpenConnect-compatible server feature is available from this release. Openconnect VPN supports SSL connection and offers full network access. SSL VPN network extension connects the end-user system to the corporate network with access controls based only on network layer information, such as destination IP address and port number. So, it provides safe communication for all types of device traffic across public networks and private networks, also encrypts the traffic with SSL protocol." -msgstr "OpenConnect-compatible server feature is available from this release. Openconnect VPN supports SSL connection and offers full network access. SSL VPN network extension connects the end-user system to the corporate network with access controls based only on network layer information, such as destination IP address and port number. So, it provides safe communication for all types of device traffic across public networks and private networks, also encrypts the traffic with SSL protocol." +msgstr "Функція сервера, сумісна з OpenConnect, доступна з цього випуску. Openconnect VPN підтримує підключення SSL і пропонує повний доступ до мережі. Розширення мережі SSL VPN з’єднує систему кінцевого користувача з корпоративною мережею за допомогою контролю доступу лише на основі інформації про рівень мережі, такої як IP-адреса призначення та номер порту. Таким чином, він забезпечує безпечний зв’язок для всіх типів трафіку пристрою в публічних і приватних мережах, а також шифрує трафік за допомогою протоколу SSL." #: ../../configuration/vpn/openconnect.rst:281 msgid "OpenConnect can be configured to send accounting information to a RADIUS server to capture user session data such as time of connect/disconnect, data transferred, and so on." -msgstr "OpenConnect can be configured to send accounting information to a RADIUS server to capture user session data such as time of connect/disconnect, data transferred, and so on." +msgstr "OpenConnect можна налаштувати для надсилання облікової інформації на сервер RADIUS для збору даних сеансу користувача, таких як час підключення/відключення, передані дані тощо." #: ../../configuration/vpn/openconnect.rst:274 msgid "OpenConnect server matches the filename in a case sensitive manner, make sure the username/group name you configure matches the filename exactly." -msgstr "OpenConnect server matches the filename in a case sensitive manner, make sure the username/group name you configure matches the filename exactly." +msgstr "Сервер OpenConnect збігається з назвою файлу з урахуванням регістру, переконайтеся, що ім’я користувача/ім’я групи, яке ви налаштовуєте, точно збігається з назвою файлу." #: ../../configuration/vpn/openconnect.rst:235 msgid "OpenConnect supports a subset of it's configuration options to be applied on a per user/group basis, for configuration purposes we refer to this functionality as \"Identity based config\". The following `OpenConnect Server Manual <https://ocserv.gitlab.io/www/manual.html#:~:text=Configuration%20files%20that% 20will%20be%20applied%20per%20user%20connection%20or%0A%23%20per%20group>`_ outlines the set of configuration options that are allowed. This can be leveraged to apply different sets of configs to different users or groups of users." -msgstr "OpenConnect supports a subset of it's configuration options to be applied on a per user/group basis, for configuration purposes we refer to this functionality as \"Identity based config\". The following `OpenConnect Server Manual <https://ocserv.gitlab.io/www/manual.html#:~:text=Configuration%20files%20that% 20will%20be%20applied%20per%20user%20connection%20or%0A%23%20per%20group>`_ outlines the set of configuration options that are allowed. This can be leveraged to apply different sets of configs to different users or groups of users." +msgstr "OpenConnect підтримує підмножину своїх параметрів конфігурації для кожного користувача/групи, для цілей конфігурації ми називаємо цю функцію «Конфігурація на основі ідентифікації». Наступний `Посібник з сервера OpenConnect <https://ocserv.gitlab.io/www/manual.html#:~:text=Configuration%20files%20that% 20will%20be%20applied%20per%20user%20connection%20or%0A%23%20per%20group> `_ описує набір дозволених параметрів конфігурації. Це можна використовувати для застосування різних наборів конфігурацій до різних користувачів або груп користувачів." #: ../../configuration/interfaces/openvpn.rst:7 -#: ../../configuration/pki/index.rst:117 +#: ../../configuration/pki/index.rst:119 msgid "OpenVPN" msgstr "OpenVPN" #: ../../configuration/interfaces/openvpn.rst:407 msgid "OpenVPN **will not** automatically create routes in the kernel for client subnets when they connect and will only use client-subnet association internally, so we need to create a route to the 10.23.0.0/20 network ourselves:" -msgstr "OpenVPN **will not** automatically create routes in the kernel for client subnets when they connect and will only use client-subnet association internally, so we need to create a route to the 10.23.0.0/20 network ourselves:" +msgstr "OpenVPN **не** автоматично створюватиме маршрути в ядрі для клієнтських підмереж, коли вони з’єднуються, і використовуватиме лише внутрішнє зв’язування клієнта з підмережею, тому нам потрібно самостійно створити маршрут до мережі 10.23.0.0/20:" #: ../../configuration/interfaces/openvpn.rst:669 msgid "OpenVPN DCO is not full OpenVPN features supported , is currently considered experimental. Furthermore, there are certain OpenVPN features and use cases that remain incompatible with DCO. To get a comprehensive understanding of the limitations associated with DCO, refer to the list of known limitations in the documentation." -msgstr "OpenVPN DCO is not full OpenVPN features supported , is currently considered experimental. Furthermore, there are certain OpenVPN features and use cases that remain incompatible with DCO. To get a comprehensive understanding of the limitations associated with DCO, refer to the list of known limitations in the documentation." +msgstr "OpenVPN DCO не підтримує повні функції OpenVPN, наразі вважається експериментальним. Крім того, існують певні функції OpenVPN і випадки використання, які залишаються несумісними з DCO. Щоб отримати повне розуміння обмежень, пов’язаних з DCO, перегляньте список відомих обмежень у документації." #: ../../configuration/interfaces/openvpn.rst:658 msgid "OpenVPN Data Channel Offload (DCO)" @@ -9073,11 +10121,11 @@ msgstr "OpenVPN Data Channel Offload (DCO)" #: ../../configuration/interfaces/openvpn.rst:660 msgid "OpenVPN Data Channel Offload (DCO) enables significant performance enhancement in encrypted OpenVPN data processing. By minimizing context switching for each packet, DCO effectively reduces overhead. This optimization is achieved by keeping most data handling tasks within the kernel, avoiding frequent switches between kernel and user space for encryption and packet handling." -msgstr "OpenVPN Data Channel Offload (DCO) enables significant performance enhancement in encrypted OpenVPN data processing. By minimizing context switching for each packet, DCO effectively reduces overhead. This optimization is achieved by keeping most data handling tasks within the kernel, avoiding frequent switches between kernel and user space for encryption and packet handling." +msgstr "OpenVPN Data Channel Offload (DCO) дозволяє значно підвищити продуктивність обробки зашифрованих даних OpenVPN. Зводячи до мінімуму перемикання контексту для кожного пакету, DCO ефективно зменшує накладні витрати. Ця оптимізація досягається завдяки збереженню більшості завдань обробки даних у ядрі, уникаючи частого перемикання між ядром і простором користувача для шифрування та обробки пакетів." #: ../../configuration/interfaces/openvpn.rst:64 msgid "OpenVPN allows for either TCP or UDP. UDP will provide the lowest latency, while TCP will work better for lossy connections; generally UDP is preferred when possible." -msgstr "OpenVPN allows for either TCP or UDP. UDP will provide the lowest latency, while TCP will work better for lossy connections; generally UDP is preferred when possible." +msgstr "OpenVPN підтримує TCP або UDP. UDP забезпечить найнижчу затримку, тоді як TCP працюватиме краще для з’єднань із втратою часу; зазвичай UDP є кращим, якщо це можливо." #: ../../configuration/interfaces/openvpn.rst:43 msgid "OpenVPN is popular for client-server setups, but its site-to-site mode remains a relatively obscure feature, and many router appliances still don't support it. However, it's very useful for quickly setting up tunnels between routers." @@ -9085,19 +10133,19 @@ msgstr "OpenVPN is popular for client-server setups, but its site-to-site mode r #: ../../configuration/interfaces/openvpn.rst:320 msgid "OpenVPN status can be verified using the `show openvpn` operational commands. See the built-in help for a complete list of options." -msgstr "OpenVPN status can be verified using the `show openvpn` operational commands. See the built-in help for a complete list of options." +msgstr "Статус OpenVPN можна перевірити за допомогою операційних команд `show openvpn`. Повний список опцій див. у вбудованій довідці." #: ../../configuration/vpn/openconnect.rst:154 msgid "Openconnect Configuration" -msgstr "Openconnect Configuration" +msgstr "Конфігурація Openconnect" #: ../../configuration/interfaces/pppoe.rst:21 msgid "Operating Modes" -msgstr "Operating Modes" +msgstr "Режими роботи" #: ../../configuration/interfaces/bonding.rst:512 #: ../../configuration/interfaces/dummy.rst:51 -#: ../../configuration/interfaces/ethernet.rst:132 +#: ../../configuration/interfaces/ethernet.rst:148 #: ../../configuration/interfaces/loopback.rst:41 #: ../../configuration/interfaces/macsec.rst:106 #: ../../configuration/interfaces/pppoe.rst:278 @@ -9105,25 +10153,25 @@ msgstr "Operating Modes" #: ../../configuration/interfaces/virtual-ethernet.rst:55 #: ../../configuration/interfaces/wireless.rst:416 #: ../../configuration/interfaces/wwan.rst:79 -#: ../../configuration/pki/index.rst:290 +#: ../../configuration/pki/index.rst:321 #: ../../configuration/protocols/igmp-proxy.rst:73 -#: ../../configuration/protocols/static.rst:183 -#: ../../configuration/service/conntrack-sync.rst:103 +#: ../../configuration/protocols/static.rst:216 +#: ../../configuration/service/conntrack-sync.rst:112 #: ../../configuration/service/console-server.rst:76 #: ../../configuration/service/dhcp-relay.rst:124 #: ../../configuration/service/dhcp-relay.rst:201 -#: ../../configuration/service/dns.rst:195 +#: ../../configuration/service/dns.rst:276 #: ../../configuration/service/lldp.rst:71 #: ../../configuration/service/mdns.rst:79 #: ../../configuration/service/ssh.rst:145 #: ../../configuration/service/webproxy.rst:330 #: ../../configuration/system/default-route.rst:25 #: ../../configuration/system/flow-accounting.rst:175 -#: ../../configuration/vrf/index.rst:111 -#: ../../configuration/vrf/index.rst:323 -#: ../../configuration/vrf/index.rst:503 +#: ../../configuration/vrf/index.rst:130 +#: ../../configuration/vrf/index.rst:342 +#: ../../configuration/vrf/index.rst:522 msgid "Operation" -msgstr "Operation" +msgstr "Операція" #: ../../configuration/firewall/groups.rst:186 #: ../../configuration/firewall/zone.rst:128 @@ -9131,94 +10179,94 @@ msgid "Operation-mode" msgstr "Operation-mode" #: ../../configuration/firewall/bridge.rst:284 -#: ../../configuration/firewall/ipv4.rst:954 +#: ../../configuration/firewall/ipv4.rst:977 #: ../../configuration/firewall/ipv6.rst:962 msgid "Operation-mode Firewall" -msgstr "Operation-mode Firewall" +msgstr "Брандмауер в режимі роботи" -#: ../../configuration/container/index.rst:143 +#: ../../configuration/container/index.rst:179 msgid "Operation Commands" -msgstr "Operation Commands" +msgstr "Операційні команди" -#: ../../configuration/service/dhcp-server.rst:412 -#: ../../configuration/service/dhcp-server.rst:664 +#: ../../configuration/service/dhcp-server.rst:471 +#: ../../configuration/service/dhcp-server.rst:725 #: ../../configuration/system/acceleration.rst:42 msgid "Operation Mode" -msgstr "Operation Mode" +msgstr "Режим роботи" #: ../../configuration/interfaces/wireless.rst:89 msgid "Operation mode of wireless radio." -msgstr "Operation mode of wireless radio." +msgstr "Режим роботи бездротової радіостанції." #: ../../configuration/interfaces/wireguard.rst:338 -#: ../../configuration/protocols/bfd.rst:94 -#: ../../configuration/protocols/bfd.rst:175 +#: ../../configuration/protocols/bfd.rst:101 +#: ../../configuration/protocols/bfd.rst:182 msgid "Operational Commands" -msgstr "Operational Commands" +msgstr "Оперативні команди" -#: ../../configuration/protocols/bgp.rst:950 +#: ../../configuration/protocols/bgp.rst:972 #: ../../configuration/protocols/mpls.rst:218 #: ../../configuration/protocols/ospf.rst:609 #: ../../configuration/protocols/ospf.rst:1268 #: ../../configuration/protocols/rip.rst:193 msgid "Operational Mode Commands" -msgstr "Operational Mode Commands" +msgstr "Команди режиму роботи" -#: ../../configuration/system/ip.rst:47 -#: ../../configuration/system/ipv6.rst:43 +#: ../../configuration/system/ip.rst:60 +#: ../../configuration/system/ipv6.rst:56 msgid "Operational commands" -msgstr "Operational commands" +msgstr "Оперативні команди" #: ../../configuration/system/option.rst:5 msgid "Option" -msgstr "Option" +msgstr "Варіант" #: ../../configuration/service/dhcp-server.rst:487 msgid "Option 43 for UniFI" -msgstr "Option 43 for UniFI" +msgstr "Варіант 43 для UniFI" -#: ../../configuration/service/dhcp-server.rst:234 +#: ../../configuration/service/dhcp-server.rst:290 msgid "Option description" -msgstr "Option description" +msgstr "Опис варіанту" -#: ../../configuration/service/dhcp-server.rst:232 +#: ../../configuration/service/dhcp-server.rst:288 msgid "Option number" -msgstr "Option number" +msgstr "Номер варіанту" #: ../../configuration/interfaces/bonding.rst:148 msgid "Option specifying the rate in which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode." -msgstr "Option specifying the rate in which we'll ask our link partner to transmit LACPDU packets in 802.3ad mode." +msgstr "Параметр, що визначає швидкість, з якою ми просимо нашого партнера по посиланню передавати пакети LACPDU в режимі 802.3ad." #: ../../configuration/policy/route.rst:108 msgid "Option to disable rule." -msgstr "Option to disable rule." +msgstr "Можливість відключити правило." #: ../../configuration/policy/route.rst:35 msgid "Option to enable or disable log matching rule." -msgstr "Option to enable or disable log matching rule." +msgstr "Можливість увімкнути або вимкнути правило відповідності журналу." #: ../../configuration/policy/route.rst:25 msgid "Option to log packets hitting default-action." -msgstr "Option to log packets hitting default-action." +msgstr "Можливість реєструвати пакети, які досягають дії за замовчуванням." #: ../../configuration/interfaces/wireguard.rst:86 #: ../../configuration/protocols/ospf.rst:68 #: ../../configuration/protocols/ospf.rst:1105 msgid "Optional" -msgstr "Optional" +msgstr "Додатково" #: ../../configuration/service/tftp-server.rst:43 msgid "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." -msgstr "Optional, if you want to enable uploads, else TFTP server will act as a read-only server." +msgstr "Необов’язково, якщо ви хочете ввімкнути завантаження, інакше сервер TFTP діятиме як сервер лише для читання." -#: ../../configuration/system/login.rst:107 +#: ../../configuration/system/login.rst:111 msgid "Optional/default settings" -msgstr "Optional/default settings" +msgstr "Додаткові/за замовчуванням налаштування" #: ../../configuration/protocols/babel.rst:30 #: ../../configuration/protocols/rip.rst:58 msgid "Optional Configuration" -msgstr "Optional Configuration" +msgstr "Додаткова конфігурація" #: ../../configuration/protocols/pim.rst:123 msgid "Optional parameter prefix-list can be use to control which groups to switch or not switch. If a group is PERMIT as per the prefix-list, then the SPT switchover does not happen for it and if it is DENY, then the SPT switchover happens." @@ -9226,79 +10274,82 @@ msgstr "Optional parameter prefix-list can be use to control which groups to swi #: ../../configuration/container/index.rst:47 msgid "Optionally set a specific static IPv4 or IPv6 address for the container. This address must be within the named network prefix." -msgstr "Optionally set a specific static IPv4 or IPv6 address for the container. This address must be within the named network prefix." +msgstr "За бажанням можна встановити конкретну статичну адресу IPv4 або IPv6 для контейнера. Ця адреса має бути в межах названого префікса мережі." #: ../../configuration/interfaces/openvpn.rst:631 #: ../../configuration/service/dhcp-relay.rst:53 #: ../../configuration/service/dhcp-relay.rst:160 -#: ../../configuration/service/dhcp-server.rst:224 -#: ../../configuration/vpn/sstp.rst:230 +#: ../../configuration/service/dhcp-server.rst:280 msgid "Options" -msgstr "Options" +msgstr "Параметри" -#: ../../configuration/vpn/ipsec.rst:159 +#: ../../configuration/vpn/ipsec.rst:162 msgid "Options (Global IPsec settings) Attributes" -msgstr "Options (Global IPsec settings) Attributes" +msgstr "Параметри (Глобальні налаштування IPsec) Атрибути" #: ../../configuration/firewall/general-legacy.rst:328 msgid "Options used for queue target. Action queue must be defined to use this setting" -msgstr "Options used for queue target. Action queue must be defined to use this setting" +msgstr "Параметри, що використовуються для цілі черги. Для використання цього параметра необхідно визначити чергу дій" #: ../../configuration/system/conntrack.rst:0 msgid "Or, for example ftp, `delete system conntrack modules ftp`." -msgstr "Or, for example ftp, `delete system conntrack modules ftp`." +msgstr "Або, наприклад, ftp, `видалити модулі відстеження системи ftp`." #: ../../configuration/trafficpolicy/index.rst:66 msgid "Or **binary** prefixes." -msgstr "Or **binary** prefixes." +msgstr "Або **бінарні** префікси." + +#: ../../configuration/service/conntrack-sync.rst:107 +msgid "Order conntrackd to request a complete conntrack table resync against the other node at startup." +msgstr "Order conntrackd to request a complete conntrack table resync against the other node at startup." #: ../../configuration/protocols/ospf.rst:73 msgid "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." -msgstr "Originate an AS-External (type-5) LSA describing a default route into all external-routing capable areas, of the specified metric and metric type. If the :cfgcmd:`always` keyword is given then the default is always advertised, even when there is no default present in the routing table. The argument :cfgcmd:`route-map` specifies to advertise the default route if the route map is satisfied." +msgstr "Створіть AS-External (тип-5) LSA, що описує маршрут за замовчуванням до всіх областей із можливістю зовнішньої маршрутизації з указаною метрикою та типом метрики. Якщо задано ключове слово :cfgcmd:`always`, значення за замовчуванням завжди оголошується, навіть якщо в таблиці маршрутизації його немає. Аргумент :cfgcmd:`route-map` вказує на оголошення маршруту за замовчуванням, якщо карта маршруту задоволена." -#: ../../configuration/service/pppoe-server.rst:238 +#: ../../configuration/service/pppoe-server.rst:312 msgid "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." -msgstr "Other attributes can be used, but they have to be in one of the dictionaries in */usr/share/accel-ppp/radius*." +msgstr "Інші атрибути можна використовувати, але вони мають бути в одному зі словників у */usr/share/accel-ppp/radius*." #: ../../configuration/nat/nat44.rst:532 msgid "Our configuration commands would be:" -msgstr "Our configuration commands would be:" +msgstr "Наші команди конфігурації будуть такими:" #: ../../configuration/interfaces/wireguard.rst:144 msgid "Our remote end of the tunnel for peer `to-wg02` is reachable at 192.0.2.1 port 51820" -msgstr "Our remote end of the tunnel for peer `to-wg02` is reachable at 192.0.2.1 port 51820" +msgstr "Наш віддалений кінець тунелю для однорангового вузла `to-wg02` доступний за адресою 192.0.2.1, порт 51820" #: ../../configuration/loadbalancing/wan.rst:6 msgid "Outbound traffic can be balanced between two or more outbound interfaces. If a path fails, traffic is balanced across the remaining healthy paths, a recovered path is automatically added back to the routing table and used by the load balancer. The load balancer automatically adds routes for each path to the routing table and balances traffic across the configured interfaces, determined by interface health and weight." -msgstr "Outbound traffic can be balanced between two or more outbound interfaces. If a path fails, traffic is balanced across the remaining healthy paths, a recovered path is automatically added back to the routing table and used by the load balancer. The load balancer automatically adds routes for each path to the routing table and balances traffic across the configured interfaces, determined by interface health and weight." +msgstr "Вихідний трафік може бути збалансований між двома або більше вихідними інтерфейсами. Якщо шлях не вдається, трафік балансується між іншими справними шляхами, відновлений шлях автоматично додається назад до таблиці маршрутизації та використовується балансувальником навантаження. Балансувальник навантаження автоматично додає маршрути для кожного шляху до таблиці маршрутизації та балансує трафік між налаштованими інтерфейсами, що визначається справністю та вагою інтерфейсу." #: ../../configuration/loadbalancing/wan.rst:97 msgid "Outgoing traffic is balanced in a flow-based manner. A connection tracking table is used to track flows by their source address, destination address and port. Each flow is assigned to an interface according to the defined balancing rules and subsequent packets are sent through the same interface. This has the advantage that packets always arrive in order if links with different speeds are in use." -msgstr "Outgoing traffic is balanced in a flow-based manner. A connection tracking table is used to track flows by their source address, destination address and port. Each flow is assigned to an interface according to the defined balancing rules and subsequent packets are sent through the same interface. This has the advantage that packets always arrive in order if links with different speeds are in use." +msgstr "Вихідний трафік балансується на основі потоку. Таблиця відстеження з’єднань використовується для відстеження потоків за адресою джерела, адресою призначення та портом. Кожен потік призначається інтерфейсу відповідно до визначених правил балансування, а наступні пакети надсилаються через той самий інтерфейс. Це має ту перевагу, що пакети завжди надходять у порядку, якщо використовуються канали з різною швидкістю." #: ../../configuration/nat/nat66.rst:81 msgid "Output from `eth0` network interface" -msgstr "Output from `eth0` network interface" +msgstr "Вихід з мережевого інтерфейсу `eth0`" #: ../../configuration/service/monitoring.rst:43 msgid "Output plugin Prometheus client" -msgstr "Output plugin Prometheus client" +msgstr "Плагін виводу Prometheus client" #: ../../configuration/interfaces/l2tpv3.rst:89 msgid "Over IP" -msgstr "Over IP" +msgstr "Через IP" #: ../../configuration/interfaces/l2tpv3.rst:135 msgid "Over IPSec, L2 VPN (bridge)" -msgstr "Over IPSec, L2 VPN (bridge)" +msgstr "Через IPSec, L2 VPN (міст)" #: ../../configuration/interfaces/l2tpv3.rst:108 msgid "Over UDP" -msgstr "Over UDP" +msgstr "Через UDP" #: ../../configuration/service/dhcp-server.rst:473 msgid "Override static-mapping's name-server with a custom one that will be sent only to this host." -msgstr "Override static-mapping's name-server with a custom one that will be sent only to this host." +msgstr "Замініть сервер імен статичного зіставлення власним, який надсилатиметься лише на цей хост." #: ../../configuration/firewall/bridge.rst:13 #: ../../configuration/firewall/flowtables.rst:13 @@ -9310,40 +10361,40 @@ msgstr "Override static-mapping's name-server with a custom one that will be sen #: ../../configuration/nat/nat64.rst:18 #: ../../configuration/nat/nat66.rst:15 msgid "Overview" -msgstr "Overview" +msgstr "Огляд" #: ../../configuration/service/snmp.rst:29 msgid "Overview and basic concepts" -msgstr "Overview and basic concepts" +msgstr "Огляд та основні поняття" #: ../../configuration/firewall/groups.rst:190 #: ../../configuration/firewall/ipv6.rst:1117 msgid "Overview of defined groups. You see the type, the members, and where the group is used." -msgstr "Overview of defined groups. You see the type, the members, and where the group is used." +msgstr "Огляд визначених груп. Ви бачите тип, учасників і місце використання групи." #: ../../configuration/policy/examples.rst:106 msgid "PBR multiple uplinks" -msgstr "PBR multiple uplinks" +msgstr "PBR кілька висхідних каналів" -#: ../../configuration/vrf/index.rst:244 +#: ../../configuration/vrf/index.rst:263 msgid "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" -msgstr "PC1 is in the ``default`` VRF and acting as e.g. a \"fileserver\"" +msgstr "PC1 знаходиться у ``стандартному`` VRF і діє, наприклад, як "файловий сервер"" -#: ../../configuration/vrf/index.rst:245 +#: ../../configuration/vrf/index.rst:264 msgid "PC2 is in VRF ``blue`` which is the development department" -msgstr "PC2 is in VRF ``blue`` which is the development department" +msgstr "PC2 у VRF ``синій``, який є відділом розробки" -#: ../../configuration/vrf/index.rst:246 +#: ../../configuration/vrf/index.rst:265 msgid "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." -msgstr "PC3 and PC4 are connected to a bridge device on router ``R1`` which is in VRF ``red``. Say this is the HR department." +msgstr "PC3 і PC4 підключені до мостового пристрою на маршрутизаторі ``R1``, який ``червоний`` VRF. Скажіть, що це відділ кадрів." #: ../../configuration/interfaces/vxlan.rst:130 msgid "PC4 has IP 10.0.0.4/24 and PC5 has IP 10.0.0.5/24, so they believe they are in the same broadcast domain." -msgstr "PC4 has IP 10.0.0.4/24 and PC5 has IP 10.0.0.5/24, so they believe they are in the same broadcast domain." +msgstr "PC4 має IP 10.0.0.4/24, а PC5 має IP 10.0.0.5/24, тому вони вважають, що вони знаходяться в одному широкомовному домені." #: ../../configuration/interfaces/vxlan.rst:141 msgid "PC5 receives the ping echo, responds with an echo reply that Leaf3 receives and this time forwards to Leaf2's unicast address directly because it learned the location of PC4 above. When Leaf2 receives the echo reply from PC5 it sees that it came from Leaf3 and so remembers that PC5 is reachable via Leaf3." -msgstr "PC5 receives the ping echo, responds with an echo reply that Leaf3 receives and this time forwards to Leaf2's unicast address directly because it learned the location of PC4 above. When Leaf2 receives the echo reply from PC5 it sees that it came from Leaf3 and so remembers that PC5 is reachable via Leaf3." +msgstr "PC5 отримує ехо-сигнал ping, відповідає ехо-відповіддю, яку отримує Leaf3, і цього разу пересилає на одноадресну адресу Leaf2 безпосередньо, оскільки він дізнався про розташування PC4 вище. Коли Leaf2 отримує ехо-відповідь від PC5, він бачить, що він надійшов від Leaf3, і тому запам’ятовує, що PC5 доступний через Leaf3." #: ../../configuration/protocols/pim.rst:31 msgid "PIM-SM - PIM Sparse Mode" @@ -9355,11 +10406,11 @@ msgstr "PIM6 - Protocol Independent Multicast for IPv6" #: ../../configuration/protocols/igmp.rst:16 msgid "PIM (Protocol Independent Multicast) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." -msgstr "PIM (Protocol Independent Multicast) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." +msgstr "PIM (Protocol Independent Multicast) має бути налаштований у кожному інтерфейсі кожного маршрутизатора-учасника. Для кожного маршрутизатора також має бути вручну налаштовано розташування точки Rendevouz. Потім односпрямовані спільні дерева, що ґрунтуються на точці Рендевуз, будуть автоматично створені для багатоадресного розповсюдження." #: ../../configuration/protocols/igmp.rst:14 msgid "PIM and IGMP" -msgstr "PIM and IGMP" +msgstr "PIM і IGMP" #: ../../configuration/protocols/pim.rst:7 msgid "PIM – Protocol Independent Multicast" @@ -9369,7 +10420,7 @@ msgstr "PIM – Protocol Independent Multicast" msgid "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." msgstr "PIMv6 (Protocol Independent Multicast for IPv6) must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." -#: ../../configuration/pki/index.rst:7 +#: ../../configuration/pki/index.rst:9 msgid "PKI" msgstr "PKI" @@ -9377,9 +10428,16 @@ msgstr "PKI" msgid "PPDU" msgstr "PPDU" -#: ../../configuration/vpn/sstp.rst:174 +#: ../../configuration/service/pppoe-server.rst:453 +#: ../../configuration/vpn/l2tp.rst:407 +#: ../../configuration/vpn/pptp.rst:331 +#: ../../configuration/vpn/sstp.rst:365 +msgid "PPP Advanced Options" +msgstr "PPP Advanced Options" + +#: ../../configuration/vpn/sstp.rst:180 msgid "PPP Settings" -msgstr "PPP Settings" +msgstr "Налаштування PPP" #: ../../configuration/interfaces/pppoe.rst:7 msgid "PPPoE" @@ -9387,107 +10445,115 @@ msgstr "PPPoE" #: ../../configuration/service/pppoe-server.rst:7 msgid "PPPoE Server" -msgstr "PPPoE Server" +msgstr "Сервер PPPoE" #: ../../configuration/interfaces/pppoe.rst:81 msgid "PPPoE options" -msgstr "PPPoE options" +msgstr "Параметри PPPoE" -#: ../../configuration/vpn/pptp.rst:4 +#: ../../configuration/vpn/pptp.rst:5 msgid "PPTP-Server" -msgstr "PPTP-Server" +msgstr "PPTP-сервер" #: ../../configuration/loadbalancing/wan.rst:104 msgid "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" -msgstr "Packet-based balancing can lead to a better balance across interfaces when out of order packets are no issue. Per-packet-based balancing can be set for a balancing rule with:" +msgstr "Балансування на основі пакетів може призвести до кращого балансу між інтерфейсами, коли непорядні пакети не є проблемою. Балансування на основі пакетів можна встановити для правила балансування за допомогою:" -#: ../../configuration/protocols/rpki.rst:71 +#: ../../configuration/protocols/rpki.rst:69 msgid "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." -msgstr "Particularly large networks may wish to run their own RPKI certificate authority and publication server instead of publishing ROAs via their RIR. This is a subject far beyond the scope of VyOS' documentation. Consider reading about Krill_ if this is a rabbit hole you need or especially want to dive down." +msgstr "Особливо великі мережі можуть захотіти запустити власний центр сертифікації RPKI та сервер публікації замість публікації ROA через свій RIR. Це питання далеко за межами документації VyOS. Подумайте про те, щоб прочитати про Krill_, якщо це кроляча нора, яка вам потрібна або вам особливо хочеться пірнути туди." + +#: ../../configuration/service/dhcp-server.rst:65 +msgid "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" +msgstr "Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1``" #: ../../configuration/interfaces/bridge.rst:60 msgid "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." -msgstr "Path `<cost>` value for Spanning Tree Protocol. Each interface in a bridge could have a different speed and this value is used when deciding which link to use. Faster interfaces should have lower costs." +msgstr "Шлях `<cost> ` значення для протоколу Spanning Tree. Кожен інтерфейс у мосту може мати різну швидкість, і це значення використовується, коли вирішується, яке посилання використовувати. Швидші інтерфейси повинні мати нижчу вартість." -#: ../../configuration/vpn/sstp.rst:166 +#: ../../configuration/vpn/sstp.rst:172 msgid "Path to `<file>` pointing to the certificate authority certificate." -msgstr "Path to `<file>` pointing to the certificate authority certificate." +msgstr "Шлях до `<file> `, що вказує на сертифікат центру сертифікації." -#: ../../configuration/vpn/sstp.rst:170 +#: ../../configuration/vpn/sstp.rst:176 msgid "Path to `<file>` pointing to the servers certificate (public portion)." -msgstr "Path to `<file>` pointing to the servers certificate (public portion)." +msgstr "Шлях до `<file> ` вказує на сертифікат сервера (відкрита частина)." #: ../../configuration/protocols/bgp.rst:221 msgid "Peer - Peer" -msgstr "Peer - Peer" +msgstr "Рівний – Рівний" #: ../../configuration/protocols/bgp.rst:475 msgid "Peer Groups" -msgstr "Peer Groups" +msgstr "Групи однолітків" #: ../../configuration/policy/route-map.rst:159 msgid "Peer IP address to match." -msgstr "Peer IP address to match." +msgstr "Однорангова IP-адреса для збігу." #: ../../configuration/protocols/bgp.rst:321 msgid "Peer Parameters" -msgstr "Peer Parameters" +msgstr "Однорангові параметри" #: ../../configuration/protocols/bgp.rst:477 msgid "Peer groups are used to help improve scaling by generating the same update information to all members of a peer group. Note that this means that the routes generated by a member of a peer group will be sent back to that originating peer with the originator identifier attribute set to indicated the originating peer. All peers not associated with a specific peer group are treated as belonging to a default peer group, and will share updates." -msgstr "Peer groups are used to help improve scaling by generating the same update information to all members of a peer group. Note that this means that the routes generated by a member of a peer group will be sent back to that originating peer with the originator identifier attribute set to indicated the originating peer. All peers not associated with a specific peer group are treated as belonging to a default peer group, and will share updates." +msgstr "Однорангові групи використовуються для покращення масштабування шляхом створення однакової інформації про оновлення для всіх членів однорангової групи. Зауважте, що це означає, що маршрути, згенеровані членом однорангової групи, будуть надіслані назад цьому початковому одноранговому вузлу з атрибутом ідентифікатора джерела, встановленим на вказівку початкового однорангового вузла. Усі однорангові вузли, не пов’язані з певною одноранговою групою, вважаються такими, що належать до групи однорангових пристроїв за замовчуванням і обмінюватимуться оновленнями." #: ../../configuration/service/conntrack-sync.rst:89 msgid "Peer to send unicast UDP conntrack sync entires to, if not using Multicast configuration from above above." -msgstr "Peer to send unicast UDP conntrack sync entires to, if not using Multicast configuration from above above." +msgstr "Одноранговий вузол для надсилання одноадресної синхронізації UDP conntrack, якщо не використовується налаштування Multicast вище." #: ../../configuration/protocols/bgp.rst:183 msgid "Peers Configuration" -msgstr "Peers Configuration" +msgstr "Конфігурація однорангових вузлів" #: ../../configuration/loadbalancing/wan.rst:188 msgid "Per default, interfaces used in a load balancing pool replace the source IP of each outgoing packet with its own address to ensure that replies arrive on the same interface. This works through automatically generated source NAT (SNAT) rules, these rules are only applied to balanced traffic. In cases where this behaviour is not desired, the automatic generation of SNAT rules can be disabled:" -msgstr "Per default, interfaces used in a load balancing pool replace the source IP of each outgoing packet with its own address to ensure that replies arrive on the same interface. This works through automatically generated source NAT (SNAT) rules, these rules are only applied to balanced traffic. In cases where this behaviour is not desired, the automatic generation of SNAT rules can be disabled:" +msgstr "За замовчуванням інтерфейси, які використовуються в пулі балансування навантаження, замінюють вихідну IP-адресу кожного вихідного пакета на власну адресу, щоб забезпечити надходження відповідей на той самий інтерфейс. Це працює через автоматично згенеровані правила вихідного NAT (SNAT), ці правила застосовуються лише до збалансованого трафіку. У випадках, коли така поведінка небажана, автоматичне створення правил SNAT можна вимкнути:" #: ../../configuration/system/syslog.rst:7 msgid "Per default VyOSs has minimal syslog logging enabled which is stored and rotated locally. Errors will be always logged to a local file, which includes `local7` error messages, emergency messages will be sent to the console, too." -msgstr "Per default VyOSs has minimal syslog logging enabled which is stored and rotated locally. Errors will be always logged to a local file, which includes `local7` error messages, emergency messages will be sent to the console, too." +msgstr "За замовчуванням у VyOS увімкнено мінімальне журналювання системного журналу, яке зберігається та змінюється локально. Помилки завжди реєструватимуться в локальному файлі, який включає повідомлення про помилки `local7`, екстрені повідомлення також надсилатимуться на консоль." #: ../../configuration/system/flow-accounting.rst:127 msgid "Per default every packet is sampled (that is, the sampling rate is 1)." -msgstr "Per default every packet is sampled (that is, the sampling rate is 1)." +msgstr "За замовчуванням відбирається кожен пакет (тобто частота вибірки дорівнює 1)." -#: ../../configuration/service/pppoe-server.rst:323 +#: ../../configuration/service/pppoe-server.rst:556 msgid "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." -msgstr "Per default the user session is being replaced if a second authentication request succeeds. Such session requests can be either denied or allowed entirely, which would allow multiple sessions for a user in the latter case. If it is denied, the second session is being rejected even if the authentication succeeds, the user has to terminate its first session and can then authentication again." +msgstr "За замовчуванням сеанс користувача замінюється, якщо другий запит на автентифікацію вдається. Такі запити на сеанс можна відхилити або повністю дозволити, що в останньому випадку дозволить користувачу кілька сеансів. Якщо його відхилено, другий сеанс відхиляється, навіть якщо автентифікація пройшла успішно, користувач має припинити свій перший сеанс і може знову пройти автентифікацію." -#: ../../configuration/system/option.rst:78 +#: ../../configuration/trafficpolicy/index.rst:1200 +msgid "Perform NAT lookup before applying flow-isolation rules." +msgstr "Perform NAT lookup before applying flow-isolation rules." + +#: ../../configuration/system/option.rst:108 msgid "Performance" -msgstr "Performance" +msgstr "Продуктивність" #: ../../configuration/interfaces/bridge.rst:118 msgid "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." -msgstr "Periodically, a hello packet is sent out by the Root Bridge and the Designated Bridges. Hello packets are used to communicate information about the topology throughout the entire Bridged Local Area Network." +msgstr "Періодично кореневий міст і призначені мости надсилають пакет привітання. Пакети Hello використовуються для передачі інформації про топологію по всій мостовій локальній мережі." -#: ../../configuration/vrf/index.rst:197 +#: ../../configuration/vrf/index.rst:216 msgid "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." -msgstr "Ping command can be interrupted at any given time using ``<Ctrl>+c``. A brief statistic is shown afterwards." +msgstr "Команду Ping можна перервати в будь-який момент за допомогою ``<Ctrl> +c``. Далі наводиться коротка статистика." -#: ../../configuration/vrf/index.rst:183 +#: ../../configuration/vrf/index.rst:202 msgid "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." -msgstr "Ping uses ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host or gateway. ECHO_REQUEST datagrams (pings) will have an IP and ICMP header, followed by \"struct timeval\" and an arbitrary number of pad bytes used to fill out the packet." +msgstr "Ping використовує обов’язкову дейтаграму ECHO_REQUEST протоколу ICMP, щоб викликати ICMP ECHO_RESPONSE від хоста або шлюзу. Дейтаграми ECHO_REQUEST (ping) матимуть заголовок IP та ICMP, за яким слідує «struct timeval» і довільна кількість байтів заповнення, які використовуються для заповнення пакета." #: ../../configuration/interfaces/macsec.rst:183 msgid "Pinging (IPv6) the other host and intercepting the traffic in ``eth1`` will show you the content is encrypted." -msgstr "Pinging (IPv6) the other host and intercepting the traffic in ``eth1`` will show you the content is encrypted." +msgstr "Пінгування (IPv6) іншого хосту та перехоплення трафіку в ``eth1`` покаже вам, що вміст зашифровано." #: ../../_include/interface-vrf.txt:4 msgid "Place interface in given VRF instance." -msgstr "Place interface in given VRF instance." +msgstr "Розмістіть інтерфейс у заданому екземплярі VRF." #: ../../configuration/system/option.rst:23 msgid "Play an audible beep to the system speaker when system is ready." -msgstr "Play an audible beep to the system speaker when system is ready." +msgstr "Увімкніть звуковий сигнал у системний динамік, коли система буде готова." #: ../../configuration/firewall/index.rst:137 msgid "Please, refer to appropiate section for more information about firewall configuration:" @@ -9497,103 +10563,107 @@ msgstr "Please, refer to appropiate section for more information about firewall msgid "Please, refer to appropriate section for more information about firewall configuration:" msgstr "Please, refer to appropriate section for more information about firewall configuration:" -#: ../../configuration/service/ipoe-server.rst:23 +#: ../../configuration/service/ipoe-server.rst:21 msgid "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." -msgstr "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing IPoE sessions, in order to become effective." +msgstr "Майте на увазі, що через помилку в початковій версії конфігураційні зміни/коміти перезапустять демон ppp і скинуть існуючі сеанси IPoE, щоб набути чинності." #: ../../configuration/service/pppoe-server.rst:12 msgid "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing PPPoE connections from connected users, in order to become effective." -msgstr "Please be aware, due to an upstream bug, config changes/commits will restart the ppp daemon and will reset existing PPPoE connections from connected users, in order to become effective." +msgstr "Майте на увазі, що через помилку в початковій версії конфігураційні зміни/коміти перезапустять демон ppp і скинуть існуючі з’єднання PPPoE від підключених користувачів, щоб стати ефективними." #: ../../configuration/vpn/dmvpn.rst:43 msgid "Please refer to the :ref:`ipsec` documentation for the individual IPSec related options." -msgstr "Please refer to the :ref:`ipsec` documentation for the individual IPSec related options." +msgstr "Зверніться до документації :ref:`ipsec` щодо окремих параметрів, пов’язаних з IPSec." #: ../../configuration/vpn/dmvpn.rst:40 msgid "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." -msgstr "Please refer to the :ref:`tunnel-interface` documentation for the individual tunnel related options." +msgstr "Будь ласка, зверніться до документації :ref:`tunnel-interface` щодо окремих параметрів, пов’язаних з тунелем." -#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:420 msgid "Please see the :ref:`dhcp-dns-quick-start` configuration." -msgstr "Please see the :ref:`dhcp-dns-quick-start` configuration." +msgstr "Перегляньте конфігурацію :ref:`dhcp-dns-quick-start`." #: ../../_include/need_improvement.txt:13 msgid "Please take a look at the Contributing Guide for our :ref:`documentation`." -msgstr "Please take a look at the Contributing Guide for our :ref:`documentation`." +msgstr "Будь ласка, перегляньте Посібник зі сприяння для нашої :ref:`документації`." #: ../../configuration/service/https.rst:10 msgid "Please take a look at the :ref:`vyosapi` page for an detailed how-to." -msgstr "Please take a look at the :ref:`vyosapi` page for an detailed how-to." +msgstr "Будь ласка, подивіться на сторінку :ref:`vyosapi`, щоб отримати детальну інструкцію." #: ../../configuration/service/salt-minion.rst:48 msgid "Please take a look in the Automation section to find some usefull Examples." -msgstr "Please take a look in the Automation section to find some usefull Examples." +msgstr "Перегляньте розділ «Автоматизація», щоб знайти корисні приклади." #: ../../configuration/policy/index.rst:23 msgid "Policies, in VyOS, are implemented using FRR filtering and route maps. Detailed information of FRR could be found in http://docs.frrouting.org/" -msgstr "Policies, in VyOS, are implemented using FRR filtering and route maps. Detailed information of FRR could be found in http://docs.frrouting.org/" +msgstr "Політики у VyOS реалізуються за допомогою фільтрації FRR і карт маршрутів. Детальну інформацію про FRR можна знайти на http://docs.frrouting.org/" #: ../../configuration/policy/index.rst:9 msgid "Policies are used for filtering and traffic management. With policies, network administrators could filter and treat traffic according to their needs." -msgstr "Policies are used for filtering and traffic management. With policies, network administrators could filter and treat traffic according to their needs." +msgstr "Політики використовуються для фільтрації та керування трафіком. За допомогою політик мережеві адміністратори могли фільтрувати та обробляти трафік відповідно до своїх потреб." #: ../../configuration/policy/local-route.rst:5 msgid "Policies for local traffic are defined in this section." -msgstr "Policies for local traffic are defined in this section." +msgstr "У цьому розділі визначено правила щодо місцевого трафіку." #: ../../configuration/policy/index.rst:7 msgid "Policy" -msgstr "Policy" +msgstr "політика" #: ../../configuration/policy/examples.rst:106 msgid "Policy-Based Routing with multiple ISP uplinks (source ./draw.io/pbr_example_1.drawio)" -msgstr "Policy-Based Routing with multiple ISP uplinks (source ./draw.io/pbr_example_1.drawio)" +msgstr "Маршрутизація на основі політики з кількома висхідними зв’язками провайдера (джерело ./draw.io/pbr_example_1.drawio)" #: ../../configuration/policy/index.rst:28 msgid "Policy Sections" -msgstr "Policy Sections" +msgstr "Розділи політики" #: ../../configuration/protocols/failover.rst:38 msgid "Policy for checking targets" -msgstr "Policy for checking targets" +msgstr "Політика перевірки цілей" #: ../../configuration/system/conntrack.rst:57 msgid "Policy to track previously established connections." -msgstr "Policy to track previously established connections." +msgstr "Політика відстеження раніше встановлених з’єднань." #: ../../configuration/firewall/groups.rst:84 msgid "Port Groups" -msgstr "Port Groups" +msgstr "Групи портів" #: ../../configuration/interfaces/bonding.rst:282 -#: ../../configuration/interfaces/bridge.rst:179 -#: ../../configuration/interfaces/ethernet.rst:124 +#: ../../configuration/interfaces/bridge.rst:188 +#: ../../configuration/interfaces/ethernet.rst:140 msgid "Port Mirror (SPAN)" -msgstr "Port Mirror (SPAN)" +msgstr "Дзеркало порту (SPAN)" -#: ../../configuration/vpn/sstp.rst:242 +#: ../../configuration/service/ipoe-server.rst:182 +#: ../../configuration/service/pppoe-server.rst:144 +#: ../../configuration/vpn/l2tp.rst:187 +#: ../../configuration/vpn/pptp.rst:127 +#: ../../configuration/vpn/sstp.rst:160 msgid "Port for Dynamic Authorization Extension server (DM/CoA)" -msgstr "Port for Dynamic Authorization Extension server (DM/CoA)" +msgstr "Порт для сервера розширення динамічної авторизації (DM/CoA)" #: ../../configuration/service/lldp.rst:27 msgid "Port name and description" -msgstr "Port name and description" +msgstr "Назва та опис порту" #: ../../configuration/service/monitoring.rst:67 msgid "Port number used by connection, default is ``9273``" -msgstr "Port number used by connection, default is ``9273``" +msgstr "Номер порту, який використовується для підключення, за замовчуванням ``9273``" #: ../../configuration/service/conntrack-sync.rst:75 msgid "Port number used by connection." -msgstr "Port number used by connection." +msgstr "Номер порту, який використовується під час підключення." #: ../../configuration/service/https.rst:37 msgid "Port to listen for HTTPS requests; default 443" -msgstr "Port to listen for HTTPS requests; default 443" +msgstr "Порт для прослуховування запитів HTTPS; за замовчуванням 443" #: ../../_include/interface-vlan-8021q.txt:9 msgid "Portions of the network which are VLAN-aware (i.e., IEEE 802.1q_ conformant) can include VLAN tags. When a frame enters the VLAN-aware portion of the network, a tag is added to represent the VLAN membership. Each frame must be distinguishable as being within exactly one VLAN. A frame in the VLAN-aware portion of the network that does not contain a VLAN tag is assumed to be flowing on the native VLAN." -msgstr "Portions of the network which are VLAN-aware (i.e., IEEE 802.1q_ conformant) can include VLAN tags. When a frame enters the VLAN-aware portion of the network, a tag is added to represent the VLAN membership. Each frame must be distinguishable as being within exactly one VLAN. A frame in the VLAN-aware portion of the network that does not contain a VLAN tag is assumed to be flowing on the native VLAN." +msgstr "Частини мережі, які підтримують VLAN (тобто сумісні з IEEE 802.1q_), можуть містити теги VLAN. Коли кадр входить у частину мережі, яка підтримує VLAN, додається тег, який представляє членство у VLAN. Кожен кадр має бути помітним як належний до однієї VLAN. Припускається, що кадр у частині мережі, що підтримує VLAN, який не містить тегу VLAN, передається через власну VLAN." #: ../../configuration/interfaces/openvpn.rst:169 msgid "Pre-shared keys" @@ -9602,174 +10672,178 @@ msgstr "Pre-shared keys" #: ../../configuration/trafficpolicy/index.rst:787 #: ../../configuration/trafficpolicy/index.rst:862 msgid "Precedence" -msgstr "Precedence" +msgstr "Пріоритет" #: ../../configuration/highavailability/index.rst:148 msgid "Preemption" -msgstr "Preemption" +msgstr "Випередження" #: ../../configuration/policy/index.rst:20 msgid "Prefer a specific routing protocol routes over another routing protocol running on the same router." -msgstr "Prefer a specific routing protocol routes over another routing protocol running on the same router." +msgstr "Надавати перевагу маршрутам певного протоколу маршрутизації над іншим протоколом маршрутизації, що працює на тому самому маршрутизаторі." #: ../../configuration/protocols/bgp.rst:69 msgid "Prefer higher local preference routes to lower." -msgstr "Prefer higher local preference routes to lower." +msgstr "Віддавайте перевагу маршрутам з вищими місцевими перевагами перед нижчими." #: ../../configuration/protocols/bgp.rst:65 msgid "Prefer higher local weight routes to lower routes." -msgstr "Prefer higher local weight routes to lower routes." +msgstr "Віддавайте перевагу місцевим маршрутам з більшою вагою перед меншими." #: ../../configuration/protocols/bgp.rst:73 msgid "Prefer local routes (statics, aggregates, redistributed) to received routes." -msgstr "Prefer local routes (statics, aggregates, redistributed) to received routes." +msgstr "Надавати перевагу локальним маршрутам (статичним, агрегатним, перерозподіленим) перед отриманими маршрутами." #: ../../configuration/protocols/bgp.rst:77 msgid "Prefer shortest hop-count AS_PATHs." -msgstr "Prefer shortest hop-count AS_PATHs." +msgstr "Віддавати перевагу AS_PATH з кількістю стрибків." #: ../../configuration/protocols/bgp.rst:81 msgid "Prefer the lowest origin type route. That is, prefer IGP origin routes to EGP, to Incomplete routes." -msgstr "Prefer the lowest origin type route. That is, prefer IGP origin routes to EGP, to Incomplete routes." +msgstr "Віддавайте перевагу маршруту найнижчого типу відправлення. Тобто віддайте перевагу вихідним маршрутам IGP перед EGP, а не незавершеним маршрутам." #: ../../configuration/protocols/bgp.rst:91 msgid "Prefer the route received from an external, eBGP peer over routes received from other types of peers." -msgstr "Prefer the route received from an external, eBGP peer over routes received from other types of peers." +msgstr "Надавати перевагу маршруту, отриманому від зовнішнього однорангового вузла eBGP, над маршрутами, отриманими від інших типів однорангових вузлів." #: ../../configuration/protocols/bgp.rst:127 msgid "Prefer the route received from the peer with the higher transport layer address, as a last-resort tie-breaker." -msgstr "Prefer the route received from the peer with the higher transport layer address, as a last-resort tie-breaker." +msgstr "Віддавайте перевагу маршруту, отриманому від однорангового вузла з адресою вищого транспортного рівня, як крайнього заходу." #: ../../configuration/protocols/bgp.rst:96 msgid "Prefer the route with the lower IGP cost." -msgstr "Prefer the route with the lower IGP cost." +msgstr "Віддайте перевагу маршруту з нижчою вартістю IGP." #: ../../configuration/protocols/bgp.rst:115 msgid "Prefer the route with the lowest `router-ID`. If the route has an `ORIGINATOR_ID` attribute, through iBGP reflection, then that router ID is used, otherwise the `router-ID` of the peer the route was received from is used." -msgstr "Prefer the route with the lowest `router-ID`. If the route has an `ORIGINATOR_ID` attribute, through iBGP reflection, then that router ID is used, otherwise the `router-ID` of the peer the route was received from is used." +msgstr "Віддавайте перевагу маршруту з найнижчим ідентифікатором маршрутизатора. Якщо маршрут має атрибут `ORIGINATOR_ID` через відображення iBGP, тоді використовується цей ідентифікатор маршрутизатора, інакше використовується `router-ID` вузла, від якого було отримано маршрут." #: ../../configuration/service/router-advert.rst:1 msgid "Preference associated with the default router" -msgstr "Preference associated with the default router" +msgstr "Налаштування, пов’язані з маршрутизатором за умовчанням" #: ../../configuration/nat/nat66.rst:66 msgid "Prefix Conversion" -msgstr "Prefix Conversion" +msgstr "Перетворення префіксів" -#: ../../configuration/service/dhcp-server.rst:564 +#: ../../configuration/service/dhcp-server.rst:623 msgid "Prefix Delegation" -msgstr "Prefix Delegation" +msgstr "Делегування префікса" #: ../../configuration/policy/prefix-list.rst:3 msgid "Prefix List Policy" -msgstr "Prefix List Policy" +msgstr "Політика списку префіксів" #: ../../configuration/policy/prefix-list.rst:19 msgid "Prefix Lists" -msgstr "Prefix Lists" +msgstr "Списки префіксів" #: ../../configuration/service/router-advert.rst:1 msgid "Prefix can not be used for on-link determination" -msgstr "Prefix can not be used for on-link determination" +msgstr "Префікс не можна використовувати для визначення за посиланням" #: ../../configuration/service/router-advert.rst:1 msgid "Prefix can not be used for stateless address auto-configuration" -msgstr "Prefix can not be used for stateless address auto-configuration" +msgstr "Префікс не можна використовувати для автоматичного налаштування адреси без збереження стану" #: ../../configuration/policy/prefix-list.rst:12 msgid "Prefix filtering can be done using prefix-list and prefix-list6." -msgstr "Prefix filtering can be done using prefix-list and prefix-list6." +msgstr "Фільтрування префіксів можна виконати за допомогою prefix-list і prefix-list6." #: ../../configuration/protocols/ospf.rst:41 msgid "Prefix length in interface must be equal or bigger (i.e. smaller network) than prefix length in network statement. For example statement above doesn't enable ospf on interface with address 192.168.1.1/23, but it does on interface with address 192.168.1.129/25." -msgstr "Prefix length in interface must be equal or bigger (i.e. smaller network) than prefix length in network statement. For example statement above doesn't enable ospf on interface with address 192.168.1.1/23, but it does on interface with address 192.168.1.129/25." +msgstr "Довжина префікса в інтерфейсі має бути рівною або більшою (тобто меншою мережею), ніж довжина префікса в операторі мережі. Наприклад, оператор вище не вмикає ospf на інтерфейсі з адресою 192.168.1.1/23, але вмикає на інтерфейсі з адресою 192.168.1.129/25." #: ../../configuration/policy/prefix-list.rst:5 msgid "Prefix lists provides the most powerful prefix based filtering mechanism. In addition to access-list functionality, ip prefix-list has prefix length range specification." -msgstr "Prefix lists provides the most powerful prefix based filtering mechanism. In addition to access-list functionality, ip prefix-list has prefix length range specification." +msgstr "Списки префіксів забезпечують найпотужніший механізм фільтрації на основі префіксів. На додаток до функцій списку доступу, ip prefix-list має специфікацію діапазону довжини префікса." #: ../../configuration/policy/prefix-list.rst:39 msgid "Prefix to match against." -msgstr "Prefix to match against." +msgstr "Префікс для відповідності." #: ../../configuration/trafficpolicy/index.rst:50 msgid "Prefixes" -msgstr "Prefixes" +msgstr "Префікси" -#: ../../configuration/policy/route-map.rst:212 +#: ../../configuration/policy/route-map.rst:215 msgid "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." -msgstr "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH." +msgstr "Додайте наявний останній номер AS (крайній лівий ASN) до AS_PATH." -#: ../../configuration/policy/route-map.rst:207 +#: ../../configuration/policy/route-map.rst:210 msgid "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." -msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI." +msgstr "Додайте заданий рядок номерів AS до AS_PATH NLRI шляху BGP." #: ../../configuration/service/snmp.rst:63 msgid "Principle of SNMP Communication" -msgstr "Principle of SNMP Communication" +msgstr "Принцип зв'язку SNMP" -#: ../../configuration/vrf/index.rst:532 +#: ../../configuration/vrf/index.rst:551 msgid "Print a summary of neighbor connections for the specified AFI/SAFI combination." -msgstr "Print a summary of neighbor connections for the specified AFI/SAFI combination." +msgstr "Надрукуйте зведення сусідніх з’єднань для вказаної комбінації AFI/SAFI." -#: ../../configuration/vrf/index.rst:511 +#: ../../configuration/vrf/index.rst:530 msgid "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." -msgstr "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." +msgstr "Друкуйте активні маршрути IPV4 або IPV6, рекламовані через VPN SAFI." #: ../../configuration/trafficpolicy/index.rst:787 #: ../../configuration/trafficpolicy/index.rst:801 msgid "Priority" -msgstr "Priority" +msgstr "Пріоритет" #: ../../configuration/trafficpolicy/index.rst:688 msgid "Priority Queue" -msgstr "Priority Queue" +msgstr "Пріоритетна черга" #: ../../configuration/trafficpolicy/index.rst:698 msgid "Priority Queue, as other non-shaping policies, is only useful if your outgoing interface is really full. If it is not, VyOS will not own the queue and Priority Queue will have no effect. If there is bandwidth available on the physical link, you can embed_ Priority Queue into a classful shaping policy to make sure it owns the queue. In that case packets can be prioritized based on DSCP." -msgstr "Priority Queue, as other non-shaping policies, is only useful if your outgoing interface is really full. If it is not, VyOS will not own the queue and Priority Queue will have no effect. If there is bandwidth available on the physical link, you can embed_ Priority Queue into a classful shaping policy to make sure it owns the queue. In that case packets can be prioritized based on DSCP." +msgstr "Пріоритетна черга, як і інші політики без формування, корисна, лише якщо ваш вихідний інтерфейс дійсно заповнений. Якщо це не так, VyOS не буде володіти чергою, і пріоритетна черга не матиме ефекту. Якщо на фізичному з’єднанні є доступна пропускна здатність, ви можете вбудувати Priority Queue у політику класового формування, щоб переконатися, що вона володіє чергою. У цьому випадку пакети можуть бути пріоритетними на основі DSCP." #: ../../_include/interface-ip.txt:153 msgid "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." -msgstr "Private VLAN proxy arp. Basically allow proxy arp replies back to the same interface (from which the ARP request/solicitation was received)." +msgstr "Приватний проксі VLAN arp. По суті, дозволити проксі ARP-відповіді тому самому інтерфейсу (з якого було отримано ARP-запит/клопотання)." + +#: ../../configuration/vpn/ipsec.rst:544 +msgid "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." +msgstr "Profile generation happens from the operational level and is as simple as issuing the following command to create a profile to connect to the IKEv2 access server at ``vpn.vyos.net`` with the configuration for the ``rw`` remote-access connection group." #: ../../configuration/service/monitoring.rst:38 msgid "Prometheus-client" -msgstr "Prometheus-client" +msgstr "Прометей-клієнт" #: ../../configuration/service/ssh.rst:114 msgid "Protects host from brute-force attacks against SSH. Log messages are parsed, line-by-line, for recognized patterns. If an attack, such as several login failures within a few seconds, is detected, the offending IP is blocked. Offenders are unblocked after a set interval." -msgstr "Protects host from brute-force attacks against SSH. Log messages are parsed, line-by-line, for recognized patterns. If an attack, such as several login failures within a few seconds, is detected, the offending IP is blocked. Offenders are unblocked after a set interval." +msgstr "Захищає хост від атак грубої сили на SSH. Повідомлення журналу аналізуються рядок за рядком на розпізнані шаблони. У разі виявлення атаки, наприклад кількох помилок входу протягом кількох секунд, IP-адреса-порушник блокується. Правопорушників розблоковують через встановлений проміжок часу." #: ../../configuration/service/conntrack-sync.rst:57 msgid "Protocol for which expect entries need to be synchronized." -msgstr "Protocol for which expect entries need to be synchronized." +msgstr "Протокол, для якого потрібно синхронізувати записи очікування." #: ../../configuration/protocols/index.rst:3 msgid "Protocols" -msgstr "Protocols" +msgstr "Протоколи" #: ../../configuration/service/conntrack-sync.rst:45 msgid "Protocols are: tcp, sctp, dccp, udp, icmp and ipv6-icmp." -msgstr "Protocols are: tcp, sctp, dccp, udp, icmp and ipv6-icmp." +msgstr "Протоколи: tcp, sctp, dccp, udp, icmp та ipv6-icmp." #: ../../configuration/service/tftp-server.rst:49 msgid "Provide TFTP server listening on both IPv4 and IPv6 addresses ``192.0.2.1`` and ``2001:db8::1`` serving the content from ``/config/tftpboot``. Uploading via TFTP to this server is disabled." -msgstr "Provide TFTP server listening on both IPv4 and IPv6 addresses ``192.0.2.1`` and ``2001:db8::1`` serving the content from ``/config/tftpboot``. Uploading via TFTP to this server is disabled." +msgstr "Забезпечте прослуховування сервером TFTP як IPv4, так і IPv6 адрес ``192.0.2.1`` і ``2001:db8::1``, що обслуговує вміст з ``/config/tftpboot``. Завантаження через TFTP на цей сервер вимкнено." #: ../../configuration/firewall/groups.rst:39 msgid "Provide a IPv4 or IPv6 address group description" -msgstr "Provide a IPv4 or IPv6 address group description" +msgstr "Надайте опис групи адрес IPv4 або IPv6" #: ../../configuration/firewall/general-legacy.rst:212 msgid "Provide a IPv4 or IPv6 network group description." -msgstr "Provide a IPv4 or IPv6 network group description." +msgstr "Надайте опис групи мережі IPv4 або IPv6." #: ../../configuration/firewall/ipv4.rst:285 #: ../../configuration/firewall/ipv6.rst:285 #: ../../configuration/policy/route.rst:30 msgid "Provide a description for each rule." -msgstr "Provide a description for each rule." +msgstr "Дайте опис кожного правила." #: ../../configuration/firewall/flowtables.rst:75 msgid "Provide a description to the flow table." @@ -9785,11 +10859,11 @@ msgstr "Provide a mac group description." #: ../../configuration/firewall/groups.rst:106 msgid "Provide a port group description." -msgstr "Provide a port group description." +msgstr "Надайте опис групи портів." #: ../../configuration/policy/route.rst:20 msgid "Provide a rule-set description." -msgstr "Provide a rule-set description." +msgstr "Надайте опис набору правил." #: ../../configuration/firewall/bridge.rst:205 #: ../../configuration/firewall/ipv4.rst:275 @@ -9807,11 +10881,11 @@ msgstr "Provide an interface group description" #: ../../configuration/protocols/bgp.rst:219 msgid "Provider - Customer" -msgstr "Provider - Customer" +msgstr "Постачальник - Замовник" #: ../../configuration/protocols/ospf.rst:337 msgid "Provides a backbone area coherence by virtual link establishment." -msgstr "Provides a backbone area coherence by virtual link establishment." +msgstr "Забезпечує узгодженість магістральної області шляхом встановлення віртуального зв’язку." #: ../../_include/interface-per-client-thread.txt:4 msgid "Provides a per-device control to enable/disable the threaded mode for all the NAPI instances of the given network device, without the need for a device up/down." @@ -9819,33 +10893,33 @@ msgstr "Provides a per-device control to enable/disable the threaded mode for al #: ../../configuration/service/webproxy.rst:186 msgid "Proxy authentication method, currently only LDAP is supported." -msgstr "Proxy authentication method, currently only LDAP is supported." +msgstr "Метод автентифікації проксі, наразі підтримується лише LDAP." #: ../../configuration/interfaces/pseudo-ethernet.rst:31 msgid "Pseudo-Ethernet interfaces can not be reached from your internal host. This means that you can not try to ping a Pseudo-Ethernet interface from the host system on which it is defined. The ping will be lost." -msgstr "Pseudo-Ethernet interfaces can not be reached from your internal host. This means that you can not try to ping a Pseudo-Ethernet interface from the host system on which it is defined. The ping will be lost." +msgstr "Інтерфейси псевдо-Ethernet недоступні з вашого внутрішнього хосту. Це означає, що ви не можете спробувати перевірити інтерфейс Pseudo-Ethernet із хост-системи, на якій він визначений. Пінг буде втрачено." #: ../../configuration/interfaces/pseudo-ethernet.rst:36 msgid "Pseudo-Ethernet interfaces may not work in environments which expect a :abbr:`NIC (Network Interface Card)` to only have a single address. This applies to: - VMware machines using default settings - Network switches with security settings allowing only a single MAC address - xDSL modems that try to learn the MAC address of the NIC" -msgstr "Pseudo-Ethernet interfaces may not work in environments which expect a :abbr:`NIC (Network Interface Card)` to only have a single address. This applies to: - VMware machines using default settings - Network switches with security settings allowing only a single MAC address - xDSL modems that try to learn the MAC address of the NIC" +msgstr "Інтерфейси Pseudo-Ethernet можуть не працювати в середовищах, де очікується, що :abbr:`NIC (карта мережевого інтерфейсу)` матиме лише одну адресу. Це стосується: - комп'ютерів VMware, які використовують налаштування за замовчуванням - мережевих комутаторів із налаштуваннями безпеки, які дозволяють використовувати лише одну MAC-адресу - модемів xDSL, які намагаються дізнатися MAC-адресу мережевої карти" #: ../../configuration/interfaces/pseudo-ethernet.rst:9 msgid "Pseudo-Ethernet or MACVLAN interfaces can be seen as subinterfaces to regular ethernet interfaces. Each and every subinterface is created a different media access control (MAC) address, for a single physical Ethernet port. Pseudo- Ethernet interfaces have most of their application in virtualized environments," -msgstr "Pseudo-Ethernet or MACVLAN interfaces can be seen as subinterfaces to regular ethernet interfaces. Each and every subinterface is created a different media access control (MAC) address, for a single physical Ethernet port. Pseudo- Ethernet interfaces have most of their application in virtualized environments," +msgstr "Інтерфейси Pseudo-Ethernet або MACVLAN можна розглядати як підінтерфейси звичайних інтерфейсів Ethernet. Для кожного підінтерфейсу створюється окрема адреса керування доступом до середовища (MAC) для одного фізичного порту Ethernet. Псевдо-Ethernet-інтерфейси в основному застосовуються у віртуалізованих середовищах," #: ../../configuration/interfaces/pseudo-ethernet.rst:55 msgid "Pseudo Ethernet/MACVLAN options" -msgstr "Pseudo Ethernet/MACVLAN options" +msgstr "Параметри псевдо Ethernet/MACVLAN" #: ../../configuration/container/index.rst:74 msgid "Publish a port for the container." -msgstr "Publish a port for the container." +msgstr "Опублікуйте порт для контейнера." -#: ../../configuration/container/index.rst:147 +#: ../../configuration/container/index.rst:183 msgid "Pull a new image for container" -msgstr "Pull a new image for container" +msgstr "Витягніть нове зображення для контейнера" -#: ../../configuration/interfaces/ethernet.rst:117 +#: ../../configuration/interfaces/ethernet.rst:133 #: ../../configuration/interfaces/virtual-ethernet.rst:39 #: ../../configuration/interfaces/wireless.rst:408 msgid "QinQ (802.1ad)" @@ -9857,15 +10931,15 @@ msgstr "QoS" #: ../../configuration/service/conntrack-sync.rst:53 msgid "Queue size for listening to local conntrack events in MB." -msgstr "Queue size for listening to local conntrack events in MB." +msgstr "Розмір черги для прослуховування локальних подій conntrack у МБ." #: ../../configuration/service/conntrack-sync.rst:94 msgid "Queue size for syncing conntrack entries in MB." -msgstr "Queue size for syncing conntrack entries in MB." +msgstr "Розмір черги для синхронізації записів conntrack у МБ." #: ../../configuration/service/dhcp-server.rst:416 msgid "Quotes can be used inside parameter values by replacing all quote characters with the string ``"``. They will be replaced with literal quote characters when generating dhcpd.conf." -msgstr "Quotes can be used inside parameter values by replacing all quote characters with the string ``"``. They will be replaced with literal quote characters when generating dhcpd.conf." +msgstr "Лапки можна використовувати всередині значень параметрів, замінивши всі символи лапок на рядок ``"``. Вони будуть замінені літеральними символами лапок під час створення dhcpd.conf." #: ../../configuration/nat/nat66.rst:118 msgid "R1:" @@ -9873,11 +10947,11 @@ msgstr "R1:" #: ../../configuration/interfaces/macsec.rst:156 msgid "R1 has 192.0.2.1/24 & 2001:db8::1/64" -msgstr "R1 has 192.0.2.1/24 & 2001:db8::1/64" +msgstr "R1 має 192.0.2.1/24 & 2001:db8::1/64" -#: ../../configuration/vrf/index.rst:248 +#: ../../configuration/vrf/index.rst:267 msgid "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" -msgstr "R1 is managed through an out-of-band network that resides in VRF ``mgmt``" +msgstr "R1 керується через позаполосну мережу, яка знаходиться у VRF ``mgmt``" #: ../../configuration/nat/nat66.rst:131 msgid "R2:" @@ -9885,176 +10959,195 @@ msgstr "R2:" #: ../../configuration/interfaces/macsec.rst:157 msgid "R2 has 192.0.2.2/24 & 2001:db8::2/64" -msgstr "R2 has 192.0.2.2/24 & 2001:db8::2/64" +msgstr "R2 має 192.0.2.2/24 & 2001:db8::2/64" -#: ../../configuration/system/login.rst:234 -#: ../../configuration/vpn/sstp.rst:207 +#: ../../configuration/system/login.rst:238 msgid "RADIUS" -msgstr "RADIUS" +msgstr "Радіус" -#: ../../configuration/service/ipoe-server.rst:111 +#: ../../configuration/service/ipoe-server.rst:112 msgid "RADIUS Setup" -msgstr "RADIUS Setup" +msgstr "Налаштування RADIUS" #: ../../configuration/vpn/l2tp.rst:203 msgid "RADIUS advanced features" -msgstr "RADIUS advanced features" +msgstr "Розширені функції RADIUS" + +#: ../../configuration/service/ipoe-server.rst:158 +#: ../../configuration/service/pppoe-server.rst:120 +#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/vpn/pptp.rst:103 +#: ../../configuration/vpn/sstp.rst:136 +msgid "RADIUS advanced options" +msgstr "RADIUS advanced options" #: ../../configuration/vpn/l2tp.rst:139 msgid "RADIUS authentication" -msgstr "RADIUS authentication" +msgstr "Аутентифікація RADIUS" #: ../../configuration/vpn/l2tp.rst:180 msgid "RADIUS bandwidth shaping attribute" -msgstr "RADIUS bandwidth shaping attribute" +msgstr "Атрибут формування пропускної здатності RADIUS" #: ../../configuration/service/pppoe-server.rst:112 msgid "RADIUS provides the IP addresses in the example above via Framed-IP-Address." -msgstr "RADIUS provides the IP addresses in the example above via Framed-IP-Address." +msgstr "RADIUS надає IP-адреси у наведеному вище прикладі через Framed-IP-Address." #: ../../configuration/interfaces/wireless.rst:354 msgid "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" -msgstr "RADIUS server at ``192.168.3.10`` with shared-secret ``VyOSPassword``" +msgstr "Сервер RADIUS за адресою ``192.168.3.10`` зі спільним секретом ``VyOSPassword``" -#: ../../configuration/system/login.rst:266 +#: ../../configuration/system/login.rst:270 msgid "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." -msgstr "RADIUS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each RADIUS query can be configured." +msgstr "Сервери RADIUS можна посилити, дозволивши підключення лише певним IP-адресам. З цього моменту можна налаштувати адресу джерела для кожного запиту RADIUS." -#: ../../configuration/vpn/l2tp.rst:163 +#: ../../configuration/service/ipoe-server.rst:144 +#: ../../configuration/service/pppoe-server.rst:106 +#: ../../configuration/vpn/l2tp.rst:149 +#: ../../configuration/vpn/pptp.rst:89 +#: ../../configuration/vpn/sstp.rst:122 msgid "RADIUS source address" -msgstr "RADIUS source address" +msgstr "Адреса джерела RADIUS" #: ../../configuration/highavailability/index.rst:202 msgid "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." -msgstr "RFC 3768 defines a virtual MAC address to each VRRP virtual router. This virtual router MAC address will be used as the source in all periodic VRRP messages sent by the active node. When the rfc3768-compatibility option is set, a new VRRP interface is created, to which the MAC address and the virtual IP address is automatically assigned." +msgstr "RFC 3768 визначає віртуальну MAC-адресу для кожного віртуального маршрутизатора VRRP. Ця MAC-адреса віртуального маршрутизатора буде використовуватися як джерело в усіх періодичних повідомленнях VRRP, які надсилаються активним вузлом. Коли встановлено параметр сумісності rfc3768, створюється новий інтерфейс VRRP, якому автоматично призначається MAC-адреса та віртуальна IP-адреса." -#: ../../configuration/service/dhcp-server.rst:256 +#: ../../configuration/service/dhcp-server.rst:312 msgid "RFC 868 time server IPv4 address" -msgstr "RFC 868 time server IPv4 address" +msgstr "IPv4-адреса сервера часу RFC 868" #: ../../configuration/protocols/rip.rst:7 msgid "RIP" -msgstr "RIP" +msgstr "РІП" #: ../../configuration/protocols/rip.rst:19 msgid "RIPv1 as described in :rfc:`1058`" -msgstr "RIPv1 as described in :rfc:`1058`" +msgstr "RIPv1, як описано в :rfc:`1058`" #: ../../configuration/protocols/rip.rst:20 msgid "RIPv2 as described in :rfc:`2453`" -msgstr "RIPv2 as described in :rfc:`2453`" +msgstr "RIPv2, як описано в :rfc:`2453`" #: ../../configuration/protocols/rpki.rst:5 msgid "RPKI" -msgstr "RPKI" +msgstr "РПКІ" #: ../../configuration/protocols/bgp.rst:223 msgid "RS-Server - RS-Client" -msgstr "RS-Server - RS-Client" +msgstr "RS-Server - RS-клієнт" #: ../../configuration/vpn/rsa-keys.rst:4 msgid "RSA-Keys" -msgstr "RSA-Keys" +msgstr "RSA-ключі" #: ../../configuration/vpn/rsa-keys.rst:5 msgid "RSA can be used for services such as key exchanges and for encryption purposes. To make IPSec work with dynamic address on one/both sides, we will have to use RSA keys for authentication. They are very fast and easy to setup." -msgstr "RSA can be used for services such as key exchanges and for encryption purposes. To make IPSec work with dynamic address on one/both sides, we will have to use RSA keys for authentication. They are very fast and easy to setup." +msgstr "RSA можна використовувати для таких послуг, як обмін ключами та для цілей шифрування. Щоб змусити IPSec працювати з динамічною адресою на одній/обох сторонах, нам доведеться використовувати ключі RSA для автентифікації. Вони дуже швидкі та прості в установці." #: ../../configuration/trafficpolicy/index.rst:763 msgid "Random-Detect" -msgstr "Random-Detect" +msgstr "Випадкове виявлення" #: ../../configuration/trafficpolicy/index.rst:807 msgid "Random-Detect could be useful for heavy traffic. One use of this algorithm might be to prevent a backbone overload. But only for TCP (because dropped packets could be retransmitted), not for UDP." -msgstr "Random-Detect could be useful for heavy traffic. One use of this algorithm might be to prevent a backbone overload. But only for TCP (because dropped packets could be retransmitted), not for UDP." +msgstr "Random-Detect може бути корисним для великого трафіку. Одним із способів використання цього алгоритму може бути запобігання перевантаженню магістралі. Але лише для TCP (оскільки скинуті пакети можуть бути повторно передані), а не для UDP." #: ../../configuration/protocols/static.rst:37 #: ../../configuration/protocols/static.rst:57 -#: ../../configuration/protocols/static.rst:84 -#: ../../configuration/protocols/static.rst:104 +#: ../../configuration/protocols/static.rst:107 +#: ../../configuration/protocols/static.rst:127 msgid "Range is 1 to 255, default is 1." -msgstr "Range is 1 to 255, default is 1." +msgstr "Діапазон від 1 до 255, за замовчуванням 1." #: ../../configuration/protocols/failover.rst:26 msgid "Range is 1 to 300, default is 10." -msgstr "Range is 1 to 300, default is 10." +msgstr "Діапазон від 1 до 300, за замовчуванням 10." #: ../../configuration/trafficpolicy/index.rst:952 msgid "Rate-Control is a CPU-friendly policy. You might consider using it when you just simply want to slow traffic down." -msgstr "Rate-Control is a CPU-friendly policy. You might consider using it when you just simply want to slow traffic down." +msgstr "Rate-Control — це політика, дружня до ЦП. Ви можете розглянути можливість його використання, коли ви просто хочете сповільнити трафік." #: ../../configuration/trafficpolicy/index.rst:918 msgid "Rate-Control is a classless policy that limits the packet flow to a set rate. It is a pure shaper, it does not schedule traffic. Traffic is filtered based on the expenditure of tokens. Tokens roughly correspond to bytes." -msgstr "Rate-Control is a classless policy that limits the packet flow to a set rate. It is a pure shaper, it does not schedule traffic. Traffic is filtered based on the expenditure of tokens. Tokens roughly correspond to bytes." +msgstr "Rate-Control — це безкласова політика, яка обмежує потік пакетів встановленою швидкістю. Це чистий шейпер, він не планує трафік. Трафік фільтрується за витратою токенів. Токени приблизно відповідають байтам." #: ../../configuration/trafficpolicy/index.rst:913 msgid "Rate Control" -msgstr "Rate Control" +msgstr "Контроль швидкості" #: ../../configuration/loadbalancing/wan.rst:77 msgid "Rate limit" -msgstr "Rate limit" +msgstr "Ліміт тарифу" #: ../../configuration/service/dhcp-server.rst:395 #: ../../configuration/service/dhcp-server.rst:471 msgid "Raw Parameters" -msgstr "Raw Parameters" +msgstr "Необроблені параметри" #: ../../configuration/service/dhcp-server.rst:397 msgid "Raw parameters can be passed to shared-network-name, subnet and static-mapping:" -msgstr "Raw parameters can be passed to shared-network-name, subnet and static-mapping:" +msgstr "Необроблені параметри можуть бути передані до shared-network-name, subnet та static-mapping:" #: ../../configuration/service/ssh.rst:162 msgid "Re-generated a known pub/private keyfile which can be used to connect to other services (e.g. RPKI cache)." -msgstr "Re-generated a known pub/private keyfile which can be used to connect to other services (e.g. RPKI cache)." +msgstr "Повторно створено відомий pub/приватний ключовий файл, який можна використовувати для підключення до інших служб (наприклад, кеш RPKI)." #: ../../configuration/service/ssh.rst:154 msgid "Re-generated the public/private keyportion which SSH uses to secure connections." -msgstr "Re-generated the public/private keyportion which SSH uses to secure connections." +msgstr "Повторно згенеровано відкритий/приватний ключ, який SSH використовує для захисту з’єднань." #: ../../configuration/service/router-advert.rst:1 msgid "Reachable Time" -msgstr "Reachable Time" +msgstr "Досяжний час" -#: ../../configuration/highavailability/index.rst:388 +#: ../../configuration/highavailability/index.rst:398 msgid "Real server" -msgstr "Real server" +msgstr "Справжній сервер" -#: ../../configuration/highavailability/index.rst:389 +#: ../../configuration/highavailability/index.rst:399 msgid "Real server IP address and port" -msgstr "Real server IP address and port" +msgstr "Справжня IP-адреса та порт сервера" -#: ../../configuration/highavailability/index.rst:404 +#: ../../configuration/highavailability/index.rst:414 msgid "Real server is auto-excluded if port check with this server fail." -msgstr "Real server is auto-excluded if port check with this server fail." +msgstr "Справжній сервер автоматично виключається, якщо перевірка портів на цьому сервері не вдається." #: ../../configuration/interfaces/bonding.rst:96 msgid "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." -msgstr "Receive traffic from connections created by the server is also balanced. When the local system sends an ARP Request the bonding driver copies and saves the peer's IP information from the ARP packet. When the ARP Reply arrives from the peer, its hardware address is retrieved and the bonding driver initiates an ARP reply to this peer assigning it to one of the slaves in the bond. A problematic outcome of using ARP negotiation for balancing is that each time that an ARP request is broadcast it uses the hardware address of the bond. Hence, peers learn the hardware address of the bond and the balancing of receive traffic collapses to the current slave. This is handled by sending updates (ARP Replies) to all the peers with their individually assigned hardware address such that the traffic is redistributed. Receive traffic is also redistributed when a new slave is added to the bond and when an inactive slave is re-activated. The receive load is distributed sequentially (round robin) among the group of highest speed slaves in the bond." +msgstr "Прийом трафіку від з'єднань, створених сервером, також збалансований. Коли локальна система надсилає ARP-запит, драйвер з’єднання копіює та зберігає IP-інформацію однорангового вузла з ARP-пакета. Коли ARP-відповідь надходить від однорангового вузла, його апаратна адреса отримується, і драйвер зв’язування ініціює ARP-відповідь цьому одноранговому вузлу, призначаючи його одному з підлеглих пристроїв у зв’язку. Проблемним результатом використання узгодження ARP для балансування є те, що щоразу, коли запит ARP транслюється, він використовує апаратну адресу зв’язку. Отже, однорангові вузли дізнаються апаратну адресу зв’язку, а балансування отриманого трафіку згортається до поточного підпорядкованого. Це обробляється шляхом надсилання оновлень (ARP-відповідей) усім вузлам з індивідуально призначеними адресами апаратного забезпечення, щоб трафік перерозподілявся. Отриманий трафік також перерозподіляється, коли до зв’язку додається новий підлеглий пристрій і коли неактивний підлеглий пристрій повторно активується. Приймаюче навантаження розподіляється послідовно (круговий) між групою підлеглих пристроїв з найвищою швидкістю в зв’язку." -#: ../../configuration/vpn/l2tp.rst:205 +#: ../../configuration/service/ipoe-server.rst:227 +#: ../../configuration/service/pppoe-server.rst:189 +#: ../../configuration/vpn/l2tp.rst:232 +#: ../../configuration/vpn/pptp.rst:172 +#: ../../configuration/vpn/sstp.rst:205 msgid "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." -msgstr "Received RADIUS attributes have a higher priority than parameters defined within the CLI configuration, refer to the explanation below." +msgstr "Отримані атрибути RADIUS мають вищий пріоритет, ніж параметри, визначені в конфігурації CLI, див. пояснення нижче." #: ../../configuration/service/webproxy.rst:255 msgid "Recommended for larger installations." -msgstr "Recommended for larger installations." +msgstr "Рекомендується для великих установок." + +#: ../../configuration/service/dns.rst:167 +msgid "Record types" +msgstr "Record types" -#: ../../configuration/loadbalancing/reverse-proxy.rst:171 +#: ../../configuration/loadbalancing/reverse-proxy.rst:211 msgid "Redirect HTTP to HTTPS" -msgstr "Redirect HTTP to HTTPS" +msgstr "Перенаправлення HTTP на HTTPS" #: ../../configuration/nat/nat44.rst:431 msgid "Redirect Microsoft RDP traffic from the internal (LAN, private) network via :ref:`destination-nat` in rule 110 to the internal, private host 192.0.2.40. We also need a :ref:`source-nat` rule 110 for the reverse path of the traffic. The internal network 192.0.2.0/24 is reachable via interface `eth0.10`." -msgstr "Redirect Microsoft RDP traffic from the internal (LAN, private) network via :ref:`destination-nat` in rule 110 to the internal, private host 192.0.2.40. We also need a :ref:`source-nat` rule 110 for the reverse path of the traffic. The internal network 192.0.2.0/24 is reachable via interface `eth0.10`." +msgstr "Переспрямуйте трафік Microsoft RDP із внутрішньої (LAN, приватної) мережі через :ref:`destination-nat` у правилі 110 на внутрішній приватний хост 192.0.2.40. Нам також потрібно :ref:`source-nat` правило 110 для зворотного шляху трафіку. Внутрішня мережа 192.0.2.0/24 доступна через інтерфейс `eth0.10`." #: ../../configuration/nat/nat44.rst:427 msgid "Redirect Microsoft RDP traffic from the outside (WAN, external) world via :ref:`destination-nat` in rule 100 to the internal, private host 192.0.2.40." -msgstr "Redirect Microsoft RDP traffic from the outside (WAN, external) world via :ref:`destination-nat` in rule 100 to the internal, private host 192.0.2.40." +msgstr "Перенаправляйте трафік Microsoft RDP із зовнішнього (WAN, зовнішнього) світу через :ref:`destination-nat` у правилі 100 на внутрішній приватний хост 192.0.2.40." #: ../../configuration/loadbalancing/reverse-proxy.rst:91 msgid "Redirect URL to a new location" -msgstr "Redirect URL to a new location" +msgstr "Переспрямувати URL на нове місце" #: ../../configuration/protocols/babel.rst:154 #: ../../configuration/protocols/bgp.rst:557 @@ -10062,106 +11155,113 @@ msgstr "Redirect URL to a new location" #: ../../configuration/protocols/ospf.rst:1251 #: ../../configuration/protocols/rip.rst:136 msgid "Redistribution Configuration" -msgstr "Redistribution Configuration" +msgstr "Конфігурація перерозподілу" #: ../../configuration/nat/nat66.rst:35 msgid "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." -msgstr "Redundancy and load sharing. There are multiple NAT66 devices at the edge of an IPv6 network to another IPv6 network. The path through the NAT66 device to another IPv6 network forms an equivalent route, and traffic can be load-shared on these NAT66 devices. In this case, you can configure the same source address translation rules on these NAT66 devices, so that any NAT66 device can handle IPv6 traffic between different sites." +msgstr "Резервування та розподіл навантаження. Є кілька пристроїв NAT66 на межі мережі IPv6 з іншою мережею IPv6. Шлях через пристрій NAT66 до іншої мережі IPv6 утворює еквівалентний маршрут, і трафік може розподілятися навантаження на цих пристроях NAT66. У цьому випадку ви можете налаштувати однакові правила перекладу вихідної адреси на цих пристроях NAT66, щоб будь-який пристрій NAT66 міг обробляти трафік IPv6 між різними сайтами." -#: ../../configuration/service/dns.rst:278 +#: ../../configuration/service/dns.rst:356 msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" -msgstr "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``" +msgstr "Зареєструвати DNS-запис ``example.vyos.io`` на DNS-сервері ``ns1.vyos.io``" -#: ../../configuration/interfaces/ethernet.rst:110 +#: ../../configuration/interfaces/ethernet.rst:126 #: ../../configuration/interfaces/virtual-ethernet.rst:33 #: ../../configuration/interfaces/wireless.rst:401 msgid "Regular VLANs (802.1q)" -msgstr "Regular VLANs (802.1q)" +msgstr "Звичайні VLAN (802.1q)" #: ../../configuration/policy/community-list.rst:35 msgid "Regular expression to match against a community-list." -msgstr "Regular expression to match against a community-list." +msgstr "Регулярний вираз для зіставлення зі списком спільноти." #: ../../configuration/policy/large-community-list.rst:36 msgid "Regular expression to match against a large community list." -msgstr "Regular expression to match against a large community list." +msgstr "Регулярний вираз для зіставлення з великим списком спільноти." #: ../../configuration/policy/as-path-list.rst:33 msgid "Regular expression to match against an AS path. For example \"64501 64502\"." -msgstr "Regular expression to match against an AS path. For example \"64501 64502\"." +msgstr "Регулярний вираз для зіставлення зі шляхом AS. Наприклад, «64501 64502»." #: ../../configuration/policy/extcommunity-list.rst:35 msgid "Regular expression to match against an extended community list, where text could be:" -msgstr "Regular expression to match against an extended community list, where text could be:" +msgstr "Регулярний вираз для зіставлення з розширеним списком спільноти, де текст може бути:" #: ../../_include/interface-dhcp-options.txt:71 msgid "Reject DHCP leases from a given address or range. This is useful when a modem gives a local IP when first starting." -msgstr "Reject DHCP leases from a given address or range. This is useful when a modem gives a local IP when first starting." +msgstr "Відхилити оренду DHCP із заданої адреси чи діапазону. Це корисно, коли модем надає локальний IP під час першого запуску." #: ../../configuration/service/ssh.rst:135 msgid "Remember source IP in seconds before reset their score. The default is 1800." -msgstr "Remember source IP in seconds before reset their score. The default is 1800." +msgstr "Запам'ятовуйте IP-адресу джерела за секунди, перш ніж скинути їх оцінку. За замовчуванням 1800." #: ../../configuration/service/console-server.rst:60 msgid "Remote Access" -msgstr "Remote Access" +msgstr "Віддалений доступ" #: ../../configuration/interfaces/wireguard.rst:267 msgid "Remote Access \"RoadWarrior\" Example" -msgstr "Remote Access \"RoadWarrior\" Example" +msgstr "Приклад віддаленого доступу "RoadWarrior"." #: ../../configuration/interfaces/wireguard.rst:394 msgid "Remote Access \"RoadWarrior\" clients" -msgstr "Remote Access \"RoadWarrior\" clients" +msgstr "Клієнти віддаленого доступу "RoadWarrior"." #: ../../configuration/interfaces/openvpn.rst:152 #: ../../configuration/interfaces/openvpn.rst:247 msgid "Remote Configuration:" -msgstr "Remote Configuration:" +msgstr "Віддалена конфігурація:" #: ../../configuration/interfaces/openvpn.rst:137 msgid "Remote Configuration - Annotated:" -msgstr "Remote Configuration - Annotated:" +msgstr "Віддалена конфігурація - анотовано:" #: ../../configuration/system/syslog.rst:54 msgid "Remote Host" -msgstr "Remote Host" +msgstr "Віддалений хост" #: ../../configuration/service/monitoring.rst:130 msgid "Remote URL" -msgstr "Remote URL" +msgstr "Віддалена URL-адреса" #: ../../configuration/service/monitoring.rst:35 msgid "Remote URL." -msgstr "Remote URL." +msgstr "Віддалена URL-адреса." #: ../../configuration/service/monitoring.rst:96 msgid "Remote URL to Splunk collector" -msgstr "Remote URL to Splunk collector" +msgstr "Віддалена URL-адреса до колектора Splunk" #: ../../configuration/service/monitoring.rst:122 msgid "Remote ``InfluxDB`` bucket name" -msgstr "Remote ``InfluxDB`` bucket name" +msgstr "Назва віддаленого сегмента ``InfluxDB``" #: ../../configuration/service/monitoring.rst:22 msgid "Remote database name." -msgstr "Remote database name." +msgstr "Ім'я віддаленої бази даних." -#: ../../configuration/service/dhcp-server.rst:147 +#: ../../configuration/service/dhcp-server.rst:196 +msgid "Remote peer IP `<address>` of the second DHCP server in this HA cluster." +msgstr "Remote peer IP `<address>` of the second DHCP server in this HA cluster." + +#: ../../configuration/service/dhcp-server.rst:181 msgid "Remote peer IP `<address>` of the second DHCP server in this failover cluster." -msgstr "Remote peer IP `<address>` of the second DHCP server in this failover cluster." +msgstr "Віддалений одноранговий IP `<address> ` другого сервера DHCP у цьому кластері відновлення після відмови." #: ../../configuration/service/monitoring.rst:126 msgid "Remote port" -msgstr "Remote port" +msgstr "Віддалений порт" #: ../../configuration/protocols/bfd.rst:48 msgid "Remote transmission interval will be multiplied by this value" -msgstr "Remote transmission interval will be multiplied by this value" +msgstr "Інтервал віддаленої передачі буде помножений на це значення" -#: ../../configuration/vpn/l2tp.rst:216 +#: ../../configuration/service/pppoe-server.rst:217 +#: ../../configuration/vpn/l2tp.rst:260 +#: ../../configuration/vpn/pptp.rst:200 +#: ../../configuration/vpn/sstp.rst:233 msgid "Renaming clients interfaces by RADIUS" -msgstr "Renaming clients interfaces by RADIUS" +msgstr "Перейменування клієнтських інтерфейсів RADIUS" #: ../../configuration/interfaces/openvpn.rst:129 msgid "Repeat the procedure on the other router." @@ -10169,265 +11269,268 @@ msgstr "Repeat the procedure on the other router." #: ../../configuration/interfaces/macsec.rst:93 msgid "Replay protection" -msgstr "Replay protection" +msgstr "Захист від повторів" #: ../../_include/interface-dhcpv6-options.txt:50 msgid "Request only a temporary address and not form an IA_NA (Identity Association for Non-temporary Addresses) partnership." -msgstr "Request only a temporary address and not form an IA_NA (Identity Association for Non-temporary Addresses) partnership." +msgstr "Запитуйте лише тимчасову адресу, а не створюйте партнерство IA_NA (Ідентифікаційна асоціація для нетимчасових адрес)." #: ../../configuration/service/dhcp-relay.rst:177 msgid "Requests are forwarded through ``eth2`` as the `upstream interface`" -msgstr "Requests are forwarded through ``eth2`` as the `upstream interface`" +msgstr "Запити пересилаються через ``eth2`` як `вихідний інтерфейс`" -#: ../../configuration/vpn/sstp.rst:95 +#: ../../configuration/service/pppoe-server.rst:442 +#: ../../configuration/vpn/l2tp.rst:396 +#: ../../configuration/vpn/pptp.rst:320 +#: ../../configuration/vpn/sstp.rst:354 msgid "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." -msgstr "Require the peer to authenticate itself using one of the following protocols: pap, chap, mschap, mschap-v2." +msgstr "Вимагайте від однорангового вузла автентифікації за допомогою одного з таких протоколів: pap, chap, mschap, mschap-v2." #: ../../configuration/service/salt-minion.rst:17 msgid "Requirements" -msgstr "Requirements" +msgstr "вимоги" #: ../../configuration/interfaces/pppoe.rst:325 msgid "Requirements:" -msgstr "Requirements:" +msgstr "Вимоги:" -#: ../../configuration/firewall/ipv4.rst:926 +#: ../../configuration/firewall/ipv4.rst:949 #: ../../configuration/firewall/ipv6.rst:935 msgid "Requirements to enable synproxy:" msgstr "Requirements to enable synproxy:" -#: ../../configuration/protocols/bgp.rst:1064 +#: ../../configuration/protocols/bgp.rst:1086 #: ../../configuration/protocols/mpls.rst:248 msgid "Reset" -msgstr "Reset" +msgstr "Скинути" #: ../../configuration/interfaces/openvpn.rst:725 msgid "Reset OpenVPN" -msgstr "Reset OpenVPN" +msgstr "Скинути OpenVPN" -#: ../../configuration/system/ipv6.rst:150 +#: ../../configuration/system/ipv6.rst:163 msgid "Reset commands" -msgstr "Reset commands" +msgstr "Скидання команд" -#: ../../configuration/service/dns.rst:199 +#: ../../configuration/service/dns.rst:280 msgid "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." -msgstr "Resets the local DNS forwarding cache database. You can reset the cache for all entries or only for entries to a specific domain." +msgstr "Скидає локальну базу даних кешу пересилання DNS. Ви можете скинути кеш для всіх записів або лише для записів у певному домені." #: ../../configuration/loadbalancing/wan.rst:309 msgid "Restart" -msgstr "Restart" +msgstr "Перезавантажте" #: ../../configuration/service/dhcp-relay.rst:128 msgid "Restart DHCP relay service" -msgstr "Restart DHCP relay service" +msgstr "Перезапустіть службу ретрансляції DHCP" #: ../../configuration/service/dhcp-relay.rst:205 msgid "Restart DHCPv6 relay agent immediately." -msgstr "Restart DHCPv6 relay agent immediately." +msgstr "Негайно перезапустіть агент ретрансляції DHCPv6." -#: ../../configuration/container/index.rst:167 +#: ../../configuration/container/index.rst:203 msgid "Restart a given container" -msgstr "Restart a given container" +msgstr "Перезапустити заданий контейнер" #: ../../configuration/service/mdns.rst:83 msgid "Restart mDNS repeater service." msgstr "Restart mDNS repeater service." -#: ../../configuration/service/dhcp-server.rst:428 +#: ../../configuration/service/dhcp-server.rst:487 msgid "Restart the DHCP server" -msgstr "Restart the DHCP server" +msgstr "Перезапустіть сервер DHCP" #: ../../configuration/protocols/igmp-proxy.rst:77 msgid "Restart the IGMP proxy process." -msgstr "Restart the IGMP proxy process." +msgstr "Перезапустіть процес проксі IGMP." #: ../../configuration/service/ssh.rst:149 msgid "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." -msgstr "Restart the SSH daemon process, the current session is not affected, only the background daemon is restarted." +msgstr "Перезапустіть процес демона SSH, це не вплине на поточний сеанс, буде перезапущено лише фоновий демон." -#: ../../configuration/service/dns.rst:204 +#: ../../configuration/service/dns.rst:285 msgid "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." -msgstr "Restarts the DNS recursor process. This also invalidates the local DNS forwarding cache." +msgstr "Перезапускає процес DNS-рекурсора. Це також робить недійсним локальний кеш переадресації DNS." #: ../../configuration/interfaces/wireless.rst:315 #: ../../configuration/interfaces/wireless.rst:369 #: ../../configuration/interfaces/wireless.rst:567 msgid "Resulting in" -msgstr "Resulting in" +msgstr "В результаті" #: ../../configuration/interfaces/vti.rst:14 msgid "Results in:" -msgstr "Results in:" +msgstr "Призводить до:" #: ../../configuration/service/router-advert.rst:1 msgid "Retransmit Timer" -msgstr "Retransmit Timer" +msgstr "Таймер повторної передачі" -#: ../../configuration/service/conntrack-sync.rst:140 +#: ../../configuration/service/conntrack-sync.rst:149 msgid "Retrieve current statistics of connection tracking subsystem." -msgstr "Retrieve current statistics of connection tracking subsystem." +msgstr "Отримати поточну статистику підсистеми відстеження підключень." -#: ../../configuration/service/conntrack-sync.rst:173 +#: ../../configuration/service/conntrack-sync.rst:182 msgid "Retrieve current status of connection tracking subsystem." -msgstr "Retrieve current status of connection tracking subsystem." +msgstr "Отримати поточний стан підсистеми відстеження з’єднань." #: ../../configuration/interfaces/wireguard.rst:77 msgid "Retrieve public key portion from configured WIreGuard interface." -msgstr "Retrieve public key portion from configured WIreGuard interface." +msgstr "Отримайте частину відкритого ключа з налаштованого інтерфейсу WIreGuard." #: ../../configuration/loadbalancing/reverse-proxy.rst:4 msgid "Reverse-proxy" -msgstr "Reverse-proxy" +msgstr "Зворотний проксі" #: ../../configuration/trafficpolicy/index.rst:958 msgid "Round Robin" -msgstr "Round Robin" +msgstr "Кругової" #: ../../configuration/protocols/bgp.rst:527 msgid "Route Aggregation Configuration" -msgstr "Route Aggregation Configuration" +msgstr "Конфігурація агрегації маршрутів" -#: ../../configuration/protocols/bgp.rst:682 +#: ../../configuration/protocols/bgp.rst:704 msgid "Route Dampening" -msgstr "Route Dampening" +msgstr "Зволоження маршруту" -#: ../../configuration/protocols/bgp.rst:1189 +#: ../../configuration/protocols/bgp.rst:1211 msgid "Route Filtering" -msgstr "Route Filtering" +msgstr "Фільтрація маршруту" -#: ../../configuration/protocols/bgp.rst:818 +#: ../../configuration/protocols/bgp.rst:840 msgid "Route Filtering Configuration" -msgstr "Route Filtering Configuration" +msgstr "Конфігурація фільтрації маршруту" #: ../../configuration/policy/route-map.rst:13 msgid "Route Map" -msgstr "Route Map" +msgstr "Карта маршруту" #: ../../configuration/policy/route-map.rst:3 msgid "Route Map Policy" -msgstr "Route Map Policy" +msgstr "Політика маршрутної карти" #: ../../configuration/protocols/isis.rst:227 msgid "Route Redistribution" -msgstr "Route Redistribution" +msgstr "Перерозподіл маршруту" -#: ../../configuration/protocols/bgp.rst:904 +#: ../../configuration/protocols/bgp.rst:926 msgid "Route Reflector Configuration" -msgstr "Route Reflector Configuration" +msgstr "Конфігурація відбивача маршруту" #: ../../configuration/protocols/bgp.rst:57 msgid "Route Selection" -msgstr "Route Selection" +msgstr "Вибір маршруту" -#: ../../configuration/protocols/bgp.rst:737 +#: ../../configuration/protocols/bgp.rst:759 msgid "Route Selection Configuration" -msgstr "Route Selection Configuration" +msgstr "Конфігурація вибору маршруту" #: ../../configuration/policy/route.rst:3 msgid "Route and Route6 Policy" -msgstr "Route and Route6 Policy" +msgstr "Політика Route і Route6" -#: ../../configuration/protocols/bgp.rst:690 +#: ../../configuration/protocols/bgp.rst:712 msgid "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." -msgstr "Route dampening wich described in :rfc:`2439` enables you to identify routes that repeatedly fail and return. If route dampening is enabled, an unstable route accumulates penalties each time the route fails and returns. If the accumulated penalties exceed a threshold, the route is no longer advertised. This is route suppression. Routes that have been suppressed are re-entered into the routing table only when the amount of their penalty falls below a threshold." +msgstr "Послаблення маршруту, описане в :rfc:`2439`, дає змогу ідентифікувати маршрути, які неодноразово виходять з ладу та повертаються. Якщо пом’якшення маршруту ввімкнено, нестабільний маршрут накопичує штрафи кожного разу, коли маршрут не виконується та повертається. Якщо накопичені штрафи перевищують порогове значення, маршрут більше не рекламується. Це придушення маршруту. Маршрути, які були пригнічені, повторно вводяться в таблицю маршрутизації лише тоді, коли сума їх штрафу падає нижче порогового значення." -#: ../../configuration/protocols/bgp.rst:1191 +#: ../../configuration/protocols/bgp.rst:1213 msgid "Route filter can be applied using a route-map:" -msgstr "Route filter can be applied using a route-map:" +msgstr "Фільтр маршруту можна застосувати за допомогою маршрутної карти:" #: ../../configuration/policy/route-map.rst:5 msgid "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." -msgstr "Route map is a powerfull command, that gives network administrators a very useful and flexible tool for traffic manipulation." +msgstr "Карта маршруту — це потужна команда, яка надає адміністраторам мережі дуже корисний і гнучкий інструмент для маніпулювання трафіком." -#: ../../configuration/protocols/rpki.rst:95 +#: ../../configuration/protocols/rpki.rst:93 msgid "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." -msgstr "Route maps can be configured to match a specific RPKI validation state. This allows the creation of local policies, which handle BGP routes based on the outcome of the Prefix Origin Validation." +msgstr "Карти маршрутів можна налаштувати відповідно до певного стану перевірки RPKI. Це дозволяє створювати локальні політики, які обробляють маршрути BGP на основі результатів перевірки походження префікса." #: ../../configuration/protocols/failover.rst:56 msgid "Route metric" -msgstr "Route metric" +msgstr "Метрика маршруту" #: ../../configuration/policy/route-map.rst:184 msgid "Route tag to match." -msgstr "Route tag to match." +msgstr "Тег маршруту для відповідності." #: ../../configuration/service/router-advert.rst:5 msgid "Router Advertisements" -msgstr "Router Advertisements" +msgstr "Оголошення про маршрутизатор" #: ../../configuration/service/router-advert.rst:1 msgid "Router Lifetime" -msgstr "Router Lifetime" +msgstr "Термін служби маршрутизатора" #: ../../configuration/service/dhcp-relay.rst:89 msgid "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." -msgstr "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." +msgstr "Маршрутизатор отримує запити клієнта DHCP на ``eth1`` і ретранслює їх на сервер за адресою 10.0.1.4 на ``eth2``." -#: ../../configuration/vrf/index.rst:425 +#: ../../configuration/vrf/index.rst:444 msgid "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" -msgstr "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" +msgstr "Маршрути, експортовані з одноадресного VRF до VPN RIB, повинні бути доповнені двома параметрами:" #: ../../configuration/protocols/isis.rst:441 msgid "Routes on Node 2:" -msgstr "Routes on Node 2:" +msgstr "Маршрути на вузлі 2:" #: ../../configuration/protocols/bgp.rst:230 msgid "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." -msgstr "Routes that are sent from provider, rs-server, or the peer local-role (or if received by customer, rs-client, or the peer local-role) will be marked with a new Only to Customer (OTC) attribute." +msgstr "Маршрути, які надсилаються від постачальника, rs-сервера або однорангової локальної ролі (або якщо отримані клієнтом, rs-клієнтом або одноранговою локальною роллю), будуть позначені новим атрибутом «Тільки для клієнта» (OTC)." -#: ../../configuration/protocols/bgp.rst:662 +#: ../../configuration/protocols/bgp.rst:684 #: ../../configuration/protocols/ospf.rst:92 #: ../../configuration/protocols/rip.rst:64 #: ../../configuration/protocols/static.rst:39 #: ../../configuration/protocols/static.rst:59 msgid "Routes with a distance of 255 are effectively disabled and not installed into the kernel." -msgstr "Routes with a distance of 255 are effectively disabled and not installed into the kernel." +msgstr "Маршрути з відстанню 255 фактично відключені та не встановлюються в ядро." #: ../../configuration/protocols/bgp.rst:234 msgid "Routes with this attribute can only be sent to your neighbor if your local-role is provider or rs-server. Routes with this attribute can be received only if your local-role is customer or rs-client." -msgstr "Routes with this attribute can only be sent to your neighbor if your local-role is provider or rs-server. Routes with this attribute can be received only if your local-role is customer or rs-client." +msgstr "Маршрути з цим атрибутом можна надсилати вашому сусіду, лише якщо ваша локальна роль — провайдер або rs-сервер. Маршрути з цим атрибутом можна отримати, лише якщо ваша локальна роль клієнт або rs-клієнт." #: ../../configuration/trafficpolicy/index.rst:803 msgid "Routine" -msgstr "Routine" +msgstr "Рутина" -#: ../../configuration/vrf/index.rst:82 +#: ../../configuration/vrf/index.rst:101 msgid "Routing" -msgstr "Routing" +msgstr "Маршрутизація" #: ../../configuration/policy/examples.rst:95 msgid "Routing tables that will be used in this example are:" -msgstr "Routing tables that will be used in this example are:" +msgstr "У цьому прикладі використовуватимуться такі таблиці маршрутизації:" #: ../../configuration/policy/route.rst:10 msgid "Rule-Sets" -msgstr "Rule-Sets" +msgstr "Набори правил" #: ../../configuration/firewall/bridge.rst:287 -#: ../../configuration/firewall/ipv4.rst:957 +#: ../../configuration/firewall/ipv4.rst:980 #: ../../configuration/firewall/ipv6.rst:965 msgid "Rule-set overview" -msgstr "Rule-set overview" +msgstr "Огляд набору правил" -#: ../../configuration/loadbalancing/reverse-proxy.rst:217 +#: ../../configuration/loadbalancing/reverse-proxy.rst:258 msgid "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" -msgstr "Rule 10 matches requests with the domain name ``node1.example.com`` forwards to the backend ``bk-api-01``" +msgstr "Правило 10 зіставляє запити з доменним іменем `` node1.example.com ``, які пересилають до серверної частини `` bk-api-01``" -#: ../../configuration/loadbalancing/reverse-proxy.rst:254 +#: ../../configuration/loadbalancing/reverse-proxy.rst:295 msgid "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." -msgstr "Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` and redirects to location ``/certs/``." +msgstr "Правило 10 зіставляє запити з точним URL-шляхом ``/.well-known/xxx`` і переспрямовує до розташування ``/certs/``." #: ../../configuration/firewall/flowtables.rst:151 msgid "Rule 110 is hit, so connection is accepted." msgstr "Rule 110 is hit, so connection is accepted." -#: ../../configuration/loadbalancing/reverse-proxy.rst:257 +#: ../../configuration/loadbalancing/reverse-proxy.rst:298 msgid "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." -msgstr "Rule 20 matches requests with URL paths ending in ``/mail`` or exact path ``/email/bar`` redirect to location ``/postfix/``." +msgstr "Правило 20 зіставляє запити з URL-шляхами, що закінчуються на ``/mail`` або точним шляхом ``/email/bar``, перенаправляють до розташування ``/postfix/``." -#: ../../configuration/loadbalancing/reverse-proxy.rst:220 +#: ../../configuration/loadbalancing/reverse-proxy.rst:261 msgid "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" -msgstr "Rule 20 matches requests with the domain name ``node2.example.com`` forwards to the backend ``bk-api-02``" +msgstr "Правило 20 зіставляє запити з доменним іменем ``node2.example.com``, які пересилають на серверну частину ``bk-api-02``" #: ../../configuration/firewall/bridge.rst:208 #: ../../configuration/firewall/ipv4.rst:288 @@ -10437,19 +11540,19 @@ msgstr "Rule Status" #: ../../configuration/loadbalancing/reverse-proxy.rst:50 msgid "Rules" -msgstr "Rules" +msgstr "правила" #: ../../configuration/loadbalancing/reverse-proxy.rst:51 msgid "Rules allow to control and route incoming traffic to specific backend based on predefined conditions. Rules allow to define matching criteria and perform action accordingly." -msgstr "Rules allow to control and route incoming traffic to specific backend based on predefined conditions. Rules allow to define matching criteria and perform action accordingly." +msgstr "Правила дозволяють контролювати та направляти вхідний трафік до певної серверної частини на основі попередньо визначених умов. Правила дозволяють визначити критерії відповідності та виконати дію відповідно." #: ../../configuration/nat/nat44.rst:134 msgid "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." -msgstr "Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`." +msgstr "Буде створено правила як для :ref:`source-nat`, так і для :ref:`destination-nat`." -#: ../../configuration/service/dns.rst:391 +#: ../../configuration/service/dns.rst:493 msgid "Running Behind NAT" -msgstr "Running Behind NAT" +msgstr "Запуск за NAT" #: ../../configuration/nat/nat44.rst:76 msgid "SNAT" @@ -10469,23 +11572,23 @@ msgstr "SNMP" #: ../../configuration/service/snmp.rst:214 msgid "SNMP Extensions" -msgstr "SNMP Extensions" +msgstr "Розширення SNMP" #: ../../configuration/service/snmp.rst:70 msgid "SNMP Protocol Versions" -msgstr "SNMP Protocol Versions" +msgstr "Версії протоколу SNMP" #: ../../configuration/service/snmp.rst:84 msgid "SNMP can work synchronously or asynchronously. In synchronous communication, the monitoring system queries the router periodically. In asynchronous, the router sends notification to the \"trap\" (the monitoring host)." -msgstr "SNMP can work synchronously or asynchronously. In synchronous communication, the monitoring system queries the router periodically. In asynchronous, the router sends notification to the \"trap\" (the monitoring host)." +msgstr "SNMP може працювати синхронно або асинхронно. У синхронному зв’язку система моніторингу періодично запитує маршрутизатор. В асинхронному режимі маршрутизатор надсилає сповіщення на "пастку" (хост моніторингу)." #: ../../configuration/service/snmp.rst:23 msgid "SNMP is a component of the Internet Protocol Suite as defined by the Internet Engineering Task Force (IETF). It consists of a set of standards for network management, including an application layer protocol, a database schema, and a set of data objects." -msgstr "SNMP is a component of the Internet Protocol Suite as defined by the Internet Engineering Task Force (IETF). It consists of a set of standards for network management, including an application layer protocol, a database schema, and a set of data objects." +msgstr "SNMP є компонентом Internet Protocol Suite, як це визначено Інженерною робочою групою Інтернету (IETF). Він складається з набору стандартів для керування мережею, включаючи протокол прикладного рівня, схему бази даних і набір об’єктів даних." #: ../../configuration/service/snmp.rst:13 msgid "SNMP is widely used in network management for network monitoring. SNMP exposes management data in the form of variables on the managed systems organized in a management information base (MIB_) which describe the system status and configuration. These variables can then be remotely queried (and, in some circumstances, manipulated) by managing applications." -msgstr "SNMP is widely used in network management for network monitoring. SNMP exposes management data in the form of variables on the managed systems organized in a management information base (MIB_) which describe the system status and configuration. These variables can then be remotely queried (and, in some circumstances, manipulated) by managing applications." +msgstr "SNMP широко використовується в управлінні мережею для моніторингу мережі. SNMP надає керуючі дані у формі змінних керованих систем, організованих у інформаційній базі керування (MIB_), які описують стан і конфігурацію системи. Ці змінні потім можна дистанційно запитувати (і, за деяких обставин, маніпулювати) за допомогою керування програмами." #: ../../configuration/service/snmp.rst:77 msgid "SNMPv2" @@ -10493,11 +11596,11 @@ msgstr "SNMPv2" #: ../../configuration/service/snmp.rst:88 msgid "SNMPv2 does not support any authentication mechanisms, other than client source address, so you should specify addresses of clients allowed to monitor the router. Note that SNMPv2 also supports no encryption and always sends data in plain text." -msgstr "SNMPv2 does not support any authentication mechanisms, other than client source address, so you should specify addresses of clients allowed to monitor the router. Note that SNMPv2 also supports no encryption and always sends data in plain text." +msgstr "SNMPv2 не підтримує жодних механізмів автентифікації, окрім адреси джерела клієнта, тому ви повинні вказати адреси клієнтів, яким дозволено контролювати маршрутизатор. Зауважте, що SNMPv2 також не підтримує шифрування та завжди надсилає дані у вигляді звичайного тексту." #: ../../configuration/service/snmp.rst:79 msgid "SNMPv2 is the original and most commonly used version. For authorizing clients, SNMP uses the concept of communities. Communities may have authorization set to read only (this is most common) or to read and write (this option is not actively used in VyOS)." -msgstr "SNMPv2 is the original and most commonly used version. For authorizing clients, SNMP uses the concept of communities. Communities may have authorization set to read only (this is most common) or to read and write (this option is not actively used in VyOS)." +msgstr "SNMPv2 є оригінальною та найпоширенішою версією. Для авторизації клієнтів SNMP використовує концепцію спільнот. Спільноти можуть мати авторизацію лише для читання (це найпоширеніше) або для читання та запису (ця опція не використовується активно у VyOS)." #: ../../configuration/service/snmp.rst:122 msgid "SNMPv3" @@ -10505,13 +11608,13 @@ msgstr "SNMPv3" #: ../../configuration/service/snmp.rst:124 msgid "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new security related features that have been missing from the previous versions. Security was one of the biggest weakness of SNMP until v3. Authentication in SNMP Versions 1 and 2 amounts to nothing more than a password (community string) sent in clear text between a manager and agent. Each SNMPv3 message contains security parameters which are encoded as an octet string. The meaning of these security parameters depends on the security model being used." -msgstr "SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new security related features that have been missing from the previous versions. Security was one of the biggest weakness of SNMP until v3. Authentication in SNMP Versions 1 and 2 amounts to nothing more than a password (community string) sent in clear text between a manager and agent. Each SNMPv3 message contains security parameters which are encoded as an octet string. The meaning of these security parameters depends on the security model being used." +msgstr "SNMPv3 (версія 3 протоколу SNMP) представила цілу низку нових функцій, пов’язаних із безпекою, яких не було в попередніх версіях. Безпека була однією з найбільших слабких сторін SNMP до v3. Автентифікація в SNMP версій 1 і 2 — це не що інше, як пароль (рядок спільноти), який передається відкритим текстом між менеджером і агентом. Кожне повідомлення SNMPv3 містить параметри безпеки, закодовані у вигляді рядка октету. Значення цих параметрів безпеки залежить від використовуваної моделі безпеки." #: ../../_include/interface-mirror.txt:1 msgid "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." -msgstr "SPAN port mirroring can copy the inbound/outbound traffic of the interface to the specified interface, usually the interface can be connected to some special equipment, such as behavior control system, intrusion detection system and traffic collector, and can copy all related traffic from this port. The benefit of mirroring the traffic is that the application is isolated from the source traffic and so application processing does not affect the traffic or the system performance." +msgstr "Дзеркалювання порту SPAN може копіювати вхідний/вихідний трафік інтерфейсу на вказаний інтерфейс, зазвичай інтерфейс можна підключити до певного спеціального обладнання, наприклад системи контролю поведінки, системи виявлення вторгнень і збирача трафіку, і може копіювати весь пов’язаний трафік із цього порт. Перевага віддзеркалення трафіку полягає в тому, що програма ізольована від вихідного трафіку, тому обробка програми не впливає на трафік або продуктивність системи." -#: ../../configuration/protocols/rpki.rst:127 +#: ../../configuration/protocols/rpki.rst:139 #: ../../configuration/service/ssh.rst:5 msgid "SSH" msgstr "SSH" @@ -10520,78 +11623,81 @@ msgstr "SSH" msgid "SSH :ref:`ssh_key_based_authentication`" msgstr "SSH :ref:`ssh_key_based_authentication`" -#: ../../configuration/system/login.rst:57 +#: ../../configuration/system/login.rst:61 msgid "SSH :ref:`ssh_operation`" msgstr "SSH :ref:`ssh_operation`" -#: ../../configuration/system/option.rst:44 +#: ../../configuration/system/option.rst:74 msgid "SSH client" -msgstr "SSH client" +msgstr "Клієнт SSH" #: ../../configuration/service/ssh.rst:12 msgid "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." -msgstr "SSH provides a secure channel over an unsecured network in a client-server architecture, connecting an SSH client application with an SSH server. Common applications include remote command-line login and remote command execution, but any network service can be secured with SSH. The protocol specification distinguishes between two major versions, referred to as SSH-1 and SSH-2." +msgstr "SSH забезпечує безпечний канал через незахищену мережу в архітектурі клієнт-сервер, з’єднуючи клієнтську програму SSH із сервером SSH. Загальні програми включають віддалений вхід із командного рядка та віддалене виконання команд, але будь-яку мережеву службу можна захистити за допомогою SSH. Специфікація протоколу розрізняє дві основні версії, які називаються SSH-1 і SSH-2." -#: ../../configuration/protocols/rpki.rst:137 +#: ../../configuration/protocols/rpki.rst:151 msgid "SSH username to establish an SSH connection to the cache server." -msgstr "SSH username to establish an SSH connection to the cache server." +msgstr "Ім’я користувача SSH для встановлення з’єднання SSH із сервером кешу." #: ../../configuration/service/ssh.rst:23 msgid "SSH was designed as a replacement for Telnet and for unsecured remote shell protocols such as the Berkeley rlogin, rsh, and rexec protocols. Those protocols send information, notably passwords, in plaintext, rendering them susceptible to interception and disclosure using packet analysis. The encryption used by SSH is intended to provide confidentiality and integrity of data over an unsecured network, such as the Internet." -msgstr "SSH was designed as a replacement for Telnet and for unsecured remote shell protocols such as the Berkeley rlogin, rsh, and rexec protocols. Those protocols send information, notably passwords, in plaintext, rendering them susceptible to interception and disclosure using packet analysis. The encryption used by SSH is intended to provide confidentiality and integrity of data over an unsecured network, such as the Internet." +msgstr "SSH був розроблений як заміна Telnet і незахищених віддалених протоколів оболонки, таких як протоколи Berkeley rlogin, rsh і rexec. Ці протоколи надсилають інформацію, зокрема паролі, у відкритому вигляді, що робить їх чутливими до перехоплення та розголошення за допомогою аналізу пакетів. Шифрування, яке використовується SSH, призначене для забезпечення конфіденційності та цілісності даних у незахищеній мережі, наприклад Інтернеті." #: ../../configuration/interfaces/wireless.rst:114 msgid "SSID to be used in IEEE 802.11 management frames" -msgstr "SSID to be used in IEEE 802.11 management frames" +msgstr "SSID для використання в кадрах керування IEEE 802.11" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:333 +msgid "SSL Bridging" +msgstr "SSL Bridging" #: ../../configuration/vpn/openconnect.rst:24 -#: ../../configuration/vpn/sstp.rst:162 msgid "SSL Certificates" -msgstr "SSL Certificates" +msgstr "Сертифікати SSL" #: ../../configuration/vpn/openconnect.rst:100 msgid "SSL Certificates generation" -msgstr "SSL Certificates generation" +msgstr "Генерація SSL сертифікатів" #: ../../configuration/loadbalancing/reverse-proxy.rst:67 msgid "SSL match Server Name Indication (SNI) option:" -msgstr "SSL match Server Name Indication (SNI) option:" +msgstr "Параметр індикації імені сервера (SNI) відповідності SSL:" #: ../../configuration/interfaces/sstp-client.rst:7 msgid "SSTP Client" -msgstr "SSTP Client" +msgstr "Клієнт SSTP" #: ../../configuration/interfaces/sstp-client.rst:42 msgid "SSTP Client Options" -msgstr "SSTP Client Options" +msgstr "Параметри клієнта SSTP" #: ../../configuration/vpn/sstp.rst:5 msgid "SSTP Server" -msgstr "SSTP Server" +msgstr "Сервер SSTP" #: ../../configuration/vpn/sstp.rst:14 msgid "SSTP is available for Linux, BSD, and Windows." -msgstr "SSTP is available for Linux, BSD, and Windows." +msgstr "SSTP доступний для Linux, BSD і Windows." #: ../../configuration/interfaces/sstp-client.rst:75 msgid "SSTP remote server to connect to. Can be either an IP address or FQDN." -msgstr "SSTP remote server to connect to. Can be either an IP address or FQDN." +msgstr "Віддалений сервер SSTP для підключення. Може бути IP-адресою або FQDN." #: ../../configuration/interfaces/bridge.rst:90 msgid "STP Parameter" -msgstr "STP Parameter" +msgstr "Параметр STP" #: ../../configuration/service/salt-minion.rst:5 msgid "Salt-Minion" -msgstr "Salt-Minion" +msgstr "Сіль-Міньйон" #: ../../configuration/service/salt-minion.rst:7 msgid "SaltStack_ is Python-based, open-source software for event-driven IT automation, remote task execution, and configuration management. Supporting the \"infrastructure as code\" approach to data center system and network deployment and management, configuration automation, SecOps orchestration, vulnerability remediation, and hybrid cloud control." -msgstr "SaltStack_ is Python-based, open-source software for event-driven IT automation, remote task execution, and configuration management. Supporting the \"infrastructure as code\" approach to data center system and network deployment and management, configuration automation, SecOps orchestration, vulnerability remediation, and hybrid cloud control." +msgstr "SaltStack_ — це програмне забезпечення з відкритим вихідним кодом на основі Python для ІТ-автоматизації на основі подій, віддаленого виконання завдань і керування конфігурацією. Підтримка підходу «інфраструктура як код» до системи центру обробки даних і розгортання та керування мережею, автоматизації конфігурації, оркестровки SecOps, усунення вразливостей і керування гібридною хмарою." #: ../../configuration/protocols/ospf.rst:312 msgid "Same as export-list, but it applies to paths announced into specified area as Type-3 summary-LSAs. This command makes sense in ABR only." -msgstr "Same as export-list, but it applies to paths announced into specified area as Type-3 summary-LSAs. This command makes sense in ABR only." +msgstr "Те саме, що експортний список, але застосовується до шляхів, оголошених у вказану область як підсумкові LSA типу 3. Ця команда має сенс лише в ABR." #: ../../configuration/interfaces/vxlan.rst:174 msgid "Sample configuration of SVD with VLAN to VNI mappings is shown below." @@ -10599,68 +11705,113 @@ msgstr "Sample configuration of SVD with VLAN to VNI mappings is shown below." #: ../../configuration/protocols/mpls.rst:201 msgid "Sample configuration to setup LDP on VyOS" -msgstr "Sample configuration to setup LDP on VyOS" +msgstr "Приклад конфігурації для налаштування LDP на VyOS" #: ../../configuration/interfaces/wireless.rst:515 msgid "Scanning is not supported on all wireless drivers and wireless hardware. Refer to your driver and wireless hardware documentation for further details." -msgstr "Scanning is not supported on all wireless drivers and wireless hardware. Refer to your driver and wireless hardware documentation for further details." +msgstr "Сканування не підтримується всіма бездротовими драйверами та бездротовим обладнанням. Зверніться до документації драйвера та бездротового обладнання для отримання додаткової інформації." #: ../../configuration/loadbalancing/wan.rst:248 msgid "Script execution" -msgstr "Script execution" +msgstr "Виконання сценарію" + +#: ../../configuration/service/ipoe-server.rst:299 +#: ../../configuration/service/pppoe-server.rst:417 +#: ../../configuration/vpn/l2tp.rst:361 +#: ../../configuration/vpn/pptp.rst:285 +#: ../../configuration/vpn/sstp.rst:319 +msgid "Script to run before session interface comes up" +msgstr "Script to run before session interface comes up" + +#: ../../configuration/service/ipoe-server.rst:291 +#: ../../configuration/service/pppoe-server.rst:409 +#: ../../configuration/vpn/l2tp.rst:353 +#: ../../configuration/vpn/pptp.rst:277 +#: ../../configuration/vpn/sstp.rst:311 +msgid "Script to run when session interface changed by RADIUS CoA handling" +msgstr "Script to run when session interface changed by RADIUS CoA handling" + +#: ../../configuration/service/ipoe-server.rst:295 +#: ../../configuration/service/pppoe-server.rst:413 +#: ../../configuration/vpn/l2tp.rst:357 +#: ../../configuration/vpn/pptp.rst:281 +#: ../../configuration/vpn/sstp.rst:315 +msgid "Script to run when session interface going to terminate" +msgstr "Script to run when session interface going to terminate" + +#: ../../configuration/service/ipoe-server.rst:303 +#: ../../configuration/service/pppoe-server.rst:421 +#: ../../configuration/vpn/l2tp.rst:365 +#: ../../configuration/vpn/pptp.rst:289 +#: ../../configuration/vpn/sstp.rst:323 +msgid "Script to run when session interface is completely configured and started" +msgstr "Script to run when session interface is completely configured and started" #: ../../configuration/highavailability/index.rst:299 +#: ../../configuration/service/ipoe-server.rst:287 +#: ../../configuration/service/pppoe-server.rst:405 +#: ../../configuration/vpn/l2tp.rst:349 +#: ../../configuration/vpn/pptp.rst:273 +#: ../../configuration/vpn/sstp.rst:307 msgid "Scripting" -msgstr "Scripting" +msgstr "Сценарії" #: ../../configuration/nat/nat44.rst:676 msgid "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." msgstr "Second scenario: apply source NAT for all outgoing connections from LAN 10.0.0.0/8, using 3 public addresses and equal distribution. We will generate the hash randomly." -#: ../../configuration/vpn/sstp.rst:246 +#: ../../configuration/pki/index.rst:411 +msgid "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." +msgstr "Secondly, we create the intermediary certificate authorities, which are used to sign the leaf certificates." + +#: ../../configuration/service/ipoe-server.rst:186 +#: ../../configuration/service/pppoe-server.rst:148 +#: ../../configuration/vpn/l2tp.rst:191 +#: ../../configuration/vpn/pptp.rst:131 +#: ../../configuration/vpn/sstp.rst:164 msgid "Secret for Dynamic Authorization Extension server (DM/CoA)" -msgstr "Secret for Dynamic Authorization Extension server (DM/CoA)" +msgstr "Секрет для сервера розширення динамічної авторизації (DM/CoA)" #: ../../configuration/interfaces/wireless.rst:334 msgid "Security" -msgstr "Security" +msgstr "Безпека" #: ../../configuration/system/syslog.rst:120 #: ../../configuration/system/syslog.rst:132 msgid "Security/authentication messages" -msgstr "Security/authentication messages" +msgstr "Повідомлення безпеки/автентифікації" #: ../../configuration/protocols/pim.rst:109 msgid "See :rfc:`7761#section-4.1` for details." msgstr "See :rfc:`7761#section-4.1` for details." -#: ../../configuration/system/ip.rst:52 +#: ../../configuration/system/ip.rst:65 msgid "See below the different parameters available for the IPv4 **show** command:" -msgstr "See below the different parameters available for the IPv4 **show** command:" +msgstr "Дивіться нижче різні параметри, доступні для команди IPv4 **show**:" #: ../../configuration/protocols/segment-routing.rst:5 msgid "Segment Routing" -msgstr "Segment Routing" +msgstr "Маршрутизація сегментів" #: ../../configuration/protocols/segment-routing.rst:7 msgid "Segment Routing (SR) is a network architecture that is similar to source-routing . In this architecture, the ingress router adds a list of segments, known as SIDs, to the packet as it enters the network. These segments represent different portions of the network path that the packet will take." -msgstr "Segment Routing (SR) is a network architecture that is similar to source-routing . In this architecture, the ingress router adds a list of segments, known as SIDs, to the packet as it enters the network. These segments represent different portions of the network path that the packet will take." +msgstr "Сегментна маршрутизація (SR) — це мережева архітектура, подібна до вихідної маршрутизації. У цій архітектурі вхідний маршрутизатор додає список сегментів, відомих як SID, до пакета, коли він надходить у мережу. Ці сегменти представляють різні частини мережевого шляху, який пройде пакет." #: ../../configuration/protocols/segment-routing.rst:18 msgid "Segment Routing can be applied to an existing MPLS-based data plane and defines a control plane network architecture. In MPLS networks, segments are encoded as MPLS labels and are added at the ingress router. These MPLS labels are then exchanged and populated by Interior Gateway Protocols (IGPs) like IS-IS or OSPF which are running on most ISPs." -msgstr "Segment Routing can be applied to an existing MPLS-based data plane and defines a control plane network architecture. In MPLS networks, segments are encoded as MPLS labels and are added at the ingress router. These MPLS labels are then exchanged and populated by Interior Gateway Protocols (IGPs) like IS-IS or OSPF which are running on most ISPs." +msgstr "Сегментна маршрутизація може бути застосована до існуючої площини даних на основі MPLS і визначає мережеву архітектуру площини керування. У мережах MPLS сегменти кодуються як мітки MPLS і додаються на вхідному маршрутизаторі. Ці мітки MPLS потім обмінюються та заповнюються протоколами внутрішнього шлюзу (IGP), такими як IS-IS або OSPF, які працюють на більшості провайдерів Інтернету." #: ../../configuration/protocols/segment-routing.rst:37 msgid "Segment routing (SR) is used by the IGP protocols to interconnect network devices, below configuration shows how to enable SR on IS-IS:" -msgstr "Segment routing (SR) is used by the IGP protocols to interconnect network devices, below configuration shows how to enable SR on IS-IS:" +msgstr "Сегментна маршрутизація (SR) використовується протоколами IGP для з’єднання мережевих пристроїв, наведена нижче конфігурація показує, як увімкнути SR на IS-IS:" #: ../../configuration/protocols/segment-routing.rst:122 msgid "Segment routing (SR) is used by the IGP protocols to interconnect network devices, below configuration shows how to enable SR on OSPF:" -msgstr "Segment routing (SR) is used by the IGP protocols to interconnect network devices, below configuration shows how to enable SR on OSPF:" +msgstr "Сегментна маршрутизація (SR) використовується протоколами IGP для з’єднання мережевих пристроїв, наведена нижче конфігурація показує, як увімкнути SR на OSPF:" #: ../../configuration/protocols/segment-routing.rst:25 msgid "Segment routing defines a control plane network architecture and can be applied to an existing MPLS based dataplane. In the MPLS networks, segments are encoded as MPLS labels and are imposed at the ingress router. MPLS labels are exchanged and populated by IGPs like IS-IS.Segment Routing as per RFC8667 for MPLS dataplane. It supports IPv4, IPv6 and ECMP and has been tested against Cisco & Juniper routers.however,this deployment is still EXPERIMENTAL for FRR." -msgstr "Segment routing defines a control plane network architecture and can be applied to an existing MPLS based dataplane. In the MPLS networks, segments are encoded as MPLS labels and are imposed at the ingress router. MPLS labels are exchanged and populated by IGPs like IS-IS.Segment Routing as per RFC8667 for MPLS dataplane. It supports IPv4, IPv6 and ECMP and has been tested against Cisco & Juniper routers.however,this deployment is still EXPERIMENTAL for FRR." +msgstr "Сегментна маршрутизація визначає мережеву архітектуру площини керування та може бути застосована до існуючої площини даних на основі MPLS. У мережах MPLS сегменти кодуються як мітки MPLS і накладаються на вхідний маршрутизатор. Мітки MPLS обмінюються та заповнюються IGP, такими як IS-IS. Маршрутизація сегментів відповідно до RFC8667 для площини даних MPLS. Він підтримує IPv4, IPv6 і ECMP і був перевірений на маршрутизаторах Cisco та Juniper. Однак це розгортання все ще є ЕКСПЕРИМЕНТАЛЬНИМ для FRR." #: ../../configuration/service/https.rst:50 msgid "Select TLS version used." @@ -10668,150 +11819,161 @@ msgstr "Select TLS version used." #: ../../configuration/interfaces/macsec.rst:34 msgid "Select cipher suite used for cryptographic operations. This setting is mandatory." -msgstr "Select cipher suite used for cryptographic operations. This setting is mandatory." +msgstr "Виберіть набір шифрів, який використовується для криптографічних операцій. Це налаштування є обов'язковим." -#: ../../configuration/vrf/index.rst:468 +#: ../../configuration/vrf/index.rst:487 msgid "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." msgstr "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." #: ../../configuration/vpn/sstp.rst:30 msgid "Self Signed CA" -msgstr "Self Signed CA" +msgstr "Самопідписаний CA" #: ../../configuration/loadbalancing/reverse-proxy.rst:140 msgid "Send a Proxy Protocol version 1 header (text format)" -msgstr "Send a Proxy Protocol version 1 header (text format)" +msgstr "Надіслати заголовок проксі-протоколу версії 1 (текстовий формат)" #: ../../configuration/loadbalancing/reverse-proxy.rst:145 msgid "Send a Proxy Protocol version 2 header (binary format)" -msgstr "Send a Proxy Protocol version 2 header (binary format)" +msgstr "Надіслати заголовок проксі-протоколу версії 2 (двійковий формат)" #: ../../configuration/service/dns.rst:30 msgid "Send all DNS queries to the IPv4/IPv6 DNS server specified under `<address>` on optional port specified under `<port>`. The port defaults to 53. You can configure multiple nameservers here." -msgstr "Send all DNS queries to the IPv4/IPv6 DNS server specified under `<address>` on optional port specified under `<port>`. The port defaults to 53. You can configure multiple nameservers here." +msgstr "Надсилайте всі DNS-запити на DNS-сервер IPv4/IPv6, указаний у `<address> ` на додатковому порту, указаному в `<port> `. За замовчуванням порт 53. Тут можна налаштувати кілька серверів імен." #: ../../configuration/interfaces/wireless.rst:57 msgid "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." -msgstr "Send empty SSID in beacons and ignore probe request frames that do not specify full SSID, i.e., require stations to know SSID." +msgstr "Надсилайте порожній SSID у маяках і ігноруйте кадри запиту зонду, які не вказують повний SSID, тобто вимагають від станцій знати SSID." + +#: ../../configuration/vpn/l2tp.rst:276 +msgid "Sent to the client (LAC) in the Host-Name attribute" +msgstr "Sent to the client (LAC) in the Host-Name attribute" #: ../../configuration/system/console.rst:5 msgid "Serial Console" -msgstr "Serial Console" +msgstr "Послідовна консоль" #: ../../configuration/service/console-server.rst:11 msgid "Serial interfaces can be any interface which is directly connected to the CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)." -msgstr "Serial interfaces can be any interface which is directly connected to the CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)." +msgstr "Послідовні інтерфейси можуть бути будь-якими інтерфейсами, які безпосередньо підключені до процесора чи чіпсета (здебільшого відомий як інтерфейс ttyS у Linux), або будь-якого іншого перетворювача USB на послідовний (чипи на основі Prolific PL2303 або FTDI FT232/FT4232)." #: ../../configuration/interfaces/openvpn.rst:325 -#: ../../configuration/vpn/sstp.rst:210 msgid "Server" -msgstr "Server" +msgstr "Сервер" #: ../../configuration/service/tftp-server.rst:74 msgid "Server:" -msgstr "Server:" +msgstr "сервер:" -#: ../../configuration/pki/index.rst:210 +#: ../../configuration/pki/index.rst:212 msgid "Server Certificate" -msgstr "Server Certificate" +msgstr "Сертифікат сервера" #: ../../configuration/vpn/openconnect.rst:45 msgid "Server Configuration" -msgstr "Server Configuration" +msgstr "Конфігурація сервера" #: ../../configuration/interfaces/openvpn.rst:588 msgid "Server Side" -msgstr "Server Side" +msgstr "Сторона сервера" -#: ../../configuration/service/ipoe-server.rst:156 +#: ../../configuration/service/ipoe-server.rst:157 msgid "Server configuration" -msgstr "Server configuration" +msgstr "Конфігурація сервера" #: ../../configuration/service/https.rst:41 msgid "Server names for virtual hosts it can be exact, wildcard or regex." -msgstr "Server names for virtual hosts it can be exact, wildcard or regex." +msgstr "Імена серверів для віртуальних хостів можуть бути точними, символами підстановки або регулярними виразами." #: ../../configuration/loadbalancing/reverse-proxy.rst:21 #: ../../configuration/service/index.rst:3 msgid "Service" -msgstr "Service" +msgstr "Обслуговування" #: ../../configuration/loadbalancing/reverse-proxy.rst:16 msgid "Service configuration is responsible for binding to a specific port, while the backend configuration determines the type of load balancing to be applied and specifies the real servers to be utilized." -msgstr "Service configuration is responsible for binding to a specific port, while the backend configuration determines the type of load balancing to be applied and specifies the real servers to be utilized." +msgstr "Конфігурація служби відповідає за прив’язку до певного порту, тоді як конфігурація серверної частини визначає тип балансування навантаження, який буде застосовано, і вказує реальні сервери, які будуть використовуватися." #: ../../configuration/protocols/bfd.rst:26 msgid "Set BFD peer IPv4 address or IPv6 address" -msgstr "Set BFD peer IPv4 address or IPv6 address" +msgstr "Встановіть однорангову IPv4-адресу BFD або адресу IPv6" #: ../../configuration/policy/route-map.rst:51 msgid "Set BGP community-list to exactly match." -msgstr "Set BGP community-list to exactly match." +msgstr "Налаштуйте список спільноти BGP так, щоб він точно відповідав." -#: ../../configuration/policy/route-map.rst:318 +#: ../../configuration/policy/route-map.rst:321 msgid "Set BGP local preference attribute." -msgstr "Set BGP local preference attribute." +msgstr "Встановіть атрибут локального налаштування BGP." -#: ../../configuration/policy/route-map.rst:336 +#: ../../configuration/policy/route-map.rst:339 msgid "Set BGP origin code." -msgstr "Set BGP origin code." +msgstr "Встановити вихідний код BGP." -#: ../../configuration/policy/route-map.rst:341 +#: ../../configuration/policy/route-map.rst:344 msgid "Set BGP originator ID attribute." -msgstr "Set BGP originator ID attribute." +msgstr "Встановіть атрибут ID автора BGP." -#: ../../configuration/policy/route-map.rst:359 +#: ../../configuration/policy/route-map.rst:362 msgid "Set BGP weight attribute" -msgstr "Set BGP weight attribute" +msgstr "Встановити атрибут ваги BGP" #: ../../configuration/nat/nat44.rst:188 msgid "Set DNAT rule 20 to only NAT UDP packets" -msgstr "Set DNAT rule 20 to only NAT UDP packets" +msgstr "Встановіть правило DNAT 20 лише для пакетів NAT UDP" #: ../../configuration/policy/route.rst:144 msgid "Set IPSec inbound match criterias, where:" -msgstr "Set IPSec inbound match criterias, where:" +msgstr "Встановіть критерії збігу вхідних повідомлень IPSec, де:" #: ../../configuration/policy/route.rst:123 msgid "Set IP fragment match, where:" -msgstr "Set IP fragment match, where:" +msgstr "Встановити відповідність фрагменту IP, де:" -#: ../../configuration/policy/route-map.rst:331 +#: ../../configuration/policy/route-map.rst:334 msgid "Set OSPF external metric-type." -msgstr "Set OSPF external metric-type." +msgstr "Встановити зовнішній тип метрики OSPF." #: ../../configuration/nat/nat44.rst:187 msgid "Set SNAT rule 20 to only NAT TCP and UDP packets" -msgstr "Set SNAT rule 20 to only NAT TCP and UDP packets" +msgstr "Встановіть правило SNAT 20 лише на пакети NAT TCP і UDP" #: ../../configuration/nat/nat44.rst:201 msgid "Set SNAT rule 20 to only NAT packets arriving from the 192.0.2.0/24 network" -msgstr "Set SNAT rule 20 to only NAT packets arriving from the 192.0.2.0/24 network" +msgstr "Установіть правило SNAT 20 лише для пакетів NAT, які надходять із мережі 192.0.2.0/24" #: ../../configuration/nat/nat44.rst:203 msgid "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 network with a source port of 80 and 443" -msgstr "Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 network with a source port of 80 and 443" +msgstr "Встановіть правило SNAT 30 лише на пакети NAT, які надходять із мережі 203.0.113.0/24 із вихідним портом 80 і 443" #: ../../configuration/loadbalancing/reverse-proxy.rst:46 msgid "Set SSL certeficate <name> for service <name>" -msgstr "Set SSL certeficate <name> for service <name>" +msgstr "Встановити сертифікат SSL<name> для обслуговування<name>" -#: ../../configuration/firewall/ipv4.rst:918 +#: ../../configuration/loadbalancing/reverse-proxy.rst:46 +msgid "Set SSL certificate <name> for service <name>" +msgstr "Set SSL certificate <name> for service <name>" + +#: ../../configuration/firewall/ipv4.rst:941 #: ../../configuration/firewall/ipv6.rst:927 msgid "Set TCP-MSS (maximum segment size) for the connection" msgstr "Set TCP-MSS (maximum segment size) for the connection" -#: ../../configuration/service/dns.rst:280 +#: ../../configuration/service/dns.rst:358 msgid "Set TTL to 300 seconds" -msgstr "Set TTL to 300 seconds" +msgstr "Встановіть TTL на 300 секунд" #: ../../configuration/interfaces/vti.rst:7 msgid "Set Virtual Tunnel Interface" -msgstr "Set Virtual Tunnel Interface" +msgstr "Налаштувати інтерфейс віртуального тунелю" #: ../../configuration/container/index.rst:54 msgid "Set a container description" -msgstr "Set a container description" +msgstr "Встановіть опис контейнера" + +#: ../../configuration/trafficpolicy/index.rst:1169 +msgid "Set a description for the shaper." +msgstr "Set a description for the shaper." #: ../../configuration/system/conntrack.rst:113 msgid "Set a destination and/or source address. Accepted input for ipv4:" @@ -10819,316 +11981,378 @@ msgstr "Set a destination and/or source address. Accepted input for ipv4:" #: ../../configuration/system/conntrack.rst:142 msgid "Set a destination and/or source port. Accepted input:" -msgstr "Set a destination and/or source port. Accepted input:" +msgstr "Встановіть порт призначення та/або вихідний порт. Прийнятий вхід:" #: ../../_include/interface-description.txt:4 msgid "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." -msgstr "Set a human readable, descriptive alias for this connection. Alias is used by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools." +msgstr "Встановіть для цього підключення зрозумілий описовий псевдонім. Псевдонім використовується, наприклад, командою :opcmd:`show interfaces` або інструментами моніторингу на основі SNMP." -#: ../../configuration/system/login.rst:387 +#: ../../configuration/system/login.rst:391 msgid "Set a limit on the maximum number of concurrent logged-in users on the system." -msgstr "Set a limit on the maximum number of concurrent logged-in users on the system." +msgstr "Встановіть обмеження на максимальну кількість одночасних користувачів у системі." #: ../../configuration/firewall/zone.rst:98 msgid "Set a meaningful description." -msgstr "Set a meaningful description." +msgstr "Складіть змістовний опис." -#: ../../configuration/service/https.rst:63 +#: ../../configuration/service/https.rst:67 msgid "Set a named api key. Every key has the same, full permissions on the system." -msgstr "Set a named api key. Every key has the same, full permissions on the system." +msgstr "Установіть іменований ключ API. Кожен ключ має однакові повні дозволи в системі." #: ../../configuration/system/conntrack.rst:106 msgid "Set a rule description." -msgstr "Set a rule description." +msgstr "Встановіть опис правила." #: ../../configuration/policy/route.rst:254 msgid "Set a specific connection mark." -msgstr "Set a specific connection mark." +msgstr "Встановіть певну позначку підключення." #: ../../configuration/policy/route.rst:264 msgid "Set a specific packet mark." -msgstr "Set a specific packet mark." +msgstr "Встановіть певну позначку пакета." #: ../../configuration/policy/route-map.rst:25 msgid "Set action for the route-map policy." -msgstr "Set action for the route-map policy." +msgstr "Встановіть дію для політики маршрутної карти." #: ../../configuration/policy/as-path-list.rst:25 #: ../../configuration/policy/community-list.rst:26 #: ../../configuration/policy/extcommunity-list.rst:26 #: ../../configuration/policy/large-community-list.rst:26 msgid "Set action to take on entries matching this rule." -msgstr "Set action to take on entries matching this rule." +msgstr "Встановіть дію для записів, які відповідають цьому правилу." -#: ../../configuration/service/https.rst:79 +#: ../../configuration/service/https.rst:112 msgid "Set an API-KEY is the minimal configuration to get a working API Endpoint." -msgstr "Set an API-KEY is the minimal configuration to get a working API Endpoint." +msgstr "Встановлення API-KEY є мінімальною конфігурацією для отримання робочої кінцевої точки API." + +#: ../../configuration/service/dns.rst:184 +msgid "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords." -#: ../../configuration/vpn/sstp.rst:100 +#: ../../configuration/service/dns.rst:179 +msgid "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." +msgstr "Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords." + +#: ../../configuration/service/dns.rst:189 +msgid "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:194 +msgid "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" +msgstr "Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. NAPTR records support the following options:" + +#: ../../configuration/service/dns.rst:218 +msgid "Set an :abbr:`NS (Nameserver)` record." +msgstr "Set an :abbr:`NS (Nameserver)` record." + +#: ../../configuration/service/dns.rst:223 +msgid "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:228 +msgid "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:233 +msgid "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword." + +#: ../../configuration/service/dns.rst:238 +msgid "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." +msgstr "Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword." + +#: ../../configuration/service/ipoe-server.rst:60 +#: ../../configuration/service/ipoe-server.rst:88 +#: ../../configuration/service/pppoe-server.rst:38 +#: ../../configuration/vpn/l2tp.rst:26 +#: ../../configuration/vpn/pptp.rst:27 +#: ../../configuration/vpn/sstp.rst:53 msgid "Set authentication backend. The configured authentication backend is used for all queries." -msgstr "Set authentication backend. The configured authentication backend is used for all queries." +msgstr "Встановити бекенд автентифікації. Налаштований сервер автентифікації використовується для всіх запитів." -#: ../../configuration/container/index.rst:117 +#: ../../configuration/container/index.rst:122 msgid "Set container capabilities or permissions." -msgstr "Set container capabilities or permissions." +msgstr "Установіть можливості або дозволи контейнера." #: ../../configuration/highavailability/index.rst:247 msgid "Set delay between gratuitous ARP messages sent on an interface." -msgstr "Set delay between gratuitous ARP messages sent on an interface." +msgstr "Встановити затримку між безкоштовними повідомленнями ARP, надісланими через інтерфейс." #: ../../configuration/highavailability/index.rst:255 msgid "Set delay for second set of gratuitous ARPs after transition to MASTER." -msgstr "Set delay for second set of gratuitous ARPs after transition to MASTER." +msgstr "Встановити затримку для другого набору безкоштовних ARP після переходу до MASTER." + +#: ../../configuration/service/ipoe-server.rst:356 +#: ../../configuration/service/pppoe-server.rst:522 +#: ../../configuration/vpn/l2tp.rst:476 +#: ../../configuration/vpn/pptp.rst:400 +#: ../../configuration/vpn/sstp.rst:434 +msgid "Set description." +msgstr "Set description." + +#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:426 +msgid "Set description `<text>` for dynamic DNS service being configured." +msgstr "Set description `<text>` for dynamic DNS service being configured." #: ../../configuration/policy/as-path-list.rst:21 msgid "Set description for as-path-list policy." -msgstr "Set description for as-path-list policy." +msgstr "Установити опис для політики as-path-list." #: ../../configuration/policy/community-list.rst:21 msgid "Set description for community-list policy." -msgstr "Set description for community-list policy." +msgstr "Встановити опис для політики списку спільнот." #: ../../configuration/policy/extcommunity-list.rst:21 msgid "Set description for extcommunity-list policy." -msgstr "Set description for extcommunity-list policy." +msgstr "Встановити опис для політики списку зовнішньої спільноти." #: ../../configuration/policy/large-community-list.rst:21 msgid "Set description for large-community-list policy." -msgstr "Set description for large-community-list policy." +msgstr "Установіть опис для політики списку великої спільноти." #: ../../configuration/policy/as-path-list.rst:29 #: ../../configuration/policy/community-list.rst:30 #: ../../configuration/policy/extcommunity-list.rst:31 #: ../../configuration/policy/large-community-list.rst:31 msgid "Set description for rule." -msgstr "Set description for rule." +msgstr "Встановіть опис правила." #: ../../configuration/policy/prefix-list.rst:67 msgid "Set description for rule in IPv6 prefix-list." -msgstr "Set description for rule in IPv6 prefix-list." +msgstr "Установіть опис правила в списку префіксів IPv6." #: ../../configuration/policy/prefix-list.rst:35 msgid "Set description for rule in the prefix-list." -msgstr "Set description for rule in the prefix-list." +msgstr "Встановіть опис правила у списку префіксів." #: ../../configuration/policy/access-list.rst:54 msgid "Set description for the IPv6 access list." -msgstr "Set description for the IPv6 access list." +msgstr "Установіть опис для списку доступу IPv6." #: ../../configuration/policy/prefix-list.rst:58 msgid "Set description for the IPv6 prefix-list policy." -msgstr "Set description for the IPv6 prefix-list policy." +msgstr "Установіть опис для політики списку префіксів IPv6." #: ../../configuration/policy/access-list.rst:25 msgid "Set description for the access list." -msgstr "Set description for the access list." +msgstr "Встановіть опис для списку доступу." #: ../../configuration/policy/prefix-list.rst:27 msgid "Set description for the prefix-list policy." -msgstr "Set description for the prefix-list policy." +msgstr "Установіть опис для політики списку префіксів." #: ../../configuration/policy/route-map.rst:21 msgid "Set description for the route-map policy." -msgstr "Set description for the route-map policy." +msgstr "Встановити опис для політики маршрутної карти." #: ../../configuration/policy/route-map.rst:37 msgid "Set description for the rule in the route-map policy." -msgstr "Set description for the rule in the route-map policy." +msgstr "Встановіть опис правила в політиці карти маршруту." #: ../../configuration/protocols/bgp.rst:252 msgid "Set description of the peer or peer group." -msgstr "Set description of the peer or peer group." +msgstr "Встановіть опис однолітка або групи однолітків." #: ../../configuration/policy/local-route.rst:24 #: ../../configuration/policy/local-route.rst:43 msgid "Set destination address or prefix to match." -msgstr "Set destination address or prefix to match." +msgstr "Установіть відповідну адресу призначення або префікс." #: ../../configuration/policy/route-map.rst:323 msgid "Set destination routing protocol metric. Add or subtract metric, or set metric value." -msgstr "Set destination routing protocol metric. Add or subtract metric, or set metric value." +msgstr "Установити метрику протоколу маршрутизації призначення. Додати або відняти метрику або встановити значення метрики." #: ../../configuration/service/dhcp-relay.rst:141 msgid "Set eth1 to be the listening interface for the DHCPv6 relay." -msgstr "Set eth1 to be the listening interface for the DHCPv6 relay." +msgstr "Встановіть eth1 як інтерфейс прослуховування для ретрансляції DHCPv6." #: ../../configuration/system/task-scheduler.rst:28 msgid "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." -msgstr "Set execution time in common cron_ time format. A cron `<spec>` of ``30 */6 * * *`` would execute the `<task>` at minute 30 past every 6th hour." +msgstr "Встановіть час виконання у загальному форматі часу cron_. A cron `<spec> ` з ``30 */6 * * *`` виконає `<task> ` о 30 хвилині кожні 6 годин." -#: ../../configuration/policy/route-map.rst:251 +#: ../../configuration/policy/route-map.rst:254 msgid "Set extcommunity bandwidth" -msgstr "Set extcommunity bandwidth" +msgstr "Встановити пропускну здатність зовнішньої спільноти" #: ../../configuration/interfaces/wireless.rst:229 msgid "Set if antenna pattern does not change during the lifetime of an association" -msgstr "Set if antenna pattern does not change during the lifetime of an association" +msgstr "Встановіть, якщо діаграма спрямованості антени не змінюється протягом життя асоціації" #: ../../configuration/policy/local-route.rst:28 #: ../../configuration/policy/local-route.rst:47 msgid "Set inbound interface to match." -msgstr "Set inbound interface to match." +msgstr "Установіть відповідний вхідний інтерфейс." #: ../../configuration/firewall/zone.rst:84 msgid "Set interfaces to a zone. A zone can have multiple interfaces. But an interface can only be a member in one zone." -msgstr "Set interfaces to a zone. A zone can have multiple interfaces. But an interface can only be a member in one zone." +msgstr "Встановити інтерфейси для зони. Зона може мати кілька інтерфейсів. Але інтерфейс може бути членом лише однієї зони." #: ../../configuration/protocols/bgp.rst:42 msgid "Set local :abbr:`ASN (Autonomous System Number)` that this router represents. This is a a mandatory option!" -msgstr "Set local :abbr:`ASN (Autonomous System Number)` that this router represents. This is a a mandatory option!" +msgstr "Установіть локальний :abbr:`ASN (Autonomous System Number)`, який представляє цей маршрутизатор. Це обов'язковий параметр!" #: ../../configuration/protocols/bgp.rst:179 msgid "Set local autonomous system number that this router represents. This is a mandatory option!" -msgstr "Set local autonomous system number that this router represents. This is a mandatory option!" +msgstr "Встановіть номер локальної автономної системи, яку представляє цей маршрутизатор. Це обов'язковий параметр!" #: ../../configuration/policy/route.rst:47 msgid "Set match criteria based on connection mark." -msgstr "Set match criteria based on connection mark." +msgstr "Встановіть критерії відповідності на основі позначки з’єднання." #: ../../configuration/policy/route.rst:94 msgid "Set match criteria based on destination port, where <match_criteria> could be:" -msgstr "Set match criteria based on destination port, where <match_criteria> could be:" +msgstr "Встановіть критерії відповідності на основі порту призначення, де<match_criteria> може бути:" #: ../../configuration/policy/route.rst:200 msgid "Set match criteria based on session state." -msgstr "Set match criteria based on session state." +msgstr "Встановіть критерії відповідності на основі стану сеансу." #: ../../configuration/policy/route.rst:87 msgid "Set match criteria based on source or destination groups, where <text> would be the group name/identifier. Prepend character '!' for inverted matching criteria." -msgstr "Set match criteria based on source or destination groups, where <text> would be the group name/identifier. Prepend character '!' for inverted matching criteria." +msgstr "Встановіть критерії відповідності на основі груп джерела або призначення, де<text> це буде назва/ідентифікатор групи. Додати символ "!" для інвертованих критеріїв відповідності." #: ../../configuration/policy/route.rst:58 msgid "Set match criteria based on source or destination ipv4|ipv6 address, where <match_criteria> could be:" -msgstr "Set match criteria based on source or destination ipv4|ipv6 address, where <match_criteria> could be:" +msgstr "Встановіть критерії відповідності на основі адреси ipv4|ipv6 джерела або призначення, де<match_criteria> може бути:" #: ../../configuration/policy/route.rst:205 msgid "Set match criteria based on tcp flags. Allowed values for TCP flags: SYN ACK FIN RST URG PSH ALL. When specifying more than one flag, flags should be comma-separated. For example : value of 'SYN,!ACK,!FIN,!RST' will only match packets with the SYN flag set, and the ACK, FIN and RST flags unset." -msgstr "Set match criteria based on tcp flags. Allowed values for TCP flags: SYN ACK FIN RST URG PSH ALL. When specifying more than one flag, flags should be comma-separated. For example : value of 'SYN,!ACK,!FIN,!RST' will only match packets with the SYN flag set, and the ACK, FIN and RST flags unset." +msgstr "Встановіть критерії збігу на основі позначок TCP. Дозволені значення для прапорів TCP: SYN ACK FIN RST URG PSH ALL. Якщо вказується більше одного прапора, прапори слід розділяти комами. Наприклад: значення 'SYN,!ACK,!FIN,!RST' відповідатиме лише пакетам із встановленим прапором SYN, а прапорами ACK, FIN і RST не встановлено." #: ../../configuration/service/dhcp-relay.rst:62 msgid "Set maximum `<size>` of DHCP packets including relay agent information. If a DHCP packet size surpasses this value it will be forwarded without appending relay agent information. Range 64...1400, default 576." -msgstr "Set maximum `<size>` of DHCP packets including relay agent information. If a DHCP packet size surpasses this value it will be forwarded without appending relay agent information. Range 64...1400, default 576." +msgstr "Встановіть максимум `<size> ` пакетів DHCP, включаючи інформацію агента ретрансляції. Якщо розмір пакета DHCP перевищує це значення, його буде переслано без додавання інформації про агента ретрансляції. Діапазон 64...1400, за замовчуванням 576." #: ../../configuration/policy/route.rst:157 msgid "Set maximum average matching rate. Format for rate: integer/time_unit, where time_unit could be any one of second, minute, hour or day.For example 1/second implies rule to be matched at an average of once per second." -msgstr "Set maximum average matching rate. Format for rate: integer/time_unit, where time_unit could be any one of second, minute, hour or day.For example 1/second implies rule to be matched at an average of once per second." +msgstr "Установіть максимальну середню швидкість відповідності. Формат ставки: ціле число/одиниця_часу, де одиниця_часу може бути будь-якою секундою, хвилиною, годиною або днем. Наприклад, 1/секунда означає правило, яке має відповідати в середньому раз на секунду." #: ../../configuration/service/dhcp-relay.rst:164 msgid "Set maximum hop count before packets are discarded, default: 10" -msgstr "Set maximum hop count before packets are discarded, default: 10" +msgstr "Встановіть максимальну кількість переходів перед тим, як пакети будуть відхилені, за замовчуванням: 10" #: ../../configuration/policy/route.rst:152 msgid "Set maximum number of packets to alow in excess of rate." -msgstr "Set maximum number of packets to alow in excess of rate." +msgstr "Встановіть максимальну кількість пакетів, яка може перевищувати швидкість." #: ../../configuration/highavailability/index.rst:265 msgid "Set minimum time interval for refreshing gratuitous ARPs while MASTER." -msgstr "Set minimum time interval for refreshing gratuitous ARPs while MASTER." +msgstr "Установіть мінімальний інтервал часу для оновлення безкоштовних ARP під час MASTER." + +#: ../../configuration/vpn/l2tp.rst:72 +msgid "Set mode for IPsec authentication between VyOS and L2TP clients." +msgstr "Set mode for IPsec authentication between VyOS and L2TP clients." #: ../../configuration/highavailability/index.rst:285 msgid "Set number of gratuitous ARP messages to send at a time after transition to MASTER." -msgstr "Set number of gratuitous ARP messages to send at a time after transition to MASTER." +msgstr "Встановіть кількість безкоштовних ARP-повідомлень, які потрібно надсилати за раз після переходу до MASTER." #: ../../configuration/highavailability/index.rst:275 msgid "Set number of gratuitous ARP messages to send at a time while MASTER." -msgstr "Set number of gratuitous ARP messages to send at a time while MASTER." +msgstr "Встановіть кількість безкоштовних ARP-повідомлень, які надсилатимуться одночасно під час MASTER." #: ../../configuration/protocols/ospf.rst:413 #: ../../configuration/protocols/ospf.rst:1157 msgid "Set number of seconds for Hello Interval timer value. Setting this value, Hello packet will be sent every timer value seconds on the specified interface. This value must be the same for all routers attached to a common network. The default value is 10 seconds. The interval range is 1 to 65535." -msgstr "Set number of seconds for Hello Interval timer value. Setting this value, Hello packet will be sent every timer value seconds on the specified interface. This value must be the same for all routers attached to a common network. The default value is 10 seconds. The interval range is 1 to 65535." +msgstr "Установіть кількість секунд для значення таймера Hello Interval. Якщо встановити це значення, пакет Hello надсилатиметься кожні секунди значення таймера на вказаний інтерфейс. Це значення має бути однаковим для всіх маршрутизаторів, підключених до спільної мережі. Значення за замовчуванням становить 10 секунд. Діапазон інтервалів від 1 до 65535." #: ../../configuration/protocols/ospf.rst:397 #: ../../configuration/protocols/ospf.rst:1149 msgid "Set number of seconds for router Dead Interval timer value used for Wait Timer and Inactivity Timer. This value must be the same for all routers attached to a common network. The default value is 40 seconds. The interval range is 1 to 65535." -msgstr "Set number of seconds for router Dead Interval timer value used for Wait Timer and Inactivity Timer. This value must be the same for all routers attached to a common network. The default value is 40 seconds. The interval range is 1 to 65535." +msgstr "Установіть кількість секунд для значення таймера Dead Interval, яке використовується для таймера очікування та таймера бездіяльності. Це значення має бути однаковим для всіх маршрутизаторів, підключених до спільної мережі. Значення за замовчуванням становить 40 секунд. Діапазон інтервалів від 1 до 65535." #: ../../configuration/policy/route.rst:274 msgid "Set packet modifications: Explicitly set TCP Maximum segment size value." -msgstr "Set packet modifications: Explicitly set TCP Maximum segment size value." +msgstr "Встановіть модифікації пакетів: явно встановіть значення максимального розміру сегмента TCP." #: ../../configuration/policy/route.rst:259 msgid "Set packet modifications: Packet Differentiated Services Codepoint (DSCP)" -msgstr "Set packet modifications: Packet Differentiated Services Codepoint (DSCP)" +msgstr "Встановіть модифікації пакетів: кодова точка пакетів диференційованих послуг (DSCP)" #: ../../configuration/policy/route.rst:191 msgid "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." -msgstr "Set parameters for matching recently seen sources. This match could be used by seeting count (source address seen more than <1-255> times) and/or time (source address seen in the last <0-4294967295> seconds)." +msgstr "Встановіть параметри відповідності нещодавно переглянутих джерел. Цю відповідність можна використати за допомогою підрахунку (адреса джерела, переглянута більше <1-255> разів) та/або часу (адреса джерела, переглянута за останні <0-4294967295> секунд)." + +#: ../../configuration/vpn/l2tp.rst:76 +msgid "Set predefined shared secret phrase." +msgstr "Set predefined shared secret phrase." -#: ../../configuration/policy/route-map.rst:350 +#: ../../configuration/policy/route-map.rst:353 msgid "Set prefixes to table." -msgstr "Set prefixes to table." +msgstr "Установіть префікси до таблиці." #: ../../configuration/system/proxy.rst:13 msgid "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." -msgstr "Set proxy for all connections initiated by VyOS, including HTTP, HTTPS, and FTP (anonymous ftp)." +msgstr "Встановити проксі для всіх з’єднань, ініційованих VyOS, включаючи HTTP, HTTPS і FTP (анонімний ftp)." -#: ../../configuration/policy/route-map.rst:260 +#: ../../configuration/policy/route-map.rst:263 msgid "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." -msgstr "Set route target value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." +msgstr "Установіть цільове значення маршруту у форматі ``<0-65535:0-4294967295>`` або ``<IP:0-65535> ``." #: ../../configuration/policy/local-route.rst:16 #: ../../configuration/policy/local-route.rst:35 msgid "Set routing table to forward packet to." -msgstr "Set routing table to forward packet to." +msgstr "Встановити таблицю маршрутизації для пересилання пакетів." #: ../../configuration/policy/route.rst:247 msgid "Set rule action to drop." -msgstr "Set rule action to drop." +msgstr "Встановіть дію правила на скидання." #: ../../configuration/loadbalancing/reverse-proxy.rst:26 msgid "Set service to bind on IP address, by default listen on any IPv4 and IPv6" -msgstr "Set service to bind on IP address, by default listen on any IPv4 and IPv6" +msgstr "Налаштуйте службу для прив’язки до IP-адреси, за замовчуванням слухайте будь-які IPv4 та IPv6" -#: ../../configuration/policy/route-map.rst:265 +#: ../../configuration/policy/route-map.rst:268 msgid "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." -msgstr "Set site of origin value in format ``<0-65535:0-4294967295>`` or ``<IP:0-65535>``." +msgstr "Установіть значення сайту походження у форматі ``<0-65535:0-4294967295>`` або ``<IP:0-65535> ``." #: ../../configuration/policy/index.rst:18 msgid "Set some attributes (like AS PATH or Community value) to advertised routes to neighbors." -msgstr "Set some attributes (like AS PATH or Community value) to advertised routes to neighbors." +msgstr "Установіть деякі атрибути (наприклад, AS PATH або значення спільноти) для оголошених маршрутів до сусідів." #: ../../configuration/policy/index.rst:17 msgid "Set some metric to routes learned from a particular neighbor." -msgstr "Set some metric to routes learned from a particular neighbor." +msgstr "Встановіть певну метрику для маршрутів, отриманих від конкретного сусіда." #: ../../configuration/interfaces/l2tpv3.rst:112 msgid "Set source-address to your local IP (LAN)." -msgstr "Set source-address to your local IP (LAN)." +msgstr "Встановіть адресу джерела на локальну IP (LAN)." -#: ../../configuration/policy/route-map.rst:346 +#: ../../configuration/policy/route-map.rst:349 msgid "Set source IP/IPv6 address for route." -msgstr "Set source IP/IPv6 address for route." +msgstr "Установіть вихідну IP/IPv6-адресу для маршруту." #: ../../configuration/policy/local-route.rst:20 #: ../../configuration/policy/local-route.rst:39 msgid "Set source address or prefix to match." -msgstr "Set source address or prefix to match." +msgstr "Установіть відповідну адресу або префікс джерела." -#: ../../configuration/policy/route-map.rst:354 +#: ../../configuration/policy/route-map.rst:357 msgid "Set tag value for routing protocol." -msgstr "Set tag value for routing protocol." +msgstr "Встановити значення тегу для протоколу маршрутизації." #: ../../configuration/service/dns.rst:50 msgid "Set the \"recursion desired\" bit in requests to the upstream nameserver." -msgstr "Set the \"recursion desired\" bit in requests to the upstream nameserver." +msgstr "Встановіть біт «потрібна рекурсія» у запитах до вищестоящого сервера імен." -#: ../../configuration/policy/route-map.rst:290 -#: ../../configuration/policy/route-map.rst:303 +#: ../../configuration/policy/route-map.rst:293 +#: ../../configuration/policy/route-map.rst:306 msgid "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." -msgstr "Set the BGP nexthop address to the address of the peer. For an incoming route-map this means the ip address of our peer is used. For an outgoing route-map this means the ip address of our self is used to establish the peering with our neighbor." +msgstr "Встановіть адресу BGP nexthop на адресу вузла. Для вхідної карти маршруту це означає, що використовується ip-адреса нашого вузла. Для карти вихідного маршруту це означає, що наша ip-адреса використовується для встановлення однорангового зв’язку з нашим сусідом." #: ../../configuration/interfaces/l2tpv3.rst:52 msgid "Set the IP address of the local interface to be used for the tunnel." -msgstr "Set the IP address of the local interface to be used for the tunnel." +msgstr "Встановіть IP-адресу локального інтерфейсу, який буде використовуватися для тунелю." #: ../../configuration/interfaces/l2tpv3.rst:59 msgid "Set the IP address of the remote peer. It may be specified as an IPv4 address or an IPv6 address." -msgstr "Set the IP address of the remote peer. It may be specified as an IPv4 address or an IPv6 address." +msgstr "Встановіть IP-адресу віддаленого вузла. Його можна вказати як адресу IPv4 або IPv6." #: ../../configuration/firewall/global-options.rst:99 msgid "Set the IPv4 source validation mode. The following system parameter will be altered:" -msgstr "Set the IPv4 source validation mode. The following system parameter will be altered:" +msgstr "Встановіть режим перевірки джерела IPv4. Буде змінено наступний системний параметр:" #: ../../configuration/protocols/pim6.rst:62 msgid "Set the MLD last member query count. The default value is 2." @@ -11149,7 +12373,7 @@ msgstr "Set the MLD version used on this interface. The default value is 2." #: ../../configuration/protocols/segment-routing.rst:85 #: ../../configuration/protocols/segment-routing.rst:163 msgid "Set the Maximum Stack Depth supported by the router. The value depend of the MPLS dataplane." -msgstr "Set the Maximum Stack Depth supported by the router. The value depend of the MPLS dataplane." +msgstr "Встановіть максимальну глибину стека, яку підтримує маршрутизатор. Значення залежить від площини даних MPLS." #: ../../configuration/protocols/pim.rst:153 msgid "Set the PIM hello and hold interval for a interface." @@ -11158,22 +12382,26 @@ msgstr "Set the PIM hello and hold interval for a interface." #: ../../configuration/protocols/segment-routing.rst:56 #: ../../configuration/protocols/segment-routing.rst:134 msgid "Set the Segment Routing Global Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535." -msgstr "Set the Segment Routing Global Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535." +msgstr "Встановіть глобальний блок сегментної маршрутизації, тобто діапазон міток, який використовується MPLS для зберігання мітки в MPLS FIB для префікса SID. Зверніть увагу, що розмір блоку не може перевищувати 65535." #: ../../configuration/protocols/segment-routing.rst:63 #: ../../configuration/protocols/segment-routing.rst:141 msgid "Set the Segment Routing Global Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535." -msgstr "Set the Segment Routing Global Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535." +msgstr "Встановіть глобальний блок сегментної маршрутизації, тобто низький діапазон міток, який використовується MPLS для зберігання мітки в MPLS FIB для префікса SID. Зверніть увагу, що розмір блоку не може перевищувати 65535." #: ../../configuration/protocols/segment-routing.rst:70 #: ../../configuration/protocols/segment-routing.rst:148 msgid "Set the Segment Routing Local Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." -msgstr "Set the Segment Routing Local Block i.e. the label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." +msgstr "Встановіть локальний блок маршрутизації сегмента, тобто діапазон міток, який використовується MPLS для зберігання мітки в MPLS FIB для префікса SID. Зауважте, що розмір блоку не може перевищувати 65535. Локальний блок сегментної маршрутизації. Негативна команда завжди скасовує обидва." #: ../../configuration/protocols/segment-routing.rst:78 #: ../../configuration/protocols/segment-routing.rst:156 msgid "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." -msgstr "Set the Segment Routing Local Block i.e. the low label range used by MPLS to store label in the MPLS FIB for Prefix SID. Note that the block size may not exceed 65535.Segment Routing Local Block, The negative command always unsets both." +msgstr "Встановіть локальний блок маршрутизації сегмента, тобто низький діапазон міток, який використовується MPLS для зберігання мітки в MPLS FIB для префікса SID. Зауважте, що розмір блоку не може перевищувати 65535. Локальний блок сегментної маршрутизації. Негативна команда завжди скасовує обидва." + +#: ../../configuration/container/index.rst:99 +msgid "Set the User ID or Group ID of the container" +msgstr "Set the User ID or Group ID of the container" #: ../../configuration/protocols/pim.rst:147 msgid "Set the :abbr:`DR (Designated Router)` Priority for the interface. This command is useful to allow the user to influence what node becomes the DR for a LAN segment." @@ -11183,21 +12411,33 @@ msgstr "Set the :abbr:`DR (Designated Router)` Priority for the interface. This msgid "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." msgstr "Set the :abbr:`MRU (Maximum Receive Unit)` to `mru`. PPPd will ask the peer to send packets of no more than `mru` bytes. The value of `mru` must be between 128 and 16384." +#: ../../configuration/service/dns.rst:164 +msgid "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." +msgstr "Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds." + #: ../../configuration/service/ssh.rst:106 msgid "Set the ``sshd`` log level. The default is ``info``." -msgstr "Set the ``sshd`` log level. The default is ``info``." +msgstr "Встановіть рівень журналу ``sshd``. Типовим є ``info``." #: ../../configuration/loadbalancing/reverse-proxy.rst:130 msgid "Set the address of the backend port" -msgstr "Set the address of the backend port" +msgstr "Встановіть адресу внутрішнього порту" #: ../../configuration/loadbalancing/reverse-proxy.rst:124 msgid "Set the address of the backend server to which the incoming traffic will be forwarded" -msgstr "Set the address of the backend server to which the incoming traffic will be forwarded" +msgstr "Встановіть адресу внутрішнього сервера, на який буде перенаправлятися вхідний трафік" + +#: ../../configuration/service/https.rst:94 +msgid "Set the authentication type for GraphQL, default option is key. Available options are:" +msgstr "Set the authentication type for GraphQL, default option is key. Available options are:" + +#: ../../configuration/service/https.rst:106 +msgid "Set the byte length of the JWT secret. Default is 32." +msgstr "Set the byte length of the JWT secret. Default is 32." #: ../../configuration/highavailability/index.rst:295 msgid "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." -msgstr "Set the default VRRP version to use. This defaults to 2, but IPv6 instances will always use version 3." +msgstr "Встановіть стандартну версію VRRP для використання. За умовчанням це значення 2, але екземпляри IPv6 завжди використовуватимуть версію 3." #: ../../configuration/interfaces/macsec.rst:56 msgid "Set the device's transmit (TX) key. This key must be a hex string that is 16-bytes (GCM-AES-128) or 32-bytes (GCM-AES-256)." @@ -11205,79 +12445,95 @@ msgstr "Set the device's transmit (TX) key. This key must be a hex string that i #: ../../_include/interface-dhcp-options.txt:60 msgid "Set the distance for the default gateway sent by the DHCP server." -msgstr "Set the distance for the default gateway sent by the DHCP server." +msgstr "Установіть відстань для шлюзу за замовчуванням, який надсилає сервер DHCP." #: ../../configuration/interfaces/pppoe.rst:138 msgid "Set the distance for the default gateway sent by the PPPoE server." -msgstr "Set the distance for the default gateway sent by the PPPoE server." +msgstr "Встановіть відстань для шлюзу за замовчуванням, який надсилає сервер PPPoE." #: ../../configuration/interfaces/sstp-client.rst:60 msgid "Set the distance for the default gateway sent by the SSTP server." -msgstr "Set the distance for the default gateway sent by the SSTP server." +msgstr "Установіть відстань для шлюзу за замовчуванням, який надсилає сервер SSTP." #: ../../configuration/interfaces/l2tpv3.rst:45 msgid "Set the encapsulation type of the tunnel. Valid values for encapsulation are: udp, ip." -msgstr "Set the encapsulation type of the tunnel. Valid values for encapsulation are: udp, ip." +msgstr "Встановіть тип інкапсуляції тунелю. Дійсні значення для інкапсуляції: udp, ip." #: ../../configuration/firewall/global-options.rst:127 msgid "Set the global setting for an established connection." -msgstr "Set the global setting for an established connection." +msgstr "Установіть глобальне налаштування для встановленого з’єднання." #: ../../configuration/firewall/global-options.rst:137 msgid "Set the global setting for invalid packets." -msgstr "Set the global setting for invalid packets." +msgstr "Установіть глобальне налаштування для недійсних пакетів." #: ../../configuration/firewall/global-options.rst:147 msgid "Set the global setting for related connections." -msgstr "Set the global setting for related connections." +msgstr "Установіть глобальне налаштування для пов’язаних з’єднань." + +#: ../../configuration/service/https.rst:102 +msgid "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." +msgstr "Set the lifetime for JWT tokens in seconds. Default is 3600 seconds." #: ../../configuration/service/https.rst:28 msgid "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" -msgstr "Set the listen port of the local API, this has no effect on the webserver. The default is port 8080" +msgstr "Встановіть порт прослуховування локального API, це не впливає на веб-сервер. Типовим є порт 8080" #: ../../configuration/service/dhcp-relay.rst:57 msgid "Set the maximum hop `<count>` before packets are discarded. Range 0...255, default 10." -msgstr "Set the maximum hop `<count>` before packets are discarded. Range 0...255, default 10." +msgstr "Встановіть максимальний стрибок `<count> ` перед відкиданням пакетів. Діапазон 0...255, за замовчуванням 10." #: ../../configuration/interfaces/wireless.rst:277 msgid "Set the maximum length of A-MPDU pre-EOF padding that the station can receive" -msgstr "Set the maximum length of A-MPDU pre-EOF padding that the station can receive" +msgstr "Встановіть максимальну довжину заповнення A-MPDU перед EOF, яку може отримати станція" #: ../../configuration/system/conntrack.rst:52 msgid "Set the maximum number of TCP half-open connections." -msgstr "Set the maximum number of TCP half-open connections." +msgstr "Встановіть максимальну кількість напіввідкритих підключень TCP." + +#: ../../configuration/service/https.rst:60 +msgid "Set the maximum request body size in megabytes. Default is 1MB." +msgstr "Set the maximum request body size in megabytes. Default is 1MB." #: ../../_include/interface-eapol.txt:12 msgid "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." -msgstr "Set the name of the SSL :abbr:`CA (Certificate Authority)` PKI entry used for authentication of the remote side. If an intermediate CA certificate is specified, then all parent CA certificates that exist in the PKI, such as the root CA or additional intermediate CAs, will automatically be used during certificate validation to ensure that the full chain of trust is available." +msgstr "Встановіть ім’я запису SSL :abbr:`CA (Certificate Authority)` PKI, який використовується для автентифікації віддаленої сторони. Якщо вказано проміжний сертифікат ЦС, усі батьківські сертифікати ЦС, які існують у PKI, наприклад кореневий ЦС або додаткові проміжні ЦС, автоматично використовуватимуться під час перевірки сертифіката, щоб забезпечити доступність повного ланцюжка довіри." #: ../../_include/interface-eapol.txt:29 msgid "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." -msgstr "Set the name of the x509 client keypair used to authenticate against the 802.1x system. All parent CA certificates of the client certificate, such as intermediate and root CAs, will be sent as part of the EAP-TLS handshake." +msgstr "Встановіть назву пари ключів клієнта x509, яка використовується для автентифікації в системі 802.1x. Усі батьківські сертифікати ЦС клієнтського сертифіката, наприклад проміжні та кореневі ЦС, будуть надіслані як частина рукостискання EAP-TLS." -#: ../../configuration/interfaces/bridge.rst:148 +#: ../../configuration/interfaces/bridge.rst:157 msgid "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" -msgstr "Set the native VLAN ID flag of the interface. When a data packet without a VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped" +msgstr "Встановіть прапор власного ідентифікатора VLAN для інтерфейсу. Коли пакет даних без тегу VLAN надходить у порт, пакет даних буде змушений додати тег певного ідентифікатора vlan. Коли прапорець ідентифікатора vlan витікає, тег ідентифікатора vlan буде видалено" -#: ../../configuration/policy/route-map.rst:284 +#: ../../configuration/policy/route-map.rst:287 msgid "Set the next-hop as unchanged. Pass through the route-map without changing its value" -msgstr "Set the next-hop as unchanged. Pass through the route-map without changing its value" +msgstr "Встановіть наступний крок як незмінний. Пройдіть по маршрутній карті, не змінюючи її значення" #: ../../configuration/system/conntrack.rst:62 msgid "Set the number of TCP maximum retransmit attempts." -msgstr "Set the number of TCP maximum retransmit attempts." +msgstr "Встановіть максимальну кількість спроб повторної передачі TCP." #: ../../configuration/loadbalancing/wan.rst:148 msgid "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." -msgstr "Set the number of health check failures before an interface is marked as unavailable, range for number is 1 to 10, default 1. Or set the number of successful health checks before an interface is added back to the interface pool, range for number is 1 to 10, default 1." +msgstr "Установіть кількість невдалих перевірок працездатності, перш ніж інтерфейс буде позначено як недоступний, діапазон для числа становить від 1 до 10, за замовчуванням 1. Або встановіть кількість успішних перевірок працездатності перед додаванням інтерфейсу назад до пулу інтерфейсів, діапазон для числа 1 до 10, за замовчуванням 1." -#: ../../configuration/system/login.rst:84 +#: ../../configuration/protocols/rpki.rst:119 +msgid "Set the number of seconds the router waits until retrying to connect to the cache server." +msgstr "Set the number of seconds the router waits until retrying to connect to the cache server." + +#: ../../configuration/protocols/rpki.rst:112 +msgid "Set the number of seconds the router waits until the router expires the cache." +msgstr "Set the number of seconds the router waits until the router expires the cache." + +#: ../../configuration/system/login.rst:88 msgid "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." -msgstr "Set the options for this public key. See the ssh ``authorized_keys`` man page for details of what you can specify here. To place a ``\"`` character in the options field, use ``"``, for example ``from="10.0.0.0/24"`` to restrict where the user may connect from when using this key." +msgstr "Встановіть параметри для цього відкритого ключа. Перегляньте довідкову сторінку ssh ``authorized_keys``, щоб дізнатися, що тут можна вказати. Щоб розмістити символ ``"`` у полі параметрів, використовуйте ``"``, наприклад ``from="10.0.0.0/24"``, щоб обмежити, звідки користувач може підключитися за допомогою цього ключа." #: ../../configuration/service/console-server.rst:45 msgid "Set the parity option for the console. If unset this will default to none." -msgstr "Set the parity option for the console. If unset this will default to none." +msgstr "Встановіть параметр парності для консолі. Якщо не налаштовано, за умовчанням не буде жодного." #: ../../configuration/interfaces/macsec.rst:61 msgid "Set the peer's MAC address" @@ -11289,81 +12545,97 @@ msgstr "Set the peer's key used to receive (RX) traffic" #: ../../configuration/interfaces/l2tpv3.rst:70 msgid "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." -msgstr "Set the peer-session-id, which is a 32-bit integer value assigned to the session by the peer. The value used must match the session_id value being used at the peer." +msgstr "Встановіть peer-session-id, який є 32-розрядним цілим значенням, призначеним сеансу одноранговим вузлом. Використане значення має відповідати значенню session_id, яке використовується на одноранговому пристрої." -#: ../../configuration/container/index.rst:98 +#: ../../configuration/container/index.rst:103 msgid "Set the restart behavior of the container." -msgstr "Set the restart behavior of the container." +msgstr "Налаштуйте поведінку перезапуску контейнера." -#: ../../configuration/policy/route-map.rst:323 +#: ../../configuration/policy/route-map.rst:326 msgid "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." msgstr "Set the route metric. When used with BGP, set the BGP attribute MED to a specific value. Use ``+/-`` to add or subtract the specified value to/from the existing/MED. Use ``rtt`` to set the MED to the round trip time or ``+rtt/-rtt`` to add/subtract the round trip time to/from the MED." #: ../../configuration/policy/route.rst:269 msgid "Set the routing table to forward packet with." -msgstr "Set the routing table to forward packet with." +msgstr "Налаштуйте таблицю маршрутизації для пересилання пакетів." #: ../../configuration/interfaces/l2tpv3.rst:64 msgid "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." -msgstr "Set the session id, which is a 32-bit integer value. Uniquely identifies the session being created. The value used must match the peer_session_id value being used at the peer." +msgstr "Установіть ідентифікатор сеансу, який є 32-розрядним цілим значенням. Унікально ідентифікує створюваний сеанс. Використане значення має відповідати значенню peer_session_id, яке використовується на одноранговому пристрої." + +#: ../../configuration/trafficpolicy/index.rst:1164 +msgid "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." +msgstr "Set the shaper bandwidth, either as an explicit bitrate or a percentage of the interface bandwidth." #: ../../configuration/system/conntrack.rst:31 msgid "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." -msgstr "Set the size of the hash table. The connection tracking hash table makes searching the connection tracking table faster. The hash table uses “buckets” to record entries in the connection tracking table." +msgstr "Встановити розмір хеш-таблиці. Хеш-таблиця відстеження з’єднань пришвидшує пошук у таблиці відстеження з’єднань. Хеш-таблиця використовує «відра» для запису записів у таблицю відстеження з’єднань." #: ../../configuration/service/broadcast-relay.rst:33 msgid "Set the source IP of forwarded packets, otherwise original senders address is used." -msgstr "Set the source IP of forwarded packets, otherwise original senders address is used." +msgstr "Встановіть IP-адресу джерела пересиланих пакетів, інакше використовується оригінальна адреса відправника." #: ../../configuration/system/conntrack.rst:97 msgid "Set the timeout in secounds for a protocol or state." -msgstr "Set the timeout in secounds for a protocol or state." +msgstr "Встановіть час очікування в секундах для протоколу або стану." #: ../../configuration/system/conntrack.rst:175 msgid "Set the timeout in secounds for a protocol or state in a custom rule." -msgstr "Set the timeout in secounds for a protocol or state in a custom rule." +msgstr "Встановіть час очікування в секундах для протоколу або стану в спеціальному правилі." #: ../../configuration/interfaces/l2tpv3.rst:76 #: ../../configuration/interfaces/l2tpv3.rst:81 msgid "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." -msgstr "Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the tunnel into which the session will be created." +msgstr "Встановіть ідентифікатор тунелю, який є 32-бітним цілим значенням. Унікально ідентифікує тунель, у якому буде створено сеанс." -#: ../../configuration/firewall/ipv4.rst:922 +#: ../../configuration/firewall/ipv4.rst:945 #: ../../configuration/firewall/ipv6.rst:931 msgid "Set the window scale factor for TCP window scaling" msgstr "Set the window scale factor for TCP window scaling" -#: ../../configuration/system/login.rst:124 +#: ../../configuration/system/login.rst:128 msgid "Set window of concurrently valid codes." -msgstr "Set window of concurrently valid codes." +msgstr "Встановити вікно одночасно дійсних кодів." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:172 +msgid "Sets the HTTP method to be used, can be either: option, get, post, put" +msgstr "Sets the HTTP method to be used, can be either: option, get, post, put" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:177 +msgid "Sets the endpoint to be used for health checks" +msgstr "Sets the endpoint to be used for health checks" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +msgid "Sets the expected result condition for considering a server healthy. Some possible examples are:" +msgstr "Sets the expected result condition for considering a server healthy. Some possible examples are:" #: ../../configuration/container/index.rst:16 msgid "Sets the image name in the hub registry" -msgstr "Sets the image name in the hub registry" +msgstr "Встановлює назву зображення в реєстрі концентратора" #: ../../configuration/interfaces/vxlan.rst:320 msgid "Sets the interface to listen for multicast packets on. Could be a loopback, not yet tested." -msgstr "Sets the interface to listen for multicast packets on. Could be a loopback, not yet tested." +msgstr "Встановлює інтерфейс для прослуховування багатоадресних пакетів. Можливо, петля, ще не перевірено." #: ../../configuration/service/webproxy.rst:111 msgid "Sets the listening port for a listening address. This overrides the default port of 3128 on the specific listen address." -msgstr "Sets the listening port for a listening address. This overrides the default port of 3128 on the specific listen address." +msgstr "Встановлює порт прослуховування для адреси прослуховування. Це замінює стандартний порт 3128 для певної адреси прослуховування." #: ../../configuration/interfaces/vxlan.rst:327 msgid "Sets the unique id for this vxlan-interface. Not sure how it correlates with multicast-address." -msgstr "Sets the unique id for this vxlan-interface. Not sure how it correlates with multicast-address." +msgstr "Встановлює унікальний ідентифікатор для цього інтерфейсу vxlan. Не знаю, як це співвідноситься з багатоадресною адресою." #: ../../configuration/highavailability/index.rst:96 msgid "Setting VRRP group priority" -msgstr "Setting VRRP group priority" +msgstr "Встановлення пріоритету групи VRRP" -#: ../../configuration/service/dhcp-server.rst:231 +#: ../../configuration/service/dhcp-server.rst:287 msgid "Setting name" -msgstr "Setting name" +msgstr "Назва налаштування" #: ../../configuration/vpn/dmvpn.rst:227 msgid "Setting this up on AWS will require a \"Custom Protocol Rule\" for protocol number \"47\" (GRE) Allow Rule in TWO places. Firstly on the VPC Network ACL, and secondly on the security group network ACL attached to the EC2 instance. This has been tested as working for the official AMI image on the AWS Marketplace. (Locate the correct VPC and security group by navigating through the details pane below your EC2 instance in the AWS console)." -msgstr "Setting this up on AWS will require a \"Custom Protocol Rule\" for protocol number \"47\" (GRE) Allow Rule in TWO places. Firstly on the VPC Network ACL, and secondly on the security group network ACL attached to the EC2 instance. This has been tested as working for the official AMI image on the AWS Marketplace. (Locate the correct VPC and security group by navigating through the details pane below your EC2 instance in the AWS console)." +msgstr "Щоб налаштувати це на AWS, знадобиться «Правило спеціального протоколу» для протоколу номер «47» (GRE) Правило дозволу в ДВОХ місцях. По-перше, на ACL мережі VPC, а по-друге, на ACL мережі групи безпеки, приєднаної до примірника EC2. Перевірено, що це працює для офіційного образу AMI на AWS Marketplace. (Знайдіть правильний VPC і групу безпеки, перейшовши по панелі деталей під своїм примірником EC2 на консолі AWS)." #: ../../configuration/vpn/remoteaccess_ipsec.rst:78 msgid "Setting up IPSec:" @@ -11389,88 +12661,101 @@ msgstr "Setting up certificates:" msgid "Setting up tunnel:" msgstr "Setting up tunnel:" -#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/system/option.rst:42 +#: ../../configuration/system/option.rst:53 +msgid "Setting will only become active with the next reboot!" +msgstr "Setting will only become active with the next reboot!" + +#: ../../configuration/service/dhcp-server.rst:429 +msgid "Setup DHCP HA for network 192.0.2.0/24" +msgstr "Setup DHCP HA for network 192.0.2.0/24" + +#: ../../configuration/service/dhcp-server.rst:413 msgid "Setup DHCP failover for network 192.0.2.0/24" -msgstr "Setup DHCP failover for network 192.0.2.0/24" +msgstr "Налаштуйте перемикання після відмови DHCP для мережі 192.0.2.0/24" #: ../../configuration/system/login.rst:34 msgid "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." -msgstr "Setup encrypted password for given username. This is useful for transferring a hashed password from system to system." +msgstr "Встановіть зашифрований пароль для заданого імені користувача. Це корисно для передачі хешованого пароля від системи до системи." -#: ../../configuration/system/login.rst:262 +#: ../../configuration/system/login.rst:266 msgid "Setup the `<timeout>` in seconds when querying the RADIUS server." -msgstr "Setup the `<timeout>` in seconds when querying the RADIUS server." +msgstr "Налаштуйте `<timeout> ` за секунди під час запиту до сервера RADIUS." -#: ../../configuration/system/login.rst:331 +#: ../../configuration/system/login.rst:335 msgid "Setup the `<timeout>` in seconds when querying the TACACS server." -msgstr "Setup the `<timeout>` in seconds when querying the TACACS server." +msgstr "Налаштуйте `<timeout> ` за секунди під час запиту до сервера TACACS." -#: ../../configuration/service/dns.rst:327 +#: ../../configuration/service/dns.rst:430 +msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." +msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service-name>`." + +#: ../../configuration/service/dns.rst:341 msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on address `<interface>` changes." #: ../../configuration/service/dns.rst:314 msgid "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." -msgstr "Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS provider identified by `<service>` when the IP address on interface `<interface>` changes." +msgstr "Налаштуйте динамічне ім’я хоста DNS `<hostname> ` пов’язаний із постачальником DynDNS, визначеним `<service> ` коли IP-адреса на інтерфейсі `<interface> ` зміни." -#: ../../configuration/system/option.rst:31 +#: ../../configuration/system/option.rst:61 msgid "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." -msgstr "Several commands utilize cURL to initiate transfers. Configure the local source IPv4/IPv6 address used for all cURL operations." +msgstr "Деякі команди використовують cURL для ініціювання передачі. Налаштуйте адресу локального джерела IPv4/IPv6, яка використовується для всіх операцій cURL." -#: ../../configuration/system/option.rst:36 +#: ../../configuration/system/option.rst:66 msgid "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." -msgstr "Several commands utilize curl to initiate transfers. Configure the local source interface used for all CURL operations." +msgstr "Деякі команди використовують curl для ініціювання передачі. Налаштуйте локальний вихідний інтерфейс, який використовується для всіх операцій CURL." #: ../../configuration/system/syslog.rst:167 msgid "Severity" -msgstr "Severity" +msgstr "Суворість" #: ../../configuration/system/syslog.rst:164 msgid "Severity Level" -msgstr "Severity Level" +msgstr "Рівень серйозності" #: ../../configuration/trafficpolicy/index.rst:1017 msgid "Shaper" -msgstr "Shaper" +msgstr "Формувач" #: ../../configuration/interfaces/wireless.rst:282 msgid "Short GI capabilities" -msgstr "Short GI capabilities" +msgstr "Короткі можливості GI" #: ../../configuration/interfaces/wireless.rst:204 msgid "Short GI capabilities for 20 and 40 MHz" -msgstr "Short GI capabilities for 20 and 40 MHz" +msgstr "Короткі можливості GI для 20 і 40 МГц" #: ../../configuration/trafficpolicy/index.rst:923 msgid "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." -msgstr "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." +msgstr "Короткі серії можуть перевищувати ліміт. Під час створення трафік Rate-Control заповнюється маркерами, які відповідають об’єму трафіку, який можна отримати за один раз. Жетони надходять зі стабільною швидкістю, поки відро не заповниться." -#: ../../configuration/vrf/index.rst:488 +#: ../../configuration/vrf/index.rst:507 msgid "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." -msgstr "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." +msgstr "Скорочений синтаксис для визначення автоматичного витоку з vrf VRFNAME до поточного VRF за допомогою VPN RIB як посередника. RD і RT виводяться автоматично, і їх не слід вказувати явно ні для джерела, ні для цільового VRF." -#: ../../configuration/protocols/bgp.rst:953 +#: ../../configuration/protocols/bgp.rst:975 #: ../../configuration/protocols/mpls.rst:225 msgid "Show" -msgstr "Show" +msgstr "Показати" -#: ../../configuration/service/dhcp-server.rst:416 +#: ../../configuration/service/dhcp-server.rst:475 msgid "Show DHCP server daemon log file" -msgstr "Show DHCP server daemon log file" +msgstr "Показати файл журналу демона сервера DHCP" -#: ../../configuration/service/dhcp-server.rst:668 +#: ../../configuration/service/dhcp-server.rst:729 msgid "Show DHCPv6 server daemon log file" -msgstr "Show DHCPv6 server daemon log file" +msgstr "Показати файл журналу демона сервера DHCPv6" #: ../../configuration/firewall/bridge.rst:306 -#: ../../configuration/firewall/ipv4.rst:1115 +#: ../../configuration/firewall/ipv4.rst:1138 #: ../../configuration/firewall/ipv6.rst:1138 msgid "Show Firewall log" -msgstr "Show Firewall log" +msgstr "Показати журнал брандмауера" #: ../../configuration/service/lldp.rst:138 msgid "Show LLDP neighbors connected via interface `<interface>`." -msgstr "Show LLDP neighbors connected via interface `<interface>`." +msgstr "Показати сусідів LLDP, підключених через інтерфейс `<interface> `." #: ../../configuration/service/ssh.rst:232 msgid "Show SSH dynamic-protection log." @@ -11490,161 +12775,161 @@ msgstr "Show SSH server public key fingerprints." #: ../../configuration/loadbalancing/wan.rst:271 msgid "Show WAN load balancer information including test types and targets. A character at the start of each line depicts the state of the test" -msgstr "Show WAN load balancer information including test types and targets. A character at the start of each line depicts the state of the test" +msgstr "Показати інформацію балансувальника навантаження WAN, включаючи типи тестів і цілі. Символ на початку кожного рядка відображає стан тесту" #: ../../configuration/interfaces/wwan.rst:200 msgid "Show WWAN module IMEI." -msgstr "Show WWAN module IMEI." +msgstr "Показати IMEI модуля WWAN." #: ../../configuration/interfaces/wwan.rst:211 msgid "Show WWAN module IMSI." -msgstr "Show WWAN module IMSI." +msgstr "Показати IMSI модуля WWAN." #: ../../configuration/interfaces/wwan.rst:229 msgid "Show WWAN module MSISDN." -msgstr "Show WWAN module MSISDN." +msgstr "Показати MSISDN модуля WWAN." #: ../../configuration/interfaces/wwan.rst:263 msgid "Show WWAN module SIM card information." -msgstr "Show WWAN module SIM card information." +msgstr "Показати інформацію SIM-картки модуля WWAN." #: ../../configuration/interfaces/wwan.rst:184 msgid "Show WWAN module firmware." -msgstr "Show WWAN module firmware." +msgstr "Показати прошивку модуля WWAN." #: ../../configuration/interfaces/wwan.rst:169 msgid "Show WWAN module hardware capabilities." -msgstr "Show WWAN module hardware capabilities." +msgstr "Показати апаратні можливості модуля WWAN." #: ../../configuration/interfaces/wwan.rst:238 msgid "Show WWAN module hardware revision." -msgstr "Show WWAN module hardware revision." +msgstr "Показати версію апаратного забезпечення модуля WWAN." #: ../../configuration/interfaces/wwan.rst:220 msgid "Show WWAN module model." -msgstr "Show WWAN module model." +msgstr "Показати модель модуля WWAN." #: ../../configuration/interfaces/wwan.rst:247 msgid "Show WWAN module signal strength." -msgstr "Show WWAN module signal strength." +msgstr "Показати силу сигналу модуля WWAN." -#: ../../configuration/container/index.rst:163 +#: ../../configuration/container/index.rst:199 msgid "Show a list available container networks" -msgstr "Show a list available container networks" +msgstr "Показати список доступних контейнерних мереж" -#: ../../configuration/pki/index.rst:297 +#: ../../configuration/pki/index.rst:328 msgid "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." -msgstr "Show a list of installed :abbr:`CA (Certificate Authority)` certificates." +msgstr "Показати список встановлених сертифікатів :abbr:`CA (Certificate Authority)`." -#: ../../configuration/pki/index.rst:332 +#: ../../configuration/pki/index.rst:363 msgid "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." -msgstr "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`." +msgstr "Показати список встановлених :abbr:`CRL (список відкликаних сертифікатів)`." -#: ../../configuration/pki/index.rst:315 +#: ../../configuration/pki/index.rst:346 msgid "Show a list of installed certificates" -msgstr "Show a list of installed certificates" +msgstr "Показати список встановлених сертифікатів" -#: ../../configuration/protocols/bfd.rst:98 +#: ../../configuration/protocols/bfd.rst:105 msgid "Show all BFD peers" -msgstr "Show all BFD peers" +msgstr "Показати всі аналоги BFD" -#: ../../configuration/interfaces/ethernet.rst:210 +#: ../../configuration/interfaces/ethernet.rst:226 msgid "Show available offloading functions on given `<interface>`" -msgstr "Show available offloading functions on given `<interface>`" +msgstr "Показати доступні функції розвантаження для даного `<interface> `" #: ../../configuration/system/acceleration.rst:54 msgid "Show binded qat device interrupts to certain core." -msgstr "Show binded qat device interrupts to certain core." +msgstr "Показати прив’язані переривання пристрою qat до певного ядра." -#: ../../configuration/interfaces/bridge.rst:283 +#: ../../configuration/interfaces/bridge.rst:292 msgid "Show bridge `<name>` fdb displays the current forwarding table:" -msgstr "Show bridge `<name>` fdb displays the current forwarding table:" +msgstr "Показати міст `<name> ` fdb відображає поточну таблицю пересилання:" -#: ../../configuration/interfaces/bridge.rst:310 +#: ../../configuration/interfaces/bridge.rst:319 msgid "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." -msgstr "Show bridge `<name>` mdb displays the current multicast group membership table.The table is populated by IGMP and MLD snooping in the bridge driver automatically." +msgstr "Показати міст `<name> ` mdb відображає поточну таблицю членства в групі багатоадресної розсилки. Таблиця автоматично заповнюється IGMP і MLD відстеженням у драйвері мосту." #: ../../configuration/interfaces/bonding.rst:516 #: ../../configuration/interfaces/dummy.rst:55 -#: ../../configuration/interfaces/ethernet.rst:136 +#: ../../configuration/interfaces/ethernet.rst:152 #: ../../configuration/interfaces/loopback.rst:45 #: ../../configuration/interfaces/virtual-ethernet.rst:59 msgid "Show brief interface information." -msgstr "Show brief interface information." +msgstr "Показати коротку інформацію про інтерфейс." -#: ../../configuration/system/ipv6.rst:46 +#: ../../configuration/system/ipv6.rst:59 msgid "Show commands" -msgstr "Show commands" +msgstr "Показати команди" #: ../../configuration/service/console-server.rst:80 msgid "Show configured serial ports and their respective interface configuration." -msgstr "Show configured serial ports and their respective interface configuration." +msgstr "Показати налаштовані послідовні порти та відповідну конфігурацію інтерфейсу." #: ../../configuration/loadbalancing/wan.rst:297 msgid "Show connection data of load balanced traffic:" -msgstr "Show connection data of load balanced traffic:" +msgstr "Показати дані підключення трафіку зі збалансованим навантаженням:" -#: ../../configuration/service/conntrack-sync.rst:132 +#: ../../configuration/service/conntrack-sync.rst:141 msgid "Show connection syncing external cache entries" -msgstr "Show connection syncing external cache entries" +msgstr "Показати записи зовнішнього кешу синхронізації підключення" -#: ../../configuration/service/conntrack-sync.rst:136 +#: ../../configuration/service/conntrack-sync.rst:145 msgid "Show connection syncing internal cache entries" -msgstr "Show connection syncing internal cache entries" +msgstr "Показати записи внутрішнього кешу синхронізації підключення" #: ../../configuration/service/console-server.rst:89 msgid "Show currently connected users." -msgstr "Show currently connected users." +msgstr "Показати підключених користувачів." #: ../../configuration/protocols/segment-routing.rst:109 msgid "Show detailed information about all learned Segment Routing Nodes" -msgstr "Show detailed information about all learned Segment Routing Nodes" +msgstr "Показати детальну інформацію про всі вивчені вузли маршрутизації сегментів" #: ../../configuration/protocols/segment-routing.rst:113 msgid "Show detailed information about prefix-sid and label learned" -msgstr "Show detailed information about prefix-sid and label learned" +msgstr "Показати детальну інформацію про prefix-sid і вивчену мітку" #: ../../configuration/interfaces/bonding.rst:548 msgid "Show detailed information about the underlaying physical links on given bond `<interface>`." -msgstr "Show detailed information about the underlaying physical links on given bond `<interface>`." +msgstr "Показати детальну інформацію про базові фізичні зв’язки на даному зв’язку `<interface> `." #: ../../configuration/interfaces/bonding.rst:531 #: ../../configuration/interfaces/dummy.rst:67 -#: ../../configuration/interfaces/ethernet.rst:150 +#: ../../configuration/interfaces/ethernet.rst:166 #: ../../configuration/interfaces/pppoe.rst:282 #: ../../configuration/interfaces/sstp-client.rst:121 #: ../../configuration/interfaces/virtual-ethernet.rst:72 #: ../../configuration/interfaces/wwan.rst:83 msgid "Show detailed information on given `<interface>`" -msgstr "Show detailed information on given `<interface>`" +msgstr "Показати детальну інформацію про заданий `<interface> `" #: ../../configuration/interfaces/loopback.rst:58 msgid "Show detailed information on the given loopback interface `lo`." -msgstr "Show detailed information on the given loopback interface `lo`." +msgstr "Показати детальну інформацію про заданий інтерфейс петлі `lo`." #: ../../configuration/interfaces/wwan.rst:102 msgid "Show detailed information summary on given `<interface>`" -msgstr "Show detailed information summary on given `<interface>`" +msgstr "Показати зведену детальну інформацію про заданий `<interface> `" #: ../../configuration/system/flow-accounting.rst:182 msgid "Show flow accounting information for given `<interface>`." -msgstr "Show flow accounting information for given `<interface>`." +msgstr "Показати інформацію про облік потоків для даного `<interface> `." #: ../../configuration/system/flow-accounting.rst:199 msgid "Show flow accounting information for given `<interface>` for a specific host only." -msgstr "Show flow accounting information for given `<interface>` for a specific host only." +msgstr "Показати інформацію про облік потоку для заданого `<interface> ` лише для певного хоста." #: ../../configuration/interfaces/wireguard.rst:376 msgid "Show general information about specific WireGuard interface" -msgstr "Show general information about specific WireGuard interface" +msgstr "Показати загальну інформацію про конкретний інтерфейс WireGuard" #: ../../configuration/interfaces/wireguard.rst:345 msgid "Show info about the Wireguard service. It also shows the latest handshake." -msgstr "Show info about the Wireguard service. It also shows the latest handshake." +msgstr "Показати інформацію про службу Wireguard. Він також показує останнє рукостискання." -#: ../../configuration/interfaces/ethernet.rst:169 +#: ../../configuration/interfaces/ethernet.rst:185 msgid "Show information about physical `<interface>`" -msgstr "Show information about physical `<interface>`" +msgstr "Показати інформацію про фізичний `<interface> `" #: ../../configuration/service/ssh.rst:240 msgid "Show list of IPs currently blocked by SSH dynamic-protection." @@ -11654,100 +12939,100 @@ msgstr "Show list of IPs currently blocked by SSH dynamic-protection." msgid "Show logs for mDNS repeater service." msgstr "Show logs for mDNS repeater service." -#: ../../configuration/container/index.rst:159 +#: ../../configuration/container/index.rst:195 msgid "Show logs from a given container" -msgstr "Show logs from a given container" +msgstr "Показати журнали з заданого контейнера" -#: ../../configuration/service/dhcp-server.rst:420 +#: ../../configuration/service/dhcp-server.rst:479 msgid "Show logs from all DHCP client processes." -msgstr "Show logs from all DHCP client processes." +msgstr "Показати журнали всіх процесів клієнта DHCP." -#: ../../configuration/service/dhcp-server.rst:672 +#: ../../configuration/service/dhcp-server.rst:733 msgid "Show logs from all DHCPv6 client processes." -msgstr "Show logs from all DHCPv6 client processes." +msgstr "Показати журнали всіх процесів клієнта DHCPv6." -#: ../../configuration/service/dhcp-server.rst:424 +#: ../../configuration/service/dhcp-server.rst:483 msgid "Show logs from specific `interface` DHCP client process." -msgstr "Show logs from specific `interface` DHCP client process." +msgstr "Показати журнали з конкретного клієнтського процесу `інтерфейсу` DHCP." -#: ../../configuration/service/dhcp-server.rst:676 +#: ../../configuration/service/dhcp-server.rst:737 msgid "Show logs from specific `interface` DHCPv6 client process." -msgstr "Show logs from specific `interface` DHCPv6 client process." +msgstr "Показати журнали з певного клієнтського процесу `інтерфейсу` DHCPv6." -#: ../../configuration/pki/index.rst:311 +#: ../../configuration/pki/index.rst:342 msgid "Show only information for specified Certificate Authority." -msgstr "Show only information for specified Certificate Authority." +msgstr "Показувати лише інформацію для зазначеного центру сертифікації." -#: ../../configuration/pki/index.rst:328 +#: ../../configuration/pki/index.rst:359 msgid "Show only information for specified certificate." -msgstr "Show only information for specified certificate." +msgstr "Показувати лише інформацію для вказаного сертифіката." -#: ../../configuration/service/dhcp-server.rst:478 -#: ../../configuration/service/dhcp-server.rst:699 +#: ../../configuration/service/dhcp-server.rst:537 +#: ../../configuration/service/dhcp-server.rst:760 msgid "Show only leases in the specified pool." -msgstr "Show only leases in the specified pool." +msgstr "Показати лише оренди у вказаному пулі." -#: ../../configuration/service/dhcp-server.rst:708 +#: ../../configuration/service/dhcp-server.rst:769 msgid "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" -msgstr "Show only leases with the specified state. Possible states: abandoned, active, all, backup, expired, free, released, reset (default = active)" +msgstr "Показати лише договори оренди з указаним станом. Можливі стани: покинутий, активний, усі, резервна копія, минув, вільний, звільнений, скинути (за замовчуванням = активний)" -#: ../../configuration/service/dhcp-server.rst:496 +#: ../../configuration/service/dhcp-server.rst:555 msgid "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" -msgstr "Show only leases with the specified state. Possible states: all, active, free, expired, released, abandoned, reset, backup (default = active)" +msgstr "Показати лише договори оренди з указаним станом. Можливі стани: усі, активні, вільні, минув, випущено, залишені, скидання, резервне копіювання (за замовчуванням = активний)" #: ../../configuration/system/default-route.rst:29 msgid "Show routing table entry for the default route." -msgstr "Show routing table entry for the default route." +msgstr "Показати запис таблиці маршрутизації для маршруту за замовчуванням." #: ../../configuration/interfaces/macsec.rst:142 msgid "Show specific MACsec interface information" -msgstr "Show specific MACsec interface information" +msgstr "Показати певну інформацію про інтерфейс MACsec" -#: ../../configuration/vpn/site2site_ipsec.rst:221 +#: ../../configuration/vpn/site2site_ipsec.rst:224 msgid "Show status of new setup:" -msgstr "Show status of new setup:" +msgstr "Показати статус нового налаштування:" -#: ../../configuration/service/dhcp-server.rst:447 +#: ../../configuration/service/dhcp-server.rst:506 msgid "Show statuses of all active leases:" -msgstr "Show statuses of all active leases:" +msgstr "Показати статуси всіх активних договорів оренди:" -#: ../../configuration/service/dhcp-server.rst:465 +#: ../../configuration/service/dhcp-server.rst:524 msgid "Show statuses of all active leases granted by local (this server) or remote (failover server):" msgstr "Show statuses of all active leases granted by local (this server) or remote (failover server):" -#: ../../configuration/service/dhcp-server.rst:432 +#: ../../configuration/service/dhcp-server.rst:491 msgid "Show the DHCP server statistics:" -msgstr "Show the DHCP server statistics:" +msgstr "Показати статистику сервера DHCP:" -#: ../../configuration/service/dhcp-server.rst:443 +#: ../../configuration/service/dhcp-server.rst:502 msgid "Show the DHCP server statistics for the specified pool." -msgstr "Show the DHCP server statistics for the specified pool." +msgstr "Показати статистику сервера DHCP для вказаного пулу." #: ../../configuration/service/console-server.rst:120 msgid "Show the console server log." -msgstr "Show the console server log." +msgstr "Показати журнал консольного сервера." #: ../../configuration/system/acceleration.rst:46 msgid "Show the full config uploaded to the QAT device." -msgstr "Show the full config uploaded to the QAT device." +msgstr "Показати повну конфігурацію, завантажену на пристрій QAT." -#: ../../configuration/container/index.rst:151 +#: ../../configuration/container/index.rst:187 msgid "Show the list of all active containers." -msgstr "Show the list of all active containers." +msgstr "Показати список усіх активних контейнерів." -#: ../../configuration/container/index.rst:155 +#: ../../configuration/container/index.rst:191 msgid "Show the local container images." -msgstr "Show the local container images." +msgstr "Показати зображення локальних контейнерів." #: ../../configuration/firewall/general-legacy.rst:969 msgid "Show the logs of a specific Rule-Set." -msgstr "Show the logs of a specific Rule-Set." +msgstr "Показати журнали певного набору правил." #: ../../configuration/firewall/bridge.rst:316 msgid "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all bridge firewall logs; show all logs for forward hook; show all logs for forward hook and priority filter; show all logs for particular custom chain; show logs for specific Rule-Set." -#: ../../configuration/firewall/ipv4.rst:1125 +#: ../../configuration/firewall/ipv4.rst:1148 msgid "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." msgstr "Show the logs of all firewall; show all ipv4 firewall logs; show all logs for particular hook; show all logs for particular hook and priority; show all logs for particular custom chain; show logs for specific Rule-Set." @@ -11758,84 +13043,96 @@ msgstr "Show the logs of all firewall; show all ipv6 firewall logs; show all log #: ../../configuration/protocols/failover.rst:75 #: ../../configuration/protocols/failover.rst:101 msgid "Show the route" -msgstr "Show the route" +msgstr "Показати маршрут" -#: ../../configuration/interfaces/ethernet.rst:242 +#: ../../configuration/interfaces/ethernet.rst:258 msgid "Show transceiver information from plugin modules, e.g SFP+, QSFP" -msgstr "Show transceiver information from plugin modules, e.g SFP+, QSFP" +msgstr "Показати інформацію про трансивер із модулів плагінів, наприклад SFP+, QSFP" -#: ../../configuration/protocols/bfd.rst:179 +#: ../../configuration/protocols/bfd.rst:186 msgid "Showing BFD monitored static routes" -msgstr "Showing BFD monitored static routes" +msgstr "Показ статичних маршрутів, що контролюються BFD" -#: ../../configuration/service/dhcp-server.rst:684 +#: ../../configuration/service/dhcp-server.rst:745 msgid "Shows status of all assigned leases:" -msgstr "Shows status of all assigned leases:" +msgstr "Показує статус усіх призначених договорів оренди:" #: ../../configuration/system/acceleration.rst:62 msgid "Side A:" -msgstr "Side A:" +msgstr "Сторона A:" #: ../../configuration/system/acceleration.rst:87 msgid "Side B:" -msgstr "Side B:" +msgstr "Сторона B:" #: ../../configuration/interfaces/wwan.rst:312 msgid "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7304 miniPCIe (LTE)" #: ../../configuration/interfaces/wwan.rst:313 msgid "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7430 miniPCIe (LTE)" #: ../../configuration/interfaces/wwan.rst:314 msgid "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7455 miniPCIe (LTE)" #: ../../configuration/interfaces/wwan.rst:315 msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7710 miniPCIe (LTE)" -#: ../../configuration/vpn/site2site_ipsec.rst:427 +#: ../../configuration/vpn/site2site_ipsec.rst:430 msgid "Similar combinations are applicable for the dead-peer-detection." -msgstr "Similar combinations are applicable for the dead-peer-detection." +msgstr "Подібні комбінації застосовні для виявлення мертвого однорангового пристрою." #: ../../configuration/protocols/babel.rst:190 msgid "Simple Babel configuration using 2 nodes and redistributing connected interfaces." -msgstr "Simple Babel configuration using 2 nodes and redistributing connected interfaces." +msgstr "Проста конфігурація Babel з використанням 2 вузлів і перерозподілу підключених інтерфейсів." #: ../../configuration/protocols/rip.rst:241 msgid "Simple RIP configuration using 2 nodes and redistributing connected interfaces." -msgstr "Simple RIP configuration using 2 nodes and redistributing connected interfaces." +msgstr "Проста конфігурація RIP з використанням 2 вузлів і перерозподілу підключених інтерфейсів." #: ../../configuration/vpn/openconnect.rst:156 msgid "Simple setup with one user added and password authentication:" -msgstr "Simple setup with one user added and password authentication:" +msgstr "Просте налаштування з додаванням одного користувача та автентифікацією за паролем:" #: ../../configuration/protocols/ospf.rst:371 msgid "Simple text password authentication is insecure and deprecated in favour of MD5 HMAC authentication." -msgstr "Simple text password authentication is insecure and deprecated in favour of MD5 HMAC authentication." +msgstr "Автентифікація за простим текстовим паролем є небезпечною, тому її використання застаріло на користь автентифікації MD5 HMAC." #: ../../configuration/vpn/rsa-keys.rst:54 msgid "Since both routers do not know their effective public addresses, we set the local-address of the peer to \"any\"." -msgstr "Since both routers do not know their effective public addresses, we set the local-address of the peer to \"any\"." +msgstr "Оскільки обидва маршрутизатори не знають своїх ефективних публічних адрес, ми встановлюємо локальну адресу однорангового вузла на "будь-яку"." #: ../../configuration/interfaces/openvpn.rst:395 msgid "Since it's a HQ and branch offices setup, we will want all clients to have fixed addresses and we will route traffic to specific subnets through them. We need configuration for each client to achieve this." -msgstr "Since it's a HQ and branch offices setup, we will want all clients to have fixed addresses and we will route traffic to specific subnets through them. We need configuration for each client to achieve this." +msgstr "Оскільки це налаштування штаб-квартири та філій, ми хочемо, щоб усі клієнти мали фіксовані адреси, і ми направлятимемо через них трафік до певних підмереж. Для цього нам потрібна конфігурація для кожного клієнта." #: ../../configuration/vpn/l2tp.rst:151 msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." -msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially." +msgstr "Оскільки RADIUS-сервер буде єдиною точкою відмови, можна налаштувати кілька RADIUS-серверів, які використовуватимуться згодом." + +#: ../../configuration/service/ipoe-server.rst:131 +#: ../../configuration/service/pppoe-server.rst:93 +#: ../../configuration/vpn/l2tp.rst:136 +#: ../../configuration/vpn/pptp.rst:76 +#: ../../configuration/vpn/sstp.rst:109 +msgid "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" +msgstr "Since the RADIUS server would be a single point of failure, multiple RADIUS servers can be setup and will be used subsequentially. For example:" #: ../../configuration/service/mdns.rst:13 msgid "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." -msgstr "Since the mDNS protocol sends the AA records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." +msgstr "Оскільки протокол mDNS надсилає записи AA в самому пакеті, ретранслятору не потрібно підробляти адресу джерела. Натомість адреса джерела є інтерфейсом, який повторює пакет." #: ../../configuration/service/mdns.rst:14 msgid "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." msgstr "Since the mDNS protocol sends the :abbr:`AA(Authoritative Answer)` records in the packet itself, the repeater does not need to forge the source address. Instead, the source address is of the interface that repeats the packet." +#: ../../configuration/service/ids.rst:98 +msgid "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" +msgstr "Since we are analyzing attacks to and from our internal network, two types of attacks can be identified, and differents actions are needed:" + #: ../../configuration/interfaces/vxlan.rst:157 msgid "Single VXLAN device (SVD)" msgstr "Single VXLAN device (SVD)" @@ -11843,31 +13140,35 @@ msgstr "Single VXLAN device (SVD)" #: ../../configuration/interfaces/openvpn.rst:39 #: ../../configuration/vpn/site2site_ipsec.rst:4 msgid "Site-to-Site" -msgstr "Site-to-Site" +msgstr "Від сайту до сайту" #: ../../configuration/vpn/site2site_ipsec.rst:6 msgid "Site-to-site mode provides a way to add remote peers, which could be configured to exchange encrypted information between them and VyOS itself or connected/routed networks." -msgstr "Site-to-site mode provides a way to add remote peers, which could be configured to exchange encrypted information between them and VyOS itself or connected/routed networks." +msgstr "Режим «сайт-сайт» забезпечує спосіб додавання віддалених однорангових вузлів, які можна налаштувати для обміну зашифрованою інформацією між ними та самою VyOS або підключеними/маршрутизованими мережами." #: ../../configuration/interfaces/openvpn.rst:47 msgid "Site-to-site mode supports x.509 but doesn't require it and can also work with static keys, which is simpler in many cases. In this example, we'll configure a simple site-to-site OpenVPN tunnel using a 2048-bit pre-shared key." -msgstr "Site-to-site mode supports x.509 but doesn't require it and can also work with static keys, which is simpler in many cases. In this example, we'll configure a simple site-to-site OpenVPN tunnel using a 2048-bit pre-shared key." +msgstr "Режим Site-to-site підтримує x.509, але не вимагає його, а також може працювати зі статичними ключами, що в багатьох випадках простіше. У цьому прикладі ми налаштуємо простий міжсайтовий тунель OpenVPN за допомогою попереднього 2048-бітного ключа." #: ../../configuration/interfaces/wireguard.rst:15 msgid "Site to Site VPN" -msgstr "Site to Site VPN" +msgstr "Від сайту до сайту VPN" -#: ../../configuration/pki/index.rst:275 +#: ../../configuration/pki/index.rst:306 msgid "Size of the RSA key." msgstr "Size of the RSA key." #: ../../configuration/interfaces/bonding.rst:47 msgid "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." -msgstr "Slave selection for outgoing traffic is done according to the transmit hash policy, which may be changed from the default simple XOR policy via the :cfgcmd:`hash-policy` option, documented below." +msgstr "Вибір підлеглого для вихідного трафіку здійснюється відповідно до хеш-політики передачі, яку можна змінити замість стандартної простої політики XOR за допомогою параметра :cfgcmd:`hash-policy`, задокументованого нижче." + +#: ../../configuration/service/ids.rst:110 +msgid "So, firewall configuration needed for this setup:" +msgstr "So, firewall configuration needed for this setup:" #: ../../configuration/nat/nat44.rst:554 msgid "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." -msgstr "So in our firewall policy, we want to allow traffic coming in on the outside interface, destined for TCP port 80 and the IP address of 192.168.0.100." +msgstr "Тому в нашій політиці брандмауера ми хочемо дозволити трафік, що надходить через зовнішній інтерфейс, призначений для TCP-порту 80 та IP-адреси 192.168.0.100." #: ../../configuration/nat/nat44.rst:579 msgid "So in our firewall ruleset, we want to allow traffic which previously matched a destination nat rule. In order to avoid creating many rules, one for each destination nat rule, we can accept all **'dnat'** connections with one simple rule, using ``connection-status`` matcher:" @@ -11879,23 +13180,34 @@ msgstr "SolarWinds" #: ../../_include/interface-dhcpv6-prefix-delegation.txt:10 msgid "Some ISPs by default only delegate a /64 prefix. To request for a specific prefix size use this option to request for a bigger delegation for this pd `<id>`. This value is in the range from 32 - 64 so you could request up to a /32 prefix (if your ISP allows this) down to a /64 delegation." -msgstr "Some ISPs by default only delegate a /64 prefix. To request for a specific prefix size use this option to request for a bigger delegation for this pd `<id>`. This value is in the range from 32 - 64 so you could request up to a /32 prefix (if your ISP allows this) down to a /64 delegation." +msgstr "Деякі провайдери за замовчуванням делегують лише префікс /64. Щоб запитати певний розмір префікса, скористайтеся цією опцією, щоб запросити більшу делегацію для цього pd `<id> `. Це значення знаходиться в діапазоні від 32 до 64, тому ви можете запитувати префікс до /32 (якщо ваш провайдер це дозволяє) до делегування /64." #: ../../configuration/system/proxy.rst:7 msgid "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." -msgstr "Some IT environments require the use of a proxy to connect to the Internet. Without this configuration VyOS updates could not be installed directly by using the :opcmd:`add system image` command (:ref:`update_vyos`)." +msgstr "Деякі ІТ-середовища вимагають використання проксі-сервера для підключення до Інтернету. Без цієї конфігурації оновлення VyOS неможливо встановити безпосередньо за допомогою команди :opcmd:`add system image` (:ref:`update_vyos`)." -#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/service/ipoe-server.rst:140 +#: ../../configuration/service/pppoe-server.rst:102 +#: ../../configuration/vpn/pptp.rst:85 +#: ../../configuration/vpn/sstp.rst:118 +msgid "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." +msgstr "Some RADIUS severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." + +#: ../../configuration/vpn/l2tp.rst:145 msgid "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." -msgstr "Some RADIUS_ severs use an access control list which allows or denies queries, make sure to add your VyOS router to the allowed client list." +msgstr "Деякі сервери RADIUS_ використовують список контролю доступу, який дозволяє або забороняє запити, переконайтеся, що ви додали свій маршрутизатор VyOS до списку дозволених клієнтів." #: ../../configuration/nat/nat44.rst:650 msgid "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." -msgstr "Some application service providers (ASPs) operate a VPN gateway to provide access to their internal resources, and require that a connecting organisation translate all traffic to the service provider network to a source address provided by the ASP." +msgstr "Деякі постачальники послуг додатків (ASP) використовують шлюз VPN для надання доступу до своїх внутрішніх ресурсів і вимагають, щоб підключена організація переводила весь трафік до мережі постачальника послуг на адресу джерела, надану ASP." + +#: ../../configuration/container/index.rst:171 +msgid "Some container registries require credentials to be used." +msgstr "Some container registries require credentials to be used." #: ../../configuration/firewall/general-legacy.rst:38 msgid "Some firewall settings are global and have an affect on the whole system." -msgstr "Some firewall settings are global and have an affect on the whole system." +msgstr "Деякі налаштування брандмауера є глобальними та впливають на всю систему." #: ../../configuration/firewall/global-options.rst:13 msgid "Some firewall settings are global and have an affect on the whole system. In this section there's useful information about these global-options that can be configured using vyos cli." @@ -11903,216 +13215,297 @@ msgstr "Some firewall settings are global and have an affect on the whole system #: ../../configuration/trafficpolicy/index.rst:327 msgid "Some policies already include other embedded policies inside. That is the case of Shaper_: each of its classes use fair-queue unless you change it." -msgstr "Some policies already include other embedded policies inside. That is the case of Shaper_: each of its classes use fair-queue unless you change it." +msgstr "Деякі політики вже містять інші вбудовані політики. Це випадок Shaper_: кожен з його класів використовує справедливу чергу, якщо ви її не зміните." #: ../../configuration/trafficpolicy/index.rst:342 msgid "Some policies can be combined, you will be able to embed_ a different policy that will be applied to a class of the main policy." -msgstr "Some policies can be combined, you will be able to embed_ a different policy that will be applied to a class of the main policy." +msgstr "Деякі політики можна комбінувати, ви зможете вбудувати іншу політику, яка буде застосована до класу основної політики." #: ../../configuration/system/proxy.rst:27 msgid "Some proxys require/support the \"basic\" HTTP authentication scheme as per :rfc:`7617`, thus a password can be configured." -msgstr "Some proxys require/support the \"basic\" HTTP authentication scheme as per :rfc:`7617`, thus a password can be configured." +msgstr "Деякі проксі вимагають/підтримують "базову" схему автентифікації HTTP відповідно до :rfc:`7617`, тому можна налаштувати пароль." #: ../../configuration/system/proxy.rst:22 msgid "Some proxys require/support the \"basic\" HTTP authentication scheme as per :rfc:`7617`, thus a username can be configured." -msgstr "Some proxys require/support the \"basic\" HTTP authentication scheme as per :rfc:`7617`, thus a username can be configured." +msgstr "Деякі проксі вимагають/підтримують «базову» схему автентифікації HTTP відповідно до :rfc:`7617`, таким чином можна налаштувати ім’я користувача." #: ../../configuration/interfaces/pppoe.rst:365 msgid "Some recent ISPs require you to build the PPPoE connection through a VLAN interface. One of those ISPs is e.g. Deutsche Telekom in Germany. VyOS can easily create a PPPoE session through an encapsulated VLAN interface. The following configuration will run your PPPoE connection through VLAN7 which is the default VLAN for Deutsche Telekom:" -msgstr "Some recent ISPs require you to build the PPPoE connection through a VLAN interface. One of those ISPs is e.g. Deutsche Telekom in Germany. VyOS can easily create a PPPoE session through an encapsulated VLAN interface. The following configuration will run your PPPoE connection through VLAN7 which is the default VLAN for Deutsche Telekom:" +msgstr "Деякі останні провайдери вимагають створення з’єднання PPPoE через інтерфейс VLAN. Одним із таких провайдерів є, наприклад, Deutsche Telekom у Німеччині. VyOS може легко створити сеанс PPPoE через інкапсульований інтерфейс VLAN. Наступна конфігурація запустить ваше з’єднання PPPoE через VLAN7, яка є VLAN за замовчуванням для Deutsche Telekom:" #: ../../configuration/service/webproxy.rst:397 msgid "Some services don't work correctly when being handled via a web proxy. So sometimes it is useful to bypass a transparent proxy:" -msgstr "Some services don't work correctly when being handled via a web proxy. So sometimes it is useful to bypass a transparent proxy:" +msgstr "Деякі служби не працюють належним чином під час обробки через веб-проксі. Тому іноді корисно обійти прозорий проксі:" #: ../../configuration/interfaces/wireguard.rst:396 msgid "Some users tend to connect their mobile devices using WireGuard to their VyOS router. To ease deployment one can generate a \"per mobile\" configuration from the VyOS CLI." -msgstr "Some users tend to connect their mobile devices using WireGuard to their VyOS router. To ease deployment one can generate a \"per mobile\" configuration from the VyOS CLI." +msgstr "Деякі користувачі схильні підключати свої мобільні пристрої за допомогою WireGuard до маршрутизатора VyOS. Щоб спростити розгортання, можна створити конфігурацію "на мобільний пристрій" із VyOS CLI." #: ../../configuration/interfaces/openvpn.rst:651 msgid "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." -msgstr "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." +msgstr "Іноді рядки параметрів у згенерованій конфігурації OpenVPN вимагають лапок. Це робиться за допомогою злому нашого генератора конфігурації. Ви можете передати лапки за допомогою оператора ``"``." -#: ../../configuration/service/dhcp-server.rst:703 +#: ../../configuration/service/dhcp-server.rst:764 msgid "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" -msgstr "Sort the output by the specified key. Possible keys: expires, iaid_duid, ip, last_comm, pool, remaining, state, type (default = ip)" +msgstr "Відсортуйте вихідні дані за вказаним ключем. Можливі ключі: expires, iaid_duid, ip, last_comm, pool, resting, state, type (за замовчуванням = ip)" -#: ../../configuration/service/dhcp-server.rst:491 +#: ../../configuration/service/dhcp-server.rst:550 msgid "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" -msgstr "Sort the output by the specified key. Possible keys: ip, hardware_address, state, start, end, remaining, pool, hostname (default = ip)" +msgstr "Відсортуйте вихідні дані за вказаним ключем. Можливі ключі: ip, hardware_address, стан, початок, кінець, залишок, пул, ім’я хоста (за замовчуванням = ip)" #: ../../configuration/nat/nat44.rst:238 msgid "Source Address" -msgstr "Source Address" +msgstr "Адреса джерела" #: ../../configuration/interfaces/vxlan.rst:67 msgid "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." -msgstr "Source IP address used for VXLAN underlay. This is mandatory when using VXLAN via L2VPN/EVPN." +msgstr "Вихідна IP-адреса, яка використовується для підкладки VXLAN. Це обов’язково при використанні VXLAN через L2VPN/EVPN." -#: ../../configuration/vpn/sstp.rst:268 +#: ../../configuration/service/ipoe-server.rst:152 +#: ../../configuration/service/ipoe-server.rst:208 +#: ../../configuration/service/pppoe-server.rst:114 +#: ../../configuration/service/pppoe-server.rst:170 +#: ../../configuration/vpn/l2tp.rst:157 +#: ../../configuration/vpn/l2tp.rst:213 +#: ../../configuration/vpn/pptp.rst:97 +#: ../../configuration/vpn/pptp.rst:153 +#: ../../configuration/vpn/sstp.rst:130 +#: ../../configuration/vpn/sstp.rst:186 msgid "Source IPv4 address used in all RADIUS server queires." -msgstr "Source IPv4 address used in all RADIUS server queires." +msgstr "Вихідна адреса IPv4 використовується в усіх запитах на сервер RADIUS." #: ../../configuration/loadbalancing/wan.rst:186 msgid "Source NAT rules" -msgstr "Source NAT rules" +msgstr "Правила вихідного NAT" #: ../../configuration/nat/nat66.rst:69 msgid "Source Prefix" -msgstr "Source Prefix" +msgstr "Префікс джерела" -#: ../../configuration/system/login.rst:276 +#: ../../configuration/system/login.rst:280 msgid "Source all connections to the RADIUS servers from given VRF `<name>`." -msgstr "Source all connections to the RADIUS servers from given VRF `<name>`." +msgstr "Використовуйте всі підключення до серверів RADIUS із заданого VRF `<name> `." -#: ../../configuration/system/login.rst:345 +#: ../../configuration/system/login.rst:349 msgid "Source all connections to the TACACS servers from given VRF `<name>`." -msgstr "Source all connections to the TACACS servers from given VRF `<name>`." +msgstr "Використовуйте всі підключення до серверів TACACS із заданого VRF `<name> `." #: ../../configuration/policy/route-map.rst:174 msgid "Source protocol to match." -msgstr "Source protocol to match." +msgstr "Вихідний протокол для відповідності." -#: ../../configuration/vpn/ipsec.rst:225 +#: ../../configuration/vpn/ipsec.rst:229 msgid "Source tunnel from dummy interface" msgstr "Source tunnel from dummy interface" #: ../../configuration/vpn/ipsec.rst:225 msgid "Source tunnel from loopbacks" -msgstr "Source tunnel from loopbacks" +msgstr "Вихідний тунель із замикань" #: ../../configuration/interfaces/bridge.rst:105 msgid "Spanning Tree Protocol forwarding `<delay>` in seconds (default: 15)." -msgstr "Spanning Tree Protocol forwarding `<delay>` in seconds (default: 15)." +msgstr "Пересилання за протоколом Spanning Tree `<delay> ` у секундах (за замовчуванням: 15)." #: ../../configuration/interfaces/bridge.rst:115 msgid "Spanning Tree Protocol hello advertisement `<interval>` in seconds (default: 2)." -msgstr "Spanning Tree Protocol hello advertisement `<interval>` in seconds (default: 2)." +msgstr "Протокол охоплюючого дерева, привіт, реклама `<interval> ` у секундах (за замовчуванням: 2)." #: ../../configuration/interfaces/bridge.rst:16 msgid "Spanning Tree Protocol is not enabled by default in VyOS. :ref:`stp` can be easily enabled if needed." -msgstr "Spanning Tree Protocol is not enabled by default in VyOS. :ref:`stp` can be easily enabled if needed." +msgstr "Протокол Spanning Tree не ввімкнено за замовчуванням у VyOS. :ref:`stp` можна легко ввімкнути за потреби." #: ../../configuration/interfaces/wireless.rst:209 msgid "Spatial Multiplexing Power Save (SMPS) settings" -msgstr "Spatial Multiplexing Power Save (SMPS) settings" +msgstr "Налаштування енергозбереження просторового мультиплексування (SMPS)." #: ../../configuration/vpn/dmvpn.rst:105 msgid "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." -msgstr "Specfying nhs makes all multicast packets to be repeated to each statically configured next hop." +msgstr "Якщо вказати nhs, усі багатоадресні пакети повторюватимуться для кожного статично налаштованого наступного переходу." -#: ../../configuration/vpn/sstp.rst:238 +#: ../../configuration/service/ipoe-server.rst:178 +#: ../../configuration/service/pppoe-server.rst:140 +#: ../../configuration/vpn/l2tp.rst:183 +#: ../../configuration/vpn/pptp.rst:123 +#: ../../configuration/vpn/sstp.rst:156 msgid "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" -msgstr "Specifies IP address for Dynamic Authorization Extension server (DM/CoA)" - -#: ../../configuration/vpn/sstp.rst:194 +msgstr "Вказує IP-адресу для сервера розширення динамічної авторизації (DM/CoA)" + +#: ../../configuration/service/pppoe-server.rst:470 +#: ../../configuration/vpn/l2tp.rst:424 +#: ../../configuration/vpn/pptp.rst:348 +#: ../../configuration/vpn/sstp.rst:382 +msgid "Specifies IPv4 negotiation preference." +msgstr "Specifies IPv4 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:345 +#: ../../configuration/vpn/l2tp.rst:289 +#: ../../configuration/vpn/pptp.rst:213 +#: ../../configuration/vpn/sstp.rst:247 +msgid "Specifies IPv6 negotiation preference." +msgstr "Specifies IPv6 negotiation preference." + +#: ../../configuration/service/pppoe-server.rst:552 +msgid "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" +msgstr "Specifies Service-Name to respond. If absent any Service-Name is acceptable and client’s Service-Name will be sent back. Also possible set multiple service-names: `sn1,sn2,sn3`" + +#: ../../configuration/service/pppoe-server.rst:502 +#: ../../configuration/vpn/l2tp.rst:456 +#: ../../configuration/vpn/pptp.rst:380 +#: ../../configuration/vpn/sstp.rst:414 +msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." +msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotiation preference." + +#: ../../configuration/vpn/sstp.rst:200 msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." -msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." +msgstr "Визначає параметр узгодження :abbr:`MPPE (Microsoft Point-to-Point Encryption)`." + +#: ../../configuration/service/ipoe-server.rst:81 +msgid "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." +msgstr "Specifies address to be used as server ip address if radius can assign only client address. In such case if client address is matched network and mask then specified address and mask will be used. You can specify multiple such options." -#: ../../configuration/vrf/index.rst:477 +#: ../../configuration/vrf/index.rst:496 msgid "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." -msgstr "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." +msgstr "Визначає необов’язкову карту маршрутів, яка буде застосована до маршрутів, імпортованих або експортованих між поточним одноадресним VRF і VPN." #: ../../configuration/service/dhcp-relay.rst:148 msgid "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." -msgstr "Specifies an upstream network `<interface>` from which replies from `<server>` and other relay agents will be accepted." +msgstr "Визначає вихідну мережу `<interface> ` з якого відповідає `<server> ` та інші агенти ретрансляції будуть прийняті." + +#: ../../configuration/service/pppoe-server.rst:388 +#: ../../configuration/vpn/l2tp.rst:332 +#: ../../configuration/vpn/pptp.rst:256 +#: ../../configuration/vpn/sstp.rst:290 +msgid "Specifies fixed or random interface identifier for IPv6. By default is fixed." +msgstr "Specifies fixed or random interface identifier for IPv6. By default is fixed." #: ../../configuration/service/webproxy.rst:173 msgid "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." -msgstr "Specifies how long squid assumes an externally validated username:password pair is valid for - in other words how often the helper program is called for that user. Set this low to force revalidation with short lived passwords." +msgstr "Визначає, як довго squid припускає, що пара ім’я користувача:пароль, підтверджена зовні, дійсна - іншими словами, як часто допоміжна програма викликається для цього користувача. Встановіть цей низький рівень, щоб примусово повторити перевірку з короткочасними паролями." #: ../../configuration/interfaces/vxlan.rst:89 msgid "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." msgstr "Specifies if unknown source link layer addresses and IP addresses are entered into the VXLAN device forwarding database." +#: ../../configuration/service/pppoe-server.rst:462 +#: ../../configuration/vpn/l2tp.rst:416 +#: ../../configuration/vpn/pptp.rst:340 +#: ../../configuration/vpn/sstp.rst:374 +msgid "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." +msgstr "Specifies number of interfaces to keep in cache. It means that don’t destroy interface after corresponding session is destroyed, instead place it to cache and use it later for new sessions repeatedly. This should reduce kernel-level interface creation/deletion rate lack. Default value is **0**." + #: ../../configuration/interfaces/bonding.rst:40 msgid "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" -msgstr "Specifies one of the bonding policies. The default is 802.3ad. Possible values are:" +msgstr "Визначає одну з політик зв’язування. Типовим є 802.3ad. Можливі значення:" + +#: ../../configuration/service/pppoe-server.rst:396 +#: ../../configuration/vpn/l2tp.rst:340 +#: ../../configuration/vpn/pptp.rst:264 +#: ../../configuration/vpn/sstp.rst:298 +msgid "Specifies peer interface identifier for IPv6. By default is fixed." +msgstr "Specifies peer interface identifier for IPv6. By default is fixed." #: ../../configuration/service/webproxy.rst:81 msgid "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." -msgstr "Specifies proxy service listening address. The listen address is the IP address on which the web proxy service listens for client requests." +msgstr "Вказує адресу прослуховування служби проксі. Адреса прослуховування – це IP-адреса, на якій служба веб-проксі прослуховує запити клієнта." -#: ../../configuration/vpn/sstp.rst:110 +#: ../../configuration/service/ipoe-server.rst:348 +msgid "Specifies relay agent IP addre" +msgstr "Specifies relay agent IP addre" + +#: ../../configuration/service/pppoe-server.rst:70 +#: ../../configuration/vpn/l2tp.rst:52 +#: ../../configuration/vpn/pptp.rst:54 +#: ../../configuration/vpn/sstp.rst:79 msgid "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." -msgstr "Specifies single `<gateway>` IP address to be used as local address of PPP interfaces." +msgstr "Визначає single `<gateway> ` IP-адреса, яка буде використовуватися як локальна адреса інтерфейсів PPP." #: ../../configuration/vpn/dmvpn.rst:56 msgid "Specifies that the :abbr:`NBMA (Non-broadcast multiple-access network)` addresses of the next hop servers are defined in the domain name nbma-domain-name. For each A record opennhrp creates a dynamic NHS entry." -msgstr "Specifies that the :abbr:`NBMA (Non-broadcast multiple-access network)` addresses of the next hop servers are defined in the domain name nbma-domain-name. For each A record opennhrp creates a dynamic NHS entry." +msgstr "Вказує, що :abbr:`NBMA (неширокомовна мережа множинного доступу)` адреси серверів наступного переходу визначені в доменному імені nbma-domain-name. Для кожного запису A opennhrp створює динамічний запис NHS." #: ../../configuration/interfaces/bonding.rst:245 msgid "Specifies the ARP link monitoring `<time>` in seconds." -msgstr "Specifies the ARP link monitoring `<time>` in seconds." +msgstr "Визначає моніторинг посилання ARP `<time> ` за секунди." #: ../../configuration/interfaces/bonding.rst:264 msgid "Specifies the IP addresses to use as ARP monitoring peers when :cfgcmd:`arp-monitor interval` option is > 0. These are the targets of the ARP request sent to determine the health of the link to the targets." -msgstr "Specifies the IP addresses to use as ARP monitoring peers when :cfgcmd:`arp-monitor interval` option is > 0. These are the targets of the ARP request sent to determine the health of the link to the targets." +msgstr "Визначає IP-адреси для використання як однорангових вузлів моніторингу ARP, коли параметр :cfgcmd:`arp-monitor interval` > 0. Це цілі запиту ARP, надісланого для визначення працездатності посилання на цілі." #: ../../configuration/service/ssh.rst:69 msgid "Specifies the available :abbr:`MAC (Message Authentication Code)` algorithms. The MAC algorithm is used in protocol version 2 for data integrity protection. Multiple algorithms can be provided." -msgstr "Specifies the available :abbr:`MAC (Message Authentication Code)` algorithms. The MAC algorithm is used in protocol version 2 for data integrity protection. Multiple algorithms can be provided." +msgstr "Визначає доступні алгоритми :abbr:`MAC (Message Authentication Code)`. Алгоритм MAC використовується у протоколі версії 2 для захисту цілісності даних. Можна надати кілька алгоритмів." #: ../../configuration/service/webproxy.rst:207 msgid "Specifies the base DN under which the users are located." -msgstr "Specifies the base DN under which the users are located." +msgstr "Визначає базове DN, під яким знаходяться користувачі." -#: ../../configuration/service/dhcp-server.rst:239 +#: ../../configuration/service/dhcp-server.rst:295 msgid "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." -msgstr "Specifies the clients subnet mask as per RFC 950. If unset, subnet declaration is used." +msgstr "Визначає маску підмережі клієнта відповідно до RFC 950. Якщо не встановлено, використовується декларація підмережі." #: ../../configuration/vpn/dmvpn.rst:69 #: ../../configuration/vpn/dmvpn.rst:155 msgid "Specifies the holding time for NHRP Registration Requests and Resolution Replies sent from this interface or shortcut-target. The holdtime is specified in seconds and defaults to two hours." -msgstr "Specifies the holding time for NHRP Registration Requests and Resolution Replies sent from this interface or shortcut-target. The holdtime is specified in seconds and defaults to two hours." +msgstr "Вказує час утримування для запитів на реєстрацію NHRP і відповідей на вирішення, надісланих із цього інтерфейсу або цільового ярлика. Час витримки вказується в секундах і за замовчуванням становить дві години." #: ../../configuration/system/flow-accounting.rst:132 msgid "Specifies the interval at which Netflow data will be sent to a collector. As per default, Netflow data will be sent every 60 seconds." -msgstr "Specifies the interval at which Netflow data will be sent to a collector. As per default, Netflow data will be sent every 60 seconds." +msgstr "Визначає інтервал, через який дані Netflow надсилатимуться до збирача. За умовчанням дані Netflow надсилатимуться кожні 60 секунд." #: ../../configuration/service/webproxy.rst:131 msgid "Specifies the maximum size of a reply body in KB, used to limit the reply size." -msgstr "Specifies the maximum size of a reply body in KB, used to limit the reply size." +msgstr "Визначає максимальний розмір тіла відповіді в КБ, який використовується для обмеження розміру відповіді." #: ../../configuration/interfaces/bonding.rst:129 msgid "Specifies the minimum number of links that must be active before asserting carrier. It is similar to the Cisco EtherChannel min-links feature. This allows setting the minimum number of member ports that must be up (link-up state) before marking the bond device as up (carrier on). This is useful for situations where higher level services such as clustering want to ensure a minimum number of low bandwidth links are active before switchover." -msgstr "Specifies the minimum number of links that must be active before asserting carrier. It is similar to the Cisco EtherChannel min-links feature. This allows setting the minimum number of member ports that must be up (link-up state) before marking the bond device as up (carrier on). This is useful for situations where higher level services such as clustering want to ensure a minimum number of low bandwidth links are active before switchover." +msgstr "Визначає мінімальну кількість посилань, які мають бути активними, перш ніж затверджувати перевізника. Це схоже на функцію мінімальних посилань Cisco EtherChannel. Це дозволяє встановити мінімальну кількість портів-учасників, які мають бути активними (стан підключення), перш ніж позначати зв’язувальний пристрій як активний (перевізник увімкнено). Це корисно в ситуаціях, коли служби вищого рівня, такі як кластеризація, хочуть забезпечити активність мінімальної кількості посилань з низькою пропускною здатністю перед перемиканням." #: ../../configuration/service/webproxy.rst:290 msgid "Specifies the name of the DN attribute that contains the username/login. Combined with the base DN to construct the users DN when no search filter is specified (`filter-expression`)." -msgstr "Specifies the name of the DN attribute that contains the username/login. Combined with the base DN to construct the users DN when no search filter is specified (`filter-expression`)." +msgstr "Визначає назву атрибута DN, який містить ім’я користувача/логін. У поєднанні з базовим DN для створення DN користувача, якщо не вказано пошуковий фільтр (`вираз фільтра`)." #: ../../configuration/interfaces/pseudo-ethernet.rst:59 msgid "Specifies the physical `<ethX>` Ethernet interface associated with a Pseudo Ethernet `<interface>`." -msgstr "Specifies the physical `<ethX>` Ethernet interface associated with a Pseudo Ethernet `<interface>`." +msgstr "Визначає фізичний `<ethX> ` Інтерфейс Ethernet, пов'язаний з Pseudo Ethernet `<interface> `." #: ../../configuration/vpn/sstp.rst:116 msgid "Specifies the port `<port>` that the SSTP port will listen on (default 443)." -msgstr "Specifies the port `<port>` that the SSTP port will listen on (default 443)." +msgstr "Визначає порт `<port> `, який прослуховуватиме порт SSTP (за замовчуванням 443)." #: ../../configuration/service/webproxy.rst:194 msgid "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." -msgstr "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." +msgstr "Визначає область захисту (так звану назву області), про яку потрібно повідомити клієнту для схеми автентифікації. Зазвичай це частина тексту, який користувач побачить, коли йому буде запропоновано ввести ім’я користувача та пароль." -#: ../../configuration/vrf/index.rst:452 +#: ../../configuration/vrf/index.rst:471 msgid "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." -msgstr "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." +msgstr "Визначає список цілей маршруту, який буде додано до маршруту (експорт) або список цілей маршруту для порівняння (імпорт) під час експорту/імпорту між поточним одноадресним VRF і VPN. RTLIST — це список маршрутів, розділених пробілами. цілі, які є розширеними значеннями спільноти BGP, як описано в атрибуті розширених спільнот." -#: ../../configuration/vrf/index.rst:445 +#: ../../configuration/vrf/index.rst:464 msgid "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." -msgstr "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." +msgstr "Визначає розрізнювач маршруту, який буде додано до маршруту, експортованого з поточного одноадресного VRF до VPN." -#: ../../configuration/vpn/sstp.rst:281 +#: ../../configuration/service/ipoe-server.rst:224 +#: ../../configuration/service/pppoe-server.rst:186 +#: ../../configuration/vpn/l2tp.rst:229 +#: ../../configuration/vpn/pptp.rst:169 +#: ../../configuration/vpn/sstp.rst:202 msgid "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." -msgstr "Specifies the vendor dictionary, dictionary needs to be in /usr/share/accel-ppp/radius." +msgstr "Визначає словник постачальника, словник має бути в /usr/share/accel-ppp/radius." -#: ../../configuration/vpn/sstp.rst:188 +#: ../../configuration/vpn/sstp.rst:194 msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." -msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used." +msgstr "Вказує час очікування в секундах для очікування будь-якої активності однорангового пристрою. Якщо вказано цей параметр, увімкнеться функція адаптивного відлуння lcp, а "lcp-echo-failure" не використовується." + +#: ../../configuration/service/pppoe-server.rst:490 +#: ../../configuration/vpn/l2tp.rst:444 +#: ../../configuration/vpn/pptp.rst:368 +#: ../../configuration/vpn/sstp.rst:402 +msgid "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." +msgstr "Specifies timeout in seconds to wait for any peer activity. If this option specified it turns on adaptive lcp echo functionality and \"lcp-echo-failure\" is not used. Default value is **0**." #: ../../configuration/interfaces/vxlan.rst:77 msgid "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." -msgstr "Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the internal FDB should be used." +msgstr "Визначає, чи слід використовувати зовнішню площину керування (наприклад, BGP L2VPN/EVPN) чи внутрішню FDB." #: ../../configuration/interfaces/vxlan.rst:94 msgid "Specifies whether the VXLAN device is capable of vni filtering." @@ -12120,32 +13513,51 @@ msgstr "Specifies whether the VXLAN device is capable of vni filtering." #: ../../configuration/protocols/ospf.rst:268 msgid "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." -msgstr "Specifies whether this NSSA border router will unconditionally translate Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are translated into Type-5 LSAs regardless of the translator state of other NSSA border routers. When role is Candidate, this router participates in the translator election to determine if it will perform the translations duties. When role is Never, this router will never translate Type-7 LSAs into Type-5 LSAs." +msgstr "Визначає, чи буде цей прикордонний маршрутизатор NSSA безумовно перетворювати LSA типу 7 у LSA типу 5. Якщо роль має значення «Завжди», LSA типу 7 перетворюються на LSA типу 5 незалежно від стану транслятора інших прикордонних маршрутизаторів NSSA. Коли роль є кандидатом, цей маршрутизатор бере участь у виборах перекладача, щоб визначити, чи виконуватиме він обов’язки перекладу. Якщо роль — Ніколи, цей маршрутизатор ніколи не переводитиме LSA типу 7 у LSA типу 5." -#: ../../configuration/vpn/sstp.rst:272 +#: ../../configuration/service/ipoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:217 +#: ../../configuration/vpn/pptp.rst:157 +#: ../../configuration/vpn/sstp.rst:190 msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." -msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is `Filter-Id`." +msgstr "Визначає, який атрибут сервера RADIUS містить інформацію про обмеження швидкості. Атрибутом за замовчуванням є `Ідентифікатор фільтра`." + +#: ../../configuration/service/pppoe-server.rst:174 +msgid "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." +msgstr "Specifies which RADIUS server attribute contains the rate limit information. The default attribute is ``Filter-Id``." + +#: ../../configuration/service/ipoe-server.rst:344 +msgid "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." +msgstr "Specify DHCPv4 relay IP address to pass requests to. If specified giaddr is also needed." #: ../../configuration/service/ssh.rst:45 msgid "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." -msgstr "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." +msgstr "Укажіть адресу прослуховування IPv4/IPv6 SSH-сервера. Можна визначити кілька адрес." -#: ../../configuration/firewall/ipv4.rst:401 +#: ../../configuration/service/ids.rst:51 +msgid "Specify IPv4 and/or IPv6 networks that should be protected/monitored." +msgstr "Specify IPv4 and/or IPv6 networks that should be protected/monitored." + +#: ../../configuration/service/ids.rst:38 +msgid "Specify IPv4 and/or IPv6 networks which are going to be excluded." +msgstr "Specify IPv4 and/or IPv6 networks which are going to be excluded." + +#: ../../configuration/firewall/ipv4.rst:424 #: ../../configuration/firewall/ipv6.rst:408 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." -msgstr "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." +msgstr "Укажіть повне доменне ім’я як джерело/адресат. Переконайтеся, що маршрутизатор може вирішити такий запит DNS." -#: ../../configuration/service/dhcp-server.rst:550 +#: ../../configuration/service/dhcp-server.rst:609 msgid "Specify a NIS+ server address for DHCPv6 clients." -msgstr "Specify a NIS+ server address for DHCPv6 clients." +msgstr "Укажіть адресу сервера NIS+ для клієнтів DHCPv6." -#: ../../configuration/service/dhcp-server.rst:545 +#: ../../configuration/service/dhcp-server.rst:604 msgid "Specify a NIS server address for DHCPv6 clients." -msgstr "Specify a NIS server address for DHCPv6 clients." +msgstr "Укажіть адресу сервера NIS для клієнтів DHCPv6." -#: ../../configuration/service/dhcp-server.rst:555 +#: ../../configuration/service/dhcp-server.rst:614 msgid "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." -msgstr "Specify a :abbr:`SIP (Session Initiation Protocol)` server by IPv6 address of Fully Qualified Domain Name for all DHCPv6 clients." +msgstr "Укажіть сервер :abbr:`SIP (Session Initiation Protocol)` за адресою IPv6 повного доменного імені для всіх клієнтів DHCPv6." #: ../../configuration/protocols/pim.rst:129 msgid "Specify a range of group addresses via a prefix-list that forces PIM to never do :abbr:`SSM (Source-Specific Multicast)` over." @@ -12153,101 +13565,117 @@ msgstr "Specify a range of group addresses via a prefix-list that forces PIM to #: ../../configuration/system/task-scheduler.rst:33 msgid "Specify absolute `<path>` to script which will be run when `<task>` is executed." -msgstr "Specify absolute `<path>` to script which will be run when `<task>` is executed." +msgstr "Вкажіть абсолютний `<path> ` до сценарію, який буде запущено, коли `<task> ` виконується." #: ../../configuration/service/ssh.rst:94 msgid "Specify allowed :abbr:`KEX (Key Exchange)` algorithms." -msgstr "Specify allowed :abbr:`KEX (Key Exchange)` algorithms." +msgstr "Вкажіть дозволені алгоритми :abbr:`KEX (обмін ключами)`." #: ../../configuration/protocols/bgp.rst:438 msgid "Specify an alternate AS for this BGP process when interacting with the specified peer or peer group. With no modifiers, the specified local-as is prepended to the received AS_PATH when receiving routing updates from the peer, and prepended to the outgoing AS_PATH (after the process local AS) when transmitting local routes to the peer." -msgstr "Specify an alternate AS for this BGP process when interacting with the specified peer or peer group. With no modifiers, the specified local-as is prepended to the received AS_PATH when receiving routing updates from the peer, and prepended to the outgoing AS_PATH (after the process local AS) when transmitting local routes to the peer." +msgstr "Укажіть альтернативну AS для цього процесу BGP під час взаємодії з указаним одноранговим вузлом або групою однорангових вузлів. Без модифікаторів указаний local-as додається до отриманого AS_PATH під час отримання оновлень маршрутизації від однорангового вузла та додається до вихідного AS_PATH (після процесу локальної AS) під час передачі локальних маршрутів до однорангового вузла." #: ../../configuration/service/webproxy.rst:263 msgid "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." -msgstr "Specify an alternate TCP port where the ldap server is listening if other than the default LDAP port 389." +msgstr "Укажіть альтернативний порт TCP, на якому прослуховує сервер ldap, якщо він відрізняється від стандартного порту LDAP 389." + +#: ../../configuration/service/dns.rst:348 +msgid "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." +msgstr "Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds." + +#: ../../configuration/service/ipoe-server.rst:339 +msgid "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" +msgstr "Specify local range of ip address to give to dhcp clients. First IP in range is router IP. If you need more customization use `client-ip-pool`" #: ../../configuration/service/ntp.rst:84 #: ../../configuration/service/ssh.rst:110 #: ../../configuration/system/syslog.rst:79 msgid "Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance." -msgstr "Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance." +msgstr "Укажіть назву екземпляра :abbr:`VRF (віртуальна маршрутизація та пересилання)`." #: ../../configuration/loadbalancing/wan.rst:141 msgid "Specify nexthop on the path to the destination, ``ipv4-address`` can be set to ``dhcp``" -msgstr "Specify nexthop on the path to the destination, ``ipv4-address`` can be set to ``dhcp``" +msgstr "Вкажіть nexthop на шляху до місця призначення, ``ipv4-address`` можна встановити на ``dhcp``" #: ../../configuration/system/default-route.rst:16 msgid "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." -msgstr "Specify static route into the routing table sending all non local traffic to the nexthop address `<address>`." +msgstr "Укажіть статичний маршрут у таблиці маршрутизації, надсилаючи весь нелокальний трафік на адресу наступного переходу `<address> `." -#: ../../configuration/system/login.rst:245 +#: ../../configuration/system/login.rst:249 msgid "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." -msgstr "Specify the IP `<address>` of the RADIUS server user with the pre-shared-secret given in `<secret>`." +msgstr "Вкажіть IP`<address> ` користувача сервера RADIUS із попереднім спільним секретом, указаним у `<secret> `." -#: ../../configuration/system/login.rst:314 +#: ../../configuration/system/login.rst:318 msgid "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." -msgstr "Specify the IP `<address>` of the TACACS server user with the pre-shared-secret given in `<secret>`." +msgstr "Вкажіть IP`<address> ` користувача сервера TACACS із попереднім спільним секретом, указаним у `<secret> `." #: ../../configuration/protocols/bgp.rst:257 msgid "Specify the IPv4 source address to use for the BGP session to this neighbor, may be specified as either an IPv4 address directly or as an interface name." -msgstr "Specify the IPv4 source address to use for the BGP session to this neighbor, may be specified as either an IPv4 address directly or as an interface name." +msgstr "Укажіть адресу джерела IPv4 для використання для сеансу BGP із цим сусідом; її можна вказати безпосередньо як адресу IPv4 або як ім’я інтерфейсу." #: ../../configuration/service/webproxy.rst:272 msgid "Specify the LDAP server to connect to." -msgstr "Specify the LDAP server to connect to." +msgstr "Вкажіть сервер LDAP для підключення." #: ../../_include/interface-dhcpv6-prefix-delegation.txt:50 msgid "Specify the identifier value of the site-level aggregator (SLA) on the interface. ID must be a decimal number greater then 0 which fits in the length of SLA IDs (see below)." -msgstr "Specify the identifier value of the site-level aggregator (SLA) on the interface. ID must be a decimal number greater then 0 which fits in the length of SLA IDs (see below)." +msgstr "Укажіть значення ідентифікатора агрегатора рівня сайту (SLA) в інтерфейсі. Ідентифікатор має бути десятковим числом, більшим за 0, яке відповідає довжині ідентифікаторів SLA (див. нижче)." #: ../../_include/interface-dhcpv6-prefix-delegation.txt:27 msgid "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." -msgstr "Specify the interface address used locally on the interface where the prefix has been delegated to. ID must be a decimal integer." +msgstr "Укажіть адресу інтерфейсу, яка використовується локально на інтерфейсі, якому було делеговано префікс. ID має бути десятковим цілим числом." -#: ../../configuration/loadbalancing/reverse-proxy.rst:167 +#: ../../configuration/loadbalancing/reverse-proxy.rst:207 msgid "Specify the minimum required TLS version 1.2 or 1.3" -msgstr "Specify the minimum required TLS version 1.2 or 1.3" +msgstr "Укажіть мінімально необхідну версію TLS 1.2 або 1.3" #: ../../configuration/system/login.rst:27 msgid "Specify the plaintext password user by user `<name>` on this system. The plaintext password will be automatically transferred into a secure hashed password and not saved anywhere in plaintext." -msgstr "Specify the plaintext password user by user `<name>` on this system. The plaintext password will be automatically transferred into a secure hashed password and not saved anywhere in plaintext." +msgstr "Укажіть відкритий текстовий пароль кожного користувача `<name> ` у цій системі. Пароль у відкритому вигляді буде автоматично перенесено в безпечний хешований пароль і ніде не буде збережено у відкритому тексті." #: ../../configuration/service/webproxy.rst:49 msgid "Specify the port used on which the proxy service is listening for requests. This port is the default port used for the specified listen-address." -msgstr "Specify the port used on which the proxy service is listening for requests. This port is the default port used for the specified listen-address." +msgstr "Укажіть порт, на якому проксі-служба прослуховує запити. Цей порт є портом за замовчуванням, який використовується для вказаної адреси прослуховування." #: ../../configuration/system/time-zone.rst:13 msgid "Specify the systems `<timezone>` as the Region/Location that best defines your location. For example, specifying US/Pacific sets the time zone to US Pacific time." -msgstr "Specify the systems `<timezone>` as the Region/Location that best defines your location. For example, specifying US/Pacific sets the time zone to US Pacific time." +msgstr "Вкажіть системи `<timezone> ` як регіон/розташування, що найкраще визначає ваше місцезнаходження. Наприклад, якщо вказати US/Pacific, для часового поясу встановлюється тихоокеанський час США." #: ../../configuration/system/task-scheduler.rst:16 msgid "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" -msgstr "Specify the time interval when `<task>` should be executed. The interval is specified as number with one of the following suffixes:" +msgstr "Укажіть інтервал часу, коли `<task> ` має бути виконано. Інтервал задається як число з одним із таких суфіксів:" -#: ../../configuration/service/dns.rst:269 +#: ../../configuration/service/dns.rst:283 msgid "Specify timeout / update interval to check if IP address changed." msgstr "Specify timeout / update interval to check if IP address changed." #: ../../configuration/service/ssh.rst:90 msgid "Specify timeout interval for keepalive message in seconds." -msgstr "Specify timeout interval for keepalive message in seconds." +msgstr "Укажіть інтервал очікування для повідомлення підтримки активності в секундах." + +#: ../../configuration/service/ipoe-server.rst:97 +msgid "Specify where interface is shared by multiple users or it is vlan-per-user." +msgstr "Specify where interface is shared by multiple users or it is vlan-per-user." #: ../../configuration/interfaces/vxlan.rst:191 msgid "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." -msgstr "Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a VyOS router running 1.2." +msgstr "Spine1 — це маршрутизатор Cisco IOS під керуванням версії 15.4, Leaf2 і Leaf3 — кожен маршрутизатор VyOS під керуванням 1.2." #: ../../configuration/service/monitoring.rst:83 msgid "Splunk" -msgstr "Splunk" +msgstr "Сплунк" #: ../../configuration/vpn/dmvpn.rst:235 msgid "Spoke" -msgstr "Spoke" +msgstr "Говорив" #: ../../configuration/service/webproxy.rst:9 msgid "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." -msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of uses, including speeding up a web server by caching repeated requests, caching web, DNS and other computer network lookups for a group of people sharing network resources, and aiding security by filtering traffic. Although primarily used for HTTP and FTP, Squid includes limited support for several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. Squid does not support the SOCKS protocol." +msgstr "Squid_ — веб-проксі HTTP, що кешує та пересилає. Він має широкий спектр застосувань, включаючи прискорення веб-сервера шляхом кешування повторюваних запитів, кешування пошуку в Інтернеті, DNS та інших комп’ютерних мережах для групи людей, які спільно використовують мережеві ресурси, а також сприяння безпеці шляхом фільтрації трафіку. Хоча в основному використовується для HTTP і FTP, Squid включає обмежену підтримку кількох інших протоколів, включаючи Internet Gopher, SSL, [6] TLS і HTTPS. Squid не підтримує протокол SOCKS." + +#: ../../configuration/service/https.rst:56 +msgid "Start Webserver in given VRF." +msgstr "Start Webserver in given VRF." #: ../../configuration/service/https.rst:56 msgid "Start Webserver in given VRF." @@ -12255,7 +13683,7 @@ msgstr "Start Webserver in given VRF." #: ../../configuration/nat/nat44.rst:813 msgid "Start by checking for IPSec SAs (Security Associations) with:" -msgstr "Start by checking for IPSec SAs (Security Associations) with:" +msgstr "Почніть із перевірки наявності IPSec SA (асоціації безпеки) за допомогою:" #: ../../configuration/firewall/zone.rst:9 msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall <https://docs.vyos.io/en/latest/configuration/firewall/general.html>`_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." @@ -12275,23 +13703,23 @@ msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure ca #: ../../configuration/service/console-server.rst:7 msgid "Starting of with VyOS 1.3 (equuleus) we added support for running VyOS as an Out-of-Band Management device which provides remote access by means of SSH to directly attached serial interfaces." -msgstr "Starting of with VyOS 1.3 (equuleus) we added support for running VyOS as an Out-of-Band Management device which provides remote access by means of SSH to directly attached serial interfaces." +msgstr "Починаючи з VyOS 1.3 (equuleus), ми додали підтримку запуску VyOS як пристрою позасмугового керування, який забезпечує віддалений доступ за допомогою SSH до безпосередньо підключених послідовних інтерфейсів." #: ../../configuration/service/mdns.rst:4 msgid "Starting with VyOS 1.2 a :abbr:`mDNS (Multicast DNS)` repeater functionality is provided. Additional information can be obtained from https://en.wikipedia.org/wiki/Multicast_DNS." -msgstr "Starting with VyOS 1.2 a :abbr:`mDNS (Multicast DNS)` repeater functionality is provided. Additional information can be obtained from https://en.wikipedia.org/wiki/Multicast_DNS." +msgstr "Починаючи з VyOS 1.2, надається функція повторювача :abbr:`mDNS (Multicast DNS)`. Додаткову інформацію можна отримати за адресою https://en.wikipedia.org/wiki/Multicast_DNS." #: ../../configuration/protocols/static.rst:5 msgid "Static" -msgstr "Static" +msgstr "Статичний" -#: ../../configuration/service/dhcp-server.rst:189 +#: ../../configuration/service/dhcp-server.rst:245 msgid "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." -msgstr "Static DHCP IP address assign to host identified by `<description>`. IP address must be inside the `<subnet>` which is defined but can be outside the dynamic range created with :cfgcmd:`set service dhcp-server shared-network-name <name> subnet <subnet> range <n>`. If no ip-address is specified, an IP from the dynamic pool is used." +msgstr "Статична IP-адреса DHCP, призначена хосту, позначеному `<description> `. IP-адреса має бути всередині `<subnet> ` який визначено, але може бути за межами динамічного діапазону, створеного за допомогою :cfgcmd:`set service dhcp-server shared-network-name<name> підмережа<subnet> діапазон<n> `. Якщо ip-адреса не вказана, використовується IP-адреса з динамічного пулу." #: ../../configuration/system/host-name.rst:45 msgid "Static Hostname Mapping" -msgstr "Static Hostname Mapping" +msgstr "Статичне відображення імен хостів" #: ../../configuration/interfaces/macsec.rst:48 msgid "Static Keys" @@ -12299,69 +13727,69 @@ msgstr "Static Keys" #: ../../configuration/protocols/static.rst:20 msgid "Static Routes" -msgstr "Static Routes" +msgstr "Статичні маршрути" #: ../../configuration/interfaces/openvpn.rst:235 msgid "Static Routing:" -msgstr "Static Routing:" +msgstr "Статична маршрутизація:" #: ../../configuration/interfaces/openvpn.rst:63 msgid "Static Routing or other dynamic routing protocols can be used over the vtun interface" -msgstr "Static Routing or other dynamic routing protocols can be used over the vtun interface" +msgstr "Через інтерфейс vtun можна використовувати статичну маршрутизацію або інші протоколи динамічної маршрутизації" #: ../../configuration/interfaces/macsec.rst:49 msgid "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." msgstr "Static :abbr:`SAK (Secure Authentication Key)` mode can be configured manually on each device wishing to use MACsec. Keys must be set statically on all devices for traffic to flow properly. Key rotation is dependent on the administrator updating all keys manually across connected devices. Static SAK mode can not be used with MKA." -#: ../../configuration/service/dhcp-server.rst:174 -#: ../../configuration/service/dhcp-server.rst:621 +#: ../../configuration/service/dhcp-server.rst:224 +#: ../../configuration/service/dhcp-server.rst:682 msgid "Static mappings" -msgstr "Static mappings" +msgstr "Статичні відображення" -#: ../../configuration/service/dhcp-server.rst:460 -#: ../../configuration/service/dhcp-server.rst:694 +#: ../../configuration/service/dhcp-server.rst:519 +#: ../../configuration/service/dhcp-server.rst:755 msgid "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." -msgstr "Static mappings aren't shown. To show all states, use ``show dhcp server leases state all``." +msgstr "Статичні відображення не відображаються. Щоб показати всі стани, скористайтеся командою ``show dhcp server leases state all``." #: ../../configuration/protocols/static.rst:7 msgid "Static routes are manually configured routes, which, in general, cannot be updated dynamically from information VyOS learns about the network topology from other routing protocols. However, if a link fails, the router will remove routes, including static routes, from the :abbr:`RIPB (Routing Information Base)` that used this interface to reach the next hop. In general, static routes should only be used for very simple network topologies, or to override the behavior of a dynamic routing protocol for a small number of routes. The collection of all routes the router has learned from its configuration or from its dynamic routing protocols is stored in the RIB. Unicast routes are directly used to determine the forwarding table used for unicast packet forwarding." -msgstr "Static routes are manually configured routes, which, in general, cannot be updated dynamically from information VyOS learns about the network topology from other routing protocols. However, if a link fails, the router will remove routes, including static routes, from the :abbr:`RIPB (Routing Information Base)` that used this interface to reach the next hop. In general, static routes should only be used for very simple network topologies, or to override the behavior of a dynamic routing protocol for a small number of routes. The collection of all routes the router has learned from its configuration or from its dynamic routing protocols is stored in the RIB. Unicast routes are directly used to determine the forwarding table used for unicast packet forwarding." +msgstr "Статичні маршрути – це налаштовані вручну маршрути, які, як правило, не можна динамічно оновлювати на основі інформації, яку VyOS отримує про топологію мережі з інших протоколів маршрутизації. Однак, якщо зв’язок не вдається, маршрутизатор видалить маршрути, включно зі статичними маршрутами, з :abbr:`RIPB (Routing Information Base)`, який використовував цей інтерфейс для досягнення наступного переходу. Загалом, статичні маршрути слід використовувати лише для дуже простих мережевих топологій або для заміни поведінки динамічного протоколу маршрутизації для невеликої кількості маршрутів. Набір усіх маршрутів, отриманих маршрутизатором із його конфігурації або протоколів динамічної маршрутизації, зберігається в RIB. Одноадресні маршрути безпосередньо використовуються для визначення таблиці пересилання, що використовується для пересилання одноадресних пакетів." #: ../../configuration/interfaces/openvpn.rst:237 msgid "Static routes can be configured referencing the tunnel interface; for example, the local router will use a network of 10.0.0.0/16, while the remote has a network of 10.1.0.0/16:" -msgstr "Static routes can be configured referencing the tunnel interface; for example, the local router will use a network of 10.0.0.0/16, while the remote has a network of 10.1.0.0/16:" +msgstr "Статичні маршрути можна налаштувати з посиланням на інтерфейс тунелю; наприклад, локальний маршрутизатор використовуватиме мережу 10.0.0.0/16, а віддалений — мережу 10.1.0.0/16:" #: ../../configuration/interfaces/wireless.rst:298 msgid "Station supports receiving VHT variant HT Control field" -msgstr "Station supports receiving VHT variant HT Control field" +msgstr "Станція підтримує поле керування VHT варіанту HT" #: ../../configuration/interfaces/wireguard.rst:341 msgid "Status" -msgstr "Status" +msgstr "Статус" #: ../../configuration/loadbalancing/wan.rst:200 msgid "Sticky Connections" -msgstr "Sticky Connections" +msgstr "Липкі з'єднання" #: ../../configuration/protocols/bgp.rst:397 msgid "Storage of route updates uses memory. If you enable soft reconfiguration inbound for multiple neighbors, the amount of memory used can become significant." -msgstr "Storage of route updates uses memory. If you enable soft reconfiguration inbound for multiple neighbors, the amount of memory used can become significant." +msgstr "Зберігання оновлень маршруту використовує пам'ять. Якщо ви ввімкнете м’яку реконфігурацію вхідного зв’язку для кількох сусідів, обсяг використаної пам’яті може стати значним." #: ../../configuration/trafficpolicy/index.rst:82 msgid "Suffixes" -msgstr "Suffixes" +msgstr "Суфікси" #: ../../configuration/protocols/ospf.rst:483 msgid "Summarisation starts only after this delay timer expiry." -msgstr "Summarisation starts only after this delay timer expiry." +msgstr "Підведення підсумків починається лише після закінчення цього таймера затримки." #: ../../configuration/interfaces/wwan.rst:307 msgid "Supported Modules" -msgstr "Supported Modules" +msgstr "Підтримувані модулі" #: ../../configuration/interfaces/wireless.rst:150 msgid "Supported channel width set." -msgstr "Supported channel width set." +msgstr "Набір підтримуваної ширини каналу." #: ../../configuration/system/frr.rst:30 msgid "Supported daemons:" @@ -12369,59 +13797,59 @@ msgstr "Supported daemons:" #: ../../configuration/service/router-advert.rst:11 msgid "Supported interface types:" -msgstr "Supported interface types:" +msgstr "Підтримувані типи інтерфейсів:" #: ../../configuration/service/ssh.rst:198 msgid "Supported remote protocols are FTP, FTPS, HTTP, HTTPS, SCP/SFTP and TFTP." -msgstr "Supported remote protocols are FTP, FTPS, HTTP, HTTPS, SCP/SFTP and TFTP." +msgstr "Підтримувані віддалені протоколи: FTP, FTPS, HTTP, HTTPS, SCP/SFTP і TFTP." #: ../../configuration/protocols/rip.rst:17 msgid "Supported versions of RIP are:" -msgstr "Supported versions of RIP are:" +msgstr "Підтримувані версії RIP:" #: ../../configuration/protocols/ospf.rst:528 #: ../../configuration/protocols/ospf.rst:1240 msgid "Supports as HELPER for configured grace period." -msgstr "Supports as HELPER for configured grace period." +msgstr "Підтримується як ПОМІЧНИК протягом налаштованого пільгового періоду." -#: ../../configuration/vpn/ipsec.rst:178 +#: ../../configuration/vpn/ipsec.rst:182 msgid "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" -msgstr "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" +msgstr "Припустімо, що ЛІВИЙ маршрутизатор має зовнішню адресу 192.0.2.10 на своєму інтерфейсі eth0, а ПРАВИЙ маршрутизатор – 203.0.113.45" #: ../../configuration/interfaces/openvpn.rst:338 msgid "Suppose you want to use 10.23.1.0/24 network for client tunnel endpoints and all client subnets belong to 10.23.0.0/20. All clients need access to the 192.168.0.0/16 network." -msgstr "Suppose you want to use 10.23.1.0/24 network for client tunnel endpoints and all client subnets belong to 10.23.0.0/20. All clients need access to the 192.168.0.0/16 network." +msgstr "Припустімо, ви хочете використовувати мережу 10.23.1.0/24 для кінцевих точок клієнтського тунелю, і всі клієнтські підмережі належать до 10.23.0.0/20. Усім клієнтам потрібен доступ до мережі 192.168.0.0/16." #: ../../configuration/protocols/bgp.rst:283 msgid "Suppress sending Capability Negotiation as OPEN message optional parameter to the peer. This command only affects the peer is configured other than IPv4 unicast configuration." -msgstr "Suppress sending Capability Negotiation as OPEN message optional parameter to the peer. This command only affects the peer is configured other than IPv4 unicast configuration." +msgstr "Припинити надсилання узгодження можливостей як необов’язковий параметр повідомлення OPEN однорангові. Ця команда впливає лише на однорангову мережу, налаштовану за винятком одноадресної конфігурації IPv4." #: ../../configuration/vpn/dmvpn.rst:108 msgid "Synamic instructs to forward to all peers which we have a direct connection with. Alternatively, you can specify the directive multiple times for each protocol-address the multicast traffic should be sent to." -msgstr "Synamic instructs to forward to all peers which we have a direct connection with. Alternatively, you can specify the directive multiple times for each protocol-address the multicast traffic should be sent to." +msgstr "Synamic дає вказівку пересилати всім пірам, з якими ми маємо пряме з’єднання. Крім того, ви можете вказати директиву кілька разів для кожної адреси протоколу, на яку має надсилатися багатоадресний трафік." #: ../../configuration/highavailability/index.rst:108 msgid "Sync groups" -msgstr "Sync groups" +msgstr "Синхронізація груп" -#: ../../configuration/firewall/ipv4.rst:911 +#: ../../configuration/firewall/ipv4.rst:934 #: ../../configuration/firewall/ipv6.rst:920 msgid "Synproxy" msgstr "Synproxy" -#: ../../configuration/firewall/ipv4.rst:912 +#: ../../configuration/firewall/ipv4.rst:935 #: ../../configuration/firewall/ipv6.rst:921 msgid "Synproxy connections" msgstr "Synproxy connections" -#: ../../configuration/firewall/ipv4.rst:929 +#: ../../configuration/firewall/ipv4.rst:952 #: ../../configuration/firewall/ipv6.rst:938 msgid "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" msgstr "Synproxy relies on syncookies and TCP timestamps, ensure these are enabled" #: ../../configuration/interfaces/pppoe.rst:340 msgid "Syntax has changed from VyOS 1.2 (crux) and it will be automatically migrated during an upgrade." -msgstr "Syntax has changed from VyOS 1.2 (crux) and it will be automatically migrated during an upgrade." +msgstr "Синтаксис змінився порівняно з VyOS 1.2 (суть), і його буде автоматично перенесено під час оновлення." #: ../../configuration/system/sysctl.rst:5 msgid "Sysctl" @@ -12429,113 +13857,113 @@ msgstr "Sysctl" #: ../../configuration/system/syslog.rst:5 msgid "Syslog" -msgstr "Syslog" +msgstr "Системний журнал" #: ../../configuration/system/syslog.rst:16 msgid "Syslog supports logging to multiple targets, those targets could be a plain file on your VyOS installation itself, a serial console or a remote syslog server which is reached via :abbr:`IP (Internet Protocol)` UDP/TCP." -msgstr "Syslog supports logging to multiple targets, those targets could be a plain file on your VyOS installation itself, a serial console or a remote syslog server which is reached via :abbr:`IP (Internet Protocol)` UDP/TCP." +msgstr "Syslog підтримує ведення журналу в кількох цілях, ці цільові файли можуть бути звичайним файлом у вашій інсталяції VyOS, послідовною консоллю або віддаленим сервером syslog, доступ до якого здійснюється через :abbr:`IP (Інтернет-протокол)` UDP/TCP." #: ../../configuration/system/syslog.rst:48 msgid "Syslog uses logrotate to rotate logiles after a number of gives bytes. We keep as many as `<number>` rotated file before they are deleted on the system." -msgstr "Syslog uses logrotate to rotate logiles after a number of gives bytes. We keep as many as `<number>` rotated file before they are deleted on the system." +msgstr "Syslog використовує logrotate для обертання логічних файлів після певної кількості наданих байтів. Зберігаємо стільки, скільки `<number> ` повернуті файли, перш ніж їх буде видалено в системі." #: ../../configuration/system/syslog.rst:42 msgid "Syslog will write `<size>` kilobytes into the file specified by `<filename>`. After this limit has been reached, the custom file is \"rotated\" by logrotate and a new custom file is created." -msgstr "Syslog will write `<size>` kilobytes into the file specified by `<filename>`. After this limit has been reached, the custom file is \"rotated\" by logrotate and a new custom file is created." +msgstr "Системний журнал напише `<size> ` кілобайтів у файл, визначений `<filename> `. Після досягнення цієї межі настроюваний файл «обертається» за допомогою logrotate і створюється новий настроюваний файл." #: ../../configuration/system/index.rst:3 msgid "System" -msgstr "System" +msgstr "система" #: ../../configuration/system/name-server.rst:5 msgid "System DNS" -msgstr "System DNS" +msgstr "Системний DNS" #: ../../configuration/system/lcd.rst:5 msgid "System Display (LCD)" -msgstr "System Display (LCD)" +msgstr "Системний дисплей (LCD)" #: ../../configuration/service/lldp.rst:26 msgid "System Name and Description" -msgstr "System Name and Description" +msgstr "Назва та опис системи" #: ../../configuration/system/proxy.rst:5 msgid "System Proxy" -msgstr "System Proxy" +msgstr "Системний проксі" #: ../../configuration/service/lldp.rst:30 msgid "System capabilities (switching, routing, etc.)" -msgstr "System capabilities (switching, routing, etc.)" +msgstr "Можливості системи (комутація, маршрутизація тощо)" #: ../../configuration/system/ip.rst:6 #: ../../configuration/system/ipv6.rst:6 msgid "System configuration commands" -msgstr "System configuration commands" +msgstr "Команди налаштування системи" #: ../../configuration/system/syslog.rst:118 msgid "System daemons" -msgstr "System daemons" +msgstr "Системні демони" #: ../../configuration/protocols/isis.rst:57 msgid "System identifier: ``1921.6800.1002`` - for system idetifiers we recommend to use IP address or MAC address of the router itself. The way to construct this is to keep all of the zeroes of the router IP address, and then change the periods from being every three numbers to every four numbers. The address that is listed here is ``192.168.1.2``, which if expanded will turn into ``192.168.001.002``. Then all one has to do is move the dots to have four numbers instead of three. This gives us ``1921.6800.1002``." -msgstr "System identifier: ``1921.6800.1002`` - for system idetifiers we recommend to use IP address or MAC address of the router itself. The way to construct this is to keep all of the zeroes of the router IP address, and then change the periods from being every three numbers to every four numbers. The address that is listed here is ``192.168.1.2``, which if expanded will turn into ``192.168.001.002``. Then all one has to do is move the dots to have four numbers instead of three. This gives us ``1921.6800.1002``." +msgstr "Ідентифікатор системи: ``1921.6800.1002`` - для ідентифікаторів системи рекомендуємо використовувати IP-адресу або MAC-адресу самого маршрутизатора. Спосіб побудови цього полягає в тому, щоб зберегти всі нулі IP-адреси маршрутизатора, а потім змінити періоди з кожні три числа на кожні чотири числа. Тут указана адреса ``192.168.1.2``, яка, якщо її розгорнути, перетвориться на ``192.168.001.002``. Тоді все, що потрібно зробити, це пересунути крапки, щоб отримати чотири числа замість трьох. Це дає нам ``1921.6800.1002``." #: ../../configuration/system/syslog.rst:171 msgid "System is unusable - a panic condition" -msgstr "System is unusable - a panic condition" +msgstr "Система непридатна - панічний стан" -#: ../../configuration/system/login.rst:299 +#: ../../configuration/system/login.rst:303 msgid "TACACS+" msgstr "TACACS+" -#: ../../configuration/system/login.rst:418 +#: ../../configuration/system/login.rst:422 msgid "TACACS Example" -msgstr "TACACS Example" +msgstr "Приклад TACACS" -#: ../../configuration/system/login.rst:305 +#: ../../configuration/system/login.rst:309 msgid "TACACS is defined in :rfc:`8907`." -msgstr "TACACS is defined in :rfc:`8907`." +msgstr "TACACS визначено в :rfc:`8907`." -#: ../../configuration/system/login.rst:335 +#: ../../configuration/system/login.rst:339 msgid "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." -msgstr "TACACS servers could be hardened by only allowing certain IP addresses to connect. As of this the source address of each TACACS query can be configured." +msgstr "Сервери TACACS можна посилити, дозволивши підключення лише певним IP-адресам. З цього моменту можна налаштувати адресу джерела кожного запиту TACACS." -#: ../../configuration/protocols/static.rst:140 +#: ../../configuration/protocols/static.rst:173 #: ../../configuration/system/flow-accounting.rst:83 msgid "TBD" -msgstr "TBD" +msgstr "Уточнюється" #: ../../configuration/vrf/index.rst:40 msgid "TCP & UDP services running in the default VRF context (ie., not bound to any VRF device) can work across all VRF domains by enabling this option." -msgstr "TCP & UDP services running in the default VRF context (ie., not bound to any VRF device) can work across all VRF domains by enabling this option." +msgstr "Служби TCP і UDP, що працюють у контексті VRF за замовчуванням (тобто не прив’язані до жодного пристрою VRF), можуть працювати в усіх доменах VRF, увімкнувши цей параметр." #: ../../configuration/service/tftp-server.rst:5 msgid "TFTP Server" -msgstr "TFTP Server" +msgstr "Сервер TFTP" #: ../../configuration/protocols/ospf.rst:489 msgid "Tag is the optional parameter. If tag configured Summary route will be originated with the configured tag." -msgstr "Tag is the optional parameter. If tag configured Summary route will be originated with the configured tag." +msgstr "Тег є необов'язковим параметром. Якщо тег налаштовано, підсумковий маршрут буде створено за допомогою налаштованого тегу." #: ../../configuration/system/task-scheduler.rst:5 msgid "Task Scheduler" -msgstr "Task Scheduler" +msgstr "Планувальник завдань" #: ../../configuration/service/monitoring.rst:107 msgid "Telegraf" -msgstr "Telegraf" +msgstr "Телеграф" #: ../../configuration/service/monitoring.rst:6 msgid "Telegraf output plugin azure-data-explorer_" -msgstr "Telegraf output plugin azure-data-explorer_" +msgstr "Плагін виводу Telegraf azure-data-explorer_" #: ../../configuration/service/monitoring.rst:39 msgid "Telegraf output plugin prometheus-client_" -msgstr "Telegraf output plugin prometheus-client_" +msgstr "Плагін виводу Telegraf prometheus-client_" #: ../../configuration/service/monitoring.rst:84 msgid "Telegraf output plugin splunk_. HTTP Event Collector." -msgstr "Telegraf output plugin splunk_. HTTP Event Collector." +msgstr "Плагін виведення Telegraf splunk_. Збирач подій HTTP." #: ../../configuration/protocols/pim.rst:157 msgid "Tell PIM that we would not like to use this interface to process bootstrap messages." @@ -12547,371 +13975,411 @@ msgstr "Tell PIM that we would not like to use this interface to process unicast #: ../../configuration/service/router-advert.rst:1 msgid "Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for autoconfiguration of other (non-address) information" -msgstr "Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for autoconfiguration of other (non-address) information" +msgstr "Повідомте хостам використовувати протокол адміністрування (тобто DHCP) для автоматичного налаштування іншої (не адресної) інформації" #: ../../configuration/service/router-advert.rst:1 msgid "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" -msgstr "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" +msgstr "Повідомте хостам використовувати адміністрований протокол стану (тобто DHCP) для автоконфігурації" -#: ../../configuration/vpn/sstp.rst:227 +#: ../../configuration/service/ipoe-server.rst:170 +#: ../../configuration/service/pppoe-server.rst:132 +#: ../../configuration/vpn/l2tp.rst:175 +#: ../../configuration/vpn/pptp.rst:115 +#: ../../configuration/vpn/sstp.rst:148 msgid "Temporary disable this RADIUS server." -msgstr "Temporary disable this RADIUS server." +msgstr "Тимчасово вимкніть цей сервер RADIUS." -#: ../../configuration/system/login.rst:258 +#: ../../configuration/system/login.rst:262 msgid "Temporary disable this RADIUS server. It won't be queried." -msgstr "Temporary disable this RADIUS server. It won't be queried." +msgstr "Тимчасово вимкніть цей сервер RADIUS. Його не запитуватимуть." -#: ../../configuration/system/login.rst:327 +#: ../../configuration/system/login.rst:331 msgid "Temporary disable this TACACS server. It won't be queried." -msgstr "Temporary disable this TACACS server. It won't be queried." +msgstr "Тимчасово вимкніть цей сервер TACACS. Його не запитуватимуть." -#: ../../configuration/loadbalancing/reverse-proxy.rst:245 +#: ../../configuration/loadbalancing/reverse-proxy.rst:286 msgid "Terminate SSL" -msgstr "Terminate SSL" +msgstr "Завершити SSL" #: ../../configuration/interfaces/pppoe.rst:318 msgid "Test connecting given connection-oriented interface. `<interface>` can be ``pppoe0`` as the example." -msgstr "Test connecting given connection-oriented interface. `<interface>` can be ``pppoe0`` as the example." +msgstr "Перевірте підключення заданого інтерфейсу, орієнтованого на підключення. `<interface> ` може бути ``pppoe0`` як приклад." #: ../../configuration/interfaces/sstp-client.rst:149 msgid "Test connecting given connection-oriented interface. `<interface>` can be ``sstpc0`` as the example." -msgstr "Test connecting given connection-oriented interface. `<interface>` can be ``sstpc0`` as the example." +msgstr "Перевірте підключення заданого інтерфейсу, орієнтованого на підключення. `<interface> ` може бути ``sstpc0`` як приклад." #: ../../configuration/interfaces/pppoe.rst:313 msgid "Test disconnecting given connection-oriented interface. `<interface>` can be ``pppoe0`` as the example." -msgstr "Test disconnecting given connection-oriented interface. `<interface>` can be ``pppoe0`` as the example." +msgstr "Перевірте відключення даного інтерфейсу, орієнтованого на підключення. `<interface> ` може бути ``pppoe0`` як приклад." #: ../../configuration/interfaces/sstp-client.rst:144 msgid "Test disconnecting given connection-oriented interface. `<interface>` can be ``sstpc0`` as the example." -msgstr "Test disconnecting given connection-oriented interface. `<interface>` can be ``sstpc0`` as the example." +msgstr "Перевірте відключення даного інтерфейсу, орієнтованого на підключення. `<interface> ` може бути ``sstpc0`` як приклад." #: ../../configuration/nat/nat64.rst:70 msgid "Test from the IPv6 only client:" msgstr "Test from the IPv6 only client:" -#: ../../configuration/vpn/sstp.rst:305 +#: ../../configuration/vpn/sstp.rst:374 msgid "Testing SSTP" -msgstr "Testing SSTP" +msgstr "Тестування SSTP" #: ../../configuration/nat/nat44.rst:808 msgid "Testing and Validation" -msgstr "Testing and Validation" +msgstr "Тестування та валідація" #: ../../configuration/interfaces/vxlan.rst:146 msgid "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." -msgstr "Thanks to this discovery, any subsequent traffic between PC4 and PC5 will not be using the multicast-address between the leaves as they both know behind which Leaf the PCs are connected. This saves traffic as less multicast packets sent reduces the load on the network, which improves scalability when more leaves are added." +msgstr "Завдяки цьому відкриттю будь-який подальший трафік між PC4 і PC5 не використовуватиме багатоадресну адресу між листами, оскільки вони обидва знають, за яким листом підключені ПК. Це економить трафік, оскільки менше надісланих багатоадресних пакетів зменшує навантаження на мережу, що покращує масштабованість, коли додається більше листів." -#: ../../configuration/trafficpolicy/index.rst:1194 +#: ../../configuration/trafficpolicy/index.rst:1262 msgid "That is how it is possible to do the so-called \"ingress shaping\"." -msgstr "That is how it is possible to do the so-called \"ingress shaping\"." +msgstr "Таким чином можна зробити так зване «вхідне формування»." #: ../../configuration/nat/nat44.rst:828 msgid "That looks good - we defined 2 tunnels and they're both up and running." -msgstr "That looks good - we defined 2 tunnels and they're both up and running." +msgstr "Це виглядає добре – ми визначили 2 тунелі, і вони обидва запущені." #: ../../configuration/interfaces/bonding.rst:247 msgid "The ARP monitor works by periodically checking the slave devices to determine whether they have sent or received traffic recently (the precise criteria depends upon the bonding mode, and the state of the slave). Regular traffic is generated via ARP probes issued for the addresses specified by the :cfgcmd:`arp-monitor target` option." -msgstr "The ARP monitor works by periodically checking the slave devices to determine whether they have sent or received traffic recently (the precise criteria depends upon the bonding mode, and the state of the slave). Regular traffic is generated via ARP probes issued for the addresses specified by the :cfgcmd:`arp-monitor target` option." +msgstr "Монітор ARP працює шляхом періодичної перевірки підлеглих пристроїв, щоб визначити, надсилали вони чи отримували трафік останнім часом (точні критерії залежать від режиму з’єднання та стану підлеглого пристрою). Звичайний трафік генерується за допомогою зондів ARP, виданих для адрес, указаних параметром :cfgcmd:`arp-monitor target`." #: ../../configuration/nat/nat44.rst:746 msgid "The ASP has documented their IPSec requirements:" -msgstr "The ASP has documented their IPSec requirements:" +msgstr "ASP задокументував свої вимоги до IPSec:" -#: ../../configuration/protocols/rpki.rst:82 +#: ../../configuration/protocols/rpki.rst:80 msgid "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." -msgstr "The BGP router can connect to one or more RPKI cache servers to receive validated prefix to origin AS mappings. Advanced failover can be implemented by server sockets with different preference values." +msgstr "Маршрутизатор BGP може з’єднуватися з одним або декількома кеш-серверами RPKI, щоб отримати перевірений префікс до зіставлення джерела AS. Розширене відновлення після відмови може бути реалізоване сокетами сервера з різними значеннями параметрів." -#: ../../configuration/vrf/index.rst:94 +#: ../../configuration/vrf/index.rst:113 msgid "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." -msgstr "The CLI configuration is same as mentioned in above articles. The only difference is, that each routing protocol used, must be prefixed with the `vrf name <name>` command." +msgstr "Конфігурація CLI така ж, як згадано в статтях вище. Єдина відмінність полягає в тому, що перед кожним використовуваним протоколом маршрутизації має бути ім’я vrf.<name> ` команда." #: ../../configuration/protocols/isis.rst:50 msgid "The CLNS address consists of the following parts:" -msgstr "The CLNS address consists of the following parts:" +msgstr "Адреса CLNS складається з таких частин:" #: ../../_include/interface-dhcpv6-options.txt:4 msgid "The DHCP unique identifier (DUID) is used by a client to get an IP address from a DHCPv6 server. It has a 2-byte DUID type field, and a variable-length identifier field up to 128 bytes. Its actual length depends on its type. The server compares the DUID with its database and delivers configuration data (address, lease times, DNS servers, etc.) to the client." -msgstr "The DHCP unique identifier (DUID) is used by a client to get an IP address from a DHCPv6 server. It has a 2-byte DUID type field, and a variable-length identifier field up to 128 bytes. Its actual length depends on its type. The server compares the DUID with its database and delivers configuration data (address, lease times, DNS servers, etc.) to the client." +msgstr "Унікальний ідентифікатор DHCP (DUID) використовується клієнтом для отримання IP-адреси від сервера DHCPv6. Він має 2-байтове поле типу DUID і поле ідентифікатора змінної довжини до 128 байт. Його фактична довжина залежить від його типу. Сервер порівнює DUID зі своєю базою даних і передає дані конфігурації (адреса, час оренди, DNS-сервери тощо) клієнту." #: ../../configuration/service/webproxy.rst:216 msgid "The DN and password to bind as while performing searches." -msgstr "The DN and password to bind as while performing searches." +msgstr "DN і пароль для прив’язки під час виконання пошуку." #: ../../configuration/service/webproxy.rst:238 msgid "The DN and password to bind as while performing searches. As the password needs to be printed in plain text in your Squid configuration it is strongly recommended to use a account with minimal associated privileges. This to limit the damage in case someone could get hold of a copy of your Squid configuration file." -msgstr "The DN and password to bind as while performing searches. As the password needs to be printed in plain text in your Squid configuration it is strongly recommended to use a account with minimal associated privileges. This to limit the damage in case someone could get hold of a copy of your Squid configuration file." +msgstr "DN і пароль для прив’язки під час виконання пошуку. Оскільки пароль має бути надрукований звичайним текстом у вашій конфігурації Squid, настійно рекомендується використовувати обліковий запис із мінімальними привілеями. Це, щоб обмежити шкоду, якщо хтось зможе отримати копію вашого файлу конфігурації Squid." #: ../../configuration/trafficpolicy/index.rst:446 msgid "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." -msgstr "The FQ-CoDel policy distributes the traffic into 1024 FIFO queues and tries to provide good service between all of them. It also tries to keep the length of all the queues short." +msgstr "Політика FQ-CoDel розподіляє трафік у 1024 черги FIFO та намагається забезпечити якісне обслуговування між усіма ними. Він також намагається зберегти коротку довжину всіх черг." -#: ../../configuration/loadbalancing/reverse-proxy.rst:215 +#: ../../configuration/loadbalancing/reverse-proxy.rst:256 msgid "The HTTP service listen on TCP port 80." -msgstr "The HTTP service listen on TCP port 80." +msgstr "Служба HTTP слухає TCP-порт 80." #: ../../configuration/nat/nat44.rst:525 msgid "The IP address of the internal system we wish to forward traffic to." -msgstr "The IP address of the internal system we wish to forward traffic to." +msgstr "IP-адреса внутрішньої системи, на яку ми хочемо перенаправляти трафік." #: ../../configuration/interfaces/wireless.rst:604 msgid "The Intel AX200 card does not work out of the box in AP mode, see https://unix.stackexchange.com/questions/598275/intel-ax200-ap-mode. You can still put this card into AP mode using the following configuration:" -msgstr "The Intel AX200 card does not work out of the box in AP mode, see https://unix.stackexchange.com/questions/598275/intel-ax200-ap-mode. You can still put this card into AP mode using the following configuration:" +msgstr "Карта Intel AX200 не працює з коробки в режимі AP, див. https://unix.stackexchange.com/questions/598275/intel-ax200-ap-mode. Ви все ще можете перевести цю картку в режим точки доступу за допомогою такої конфігурації:" #: ../../configuration/service/snmp.rst:231 msgid "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." -msgstr "The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, will contain the output of the extension." +msgstr "OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116`` після виклику міститиме вихідні дані розширення." -#: ../../configuration/vpn/pptp.rst:6 +#: ../../configuration/vpn/pptp.rst:7 msgid "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." -msgstr "The Point-to-Point Tunneling Protocol (PPTP_) has been implemented in VyOS only for backwards compatibility. PPTP has many well known security issues and you should use one of the many other new VPN implementations." +msgstr "Протокол тунелювання точка-точка (PPTP_) реалізовано у VyOS лише для зворотної сумісності. PPTP має багато добре відомих проблем із безпекою, тому вам слід скористатися однією з багатьох інших реалізацій VPN." #: ../../configuration/service/dns.rst:62 msgid "The PowerDNS recursor has 5 different levels of DNSSEC processing, which can be set with the dnssec setting. In order from least to most processing, these are:" -msgstr "The PowerDNS recursor has 5 different levels of DNSSEC processing, which can be set with the dnssec setting. In order from least to most processing, these are:" +msgstr "Рекурсор PowerDNS має 5 різних рівнів обробки DNSSEC, які можна встановити за допомогою параметра dnssec. У порядку від найменшої до найбільшої обробки, це:" #: ../../configuration/trafficpolicy/index.rst:694 msgid "The Priority Queue is a classful scheduling policy. It does not delay packets (Priority Queue is not a shaping policy), it simply dequeues packets according to their priority." -msgstr "The Priority Queue is a classful scheduling policy. It does not delay packets (Priority Queue is not a shaping policy), it simply dequeues packets according to their priority." +msgstr "Пріоритетна черга — це політика класового планування. Він не затримує пакети (черга пріоритетів не є політикою формування), він просто знімає пакети з черги відповідно до їх пріоритету." #: ../../configuration/vpn/openconnect.rst:294 msgid "The RADIUS accounting feature must be used with the OpenConnect authentication mode RADIUS. It cannot be used with local authentication. You must configure the OpenConnect authentication mode to \"radius\"." -msgstr "The RADIUS accounting feature must be used with the OpenConnect authentication mode RADIUS. It cannot be used with local authentication. You must configure the OpenConnect authentication mode to \"radius\"." +msgstr "Функцію обліку RADIUS необхідно використовувати з режимом автентифікації OpenConnect RADIUS. Його не можна використовувати з локальною автентифікацією. Ви повинні налаштувати режим автентифікації OpenConnect на "радіус"." #: ../../configuration/vpn/l2tp.rst:200 msgid "The RADIUS dictionaries in VyOS are located at ``/usr/share/accel-ppp/radius/``" -msgstr "The RADIUS dictionaries in VyOS are located at ``/usr/share/accel-ppp/radius/``" +msgstr "Словники RADIUS у VyOS знаходяться за адресою ``/usr/share/accel-ppp/radius/``" #: ../../configuration/protocols/segment-routing.rst:12 msgid "The SR segments are portions of the network path taken by the packet, and are called SIDs. At each node, the first SID of the list is read, executed as a forwarding function, and may be popped to let the next node read the next SID of the list. The SID list completely determines the path where the packet is forwarded." -msgstr "The SR segments are portions of the network path taken by the packet, and are called SIDs. At each node, the first SID of the list is read, executed as a forwarding function, and may be popped to let the next node read the next SID of the list. The SID list completely determines the path where the packet is forwarded." +msgstr "Сегменти SR — це частини мережевого шляху, по якому йде пакет, і називаються SID. На кожному вузлі зчитується перший SID списку, виконується як функція пересилання та може бути видалений, щоб дозволити наступному вузлу прочитати наступний SID списку. Список SID повністю визначає шлях, куди пересилається пакет." #: ../../configuration/trafficpolicy/index.rst:1023 msgid "The Shaper policy does not guarantee a low delay, but it does guarantee bandwidth to different traffic classes and also lets you decide how to allocate more traffic once the guarantees are met." -msgstr "The Shaper policy does not guarantee a low delay, but it does guarantee bandwidth to different traffic classes and also lets you decide how to allocate more traffic once the guarantees are met." +msgstr "Політика Shaper не гарантує низьку затримку, але вона гарантує пропускну здатність для різних класів трафіку, а також дозволяє вам вирішити, як розподілити більше трафіку, коли гарантії будуть виконані." #: ../../configuration/service/broadcast-relay.rst:38 msgid "The UDP port number used by your apllication. It is mandatory for this kind of operation." -msgstr "The UDP port number used by your apllication. It is mandatory for this kind of operation." +msgstr "Номер порту UDP, який використовується вашою програмою. Воно є обов'язковим для такого роду операцій." #: ../../configuration/interfaces/vxlan.rst:23 msgid "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." -msgstr "The VXLAN specification was originally created by VMware, Arista Networks and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks." +msgstr "Специфікацію VXLAN спочатку створили VMware, Arista Networks і Cisco. Серед інших прихильників технології VXLAN – Huawei, Broadcom, Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent і Juniper Networks." + +#: ../../configuration/service/dns.rst:149 +msgid "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." +msgstr "The VyOS DNS forwarder can also be configured to host authoritative records for a domain." #: ../../configuration/service/dns.rst:14 msgid "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." -msgstr "The VyOS DNS forwarder does not require an upstream DNS server. It can serve as a full recursive DNS server - but it can also forward queries to configurable upstream DNS servers. By not configuring any upstream DNS servers you also avoid being tracked by the provider of your upstream DNS server." +msgstr "DNS-пересилачу VyOS не потрібен вихідний DNS-сервер. Він може служити повним рекурсивним DNS-сервером, але також може пересилати запити до конфігурованих вищестоящих DNS-серверів. Не налаштовуючи жодних вихідних DNS-серверів, ви також уникаєте відстеження постачальником вашого вихідного DNS-сервера." -#: ../../configuration/service/dns.rst:173 +#: ../../configuration/service/dns.rst:254 msgid "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" -msgstr "The VyOS DNS forwarder will only accept lookup requests from the LAN subnets - 192.168.1.0/24 and 2001:db8::/64" +msgstr "DNS-пересилач VyOS прийматиме лише запити на пошук із підмереж локальної мережі – 192.168.1.0/24 і 2001:db8::/64" -#: ../../configuration/service/dns.rst:171 +#: ../../configuration/service/dns.rst:252 msgid "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" -msgstr "The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6" +msgstr "DNS-пересилач VyOS прослуховуватиме лише запити на адреси інтерфейсу eth1 (LAN): 192.168.1.254 для IPv4 та 2001:db8::ffff для IPv6" -#: ../../configuration/service/dns.rst:175 +#: ../../configuration/service/dns.rst:256 msgid "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." -msgstr "The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server." +msgstr "DNS-пересилач VyOS передаватиме зворотні пошуки для зон 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa на вищестоящий сервер." -#: ../../configuration/pki/index.rst:254 +#: ../../configuration/pki/index.rst:285 msgid "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." msgstr "The VyOS PKI subsystem can also be used to automatically retrieve Certificates using the :abbr:`ACME (Automatic Certificate Management Environment)` protocol." #: ../../configuration/container/index.rst:7 msgid "The VyOS container implementation is based on `Podman<https://podman.io/>` as a deamonless container engine." -msgstr "The VyOS container implementation is based on `Podman<https://podman.io/>` as a deamonless container engine." +msgstr "Реалізація контейнера VyOS заснована на `Podman<https://podman.io/> ` як контейнерний механізм без демонів." #: ../../configuration/interfaces/wireless.rst:347 #: ../../configuration/interfaces/wireless.rst:547 msgid "The WAP in this example has the following characteristics:" -msgstr "The WAP in this example has the following characteristics:" +msgstr "WAP у цьому прикладі має такі характеристики:" #: ../../configuration/interfaces/wwan.rst:9 msgid "The Wireless Wide-Area-Network interface provides access (through a wireless modem/wwan) to wireless networks provided by various cellular providers." -msgstr "The Wireless Wide-Area-Network interface provides access (through a wireless modem/wwan) to wireless networks provided by various cellular providers." +msgstr "Інтерфейс бездротової глобальної мережі забезпечує доступ (через бездротовий модем/wwan) до бездротових мереж, наданих різними операторами стільникового зв’язку." #: ../../configuration/protocols/bgp.rst:36 msgid "The :abbr:`ASN (Autonomous System Number)` is one of the essential elements of BGP. BGP is a distance vector routing protocol, and the AS-Path framework provides distance vector metric and loop detection to BGP." -msgstr "The :abbr:`ASN (Autonomous System Number)` is one of the essential elements of BGP. BGP is a distance vector routing protocol, and the AS-Path framework provides distance vector metric and loop detection to BGP." +msgstr ":abbr:`ASN (Autonomous System Number)` є одним із важливих елементів BGP. BGP — це протокол дистанційної векторної маршрутизації, а структура AS-Path забезпечує метрику дистанційного вектора та виявлення петлі для BGP." #: ../../configuration/nat/nat66.rst:55 msgid "The :abbr:`DNPTv6 (Destination IPv6-to-IPv6 Network Prefix Translation)` destination address translation function is used in scenarios where the server in the internal network provides services to the external network, such as providing Web services or FTP services to the external network. By configuring the mapping relationship between the internal server address and the external network address on the external network side interface of the NAT66 device, external network users can access the internal network server through the designated external network address." -msgstr "The :abbr:`DNPTv6 (Destination IPv6-to-IPv6 Network Prefix Translation)` destination address translation function is used in scenarios where the server in the internal network provides services to the external network, such as providing Web services or FTP services to the external network. By configuring the mapping relationship between the internal server address and the external network address on the external network side interface of the NAT66 device, external network users can access the internal network server through the designated external network address." +msgstr "Функція :abbr:`DNPTv6 (трансляція мережевого префікса IPv6-IPv6)` використовується в сценаріях, коли сервер у внутрішній мережі надає послуги зовнішній мережі, наприклад веб-служби або служби FTP для зовнішня мережа. Налаштувавши зв’язок відображення між адресою внутрішнього сервера та адресою зовнішньої мережі на інтерфейсі зовнішньої мережі пристрою NAT66, користувачі зовнішньої мережі можуть отримати доступ до сервера внутрішньої мережі через призначену адресу зовнішньої мережі." #: ../../configuration/protocols/mpls.rst:42 msgid "The :abbr:`MPLS (Multi-Protocol Label Switching)` architecture does not assume a single protocol to create MPLS paths. VyOS supports the Label Distribution Protocol (LDP) as implemented by FRR, based on :rfc:`5036`." -msgstr "The :abbr:`MPLS (Multi-Protocol Label Switching)` architecture does not assume a single protocol to create MPLS paths. VyOS supports the Label Distribution Protocol (LDP) as implemented by FRR, based on :rfc:`5036`." +msgstr "Архітектура :abbr:`MPLS (Multi-Protocol Label Switching)` не передбачає використання одного протоколу для створення шляхів MPLS. VyOS підтримує протокол розподілу міток (LDP), реалізований FRR на основі :rfc:`5036`." #: ../../configuration/nat/nat66.rst:75 msgid "The :ref:`source-nat66` rule replaces the source address of the packet and calculates the converted address using the prefix specified in the rule." -msgstr "The :ref:`source-nat66` rule replaces the source address of the packet and calculates the converted address using the prefix specified in the rule." +msgstr "Правило :ref:`source-nat66` замінює адресу джерела пакета та обчислює перетворену адресу, використовуючи префікс, указаний у правилі." #: ../../configuration/service/dns.rst:98 msgid "The ``CD``-bit is honored correctly for process and validate. For log-fail, failures will be logged too." -msgstr "The ``CD``-bit is honored correctly for process and validate. For log-fail, failures will be logged too." +msgstr "Біт ``CD`` враховується правильно для обробки та перевірки. У разі помилки в журналі помилки також реєструватимуться." #: ../../configuration/highavailability/index.rst:60 msgid "The ``address`` can be configured either on the VRRP interface or on not VRRP interface." -msgstr "The ``address`` can be configured either on the VRRP interface or on not VRRP interface." +msgstr "``Адресу`` можна налаштувати як на інтерфейсі VRRP, так і на інтерфейсі, що не є VRRP." #: ../../configuration/highavailability/index.rst:53 msgid "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" -msgstr "The ``address`` parameter can be either an IPv4 or IPv6 address, but you can not mix IPv4 and IPv6 in the same group, and will need to create groups with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + IPv6 address you can use option ``excluded-address``" +msgstr "Параметр ``address`` може бути як адресою IPv4, так і IPv6, але ви не можете змішувати IPv4 і IPv6 в одній групі, і вам потрібно буде створити групи з різними VRID спеціально для IPv4 і IPv6. Якщо ви хочете використовувати адресу IPv4 + IPv6, ви можете скористатися опцією ``excluded-address``" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:345 +msgid "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" +msgstr "The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS and checks backend server has a valid certificate trusted by CA ``cacert``" #: ../../configuration/loadbalancing/reverse-proxy.rst:248 msgid "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." -msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP to HTTPS." +msgstr "Служба ``http`` зменшується на порту 80 і примусово перенаправляє з HTTP на HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:289 +msgid "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." +msgstr "The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:342 +msgid "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:292 +msgid "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." #: ../../configuration/loadbalancing/reverse-proxy.rst:251 msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." -msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." +msgstr "Служба ``https`` прослуховує порт 443 із серверною частиною `bk-default` для обробки трафіку HTTPS. Він використовує сертифікат під назвою ``cert`` для завершення SSL." #: ../../configuration/interfaces/openvpn.rst:66 msgid "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." -msgstr "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." +msgstr "Директива ``persistent-tunnel`` дозволить нам налаштувати пов'язані з тунелем атрибути, такі як політика брандмауера, як і на будь-якому звичайному мережевому інтерфейсі." -#: ../../configuration/vpn/l2tp.rst:176 +#: ../../configuration/service/ipoe-server.rst:154 +#: ../../configuration/service/pppoe-server.rst:116 +#: ../../configuration/vpn/l2tp.rst:159 +#: ../../configuration/vpn/pptp.rst:99 +#: ../../configuration/vpn/sstp.rst:132 msgid "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." -msgstr "The ``source-address`` must be configured on one of VyOS interface. Best practice would be a loopback or dummy interface." +msgstr "``вихідна адреса`` має бути налаштована на одному з інтерфейсів VyOS. Найкращою практикою буде петлевий або фіктивний інтерфейс." -#: ../../configuration/interfaces/bridge.rst:270 +#: ../../configuration/interfaces/bridge.rst:279 msgid "The `show bridge` operational command can be used to display configured bridges:" -msgstr "The `show bridge` operational command can be used to display configured bridges:" +msgstr "Операційну команду `show bridge` можна використати для відображення налаштованих мостів:" #: ../../configuration/vpn/openconnect.rst:253 msgid "The above directory and default-config must be a child directory of /config/auth, since files outside this directory are not persisted after an image upgrade." -msgstr "The above directory and default-config must be a child directory of /config/auth, since files outside this directory are not persisted after an image upgrade." +msgstr "Наведений вище каталог і default-config мають бути дочірніми каталогами /config/auth, оскільки файли за межами цього каталогу не зберігаються після оновлення образу." #: ../../configuration/firewall/ipv4.rst:86 #: ../../configuration/firewall/ipv6.rst:86 msgid "The action can be :" msgstr "The action can be :" -#: ../../configuration/pki/index.rst:271 +#: ../../configuration/pki/index.rst:302 msgid "The address the server listens to during http-01 challenge" msgstr "The address the server listens to during http-01 challenge" -#: ../../configuration/protocols/bgp.rst:775 +#: ../../configuration/protocols/bgp.rst:797 msgid "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." -msgstr "The advantage of this is that the route-selection (at this point) will be more deterministic. The disadvantage is that a few or even one lowest-ID router may attract all traffic to otherwise-equal paths because of this check. It may increase the possibility of MED or IGP oscillation, unless other measures were taken to avoid these. The exact behaviour will be sensitive to the iBGP and reflection topology." +msgstr "Перевагою цього є те, що вибір маршруту (у цій точці) буде більш детермінованим. Недоліком є те, що кілька або навіть один маршрутизатор із найнижчим ідентифікатором можуть залучити весь трафік до інших рівних шляхів через цю перевірку. Це може збільшити ймовірність коливань MED або IGP, якщо не було вжито інших заходів для їх уникнення. Точна поведінка залежатиме від iBGP і топології відображення." #: ../../configuration/nat/nat44.rst:61 msgid "The allocated address block is 100.64.0.0/10." -msgstr "The allocated address block is 100.64.0.0/10." +msgstr "Виділений адресний блок – 100.64.0.0/10." #: ../../_include/interface-ipv6.txt:92 msgid "The amount of Duplicate Address Detection probes to send." msgstr "The amount of Duplicate Address Detection probes to send." -#: ../../configuration/protocols/bgp.rst:835 +#: ../../configuration/protocols/bgp.rst:857 msgid "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." -msgstr "The attributes :cfgcmd:`prefix-list` and :cfgcmd:`distribute-list` are mutually exclusive, and only one command (distribute-list or prefix-list) can be applied to each inbound or outbound direction for a particular neighbor." +msgstr "Атрибути :cfgcmd:`prefix-list` і :cfgcmd:`distribute-list` є взаємовиключними, і лише одна команда (distribute-list або prefix-list) може бути застосована до кожного вхідного або вихідного напрямку для певного сусіда." #: ../../configuration/loadbalancing/reverse-proxy.rst:80 msgid "The available options for <match> are:" -msgstr "The available options for <match> are:" +msgstr "Доступні варіанти для<match> є:" #: ../../configuration/vpn/dmvpn.rst:175 msgid "The below referenced IP address `192.0.2.1` is used as example address representing a global unicast address under which the HUB can be contacted by each and every individual spoke." -msgstr "The below referenced IP address `192.0.2.1` is used as example address representing a global unicast address under which the HUB can be contacted by each and every individual spoke." +msgstr "Наведена нижче IP-адреса `192.0.2.1` використовується як приклад адреси, що представляє глобальну одноадресну адресу, за якою з HUB може зв’язатися кожен і кожен окремий абонент." #: ../../configuration/interfaces/bonding.rst:9 msgid "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." -msgstr "The bonding interface provides a method for aggregating multiple network interfaces into a single logical \"bonded\" interface, or LAG, or ether-channel, or port-channel. The behavior of the bonded interfaces depends upon the mode; generally speaking, modes provide either hot standby or load balancing services. Additionally, link integrity monitoring may be performed." +msgstr "Інтерфейс зв’язування надає метод для об’єднання кількох мережевих інтерфейсів в один логічний «зв’язаний» інтерфейс, або LAG, або ether-channel, або port-channel. Поведінка з’єднаних інтерфейсів залежить від режиму; загалом, режими забезпечують або гаряче очікування, або послуги балансування навантаження. Крім того, може здійснюватися моніторинг цілісності посилання." -#: ../../configuration/trafficpolicy/index.rst:1179 +#: ../../configuration/trafficpolicy/index.rst:1247 msgid "The case of ingress shaping" -msgstr "The case of ingress shaping" +msgstr "Випадок вхідного формування" + +#: ../../configuration/service/pppoe-server.rst:644 +msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." +msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the PPPoE endpoint on the client side and a /56 subnet for the clients internal use." -#: ../../configuration/service/pppoe-server.rst:385 +#: ../../configuration/service/pppoe-server.rst:644 msgid "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." -msgstr "The client, once successfully authenticated, will receive an IPv4 and an IPv6 /64 address to terminate the pppoe endpoint on the client side and a /56 subnet for the clients internal use." +msgstr "Після успішної автентифікації клієнт отримає адресу IPv4 та IPv6 /64 для завершення кінцевої точки pppoe на стороні клієнта та підмережу /56 для внутрішнього використання клієнта." -#: ../../configuration/service/ipoe-server.rst:90 +#: ../../configuration/service/ipoe-server.rst:91 msgid "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." -msgstr "The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can use addresses from ``2001:db8:1::/56`` and can globally communicate without the need of any NAT rules." +msgstr "Клієнти :abbr:`CPE (Customer Premises Equipment)` тепер можуть спілкуватися через IPv4 або IPv6. Усі пристрої за ``2001:db8::a00:27ff:fe2f:d806/64`` можуть використовувати адреси ``2001:db8:1::/56`` і можуть глобально спілкуватися без необхідності будь-яких правил NAT." #: ../../configuration/interfaces/wireguard.rst:183 msgid "The command :opcmd:`show interfaces wireguard wg01 public-key` will then show the public key, which needs to be shared with the peer." -msgstr "The command :opcmd:`show interfaces wireguard wg01 public-key` will then show the public key, which needs to be shared with the peer." +msgstr "Команда :opcmd:`show interfaces wireguard wg01 public-key` покаже відкритий ключ, яким потрібно поділитися з одноранговим партнером." #: ../../configuration/interfaces/wireguard.rst:412 msgid "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." -msgstr "The command also generates a configuration snipped which can be copy/pasted into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become the peer name in the snippet." +msgstr "Команда також генерує фрагмент конфігурації, який за потреби можна скопіювати/вставити у VyOS CLI. Поставляється ``<name> `` на CLI стане іменем однорангового вузла у фрагменті." -#: ../../configuration/service/pppoe-server.rst:231 +#: ../../configuration/service/pppoe-server.rst:305 msgid "The command below enables it, assuming the RADIUS connection has been setup and is working." -msgstr "The command below enables it, assuming the RADIUS connection has been setup and is working." +msgstr "Команда нижче вмикає його, припускаючи, що підключення RADIUS налаштовано та працює." #: ../../configuration/protocols/rip.rst:213 msgid "The command displays current RIP status. It includes RIP timer, filtering, version, RIP enabled interface and RIP peer information." -msgstr "The command displays current RIP status. It includes RIP timer, filtering, version, RIP enabled interface and RIP peer information." +msgstr "Команда відображає поточний стан RIP. Він містить таймер RIP, фільтрацію, версію, інтерфейс із підтримкою RIP та інформацію про одноранговий RIP." #: ../../configuration/vpn/pptp.rst:42 msgid "The command pon TESTUNNEL establishes the PPTP tunnel to the remote system." -msgstr "The command pon TESTUNNEL establishes the PPTP tunnel to the remote system." +msgstr "Команда pon TESTUNNEL встановлює тунель PPTP до віддаленої системи." #: ../../configuration/nat/nat44.rst:32 msgid "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" -msgstr "The computers on an internal network can use any of the addresses set aside by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private addressing (see :rfc:`1918`). These reserved IP addresses are not in use on the Internet, so an external machine will not directly route to them. The following addresses are reserved for private use:" +msgstr "Комп’ютери у внутрішній мережі можуть використовувати будь-які адреси, виділені :abbr:`IANA (Internet Assigned Numbers Authority)` для приватної адресації (див. :rfc:`1918`). Ці зарезервовані IP-адреси не використовуються в Інтернеті, тому зовнішня машина не спрямовуватиме до них напряму. Наступні адреси зарезервовано для приватного використання:" -#: ../../configuration/service/dhcp-server.rst:210 -#: ../../configuration/service/dhcp-server.rst:601 -#: ../../configuration/service/dhcp-server.rst:644 +#: ../../configuration/service/dhcp-server.rst:266 +#: ../../configuration/service/dhcp-server.rst:661 +#: ../../configuration/service/dhcp-server.rst:705 msgid "The configuration will look as follows:" -msgstr "The configuration will look as follows:" +msgstr "Конфігурація буде виглядати наступним чином:" #: ../../configuration/interfaces/openvpn.rst:253 msgid "The configurations above will default to using 256-bit AES in GCM mode for encryption (if both sides support NCP) and SHA-1 for HMAC authentication. SHA-1 is considered weak, but other hashing algorithms are available, as are encryption algorithms:" -msgstr "The configurations above will default to using 256-bit AES in GCM mode for encryption (if both sides support NCP) and SHA-1 for HMAC authentication. SHA-1 is considered weak, but other hashing algorithms are available, as are encryption algorithms:" +msgstr "Наведені вище конфігурації за умовчанням використовуватимуть 256-бітний AES у режимі GCM для шифрування (якщо обидві сторони підтримують NCP) і SHA-1 для автентифікації HMAC. SHA-1 вважається слабким, але доступні інші алгоритми хешування, як і алгоритми шифрування:" #: ../../configuration/service/conntrack-sync.rst:14 msgid "The connection state however is completely independent of any upper-level state, such as TCP's or SCTP's state. Part of the reason for this is that when merely forwarding packets, i.e. no local delivery, the TCP engine may not necessarily be invoked at all. Even connectionless-mode transmissions such as UDP, IPsec (AH/ESP), GRE and other tunneling protocols have, at least, a pseudo connection state. The heuristic for such protocols is often based upon a preset timeout value for inactivity, after whose expiration a Netfilter connection is dropped." -msgstr "The connection state however is completely independent of any upper-level state, such as TCP's or SCTP's state. Part of the reason for this is that when merely forwarding packets, i.e. no local delivery, the TCP engine may not necessarily be invoked at all. Even connectionless-mode transmissions such as UDP, IPsec (AH/ESP), GRE and other tunneling protocols have, at least, a pseudo connection state. The heuristic for such protocols is often based upon a preset timeout value for inactivity, after whose expiration a Netfilter connection is dropped." +msgstr "Однак стан підключення повністю не залежить від будь-якого стану верхнього рівня, наприклад, стану TCP або SCTP. Частково це пояснюється тим, що при простому пересиланні пакетів, тобто без локальної доставки, механізм TCP може не обов’язково викликатися взагалі. Навіть передачі в режимі без з’єднання, такі як UDP, IPsec (AH/ESP), GRE та інші протоколи тунелювання, мають, принаймні, стан псевдоз’єднання. Евристика для таких протоколів часто базується на попередньо встановленому значенні часу очікування для бездіяльності, після закінчення якого з’єднання Netfilter розривається." #: ../../configuration/system/conntrack.rst:23 msgid "The connection tracking expect table contains one entry for each expected connection related to an existing connection. These are generally used by “connection tracking helper” modules such as FTP. The default size of the expect table is 2048 entries." -msgstr "The connection tracking expect table contains one entry for each expected connection related to an existing connection. These are generally used by “connection tracking helper” modules such as FTP. The default size of the expect table is 2048 entries." +msgstr "Таблиця очікувань відстеження з’єднань містить один запис для кожного очікуваного з’єднання, пов’язаного з існуючим з’єднанням. Зазвичай вони використовуються модулями «помічника відстеження з’єднань», такими як FTP. Розмір очікуваної таблиці за замовчуванням становить 2048 записів." #: ../../configuration/system/conntrack.rst:17 msgid "The connection tracking table contains one entry for each connection being tracked by the system." -msgstr "The connection tracking table contains one entry for each connection being tracked by the system." +msgstr "Таблиця відстеження з’єднань містить один запис для кожного з’єднання, яке відстежується системою." #: ../../configuration/service/pppoe-server.rst:225 msgid "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" -msgstr "The current attribute 'Filter-Id' is being used as default and can be setup within RADIUS:" +msgstr "Поточний атрибут Filter-Id використовується за замовчуванням і може бути налаштований у RADIUS:" + +#: ../../configuration/service/pppoe-server.rst:299 +msgid "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" +msgstr "The current attribute ``Filter-Id`` is being used as default and can be setup within RADIUS:" #: ../../configuration/service/ntp.rst:29 msgid "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." -msgstr "The current protocol is version 4 (NTPv4), which is a proposed standard as documented in :rfc:`5905`. It is backward compatible with version 3, specified in :rfc:`1305`." +msgstr "Поточний протокол — це версія 4 (NTPv4), яка є запропонованим стандартом, як описано в :rfc:`5905`. Він зворотно сумісний із версією 3, зазначеною в :rfc:`1305`." #: ../../configuration/service/conntrack-sync.rst:49 msgid "The daemon doubles the size of the netlink event socket buffer size if it detects netlink event message dropping. This clause sets the maximum buffer size growth that can be reached." -msgstr "The daemon doubles the size of the netlink event socket buffer size if it detects netlink event message dropping. This clause sets the maximum buffer size growth that can be reached." +msgstr "Демон подвоює розмір буфера сокета події netlink, якщо виявляє, що повідомлення про подію netlink скидається. Цей пункт встановлює максимальне збільшення розміру буфера, якого можна досягти." #: ../../configuration/vpn/l2tp.rst:189 msgid "The default RADIUS attribute for rate limiting is ``Filter-Id``, but you may also redefine it." -msgstr "The default RADIUS attribute for rate limiting is ``Filter-Id``, but you may also redefine it." +msgstr "Типовим атрибутом RADIUS для обмеження швидкості є Filter-Id, але ви також можете змінити його." #: ../../configuration/system/login.rst:9 msgid "The default VyOS user account (`vyos`), as well as newly created user accounts, have all capabilities to configure the system. All accounts have sudo capabilities and therefore can operate as root on the system." -msgstr "The default VyOS user account (`vyos`), as well as newly created user accounts, have all capabilities to configure the system. All accounts have sudo capabilities and therefore can operate as root on the system." +msgstr "Стандартний обліковий запис користувача VyOS (`vyos`), а також новостворені облікові записи користувачів мають усі можливості для налаштування системи. Усі облікові записи мають можливості sudo і тому можуть працювати як root у системі." #: ../../configuration/system/host-name.rst:29 msgid "The default hostname used is `vyos`." -msgstr "The default hostname used is `vyos`." +msgstr "За замовчуванням використовується ім’я хосту `vyos`." #: ../../configuration/interfaces/pppoe.rst:155 msgid "The default is 1492." msgstr "The default is 1492." -#: ../../configuration/service/dhcp-server.rst:526 +#: ../../configuration/interfaces/bridge.rst:140 +msgid "The default is ``802.1q``." +msgstr "The default is ``802.1q``." + +#: ../../configuration/service/dhcp-server.rst:585 msgid "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." -msgstr "The default lease time for DHCPv6 leases is 24 hours. This can be changed by supplying a ``default-time``, ``maximum-time`` and ``minimum-time``. All values need to be supplied in seconds." +msgstr "Стандартний час оренди для оренди DHCPv6 становить 24 години. Це можна змінити, вказавши ``час за умовчанням``, ``максимальний час`` і ``мінімальний час``. Усі значення мають бути надані за секунди." #: ../../configuration/interfaces/vxlan.rst:357 msgid "The default port udp is set to 8472. It can be changed with ``set interface vxlan <vxlanN> port <port>``" -msgstr "The default port udp is set to 8472. It can be changed with ``set interface vxlan <vxlanN> port <port>``" +msgstr "Типовим портом udp є 8472. Його можна змінити за допомогою ``set interface vxlan<vxlanN> порт<port> ``" #: ../../configuration/protocols/pim.rst:52 msgid "The default time is 60 seconds." @@ -12919,15 +14387,15 @@ msgstr "The default time is 60 seconds." #: ../../_include/interface-dhcpv6-prefix-delegation.txt:15 msgid "The default value corresponds to 64." -msgstr "The default value corresponds to 64." +msgstr "Значення за замовчуванням відповідає 64." #: ../../configuration/interfaces/bonding.rst:138 msgid "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." -msgstr "The default value is 0. This will cause the carrier to be asserted (for 802.3ad mode) whenever there is an active aggregator, regardless of the number of available links in that aggregator." +msgstr "Значення за замовчуванням дорівнює 0. Це спричинить затвердження носія (для режиму 802.3ad) щоразу, коли є активний агрегатор, незалежно від кількості доступних посилань у цьому агрегаторі." -#: ../../configuration/protocols/rpki.rst:110 +#: ../../configuration/protocols/rpki.rst:108 msgid "The default value is 300 seconds." -msgstr "The default value is 300 seconds." +msgstr "Значення за замовчуванням становить 300 секунд." #: ../../configuration/protocols/pim.rst:214 msgid "The default value is 3." @@ -12937,75 +14405,91 @@ msgstr "The default value is 3." msgid "The default value is 3 packets." msgstr "The default value is 3 packets." -#: ../../configuration/service/dhcp-server.rst:99 +#: ../../configuration/protocols/rpki.rst:122 +msgid "The default value is 600 seconds." +msgstr "The default value is 600 seconds." + +#: ../../configuration/protocols/rpki.rst:115 +msgid "The default value is 7200 seconds." +msgstr "The default value is 7200 seconds." + +#: ../../configuration/service/dhcp-server.rst:115 msgid "The default value is 86400 seconds which corresponds to one day." -msgstr "The default value is 86400 seconds which corresponds to one day." +msgstr "Значення за замовчуванням становить 86400 секунд, що відповідає одному дню." #: ../../configuration/interfaces/bonding.rst:157 msgid "The default value is slow." -msgstr "The default value is slow." +msgstr "Значення за замовчуванням повільне." #: ../../configuration/trafficpolicy/index.rst:859 msgid "The default values for the minimum-threshold depend on IP precedence:" -msgstr "The default values for the minimum-threshold depend on IP precedence:" +msgstr "Стандартні значення для мінімального порогу залежать від пріоритету IP:" #: ../../configuration/interfaces/vxlan.rst:334 msgid "The destination port used for creating a VXLAN interface in Linux defaults to its pre-standard value of 8472 to preserve backward compatibility. A configuration directive to support a user-specified destination port to override that behavior is available using the above command." -msgstr "The destination port used for creating a VXLAN interface in Linux defaults to its pre-standard value of 8472 to preserve backward compatibility. A configuration directive to support a user-specified destination port to override that behavior is available using the above command." +msgstr "Порт призначення, який використовується для створення інтерфейсу VXLAN у Linux, за замовчуванням має передстандартне значення 8472, щоб зберегти зворотну сумісність. Директива конфігурації для підтримки вказаного користувачем порту призначення для перевизначення цієї поведінки доступна за допомогою наведеної вище команди." #: ../../configuration/interfaces/vxlan.rst:98 msgid "The device can only receive packets with VNIs configured in the VNI filtering table." msgstr "The device can only receive packets with VNIs configured in the VNI filtering table." -#: ../../configuration/service/dhcp-server.rst:165 +#: ../../configuration/service/dhcp-server.rst:215 +msgid "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." +msgstr "The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties." + +#: ../../configuration/service/dhcp-server.rst:199 msgid "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." -msgstr "The dialogue between failover partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you have DHCP failover peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them to ensure that the failover partnership is immune to disruption (accidental or otherwise) via third parties." +msgstr "Діалог між партнерами по передачі після відмови не зашифрований і не автентифікований. Оскільки більшість DHCP-серверів знаходяться у власній захищеній інтрамережі організації, це було б непотрібним. Проте, якщо у вас є однорангові вузли DHCP, чиї зв’язки проходять через незахищені мережі, ми рекомендуємо розглянути можливість використання VPN-тунелювання між ними, щоб гарантувати, що партнерство відновлення після збоїв буде захищено від збоїв (випадкових чи інших) через треті сторони." #: ../../configuration/service/dhcp-server.rst:31 -#: ../../configuration/service/dhcp-server.rst:124 +#: ../../configuration/service/dhcp-server.rst:140 msgid "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." -msgstr "The domain-name parameter should be the domain name that will be appended to the client's hostname to form a fully-qualified domain-name (FQDN) (DHCP Option 015)." +msgstr "Параметр доменного імені має бути ім’ям домену, яке буде додано до імені хоста клієнта для формування повного доменного імені (FQDN) (параметр DHCP 015)." #: ../../configuration/service/dhcp-server.rst:40 -#: ../../configuration/service/dhcp-server.rst:131 +#: ../../configuration/service/dhcp-server.rst:147 msgid "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." -msgstr "The domain-name parameter should be the domain name used when completing DNS request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119)." +msgstr "Параметр доменного імені має бути ім’ям домену, яке використовується під час виконання запиту DNS, де не передається повне FQDN. Цю опцію можна вказати кілька разів, якщо вам потрібні кілька доменів пошуку (параметр DHCP 119)." #: ../../configuration/nat/nat44.rst:718 msgid "The dummy interface allows us to have an equivalent of the Cisco IOS Loopback interface - a router-internal interface we can use for IP addresses the router must know about, but which are not actually assigned to a real network." -msgstr "The dummy interface allows us to have an equivalent of the Cisco IOS Loopback interface - a router-internal interface we can use for IP addresses the router must know about, but which are not actually assigned to a real network." +msgstr "Фіктивний інтерфейс дозволяє нам мати еквівалент інтерфейсу Cisco IOS Loopback – внутрішнього інтерфейсу маршрутизатора, який ми можемо використовувати для IP-адрес, про які маршрутизатор повинен знати, але які насправді не призначені реальній мережі." #: ../../configuration/interfaces/dummy.rst:9 msgid "The dummy interface is really a little exotic, but rather useful nevertheless. Dummy interfaces are much like the :ref:`loopback-interface` interface, except you can have as many as you want." -msgstr "The dummy interface is really a little exotic, but rather useful nevertheless. Dummy interfaces are much like the :ref:`loopback-interface` interface, except you can have as many as you want." +msgstr "Фіктивний інтерфейс справді трохи екзотичний, але все ж досить корисний. Фіктивні інтерфейси дуже схожі на інтерфейс :ref:`loopback-interface`, за винятком того, що ви можете мати скільки завгодно." #: ../../configuration/service/webproxy.rst:154 msgid "The embedded Squid proxy can use LDAP to authenticate users against a company wide directory. The following configuration is an example of how to use Active Directory as authentication backend. Queries are done via LDAP." -msgstr "The embedded Squid proxy can use LDAP to authenticate users against a company wide directory. The following configuration is an example of how to use Active Directory as authentication backend. Queries are done via LDAP." +msgstr "Вбудований проксі-сервер Squid може використовувати LDAP для автентифікації користувачів у загальному каталозі компанії. Наведена нижче конфігурація є прикладом того, як використовувати Active Directory як сервер автентифікації. Запити виконуються через LDAP." #: ../../configuration/vpn/l2tp.rst:105 msgid "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." -msgstr "The example above uses 192.0.2.2 as external IP address. A LAC normally requires an authentication password, which is set in the example configuration to ``lns shared-secret 'secret'``. This setup requires the Compression Control Protocol (CCP) being disabled, the command ``set vpn l2tp remote-access ccp-disable`` accomplishes that." +msgstr "У прикладі вище використовується 192.0.2.2 як зовнішня IP-адреса. Для LAC зазвичай потрібен пароль автентифікації, який у прикладі конфігурації встановлено як ``lns shared-secret 'secret'``. Для цього налаштування потрібно вимкнути протокол керування стисненням (CCP), це можна зробити за допомогою команди ``set vpn l2tp remote-access ccp-disable``." -#: ../../configuration/service/pppoe-server.rst:369 +#: ../../configuration/service/pppoe-server.rst:627 +msgid "The example below covers a dual-stack configuration." +msgstr "The example below covers a dual-stack configuration." + +#: ../../configuration/service/pppoe-server.rst:627 msgid "The example below covers a dual-stack configuration via pppoe-server." -msgstr "The example below covers a dual-stack configuration via pppoe-server." +msgstr "Наведений нижче приклад охоплює конфігурацію подвійного стеку через pppoe-сервер." -#: ../../configuration/service/pppoe-server.rst:348 +#: ../../configuration/service/pppoe-server.rst:606 msgid "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." -msgstr "The example below uses ACN as access-concentrator name, assigns an address from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and serves requests only on eth1." +msgstr "У прикладі нижче використовується ACN як ім’я концентратора доступу, призначається адреса з пулу 10.1.1.100-111, завершується на локальній кінцевій точці 10.1.1.1 і обслуговує запити лише на eth1." -#: ../../configuration/service/ipoe-server.rst:35 +#: ../../configuration/service/ipoe-server.rst:34 msgid "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." -msgstr "The example configuration below will assign an IP to the client on the incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration." +msgstr "Наведений нижче приклад конфігурації призначить IP-адресу клієнту на вхідному інтерфейсі eth2 з mac-адресою клієнта 08:00:27:2f:d8:06. Інші запити на виявлення DHCP ігноруватимуться, якщо в конфігурації не ввімкнено клієнтський mac." #: ../../configuration/interfaces/wireless.rst:303 msgid "The example creates a wireless station (commonly referred to as Wi-Fi client) that accesses the network through the WAP defined in the above example. The default physical device (``phy0``) is used." -msgstr "The example creates a wireless station (commonly referred to as Wi-Fi client) that accesses the network through the WAP defined in the above example. The default physical device (``phy0``) is used." +msgstr "У цьому прикладі створюється бездротова станція (яка зазвичай називається клієнтом Wi-Fi), яка отримує доступ до мережі через WAP, визначений у прикладі вище. Використовується фізичний пристрій за умовчанням (``phy0``)." #: ../../configuration/nat/nat44.rst:331 msgid "The external IP address to translate to" -msgstr "The external IP address to translate to" +msgstr "Зовнішня IP-адреса для перекладу" #: ../../configuration/firewall/general.rst:16 msgid "The firewall supports the creation of groups for addresses, domains, interfaces, mac-addresses, networks and port groups. This groups can be used later in firewall ruleset as desired." @@ -13013,23 +14497,23 @@ msgstr "The firewall supports the creation of groups for addresses, domains, int #: ../../configuration/firewall/general-legacy.rst:20 msgid "The firewall supports the creation of groups for ports, addresses, and networks (implemented using netfilter ipset) and the option of interface or zone based firewall policy." -msgstr "The firewall supports the creation of groups for ports, addresses, and networks (implemented using netfilter ipset) and the option of interface or zone based firewall policy." +msgstr "Брандмауер підтримує створення груп для портів, адрес і мереж (реалізовано за допомогою netfilter ipset), а також опцію політики брандмауера на основі інтерфейсу або зони." #: ../../configuration/container/index.rst:50 msgid "The first IP in the container network is reserved by the engine and cannot be used" -msgstr "The first IP in the container network is reserved by the engine and cannot be used" +msgstr "Перша IP-адреса в контейнерній мережі зарезервована механізмом і не може бути використана" #: ../../configuration/service/ipoe-server.rst:49 msgid "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." -msgstr "The first address of the parameter ``client-subnet``, will be used as the default gateway. Connected sessions can be checked via the ``show ipoe-server sessions`` command." +msgstr "Перша адреса параметра ``client-subnet`` буде використана як шлюз за замовчуванням. Підключені сеанси можна перевірити за допомогою команди ``show ipoe-server sessions``." -#: ../../configuration/vpn/ipsec.rst:174 +#: ../../configuration/vpn/ipsec.rst:178 msgid "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." -msgstr "The first and arguably cleaner option is to make your IPsec policy match GRE packets between external addresses of your routers. This is the best option if both routers have static external addresses." +msgstr "Перший і, мабуть, чистіший варіант — зробити так, щоб ваша політика IPsec відповідала пакетам GRE між зовнішніми адресами ваших маршрутизаторів. Це найкращий варіант, якщо обидва маршрутизатори мають статичні зовнішні адреси." #: ../../_include/interface-disable-flow-control.txt:8 msgid "The first flow control mechanism, the pause frame, was defined by the IEEE 802.3x standard." -msgstr "The first flow control mechanism, the pause frame, was defined by the IEEE 802.3x standard." +msgstr "Перший механізм керування потоком, кадр паузи, був визначений стандартом IEEE 802.3x." #: ../../configuration/protocols/pim.rst:93 msgid "The first ip address is the RP's address and the second value is the matching prefix of group ranges covered." @@ -13037,35 +14521,39 @@ msgstr "The first ip address is the RP's address and the second value is the mat #: ../../configuration/vpn/dmvpn.rst:63 msgid "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." -msgstr "The first registration request is sent to the protocol broadcast address, and the server's real protocol address is dynamically detected from the first registration reply." +msgstr "Перший запит на реєстрацію надсилається на широкомовну адресу протоколу, а справжня адреса протоколу сервера динамічно визначається з першої відповіді на реєстрацію." -#: ../../configuration/vpn/sstp.rst:311 +#: ../../configuration/vpn/sstp.rst:484 msgid "The following PPP configuration tests MSCHAP-v2:" -msgstr "The following PPP configuration tests MSCHAP-v2:" +msgstr "Наступна конфігурація PPP тестує MSCHAP-v2:" -#: ../../configuration/system/login.rst:143 +#: ../../configuration/system/login.rst:147 msgid "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" -msgstr "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" +msgstr "Наступну команду можна використати для створення ключа OTP, а також команд CLI для їх налаштування:" + +#: ../../configuration/protocols/bgp.rst:664 +msgid "The following command uses the explicit-null label value for all the BGP instances." +msgstr "The following command uses the explicit-null label value for all the BGP instances." #: ../../configuration/interfaces/openvpn.rst:708 msgid "The following commands let you check tunnel status." -msgstr "The following commands let you check tunnel status." +msgstr "Наступні команди дозволяють перевірити статус тунелю." #: ../../configuration/interfaces/openvpn.rst:727 msgid "The following commands let you reset OpenVPN." -msgstr "The following commands let you reset OpenVPN." +msgstr "Наступні команди дозволяють скинути OpenVPN." #: ../../configuration/container/index.rst:35 msgid "The following commands translate to \"--net host\" when the container is created" -msgstr "The following commands translate to \"--net host\" when the container is created" +msgstr "Наступні команди перетворюються на "--net host" під час створення контейнера" -#: ../../configuration/vrf/index.rst:101 +#: ../../configuration/vrf/index.rst:120 msgid "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" -msgstr "The following commands would be required to set options for a given dynamic routing protocol inside a given vrf:" +msgstr "Для встановлення параметрів для даного протоколу динамічної маршрутизації в даному vrf знадобляться наступні команди:" -#: ../../configuration/loadbalancing/reverse-proxy.rst:212 +#: ../../configuration/loadbalancing/reverse-proxy.rst:253 msgid "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." -msgstr "The following configuration demonstrates how to use VyOS to achieve load balancing based on the domain name." +msgstr "Наступна конфігурація демонструє, як використовувати VyOS для досягнення балансування навантаження на основі доменного імені." #: ../../configuration/protocols/pim6.rst:87 msgid "The following configuration explicitly joins multicast group `ff15::1234` on interface `eth1` and source-specific multicast group `ff15::5678` with source address `2001:db8::1` on interface `eth1`:" @@ -13073,35 +14561,47 @@ msgstr "The following configuration explicitly joins multicast group `ff15::1234 #: ../../configuration/interfaces/bonding.rst:293 msgid "The following configuration on VyOS applies to all following 3rd party vendors. It creates a bond with two links and VLAN 10, 100 on the bonded interfaces with a per VIF IPv4 address." -msgstr "The following configuration on VyOS applies to all following 3rd party vendors. It creates a bond with two links and VLAN 10, 100 on the bonded interfaces with a per VIF IPv4 address." +msgstr "Наступна конфігурація на VyOS застосовується до всіх наступних сторонніх постачальників. Він створює зв’язок із двома посиланнями та VLAN 10, 100 на зв’язаних інтерфейсах з адресою IPv4 для кожного VIF." #: ../../configuration/loadbalancing/reverse-proxy.rst:246 msgid "The following configuration reverse-proxy terminate SSL." -msgstr "The following configuration reverse-proxy terminate SSL." +msgstr "Наступна конфігурація зворотного проксі завершує SSL." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:287 +msgid "The following configuration terminates SSL on the router." +msgstr "The following configuration terminates SSL on the router." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:334 +msgid "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." +msgstr "The following configuration terminates incoming HTTPS traffic on the router, then re-encrypts the traffic and sends to the backend server via HTTPS. This is useful if encryption is required for both legs, but you do not want to install publicly trusted certificates on each backend server." #: ../../configuration/interfaces/pppoe.rst:383 msgid "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." -msgstr "The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0." +msgstr "Наступна конфігурація призначить префікс /64 з делегування /56 для eth0. Адреса IPv6, призначена eth0, буде<prefix> ::ffff/64. Якщо ви не знаєте розмір делегованого вам префікса, почніть із sla-len 0." + +#: ../../configuration/interfaces/pppoe.rst:383 +msgid "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." +msgstr "The following configuration will setup a PPPoE session source from eth1 and assign a /64 prefix out of a /56 delegation (requested from the ISP) to eth0. The IPv6 address assigned to eth0 will be <prefix>::1/64. If you do not know the prefix size delegated to you, start with sla-len 0." #: ../../configuration/policy/examples.rst:155 msgid "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." -msgstr "The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` for traffic, which originated from the router itself. That solution for multiple ISP's and VyOS router will respond from the same interface that the packet was received. Also, it used, if we want that one VPN tunnel to be through one provider, and the second through another." +msgstr "Наступний приклад дозволяє VyOS використовувати :abbr:`PBR (Policy-Based Routing)` для трафіку, який походить від самого маршрутизатора. Це рішення для кількох провайдерів і маршрутизатора VyOS відповідатиме з того самого інтерфейсу, з якого було отримано пакет. Крім того, він використовується, якщо ми хочемо, щоб один тунель VPN проходив через одного провайдера, а другий через іншого." #: ../../configuration/interfaces/wireless.rst:543 msgid "The following example creates a WAP. When configuring multiple WAP interfaces, you must specify unique IP addresses, channels, Network IDs commonly referred to as :abbr:`SSID (Service Set Identifier)`, and MAC addresses." -msgstr "The following example creates a WAP. When configuring multiple WAP interfaces, you must specify unique IP addresses, channels, Network IDs commonly referred to as :abbr:`SSID (Service Set Identifier)`, and MAC addresses." +msgstr "У наступному прикладі створюється WAP. Під час налаштування кількох інтерфейсів WAP ви повинні вказати унікальні IP-адреси, канали, мережеві ідентифікатори, які зазвичай називаються :abbr:`SSID (ідентифікатор набору послуг)`, і MAC-адреси." #: ../../configuration/interfaces/wwan.rst:296 msgid "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." -msgstr "The following example is based on a Sierra Wireless MC7710 miniPCIe card (only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. The card is assembled into a :ref:`pc-engines-apu4`." +msgstr "Наступний приклад базується на карті Sierra Wireless MC7710 miniPCIe (тільки форм-фактор насправді працює з UBS) і Deutsche Telekom як ISP. Картка збирається в :ref:`pc-engines-apu4`." -#: ../../configuration/vrf/index.rst:237 +#: ../../configuration/vrf/index.rst:256 msgid "The following example topology was built using EVE-NG." -msgstr "The following example topology was built using EVE-NG." +msgstr "Наступний приклад топології було побудовано за допомогою EVE-NG." #: ../../configuration/policy/examples.rst:58 msgid "The following example will show how VyOS can be used to redirect web traffic to an external transparent proxy:" -msgstr "The following example will show how VyOS can be used to redirect web traffic to an external transparent proxy:" +msgstr "У наступному прикладі показано, як VyOS можна використовувати для перенаправлення веб-трафіку на зовнішній прозорий проксі-сервер:" #: ../../configuration/nat/nat64.rst:40 msgid "The following examples show how to configure NAT64 on a VyOS router. The 192.0.2.10 address is used as the IPv4 address for the translation pool." @@ -13109,100 +14609,100 @@ msgstr "The following examples show how to configure NAT64 on a VyOS router. The #: ../../configuration/interfaces/wwan.rst:309 msgid "The following hardware modules have been tested successfully in an :ref:`pc-engines-apu4` board:" -msgstr "The following hardware modules have been tested successfully in an :ref:`pc-engines-apu4` board:" +msgstr "Наступні апаратні модулі були успішно протестовані на платі :ref:`pc-engines-apu4`:" #: ../../configuration/interfaces/wireguard.rst:302 msgid "The following is the config for the iPhone peer above. It's important to note that the ``AllowedIPs`` wildcard setting directs all IPv4 and IPv6 traffic through the connection." -msgstr "The following is the config for the iPhone peer above. It's important to note that the ``AllowedIPs`` wildcard setting directs all IPv4 and IPv6 traffic through the connection." +msgstr "Нижче наведено конфігурацію для аналога iPhone вище. Важливо зауважити, що параметр підстановки ``AllowedIPs`` спрямовує весь трафік IPv4 і IPv6 через з’єднання." #: ../../configuration/vrf/index.rst:54 msgid "The following protocols can be used: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" -msgstr "The following protocols can be used: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" +msgstr "Можна використовувати наступні протоколи: any, babel, bgp,connected, eigrp, isis, kernel, ospf, rip, static, table" #: ../../configuration/vrf/index.rst:64 msgid "The following protocols can be used: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" -msgstr "The following protocols can be used: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" +msgstr "Можна використовувати наступні протоколи: any, babel, bgp,connected, isis, kernel, ospfv3, ripng, static, table" #: ../../configuration/index.rst:5 msgid "The following structure respresent the cli structure." -msgstr "The following structure respresent the cli structure." +msgstr "Наступна структура представляє структуру cli." #: ../../configuration/interfaces/bonding.rst:205 msgid "The formula for unfragmented TCP and UDP packets is" -msgstr "The formula for unfragmented TCP and UDP packets is" +msgstr "Формула для нефрагментованих пакетів TCP і UDP така" #: ../../configuration/interfaces/bridge.rst:107 msgid "The forwarding delay time is the time spent in each of the listening and learning states before the Forwarding state is entered. This delay is so that when a new bridge comes onto a busy network it looks at some traffic before participating." -msgstr "The forwarding delay time is the time spent in each of the listening and learning states before the Forwarding state is entered. This delay is so that when a new bridge comes onto a busy network it looks at some traffic before participating." +msgstr "Час затримки переадресації — це час, витрачений у кожному із станів прослуховування та навчання до переходу в стан переадресації. Ця затримка полягає в тому, що коли новий міст під’єднується до завантаженої мережі, він переглядає деякий трафік перед тим, як брати участь." #: ../../configuration/service/dhcp-relay.rst:98 #: ../../configuration/service/dhcp-relay.rst:186 msgid "The generated configuration will look like:" -msgstr "The generated configuration will look like:" +msgstr "Згенерована конфігурація матиме такий вигляд:" -#: ../../configuration/pki/index.rst:107 +#: ../../configuration/pki/index.rst:109 msgid "The generated parameters are then output to the console." -msgstr "The generated parameters are then output to the console." +msgstr "Згенеровані параметри потім виводяться на консоль." #: ../../configuration/trafficpolicy/index.rst:12 msgid "The generic name of Quality of Service or Traffic Control involves things like shaping traffic, scheduling or dropping packets, which are the kind of things you may want to play with when you have, for instance, a bandwidth bottleneck in a link and you want to somehow prioritize some type of traffic over another." -msgstr "The generic name of Quality of Service or Traffic Control involves things like shaping traffic, scheduling or dropping packets, which are the kind of things you may want to play with when you have, for instance, a bandwidth bottleneck in a link and you want to somehow prioritize some type of traffic over another." +msgstr "Загальна назва «Якість обслуговування» або «Контроль трафіку» включає такі речі, як формування трафіку, планування або відкидання пакетів, які є тими речами, з якими ви можете пограти, коли у вас, наприклад, є вузьке місце в смузі пропускання та ви хочете якимось чином віддавати перевагу одному типу трафіку над іншим." #: ../../configuration/service/salt-minion.rst:29 msgid "The hash type used when discovering file on master server (default: sha256)" -msgstr "The hash type used when discovering file on master server (default: sha256)" +msgstr "Тип хешу, який використовується під час виявлення файлу на головному сервері (за замовчуванням: sha256)" #: ../../configuration/loadbalancing/wan.rst:126 msgid "The health of interfaces and paths assigned to the load balancer is periodically checked by sending ICMP packets (ping) to remote destinations, a TTL test or the execution of a user defined script. If an interface fails the health check it is removed from the load balancer's pool of interfaces. To enable health checking for an interface:" -msgstr "The health of interfaces and paths assigned to the load balancer is periodically checked by sending ICMP packets (ping) to remote destinations, a TTL test or the execution of a user defined script. If an interface fails the health check it is removed from the load balancer's pool of interfaces. To enable health checking for an interface:" +msgstr "Справність інтерфейсів і шляхів, призначених балансувальнику навантаження, періодично перевіряється шляхом надсилання пакетів ICMP (ping) у віддалені пункти призначення, перевірки TTL або виконання визначеного користувачем сценарію. Якщо інтерфейс не пройшов перевірку працездатності, він видаляється з пулу інтерфейсів балансувальника навантаження. Щоб увімкнути перевірку справності для інтерфейсу:" #: ../../configuration/protocols/ospf.rst:404 msgid "The hello-multiplier specifies how many Hellos to send per second, from 1 (every second) to 10 (every 100ms). Thus one can have 1s convergence time for OSPF. If this form is specified, then the hello-interval advertised in Hello packets is set to 0 and the hello-interval on received Hello packets is not checked, thus the hello-multiplier need NOT be the same across multiple routers on a common link." -msgstr "The hello-multiplier specifies how many Hellos to send per second, from 1 (every second) to 10 (every 100ms). Thus one can have 1s convergence time for OSPF. If this form is specified, then the hello-interval advertised in Hello packets is set to 0 and the hello-interval on received Hello packets is not checked, thus the hello-multiplier need NOT be the same across multiple routers on a common link." +msgstr "Hello-multiplier визначає, скільки Hello надсилати за секунду, від 1 (щосекунди) до 10 (кожні 100 мс). Таким чином, можна мати час конвергенції 1 с для OSPF. Якщо вказано цю форму, інтервал привітання, який оголошується в пакетах Hello, встановлюється на 0, а інтервал привітання для отриманих пакетів Hello не перевіряється, отже, множник привітання НЕ повинен бути однаковим на кількох маршрутизаторах у спільному з’єднанні." #: ../../configuration/system/host-name.rst:25 msgid "The hostname can be up to 63 characters. A hostname must start and end with a letter or digit, and have as interior characters only letters, digits, or a hyphen." -msgstr "The hostname can be up to 63 characters. A hostname must start and end with a letter or digit, and have as interior characters only letters, digits, or a hyphen." +msgstr "Ім’я хосту може містити до 63 символів. Ім’я хосту має починатися й закінчуватися літерою чи цифрою, а внутрішніми символами повинні бути лише літери, цифри чи дефіс." #: ../../configuration/service/salt-minion.rst:41 msgid "The hostname or IP address of the master" -msgstr "The hostname or IP address of the master" +msgstr "Ім'я хоста або IP-адреса головного пристрою" -#: ../../configuration/service/dhcp-server.rst:632 +#: ../../configuration/service/dhcp-server.rst:693 msgid "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." -msgstr "The identifier is the device's DUID: colon-separated hex list (as used by isc-dhcp option dhcpv6.client-id). If the device already has a dynamic lease from the DHCPv6 server, its DUID can be found with ``show service dhcpv6 server leases``. The DUID begins at the 5th octet (after the 4th colon) of IAID_DUID." +msgstr "Ідентифікатором є DUID пристрою: шістнадцятковий список, розділений двокрапками (як використовується опцією isc-dhcp dhcpv6.client-id). Якщо пристрій уже має динамічну оренду від сервера DHCPv6, його DUID можна знайти за допомогою ``show service dhcpv6 server leases``. DUID починається з 5-го октету (після 4-ї двокрапки) IAID_DUID." #: ../../configuration/vpn/dmvpn.rst:237 msgid "The individual spoke configurations only differ in the local IP address on the ``tun10`` interface. See the above diagram for the individual IP addresses." -msgstr "The individual spoke configurations only differ in the local IP address on the ``tun10`` interface. See the above diagram for the individual IP addresses." +msgstr "Окремі конфігурації спіці відрізняються лише локальною IP-адресою в інтерфейсі ``tun10``. Дивіться діаграму вище для окремих IP-адрес." #: ../../_include/interface-vlan-8021ad.txt:25 msgid "The inner tag is the tag which is closest to the payload portion of the frame. It is officially called C-TAG (customer tag, with ethertype 0x8100). The outer tag is the one closer/closest to the Ethernet header, its name is S-TAG (service tag with Ethernet Type = 0x88a8)." -msgstr "The inner tag is the tag which is closest to the payload portion of the frame. It is officially called C-TAG (customer tag, with ethertype 0x8100). The outer tag is the one closer/closest to the Ethernet header, its name is S-TAG (service tag with Ethernet Type = 0x88a8)." +msgstr "Внутрішній тег – це тег, який є найближчим до частини корисного навантаження кадру. Він офіційно називається C-TAG (тег клієнта з типом ефіру 0x8100). Зовнішній тег є ближчим/найближчим до заголовка Ethernet, його назва S-TAG (сервісний тег із типом Ethernet = 0x88a8)." #: ../../configuration/nat/nat44.rst:523 msgid "The interface traffic will be coming in on;" -msgstr "The interface traffic will be coming in on;" +msgstr "Трафік інтерфейсу надходитиме на;" #: ../../configuration/service/broadcast-relay.rst:27 msgid "The interface used to receive and relay individual broadcast packets. If you want to receive/relay packets on both `eth1` and `eth2` both interfaces need to be added." -msgstr "The interface used to receive and relay individual broadcast packets. If you want to receive/relay packets on both `eth1` and `eth2` both interfaces need to be added." +msgstr "Інтерфейс, який використовується для отримання та ретрансляції окремих широкомовних пакетів. Якщо ви хочете отримувати/ретранслювати пакети як на `eth1`, так і на `eth2`, потрібно додати обидва інтерфейси." #: ../../configuration/nat/nat44.rst:329 msgid "The internal IP addresses we want to translate" -msgstr "The internal IP addresses we want to translate" +msgstr "Внутрішні IP-адреси, які ми хочемо перекласти" #: ../../configuration/interfaces/l2tpv3.rst:105 msgid "The inverse configuration has to be applied to the remote side." -msgstr "The inverse configuration has to be applied to the remote side." +msgstr "Зворотну конфігурацію необхідно застосувати до віддаленої сторони." #: ../../configuration/interfaces/pppoe.rst:332 msgid "The largest MTU size you can use with DSL is 1492 due to PPPoE overhead. If you are switching from a DHCP based ISP like cable then be aware that things like VPN links may need to have their MTU sizes adjusted to work within this limit." -msgstr "The largest MTU size you can use with DSL is 1492 due to PPPoE overhead. If you are switching from a DHCP based ISP like cable then be aware that things like VPN links may need to have their MTU sizes adjusted to work within this limit." +msgstr "Найбільший розмір MTU, який можна використовувати з DSL, становить 1492 через витрати PPPoE. Якщо ви переходите з DHCP-провайдера, наприклад кабелю, пам’ятайте, що такі речі, як посилання VPN, можуть потребувати коригування розміру MTU для роботи в межах цього ліміту." #: ../../configuration/interfaces/wireguard.rst:163 msgid "The last step is to define an interface route for 192.168.2.0/24 to get through the WireGuard interface `wg01`. Multiple IPs or networks can be defined and routed. The last check is allowed-ips which either prevents or allows the traffic." -msgstr "The last step is to define an interface route for 192.168.2.0/24 to get through the WireGuard interface `wg01`. Multiple IPs or networks can be defined and routed. The last check is allowed-ips which either prevents or allows the traffic." +msgstr "Останнім кроком є визначення маршруту інтерфейсу для 192.168.2.0/24 для проходу через інтерфейс WireGuard `wg01`. Можна визначити та маршрутизувати кілька IP-адрес або мереж. Останньою перевіркою є дозволений ips, який або запобігає, або дозволяє трафік." #: ../../configuration/firewall/index.rst:12 msgid "The legacy and zone-based firewall configuration options is not longer supported. They are here for reference purposes only." @@ -13210,27 +14710,27 @@ msgstr "The legacy and zone-based firewall configuration options is not longer s #: ../../configuration/trafficpolicy/index.rst:552 msgid "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." -msgstr "The limiter performs basic ingress policing of traffic flows. Multiple classes of traffic can be defined and traffic limits can be applied to each class. Although the policer uses a token bucket mechanism internally, it does not have the capability to delay a packet as a shaping mechanism does. Traffic exceeding the defined bandwidth limits is directly dropped. A maximum allowed burst can be configured too." +msgstr "Обмежувач виконує основне контрольування потоків трафіку. Можна визначити декілька класів трафіку та застосувати обмеження трафіку до кожного класу. Незважаючи на те, що полісер використовує внутрішній механізм відра маркерів, він не має можливості затримувати пакет, як це робить механізм формування. Трафік, що перевищує визначені обмеження пропускної здатності, безпосередньо відкидається. Також можна налаштувати максимальний дозволений пакет." -#: ../../configuration/policy/route-map.rst:255 +#: ../../configuration/policy/route-map.rst:258 msgid "The link bandwidth extended community is encoded as non-transitive" -msgstr "The link bandwidth extended community is encoded as non-transitive" +msgstr "Спільнота розширеної пропускної здатності каналу кодується як неперехідна" #: ../../configuration/service/dns.rst:132 msgid "The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder will listen on this address for incoming connections." -msgstr "The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder will listen on this address for incoming connections." +msgstr "Локальні адреси IPv4 або IPv6, до яких потрібно прив’язати DNS-переадресатор. Пересилач прослуховуватиме цю адресу на наявність вхідних з’єднань." #: ../../configuration/service/dns.rst:137 msgid "The local IPv4 or IPv6 addresses to use as a source address for sending queries. The forwarder will send forwarded outbound DNS requests from this address." -msgstr "The local IPv4 or IPv6 addresses to use as a source address for sending queries. The forwarder will send forwarded outbound DNS requests from this address." +msgstr "Локальні адреси IPv4 або IPv6 для використання як адреси джерела для надсилання запитів. Переадресатор надсилатиме перенаправлені вихідні DNS-запити з цієї адреси." #: ../../configuration/interfaces/openvpn.rst:62 msgid "The local site will have a subnet of 10.0.0.0/16." -msgstr "The local site will have a subnet of 10.0.0.0/16." +msgstr "Локальний сайт матиме підмережу 10.0.0.0/16." #: ../../configuration/interfaces/loopback.rst:9 msgid "The loopback networking interface is a virtual network device implemented entirely in software. All traffic sent to it \"loops back\" and just targets services on your local machine." -msgstr "The loopback networking interface is a virtual network device implemented entirely in software. All traffic sent to it \"loops back\" and just targets services on your local machine." +msgstr "Петлевий мережевий інтерфейс — це пристрій віртуальної мережі, повністю реалізований у програмному забезпеченні. Увесь трафік, що надсилається до нього, "зворотно повертається" та лише націлюється на служби на вашій локальній машині." #: ../../configuration/firewall/index.rst:20 msgid "The main points regarding this packet flow and terminology used in VyOS firewall are covered below:" @@ -13240,65 +14740,73 @@ msgstr "The main points regarding this packet flow and terminology used in VyOS msgid "The main structure VyOS firewall cli is shown next:" msgstr "The main structure VyOS firewall cli is shown next:" +#: ../../configuration/firewall/index.rst:92 +msgid "The main structure of the VyOS firewall CLI is shown next:" +msgstr "The main structure of the VyOS firewall CLI is shown next:" + #: ../../configuration/interfaces/bonding.rst:271 msgid "The maximum number of targets that can be specified is 16. The default value is no IP address." -msgstr "The maximum number of targets that can be specified is 16. The default value is no IP address." +msgstr "Максимальна кількість цілей, яку можна вказати, становить 16. Значенням за замовчуванням є відсутність IP-адреси." #: ../../configuration/trafficpolicy/index.rst:130 msgid "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." -msgstr "The meaning of the Class ID is not the same for every type of policy. Normally policies just need a meaningless number to identify a class (Class ID), but that does not apply to every policy. The number of a class in a Priority Queue it does not only identify it, it also defines its priority." +msgstr "Значення ідентифікатора класу не однакове для кожного типу політики. Зазвичай політикам потрібен лише безглуздий номер для ідентифікації класу (ідентифікатор класу), але це стосується не кожної політики. Номер класу в черзі пріоритетів не лише ідентифікує його, але й визначає його пріоритет." -#: ../../configuration/interfaces/bridge.rst:230 +#: ../../configuration/interfaces/bridge.rst:239 msgid "The member interface `eth1` is a trunk that allows VLAN 10 to pass" -msgstr "The member interface `eth1` is a trunk that allows VLAN 10 to pass" +msgstr "Інтерфейс члена `eth1` — це магістраль, яка дозволяє пропускати VLAN 10" #: ../../configuration/protocols/isis.rst:180 msgid "The metric range is 1 to 16777215 (Max value depend if metric support narrow or wide value)." -msgstr "The metric range is 1 to 16777215 (Max value depend if metric support narrow or wide value)." +msgstr "Діапазон показників становить від 1 до 16777215 (максимальне значення залежить від того, чи підтримується вузьке чи широке значення показника)." #: ../../configuration/protocols/bfd.rst:43 msgid "The minimal echo receive transmission interval that this system is capable of handling" -msgstr "The minimal echo receive transmission interval that this system is capable of handling" +msgstr "Мінімальний інтервал отримання ехо-сигналу, який здатна впоратися з цією системою" #: ../../configuration/service/ssh.rst:18 msgid "The most visible application of the protocol is for access to shell accounts on Unix-like operating systems, but it sees some limited use on Windows as well. In 2015, Microsoft announced that they would include native support for SSH in a future release." -msgstr "The most visible application of the protocol is for access to shell accounts on Unix-like operating systems, but it sees some limited use on Windows as well. In 2015, Microsoft announced that they would include native support for SSH in a future release." +msgstr "Найпомітнішим застосуванням протоколу є доступ до облікових записів оболонки в Unix-подібних операційних системах, але він також має обмежене застосування в Windows. У 2015 році корпорація Майкрософт оголосила, що в майбутньому випуску буде включено вбудовану підтримку SSH." #: ../../configuration/interfaces/vxlan.rst:313 msgid "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." -msgstr "The multicast-group used by all leaves for this vlan extension. Has to be the same on all leaves that has this interface." +msgstr "Багатоадресна група, яка використовується всіма, залишає це розширення vlan. Має бути однаковим на всіх листах, які мають цей інтерфейс." -#: ../../configuration/loadbalancing/reverse-proxy.rst:182 +#: ../../configuration/loadbalancing/reverse-proxy.rst:222 msgid "The name of the service can be different, in this example it is only for convenience." -msgstr "The name of the service can be different, in this example it is only for convenience." +msgstr "Назва послуги може бути різною, в даному прикладі лише для зручності." + +#: ../../configuration/service/dns.rst:171 +msgid "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." +msgstr "The netmask or domain that EDNS Client Subnet should be enabled for in outgoing queries." #: ../../configuration/service/dhcp-server.rst:13 msgid "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." -msgstr "The network topology is declared by shared-network-name and the subnet declarations. The DHCP service can serve multiple shared networks, with each shared network having 1 or more subnets. Each subnet must be present on an interface. A range can be declared inside a subnet to define a pool of dynamic addresses. Multiple ranges can be defined and can contain holes. Static mappings can be set to assign \"static\" addresses to clients based on their MAC address." +msgstr "Топологія мережі оголошується деклараціями shared-network-name і subnet. Служба DHCP може обслуговувати кілька спільних мереж, кожна з яких має 1 або більше підмереж. Кожна підмережа повинна бути присутня на інтерфейсі. Діапазон може бути оголошений всередині підмережі, щоб визначити пул динамічних адрес. Можна визначити кілька діапазонів, які можуть містити отвори. Статичні відображення можна налаштувати для призначення «статичних» адрес клієнтам на основі їхніх MAC-адрес." -#: ../../configuration/service/conntrack-sync.rst:188 +#: ../../configuration/service/conntrack-sync.rst:197 msgid "The next example is a simple configuration of conntrack-sync." -msgstr "The next example is a simple configuration of conntrack-sync." +msgstr "Наступний приклад — проста конфігурація conntrack-sync." #: ../../configuration/interfaces/wireguard.rst:128 msgid "The next step is to configure your local side as well as the policy based trusted destination addresses. If you only initiate a connection, the listen port and address/port is optional; however, if you act like a server and endpoints initiate the connections to your system, you need to define a port your clients can connect to, otherwise the port is randomly chosen and may make connection difficult with firewall rules, since the port may be different each time the system is rebooted." -msgstr "The next step is to configure your local side as well as the policy based trusted destination addresses. If you only initiate a connection, the listen port and address/port is optional; however, if you act like a server and endpoints initiate the connections to your system, you need to define a port your clients can connect to, otherwise the port is randomly chosen and may make connection difficult with firewall rules, since the port may be different each time the system is rebooted." +msgstr "Наступним кроком є налаштування локальної сторони, а також довірених адрес призначення на основі політики. Якщо ви лише ініціюєте з’єднання, порт прослуховування та адреса/порт є необов’язковими; однак, якщо ви дієте як сервер і кінцеві точки ініціюють з’єднання з вашою системою, вам потрібно визначити порт, до якого ваші клієнти можуть підключатися, інакше порт вибирається випадково і може ускладнити підключення через правила брандмауера, оскільки порт може відрізнятися кожного разу, коли система перезавантажується." #: ../../configuration/vpn/rsa-keys.rst:38 msgid "The noted public keys should be entered on the opposite routers." -msgstr "The noted public keys should be entered on the opposite routers." +msgstr "Зазначені відкриті ключі слід ввести на протилежних маршрутизаторах." #: ../../configuration/service/dns.rst:125 msgid "The number of milliseconds to wait for a remote authoritative server to respond before timing out and responding with SERVFAIL." -msgstr "The number of milliseconds to wait for a remote authoritative server to respond before timing out and responding with SERVFAIL." +msgstr "Кількість мілісекунд очікування відповіді віддаленого повноважного сервера перед тим, як завершиться час очікування та відповість SERVFAIL." #: ../../configuration/protocols/bgp.rst:331 msgid "The number parameter (1-10) configures the amount of accepted occurences of the system AS number in AS path." -msgstr "The number parameter (1-10) configures the amount of accepted occurences of the system AS number in AS path." +msgstr "Параметр числа (1-10) налаштовує кількість прийнятих входжень номера AS системи в шляху AS." #: ../../configuration/interfaces/openvpn.rst:64 msgid "The official port for OpenVPN is 1194, which we reserve for client VPN; we will use 1195 for site-to-site VPN." -msgstr "The official port for OpenVPN is 1194, which we reserve for client VPN; we will use 1195 for site-to-site VPN." +msgstr "Офіційний порт для OpenVPN – 1194, який ми резервуємо для клієнтської VPN; ми будемо використовувати 1195 для VPN типу "сайт-сайт"." #: ../../configuration/firewall/index.rst:32 msgid "The only stages VyOS will process as part of the firewall configuration is the `forward` (F4 stage), `input` (L4 stage), and `output` (L5 stage). All the other stages and steps are for reference and cant be manipulated through VyOS." @@ -13306,264 +14814,279 @@ msgstr "The only stages VyOS will process as part of the firewall configuration #: ../../configuration/protocols/ospf.rst:155 msgid "The optional `disable` option allows to exclude interface from passive state. This command is used if the command :cfgcmd:`passive-interface default` was configured." -msgstr "The optional `disable` option allows to exclude interface from passive state. This command is used if the command :cfgcmd:`passive-interface default` was configured." +msgstr "Додаткова опція `disable` дозволяє виключити інтерфейс із пасивного стану. Ця команда використовується, якщо була налаштована команда :cfgcmd:`passive-interface default`." #: ../../configuration/vpn/dmvpn.rst:93 msgid "The optional parameter register specifies that Registration Request should be sent to this peer on startup." -msgstr "The optional parameter register specifies that Registration Request should be sent to this peer on startup." +msgstr "Необов'язковий параметр register вказує, що запит на реєстрацію слід надіслати цьому вузлу під час запуску." #: ../../_include/interface-vlan-8021ad.txt:10 msgid "The original 802.1q_ specification allows a single Virtual Local Area Network (VLAN) header to be inserted into an Ethernet frame. QinQ allows multiple VLAN tags to be inserted into a single frame, an essential capability for implementing Metro Ethernet network topologies. Just as QinQ extends 802.1Q, QinQ itself is extended by other Metro Ethernet protocols." -msgstr "The original 802.1q_ specification allows a single Virtual Local Area Network (VLAN) header to be inserted into an Ethernet frame. QinQ allows multiple VLAN tags to be inserted into a single frame, an essential capability for implementing Metro Ethernet network topologies. Just as QinQ extends 802.1Q, QinQ itself is extended by other Metro Ethernet protocols." +msgstr "Оригінальна специфікація 802.1q_ дозволяє вставляти один заголовок віртуальної локальної мережі (VLAN) у кадр Ethernet. QinQ дозволяє вставляти кілька тегів VLAN в один кадр, що є важливою можливістю для реалізації мережевих топологій Metro Ethernet. Так само, як QinQ розширює 802.1Q, сам QinQ розширюється іншими протоколами Metro Ethernet." #: ../../configuration/nat/nat44.rst:330 msgid "The outgoing interface to perform the translation on" -msgstr "The outgoing interface to perform the translation on" +msgstr "Вихідний інтерфейс для виконання перекладу" #: ../../configuration/vpn/site2site_ipsec.rst:13 msgid "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." -msgstr "The peer name must be an alphanumeric and can have hypen or underscore as special characters. It is purely informational." +msgstr "Ім’я вузла має бути буквено-цифровим і може мати дефіс або підкреслення як спеціальні символи. Це суто інформаційний характер." -#: ../../configuration/vpn/ipsec.rst:235 +#: ../../configuration/vpn/ipsec.rst:239 msgid "The peer names RIGHT and LEFT are used as informational text." -msgstr "The peer names RIGHT and LEFT are used as informational text." +msgstr "Імена вузлів RIGHT і LEFT використовуються як інформаційний текст." #: ../../configuration/interfaces/macsec.rst:89 msgid "The peer with lower priority will become the key server and start distributing SAKs." -msgstr "The peer with lower priority will become the key server and start distributing SAKs." +msgstr "Одноранговий вузол із нижчим пріоритетом стане ключовим сервером і почне розповсюджувати SAK." -#: ../../configuration/vrf/index.rst:181 +#: ../../configuration/vrf/index.rst:200 msgid "The ping command is used to test whether a network host is reachable or not." -msgstr "The ping command is used to test whether a network host is reachable or not." +msgstr "Команда ping використовується, щоб перевірити, чи доступний хост мережі." #: ../../configuration/service/dns.rst:94 msgid "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This might lead to unexpected query results when testing. Set ``+noad`` on the ``dig`` command line when this is the case." -msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This might lead to unexpected query results when testing. Set ``+noad`` on the ``dig`` command line when this is the case." +msgstr "Популярний інструмент Unix/Linux ``dig`` встановлює AD-біт у запиті. Це може призвести до неочікуваних результатів запиту під час тестування. У цьому випадку встановіть ``+noad`` у командному рядку ``dig``." #: ../../configuration/interfaces/openvpn.rst:50 msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." -#: ../../configuration/protocols/rpki.rst:49 +#: ../../configuration/protocols/rpki.rst:47 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." -msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." +msgstr "Префікс і ASN, які його створили, відповідають підписаному ROA. Ймовірно, це надійні оголошення про маршрути." -#: ../../configuration/protocols/rpki.rst:53 +#: ../../configuration/protocols/rpki.rst:51 msgid "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." -msgstr "The prefix or prefix length and ASN that originated it doesn't match any existing ROA. This could be the result of a prefix hijack, or merely a misconfiguration, but should probably be treated as untrustworthy route announcements." +msgstr "Префікс або довжина префікса та ASN, які його створили, не відповідають жодній існуючій ROA. Це може бути результатом викрадення префікса або просто неправильної конфігурації, але, ймовірно, його слід розглядати як ненадійні оголошення маршруту." -#: ../../configuration/service/dhcp-server.rst:375 +#: ../../configuration/service/dhcp-server.rst:432 msgid "The primary DHCP server uses address `192.168.189.252`" -msgstr "The primary DHCP server uses address `192.168.189.252`" +msgstr "Основний сервер DHCP використовує адресу `192.168.189.252`" -#: ../../configuration/service/dhcp-server.rst:158 +#: ../../configuration/service/dhcp-server.rst:208 msgid "The primary and secondary statements determines whether the server is primary or secondary." -msgstr "The primary and secondary statements determines whether the server is primary or secondary." +msgstr "Інструкції первинний і вторинний визначають, чи є сервер основним чи вторинним." #: ../../configuration/interfaces/bonding.rst:240 msgid "The primary option is only valid for active-backup, transmit-load-balance, and adaptive-load-balance mode." -msgstr "The primary option is only valid for active-backup, transmit-load-balance, and adaptive-load-balance mode." +msgstr "Основний параметр дійсний лише для режимів активного резервного копіювання, балансування навантаження передавання та адаптивного балансування навантаження." #: ../../configuration/highavailability/index.rst:104 msgid "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." -msgstr "The priority must be an integer number from 1 to 255. Higher priority value increases router's precedence in the master elections." +msgstr "Пріоритет має бути цілим числом від 1 до 255. Більше значення пріоритету збільшує пріоритет маршрутизатора у виборах головного." -#: ../../configuration/service/dhcp-server.rst:539 +#: ../../configuration/service/dhcp-server.rst:598 msgid "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" -msgstr "The procedure to specify a :abbr:`NIS+ (Network Information Service Plus)` domain is similar to the NIS domain one:" +msgstr "Процедура визначення домену :abbr:`NIS+ (Network Information Service Plus)` подібна до домену NIS:" -#: ../../configuration/vrf/index.rst:222 +#: ../../configuration/vrf/index.rst:241 msgid "The prompt is adjusted to reflect this change in both config and op-mode." -msgstr "The prompt is adjusted to reflect this change in both config and op-mode." +msgstr "Підказка налаштована відповідно до цієї зміни як у конфігурації, так і в робочому режимі." #: ../../configuration/nat/nat44.rst:524 msgid "The protocol and port we wish to forward;" -msgstr "The protocol and port we wish to forward;" +msgstr "Протокол і порт, які ми хочемо переслати;" #: ../../configuration/service/ntp.rst:21 msgid "The protocol is usually described in terms of a client-server model, but can as easily be used in peer-to-peer relationships where both peers consider the other to be a potential time source. Implementations send and receive timestamps using :abbr:`UDP (User Datagram Protocol)` on port number 123." -msgstr "The protocol is usually described in terms of a client-server model, but can as easily be used in peer-to-peer relationships where both peers consider the other to be a potential time source. Implementations send and receive timestamps using :abbr:`UDP (User Datagram Protocol)` on port number 123." +msgstr "Протокол зазвичай описується в термінах клієнт-серверної моделі, але його можна так само легко використовувати в однорангових стосунках, де обидва вузли вважають один одного потенційним джерелом часу. Реалізації надсилають і отримують мітки часу за допомогою :abbr:`UDP (протокол дейтаграм користувача)` на порт номер 123." #: ../../configuration/interfaces/l2tpv3.rst:25 msgid "The protocol overhead of L2TPv3 is also significantly bigger than MPLS." -msgstr "The protocol overhead of L2TPv3 is also significantly bigger than MPLS." +msgstr "Накладні витрати протоколу L2TPv3 також значно більші, ніж MPLS." #: ../../configuration/service/webproxy.rst:7 msgid "The proxy service in VyOS is based on Squid_ and some related modules." -msgstr "The proxy service in VyOS is based on Squid_ and some related modules." +msgstr "Служба проксі у VyOS базується на Squid_ та деяких пов’язаних модулях." #: ../../configuration/interfaces/openvpn.rst:59 msgid "The public IP address of the local side of the VPN will be 198.51.100.10." -msgstr "The public IP address of the local side of the VPN will be 198.51.100.10." +msgstr "Загальнодоступною IP-адресою локальної сторони VPN буде 198.51.100.10." #: ../../configuration/interfaces/openvpn.rst:60 msgid "The public IP address of the remote side of the VPN will be 203.0.113.11." -msgstr "The public IP address of the remote side of the VPN will be 203.0.113.11." +msgstr "Загальнодоступною IP-адресою віддаленої сторони VPN буде 203.0.113.11." -#: ../../configuration/service/ipoe-server.rst:130 +#: ../../configuration/service/ipoe-server.rst:131 #: ../../configuration/vpn/l2tp.rst:120 msgid "The rate-limit is set in kbit/sec." -msgstr "The rate-limit is set in kbit/sec." +msgstr "Обмеження швидкості встановлюється в кбіт/с." #: ../../configuration/service/eventhandler.rst:46 msgid "The regular expression matches if and only if the entire string matches the pattern." -msgstr "The regular expression matches if and only if the entire string matches the pattern." +msgstr "Регулярний вираз відповідає тоді і тільки тоді, коли весь рядок відповідає шаблону." #: ../../configuration/interfaces/wireguard.rst:146 msgid "The remote peer `to-wg02` uses XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI= as its public key portion" -msgstr "The remote peer `to-wg02` uses XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI= as its public key portion" +msgstr "Віддалений вузол `to-wg02` використовує XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI= як частину відкритого ключа" #: ../../configuration/interfaces/openvpn.rst:63 msgid "The remote site will have a subnet of 10.1.0.0/16." -msgstr "The remote site will have a subnet of 10.1.0.0/16." +msgstr "Віддалений сайт матиме підмережу 10.1.0.0/16." #: ../../configuration/vpn/openconnect.rst:15 msgid "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." -msgstr "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." +msgstr "Віддалений користувач використовуватиме клієнт openconnect для підключення до маршрутизатора та отримає IP-адресу з пулу VPN, що надасть повний доступ до мережі." + +#: ../../configuration/service/dns.rst:161 +msgid "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." +msgstr "The requestor netmask for which the requestor IP Address should be used as the EDNS Client Subnet for outgoing queries." #: ../../configuration/interfaces/openvpn.rst:458 msgid "The required config file may look like this:" -msgstr "The required config file may look like this:" +msgstr "Необхідний конфігураційний файл може виглядати так:" #: ../../configuration/nat/nat44.rst:707 msgid "The required configuration can be broken down into 4 major pieces:" -msgstr "The required configuration can be broken down into 4 major pieces:" +msgstr "Необхідну конфігурацію можна розбити на 4 основні частини:" #: ../../configuration/service/tftp-server.rst:53 msgid "The resulting configuration will look like:" -msgstr "The resulting configuration will look like:" +msgstr "Отримана конфігурація буде виглядати так:" #: ../../configuration/interfaces/vti.rst:35 msgid "The root cause of the problem is that for VTI tunnels to work, their traffic selectors have to be set to 0.0.0.0/0 for traffic to match the tunnel, even though actual routing decision is made according to netfilter marks. Unless route insertion is disabled entirely, StrongSWAN thus mistakenly inserts a default route through the VTI peer address, which makes all traffic routed to nowhere." -msgstr "The root cause of the problem is that for VTI tunnels to work, their traffic selectors have to be set to 0.0.0.0/0 for traffic to match the tunnel, even though actual routing decision is made according to netfilter marks. Unless route insertion is disabled entirely, StrongSWAN thus mistakenly inserts a default route through the VTI peer address, which makes all traffic routed to nowhere." +msgstr "Основна причина проблеми полягає в тому, що для того, щоб тунелі VTI працювали, їхні селектори трафіку мають бути встановлені на 0.0.0.0/0, щоб трафік відповідав тунелю, навіть якщо фактичне рішення про маршрутизацію приймається відповідно до позначок netfilter. Якщо вставлення маршруту не вимкнено повністю, StrongSWAN помилково вставляє маршрут за замовчуванням через однорангову адресу VTI, через що весь трафік направляється в нікуди." #: ../../configuration/trafficpolicy/index.rst:963 msgid "The round-robin policy is a classful scheduler that divides traffic in different classes_ you can configure (up to 4096). You can embed_ a new policy into each of those classes (default included)." -msgstr "The round-robin policy is a classful scheduler that divides traffic in different classes_ you can configure (up to 4096). You can embed_ a new policy into each of those classes (default included)." +msgstr "Політика циклічного перебору — це класовий планувальник, який поділяє трафік на різні класи_, які ви можете налаштувати (до 4096). Ви можете вбудувати нову політику в кожен із цих класів (включаючи стандартні)." #: ../../configuration/protocols/bgp.rst:59 msgid "The route selection process used by FRR's BGP implementation uses the following decision criterion, starting at the top of the list and going towards the bottom until one of the factors can be used." -msgstr "The route selection process used by FRR's BGP implementation uses the following decision criterion, starting at the top of the list and going towards the bottom until one of the factors can be used." +msgstr "Процес вибору маршруту, який використовується реалізацією BGP FRR, використовує наступний критерій прийняття рішення, починаючи з верхньої частини списку та просуваючись униз, доки не буде використано один із факторів." #: ../../configuration/protocols/bgp.rst:122 msgid "The route with the shortest cluster-list length is used. The cluster-list reflects the iBGP reflection path the route has taken." -msgstr "The route with the shortest cluster-list length is used. The cluster-list reflects the iBGP reflection path the route has taken." +msgstr "Використовується маршрут із найкоротшою довжиною списку кластерів. Список кластерів відображає шлях відображення iBGP, який пройшов маршрут." #: ../../configuration/protocols/ospf.rst:174 msgid "The router automatically updates link-state information with its neighbors. Only an obsolete information is updated which age has exceeded a specific threshold. This parameter changes a threshold value, which by default is 1800 seconds (half an hour). The value is applied to the whole OSPF router. The timer range is 10 to 1800." -msgstr "The router automatically updates link-state information with its neighbors. Only an obsolete information is updated which age has exceeded a specific threshold. This parameter changes a threshold value, which by default is 1800 seconds (half an hour). The value is applied to the whole OSPF router. The timer range is 10 to 1800." +msgstr "Маршрутизатор автоматично оновлює інформацію про стан зв’язку зі своїми сусідами. Оновлюється лише застаріла інформація, вік якої перевищив певний поріг. Цей параметр змінює порогове значення, яке за замовчуванням становить 1800 секунд (півгодини). Значення застосовується до всього маршрутизатора OSPF. Діапазон таймера від 10 до 1800." #: ../../configuration/service/dhcp-relay.rst:45 msgid "The router should discard DHCP packages already containing relay agent information to ensure that only requests from DHCP clients are forwarded." -msgstr "The router should discard DHCP packages already containing relay agent information to ensure that only requests from DHCP clients are forwarded." +msgstr "Маршрутизатор має відхилити пакети DHCP, які вже містять інформацію агента ретрансляції, щоб забезпечити пересилання лише запитів від клієнтів DHCP." #: ../../configuration/system/sflow.rst:9 msgid "The sFlow accounting based on hsflowd https://sflow.net/" -msgstr "The sFlow accounting based on hsflowd https://sflow.net/" +msgstr "Облік sFlow на основі hsflowd https://sflow.net/" #: ../../configuration/vpn/openconnect.rst:270 msgid "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." -msgstr "The same configuration options apply when Identity based config is configured in group mode except that group mode can only be used with RADIUS authentication." +msgstr "Ті самі параметри конфігурації застосовуються, коли конфігурацію на основі ідентифікації налаштовано в груповому режимі, за винятком того, що груповий режим можна використовувати лише з автентифікацією RADIUS." -#: ../../configuration/vpn/ipsec.rst:227 +#: ../../configuration/vpn/ipsec.rst:231 msgid "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." -msgstr "The scheme above doesn't work when one of the routers has a dynamic external address though. The classic workaround for this is to setup an address on a loopback interface and use it as a source address for the GRE tunnel, then setup an IPsec policy to match those loopback addresses." +msgstr "Наведена вище схема не працює, якщо один із маршрутизаторів має динамічну зовнішню адресу. Класичним обхідним шляхом для цього є встановлення адреси на інтерфейсі петлі та використання її як адреси джерела для тунелю GRE, а потім налаштування політики IPsec для відповідності цим адресам петлі." #: ../../configuration/service/webproxy.rst:228 msgid "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." -msgstr "The search filter can contain up to 15 occurrences of %s which will be replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For a detailed description of LDAP search filter syntax see :rfc:`2254`." +msgstr "Фільтр пошуку може містити до 15 входжень %s, які буде замінено іменем користувача, як у «uid=%s» для каталогів :rfc:`2037`. Докладний опис синтаксису фільтра пошуку LDAP див. :rfc:`2254`." -#: ../../configuration/service/dhcp-server.rst:376 +#: ../../configuration/service/dhcp-server.rst:433 msgid "The secondary DHCP server uses address `192.168.189.253`" -msgstr "The secondary DHCP server uses address `192.168.189.253`" +msgstr "Додатковий сервер DHCP використовує адресу `192.168.189.253`" #: ../../configuration/service/snmp.rst:132 msgid "The security approach in SNMPv3 targets:" -msgstr "The security approach in SNMPv3 targets:" +msgstr "Підхід до безпеки в цілях SNMPv3:" #: ../../configuration/service/console-server.rst:112 msgid "The sequence ``^Ec?`` translates to: ``Ctrl+E c ?``. To quit the session use: ``Ctrl+E c .``" -msgstr "The sequence ``^Ec?`` translates to: ``Ctrl+E c ?``. To quit the session use: ``Ctrl+E c .``" +msgstr "Послідовність ``^Ec?`` перекладається як: ``Ctrl+E c ?``. Щоб завершити сеанс, використовуйте: ``Ctrl+E c .``" #: ../../configuration/interfaces/vxlan.rst:189 msgid "The setup is this: Leaf2 - Spine1 - Leaf3" -msgstr "The setup is this: Leaf2 - Spine1 - Leaf3" +msgstr "Налаштування таке: Leaf2 - Spine1 - Leaf3" #: ../../configuration/service/webproxy.rst:38 msgid "The size of the on-disk Proxy cache is user configurable. The Proxies default cache-size is configured to 100 MB." -msgstr "The size of the on-disk Proxy cache is user configurable. The Proxies default cache-size is configured to 100 MB." +msgstr "Розмір кешу проксі-сервера на диску налаштовується користувачем. Розмір кешу проксі за замовчуванням налаштовано на 100 МБ." #: ../../configuration/system/console.rst:30 msgid "The speed (baudrate) of the console device. Supported values are:" -msgstr "The speed (baudrate) of the console device. Supported values are:" +msgstr "Швидкість (швидкість) консольного пристрою. Підтримувані значення:" #: ../../_include/interface-vlan-8021q.txt:16 msgid "The standard was developed by IEEE 802.1, a working group of the IEEE 802 standards committee, and continues to be actively revised. One of the notable revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest Path Bridging) and much of the IEEE 802.1d standard." -msgstr "The standard was developed by IEEE 802.1, a working group of the IEEE 802 standards committee, and continues to be actively revised. One of the notable revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest Path Bridging) and much of the IEEE 802.1d standard." +msgstr "Стандарт був розроблений IEEE 802.1, робочою групою комітету стандартів IEEE 802, і продовжує активно переглядатися. Одним із помітних переглядів є 802.1Q-2014, який включає IEEE 802.1aq (Міст найкоротшого шляху) і більшу частину стандарту IEEE 802.1d." #: ../../configuration/system/lcd.rst:7 msgid "The system LCD :abbr:`LCD (Liquid-crystal display)` option is for users running VyOS on hardware that features an LCD display. This is typically a small display built in an 19 inch rack-mountable appliance. Those displays are used to show runtime data." -msgstr "The system LCD :abbr:`LCD (Liquid-crystal display)` option is for users running VyOS on hardware that features an LCD display. This is typically a small display built in an 19 inch rack-mountable appliance. Those displays are used to show runtime data." +msgstr "Системний РК-дисплей :abbr:`LCD (рідкокристалічний дисплей)` призначений для користувачів, які використовують VyOS на апаратному забезпеченні з РК-дисплеєм. Зазвичай це невеликий дисплей, вбудований у 19-дюймовий пристрій, що монтується в стійку. Ці дисплеї використовуються для відображення даних виконання." #: ../../configuration/system/name-server.rst:65 msgid "The system is configured to attempt domain completion in the following order: vyos.io (first), vyos.net (second) and vyos.network (last):" -msgstr "The system is configured to attempt domain completion in the following order: vyos.io (first), vyos.net (second) and vyos.network (last):" +msgstr "Система налаштована на спробу завершення домену в такому порядку: vyos.io (перший), vyos.net (другий) і vyos.network (останній):" #: ../../configuration/protocols/ospf.rst:729 msgid "The table consists of following data:" -msgstr "The table consists of following data:" +msgstr "Таблиця складається з таких даних:" #: ../../configuration/system/task-scheduler.rst:7 msgid "The task scheduler allows you to execute tasks on a given schedule. It makes use of UNIX cron_." -msgstr "The task scheduler allows you to execute tasks on a given schedule. It makes use of UNIX cron_." +msgstr "Планувальник завдань дозволяє виконувати завдання за заданим розкладом. Він використовує UNIX cron_." #: ../../configuration/nat/nat44.rst:245 msgid "The translation address must be set to one of the available addresses on the configured `outbound-interface` or it must be set to `masquerade` which will use the primary IP address of the `outbound-interface` as its translation address." -msgstr "The translation address must be set to one of the available addresses on the configured `outbound-interface` or it must be set to `masquerade` which will use the primary IP address of the `outbound-interface` as its translation address." +msgstr "Адреса перекладу має бути встановлена на одну з доступних адрес на налаштованому `outbound-interface` або її має бути встановлено на `masquerade`, який використовуватиме основну IP-адресу `outbound-interface` як свою адресу перекладу." #: ../../configuration/interfaces/openvpn.rst:61 msgid "The tunnel will use 10.255.1.1 for the local IP and 10.255.1.2 for the remote." -msgstr "The tunnel will use 10.255.1.1 for the local IP and 10.255.1.2 for the remote." +msgstr "Тунель використовуватиме 10.255.1.1 для локального IP-адреси та 10.255.1.2 для віддаленого." #: ../../configuration/protocols/ospf.rst:788 msgid "The type can be the following: asbr-summary, external, network, nssa-external, opaque-area, opaque-as, opaque-link, router, summary." -msgstr "The type can be the following: asbr-summary, external, network, nssa-external, opaque-area, opaque-as, opaque-link, router, summary." +msgstr "Тип може бути таким: asbr-summary, external, network, nssa-external, opaque-area, opaque-as, opaque-link, router, summary." #: ../../configuration/trafficpolicy/index.rst:114 msgid "The ultimate goal of classifying traffic is to give each class a different treatment." -msgstr "The ultimate goal of classifying traffic is to give each class a different treatment." +msgstr "Кінцевою метою класифікації трафіку є надати кожному класу іншу обробку." -#: ../../configuration/service/ipoe-server.rst:18 +#: ../../configuration/service/ipoe-server.rst:16 msgid "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." -msgstr "The use of IPoE addresses the disadvantage that PPP is unsuited for multicast delivery to multiple users. Typically, IPoE uses Dynamic Host Configuration Protocol and Extensible Authentication Protocol to provide the same functionality as PPPoE, but in a less robust manner." +msgstr "Використання IPoE усуває той недолік, що PPP не підходить для багатоадресної доставки багатьом користувачам. Як правило, IPoE використовує протокол динамічної конфігурації хоста та розширюваний протокол автентифікації, щоб забезпечити ту саму функціональність, що й PPPoE, але менш надійним способом." -#: ../../configuration/vpn/l2tp.rst:221 +#: ../../configuration/service/pppoe-server.rst:222 +#: ../../configuration/vpn/l2tp.rst:265 +#: ../../configuration/vpn/pptp.rst:205 +#: ../../configuration/vpn/sstp.rst:238 msgid "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." -msgstr "The value of the attribute ``NAS-Port-Id`` must be less than 16 characters, otherwise the interface won't be renamed." +msgstr "Значення атрибута ``NAS-Port-Id`` має бути менше 16 символів, інакше інтерфейс не буде перейменовано." #: ../../_include/interface-dhcp-options.txt:36 msgid "The vendor-class-id option can be used to request a specific class of vendor options from the server." -msgstr "The vendor-class-id option can be used to request a specific class of vendor options from the server." +msgstr "Параметр vendor-class-id можна використовувати для запиту певного класу параметрів постачальника від сервера." #: ../../configuration/interfaces/virtual-ethernet.rst:9 msgid "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." -msgstr "The veth devices are virtual Ethernet devices. They can act as tunnels between network namespaces to create a bridge to a physical network device in another namespace or VRF, but can also be used as standalone network devices." +msgstr "Пристрої veth є віртуальними пристроями Ethernet. Вони можуть діяти як тунелі між мережевими просторами імен для створення мосту до фізичного мережевого пристрою в іншому просторі імен або VRF, але також можуть використовуватися як автономні мережеві пристрої." + +#: ../../configuration/service/router-advert.rst:86 +msgid "The well known NAT64 prefix is ``64:ff9b::/96``" +msgstr "The well known NAT64 prefix is ``64:ff9b::/96``" -#: ../../configuration/system/login.rst:138 +#: ../../configuration/system/login.rst:142 msgid "The window size must be between 1 and 21." -msgstr "The window size must be between 1 and 21." +msgstr "Розмір вікна має бути від 1 до 21." #: ../../configuration/interfaces/wireless.rst:340 msgid "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." -msgstr "The wireless client (supplicant) authenticates against the RADIUS server (authentication server) using an :abbr:`EAP (Extensible Authentication Protocol)` method configured on the RADIUS server. The WAP (also referred to as authenticator) role is to send all authentication messages between the supplicant and the configured authentication server, thus the RADIUS server is responsible for authenticating the users." +msgstr "Бездротовий клієнт (заявник) автентифікується на сервері RADIUS (сервер автентифікації) за допомогою методу :abbr:`EAP (Extensible Authentication Protocol)`, налаштованого на сервері RADIUS. Роль WAP (також відома як автентифікатор) полягає у надсиланні всіх повідомлень автентифікації між запитувачем і налаштованим сервером автентифікації, таким чином сервер RADIUS відповідає за автентифікацію користувачів." + +#: ../../configuration/service/ids.rst:125 +msgid "Then, FastNetMon configuration:" +msgstr "Then, FastNetMon configuration:" #: ../../configuration/nat/nat44.rst:621 msgid "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." -msgstr "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." +msgstr "Потім створюється відповідне правило SNAT для вихідного трафіку NAT для внутрішньої IP-адреси до зарезервованої зовнішньої IP-адреси. Це призначає зовнішню IP-адресу внутрішній IP-адресі та корисно для протоколів, які не мають поняття портів, наприклад GRE." #: ../../configuration/interfaces/openvpn.rst:359 msgid "Then we need to generate, add and specify the names of the cryptographic materials. Each of the install command should be applied to the configuration and commited before using under the openvpn interface configuration." -msgstr "Then we need to generate, add and specify the names of the cryptographic materials. Each of the install command should be applied to the configuration and commited before using under the openvpn interface configuration." +msgstr "Потім нам потрібно згенерувати, додати та вказати назви криптографічних матеріалів. Кожну команду встановлення слід застосувати до конфігурації та зафіксувати перед використанням у конфігурації інтерфейсу openvpn." #: ../../configuration/interfaces/openvpn.rst:196 msgid "Then you need to install the key on the remote router:" @@ -13575,16 +15098,16 @@ msgstr "Then you need to set the key in your OpenVPN interface settings:" #: ../../configuration/interfaces/openvpn.rst:24 msgid "There's a variety of client GUI frontends for any platform" -msgstr "There's a variety of client GUI frontends for any platform" +msgstr "Для будь-якої платформи є різноманітні інтерфейси графічного інтерфейсу клієнта" #: ../../configuration/service/ntp.rst:47 msgid "There are 3 default NTP server set. You are able to change them." -msgstr "There are 3 default NTP server set. You are able to change them." +msgstr "Існує 3 стандартних сервера NTP. Ви можете їх змінити." #: ../../configuration/firewall/ipv4.rst:269 #: ../../configuration/firewall/ipv6.rst:269 msgid "There are a lot of matching criteria against which the package can be tested." -msgstr "There are a lot of matching criteria against which the package can be tested." +msgstr "Існує багато критеріїв відповідності, за якими можна перевірити пакет." #: ../../configuration/firewall/bridge.rst:221 #: ../../configuration/firewall/ipv4.rst:303 @@ -13594,87 +15117,87 @@ msgstr "There are a lot of matching criteria against which the packet can be tes #: ../../configuration/policy/route.rst:40 msgid "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." -msgstr "There are a lot of matching criteria options available, both for ``policy route`` and ``policy route6``. These options are listed in this section." +msgstr "Доступно багато параметрів відповідності критеріїв як для ``policy route``, так і для ``policy route6``. Ці параметри перераховані в цьому розділі." -#: ../../configuration/system/ipv6.rst:92 +#: ../../configuration/system/ipv6.rst:105 msgid "There are different parameters for getting prefix-list information:" -msgstr "There are different parameters for getting prefix-list information:" +msgstr "Існують різні параметри для отримання інформації про список префіксів:" #: ../../configuration/interfaces/wireless.rst:157 msgid "There are limits on which channels can be used with HT40- and HT40+. Following table shows the channels that may be available for HT40- and HT40+ use per IEEE 802.11n Annex J:" -msgstr "There are limits on which channels can be used with HT40- and HT40+. Following table shows the channels that may be available for HT40- and HT40+ use per IEEE 802.11n Annex J:" +msgstr "Існують обмеження на те, які канали можна використовувати з HT40- та HT40+. У наведеній нижче таблиці показано канали, які можуть бути доступні для використання HT40- і HT40+ відповідно до додатку J IEEE 802.11n:" #: ../../configuration/trafficpolicy/index.rst:166 msgid "There are many parameters you will be able to use in order to match the traffic you want for a class:" -msgstr "There are many parameters you will be able to use in order to match the traffic you want for a class:" +msgstr "Є багато параметрів, які ви зможете використовувати, щоб відповідати трафіку, який вам потрібен для класу:" #: ../../configuration/system/flow-accounting.rst:96 msgid "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" -msgstr "There are multiple versions available for the NetFlow data. The `<version>` used in the exported flow data can be configured here. The following versions are supported:" +msgstr "Для даних NetFlow доступно кілька версій. `<version> `, що використовується в експортованих даних потоку, можна налаштувати тут. Підтримуються такі версії:" -#: ../../configuration/service/ipoe-server.rst:153 +#: ../../configuration/service/ipoe-server.rst:154 msgid "There are rate-limited and non rate-limited users (MACs)" -msgstr "There are rate-limited and non rate-limited users (MACs)" +msgstr "Існують користувачі з обмеженнями та без обмежень (MAC)" #: ../../configuration/system/console.rst:13 msgid "There are some scenarios where serial consoles are useful. System administration of remote computers is usually done using :ref:`ssh`, but there are times when access to the console is the only way to diagnose and correct software failures. Major upgrades to the installed distribution may also require console access." -msgstr "There are some scenarios where serial consoles are useful. System administration of remote computers is usually done using :ref:`ssh`, but there are times when access to the console is the only way to diagnose and correct software failures. Major upgrades to the installed distribution may also require console access." +msgstr "Є деякі сценарії, коли послідовні консолі корисні. Системне адміністрування віддалених комп’ютерів зазвичай здійснюється за допомогою :ref:`ssh`, але іноді доступ до консолі є єдиним способом діагностики та виправлення програмних збоїв. Для основних оновлень встановленого дистрибутива також може знадобитися доступ до консолі." #: ../../configuration/interfaces/wireless.rst:14 msgid "There are three modes of operation for a wireless interface:" -msgstr "There are three modes of operation for a wireless interface:" +msgstr "Існує три режими роботи бездротового інтерфейсу:" #: ../../configuration/protocols/rpki.rst:9 msgid "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" -msgstr "There are two types of Network Admins who deal with BGP, those who have created an international incident and/or outage, and those who are lying" +msgstr "Існує два типи мережевих адміністраторів, які мають справу з BGP: ті, хто створив міжнародний інцидент і/або збій, і ті, хто бреше" -#: ../../configuration/protocols/bgp.rst:896 +#: ../../configuration/protocols/bgp.rst:918 msgid "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" -msgstr "There are two ways that help us to mitigate the BGPs full-mesh requirement in a network:" +msgstr "Є два способи, які допомагають нам зменшити вимоги BGP до повної сітки в мережі:" #: ../../configuration/interfaces/loopback.rst:13 msgid "There can only be one loopback ``lo`` interface on the system. If you need multiple interfaces, please use the :ref:`dummy-interface` interface type." -msgstr "There can only be one loopback ``lo`` interface on the system. If you need multiple interfaces, please use the :ref:`dummy-interface` interface type." +msgstr "У системі може бути лише один петлевий інтерфейс ``lo``. Якщо вам потрібні кілька інтерфейсів, використовуйте тип інтерфейсу :ref:`dummy-interface`." #: ../../configuration/policy/index.rst:13 msgid "There could be a wide range of routing policies. Some examples are listed below:" -msgstr "There could be a wide range of routing policies. Some examples are listed below:" +msgstr "Може бути широкий спектр політик маршрутизації. Деякі приклади наведено нижче:" #: ../../configuration/nat/nat44.rst:115 msgid "There is a very nice picture/explanation in the Vyatta documentation which should be rewritten here." -msgstr "There is a very nice picture/explanation in the Vyatta documentation which should be rewritten here." +msgstr "У документації Vyatta є дуже гарне зображення/пояснення, яке слід переписати тут." #: ../../configuration/interfaces/tunnel.rst:282 msgid "There is also a GRE over IPv6 encapsulation available, it is called: ``ip6gre``." -msgstr "There is also a GRE over IPv6 encapsulation available, it is called: ``ip6gre``." +msgstr "Також доступна інкапсуляція GRE через IPv6, вона називається: ``ip6gre``." #: ../../_include/interface-vrf.txt:6 msgid "There is an entire chapter about how to configure a :ref:`vrf`, please check this for additional information." -msgstr "There is an entire chapter about how to configure a :ref:`vrf`, please check this for additional information." +msgstr "Є цілий розділ про те, як налаштувати :ref:`vrf`, будь ласка, перевірте це для отримання додаткової інформації." #: ../../configuration/protocols/pim6.rst:27 msgid "These are the commands for a basic setup." -msgstr "These are the commands for a basic setup." +msgstr "Це команди для базового налаштування." #: ../../configuration/policy/examples.rst:149 msgid "These commands allow the VLAN10 and VLAN11 hosts to communicate with each other using the main routing table." -msgstr "These commands allow the VLAN10 and VLAN11 hosts to communicate with each other using the main routing table." +msgstr "Ці команди дозволяють хостам VLAN10 і VLAN11 спілкуватися один з одним за допомогою головної таблиці маршрутизації." #: ../../configuration/highavailability/index.rst:238 msgid "These configuration is not mandatory and in most cases there's no need to configure it. But if necessary, Gratuitous ARP can be configured in ``global-parameters`` and/or in ``group`` section." -msgstr "These configuration is not mandatory and in most cases there's no need to configure it. But if necessary, Gratuitous ARP can be configured in ``global-parameters`` and/or in ``group`` section." +msgstr "Ця конфігурація не є обов’язковою, і в більшості випадків її не потрібно налаштовувати. Але при необхідності Gratuitous ARP можна налаштувати в ``global-parameters`` та/або в ``group`` розділі." #: ../../configuration/service/dhcp-server.rst:409 msgid "These parameters are passed as-is to isc-dhcp's dhcpd.conf under the configuration node they are defined in. They are not validated so an error in the raw parameters won't be caught by vyos's scripts and will cause dhcpd to fail to start. Always verify that the parameters are correct before committing the configuration. Refer to isc-dhcp's dhcpd.conf manual for more information: https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcpdconf" -msgstr "These parameters are passed as-is to isc-dhcp's dhcpd.conf under the configuration node they are defined in. They are not validated so an error in the raw parameters won't be caught by vyos's scripts and will cause dhcpd to fail to start. Always verify that the parameters are correct before committing the configuration. Refer to isc-dhcp's dhcpd.conf manual for more information: https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcpdconf" +msgstr "Ці параметри передаються як є до dhcpd.conf isc-dhcp у вузлі конфігурації, у якому вони визначені. Вони не перевіряються, тому помилка в необроблених параметрах не буде перехоплена сценаріями vyos і спричинить невдачу запуску dhcpd . Завжди перевіряйте правильність параметрів перед закріпленням конфігурації. Зверніться до посібника isc-dhcp dhcpd.conf для отримання додаткової інформації: https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcpdconf" #: ../../configuration/service/dhcp-server.rst:489 msgid "These parameters need to be part of the DHCP global options. They stay unchanged." -msgstr "These parameters need to be part of the DHCP global options. They stay unchanged." +msgstr "Ці параметри мають бути частиною глобальних параметрів DHCP. Вони залишаються незмінними." #: ../../configuration/trafficpolicy/index.rst:52 msgid "They can be **decimal** prefixes." -msgstr "They can be **decimal** prefixes." +msgstr "Вони можуть бути **десятковими** префіксами." #: ../../configuration/firewall/flowtables.rst:102 msgid "Things to be considred in this setup:" @@ -13682,28 +15205,28 @@ msgstr "Things to be considred in this setup:" #: ../../configuration/interfaces/l2tpv3.rst:54 msgid "This address must be the address of a local interface. It may be specified as an IPv4 address or an IPv6 address." -msgstr "This address must be the address of a local interface. It may be specified as an IPv4 address or an IPv6 address." +msgstr "Ця адреса має бути адресою локального інтерфейсу. Його можна вказати як адресу IPv4 або IPv6." #: ../../configuration/interfaces/bonding.rst:172 #: ../../configuration/interfaces/bonding.rst:198 msgid "This algorithm is 802.3ad compliant." -msgstr "This algorithm is 802.3ad compliant." +msgstr "Цей алгоритм сумісний зі стандартом 802.3ad." #: ../../configuration/interfaces/bonding.rst:224 msgid "This algorithm is not fully 802.3ad compliant. A single TCP or UDP conversation containing both fragmented and unfragmented packets will see packets striped across two interfaces. This may result in out of order delivery. Most traffic types will not meet these criteria, as TCP rarely fragments traffic, and most UDP traffic is not involved in extended conversations. Other implementations of 802.3ad may or may not tolerate this noncompliance." -msgstr "This algorithm is not fully 802.3ad compliant. A single TCP or UDP conversation containing both fragmented and unfragmented packets will see packets striped across two interfaces. This may result in out of order delivery. Most traffic types will not meet these criteria, as TCP rarely fragments traffic, and most UDP traffic is not involved in extended conversations. Other implementations of 802.3ad may or may not tolerate this noncompliance." +msgstr "Цей алгоритм не повністю сумісний з 802.3ad. Одна розмова TCP або UDP, що містить як фрагментовані, так і нефрагментовані пакети, побачить пакети, розбиті на два інтерфейси. Це може призвести до порушення замовлення. Більшість типів трафіку не відповідатимуть цим критеріям, оскільки TCP рідко фрагментує трафік, а більшість трафіку UDP не залучається до розширених розмов. Інші реалізації 802.3ad можуть допускати або не допускати цю невідповідність." #: ../../configuration/interfaces/bonding.rst:169 msgid "This algorithm will place all traffic to a particular network peer on the same slave." -msgstr "This algorithm will place all traffic to a particular network peer on the same slave." +msgstr "Цей алгоритм розмістить увесь трафік до певного однорангового мережевого вузла на одному підпорядкованому пристрої." #: ../../configuration/interfaces/bonding.rst:190 msgid "This algorithm will place all traffic to a particular network peer on the same slave. For non-IP traffic, the formula is the same as for the layer2 transmit hash policy." -msgstr "This algorithm will place all traffic to a particular network peer on the same slave. For non-IP traffic, the formula is the same as for the layer2 transmit hash policy." +msgstr "Цей алгоритм розмістить увесь трафік до певного однорангового мережевого вузла на одному підпорядкованому пристрої. Для не-IP-трафіку формула така ж, як і для хеш-політики передачі рівня 2." #: ../../configuration/protocols/bfd.rst:19 msgid "This allows avoiding the timers defined in BGP and OSPF protocol to expires." -msgstr "This allows avoiding the timers defined in BGP and OSPF protocol to expires." +msgstr "Це дозволяє уникнути закінчення терміну дії таймерів, визначених у протоколах BGP і OSPF." #: ../../configuration/system/frr.rst:17 msgid "This allows the operator to control the number of open file descriptors each daemon is allowed to start with. If the operator plans to run bgp with several thousands of peers then this is where we would modify FRR to allow this to happen." @@ -13711,432 +15234,432 @@ msgstr "This allows the operator to control the number of open file descriptors #: ../../configuration/service/dns.rst:41 msgid "This also works for reverse-lookup zones (``18.172.in-addr.arpa``)." -msgstr "This also works for reverse-lookup zones (``18.172.in-addr.arpa``)." +msgstr "Це також працює для зон зворотного пошуку (``18.172.in-addr.arpa``)." #: ../../configuration/interfaces/tunnel.rst:8 msgid "This article touches on 'classic' IP tunneling protocols." -msgstr "This article touches on 'classic' IP tunneling protocols." +msgstr "У цій статті йдеться про «класичні» протоколи IP-тунелювання." #: ../../configuration/vpn/dmvpn.rst:164 msgid "This blueprint uses VyOS as the DMVPN Hub and Cisco (7206VXR) and VyOS as multiple spoke sites. The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`." -msgstr "This blueprint uses VyOS as the DMVPN Hub and Cisco (7206VXR) and VyOS as multiple spoke sites. The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`." +msgstr "У цьому плані VyOS використовується як концентратор DMVPN, а Cisco (7206VXR) і VyOS – як багатокомпонентні сайти. Лабораторія була створена за допомогою :abbr:`EVE-NG (Emulated Virtual Environment NG)`." #: ../../configuration/policy/examples.rst:78 msgid "This can be confirmed using the ``show ip route table 100`` operational command." -msgstr "This can be confirmed using the ``show ip route table 100`` operational command." +msgstr "Це можна підтвердити за допомогою операційної команди ``show ip route table 100``." #: ../../configuration/service/webproxy.rst:296 msgid "This can only be done if all your users are located directly under the same position in the LDAP tree and the login name is used for naming each user object. If your LDAP tree does not match these criterias or if you want to filter who are valid users then you need to use a search filter to search for your users DN (`filter-expression`)." -msgstr "This can only be done if all your users are located directly under the same position in the LDAP tree and the login name is used for naming each user object. If your LDAP tree does not match these criterias or if you want to filter who are valid users then you need to use a search filter to search for your users DN (`filter-expression`)." +msgstr "Це можна зробити, лише якщо всі ваші користувачі розташовані безпосередньо в одній позиції в дереві LDAP, а ім’я користувача використовується для іменування кожного об’єкта користувача. Якщо ваше дерево LDAP не відповідає цим критеріям або якщо ви хочете відфільтрувати дійсних користувачів, вам потрібно скористатися пошуковим фільтром для пошуку DN ваших користувачів (`вираз-фільтра`)." #: ../../configuration/system/sysctl.rst:7 msgid "This chapeter describes how to configure kernel parameters at runtime." -msgstr "This chapeter describes how to configure kernel parameters at runtime." +msgstr "У цьому розділі описано, як налаштувати параметри ядра під час виконання." #: ../../configuration/system/option.rst:7 msgid "This chapter describe the possibilities of advanced system behavior." -msgstr "This chapter describe the possibilities of advanced system behavior." +msgstr "У цьому розділі описуються можливості розширеної поведінки системи." #: ../../configuration/protocols/isis.rst:42 msgid "This commad sets network entity title (NET) provided in ISO format." -msgstr "This commad sets network entity title (NET) provided in ISO format." +msgstr "Ця команда встановлює заголовок мережевого об’єкта (NET), наданий у форматі ISO." #: ../../configuration/protocols/bgp.rst:326 msgid "This command accept incoming routes with AS path containing AS number with the same value as the current system AS. This is used when you want to use the same AS number in your sites, but you can’t connect them directly." -msgstr "This command accept incoming routes with AS path containing AS number with the same value as the current system AS. This is used when you want to use the same AS number in your sites, but you can’t connect them directly." +msgstr "Ця команда приймає вхідні маршрути зі шляхом до AS, що містить номер AS з тим самим значенням, що й поточна системна AS. Це використовується, коли ви хочете використовувати той самий номер AS на своїх сайтах, але не можете підключити їх безпосередньо." #: ../../configuration/protocols/bgp.rst:304 msgid "This command allow override the result of Capability Negotiation with local configuration. Ignore remote peer’s capability value." -msgstr "This command allow override the result of Capability Negotiation with local configuration. Ignore remote peer’s capability value." +msgstr "Ця команда дозволяє замінити результат узгодження можливостей локальною конфігурацією. Ігнорувати значення можливостей віддаленого вузла." #: ../../configuration/protocols/bgp.rst:417 msgid "This command allows peerings between directly connected eBGP peers using loopback addresses without adjusting the default TTL of 1." -msgstr "This command allows peerings between directly connected eBGP peers using loopback addresses without adjusting the default TTL of 1." +msgstr "Ця команда дозволяє здійснювати піринг між безпосередньо підключеними одноранговими вузлами eBGP за допомогою петлевих адрес без коригування TTL за замовчуванням 1." #: ../../configuration/protocols/bgp.rst:429 msgid "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." -msgstr "This command allows sessions to be established with eBGP neighbors when they are multiple hops away. When the neighbor is not directly connected and this knob is not enabled, the session will not establish. The number of hops range is 1 to 255. This command is mutually exclusive with :cfgcmd:`ttl-security hops`." +msgstr "Ця команда дозволяє встановлювати сеанси з сусідами eBGP, коли вони знаходяться на відстані кількох переходів. Якщо сусід не підключений безпосередньо і цей регулятор не ввімкнено, сеанс не буде встановлено. Діапазон кількості переходів становить від 1 до 255. Ця команда є взаємовиключною з :cfgcmd:`ttl-security hops`." -#: ../../configuration/protocols/bgp.rst:812 +#: ../../configuration/protocols/bgp.rst:834 msgid "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." -msgstr "This command allows the router to prefer route to specified prefix learned via IGP through backdoor link instead of a route to the same prefix learned via EBGP." +msgstr "Ця команда дозволяє маршрутизатору віддати перевагу маршруту до вказаного префікса, отриманого через IGP через бекдор, замість маршруту до того самого префіксу, отриманого через EBGP." #: ../../configuration/protocols/ospf.rst:97 msgid "This command allows to log changes in adjacency. With the optional :cfgcmd:`detail` argument, all changes in adjacency status are shown. Without :cfgcmd:`detail`, only changes to full or regressions are shown." -msgstr "This command allows to log changes in adjacency. With the optional :cfgcmd:`detail` argument, all changes in adjacency status are shown. Without :cfgcmd:`detail`, only changes to full or regressions are shown." +msgstr "Ця команда дозволяє реєструвати зміни в суміжності. З додатковим аргументом :cfgcmd:`detail` відображаються всі зміни в статусі суміжності. Без :cfgcmd:`detail` відображаються лише повні зміни або регресії." #: ../../configuration/protocols/ospf.rst:432 #: ../../configuration/protocols/ospf.rst:1172 msgid "This command allows to specify the distribution type for the network connected to this interface:" -msgstr "This command allows to specify the distribution type for the network connected to this interface:" +msgstr "Ця команда дозволяє вказати тип розподілу для мережі, підключеної до цього інтерфейсу:" #: ../../configuration/protocols/bgp.rst:576 msgid "This command allows to use route map to filter redistributed routes. There are six modes available for route source: connected, kernel, ospf, rip, static, table." -msgstr "This command allows to use route map to filter redistributed routes. There are six modes available for route source: connected, kernel, ospf, rip, static, table." +msgstr "Ця команда дозволяє використовувати карту маршрутів для фільтрації перерозподілених маршрутів. Є шість режимів, доступних для джерела маршруту: підключений, ядро, ospf, копіювання, статичний, таблиця." #: ../../configuration/protocols/ospf.rst:1261 msgid "This command allows to use route map to filter redistributed routes from given route source. There are five modes available for route source: bgp, connected, kernel, ripng, static." -msgstr "This command allows to use route map to filter redistributed routes from given route source. There are five modes available for route source: bgp, connected, kernel, ripng, static." +msgstr "Ця команда дозволяє використовувати карту маршрутів для фільтрації перерозподілених маршрутів із заданого джерела маршрутів. Для джерела маршруту доступно п’ять режимів: bgp, підключений, ядро, ripng, статичний." #: ../../configuration/protocols/rip.rst:152 msgid "This command allows to use route map to filter redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, ospf, static." -msgstr "This command allows to use route map to filter redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, ospf, static." +msgstr "Ця команда дозволяє використовувати карту маршрутів для фільтрації перерозподілених маршрутів із заданого джерела маршрутів. Є п’ять режимів, доступних для джерела маршруту: bgp, підключений, ядро, ospf, static." #: ../../configuration/protocols/ospf.rst:603 msgid "This command allows to use route map to filter redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, rip, static." -msgstr "This command allows to use route map to filter redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, rip, static." +msgstr "Ця команда дозволяє використовувати карту маршрутів для фільтрації перерозподілених маршрутів із заданого джерела маршрутів. Є п’ять режимів, доступних для джерела маршруту: bgp, підключений, ядро, копіювання, статичний." #: ../../configuration/protocols/isis.rst:251 msgid "This command allows to use route map to filter redistributed routes from the given route source. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static." -msgstr "This command allows to use route map to filter redistributed routes from the given route source. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static." +msgstr "Ця команда дозволяє використовувати карту маршрутів для фільтрації перерозподілених маршрутів із заданого джерела маршрутів. Є шість режимів, доступних для джерела маршруту: bgp, підключений, ядро, ospf, копіювання, статичний." #: ../../configuration/protocols/babel.rst:173 msgid "This command allows you apply access lists to a chosen interface to filter the Babel routes." -msgstr "This command allows you apply access lists to a chosen interface to filter the Babel routes." +msgstr "Ця команда дозволяє застосовувати списки доступу до вибраного інтерфейсу для фільтрації маршрутів Babel." #: ../../configuration/protocols/rip.rst:90 msgid "This command allows you apply access lists to a chosen interface to filter the RIP path." -msgstr "This command allows you apply access lists to a chosen interface to filter the RIP path." +msgstr "Ця команда дозволяє застосовувати списки доступу до вибраного інтерфейсу для фільтрації шляху RIP." #: ../../configuration/protocols/babel.rst:184 msgid "This command allows you apply prefix lists to a chosen interface to filter the Babel routes." -msgstr "This command allows you apply prefix lists to a chosen interface to filter the Babel routes." +msgstr "Ця команда дозволяє застосовувати списки префіксів до вибраного інтерфейсу для фільтрації маршрутів Babel." #: ../../configuration/protocols/rip.rst:101 msgid "This command allows you apply prefix lists to a chosen interface to filter the RIP path." -msgstr "This command allows you apply prefix lists to a chosen interface to filter the RIP path." +msgstr "Ця команда дозволяє застосувати списки префіксів до вибраного інтерфейсу для фільтрації шляху RIP." #: ../../configuration/interfaces/pppoe.rst:91 msgid "This command allows you to select a specific access concentrator when you know the access concentrators `<name>`." -msgstr "This command allows you to select a specific access concentrator when you know the access concentrators `<name>`." +msgstr "Ця команда дозволяє вибрати конкретний концентратор доступу, якщо вам відомі концентратори доступу `<name> `." #: ../../configuration/protocols/bgp.rst:552 msgid "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." -msgstr "This command applies route-map to selectively unsuppress prefixes suppressed by summarisation." +msgstr "Ця команда застосовує карту маршруту, щоб вибірково скасувати придушення префіксів, пригнічених підсумовуванням." -#: ../../configuration/protocols/bgp.rst:867 +#: ../../configuration/protocols/bgp.rst:889 msgid "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." -msgstr "This command applies the AS path access list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the AS path access list are applied." +msgstr "Ця команда застосовує фільтри списку доступу до шляху AS, названі в<name> до вказаного сусіда BGP, щоб обмежити інформацію про маршрутизацію, яку BGP вивчає та/або повідомляє. Аргументи :cfgcmd:`export` та :cfgcmd:`import` визначають напрямок, у якому застосовується список доступу до AS-шляху." -#: ../../configuration/protocols/bgp.rst:843 +#: ../../configuration/protocols/bgp.rst:865 msgid "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." -msgstr "This command applies the access list filters named in <number> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the access list are applied." +msgstr "Ця команда застосовує фільтри списку доступу, зазначені в<number> до вказаного сусіда BGP, щоб обмежити інформацію про маршрутизацію, яку BGP вивчає та/або повідомляє. Аргументи :cfgcmd:`export` та :cfgcmd:`import` визначають напрямок, у якому застосовується список доступу." -#: ../../configuration/protocols/bgp.rst:851 +#: ../../configuration/protocols/bgp.rst:873 msgid "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." -msgstr "This command applies the prfefix list filters named in <name> to the specified BGP neighbor to restrict the routing information that BGP learns and/or advertises. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the prefix list are applied." +msgstr "Ця команда застосовує фільтри списку prfefix, названі в<name> до вказаного сусіда BGP, щоб обмежити інформацію про маршрутизацію, яку BGP вивчає та/або повідомляє. Аргументи :cfgcmd:`export` та :cfgcmd:`import` визначають напрямок, у якому застосовано список префіксів." -#: ../../configuration/protocols/bgp.rst:859 +#: ../../configuration/protocols/bgp.rst:881 msgid "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." -msgstr "This command applies the route map named in <name> to the specified BGP neighbor to control and modify routing information that is exchanged between peers. The arguments :cfgcmd:`export` and :cfgcmd:`import` specify the direction in which the route map are applied." +msgstr "Ця команда застосовує карту маршруту, зазначену в<name> до вказаного сусіда BGP, щоб контролювати та змінювати інформацію про маршрутизацію, якою обмінюються однорангові вузли. Аргументи :cfgcmd:`export` та :cfgcmd:`import` визначають напрямок, у якому застосовується карта маршруту." #: ../../configuration/protocols/bgp.rst:496 msgid "This command bind specific peer to peer group with a given name." -msgstr "This command bind specific peer to peer group with a given name." +msgstr "Ця команда прив’язує певну однорангову групу до однорангової групи з заданим іменем." #: ../../configuration/protocols/babel.rst:167 msgid "This command can be used to filter the Babel routes using access lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the access lists are applied." -msgstr "This command can be used to filter the Babel routes using access lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the access lists are applied." +msgstr "Цю команду можна використовувати для фільтрації маршрутів Babel за допомогою списків доступу. :cfgcmd:`in` і :cfgcmd:`out` це напрямок, у якому застосовуються списки доступу." #: ../../configuration/protocols/babel.rst:178 msgid "This command can be used to filter the Babel routes using prefix lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the prefix lists are applied." -msgstr "This command can be used to filter the Babel routes using prefix lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the prefix lists are applied." +msgstr "Цю команду можна використовувати для фільтрації маршрутів Babel за допомогою списків префіксів. :cfgcmd:`in` і :cfgcmd:`out` це напрямок, у якому застосовуються списки префіксів." #: ../../configuration/protocols/rip.rst:84 msgid "This command can be used to filter the RIP path using access lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the access lists are applied." -msgstr "This command can be used to filter the RIP path using access lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the access lists are applied." +msgstr "Цю команду можна використовувати для фільтрації шляху RIP за допомогою списків доступу. :cfgcmd:`in` і :cfgcmd:`out` це напрямок, у якому застосовуються списки доступу." #: ../../configuration/protocols/rip.rst:95 msgid "This command can be used to filter the RIP path using prefix lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the prefix lists are applied." -msgstr "This command can be used to filter the RIP path using prefix lists. :cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the prefix lists are applied." +msgstr "Цю команду можна використовувати для фільтрації шляху RIP за допомогою списків префіксів. :cfgcmd:`in` і :cfgcmd:`out` це напрямок, у якому застосовуються списки префіксів." #: ../../configuration/protocols/rip.rst:74 msgid "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." -msgstr "This command can be used with previous command to sets default RIP distance to specified value when the route source IP address matches the specified prefix and the specified access-list." +msgstr "Цю команду можна використовувати з попередньою командою, щоб установити стандартну відстань RIP до вказаного значення, якщо IP-адреса джерела маршруту відповідає вказаному префіксу та вказаному списку доступу." -#: ../../configuration/protocols/bgp.rst:652 +#: ../../configuration/protocols/bgp.rst:674 msgid "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." -msgstr "This command change distance value of BGP. The arguments are the distance values for external routes, internal routes and local routes respectively. The distance range is 1 to 255." +msgstr "Ця команда змінює значення відстані BGP. Аргументами є значення відстані для зовнішніх маршрутів, внутрішніх маршрутів і локальних маршрутів відповідно. Діапазон відстаней від 1 до 255." #: ../../configuration/protocols/ospf.rst:88 msgid "This command change distance value of OSPF. The arguments are the distance values for external routes, inter-area routes and intra-area routes respectively. The distance range is 1 to 255." -msgstr "This command change distance value of OSPF. The arguments are the distance values for external routes, inter-area routes and intra-area routes respectively. The distance range is 1 to 255." +msgstr "Ця команда змінює значення відстані OSPF. Аргументами є значення відстані для зовнішніх маршрутів, маршрутів між зонами та маршрутів у межах зони відповідно. Діапазон відстаней від 1 до 255." #: ../../configuration/protocols/ospf.rst:82 msgid "This command change distance value of OSPF globally. The distance range is 1 to 255." -msgstr "This command change distance value of OSPF globally. The distance range is 1 to 255." +msgstr "Ця команда глобально змінює значення відстані OSPF. Діапазон відстаней від 1 до 255." #: ../../configuration/protocols/ospf.rst:1115 msgid "This command change distance value of OSPFv3. The arguments are the distance values for external routes, inter-area routes and intra-area routes respectively. The distance range is 1 to 255." -msgstr "This command change distance value of OSPFv3. The arguments are the distance values for external routes, inter-area routes and intra-area routes respectively. The distance range is 1 to 255." +msgstr "Ця команда змінює значення відстані OSPFv3. Аргументами є значення відстані для зовнішніх маршрутів, маршрутів між зонами та маршрутів у межах зони відповідно. Діапазон відстаней від 1 до 255." #: ../../configuration/protocols/ospf.rst:1109 msgid "This command change distance value of OSPFv3 globally. The distance range is 1 to 255." -msgstr "This command change distance value of OSPFv3 globally. The distance range is 1 to 255." +msgstr "Ця команда глобально змінює значення відстані OSPFv3. Діапазон відстаней від 1 до 255." #: ../../configuration/protocols/rip.rst:62 msgid "This command change the distance value of RIP. The distance range is 1 to 255." -msgstr "This command change the distance value of RIP. The distance range is 1 to 255." +msgstr "Ця команда змінює значення відстані RIP. Діапазон відстаней від 1 до 255." -#: ../../configuration/protocols/bgp.rst:638 +#: ../../configuration/protocols/bgp.rst:650 msgid "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." -msgstr "This command changes the eBGP behavior of FRR. By default FRR enables :rfc:`8212` functionality which affects how eBGP routes are advertised, namely no routes are advertised across eBGP sessions without some sort of egress route-map/policy in place. In VyOS however we have this RFC functionality disabled by default so that we can preserve backwards compatibility with older versions of VyOS. With this option one can enable :rfc:`8212` functionality to operate." +msgstr "Ця команда змінює поведінку eBGP FRR. За замовчуванням FRR вмикає функціональність :rfc:`8212`, яка впливає на спосіб оголошення маршрутів eBGP, а саме жодні маршрути не рекламуються в сеансах eBGP без певної карти/політики вихідного маршруту. Однак у VyOS цю функцію RFC вимкнено за замовчуванням, щоб ми могли зберегти зворотну сумісність зі старішими версіями VyOS. За допомогою цього параметра можна ввімкнути функцію :rfc:`8212` для роботи." #: ../../configuration/protocols/isis.rst:171 msgid "This command configures padding on hello packets to accommodate asymmetrical maximum transfer units (MTUs) from different hosts as described in :rfc:`3719`. This helps to prevent a premature adjacency Up state when one routing devices MTU does not meet the requirements to establish the adjacency." -msgstr "This command configures padding on hello packets to accommodate asymmetrical maximum transfer units (MTUs) from different hosts as described in :rfc:`3719`. This helps to prevent a premature adjacency Up state when one routing devices MTU does not meet the requirements to establish the adjacency." +msgstr "Ця команда налаштовує доповнення пакетів привітання для розміщення асиметричних максимальних одиниць передачі (MTU) від різних хостів, як описано в :rfc:`3719`. Це допомагає запобігти передчасному стану суміжності Up, коли MTU одного пристрою маршрутизації не відповідає вимогам для встановлення суміжності." #: ../../configuration/protocols/isis.rst:196 msgid "This command configures the authentication password for the interface." -msgstr "This command configures the authentication password for the interface." +msgstr "Ця команда налаштовує пароль автентифікації для інтерфейсу." #: ../../configuration/protocols/isis.rst:93 msgid "This command configures the maximum size of generated :abbr:`LSPs (Link State PDUs)`, in bytes. The size range is 128 to 4352." -msgstr "This command configures the maximum size of generated :abbr:`LSPs (Link State PDUs)`, in bytes. The size range is 128 to 4352." +msgstr "Ця команда налаштовує максимальний розмір згенерованих :abbr:`LSP (PDU стану зв’язку)` в байтах. Розмірний діапазон від 128 до 4352." #: ../../configuration/protocols/isis.rst:191 msgid "This command configures the passive mode for this interface." -msgstr "This command configures the passive mode for this interface." +msgstr "Ця команда налаштовує пасивний режим для цього інтерфейсу." #: ../../configuration/protocols/bgp.rst:191 msgid "This command creates a new neighbor whose remote-as is <nasn>. The neighbor address can be an IPv4 address or an IPv6 address or an interface to use for the connection. The command is applicable for peer and peer group." -msgstr "This command creates a new neighbor whose remote-as is <nasn>. The neighbor address can be an IPv4 address or an IPv6 address or an interface to use for the connection. The command is applicable for peer and peer group." +msgstr "Ця команда створює нового сусіда, віддалений як<nasn> . Адреса сусіда може бути адресою IPv4 або IPv6 або інтерфейсом для підключення. Команда застосовна для однолітків і груп однолітків." #: ../../configuration/policy/route-map.rst:17 msgid "This command creates a new route-map policy, identified by <text>." -msgstr "This command creates a new route-map policy, identified by <text>." +msgstr "Ця команда створює нову політику карти маршруту, визначену<text> ." #: ../../configuration/policy/access-list.rst:58 msgid "This command creates a new rule in the IPv6 access list and defines an action." -msgstr "This command creates a new rule in the IPv6 access list and defines an action." +msgstr "Ця команда створює нове правило в списку доступу IPv6 і визначає дію." #: ../../configuration/policy/prefix-list.rst:62 msgid "This command creates a new rule in the IPv6 prefix-list and defines an action." -msgstr "This command creates a new rule in the IPv6 prefix-list and defines an action." +msgstr "Ця команда створює нове правило в списку префіксів IPv6 і визначає дію." #: ../../configuration/policy/access-list.rst:30 msgid "This command creates a new rule in the access list and defines an action." -msgstr "This command creates a new rule in the access list and defines an action." +msgstr "Ця команда створює нове правило у списку доступу та визначає дію." #: ../../configuration/policy/prefix-list.rst:31 msgid "This command creates a new rule in the prefix-list and defines an action." -msgstr "This command creates a new rule in the prefix-list and defines an action." +msgstr "Ця команда створює нове правило в списку префіксів і визначає дію." #: ../../configuration/policy/access-list.rst:50 msgid "This command creates the new IPv6 access list, identified by <text>" -msgstr "This command creates the new IPv6 access list, identified by <text>" +msgstr "Ця команда створює новий список доступу IPv6, ідентифікований за<text>" #: ../../configuration/policy/prefix-list.rst:54 msgid "This command creates the new IPv6 prefix-list policy, identified by <text>." -msgstr "This command creates the new IPv6 prefix-list policy, identified by <text>." +msgstr "Ця команда створює нову політику списку префіксів IPv6, ідентифіковану за<text> ." #: ../../configuration/policy/access-list.rst:20 msgid "This command creates the new access list policy, where <acl_number> must be a number from 1 to 2699." -msgstr "This command creates the new access list policy, where <acl_number> must be a number from 1 to 2699." +msgstr "Ця команда створює нову політику списку доступу, де<acl_number> має бути числом від 1 до 2699." #: ../../configuration/policy/prefix-list.rst:23 msgid "This command creates the new prefix-list policy, identified by <text>." -msgstr "This command creates the new prefix-list policy, identified by <text>." +msgstr "Ця команда створює нову політику списку префіксів, визначену<text> ." #: ../../configuration/protocols/bgp.rst:486 msgid "This command defines a new peer group. You can specify to the group the same parameters that you can specify for specific neighbors." -msgstr "This command defines a new peer group. You can specify to the group the same parameters that you can specify for specific neighbors." +msgstr "Ця команда визначає нову групу аналогів. Ви можете вказати для групи ті ж параметри, які ви можете вказати для окремих сусідів." #: ../../configuration/policy/access-list.rst:64 msgid "This command defines matching parameters for IPv6 access list rule. Matching criteria could be applied to source parameters:" -msgstr "This command defines matching parameters for IPv6 access list rule. Matching criteria could be applied to source parameters:" +msgstr "Ця команда визначає відповідні параметри для правила списку доступу IPv6. Критерії відповідності можуть бути застосовані до вихідних параметрів:" #: ../../configuration/policy/access-list.rst:35 msgid "This command defines matching parameters for access list rule. Matching criteria could be applied to destination or source parameters:" -msgstr "This command defines matching parameters for access list rule. Matching criteria could be applied to destination or source parameters:" +msgstr "Ця команда визначає відповідні параметри для правила списку доступу. Критерії відповідності можуть бути застосовані до параметрів призначення або джерела:" #: ../../configuration/protocols/isis.rst:85 msgid "This command defines the IS-IS router behavior:" -msgstr "This command defines the IS-IS router behavior:" +msgstr "Ця команда визначає поведінку маршрутизатора IS-IS:" -#: ../../configuration/protocols/bgp.rst:720 +#: ../../configuration/protocols/bgp.rst:742 msgid "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." -msgstr "This command defines the accumulated penalty amount at which the route is re-advertised. The penalty range is 1 to 20000." +msgstr "Ця команда визначає накопичену суму штрафу, на яку повторно оголошується маршрут. Розмір штрафу – від 1 до 20 000." -#: ../../configuration/protocols/bgp.rst:726 +#: ../../configuration/protocols/bgp.rst:748 msgid "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." -msgstr "This command defines the accumulated penalty amount at which the route is suppressed. The penalty range is 1 to 20000." +msgstr "Ця команда визначає накопичену суму штрафу, за якої маршрут пригнічується. Розмір штрафу – від 1 до 20 000." -#: ../../configuration/protocols/bgp.rst:713 +#: ../../configuration/protocols/bgp.rst:735 msgid "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." -msgstr "This command defines the amount of time in minutes after which a penalty is reduced by half. The timer range is 10 to 45 minutes." +msgstr "Ця команда визначає час у хвилинах, після якого штраф зменшується вдвічі. Діапазон таймера становить від 10 до 45 хвилин." -#: ../../configuration/protocols/bgp.rst:595 +#: ../../configuration/protocols/bgp.rst:601 msgid "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." -msgstr "This command defines the maximum number of parallel routes that the BGP can support. In order for BGP to use the second path, the following attributes have to match: Weight, Local Preference, AS Path (both AS number and AS path length), Origin code, MED, IGP metric. Also, the next hop address for each path must be different." +msgstr "Ця команда визначає максимальну кількість паралельних маршрутів, які може підтримувати BGP. Щоб BGP використовував другий шлях, мають відповідати такі атрибути: Weight (Вага), Local Preference (Локальні налаштування), AS Path (як номер AS, так і довжина шляху AS), Origin code (Код джерела), MED, IGP metric. Крім того, адреса наступного переходу для кожного шляху має відрізнятися." -#: ../../configuration/protocols/bgp.rst:732 +#: ../../configuration/protocols/bgp.rst:754 msgid "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." -msgstr "This command defines the maximum time in minutes that a route is suppressed. The timer range is 1 to 255 minutes." +msgstr "Ця команда визначає максимальний час у хвилинах, протягом якого маршрут блокується. Діапазон таймера від 1 до 255 хвилин." #: ../../configuration/protocols/bgp.rst:246 msgid "This command disable the peer or peer group. To reenable the peer use the delete form of this command." -msgstr "This command disable the peer or peer group. To reenable the peer use the delete form of this command." +msgstr "Ця команда вимикає однорангового або групу однорангових. Щоб повторно ввімкнути одноранговий пристрій, використовуйте форму видалення цієї команди." #: ../../configuration/protocols/isis.rst:218 #: ../../configuration/protocols/ospf.rst:465 msgid "This command disables IGP-LDP sync for this specific interface." -msgstr "This command disables IGP-LDP sync for this specific interface." +msgstr "Ця команда вимикає синхронізацію IGP-LDP для цього конкретного інтерфейсу." #: ../../configuration/protocols/isis.rst:213 msgid "This command disables Three-Way Handshake for P2P adjacencies which described in :rfc:`5303`. Three-Way Handshake is enabled by default." -msgstr "This command disables Three-Way Handshake for P2P adjacencies which described in :rfc:`5303`. Three-Way Handshake is enabled by default." +msgstr "Ця команда вимикає тристороннє рукостискання для суміжних мереж P2P, які описано в :rfc:`5303`. Тристороннє рукостискання ввімкнено за замовчуванням." #: ../../configuration/protocols/ospf.rst:426 #: ../../configuration/protocols/ospf.rst:1165 msgid "This command disables check of the MTU value in the OSPF DBD packets. Thus, use of this command allows the OSPF adjacency to reach the FULL state even though there is an interface MTU mismatch between two OSPF routers." -msgstr "This command disables check of the MTU value in the OSPF DBD packets. Thus, use of this command allows the OSPF adjacency to reach the FULL state even though there is an interface MTU mismatch between two OSPF routers." +msgstr "Ця команда вимикає перевірку значення MTU в пакетах OSPF DBD. Таким чином, використання цієї команди дозволяє суміжності OSPF досягти стану FULL, навіть якщо існує невідповідність MTU інтерфейсу між двома маршрутизаторами OSPF." #: ../../configuration/protocols/ospf.rst:524 #: ../../configuration/protocols/ospf.rst:1236 msgid "This command disables it." -msgstr "This command disables it." +msgstr "Ця команда вимикає його." -#: ../../configuration/protocols/bgp.rst:607 +#: ../../configuration/protocols/bgp.rst:619 msgid "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." -msgstr "This command disables route reflection between route reflector clients. By default, the clients of a route reflector are not required to be fully meshed and the routes from a client are reflected to other clients. However, if the clients are fully meshed, route reflection is not required. In this case, use the :cfgcmd:`no-client-to-client-reflection` command to disable client-to-client reflection." +msgstr "Ця команда вимикає відображення маршруту між клієнтами відбивача маршруту. За замовчуванням клієнти рефлектора маршрутів не зобов’язані бути повністю зведеними, і маршрути від клієнта відображаються іншим клієнтам. Однак, якщо клієнти повністю з’єднані, відображення маршруту не потрібне. У цьому випадку скористайтеся командою :cfgcmd:`no-client-to-client-reflection`, щоб вимкнути відображення клієнт-клієнт." #: ../../configuration/protocols/rip.rst:181 msgid "This command disables split-horizon on the interface. By default, VyOS does not advertise RIP routes out the interface over which they were learned (split horizon).3" -msgstr "This command disables split-horizon on the interface. By default, VyOS does not advertise RIP routes out the interface over which they were learned (split horizon).3" +msgstr "Ця команда вимикає split-horizon в інтерфейсі. За замовчуванням VyOS не рекламує маршрути RIP через інтерфейс, через який вони були отримані (розділений горизонт).3" #: ../../configuration/protocols/isis.rst:318 msgid "This command disables the load sharing across multiple LFA backups." msgstr "This command disables the load sharing across multiple LFA backups." -#: ../../configuration/protocols/bgp.rst:1009 +#: ../../configuration/protocols/bgp.rst:1031 msgid "This command displays BGP dampened routes." -msgstr "This command displays BGP dampened routes." +msgstr "Ця команда відображає послаблені маршрути BGP." -#: ../../configuration/protocols/bgp.rst:1032 +#: ../../configuration/protocols/bgp.rst:1054 msgid "This command displays BGP received-routes that are accepted after filtering." -msgstr "This command displays BGP received-routes that are accepted after filtering." +msgstr "Ця команда відображає отримані маршрути BGP, прийняті після фільтрації." -#: ../../configuration/protocols/bgp.rst:1022 +#: ../../configuration/protocols/bgp.rst:1044 msgid "This command displays BGP routes advertised to a neighbor." -msgstr "This command displays BGP routes advertised to a neighbor." +msgstr "Ця команда відображає маршрути BGP, оголошені сусідньому." -#: ../../configuration/protocols/bgp.rst:1017 +#: ../../configuration/protocols/bgp.rst:1039 msgid "This command displays BGP routes allowed by the specified AS Path access list." -msgstr "This command displays BGP routes allowed by the specified AS Path access list." +msgstr "Ця команда відображає маршрути BGP, дозволені вказаним списком доступу AS Path." -#: ../../configuration/protocols/bgp.rst:1026 +#: ../../configuration/protocols/bgp.rst:1048 msgid "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." -msgstr "This command displays BGP routes originating from the specified BGP neighbor before inbound policy is applied. To use this command inbound soft reconfiguration must be enabled." +msgstr "Ця команда відображає маршрути BGP, що походять від указаного сусіда BGP, перш ніж буде застосовано вхідну політику. Щоб використовувати цю команду, необхідно ввімкнути вхідну програмну реконфігурацію." #: ../../configuration/protocols/ospf.rst:830 msgid "This command displays LSAs in MaxAge list." -msgstr "This command displays LSAs in MaxAge list." +msgstr "Ця команда відображає LSA у списку MaxAge." #: ../../configuration/protocols/rip.rst:197 msgid "This command displays RIP routes." -msgstr "This command displays RIP routes." +msgstr "Ця команда відображає маршрути RIP." #: ../../configuration/protocols/ospf.rst:785 #: ../../configuration/protocols/ospf.rst:1306 msgid "This command displays a database contents for a specific link advertisement type." -msgstr "This command displays a database contents for a specific link advertisement type." +msgstr "Ця команда відображає вміст бази даних для певного типу оголошення посилань." #: ../../configuration/protocols/ospf.rst:752 #: ../../configuration/protocols/ospf.rst:1301 msgid "This command displays a summary table with a database contents (LSA)." -msgstr "This command displays a summary table with a database contents (LSA)." +msgstr "Ця команда відображає зведену таблицю з вмістом бази даних (LSA)." #: ../../configuration/protocols/ospf.rst:747 #: ../../configuration/protocols/ospf.rst:1296 msgid "This command displays a table of paths to area boundary and autonomous system boundary routers." -msgstr "This command displays a table of paths to area boundary and autonomous system boundary routers." +msgstr "Ця команда відображає таблицю шляхів до граничних маршрутизаторів області та автономної системи." -#: ../../configuration/protocols/bgp.rst:957 +#: ../../configuration/protocols/bgp.rst:979 msgid "This command displays all entries in BGP routing table." -msgstr "This command displays all entries in BGP routing table." +msgstr "Ця команда відображає всі записи в таблиці маршрутизації BGP." -#: ../../configuration/protocols/bgp.rst:1036 +#: ../../configuration/protocols/bgp.rst:1058 msgid "This command displays dampened routes received from BGP neighbor." -msgstr "This command displays dampened routes received from BGP neighbor." +msgstr "Ця команда відображає послаблені маршрути, отримані від сусіда BGP." #: ../../configuration/protocols/ospf.rst:1311 msgid "This command displays external information redistributed into OSPFv3" -msgstr "This command displays external information redistributed into OSPFv3" +msgstr "Ця команда відображає зовнішню інформацію, перерозподілену в OSPFv3" -#: ../../configuration/protocols/bgp.rst:1040 +#: ../../configuration/protocols/bgp.rst:1062 msgid "This command displays information about BGP routes whose AS path matches the specified regular expression." -msgstr "This command displays information about BGP routes whose AS path matches the specified regular expression." +msgstr "Ця команда відображає інформацію про маршрути BGP, шлях AS яких відповідає вказаному регулярному виразу." -#: ../../configuration/protocols/bgp.rst:1013 +#: ../../configuration/protocols/bgp.rst:1035 msgid "This command displays information about flapping BGP routes." -msgstr "This command displays information about flapping BGP routes." +msgstr "Ця команда відображає інформацію про махові маршрути BGP." -#: ../../configuration/protocols/bgp.rst:977 +#: ../../configuration/protocols/bgp.rst:999 msgid "This command displays information about the particular entry in the BGP routing table." -msgstr "This command displays information about the particular entry in the BGP routing table." +msgstr "Ця команда відображає інформацію про певний запис у таблиці маршрутизації BGP." -#: ../../configuration/protocols/bgp.rst:1004 +#: ../../configuration/protocols/bgp.rst:1026 msgid "This command displays routes that are permitted by the BGP community list." -msgstr "This command displays routes that are permitted by the BGP community list." +msgstr "Ця команда відображає маршрути, дозволені списком спільноти BGP." -#: ../../configuration/protocols/bgp.rst:997 +#: ../../configuration/protocols/bgp.rst:1019 msgid "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." -msgstr "This command displays routes that belong to specified BGP communities. Valid value is a community number in the range from 1 to 4294967200, or AA:NN (autonomous system-community number/2-byte number), no-export, local-as, or no-advertise." +msgstr "Ця команда відображає маршрути, які належать до вказаних спільнот BGP. Дійсним значенням є номер спільноти в діапазоні від 1 до 4294967200 або AA:NN (номер спільноти автономної системи/2-байтовий номер), без експорту, локально як або без реклами." -#: ../../configuration/protocols/bgp.rst:993 +#: ../../configuration/protocols/bgp.rst:1015 msgid "This command displays routes with classless interdomain routing (CIDR)." -msgstr "This command displays routes with classless interdomain routing (CIDR)." +msgstr "Ця команда відображає маршрути з безкласовою міждоменной маршрутизацією (CIDR)." #: ../../configuration/protocols/ospf.rst:672 msgid "This command displays state and configuration of OSPF the specified interface, or all interfaces if no interface is given." -msgstr "This command displays state and configuration of OSPF the specified interface, or all interfaces if no interface is given." +msgstr "Ця команда відображає стан і конфігурацію OSPF зазначеного інтерфейсу або всіх інтерфейсів, якщо інтерфейс не задано." #: ../../configuration/protocols/ospf.rst:1285 msgid "This command displays state and configuration of OSPF the specified interface, or all interfaces if no interface is given. Whith the argument :cfgcmd:`prefix` this command shows connected prefixes to advertise." -msgstr "This command displays state and configuration of OSPF the specified interface, or all interfaces if no interface is given. Whith the argument :cfgcmd:`prefix` this command shows connected prefixes to advertise." +msgstr "Ця команда відображає стан і конфігурацію OSPF зазначеного інтерфейсу або всіх інтерфейсів, якщо інтерфейс не задано. З аргументом :cfgcmd:`prefix` ця команда показує підключені префікси для оголошення." #: ../../configuration/protocols/ospf.rst:1291 msgid "This command displays the OSPF routing table, as determined by the most recent SPF calculation." -msgstr "This command displays the OSPF routing table, as determined by the most recent SPF calculation." +msgstr "Ця команда відображає таблицю маршрутизації OSPF, визначену останнім обчисленням SPF." #: ../../configuration/protocols/ospf.rst:703 msgid "This command displays the OSPF routing table, as determined by the most recent SPF calculation. With the optional :cfgcmd:`detail` argument, each route item's advertiser router and network attribute will be shown." -msgstr "This command displays the OSPF routing table, as determined by the most recent SPF calculation. With the optional :cfgcmd:`detail` argument, each route item's advertiser router and network attribute will be shown." +msgstr "Ця команда відображає таблицю маршрутизації OSPF, визначену останнім обчисленням SPF. З додатковим аргументом :cfgcmd:`detail` буде показано маршрутизатор рекламодавця та мережевий атрибут кожного елемента маршруту." #: ../../configuration/protocols/ospf.rst:1281 msgid "This command displays the neighbor DR choice information." -msgstr "This command displays the neighbor DR choice information." +msgstr "Ця команда відображає інформацію про вибір сусіднього DR." #: ../../configuration/protocols/ospf.rst:623 #: ../../configuration/protocols/ospf.rst:1276 msgid "This command displays the neighbors information in a detailed form, not just a summary table." -msgstr "This command displays the neighbors information in a detailed form, not just a summary table." +msgstr "Ця команда відображає інформацію про сусідів у детальній формі, а не просто підсумкову таблицю." #: ../../configuration/protocols/ospf.rst:662 msgid "This command displays the neighbors information in a detailed form for a neighbor whose IP address is specified." -msgstr "This command displays the neighbors information in a detailed form for a neighbor whose IP address is specified." +msgstr "Ця команда відображає інформацію про сусідів у детальній формі для сусіда, IP-адресу якого вказано." #: ../../configuration/protocols/ospf.rst:613 #: ../../configuration/protocols/ospf.rst:1272 msgid "This command displays the neighbors status." -msgstr "This command displays the neighbors status." +msgstr "Ця команда відображає статус сусідів." #: ../../configuration/protocols/ospf.rst:667 msgid "This command displays the neighbors status for a neighbor on the specified interface." -msgstr "This command displays the neighbors status for a neighbor on the specified interface." +msgstr "Ця команда відображає статус сусідів для сусіда на вказаному інтерфейсі." -#: ../../configuration/protocols/bgp.rst:1045 +#: ../../configuration/protocols/bgp.rst:1067 msgid "This command displays the status of all BGP connections." -msgstr "This command displays the status of all BGP connections." +msgstr "Ця команда відображає статус усіх з’єднань BGP." #: ../../configuration/protocols/ospf.rst:487 msgid "This command enable/disables summarisation for the configured address range." -msgstr "This command enable/disables summarisation for the configured address range." +msgstr "Ця команда вмикає/вимикає підсумовування для налаштованого діапазону адрес." -#: ../../configuration/protocols/bgp.rst:603 +#: ../../configuration/protocols/bgp.rst:615 msgid "This command enable logging neighbor up/down changes and reset reason." -msgstr "This command enable logging neighbor up/down changes and reset reason." +msgstr "Ця команда дозволяє реєструвати зміни сусіда вгору/вниз і скинути причину." #: ../../configuration/protocols/isis.rst:311 msgid "This command enables IP fast re-routing that is part of :rfc:`5286`. Specifically this is a prefix list which references a prefix in which will select eligible PQ nodes for remote LFA backups." @@ -14144,86 +15667,86 @@ msgstr "This command enables IP fast re-routing that is part of :rfc:`5286`. Spe #: ../../configuration/protocols/isis.rst:70 msgid "This command enables IS-IS on this interface, and allows for adjacency to occur. Note that the name of IS-IS instance must be the same as the one used to configure the IS-IS process." -msgstr "This command enables IS-IS on this interface, and allows for adjacency to occur. Note that the name of IS-IS instance must be the same as the one used to configure the IS-IS process." +msgstr "Ця команда вмикає IS-IS на цьому інтерфейсі та дозволяє мати місце суміжності. Зауважте, що ім’я екземпляра IS-IS має збігатися з ім’ям, яке використовується для налаштування процесу IS-IS." #: ../../configuration/protocols/rip.rst:27 msgid "This command enables RIP and sets the RIP enable interface by NETWORK. The interfaces which have addresses matching with NETWORK are enabled." -msgstr "This command enables RIP and sets the RIP enable interface by NETWORK. The interfaces which have addresses matching with NETWORK are enabled." +msgstr "Ця команда вмикає RIP і встановлює інтерфейс увімкнення RIP за допомогою NETWORK. Увімкнено інтерфейси, адреси яких відповідають МЕРЕЖІ." #: ../../configuration/protocols/ospf.rst:421 msgid "This command enables :abbr:`BFD (Bidirectional Forwarding Detection)` on this OSPF link interface." -msgstr "This command enables :abbr:`BFD (Bidirectional Forwarding Detection)` on this OSPF link interface." +msgstr "Ця команда вмикає :abbr:`BFD (Bidirectional Forwarding Detection)` на цьому інтерфейсі посилання OSPF." #: ../../configuration/protocols/isis.rst:106 msgid "This command enables :rfc:`6232` purge originator identification. Enable purge originator identification (POI) by adding the type, length and value (TLV) with the Intermediate System (IS) identification to the LSPs that do not contain POI information. If an IS generates a purge, VyOS adds this TLV with the system ID of the IS to the purge." -msgstr "This command enables :rfc:`6232` purge originator identification. Enable purge originator identification (POI) by adding the type, length and value (TLV) with the Intermediate System (IS) identification to the LSPs that do not contain POI information. If an IS generates a purge, VyOS adds this TLV with the system ID of the IS to the purge." +msgstr "Ця команда вмикає :rfc:`6232` ідентифікацію джерела очищення. Увімкніть ідентифікацію джерела очищення (POI), додавши тип, довжину та значення (TLV) з ідентифікацією проміжної системи (IS) до LSP, які не містять інформації POI. Якщо IS генерує очищення, VyOS додає цей TLV із системним ідентифікатором IS до очищення." #: ../../configuration/protocols/rip.rst:187 msgid "This command enables poison-reverse on the interface. If both poison reverse and split horizon are enabled, then VyOS advertises the learned routes as unreachable over the interface on which the route was learned." -msgstr "This command enables poison-reverse on the interface. If both poison reverse and split horizon are enabled, then VyOS advertises the learned routes as unreachable over the interface on which the route was learned." +msgstr "Ця команда вмикає poison-reverse на інтерфейсі. Якщо ввімкнуто обидва напрямки, а також розділений горизонт, тоді VyOS оголошує вивчені маршрути як недоступні через інтерфейс, на якому цей маршрут було вивчено." #: ../../configuration/protocols/babel.rst:34 msgid "This command enables routing using radio frequency diversity. This is highly recommended in networks with many wireless nodes." -msgstr "This command enables routing using radio frequency diversity. This is highly recommended in networks with many wireless nodes." +msgstr "Ця команда вмикає маршрутизацію з використанням радіочастотного рознесення. Це настійно рекомендується в мережах з великою кількістю бездротових вузлів." #: ../../configuration/protocols/babel.rst:137 msgid "This command enables sending timestamps with each Hello and IHU message in order to compute RTT values. It is recommended to enable timestamps on tunnel interfaces." -msgstr "This command enables sending timestamps with each Hello and IHU message in order to compute RTT values. It is recommended to enable timestamps on tunnel interfaces." +msgstr "Ця команда дозволяє надсилати позначки часу з кожним повідомленням Hello та IHU, щоб обчислити значення RTT. Рекомендується ввімкнути мітки часу на інтерфейсах тунелю." #: ../../configuration/protocols/isis.rst:79 msgid "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." -msgstr "This command enables support for dynamic hostname TLV. Dynamic hostname mapping determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism for IS-IS." +msgstr "Ця команда вмикає підтримку TLV динамічного імені хоста. Динамічне зіставлення імен хостів визначається, як описано в :rfc:`2763`, Механізм динамічного обміну іменами хостів для IS-IS." -#: ../../configuration/protocols/bgp.rst:875 +#: ../../configuration/protocols/bgp.rst:897 msgid "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." -msgstr "This command enables the ORF capability (described in :rfc:`5291`) on the local router, and enables ORF capability advertisement to the specified BGP peer. The :cfgcmd:`receive` keyword configures a router to advertise ORF receive capabilities. The :cfgcmd:`send` keyword configures a router to advertise ORF send capabilities. To advertise a filter from a sender, you must create an IP prefix list for the specified BGP peer applied in inbound derection." +msgstr "Ця команда вмикає можливість ORF (описану в :rfc:`5291`) на локальному маршрутизаторі та вмикає оголошення можливостей ORF для вказаного вузла BGP. Ключове слово :cfgcmd:`receive` налаштовує маршрутизатор для оголошення можливостей отримання ORF. Ключове слово :cfgcmd:`send` налаштовує маршрутизатор для оголошення можливостей надсилання ORF. Щоб оголосити фільтр від відправника, необхідно створити список префіксів IP-адрес для вказаного однорангового вузла BGP, застосованого під час вхідного спрямування." #: ../../configuration/protocols/bgp.rst:467 msgid "This command enforces Generalized TTL Security Mechanism (GTSM), as specified in :rfc:`5082`. With this command, only neighbors that are specified number of hops away will be allowed to become neighbors. The number of hops range is 1 to 254. This command is mutually exclusive with :cfgcmd:`ebgp-multihop`." -msgstr "This command enforces Generalized TTL Security Mechanism (GTSM), as specified in :rfc:`5082`. With this command, only neighbors that are specified number of hops away will be allowed to become neighbors. The number of hops range is 1 to 254. This command is mutually exclusive with :cfgcmd:`ebgp-multihop`." +msgstr "Ця команда забезпечує загальний механізм захисту TTL (GTSM), як зазначено в :rfc:`5082`. За допомогою цієї команди лише ті сусіди, які мають вказану кількість переходів, зможуть стати сусідами. Діапазон кількості переходів становить від 1 до 254. Ця команда є взаємовиключною з :cfgcmd:`ebgp-multihop`." #: ../../configuration/protocols/bgp.rst:310 msgid "This command forces strictly compare remote capabilities and local capabilities. If capabilities are different, send Unsupported Capability error then reset connection." -msgstr "This command forces strictly compare remote capabilities and local capabilities. If capabilities are different, send Unsupported Capability error then reset connection." +msgstr "Ця команда змушує суворо порівнювати віддалені та локальні можливості. Якщо можливості відрізняються, надішліть повідомлення про помилку Unsupported Capability, а потім скиньте з’єднання." #: ../../configuration/protocols/bgp.rst:367 msgid "This command forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor." -msgstr "This command forces the BGP speaker to report itself as the next hop for an advertised route it advertised to a neighbor." +msgstr "Ця команда змушує спікер BGP повідомити себе як наступний стрибок для оголошеного маршруту, який він оголошує сусідньому." #: ../../configuration/protocols/rip.rst:80 msgid "This command generate a default route into the RIP." -msgstr "This command generate a default route into the RIP." +msgstr "Ця команда створює стандартний маршрут до RIP." #: ../../configuration/interfaces/wireless.rst:484 msgid "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -msgstr "This command gives a brief status overview of a specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." +msgstr "Ця команда дає короткий огляд стану зазначеного бездротового інтерфейсу. Ідентифікатор бездротового інтерфейсу може варіюватися від wlan0 до wlan999." -#: ../../configuration/protocols/bgp.rst:632 +#: ../../configuration/protocols/bgp.rst:644 msgid "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." -msgstr "This command goes hand in hand with the listen range command to limit the amount of BGP neighbors that are allowed to connect to the local router. The limit range is 1 to 5000." +msgstr "Ця команда йде рука об руку з командою listen range для обмеження кількості сусідів BGP, яким дозволено підключатися до локального маршрутизатора. Діапазон обмежень становить від 1 до 5000." #: ../../configuration/interfaces/pppoe.rst:133 #: ../../configuration/interfaces/sstp-client.rst:55 msgid "This command got added in VyOS 1.4 and inverts the logic from the old ``default-route`` CLI option." -msgstr "This command got added in VyOS 1.4 and inverts the logic from the old ``default-route`` CLI option." +msgstr "Цю команду було додано у VyOS 1.4 і змінює логіку старого параметра CLI ``default-route``." #: ../../configuration/protocols/ospf.rst:300 #: ../../configuration/protocols/ospf.rst:1132 msgid "This command instead of summarizing intra area paths filter them - i.e. intra area paths from this range are not advertised into other areas. This command makes sense in ABR only." -msgstr "This command instead of summarizing intra area paths filter them - i.e. intra area paths from this range are not advertised into other areas. This command makes sense in ABR only." +msgstr "Ця команда замість узагальнення шляхів внутрішньої області фільтрує їх, тобто шляхи внутрішньої області з цього діапазону не оголошуються в інших областях. Ця команда має сенс лише в ABR." #: ../../configuration/protocols/ospf.rst:37 msgid "This command is also used to enable the OSPF process. The area number can be specified in decimal notation in the range from 0 to 4294967295. Or it can be specified in dotted decimal notation similar to ip address." -msgstr "This command is also used to enable the OSPF process. The area number can be specified in decimal notation in the range from 0 to 4294967295. Or it can be specified in dotted decimal notation similar to ip address." +msgstr "Ця команда також використовується для ввімкнення процесу OSPF. Номер області можна вказати в десятковій системі числення в діапазоні від 0 до 4294967295. Або його можна вказати в десятковій системі запису з крапками, подібно до ip-адреси." #: ../../configuration/protocols/bgp.rst:349 #: ../../configuration/protocols/bgp.rst:451 msgid "This command is only allowed for eBGP peers." -msgstr "This command is only allowed for eBGP peers." +msgstr "Ця команда дозволена лише для вузлів eBGP." #: ../../configuration/protocols/bgp.rst:334 msgid "This command is only allowed for eBGP peers. It is not applicable for peer groups." -msgstr "This command is only allowed for eBGP peers. It is not applicable for peer groups." +msgstr "Ця команда дозволена лише для вузлів eBGP. Це не стосується груп однолітків." #: ../../configuration/protocols/pim.rst:70 msgid "This command is only useful at scale when you can possibly have a large number of PIM control packets flowing." @@ -14231,513 +15754,513 @@ msgstr "This command is only useful at scale when you can possibly have a large #: ../../configuration/protocols/rip.rst:106 msgid "This command is specific to FRR and VyOS. The route command makes a static route only inside RIP. This command should be used only by advanced users who are particularly knowledgeable about the RIP protocol. In most cases, we recommend creating a static route in VyOS and redistributing it in RIP using :cfgcmd:`redistribute static`." -msgstr "This command is specific to FRR and VyOS. The route command makes a static route only inside RIP. This command should be used only by advanced users who are particularly knowledgeable about the RIP protocol. In most cases, we recommend creating a static route in VyOS and redistributing it in RIP using :cfgcmd:`redistribute static`." +msgstr "Ця команда є специфічною для FRR і VyOS. Команда route створює статичний маршрут лише всередині RIP. Цю команду мають використовувати лише досвідчені користувачі, які добре знають протокол RIP. У більшості випадків ми рекомендуємо створити статичний маршрут у VyOS і перерозподілити його в RIP за допомогою :cfgcmd:`redistribute static`." #: ../../configuration/protocols/bgp.rst:505 msgid "This command is used for advertising IPv4 or IPv6 networks." -msgstr "This command is used for advertising IPv4 or IPv6 networks." +msgstr "Ця команда використовується для реклами мереж IPv4 або IPv6." #: ../../configuration/interfaces/wireless.rst:511 msgid "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." -msgstr "This command is used to retrieve information about WAP within the range of your wireless interface. This command is useful on wireless interfaces configured in station mode." +msgstr "Ця команда використовується для отримання інформації про WAP у зоні дії бездротового інтерфейсу. Ця команда корисна для бездротових інтерфейсів, налаштованих у станційному режимі." -#: ../../configuration/protocols/bgp.rst:620 +#: ../../configuration/protocols/bgp.rst:632 msgid "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." -msgstr "This command is useful if one desires to loosen the requirement for BGP to have strictly defined neighbors. Specifically what is allowed is for the local router to listen to a range of IPv4 or IPv6 addresses defined by a prefix and to accept BGP open messages. When a TCP connection (and subsequently a BGP open message) from within this range tries to connect the local router then the local router will respond and connect with the parameters that are defined within the peer group. One must define a peer-group for each range that is listed. If no peer-group is defined then an error will keep you from committing the configuration." +msgstr "Ця команда корисна, якщо потрібно послабити вимогу щодо суворо визначених сусідів BGP. Зокрема, локальному маршрутизатору дозволено прослуховувати діапазон адрес IPv4 або IPv6, визначених префіксом, і приймати відкриті повідомлення BGP. Коли з’єднання TCP (а згодом і повідомлення про відкрите BGP) із цього діапазону намагається з’єднатися з локальним маршрутизатором, тоді локальний маршрутизатор відповість і з’єднається з параметрами, визначеними в групі однорангових пристроїв. Необхідно визначити однорангову групу для кожного діапазону, який у списку. Якщо однорангова група не визначена, помилка не дозволить вам зафіксувати конфігурацію." #: ../../configuration/protocols/rip.rst:158 msgid "This command modifies the default metric (hop count) value for redistributed routes. The metric range is 1 to 16. The default value is 1. This command does not affect connected route even if it is redistributed by :cfgcmd:`redistribute connected`. To modify connected routes metric value, please use :cfgcmd:`redistribute connected metric`." -msgstr "This command modifies the default metric (hop count) value for redistributed routes. The metric range is 1 to 16. The default value is 1. This command does not affect connected route even if it is redistributed by :cfgcmd:`redistribute connected`. To modify connected routes metric value, please use :cfgcmd:`redistribute connected metric`." +msgstr "Ця команда змінює значення метрики за замовчуванням (кількість переходів) для перерозподілених маршрутів. Діапазон показників від 1 до 16. Значення за замовчуванням — 1. Ця команда не впливає на підключений маршрут, навіть якщо його перерозподіляє :cfgcmd:`redistributeconnected`. Щоб змінити значення метрики підключених маршрутів, скористайтеся :cfgcmd:`перерозподілом підключеної метрики`." #: ../../configuration/protocols/bgp.rst:340 msgid "This command override AS number of the originating router with the local AS number." -msgstr "This command override AS number of the originating router with the local AS number." +msgstr "Ця команда замінює номер AS вихідного маршрутизатора на локальний номер AS." -#: ../../configuration/protocols/bgp.rst:885 +#: ../../configuration/protocols/bgp.rst:907 msgid "This command prevents from sending back prefixes learned from the neighbor." -msgstr "This command prevents from sending back prefixes learned from the neighbor." +msgstr "Ця команда запобігає надсиланню префіксів, отриманих від сусіда." -#: ../../configuration/protocols/bgp.rst:804 +#: ../../configuration/protocols/bgp.rst:826 msgid "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." -msgstr "This command provides to compare different MED values that advertised by neighbours in the same AS for routes selection. When this command is enabled, routes from the same autonomous system are grouped together, and the best entries of each group are compared." +msgstr "Ця команда дозволяє порівнювати різні значення MED, які оголошують сусіди в одній AS для вибору маршрутів. Якщо цю команду ввімкнено, маршрути з однієї автономної системи групуються разом, а найкращі записи кожної групи порівнюються." -#: ../../configuration/protocols/bgp.rst:741 +#: ../../configuration/protocols/bgp.rst:763 msgid "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." -msgstr "This command provides to compare the MED on routes, even when they were received from different neighbouring ASes. Setting this option makes the order of preference of routes more defined, and should eliminate MED induced oscillations." +msgstr "Ця команда дозволяє порівнювати MED на маршрутах, навіть якщо вони були отримані від різних сусідніх AS. Встановлення цього параметра робить порядок переваги маршрутів більш визначеним і має усунути коливання, викликані MED." #: ../../configuration/protocols/isis.rst:231 msgid "This command redistributes routing information from the given route source into the ISIS database as Level-1. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static." -msgstr "This command redistributes routing information from the given route source into the ISIS database as Level-1. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static." +msgstr "Ця команда перерозподіляє інформацію про маршрут із заданого джерела маршруту в базу даних ISIS як рівень 1. Є шість режимів, доступних для джерела маршруту: bgp, підключений, ядро, ospf, копіювання, статичний." #: ../../configuration/protocols/isis.rst:237 msgid "This command redistributes routing information from the given route source into the ISIS database as Level-2. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static." -msgstr "This command redistributes routing information from the given route source into the ISIS database as Level-2. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static." +msgstr "Ця команда перерозподіляє інформацію маршрутизації з даного джерела маршруту в базу даних ISIS як рівень 2. Є шість режимів, доступних для джерела маршруту: bgp, підключений, ядро, ospf, копіювання, статичний." #: ../../configuration/protocols/rip.rst:140 msgid "This command redistributes routing information from the given route source into the RIP tables. There are five modes available for route source: bgp, connected, kernel, ospf, static." -msgstr "This command redistributes routing information from the given route source into the RIP tables. There are five modes available for route source: bgp, connected, kernel, ospf, static." +msgstr "Ця команда перерозподіляє інформацію маршрутизації з даного джерела маршруту в таблиці RIP. Є п’ять режимів, доступних для джерела маршруту: bgp, підключений, ядро, ospf, static." #: ../../configuration/protocols/bgp.rst:562 msgid "This command redistributes routing information from the given route source to the BGP process. There are six modes available for route source: connected, kernel, ospf, rip, static, table." -msgstr "This command redistributes routing information from the given route source to the BGP process. There are six modes available for route source: connected, kernel, ospf, rip, static, table." +msgstr "Ця команда перерозподіляє інформацію про маршрутизацію від заданого джерела маршруту до процесу BGP. Є шість режимів, доступних для джерела маршруту: підключений, ядро, ospf, копіювання, статичний, таблиця." #: ../../configuration/protocols/babel.rst:158 msgid "This command redistributes routing information from the given route source to the Babel process." -msgstr "This command redistributes routing information from the given route source to the Babel process." +msgstr "Ця команда перерозподіляє інформацію маршрутизації з указаного джерела маршруту до процесу Babel." #: ../../configuration/protocols/ospf.rst:568 msgid "This command redistributes routing information from the given route source to the OSPF process. There are five modes available for route source: bgp, connected, kernel, rip, static." -msgstr "This command redistributes routing information from the given route source to the OSPF process. There are five modes available for route source: bgp, connected, kernel, rip, static." +msgstr "Ця команда перерозподіляє інформацію маршрутизації з указаного джерела маршруту до процесу OSPF. Є п’ять режимів, доступних для джерела маршруту: bgp, підключений, ядро, копіювання, статичний." #: ../../configuration/protocols/ospf.rst:1255 msgid "This command redistributes routing information from the given route source to the OSPFv3 process. There are five modes available for route source: bgp, connected, kernel, ripng, static." -msgstr "This command redistributes routing information from the given route source to the OSPFv3 process. There are five modes available for route source: bgp, connected, kernel, ripng, static." +msgstr "Ця команда перерозподіляє інформацію маршрутизації з указаного джерела маршруту до процесу OSPFv3. Для джерела маршруту доступно п’ять режимів: bgp, підключений, ядро, ripng, статичний." #: ../../configuration/protocols/bgp.rst:373 msgid "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." -msgstr "This command removes the private ASN of routes that are advertised to the configured peer. It removes only private ASNs on routes advertised to EBGP peers." +msgstr "Ця команда видаляє приватний ASN маршрутів, які оголошуються налаштованому вузлу. Він видаляє лише приватні ASN на маршрутах, які оголошуються партнерам EBGP." -#: ../../configuration/protocols/bgp.rst:1068 +#: ../../configuration/protocols/bgp.rst:1090 msgid "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -msgstr "This command resets BGP connections to the specified neighbor IP address. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." +msgstr "Ця команда скидає підключення BGP до вказаної сусідньої IP-адреси. З аргументом :cfgcmd:`soft` ця команда ініціює програмне скидання. Якщо ви не вкажете параметри :cfgcmd:`in` або :cfgcmd:`out`, запускається як вхідна, так і вихідна програмна реконфігурація." -#: ../../configuration/protocols/bgp.rst:1088 +#: ../../configuration/protocols/bgp.rst:1110 msgid "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." -msgstr "This command resets BGP connections to the specified peer group. With argument :cfgcmd:`soft` this command initiates a soft reset. If you do not specify the :cfgcmd:`in` or :cfgcmd:`out` options, both inbound and outbound soft reconfiguration are triggered." +msgstr "Ця команда скидає підключення BGP до вказаної однорангової групи. З аргументом :cfgcmd:`soft` ця команда ініціює програмне скидання. Якщо ви не вкажете параметри :cfgcmd:`in` або :cfgcmd:`out`, запускається як вхідна, так і вихідна програмна реконфігурація." -#: ../../configuration/protocols/bgp.rst:1075 +#: ../../configuration/protocols/bgp.rst:1097 msgid "This command resets all BGP connections of given router." -msgstr "This command resets all BGP connections of given router." +msgstr "Ця команда скидає всі підключення BGP даного маршрутизатора." -#: ../../configuration/protocols/bgp.rst:1084 +#: ../../configuration/protocols/bgp.rst:1106 msgid "This command resets all external BGP peers of given router." -msgstr "This command resets all external BGP peers of given router." +msgstr "Ця команда скидає всі зовнішні вузли BGP даного маршрутизатора." #: ../../configuration/protocols/ospf.rst:119 msgid "This command selects ABR model. OSPF router supports four ABR models:" -msgstr "This command selects ABR model. OSPF router supports four ABR models:" +msgstr "Ця команда вибирає модель ABR. Маршрутизатор OSPF підтримує чотири моделі ABR:" #: ../../configuration/protocols/isis.rst:178 msgid "This command set default metric for circuit." -msgstr "This command set default metric for circuit." +msgstr "Ця команда встановлює стандартну метрику для схеми." #: ../../configuration/protocols/babel.rst:143 msgid "This command set the channel number that diversity routing uses for this interface (see diversity option above)." -msgstr "This command set the channel number that diversity routing uses for this interface (see diversity option above)." +msgstr "Ця команда встановлює номер каналу, який використовує рознесена маршрутизація для цього інтерфейсу (див. опцію рознесеності вище)." #: ../../configuration/protocols/isis.rst:114 msgid "This command sets ATT bit to 1 in Level1 LSPs. It is described in :rfc:`3787`." -msgstr "This command sets ATT bit to 1 in Level1 LSPs. It is described in :rfc:`3787`." +msgstr "Ця команда встановлює біт ATT на 1 у LSP рівня 1. Це описано в :rfc:`3787`." #: ../../configuration/protocols/isis.rst:275 msgid "This command sets LSP maximum LSP lifetime in seconds. The interval range is 350 to 65535. LSPs remain in a database for 1200 seconds by default. If they are not refreshed by that time, they are deleted. You can change the LSP refresh interval or the LSP lifetime. The LSP refresh interval should be less than the LSP lifetime or else LSPs will time out before they are refreshed." -msgstr "This command sets LSP maximum LSP lifetime in seconds. The interval range is 350 to 65535. LSPs remain in a database for 1200 seconds by default. If they are not refreshed by that time, they are deleted. You can change the LSP refresh interval or the LSP lifetime. The LSP refresh interval should be less than the LSP lifetime or else LSPs will time out before they are refreshed." +msgstr "Ця команда встановлює максимальний термін служби LSP у секундах. Діапазон інтервалів становить від 350 до 65535. LSP за замовчуванням залишаються в базі даних протягом 1200 секунд. Якщо вони не оновлені до цього часу, вони видаляються. Ви можете змінити інтервал оновлення LSP або термін служби LSP. Інтервал оновлення LSP має бути меншим, ніж термін служби LSP, інакше LSP закінчиться, перш ніж вони будуть оновлені." #: ../../configuration/protocols/isis.rst:266 msgid "This command sets LSP refresh interval in seconds. IS-IS generates LSPs when the state of a link changes. However, to ensure that routing databases on all routers remain converged, LSPs in stable networks are generated on a regular basis even though there has been no change to the state of the links. The interval range is 1 to 65235. The default value is 900 seconds." -msgstr "This command sets LSP refresh interval in seconds. IS-IS generates LSPs when the state of a link changes. However, to ensure that routing databases on all routers remain converged, LSPs in stable networks are generated on a regular basis even though there has been no change to the state of the links. The interval range is 1 to 65235. The default value is 900 seconds." +msgstr "Ця команда встановлює інтервал оновлення LSP у секундах. IS-IS генерує LSP, коли змінюється стан зв’язку. Однак, щоб гарантувати, що бази даних маршрутизації на всіх маршрутизаторах залишаються конвергентними, LSP у стабільних мережах генеруються на регулярній основі, навіть якщо стан зв’язків не змінився. Діапазон інтервалів – від 1 до 65235. Значення за замовчуванням – 900 секунд." #: ../../configuration/protocols/ospf.rst:368 msgid "This command sets OSPF authentication key to a simple password. After setting, all OSPF packets are authenticated. Key has length up to 8 chars." -msgstr "This command sets OSPF authentication key to a simple password. After setting, all OSPF packets are authenticated. Key has length up to 8 chars." +msgstr "Ця команда встановлює ключ автентифікації OSPF на простий пароль. Після налаштування всі пакети OSPF автентифікуються. Ключ має довжину до 8 символів." #: ../../configuration/protocols/isis.rst:207 msgid "This command sets PSNP interval in seconds. The interval range is 0 to 127." -msgstr "This command sets PSNP interval in seconds. The interval range is 0 to 127." +msgstr "Ця команда встановлює інтервал PSNP у секундах. Діапазон інтервалів від 0 до 127." #: ../../configuration/protocols/ospf.rst:443 #: ../../configuration/protocols/ospf.rst:1180 msgid "This command sets Router Priority integer value. The router with the highest priority will be more eligible to become Designated Router. Setting the value to 0, makes the router ineligible to become Designated Router. The default value is 1. The interval range is 0 to 255." -msgstr "This command sets Router Priority integer value. The router with the highest priority will be more eligible to become Designated Router. Setting the value to 0, makes the router ineligible to become Designated Router. The default value is 1. The interval range is 0 to 255." +msgstr "Ця команда встановлює ціле значення пріоритету маршрутизатора. Маршрутизатор із найвищим пріоритетом матиме більше права стати призначеним маршрутизатором. Якщо встановити значення 0, маршрутизатор не зможе стати призначеним маршрутизатором. Значення за замовчуванням — 1. Діапазон інтервалів — від 0 до 255." #: ../../configuration/protocols/rip.rst:69 msgid "This command sets default RIP distance to a specified value when the routes source IP address matches the specified prefix." -msgstr "This command sets default RIP distance to a specified value when the routes source IP address matches the specified prefix." +msgstr "Ця команда встановлює стандартну відстань RIP на вказане значення, якщо IP-адреса джерела маршрутів відповідає вказаному префіксу." #: ../../configuration/protocols/isis.rst:160 msgid "This command sets hello interval in seconds on a given interface. The range is 1 to 600." -msgstr "This command sets hello interval in seconds on a given interface. The range is 1 to 600." +msgstr "Ця команда встановлює інтервал привітання в секундах для даного інтерфейсу. Діапазон від 1 до 600." #: ../../configuration/protocols/ospf.rst:391 #: ../../configuration/protocols/ospf.rst:1143 msgid "This command sets link cost for the specified interface. The cost value is set to router-LSA’s metric field and used for SPF calculation. The cost range is 1 to 65535." -msgstr "This command sets link cost for the specified interface. The cost value is set to router-LSA’s metric field and used for SPF calculation. The cost range is 1 to 65535." +msgstr "Ця команда встановлює вартість посилання для вказаного інтерфейсу. Значення вартості встановлюється в поле метрики маршрутизатора-LSA та використовується для розрахунку SPF. Діапазон вартості від 1 до 65535." #: ../../configuration/protocols/isis.rst:284 msgid "This command sets minimum interval between consecutive SPF calculations in seconds.The interval range is 1 to 120." -msgstr "This command sets minimum interval between consecutive SPF calculations in seconds.The interval range is 1 to 120." +msgstr "Ця команда встановлює мінімальний інтервал між послідовними обчисленнями SPF у секундах. Діапазон інтервалів становить від 1 до 120." #: ../../configuration/protocols/isis.rst:261 msgid "This command sets minimum interval in seconds between regenerating same LSP. The interval range is 1 to 120." -msgstr "This command sets minimum interval in seconds between regenerating same LSP. The interval range is 1 to 120." +msgstr "Ця команда встановлює мінімальний інтервал у секундах між регенерацією того самого LSP. Діапазон інтервалів від 1 до 120." #: ../../configuration/protocols/isis.rst:166 msgid "This command sets multiplier for hello holding time on a given interface. The range is 2 to 100." -msgstr "This command sets multiplier for hello holding time on a given interface. The range is 2 to 100." +msgstr "Ця команда встановлює множник для часу очікування привітання на заданому інтерфейсі. Діапазон від 2 до 100." #: ../../configuration/protocols/ospf.rst:458 #: ../../configuration/protocols/ospf.rst:1202 msgid "This command sets number of seconds for InfTransDelay value. It allows to set and adjust for each interface the delay interval before starting the synchronizing process of the router's database with all neighbors. The default value is 1 seconds. The interval range is 3 to 65535." -msgstr "This command sets number of seconds for InfTransDelay value. It allows to set and adjust for each interface the delay interval before starting the synchronizing process of the router's database with all neighbors. The default value is 1 seconds. The interval range is 3 to 65535." +msgstr "Ця команда встановлює кількість секунд для значення InfTransDelay. Дозволяє встановити та налаштувати для кожного інтерфейсу інтервал затримки перед запуском процесу синхронізації бази даних маршрутизатора з усіма сусідами. Значення за замовчуванням становить 1 секунду. Діапазон інтервалів від 3 до 65535." #: ../../configuration/protocols/ospf.rst:451 #: ../../configuration/protocols/ospf.rst:1194 msgid "This command sets number of seconds for RxmtInterval timer value. This value is used when retransmitting Database Description and Link State Request packets if acknowledge was not received. The default value is 5 seconds. The interval range is 3 to 65535." -msgstr "This command sets number of seconds for RxmtInterval timer value. This value is used when retransmitting Database Description and Link State Request packets if acknowledge was not received. The default value is 5 seconds. The interval range is 3 to 65535." +msgstr "Ця команда встановлює кількість секунд для значення таймера RxmtInterval. Це значення використовується під час повторної передачі пакетів опису бази даних і запиту стану посилання, якщо підтвердження не було отримано. Значення за замовчуванням становить 5 секунд. Діапазон інтервалів від 3 до 65535." #: ../../configuration/protocols/isis.rst:98 msgid "This command sets old-style (ISO 10589) or new style packet formats:" -msgstr "This command sets old-style (ISO 10589) or new style packet formats:" +msgstr "Ця команда встановлює формати пакетів старого стилю (ISO 10589) або нового:" -#: ../../configuration/protocols/bgp.rst:944 +#: ../../configuration/protocols/bgp.rst:966 msgid "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." -msgstr "This command sets other confederations <nsubasn> as members of autonomous system specified by :cfgcmd:`confederation identifier <asn>`." +msgstr "Ця команда встановлює інші конфедерації<nsubasn> як члени автономної системи, визначеної :cfgcmd:`ідентифікатором конфедерації<asn> `." #: ../../configuration/protocols/isis.rst:118 msgid "This command sets overload bit to avoid any transit traffic through this router. It is described in :rfc:`3787`." -msgstr "This command sets overload bit to avoid any transit traffic through this router. It is described in :rfc:`3787`." +msgstr "Ця команда встановлює біт перевантаження, щоб уникнути транзитного трафіку через цей маршрутизатор. Це описано в :rfc:`3787`." #: ../../configuration/protocols/isis.rst:200 msgid "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." -msgstr "This command sets priority for the interface for :abbr:`DIS (Designated Intermediate System)` election. The priority range is 0 to 127." +msgstr "Ця команда встановлює пріоритет для інтерфейсу для вибору :abbr:`DIS (Designated Intermediate System)`. Діапазон пріоритетів від 0 до 127." -#: ../../configuration/protocols/bgp.rst:659 +#: ../../configuration/protocols/bgp.rst:681 msgid "This command sets the administrative distance for a particular route. The distance range is 1 to 255." -msgstr "This command sets the administrative distance for a particular route. The distance range is 1 to 255." +msgstr "Ця команда встановлює адміністративну відстань для певного маршруту. Діапазон відстаней від 1 до 255." #: ../../configuration/protocols/ospf.rst:239 msgid "This command sets the cost of default-summary LSAs announced to stubby areas. The cost range is 0 to 16777215." -msgstr "This command sets the cost of default-summary LSAs announced to stubby areas. The cost range is 0 to 16777215." +msgstr "Ця команда встановлює вартість підсумкових LSA за замовчуванням, оголошених у незавершених областях. Діапазон вартості від 0 до 16777215." #: ../../configuration/protocols/ospf.rst:262 msgid "This command sets the default cost of LSAs announced to NSSA areas. The cost range is 0 to 16777215." -msgstr "This command sets the default cost of LSAs announced to NSSA areas. The cost range is 0 to 16777215." +msgstr "Ця команда встановлює вартість за замовчуванням для LSA, оголошених для зон NSSA. Діапазон вартості від 0 до 16777215." #: ../../configuration/protocols/ospf.rst:183 msgid "This command sets the initial delay, the initial-holdtime and the maximum-holdtime between when SPF is calculated and the event which triggered the calculation. The times are specified in milliseconds and must be in the range of 0 to 600000 milliseconds. :cfgcmd:`delay` sets the initial SPF schedule delay in milliseconds. The default value is 200 ms. :cfgcmd:`initial-holdtime` sets the minimum hold time between two consecutive SPF calculations. The default value is 1000 ms. :cfgcmd:`max-holdtime` sets the maximum wait time between two consecutive SPF calculations. The default value is 10000 ms." -msgstr "This command sets the initial delay, the initial-holdtime and the maximum-holdtime between when SPF is calculated and the event which triggered the calculation. The times are specified in milliseconds and must be in the range of 0 to 600000 milliseconds. :cfgcmd:`delay` sets the initial SPF schedule delay in milliseconds. The default value is 200 ms. :cfgcmd:`initial-holdtime` sets the minimum hold time between two consecutive SPF calculations. The default value is 1000 ms. :cfgcmd:`max-holdtime` sets the maximum wait time between two consecutive SPF calculations. The default value is 10000 ms." +msgstr "Ця команда встановлює початкову затримку, початковий час утримання та максимальний час утримання між моментом обчислення SPF та подією, яка ініціювала обчислення. Час вказується в мілісекундах і має бути в діапазоні від 0 до 600000 мілісекунд. :cfgcmd:`delay` встановлює початкову затримку розкладу SPF у мілісекундах. Стандартне значення становить 200 мс. :cfgcmd:`initial-holdtime` встановлює мінімальний час утримання між двома послідовними обчисленнями SPF. Стандартне значення становить 1000 мс. :cfgcmd:`max-holdtime` встановлює максимальний час очікування між двома послідовними обчисленнями SPF. Значення за замовчуванням становить 10000 мс." #: ../../configuration/protocols/ospf.rst:386 msgid "This command sets the interface bandwidth for cost calculations, where bandwidth can be in range from 1 to 100000, specified in Mbits/s." -msgstr "This command sets the interface bandwidth for cost calculations, where bandwidth can be in range from 1 to 100000, specified in Mbits/s." +msgstr "Ця команда встановлює пропускну здатність інтерфейсу для розрахунку вартості, де пропускна здатність може бути в діапазоні від 1 до 100 000 у Мбіт/с." #: ../../configuration/protocols/babel.rst:67 msgid "This command sets the interface type:" -msgstr "This command sets the interface type:" +msgstr "Ця команда встановлює тип інтерфейсу:" #: ../../configuration/protocols/rip.rst:176 msgid "This command sets the interface with RIP MD5 authentication. This command also sets MD5 Key. The key must be shorter than 16 characters." -msgstr "This command sets the interface with RIP MD5 authentication. This command also sets MD5 Key. The key must be shorter than 16 characters." +msgstr "Ця команда встановлює інтерфейс з автентифікацією RIP MD5. Ця команда також встановлює ключ MD5. Ключ має бути коротшим за 16 символів." #: ../../configuration/protocols/rip.rst:170 msgid "This command sets the interface with RIP simple password authentication. This command also sets authentication string. The string must be shorter than 16 characters." -msgstr "This command sets the interface with RIP simple password authentication. This command also sets authentication string. The string must be shorter than 16 characters." +msgstr "Ця команда встановлює інтерфейс із простою автентифікацією за паролем RIP. Ця команда також встановлює рядок автентифікації. Рядок має бути коротшим за 16 символів." #: ../../configuration/protocols/babel.rst:42 msgid "This command sets the multiplicative factor used for diversity routing, in units of 1/256; lower values cause diversity to play a more important role in route selection. The default it 256, which means that diversity plays no role in route selection; you will probably want to set that to 128 or less on nodes with multiple independent radios." -msgstr "This command sets the multiplicative factor used for diversity routing, in units of 1/256; lower values cause diversity to play a more important role in route selection. The default it 256, which means that diversity plays no role in route selection; you will probably want to set that to 128 or less on nodes with multiple independent radios." +msgstr "Ця команда встановлює мультиплікативний коефіцієнт, який використовується для маршрутизації з рознесенням, в одиницях 1/256; нижчі значення призводять до того, що різноманітність відіграє важливішу роль у виборі маршруту. За замовчуванням 256, що означає, що різноманітність не грає ролі у виборі маршруту; Ви, ймовірно, захочете встановити значення 128 або менше на вузлах із кількома незалежними радіостанціями." #: ../../configuration/protocols/ospf.rst:52 msgid "This command sets the reference bandwidth for cost calculations, where bandwidth can be in range from 1 to 4294967, specified in Mbits/s. The default is 100Mbit/s (i.e. a link of bandwidth 100Mbit/s or higher will have a cost of 1. Cost of lower bandwidth links will be scaled with reference to this cost)." -msgstr "This command sets the reference bandwidth for cost calculations, where bandwidth can be in range from 1 to 4294967, specified in Mbits/s. The default is 100Mbit/s (i.e. a link of bandwidth 100Mbit/s or higher will have a cost of 1. Cost of lower bandwidth links will be scaled with reference to this cost)." +msgstr "Ця команда встановлює еталонну пропускну здатність для розрахунків вартості, де пропускна здатність може бути в діапазоні від 1 до 4294967 у Мбіт/с. За замовчуванням 100 Мбіт/с (тобто зв’язок із пропускною спроможністю 100 Мбіт/с або вище матиме вартість 1. Вартість посилань з нижчою пропускною спроможністю буде розрахована з урахуванням цієї вартості)." #: ../../configuration/protocols/ospf.rst:60 msgid "This command sets the router-ID of the OSPF process. The router-ID may be an IP address of the router, but need not be – it can be any arbitrary 32bit number. However it MUST be unique within the entire OSPF domain to the OSPF speaker – bad things will happen if multiple OSPF speakers are configured with the same router-ID!" -msgstr "This command sets the router-ID of the OSPF process. The router-ID may be an IP address of the router, but need not be – it can be any arbitrary 32bit number. However it MUST be unique within the entire OSPF domain to the OSPF speaker – bad things will happen if multiple OSPF speakers are configured with the same router-ID!" +msgstr "Ця команда встановлює ідентифікатор маршрутизатора процесу OSPF. Router-ID може бути IP-адресою маршрутизатора, але це не обов’язково – це може бути будь-яке довільне 32-бітне число. Однак він ПОВИНЕН бути унікальним у всьому домені OSPF для динаміка OSPF – погані речі стануться, якщо кілька динаміків OSPF налаштовано з однаковим ідентифікатором маршрутизатора!" #: ../../configuration/protocols/ospf.rst:1095 msgid "This command sets the router-ID of the OSPFv3 process. The router-ID may be an IP address of the router, but need not be – it can be any arbitrary 32bit number. However it MUST be unique within the entire OSPFv3 domain to the OSPFv3 speaker – bad things will happen if multiple OSPFv3 speakers are configured with the same router-ID!" -msgstr "This command sets the router-ID of the OSPFv3 process. The router-ID may be an IP address of the router, but need not be – it can be any arbitrary 32bit number. However it MUST be unique within the entire OSPFv3 domain to the OSPFv3 speaker – bad things will happen if multiple OSPFv3 speakers are configured with the same router-ID!" +msgstr "Ця команда встановлює ідентифікатор маршрутизатора процесу OSPFv3. Router-ID може бути IP-адресою маршрутизатора, але це не обов’язково – це може бути будь-яке довільне 32-бітне число. Однак він ПОВИНЕН бути унікальним у всьому домені OSPFv3 для гучномовця OSPFv3 – погані речі стануться, якщо кілька гучномовців OSPFv3 налаштовано з однаковим ідентифікатором маршрутизатора!" #: ../../configuration/protocols/rip.rst:47 msgid "This command sets the specified interface to passive mode. On passive mode interface, all receiving packets are processed as normal and VyOS does not send either multicast or unicast RIP packets except to RIP neighbors specified with neighbor command." -msgstr "This command sets the specified interface to passive mode. On passive mode interface, all receiving packets are processed as normal and VyOS does not send either multicast or unicast RIP packets except to RIP neighbors specified with neighbor command." +msgstr "Ця команда встановлює вказаний інтерфейс у пасивний режим. В інтерфейсі пасивного режиму всі отримані пакети обробляються як зазвичай, і VyOS не надсилає ані багатоадресні, ані одноадресні RIP-пакети, окрім RIP-сусідів, указаних командою сусіда." #: ../../configuration/protocols/ospf.rst:147 msgid "This command should NOT be set normally." -msgstr "This command should NOT be set normally." +msgstr "Ця команда НЕ повинна встановлюватися зазвичай." #: ../../configuration/interfaces/wireless.rst:463 msgid "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." -msgstr "This command shows both status and statistics on the specified wireless interface. The wireless interface identifier can range from wlan0 to wlan999." +msgstr "Ця команда показує як статус, так і статистику для вказаного бездротового інтерфейсу. Ідентифікатор бездротового інтерфейсу може варіюватися від wlan0 до wlan999." -#: ../../configuration/protocols/bgp.rst:938 +#: ../../configuration/protocols/bgp.rst:960 msgid "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." -msgstr "This command specifies a BGP confederation identifier. <asn> is the number of the autonomous system that internally includes multiple sub-autonomous systems (a confederation)." +msgstr "Ця команда вказує ідентифікатор конфедерації BGP.<asn> це номер автономної системи, яка внутрішньо включає кілька субавтономних систем (конфедерація)." #: ../../configuration/protocols/babel.rst:25 msgid "This command specifies a Babel enabled interface by interface name. Both the sending and receiving of Babel packets will be enabled on the interface specified in this command." -msgstr "This command specifies a Babel enabled interface by interface name. Both the sending and receiving of Babel packets will be enabled on the interface specified in this command." +msgstr "Ця команда визначає інтерфейс із підтримкою Babel за назвою інтерфейсу. Як надсилання, так і отримання пакетів Babel буде ввімкнено в інтерфейсі, указаному в цій команді." #: ../../configuration/protocols/bgp.rst:461 msgid "This command specifies a MD5 password to be used with the tcp socket that is being used to connect to the remote peer." -msgstr "This command specifies a MD5 password to be used with the tcp socket that is being used to connect to the remote peer." +msgstr "Ця команда вказує пароль MD5 для використання з сокетом tcp, який використовується для підключення до віддаленого вузла." #: ../../configuration/protocols/rip.rst:32 msgid "This command specifies a RIP enabled interface by interface name. Both the sending and receiving of RIP packets will be enabled on the port specified in this command." -msgstr "This command specifies a RIP enabled interface by interface name. Both the sending and receiving of RIP packets will be enabled on the port specified in this command." +msgstr "Ця команда визначає інтерфейс із підтримкою RIP за назвою інтерфейсу. Як надсилання, так і отримання пакетів RIP буде ввімкнено на порту, указаному в цій команді." #: ../../configuration/protocols/rip.rst:38 msgid "This command specifies a RIP neighbor. When a neighbor doesn’t understand multicast, this command is used to specify neighbors. In some cases, not all routers will be able to understand multicasting, where packets are sent to a network or a group of addresses. In a situation where a neighbor cannot process multicast packets, it is necessary to establish a direct link between routers." -msgstr "This command specifies a RIP neighbor. When a neighbor doesn’t understand multicast, this command is used to specify neighbors. In some cases, not all routers will be able to understand multicasting, where packets are sent to a network or a group of addresses. In a situation where a neighbor cannot process multicast packets, it is necessary to establish a direct link between routers." +msgstr "Ця команда вказує сусіда RIP. Якщо сусід не розуміє групову передачу, ця команда використовується для визначення сусідів. У деяких випадках не всі маршрутизатори зможуть зрозуміти групову розсилку, коли пакети надсилаються в мережу або групу адрес. У ситуації, коли сусід не може обробити багатоадресні пакети, необхідно встановити прямий зв'язок між маршрутизаторами." #: ../../configuration/protocols/bgp.rst:404 msgid "This command specifies a default weight value for the neighbor’s routes. The number range is 1 to 65535." -msgstr "This command specifies a default weight value for the neighbor’s routes. The number range is 1 to 65535." +msgstr "Ця команда вказує значення ваги за замовчуванням для сусідніх маршрутів. Діапазон чисел від 1 до 65535." #: ../../configuration/protocols/bgp.rst:360 msgid "This command specifies a maximum number of prefixes we can receive from a given peer. If this number is exceeded, the BGP session will be destroyed. The number range is 1 to 4294967295." -msgstr "This command specifies a maximum number of prefixes we can receive from a given peer. If this number is exceeded, the BGP session will be destroyed. The number range is 1 to 4294967295." +msgstr "Ця команда вказує максимальну кількість префіксів, які ми можемо отримати від даного однорангового вузла. Якщо це число перевищено, сеанс BGP буде знищено. Діапазон чисел від 1 до 4294967295." #: ../../configuration/protocols/ospf.rst:161 msgid "This command specifies all interfaces as passive by default. Because this command changes the configuration logic to a default passive; therefore, interfaces where router adjacencies are expected need to be configured with the :cfgcmd:`passive-interface-exclude` command." -msgstr "This command specifies all interfaces as passive by default. Because this command changes the configuration logic to a default passive; therefore, interfaces where router adjacencies are expected need to be configured with the :cfgcmd:`passive-interface-exclude` command." +msgstr "Ця команда визначає всі інтерфейси як пасивні за замовчуванням. Оскільки ця команда змінює логіку конфігурації на пасивну за замовчуванням; отже, інтерфейси, де очікуються суміжні маршрутизатори, потрібно налаштувати за допомогою команди :cfgcmd:`passive-interface-exclude`." #: ../../configuration/protocols/rip.rst:54 msgid "This command specifies all interfaces to passive mode." -msgstr "This command specifies all interfaces to passive mode." +msgstr "Ця команда вказує всі інтерфейси на пасивний режим." #: ../../configuration/protocols/bgp.rst:532 msgid "This command specifies an aggregate address. The router will also announce longer-prefixes inside of the aggregate address." -msgstr "This command specifies an aggregate address. The router will also announce longer-prefixes inside of the aggregate address." +msgstr "Ця команда вказує сукупну адресу. Маршрутизатор також оголосить довші префікси всередині сукупної адреси." #: ../../configuration/protocols/bgp.rst:545 msgid "This command specifies an aggregate address and provides that longer-prefixes inside of the aggregate address are suppressed before sending BGP updates out to peers." -msgstr "This command specifies an aggregate address and provides that longer-prefixes inside of the aggregate address are suppressed before sending BGP updates out to peers." +msgstr "Ця команда вказує сукупну адресу та передбачає, що довші префікси всередині сукупної адреси пригнічуються перед надсиланням оновлень BGP одноранговим вузлам." #: ../../configuration/protocols/bgp.rst:538 msgid "This command specifies an aggregate address with a mathematical set of autonomous systems. This command summarizes the AS_PATH attributes of all the individual routes." -msgstr "This command specifies an aggregate address with a mathematical set of autonomous systems. This command summarizes the AS_PATH attributes of all the individual routes." +msgstr "Ця команда вказує сукупну адресу з математичним набором автономних систем. Ця команда підсумовує атрибути AS_PATH усіх окремих маршрутів." #: ../../configuration/protocols/bgp.rst:354 msgid "This command specifies attributes to be left unchanged for advertisements sent to a peer or peer group." -msgstr "This command specifies attributes to be left unchanged for advertisements sent to a peer or peer group." +msgstr "Ця команда вказує атрибути, які потрібно залишити без змін для рекламних оголошень, надісланих однорангові або групі однорангових." #: ../../configuration/protocols/isis.rst:151 msgid "This command specifies circuit type for interface:" -msgstr "This command specifies circuit type for interface:" +msgstr "Ця команда вказує тип схеми для інтерфейсу:" -#: ../../configuration/protocols/bgp.rst:920 +#: ../../configuration/protocols/bgp.rst:942 msgid "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." -msgstr "This command specifies cluster ID which identifies a collection of route reflectors and their clients, and is used by route reflectors to avoid looping. By default cluster ID is set to the BGP router id value, but can be set to an arbitrary 32-bit value." +msgstr "Ця команда вказує ідентифікатор кластера, який ідентифікує колекцію відбивачів маршрутів та їхніх клієнтів і використовується відбивачами маршрутів, щоб уникнути зациклення. За замовчуванням ідентифікатор кластера налаштовано на значення ідентифікатора маршрутизатора BGP, але можна встановити довільне 32-бітне значення." -#: ../../configuration/protocols/bgp.rst:671 +#: ../../configuration/protocols/bgp.rst:693 msgid "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." -msgstr "This command specifies hold-time in seconds. The timer range is 4 to 65535. The default value is 180 second. If you set value to 0 VyOS will not hold routes." +msgstr "Ця команда вказує час утримання в секундах. Діапазон таймера від 4 до 65535. Значення за замовчуванням 180 секунд. Якщо встановити значення 0, VyOS не зберігатиме маршрути." #: ../../configuration/protocols/ospf.rst:151 #: ../../configuration/protocols/ospf.rst:1187 msgid "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." -msgstr "This command specifies interface as passive. Passive interface advertises its address, but does not run the OSPF protocol (adjacencies are not formed and hello packets are not generated)." +msgstr "Ця команда визначає інтерфейс як пасивний. Пасивний інтерфейс оголошує свою адресу, але не запускає протокол OSPF (суміжності не формуються і пакети привітання не генеруються)." -#: ../../configuration/protocols/bgp.rst:677 +#: ../../configuration/protocols/bgp.rst:699 msgid "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." -msgstr "This command specifies keep-alive time in seconds. The timer can range from 4 to 65535. The default value is 60 second." +msgstr "Ця команда вказує час підтримки активності в секундах. Таймер може варіюватися від 4 до 65535. Значення за замовчуванням становить 60 секунд." #: ../../configuration/protocols/bgp.rst:569 msgid "This command specifies metric (MED) for redistributed routes. The metric range is 0 to 4294967295. There are six modes available for route source: connected, kernel, ospf, rip, static, table." -msgstr "This command specifies metric (MED) for redistributed routes. The metric range is 0 to 4294967295. There are six modes available for route source: connected, kernel, ospf, rip, static, table." +msgstr "Ця команда вказує метрику (MED) для перерозподілених маршрутів. Діапазон показників становить від 0 до 4294967295. Є шість режимів, доступних для джерела маршруту: підключений, ядро, ospf, копіювання, статичний, таблиця." #: ../../configuration/protocols/rip.rst:146 msgid "This command specifies metric for redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, ospf, static. The metric range is 1 to 16." -msgstr "This command specifies metric for redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, ospf, static. The metric range is 1 to 16." +msgstr "Ця команда вказує метрику для перерозподілених маршрутів із заданого джерела маршрутів. Є п’ять режимів, доступних для джерела маршруту: bgp, підключений, ядро, ospf, static. Метричний діапазон від 1 до 16." #: ../../configuration/protocols/ospf.rst:579 msgid "This command specifies metric for redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, rip, static. The metric range is 1 to 16777214." -msgstr "This command specifies metric for redistributed routes from the given route source. There are five modes available for route source: bgp, connected, kernel, rip, static. The metric range is 1 to 16777214." +msgstr "Ця команда вказує метрику для перерозподілених маршрутів із заданого джерела маршрутів. Є п’ять режимів, доступних для джерела маршруту: bgp, підключений, ядро, копіювання, статичний. Метричний діапазон від 1 до 16777214." #: ../../configuration/protocols/isis.rst:244 msgid "This command specifies metric for redistributed routes from the given route source. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static. The metric range is 1 to 16777215." -msgstr "This command specifies metric for redistributed routes from the given route source. There are six modes available for route source: bgp, connected, kernel, ospf, rip, static. The metric range is 1 to 16777215." +msgstr "Ця команда вказує метрику для перерозподілених маршрутів із заданого джерела маршрутів. Є шість режимів, доступних для джерела маршруту: bgp, підключений, ядро, ospf, копіювання, статичний. Метричний діапазон від 1 до 16777215." #: ../../configuration/protocols/ospf.rst:585 msgid "This command specifies metric type for redistributed routes. Difference between two metric types that metric type 1 is a metric which is \"commensurable\" with inner OSPF links. When calculating a metric to the external destination, the full path metric is calculated as a metric sum path of a router which had advertised this link plus the link metric. Thus, a route with the least summary metric will be selected. If external link is advertised with metric type 2 the path is selected which lies through the router which advertised this link with the least metric despite of the fact that internal path to this router is longer (with more cost). However, if two routers advertised an external link and with metric type 2 the preference is given to the path which lies through the router with a shorter internal path. If two different routers advertised two links to the same external destimation but with different metric type, metric type 1 is preferred. If type of a metric left undefined the router will consider these external links to have a default metric type 2." -msgstr "This command specifies metric type for redistributed routes. Difference between two metric types that metric type 1 is a metric which is \"commensurable\" with inner OSPF links. When calculating a metric to the external destination, the full path metric is calculated as a metric sum path of a router which had advertised this link plus the link metric. Thus, a route with the least summary metric will be selected. If external link is advertised with metric type 2 the path is selected which lies through the router which advertised this link with the least metric despite of the fact that internal path to this router is longer (with more cost). However, if two routers advertised an external link and with metric type 2 the preference is given to the path which lies through the router with a shorter internal path. If two different routers advertised two links to the same external destimation but with different metric type, metric type 1 is preferred. If type of a metric left undefined the router will consider these external links to have a default metric type 2." +msgstr "Ця команда вказує тип метрики для перерозподілених маршрутів. Різниця між двома типами метрики полягає в тому, що метрика типу 1 є метрикою, яка «сумірна» з внутрішніми посиланнями OSPF. Під час обчислення метрики до зовнішнього пункту призначення повна метрика шляху обчислюється як сумарний шлях метрики маршрутизатора, який оголосив це посилання, плюс метрика посилання. Таким чином, буде обрано маршрут із найменшою сумарною метрикою. Якщо зовнішнє посилання оголошується з типом метрики 2, вибирається шлях, який пролягає через маршрутизатор, який оголосив це посилання з найменшою метрикою, незважаючи на те, що внутрішній шлях до цього маршрутизатора довший (з більшою вартістю). Проте, якщо два маршрутизатори оголосили про зовнішнє з’єднання та мають тип метрики 2, перевага надається шляху, який пролягає через маршрутизатор із коротшим внутрішнім шляхом. Якщо два різні маршрутизатори оголосили два посилання на те саме зовнішнє призначення, але з різним типом метрики, перевага віддається метриці типу 1. Якщо тип метрики залишити невизначеним, маршрутизатор вважатиме, що ці зовнішні посилання мають тип метрики за замовчуванням 2." #: ../../configuration/protocols/isis.rst:186 msgid "This command specifies network type to Point-to-Point. The default network type is broadcast." -msgstr "This command specifies network type to Point-to-Point. The default network type is broadcast." +msgstr "Ця команда вказує тип мережі «точка-точка». Тип мережі за замовчуванням – трансляція." -#: ../../configuration/protocols/bgp.rst:784 +#: ../../configuration/protocols/bgp.rst:806 msgid "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." -msgstr "This command specifies that BGP considers the MED when comparing routes originated from different sub-ASs within the confederation to which this BGP speaker belongs. The default state, where the MED attribute is not considered." +msgstr "Ця команда вказує, що BGP враховує MED під час порівняння маршрутів, отриманих від різних суб-AS у межах конфедерації, до якої належить цей вузол BGP. Стандартний стан, де атрибут MED не враховується." -#: ../../configuration/protocols/bgp.rst:754 +#: ../../configuration/protocols/bgp.rst:776 msgid "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." -msgstr "This command specifies that BGP decision process should consider paths of equal AS_PATH length candidates for multipath computation. Without the knob, the entire AS_PATH must match for multipath computation." +msgstr "Ця команда вказує, що процес прийняття рішень BGP повинен розглядати шляхи з однаковою довжиною AS_PATH-кандидатів для багатошляхового обчислення. Без ручки весь AS_PATH має збігатися для багатошляхового обчислення." -#: ../../configuration/protocols/bgp.rst:791 +#: ../../configuration/protocols/bgp.rst:813 msgid "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." -msgstr "This command specifies that a route with a MED is always considered to be better than a route without a MED by causing the missing MED attribute to have a value of infinity. The default state, where the missing MED attribute is considered to have a value of zero." +msgstr "Ця команда вказує, що маршрут із MED завжди вважається кращим за маршрут без MED, оскільки відсутній атрибут MED має значення нескінченності. Стандартний стан, коли відсутній атрибут MED вважається нульовим." #: ../../configuration/protocols/bgp.rst:392 msgid "This command specifies that route updates received from this neighbor will be stored unmodified, regardless of the inbound policy. When inbound soft reconfiguration is enabled, the stored updates are processed by the new policy configuration to create new inbound updates." -msgstr "This command specifies that route updates received from this neighbor will be stored unmodified, regardless of the inbound policy. When inbound soft reconfiguration is enabled, the stored updates are processed by the new policy configuration to create new inbound updates." +msgstr "Ця команда вказує, що оновлення маршруту, отримані від цього сусіда, зберігатимуться без змін, незалежно від вхідної політики. Якщо ввімкнуто вхідну програмну реконфігурацію, збережені оновлення обробляються новою конфігурацією політики для створення нових вхідних оновлень." #: ../../configuration/protocols/ospf.rst:278 msgid "This command specifies that simple password authentication should be used for the given area. The password must also be configured on a per-interface basis." -msgstr "This command specifies that simple password authentication should be used for the given area. The password must also be configured on a per-interface basis." +msgstr "Ця команда вказує, що для даної області слід використовувати просту автентифікацію за паролем. Пароль також має бути налаштований для кожного інтерфейсу." #: ../../configuration/protocols/bgp.rst:423 msgid "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." -msgstr "This command specifies that the community attribute should not be sent in route updates to a peer. By default community attribute is sent." +msgstr "Ця команда вказує, що атрибут спільноти не повинен надсилатися в оновленнях маршруту одноранговому вузлу. За замовчуванням надсилається атрибут спільноти." -#: ../../configuration/protocols/bgp.rst:748 +#: ../../configuration/protocols/bgp.rst:770 msgid "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." -msgstr "This command specifies that the length of confederation path sets and sequences should be taken into account during the BGP best path decision process." +msgstr "Ця команда вказує, що довжину наборів і послідовностей шляхів конфедерації слід враховувати під час процесу визначення найкращого шляху BGP." #: ../../configuration/protocols/ospf.rst:547 msgid "This command specifies the IP address of the neighboring device." -msgstr "This command specifies the IP address of the neighboring device." +msgstr "Ця команда вказує IP-адресу сусіднього пристрою." #: ../../configuration/protocols/ospf.rst:32 msgid "This command specifies the OSPF enabled interface(s). If the interface has an address from defined range then the command enables OSPF on this interface so router can provide network information to the other ospf routers via this interface." -msgstr "This command specifies the OSPF enabled interface(s). If the interface has an address from defined range then the command enables OSPF on this interface so router can provide network information to the other ospf routers via this interface." +msgstr "Ця команда вказує інтерфейс(и) з підтримкою OSPF. Якщо інтерфейс має адресу з визначеного діапазону, тоді команда вмикає OSPF на цьому інтерфейсі, щоб маршрутизатор міг надавати інформацію про мережу іншим маршрутизаторам ospf через цей інтерфейс." #: ../../configuration/protocols/ospf.rst:1088 msgid "This command specifies the OSPFv3 enabled interface. This command is also used to enable the OSPF process. The area number can be specified in decimal notation in the range from 0 to 4294967295. Or it can be specified in dotted decimal notation similar to ip address." -msgstr "This command specifies the OSPFv3 enabled interface. This command is also used to enable the OSPF process. The area number can be specified in decimal notation in the range from 0 to 4294967295. Or it can be specified in dotted decimal notation similar to ip address." +msgstr "Ця команда визначає інтерфейс із підтримкою OSPFv3. Ця команда також використовується для ввімкнення процесу OSPF. Номер області можна вказати в десятковій системі числення в діапазоні від 0 до 4294967295. Або його можна вказати в десятковій системі з розділеними крапками, подібно до ip-адреси." #: ../../configuration/protocols/ospf.rst:253 msgid "This command specifies the area to be a NSSA Totally Stub Area. ABRs for such an area do not need to pass Network-Summary (type-3) LSAs (except the default summary route), ASBR-Summary LSAs (type-4) and AS-External LSAs (type-5) into the area. But Type-7 LSAs that convert to Type-5 at the NSSA ABR are allowed." -msgstr "This command specifies the area to be a NSSA Totally Stub Area. ABRs for such an area do not need to pass Network-Summary (type-3) LSAs (except the default summary route), ASBR-Summary LSAs (type-4) and AS-External LSAs (type-5) into the area. But Type-7 LSAs that convert to Type-5 at the NSSA ABR are allowed." +msgstr "Ця команда вказує область, яка буде NSSA Totally Stub Area. ABR для такої області не потребує передачі LSA мережі (тип 3) (за винятком підсумкового маршруту за замовчуванням), LSA ASBR (тип 4) і зовнішніх LSA AS (тип 5) у область. Але LSA типу 7, які перетворюються на тип 5 на ABR NSSA, дозволені." #: ../../configuration/protocols/ospf.rst:244 msgid "This command specifies the area to be a Not So Stubby Area. External routing information is imported into an NSSA in Type-7 LSAs. Type-7 LSAs are similar to Type-5 AS-external LSAs, except that they can only be flooded into the NSSA. In order to further propagate the NSSA external information, the Type-7 LSA must be translated to a Type-5 AS-external-LSA by the NSSA ABR." -msgstr "This command specifies the area to be a Not So Stubby Area. External routing information is imported into an NSSA in Type-7 LSAs. Type-7 LSAs are similar to Type-5 AS-external LSAs, except that they can only be flooded into the NSSA. In order to further propagate the NSSA external information, the Type-7 LSA must be translated to a Type-5 AS-external-LSA by the NSSA ABR." +msgstr "Ця команда вказує область як Not So Stubby Area. Інформація про зовнішню маршрутизацію імпортується в NSSA в LSA типу 7. LSA типу 7 подібні до зовнішніх AS типу 5, за винятком того, що їх можна передавати лише в NSSA. Для подальшого поширення зовнішньої інформації NSSA LSA типу 7 має бути перетворено в AS-external-LSA типу 5 за допомогою ABR NSSA." #: ../../configuration/protocols/ospf.rst:222 msgid "This command specifies the area to be a Stub Area. That is, an area where no router originates routes external to OSPF and hence an area where all external routes are via the ABR(s). Hence, ABRs for such an area do not need to pass AS-External LSAs (type-5) or ASBR-Summary LSAs (type-4) into the area. They need only pass Network-Summary (type-3) LSAs into such an area, along with a default-route summary." -msgstr "This command specifies the area to be a Stub Area. That is, an area where no router originates routes external to OSPF and hence an area where all external routes are via the ABR(s). Hence, ABRs for such an area do not need to pass AS-External LSAs (type-5) or ASBR-Summary LSAs (type-4) into the area. They need only pass Network-Summary (type-3) LSAs into such an area, along with a default-route summary." +msgstr "Ця команда вказує область, яка буде областю заглушки. Тобто область, де жоден маршрутизатор не створює маршрути, зовнішні щодо OSPF, і, отже, область, де всі зовнішні маршрути проходять через ABR(и). Отже, ABR для такої області не потрібно передавати в область AS-External LSA (тип-5) або ASBR-Summary LSA (тип-4). Їм потрібно лише передати LSA Network-Summary (тип-3) у таку область разом із підсумком маршруту за замовчуванням." #: ../../configuration/protocols/ospf.rst:231 msgid "This command specifies the area to be a Totally Stub Area. In addition to stub area limitations this area type prevents an ABR from injecting Network-Summary (type-3) LSAs into the specified stub area. Only default summary route is allowed." -msgstr "This command specifies the area to be a Totally Stub Area. In addition to stub area limitations this area type prevents an ABR from injecting Network-Summary (type-3) LSAs into the specified stub area. Only default summary route is allowed." +msgstr "Ця команда вказує область, яка буде повністю заглушеною областю. На додаток до обмежень на область заглушки, цей тип області запобігає ABR впроваджувати LSA мережевого підсумку (тип-3) у вказану область заглушки. Дозволений лише зведений маршрут за умовчанням." #: ../../configuration/protocols/babel.rst:104 msgid "This command specifies the base receive cost for this interface. For wireless interfaces, it specifies the multiplier used for computing the ETX reception cost (default 256); for wired interfaces, it specifies the cost that will be advertised to neighbours." -msgstr "This command specifies the base receive cost for this interface. For wireless interfaces, it specifies the multiplier used for computing the ETX reception cost (default 256); for wired interfaces, it specifies the cost that will be advertised to neighbours." +msgstr "Ця команда вказує базову вартість отримання для цього інтерфейсу. Для бездротових інтерфейсів він визначає множник, який використовується для обчислення вартості прийому ETX (за замовчуванням 256); для дротових інтерфейсів він визначає вартість, яка буде оголошена сусідам." #: ../../configuration/protocols/babel.rst:112 msgid "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." -msgstr "This command specifies the decay factor for the exponential moving average of RTT samples, in units of 1/256. Higher values discard old samples faster. The default is 42." +msgstr "Ця команда вказує коефіцієнт затухання для експоненціального ковзного середнього зразків RTT в одиницях 1/256. Вищі значення швидше відкидають старі зразки. За замовчуванням 42." -#: ../../configuration/protocols/bgp.rst:799 +#: ../../configuration/protocols/bgp.rst:821 msgid "This command specifies the default local preference value. The local preference range is 0 to 4294967295." -msgstr "This command specifies the default local preference value. The local preference range is 0 to 4294967295." +msgstr "Ця команда вказує значення локального параметра за умовчанням. Діапазон локальних переваг становить від 0 до 4294967295." #: ../../configuration/protocols/ospf.rst:574 msgid "This command specifies the default metric value of redistributed routes. The metric range is 0 to 16777214." -msgstr "This command specifies the default metric value of redistributed routes. The metric range is 0 to 16777214." +msgstr "Ця команда вказує стандартне значення метрики перерозподілених маршрутів. Діапазон показників від 0 до 16777214." #: ../../configuration/protocols/rip.rst:129 msgid "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." -msgstr "This command specifies the garbage-collection timer. Upon expiration of the garbage-collection timer, the route is finally removed from the routing table. The time range is 5 to 2147483647. The default value is 120 seconds." +msgstr "Ця команда вказує таймер збирання сміття. Після закінчення таймера збору сміття маршрут остаточно видаляється з таблиці маршрутизації. Діапазон часу — від 5 до 2147483647. Значення за замовчуванням — 120 секунд." -#: ../../configuration/protocols/bgp.rst:916 +#: ../../configuration/protocols/bgp.rst:938 msgid "This command specifies the given neighbor as route reflector client." -msgstr "This command specifies the given neighbor as route reflector client." +msgstr "Ця команда вказує даного сусіда як клієнт-відбивач маршруту." #: ../../configuration/protocols/ospf.rst:551 msgid "This command specifies the length of time, in seconds, before the routing device sends hello packets out of the interface before it establishes adjacency with a neighbor. The range is 1 to 65535 seconds. The default value is 60 seconds." -msgstr "This command specifies the length of time, in seconds, before the routing device sends hello packets out of the interface before it establishes adjacency with a neighbor. The range is 1 to 65535 seconds. The default value is 60 seconds." +msgstr "Ця команда вказує проміжок часу в секундах, протягом якого пристрій маршрутизації надсилає пакети привітання з інтерфейсу, перш ніж він встановить суміжність із сусідом. Діапазон від 1 до 65535 секунд. Значення за замовчуванням становить 60 секунд." #: ../../configuration/protocols/babel.rst:124 msgid "This command specifies the maximum RTT, in milliseconds, above which we don't increase the cost to a neighbour. The default is 120 ms." -msgstr "This command specifies the maximum RTT, in milliseconds, above which we don't increase the cost to a neighbour. The default is 120 ms." +msgstr "Ця команда вказує максимальне RTT у мілісекундах, вище якого ми не збільшуємо вартість для сусіда. За замовчуванням 120 мс." #: ../../configuration/protocols/babel.rst:130 msgid "This command specifies the maximum cost added to a neighbour because of RTT, i.e. when the RTT is higher or equal than rtt-max. The default is 150. Setting it to 0 effectively disables the use of a RTT-based cost." -msgstr "This command specifies the maximum cost added to a neighbour because of RTT, i.e. when the RTT is higher or equal than rtt-max. The default is 150. Setting it to 0 effectively disables the use of a RTT-based cost." +msgstr "Ця команда вказує максимальну вартість, додану сусідові через RTT, тобто коли RTT вище або дорівнює rtt-max. За замовчуванням — 150. Встановлення значення 0 фактично вимикає використання вартості на основі RTT." #: ../../configuration/protocols/babel.rst:118 msgid "This command specifies the minimum RTT, in milliseconds, starting from which we increase the cost to a neighbour. The additional cost is linear in (rtt - rtt-min). The default is 10 ms." -msgstr "This command specifies the minimum RTT, in milliseconds, starting from which we increase the cost to a neighbour. The additional cost is linear in (rtt - rtt-min). The default is 10 ms." +msgstr "Ця команда вказує мінімальний RTT у мілісекундах, починаючи з якого ми збільшуємо вартість для сусіда. Додаткова вартість лінійна (rtt - rtt-min). За замовчуванням 10 мс." #: ../../configuration/protocols/bgp.rst:410 msgid "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." -msgstr "This command specifies the minimum route advertisement interval for the peer. The interval value is 0 to 600 seconds, with the default advertisement interval being 0." +msgstr "Ця команда вказує мінімальний інтервал оголошення маршруту для вузла. Значення інтервалу становить від 0 до 600 секунд, а інтервал реклами за замовчуванням становить 0." -#: ../../configuration/protocols/bgp.rst:589 +#: ../../configuration/protocols/bgp.rst:595 msgid "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." -msgstr "This command specifies the router-ID. If router ID is not specified it will use the highest interface IP address." +msgstr "Ця команда вказує ідентифікатор маршрутизатора. Якщо ідентифікатор маршрутизатора не вказано, він використовуватиме найвищу IP-адресу інтерфейсу." #: ../../configuration/protocols/ospf.rst:558 msgid "This command specifies the router priority value of the nonbroadcast neighbor associated with the IP address specified. The default is 0. This keyword does not apply to point-to-multipoint interfaces." -msgstr "This command specifies the router priority value of the nonbroadcast neighbor associated with the IP address specified. The default is 0. This keyword does not apply to point-to-multipoint interfaces." +msgstr "Ця команда вказує значення пріоритету маршрутизатора неширокомовного сусіда, пов’язаного з указаною IP-адресою. За замовчуванням 0. Це ключове слово не застосовується до інтерфейсів «точка-багато точок»." #: ../../configuration/protocols/babel.rst:56 msgid "This command specifies the time constant, in seconds, of the smoothing algorithm used for implementing hysteresis. Larger values reduce route oscillation at the cost of very slightly increasing convergence time. The value 0 disables hysteresis, and is suitable for wired networks. The default is 4 s." -msgstr "This command specifies the time constant, in seconds, of the smoothing algorithm used for implementing hysteresis. Larger values reduce route oscillation at the cost of very slightly increasing convergence time. The value 0 disables hysteresis, and is suitable for wired networks. The default is 4 s." +msgstr "Ця команда вказує постійну часу в секундах алгоритму згладжування, який використовується для реалізації гістерезису. Більші значення зменшують коливання маршруту ціною дуже незначного збільшення часу конвергенції. Значення 0 вимикає гістерезис і підходить для дротових мереж. За замовчуванням 4 с." #: ../../configuration/protocols/babel.rst:51 msgid "This command specifies the time in milliseconds after which an 'important' request or update will be resent. The default is 2000 ms." -msgstr "This command specifies the time in milliseconds after which an 'important' request or update will be resent. The default is 2000 ms." +msgstr "Ця команда вказує час у мілісекундах, після якого «важливий» запит або оновлення буде надіслано повторно. За замовчуванням 2000 мс." #: ../../configuration/protocols/babel.rst:89 msgid "This command specifies the time in milliseconds between two scheduled hellos. On wired links, Babel notices a link failure within two hello intervals; on wireless links, the link quality value is reestimated at every hello interval. The default is 4000 ms." -msgstr "This command specifies the time in milliseconds between two scheduled hellos. On wired links, Babel notices a link failure within two hello intervals; on wireless links, the link quality value is reestimated at every hello interval. The default is 4000 ms." +msgstr "Ця команда вказує час у мілісекундах між двома запланованими привітаннями. У дротових з’єднаннях Babel помічає збій з’єднання протягом двох інтервалів привітання; на бездротових з’єднаннях значення якості з’єднання переоцінюється на кожному інтервалі привітання. За замовчуванням 4000 мс." #: ../../configuration/protocols/babel.rst:97 msgid "This command specifies the time in milliseconds between two scheduled updates. Since Babel makes extensive use of triggered updates, this can be set to fairly high values on links with little packet loss. The default is 20000 ms." -msgstr "This command specifies the time in milliseconds between two scheduled updates. Since Babel makes extensive use of triggered updates, this can be set to fairly high values on links with little packet loss. The default is 20000 ms." +msgstr "Ця команда вказує час у мілісекундах між двома запланованими оновленнями. Оскільки Babel широко використовує запущені оновлення, це можна встановити на досить високі значення для посилань із невеликою втратою пакетів. За замовчуванням 20000 мс." #: ../../configuration/protocols/rip.rst:121 msgid "This command specifies the timeout timer. Upon expiration of the timeout, the route is no longer valid; however, it is retained in the routing table for a short time so that neighbors can be notified that the route has been dropped. The time range is 5 to 2147483647. The default value is 180 seconds." -msgstr "This command specifies the timeout timer. Upon expiration of the timeout, the route is no longer valid; however, it is retained in the routing table for a short time so that neighbors can be notified that the route has been dropped. The time range is 5 to 2147483647. The default value is 180 seconds." +msgstr "Ця команда вказує таймер тайм-ауту. Після закінчення тайм-ауту маршрут стає недійсним; однак він зберігається в таблиці маршрутизації протягом короткого часу, щоб сусіди могли бути повідомлені про те, що маршрут було видалено. Діапазон часу — від 5 до 2147483647. Значення за замовчуванням — 180 секунд." #: ../../configuration/protocols/rip.rst:114 msgid "This command specifies the update timer. Every update timer seconds, the RIP process is awakened to send an unsolicited response message containing the complete routing table to all neighboring RIP routers. The time range is 5 to 2147483647. The default value is 30 seconds." -msgstr "This command specifies the update timer. Every update timer seconds, the RIP process is awakened to send an unsolicited response message containing the complete routing table to all neighboring RIP routers. The time range is 5 to 2147483647. The default value is 30 seconds." +msgstr "Ця команда вказує таймер оновлення. Через кожну секунду таймера оновлення процес RIP пробуджується, щоб надіслати небажане повідомлення відповіді, що містить повну таблицю маршрутизації, до всіх сусідніх маршрутизаторів RIP. Діапазон часу — від 5 до 2147483647. Значення за замовчуванням — 30 секунд." #: ../../configuration/protocols/babel.rst:77 msgid "This command specifies whether to perform split-horizon on the interface. Specifying no babel split-horizon is always correct, while babel split-horizon is an optimisation that should only be used on symmetric and transitive (wired) networks." -msgstr "This command specifies whether to perform split-horizon on the interface. Specifying no babel split-horizon is always correct, while babel split-horizon is an optimisation that should only be used on symmetric and transitive (wired) networks." +msgstr "Ця команда вказує, чи виконувати розділення горизонту на інтерфейсі. Зазначення відсутності babel split-horizon завжди є правильним, тоді як babel split-horizon є оптимізацією, яку слід використовувати лише в симетричних і транзитивних (провідних) мережах." #: ../../configuration/protocols/ospf.rst:284 msgid "This command specify that OSPF packets must be authenticated with MD5 HMACs within the given area. Keying material must also be configured on a per-interface basis." -msgstr "This command specify that OSPF packets must be authenticated with MD5 HMACs within the given area. Keying material must also be configured on a per-interface basis." +msgstr "Ця команда вказує, що пакети OSPF мають бути автентифіковані за допомогою MD5 HMAC у вказаній області. Ключовий матеріал також має бути налаштований для кожного інтерфейсу." #: ../../configuration/protocols/ospf.rst:377 msgid "This command specifys that MD5 HMAC authentication must be used on this interface. It sets OSPF authentication key to a cryptographic password. Key-id identifies secret key used to create the message digest. This ID is part of the protocol and must be consistent across routers on a link. The key can be long up to 16 chars (larger strings will be truncated), and is associated with the given key-id." -msgstr "This command specifys that MD5 HMAC authentication must be used on this interface. It sets OSPF authentication key to a cryptographic password. Key-id identifies secret key used to create the message digest. This ID is part of the protocol and must be consistent across routers on a link. The key can be long up to 16 chars (larger strings will be truncated), and is associated with the given key-id." +msgstr "Ця команда вказує, що на цьому інтерфейсі має використовуватися автентифікація MD5 HMAC. Він встановлює ключ автентифікації OSPF на криптографічний пароль. Key-id ідентифікує секретний ключ, який використовується для створення дайджесту повідомлення. Цей ідентифікатор є частиною протоколу та має бути узгодженим на всіх маршрутизаторах у каналі. Ключ може мати довжину до 16 символів (більші рядки будуть скорочені) і пов’язаний із заданим ідентифікатором ключа." #: ../../configuration/protocols/ospf.rst:1126 msgid "This command summarizes intra area paths from specified area into one Type-3 Inter-Area Prefix LSA announced to other areas. This command can be used only in ABR." -msgstr "This command summarizes intra area paths from specified area into one Type-3 Inter-Area Prefix LSA announced to other areas. This command can be used only in ABR." +msgstr "Ця команда підсумовує внутрішні шляхи зони з указаної області в один LSA типу 3 міжзонального префікса, оголошений іншим областям. Цю команду можна використовувати лише в ABR." #: ../../configuration/protocols/ospf.rst:290 msgid "This command summarizes intra area paths from specified area into one summary-LSA (Type-3) announced to other areas. This command can be used only in ABR and ONLY router-LSAs (Type-1) and network-LSAs (Type-2) (i.e. LSAs with scope area) can be summarized. AS-external-LSAs (Type-5) can’t be summarized - their scope is AS. The optional argument :cfgcmd:`cost` specifies the aggregated link metric. The metric range is 0 to 16777215." -msgstr "This command summarizes intra area paths from specified area into one summary-LSA (Type-3) announced to other areas. This command can be used only in ABR and ONLY router-LSAs (Type-1) and network-LSAs (Type-2) (i.e. LSAs with scope area) can be summarized. AS-external-LSAs (Type-5) can’t be summarized - their scope is AS. The optional argument :cfgcmd:`cost` specifies the aggregated link metric. The metric range is 0 to 16777215." +msgstr "Ця команда підсумовує шляхи внутрішньої зони з указаної області в один підсумковий LSA (Тип-3), оголошений іншим областям. Цю команду можна використовувати лише в ABR і ЛИШЕ LSA маршрутизатора (Тип-1) і мережеві LSA (Тип-2) (тобто LSA з областю дії) можна підсумувати. AS-external-LSA (Тип-5) не можна підсумувати – їх сфера дії – AS. Необов’язковий аргумент :cfgcmd:`cost` визначає агреговану метрику посилання. Діапазон показників від 0 до 16777215." #: ../../configuration/protocols/ospf.rst:494 msgid "This command to ensure not advertise the summary lsa for the matched external LSAs." -msgstr "This command to ensure not advertise the summary lsa for the matched external LSAs." +msgstr "Ця команда гарантує, що підсумковий lsa не рекламується для відповідних зовнішніх LSA." -#: ../../configuration/protocols/bgp.rst:1079 +#: ../../configuration/protocols/bgp.rst:1101 msgid "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." -msgstr "This command uses to clear BGP route dampening information and to unsuppress suppressed routes." +msgstr "Ця команда використовується для очищення інформації про демпфування маршруту BGP і для скасування блокування пригнічених маршрутів." #: ../../_include/interface-ipv6.txt:65 msgid "This command was introduced in VyOS 1.4 - it was previously called: ``set firewall options interface <name> adjust-mss6 <value>``" -msgstr "This command was introduced in VyOS 1.4 - it was previously called: ``set firewall options interface <name> adjust-mss6 <value>``" +msgstr "Цю команду було представлено у VyOS 1.4 - раніше вона називалася: ``налаштувати інтерфейс параметрів брандмауера<name> adjust-mss6<value> ``" #: ../../configuration/interfaces/pppoe.rst:212 #: ../../configuration/interfaces/pppoe.rst:258 #: ../../configuration/interfaces/sstp-client.rst:84 #: ../../_include/interface-ip.txt:9 msgid "This command was introduced in VyOS 1.4 - it was previously called: ``set firewall options interface <name> adjust-mss <value>``" -msgstr "This command was introduced in VyOS 1.4 - it was previously called: ``set firewall options interface <name> adjust-mss <value>``" +msgstr "Цю команду було представлено у VyOS 1.4 - раніше вона називалася: ``налаштувати інтерфейс параметрів брандмауера<name> налаштувати-міс<value> ``" #: ../../configuration/protocols/isis.rst:223 #: ../../configuration/protocols/ospf.rst:470 msgid "This command will change the hold down value for IGP-LDP synchronization during convergence/interface flap events, but for this interface only." -msgstr "This command will change the hold down value for IGP-LDP synchronization during convergence/interface flap events, but for this interface only." +msgstr "Ця команда змінить значення утримання для синхронізації IGP-LDP під час подій конвергенції/перекриття інтерфейсу, але лише для цього інтерфейсу." #: ../../configuration/protocols/isis.rst:141 #: ../../configuration/protocols/ospf.rst:202 msgid "This command will change the hold down value globally for IGP-LDP synchronization during convergence/interface flap events." -msgstr "This command will change the hold down value globally for IGP-LDP synchronization during convergence/interface flap events." +msgstr "Ця команда глобально змінить значення утримання для синхронізації IGP-LDP під час подій конвергенції/перекриття інтерфейсу." #: ../../configuration/protocols/isis.rst:324 msgid "This command will configure a tie-breaker for multiple local LFA backups. The lower index numbers will be processed first." @@ -14745,36 +16268,36 @@ msgstr "This command will configure a tie-breaker for multiple local LFA backups #: ../../configuration/protocols/isis.rst:134 msgid "This command will enable IGP-LDP synchronization globally for ISIS. This requires for LDP to be functional. This is described in :rfc:`5443`. By default all interfaces operational in IS-IS are enabled for synchronization. Loopbacks are exempt." -msgstr "This command will enable IGP-LDP synchronization globally for ISIS. This requires for LDP to be functional. This is described in :rfc:`5443`. By default all interfaces operational in IS-IS are enabled for synchronization. Loopbacks are exempt." +msgstr "Ця команда дозволить глобально синхронізувати IGP-LDP для ISIS. Це вимагає, щоб LDP був функціональним. Це описано в :rfc:`5443`. За замовчуванням усі інтерфейси, що працюють в IS-IS, увімкнено для синхронізації. Петлі звільняються." #: ../../configuration/protocols/ospf.rst:195 msgid "This command will enable IGP-LDP synchronization globally for OSPF. This requires for LDP to be functional. This is described in :rfc:`5443`. By default all interfaces operational in OSPF are enabled for synchronization. Loopbacks are exempt." -msgstr "This command will enable IGP-LDP synchronization globally for OSPF. This requires for LDP to be functional. This is described in :rfc:`5443`. By default all interfaces operational in OSPF are enabled for synchronization. Loopbacks are exempt." +msgstr "Ця команда дозволить глобально синхронізувати IGP-LDP для OSPF. Це вимагає, щоб LDP був функціональним. Це описано в :rfc:`5443`. За замовчуванням усі інтерфейси, що працюють в OSPF, увімкнено для синхронізації. Петлі звільняються." #: ../../configuration/protocols/isis.rst:124 msgid "This command will generate a default-route in L1 database." -msgstr "This command will generate a default-route in L1 database." +msgstr "Ця команда створить маршрут за замовчуванням у базі даних L1." #: ../../configuration/protocols/isis.rst:129 msgid "This command will generate a default-route in L2 database." -msgstr "This command will generate a default-route in L2 database." +msgstr "Ця команда створить маршрут за замовчуванням у базі даних L2." #: ../../configuration/firewall/ipv6.rst:1113 msgid "This command will give an overview of a rule in a single rule-set" -msgstr "This command will give an overview of a rule in a single rule-set" +msgstr "Ця команда надасть огляд правила в одному наборі правил" -#: ../../configuration/firewall/ipv4.rst:1091 +#: ../../configuration/firewall/ipv4.rst:1114 msgid "This command will give an overview of a rule in a single rule-set, plus information for default action." msgstr "This command will give an overview of a rule in a single rule-set, plus information for default action." #: ../../configuration/firewall/general-legacy.rst:940 msgid "This command will give an overview of a rule in a single rule-set." -msgstr "This command will give an overview of a rule in a single rule-set." +msgstr "Ця команда надасть огляд правила в одному наборі правил." -#: ../../configuration/firewall/ipv4.rst:1072 +#: ../../configuration/firewall/ipv4.rst:1095 #: ../../configuration/firewall/ipv6.rst:1088 msgid "This command will give an overview of a single rule-set." -msgstr "This command will give an overview of a single rule-set." +msgstr "Ця команда надасть огляд окремого набору правил." #: ../../configuration/protocols/isis.rst:330 msgid "This command will limit LFA backup computation up to the specified prefix priority." @@ -14782,303 +16305,334 @@ msgstr "This command will limit LFA backup computation up to the specified prefi #: ../../configuration/protocols/bgp.rst:268 msgid "This command would allow the dynamic update of capabilities over an established BGP session." -msgstr "This command would allow the dynamic update of capabilities over an established BGP session." +msgstr "Ця команда дозволить динамічно оновлювати можливості протягом встановленого сеансу BGP." #: ../../configuration/interfaces/vxlan.rst:293 msgid "This commands creates a bridge that is used to bind traffic on eth1 vlan 241 with the vxlan241-interface. The IP address is not required. It may however be used as a default gateway for each Leaf which allows devices on the vlan to reach other subnets. This requires that the subnets are redistributed by OSPF so that the Spine will learn how to reach it. To do this you need to change the OSPF network from '10.0.0.0/8' to '0.0.0.0/0' to allow 172.16/12-networks to be advertised." -msgstr "This commands creates a bridge that is used to bind traffic on eth1 vlan 241 with the vxlan241-interface. The IP address is not required. It may however be used as a default gateway for each Leaf which allows devices on the vlan to reach other subnets. This requires that the subnets are redistributed by OSPF so that the Spine will learn how to reach it. To do this you need to change the OSPF network from '10.0.0.0/8' to '0.0.0.0/0' to allow 172.16/12-networks to be advertised." +msgstr "Ці команди створюють міст, який використовується для зв’язування трафіку на eth1 vlan 241 з інтерфейсом vxlan241. IP-адреса не потрібна. Однак його можна використовувати як шлюз за замовчуванням для кожного Leaf, який дозволяє пристроям у vlan досягати інших підмереж. Для цього потрібно, щоб OSPF перерозподіляв підмережі, щоб Spine дізнався, як до них дістатися. Для цього вам потрібно змінити мережу OSPF з «10.0.0.0/8» на «0.0.0.0/0», щоб дозволити рекламувати мережі 172.16/12." #: ../../configuration/protocols/isis.rst:301 msgid "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." -msgstr "This commands specifies the Finite State Machine (FSM) intended to control the timing of the execution of SPF calculations in response to IGP events. The process described in :rfc:`8405`." +msgstr "Ці команди вказують кінцевий автомат (FSM), призначений для керування часом виконання обчислень SPF у відповідь на події IGP. Процес, описаний у :rfc:`8405`." -#: ../../configuration/loadbalancing/reverse-proxy.rst:192 +#: ../../configuration/loadbalancing/reverse-proxy.rst:367 +msgid "This configuration enables HTTP health checks on backend servers." +msgstr "This configuration enables HTTP health checks on backend servers." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:232 msgid "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." -msgstr "This configuration enables the TCP reverse proxy for the \"my-tcp-api\" service. Incoming TCP connections on port 8888 will be load balanced across the backend servers (srv01 and srv02) using the round-robin load-balancing algorithm." +msgstr "Ця конфігурація вмикає зворотний проксі TCP для служби "my-tcp-api". Вхідні TCP-з’єднання на порт 8888 розподілятимуть навантаження між внутрішніми серверами (srv01 і srv02) за допомогою циклічного алгоритму балансування навантаження." + +#: ../../configuration/pki/index.rst:375 +msgid "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." +msgstr "This configuration generates & installs into the VyOS PKI system a root certificate authority, alongside two intermediary certificate authorities for client & server certificates. These CAs are then used to generate a server certificate for the router, and a client certificate for a user." -#: ../../configuration/loadbalancing/reverse-proxy.rst:174 +#: ../../configuration/loadbalancing/reverse-proxy.rst:214 msgid "This configuration listen on port 80 and redirect incoming requests to HTTPS:" -msgstr "This configuration listen on port 80 and redirect incoming requests to HTTPS:" +msgstr "Ця конфігурація прослуховує порт 80 і перенаправляє вхідні запити на HTTPS:" #: ../../configuration/protocols/bgp.rst:513 msgid "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." -msgstr "This configuration modifies the behavior of the network statement. If you have this configured the underlying network must exist in the routing table." +msgstr "Ця конфігурація змінює поведінку оператора мережі. Якщо це налаштовано, основна мережа має існувати в таблиці маршрутизації." -#: ../../configuration/service/dhcp-server.rst:76 -#: ../../configuration/service/dhcp-server.rst:520 +#: ../../configuration/service/dhcp-server.rst:92 +#: ../../configuration/service/dhcp-server.rst:579 msgid "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." msgstr "This configuration parameter is required and must be unique to each subnet. It is required to map subnets to lease file entries." -#: ../../configuration/service/dhcp-server.rst:58 +#: ../../configuration/service/dhcp-server.rst:74 msgid "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." -msgstr "This configuration parameter lets the DHCP server to listen for DHCP requests sent to the specified address, it is only realistically useful for a server whose only clients are reached via unicasts, such as via DHCP relay agents." +msgstr "Цей параметр конфігурації дозволяє серверу DHCP прослуховувати запити DHCP, надіслані на вказану адресу, він реально корисний лише для сервера, лише клієнти якого доступні через одноадресну передачу, наприклад через агенти ретрансляції DHCP." + +#: ../../configuration/service/dhcp-server.rst:58 +msgid "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. An example for Ubiquiti is shown below:" + +#: ../../configuration/service/dhcp-server.rst:154 +msgid "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" +msgstr "This configuration parameter lets you specify a vendor-option for the subnet specified within the shared network definition. An example for Ubiquiti is shown below:" #: ../../configuration/trafficpolicy/index.rst:628 msgid "This could be helpful if you want to test how an application behaves under certain network conditions." -msgstr "This could be helpful if you want to test how an application behaves under certain network conditions." +msgstr "Це може бути корисним, якщо ви хочете перевірити, як програма поводиться за певних умов мережі." #: ../../configuration/policy/examples.rst:67 msgid "This creates a route policy called FILTER-WEB with one rule to set the routing table for matching traffic (TCP port 80) to table ID 100 instead of the default routing table." -msgstr "This creates a route policy called FILTER-WEB with one rule to set the routing table for matching traffic (TCP port 80) to table ID 100 instead of the default routing table." +msgstr "Це створює політику маршрутизації під назвою FILTER-WEB з одним правилом для встановлення таблиці маршрутизації для відповідного трафіку (TCP-порт 80) на ідентифікатор таблиці 100 замість таблиці маршрутизації за замовчуванням." #: ../../configuration/service/dns.rst:111 msgid "This defaults to 10000." -msgstr "This defaults to 10000." +msgstr "За умовчанням це 10000." -#: ../../configuration/system/login.rst:254 +#: ../../configuration/system/login.rst:258 msgid "This defaults to 1812." -msgstr "This defaults to 1812." +msgstr "За умовчанням це 1812." #: ../../configuration/interfaces/wireless.rst:81 msgid "This defaults to 2007." -msgstr "This defaults to 2007." +msgstr "За замовчуванням 2007 рік." -#: ../../configuration/service/dns.rst:271 +#: ../../configuration/service/dns.rst:285 msgid "This defaults to 300 seconds." msgstr "This defaults to 300 seconds." #: ../../_include/interface-ip.txt:25 msgid "This defaults to 30 seconds." -msgstr "This defaults to 30 seconds." +msgstr "За замовчуванням це 30 секунд." -#: ../../configuration/system/login.rst:323 +#: ../../configuration/system/login.rst:327 msgid "This defaults to 49." -msgstr "This defaults to 49." +msgstr "За умовчанням це значення 49." #: ../../configuration/service/webproxy.rst:165 msgid "This defaults to 5." -msgstr "This defaults to 5." +msgstr "За умовчанням це значення 5." #: ../../configuration/interfaces/l2tpv3.rst:48 msgid "This defaults to UDP" -msgstr "This defaults to UDP" +msgstr "За умовчанням це UDP" #: ../../configuration/service/https.rst:52 msgid "This defaults to both 1.2 and 1.3." msgstr "This defaults to both 1.2 and 1.3." -#: ../../configuration/pki/index.rst:283 +#: ../../configuration/pki/index.rst:314 msgid "This defaults to https://acme-v02.api.letsencrypt.org/directory" msgstr "This defaults to https://acme-v02.api.letsencrypt.org/directory" #: ../../configuration/interfaces/wireless.rst:101 msgid "This defaults to phy0." -msgstr "This defaults to phy0." +msgstr "За умовчанням це phy0." #: ../../configuration/interfaces/wireless.rst:65 msgid "This depends on the driver capabilities and may not be available with all drivers." -msgstr "This depends on the driver capabilities and may not be available with all drivers." +msgstr "Це залежить від можливостей драйвера та може бути недоступним для всіх драйверів." #: ../../configuration/service/conntrack-sync.rst:98 msgid "This diable the external cache and directly injects the flow-states into the in-kernel Connection Tracking System of the backup firewall." -msgstr "This diable the external cache and directly injects the flow-states into the in-kernel Connection Tracking System of the backup firewall." +msgstr "Це вимикає зовнішній кеш і безпосередньо вводить стани потоку в систему відстеження з’єднань ядра резервного брандмауера." #: ../../configuration/interfaces/wireguard.rst:17 msgid "This diagram corresponds with the example site to site configuration below." -msgstr "This diagram corresponds with the example site to site configuration below." +msgstr "Ця діаграма відповідає наведеному нижче прикладу конфігурації між сайтами." #: ../../configuration/protocols/ospf.rst:104 msgid "This enables :rfc:`3137` support, where the OSPF process describes its transit links in its router-LSA as having infinite distance so that other routers will avoid calculating transit paths through the router while still being able to reach networks through the router." -msgstr "This enables :rfc:`3137` support, where the OSPF process describes its transit links in its router-LSA as having infinite distance so that other routers will avoid calculating transit paths through the router while still being able to reach networks through the router." +msgstr "Це дає змогу підтримувати :rfc:`3137`, коли процес OSPF описує свої транзитні канали у своєму маршрутизаторі-LSA як такі, що мають нескінченну відстань, щоб інші маршрутизатори уникали обчислення транзитних шляхів через маршрутизатор, але все ще могли досягати мереж через маршрутизатор." #: ../../configuration/interfaces/wireless.rst:186 msgid "This enables the greenfield option which sets the ``[GF]`` option" -msgstr "This enables the greenfield option which sets the ``[GF]`` option" +msgstr "Це вмикає опцію greenfield, яка встановлює опцію ``[GF]``" #: ../../configuration/nat/nat44.rst:568 msgid "This establishes our Port Forward rule, but if we created a firewall policy it will likely block the traffic." -msgstr "This establishes our Port Forward rule, but if we created a firewall policy it will likely block the traffic." +msgstr "Це встановлює наше правило переадресації портів, але якщо ми створили політику брандмауера, вона, ймовірно, заблокує трафік." #: ../../configuration/policy/examples.rst:189 msgid "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." -msgstr "This example shows how to target an MSS clamp (in our example to 1360 bytes) to a specific destination IP." +msgstr "У цьому прикладі показано, як націлити затискач MSS (у нашому прикладі на 1360 байт) на певний IP призначення." + +#: ../../configuration/vpn/ipsec.rst:392 +msgid "This example uses CACert as certificate authority." +msgstr "This example uses CACert as certificate authority." + +#: ../../configuration/vpn/ipsec.rst:386 +msgid "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." +msgstr "This feature closely works together with :ref:`pki` subsystem as you required a x509 certificate." + +#: ../../configuration/protocols/bfd.rst:64 +msgid "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." +msgstr "This feature serves the purpose of thightening the packet validation requirements to avoid receiving BFD control packets from other sessions." #: ../../configuration/protocols/ospf.rst:476 msgid "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." -msgstr "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." +msgstr "Ця функція підсумовує створені зовнішні LSA (тип 5 і тип 7). Підсумковий маршрут створюватиметься від імені всіх відповідних зовнішніх LSA." -#: ../../configuration/service/dns.rst:404 +#: ../../configuration/service/dns.rst:418 msgid "This functionality is controlled by adding the following configuration:" msgstr "This functionality is controlled by adding the following configuration:" -#: ../../configuration/firewall/ipv4.rst:376 +#: ../../configuration/firewall/ipv4.rst:399 #: ../../configuration/firewall/ipv6.rst:378 msgid "This functions for both individual addresses and address groups." -msgstr "This functions for both individual addresses and address groups." +msgstr "Це працює як для окремих адрес, так і для груп адрес." #: ../../configuration/protocols/isis.rst:477 #: ../../configuration/protocols/ospf.rst:968 msgid "This gives us IGP-LDP synchronization for all non-loopback interfaces with a holddown timer of zero seconds:" -msgstr "This gives us IGP-LDP synchronization for all non-loopback interfaces with a holddown timer of zero seconds:" +msgstr "Це дає нам синхронізацію IGP-LDP для всіх нешлейфових інтерфейсів із таймером утримування нуль секунд:" #: ../../configuration/protocols/isis.rst:529 #: ../../configuration/protocols/ospf.rst:1018 #: ../../configuration/protocols/segment-routing.rst:229 #: ../../configuration/protocols/segment-routing.rst:312 msgid "This gives us MPLS segment routing enabled and labels for far end loopbacks:" -msgstr "This gives us MPLS segment routing enabled and labels for far end loopbacks:" +msgstr "Це дає нам можливість сегментної маршрутизації MPLS і мітки для шлейфів далекого кінця:" #: ../../configuration/protocols/isis.rst:367 msgid "This gives us the following neighborships, Level 1 and Level 2:" -msgstr "This gives us the following neighborships, Level 1 and Level 2:" +msgstr "Це дає нам такі околиці, рівень 1 і рівень 2:" #: ../../configuration/vpn/dmvpn.rst:139 msgid "This instructs opennhrp to reply with authorative answers on NHRP Resolution Requests destinied to addresses in this interface (instead of forwarding the packets). This effectively allows the creation of shortcut routes to subnets located on the interface." -msgstr "This instructs opennhrp to reply with authorative answers on NHRP Resolution Requests destinied to addresses in this interface (instead of forwarding the packets). This effectively allows the creation of shortcut routes to subnets located on the interface." +msgstr "Це вказує opennhrp відповідати авторизованими відповідями на Запити на вирішення NHRP, спрямовані на адреси в цьому інтерфейсі (замість пересилання пакетів). Це фактично дозволяє створювати швидкі маршрути до підмереж, розташованих на інтерфейсі." #: ../../configuration/nat/nat44.rst:106 msgid "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." -msgstr "This is a common scenario where both :ref:`source-nat` and :ref:`destination-nat` are configured at the same time. It's commonly used when internal (private) hosts need to establish a connection with external resources and external systems need to access internal (private) resources." +msgstr "Це типовий сценарій, коли :ref:`source-nat` і :ref:`destination-nat` налаштовані одночасно. Він зазвичай використовується, коли внутрішнім (приватним) хостам потрібно встановити з’єднання із зовнішніми ресурсами, а зовнішнім системам потрібен доступ до внутрішніх (приватних) ресурсів." -#: ../../configuration/service/dhcp-server.rst:82 +#: ../../configuration/service/dhcp-server.rst:98 msgid "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." -msgstr "This is a configuration parameter for the `<subnet>`, saying that as part of the response, tell the client that the default gateway can be reached at `<address>`." +msgstr "Це параметр конфігурації для `<subnet> `, кажучи, що як частина відповіді, повідомте клієнту, що шлюз за замовчуванням доступний за адресою `<address> `." -#: ../../configuration/service/dhcp-server.rst:89 +#: ../../configuration/service/dhcp-server.rst:105 msgid "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." -msgstr "This is a configuration parameter for the subnet, saying that as part of the response, tell the client that the DNS server can be found at `<address>`." +msgstr "Це параметр конфігурації для підмережі, який говорить, що як частина відповіді, повідомте клієнту, що сервер DNS можна знайти за адресою `<address> `." #: ../../configuration/service/eventhandler.rst:44 msgid "This is a mandatory command. Sets regular expression to match against log string message." -msgstr "This is a mandatory command. Sets regular expression to match against log string message." +msgstr "Це обов'язкова команда. Встановлює регулярний вираз для відповідності повідомленням рядка журналу." #: ../../configuration/service/eventhandler.rst:55 msgid "This is a mandatory command. Sets the full path to the script. The script file must be executable." -msgstr "This is a mandatory command. Sets the full path to the script. The script file must be executable." +msgstr "Це обов'язкова команда. Встановлює повний шлях до сценарію. Файл сценарію має бути виконуваним." -#: ../../configuration/pki/index.rst:261 -#: ../../configuration/pki/index.rst:267 +#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:298 msgid "This is a mandatory option" msgstr "This is a mandatory option" -#: ../../configuration/protocols/rpki.rst:117 -#: ../../configuration/protocols/rpki.rst:124 +#: ../../configuration/protocols/rpki.rst:129 +#: ../../configuration/protocols/rpki.rst:136 msgid "This is a mandatory setting." -msgstr "This is a mandatory setting." +msgstr "Це обов'язкове налаштування." #: ../../configuration/trafficpolicy/index.rst:780 msgid "This is achieved by using the first three bits of the ToS (Type of Service) field to categorize data streams and, in accordance with the defined precedence parameters, a decision is made." -msgstr "This is achieved by using the first three bits of the ToS (Type of Service) field to categorize data streams and, in accordance with the defined precedence parameters, a decision is made." +msgstr "Це досягається шляхом використання перших трьох бітів поля ToS (Тип послуги) для категоризації потоків даних і, відповідно до визначених параметрів пріоритету, приймається рішення." #: ../../configuration/vpn/dmvpn.rst:89 msgid "This is also known as the HUBs IP address or FQDN." -msgstr "This is also known as the HUBs IP address or FQDN." +msgstr "Це також відоме як IP-адреса HUB або FQDN." #: ../../configuration/service/eventhandler.rst:76 msgid "This is an optional command. Adds arguments to the script. Arguments must be separated by spaces." -msgstr "This is an optional command. Adds arguments to the script. Arguments must be separated by spaces." +msgstr "Це необов'язкова команда. Додає аргументи до сценарію. Аргументи повинні бути розділені пробілами." #: ../../configuration/service/eventhandler.rst:68 msgid "This is an optional command. Adds environment and its value to the script. Use separate commands for each environment." -msgstr "This is an optional command. Adds environment and its value to the script. Use separate commands for each environment." +msgstr "Це необов'язкова команда. Додає середовище та його значення до сценарію. Використовуйте окремі команди для кожного середовища." #: ../../configuration/service/eventhandler.rst:64 msgid "This is an optional command. Filters log messages by syslog-identifier." -msgstr "This is an optional command. Filters log messages by syslog-identifier." +msgstr "Це необов'язкова команда. Фільтрує повідомлення журналу за системним ідентифікатором." #: ../../configuration/service/eventhandler.rst:36 msgid "This is an optional command because the event handler will be automatically created after any of the next commands." -msgstr "This is an optional command because the event handler will be automatically created after any of the next commands." +msgstr "Це необов’язкова команда, оскільки обробник подій буде створено автоматично після будь-якої наступної команди." #: ../../_include/interface-ip.txt:156 msgid "This is done to support (ethernet) switch features, like :rfc:`3069`, where the individual ports are NOT allowed to communicate with each other, but they are allowed to talk to the upstream router. As described in :rfc:`3069`, it is possible to allow these hosts to communicate through the upstream router by proxy_arp'ing." -msgstr "This is done to support (ethernet) switch features, like :rfc:`3069`, where the individual ports are NOT allowed to communicate with each other, but they are allowed to talk to the upstream router. As described in :rfc:`3069`, it is possible to allow these hosts to communicate through the upstream router by proxy_arp'ing." +msgstr "Це робиться для підтримки функцій комутатора (ethernet), як-от :rfc:`3069`, де окремим портам НЕ дозволено спілкуватися один з одним, але їм дозволено спілкуватися з вихідним маршрутизатором. Як описано в :rfc:`3069`, можна дозволити цим хостам спілкуватися через вихідний маршрутизатор за допомогою proxy_arp'ing." #: ../../configuration/protocols/igmp-proxy.rst:36 msgid "This is especially useful for the upstream interface, since the source for multicast traffic is often from a remote location." -msgstr "This is especially useful for the upstream interface, since the source for multicast traffic is often from a remote location." +msgstr "Це особливо корисно для висхідного інтерфейсу, оскільки джерело багатоадресного трафіку часто знаходиться у віддаленому місці." #: ../../configuration/interfaces/tunnel.rst:32 msgid "This is one of the simplest types of tunnels, as defined by :rfc:`2003`. It takes an IPv4 packet and sends it as a payload of another IPv4 packet. For this reason, there are no other configuration options for this kind of tunnel." -msgstr "This is one of the simplest types of tunnels, as defined by :rfc:`2003`. It takes an IPv4 packet and sends it as a payload of another IPv4 packet. For this reason, there are no other configuration options for this kind of tunnel." +msgstr "Це один із найпростіших типів тунелів, як визначено :rfc:`2003`. Він приймає пакет IPv4 і надсилає його як корисне навантаження іншого пакету IPv4. З цієї причини немає інших параметрів конфігурації для такого типу тунелю." #: ../../configuration/interfaces/wireguard.rst:93 #: ../../configuration/interfaces/wireguard.rst:107 msgid "This is optional." -msgstr "This is optional." +msgstr "Це необов'язково." #: ../../configuration/firewall/general-legacy.rst:405 msgid "This is similar to the network groups part, but here you are able to negate the matching addresses." -msgstr "This is similar to the network groups part, but here you are able to negate the matching addresses." +msgstr "Це схоже на частину мережевих груп, але тут ви можете заперечувати відповідні адреси." #: ../../configuration/interfaces/tunnel.rst:48 msgid "This is the IPv6 counterpart of IPIP. I'm not aware of an RFC that defines this encapsulation specifically, but it's a natural specific case of IPv6 encapsulation mechanisms described in :rfc:2473`." -msgstr "This is the IPv6 counterpart of IPIP. I'm not aware of an RFC that defines this encapsulation specifically, but it's a natural specific case of IPv6 encapsulation mechanisms described in :rfc:2473`." +msgstr "Це IPv6 аналог IPIP. Мені невідомий RFC, який конкретно визначає цю інкапсуляцію, але це природний конкретний випадок механізмів інкапсуляції IPv6, описаних у :rfc:2473`." #: ../../configuration/interfaces/l2tpv3.rst:137 msgid "This is the LAN extension use case. The eth0 port of the distant VPN peers will be directly connected like if there was a switch between them." -msgstr "This is the LAN extension use case. The eth0 port of the distant VPN peers will be directly connected like if there was a switch between them." +msgstr "Це варіант використання розширення локальної мережі. Порт eth0 віддалених однорангових VPN буде підключено безпосередньо, як якщо б між ними було перемикання." #: ../../configuration/system/lcd.rst:29 msgid "This is the LCD model used in your system." -msgstr "This is the LCD model used in your system." +msgstr "Це модель LCD, яка використовується у вашій системі." #: ../../configuration/service/dhcp-server.rst:35 #: ../../configuration/service/dhcp-server.rst:44 -#: ../../configuration/service/dhcp-server.rst:51 msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." -msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally." +msgstr "Це параметр конфігурації для визначення загальної мережі. Усі підмережі успадкують цей елемент конфігурації, якщо не вказано локально." + +#: ../../configuration/service/dhcp-server.rst:51 +msgid "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." +msgstr "This is the configuration parameter for the entire shared network definition. All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined." -#: ../../configuration/service/dhcp-server.rst:197 +#: ../../configuration/service/dhcp-server.rst:253 msgid "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." -msgstr "This is the equivalent of the host block in dhcpd.conf of isc-dhcpd." +msgstr "Це еквівалент хост-блоку в dhcpd.conf файлу isc-dhcpd." #: ../../configuration/system/lcd.rst:21 msgid "This is the name of the physical interface used to connect to your LCD display. Tab completion is supported and it will list you all available serial interface." -msgstr "This is the name of the physical interface used to connect to your LCD display. Tab completion is supported and it will list you all available serial interface." +msgstr "Це назва фізичного інтерфейсу, який використовується для підключення до вашого РК-дисплея. Підтримується автозавершення вкладок, і ви побачите список усіх доступних послідовних інтерфейсів." #: ../../configuration/trafficpolicy/index.rst:371 msgid "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" -msgstr "This is the policy that requieres the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.**" +msgstr "Це політика, яка вимагає найменших ресурсів для того самого обсягу трафіку. Але **дуже ймовірно, що вам це не потрібно, оскільки ви не можете отримати від нього багато чого. Іноді він використовується лише для ввімкнення журналювання.**" -#: ../../configuration/service/dhcp-server.rst:195 +#: ../../configuration/service/dhcp-server.rst:251 msgid "This is useful, for example, in combination with hostfile update." -msgstr "This is useful, for example, in combination with hostfile update." +msgstr "Це корисно, наприклад, у поєднанні з оновленням хост-файлу." #: ../../configuration/service/broadcast-relay.rst:11 msgid "This is where \"UDP broadcast relay\" comes into play! It will forward received broadcasts to other configured networks." -msgstr "This is where \"UDP broadcast relay\" comes into play! It will forward received broadcasts to other configured networks." +msgstr "Ось тут і вступає в дію "трансляція трансляції UDP"! Він пересилатиме отримані трансляції в інші налаштовані мережі." #: ../../configuration/service/dns.rst:142 msgid "This makes the server authoritatively not aware of: 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream DNS server(s) to be used for reverse lookups of these zones." -msgstr "This makes the server authoritatively not aware of: 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream DNS server(s) to be used for reverse lookups of these zones." +msgstr "Це дозволяє серверу офіційно не знати про: 10.in-addr.arpa, 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, що дозволяє використовувати DNS-сервер(и) для зворотного пошуку ці зони." #: ../../_include/interface-ipv6.txt:12 msgid "This method automatically disables IPv6 traffic forwarding on the interface in question." -msgstr "This method automatically disables IPv6 traffic forwarding on the interface in question." +msgstr "Цей метод автоматично вимикає переадресацію трафіку IPv6 на відповідному інтерфейсі." #: ../../configuration/interfaces/bonding.rst:73 msgid "This mode provides fault tolerance." -msgstr "This mode provides fault tolerance." +msgstr "Цей режим забезпечує відмовостійкість." #: ../../configuration/interfaces/bonding.rst:67 msgid "This mode provides fault tolerance. The :cfgcmd:`primary` option, documented below, affects the behavior of this mode." -msgstr "This mode provides fault tolerance. The :cfgcmd:`primary` option, documented below, affects the behavior of this mode." +msgstr "Цей режим забезпечує відмовостійкість. Опція :cfgcmd:`primary`, описана нижче, впливає на поведінку цього режиму." #: ../../configuration/interfaces/bonding.rst:78 #: ../../configuration/interfaces/bonding.rst:125 msgid "This mode provides load balancing and fault tolerance." -msgstr "This mode provides load balancing and fault tolerance." +msgstr "Цей режим забезпечує балансування навантаження та стійкість до відмов." #: ../../configuration/interfaces/wireless.rst:107 msgid "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." -msgstr "This option adds Power Constraint element when applicable and Country element is added. Power Constraint element is required by Transmit Power Control." +msgstr "Цей параметр додає елемент Power Constraint, якщо це можливо, і додає елемент Country. Для керування потужністю передачі необхідний елемент обмеження потужності." -#: ../../configuration/service/dhcp-server.rst:119 +#: ../../configuration/service/dhcp-server.rst:135 msgid "This option can be specified multiple times." -msgstr "This option can be specified multiple times." +msgstr "Цей параметр можна вказати кілька разів." #: ../../configuration/protocols/igmp-proxy.rst:39 msgid "This option can be supplied multiple times." -msgstr "This option can be supplied multiple times." +msgstr "Цю опцію можна поставити кілька разів." #: ../../configuration/interfaces/wireless.rst:53 msgid "This option is mandatory in Access-Point mode." -msgstr "This option is mandatory in Access-Point mode." +msgstr "Цей параметр є обов’язковим у режимі точки доступу." #: ../../configuration/vpn/dmvpn.rst:96 msgid "This option is required when running a DMVPN spoke." -msgstr "This option is required when running a DMVPN spoke." +msgstr "Цей параметр потрібний під час роботи DMVPN spoke." #: ../../_include/interface-dhcp-options.txt:86 msgid "This option is used by some DHCP clients as a way for users to specify identifying information to the client. This can be used in a similar way to the vendor-class-identifier option, but the value of the option is specified by the user, not the vendor." @@ -15088,38 +16642,38 @@ msgstr "This option is used by some DHCP clients as a way for users to specify i msgid "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." msgstr "This option is used by some DHCP clients to identify the vendor type and possibly the configuration of a DHCP client. The information is a string of bytes whose contents are specific to the vendor and are not specified in a standard." -#: ../../configuration/system/login.rst:390 +#: ../../configuration/system/login.rst:394 msgid "This option must be used with ``timeout`` option." -msgstr "This option must be used with ``timeout`` option." +msgstr "Цей параметр потрібно використовувати з параметром ``timeout``." #: ../../configuration/interfaces/bonding.rst:136 #: ../../configuration/interfaces/bonding.rst:151 msgid "This option only affects 802.3ad mode." -msgstr "This option only affects 802.3ad mode." +msgstr "Цей параметр впливає лише на режим 802.3ad." #: ../../configuration/highavailability/index.rst:232 msgid "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." -msgstr "This option specifies a delay in seconds before vrrp instances start up after keepalived starts." +msgstr "Цей параметр визначає затримку в секундах перед запуском екземплярів vrrp після запуску keepalived." -#: ../../configuration/pki/index.rst:277 +#: ../../configuration/pki/index.rst:308 msgid "This options defaults to 2048" msgstr "This options defaults to 2048" #: ../../configuration/protocols/ospf.rst:326 msgid "This parameter allows to \"shortcut\" routes (non-backbone) for inter-area routes. There are three modes available for routes shortcutting:" -msgstr "This parameter allows to \"shortcut\" routes (non-backbone) for inter-area routes. There are three modes available for routes shortcutting:" +msgstr "Цей параметр дозволяє "скорочувати" маршрути (немагістральні) для маршрутів між зонами. Є три режими для скорочення маршрутів:" #: ../../configuration/interfaces/bonding.rst:194 msgid "This policy is intended to provide a more balanced distribution of traffic than layer2 alone, especially in environments where a layer3 gateway device is required to reach most destinations." -msgstr "This policy is intended to provide a more balanced distribution of traffic than layer2 alone, especially in environments where a layer3 gateway device is required to reach most destinations." +msgstr "Ця політика має на меті забезпечити більш збалансований розподіл трафіку, ніж лише рівень 2, особливо в середовищах, де для досягнення більшості місць призначення потрібен шлюз рівня 3." #: ../../configuration/nat/nat44.rst:48 msgid "This prompted some ISPs to develop a policy within the :abbr:`ARIN (American Registry for Internet Numbers)` to allocate new private address space for CGNs, but ARIN deferred to the IETF before implementing the policy indicating that the matter was not a typical allocation issue but a reservation of addresses for technical purposes (per :rfc:`2860`)." -msgstr "This prompted some ISPs to develop a policy within the :abbr:`ARIN (American Registry for Internet Numbers)` to allocate new private address space for CGNs, but ARIN deferred to the IETF before implementing the policy indicating that the matter was not a typical allocation issue but a reservation of addresses for technical purposes (per :rfc:`2860`)." +msgstr "Це спонукало деяких провайдерів Інтернету розробити політику в рамках :abbr:`ARIN (Американського реєстру номерів Інтернету)` для виділення нового приватного адресного простору для CGN, але ARIN відклав IETF перед впровадженням політики, вказуючи, що справа не типова проблема розподілу, але резервування адрес для технічних цілей (за :rfc:`2860`)." #: ../../configuration/firewall/general-legacy.rst:308 msgid "This required setting defines the action of the current rule. If action is set to ``jump``, then ``jump-target`` is also needed." -msgstr "This required setting defines the action of the current rule. If action is set to ``jump``, then ``jump-target`` is also needed." +msgstr "Цей обов’язковий параметр визначає дію поточного правила. Якщо для дії встановлено ``jump``, тоді ``jump-target`` також потрібен." #: ../../configuration/firewall/bridge.rst:90 #: ../../configuration/firewall/ipv4.rst:114 @@ -15129,32 +16683,32 @@ msgstr "This required setting defines the action of the current rule. If action #: ../../configuration/interfaces/tunnel.rst:161 msgid "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" -msgstr "This requires two files, one to create the device (XXX.netdev) and one to configure the network on the device (XXX.network)" +msgstr "Для цього потрібні два файли: один для створення пристрою (XXX.netdev) і один для налаштування мережі на пристрої (XXX.network)" -#: ../../configuration/interfaces/bridge.rst:208 -#: ../../configuration/interfaces/bridge.rst:244 +#: ../../configuration/interfaces/bridge.rst:217 +#: ../../configuration/interfaces/bridge.rst:253 msgid "This results in the active configuration:" -msgstr "This results in the active configuration:" +msgstr "Це призводить до активної конфігурації:" -#: ../../configuration/service/dhcp-server.rst:68 +#: ../../configuration/service/dhcp-server.rst:84 msgid "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." -msgstr "This says that this device is the only DHCP server for this network. If other devices are trying to offer DHCP leases, this machine will send 'DHCPNAK' to any device trying to request an IP address that is not valid for this network." +msgstr "Це означає, що цей пристрій є єдиним сервером DHCP для цієї мережі. Якщо інші пристрої намагаються запропонувати оренду DHCP, ця машина надішле «DHCPNAK» на будь-який пристрій, який намагатиметься запитати IP-адресу, яка недійсна для цієї мережі." #: ../../configuration/system/name-server.rst:10 msgid "This section describes configuring DNS on the system, namely:" -msgstr "This section describes configuring DNS on the system, namely:" +msgstr "У цьому розділі описано налаштування DNS у системі, а саме:" #: ../../configuration/system/host-name.rst:7 msgid "This section describes the system's host information and how to configure them, it covers the following topics:" -msgstr "This section describes the system's host information and how to configure them, it covers the following topics:" +msgstr "У цьому розділі описано інформацію про хост системи та способи їх налаштування, а також описано такі теми:" #: ../../_include/need_improvement.txt:11 msgid "This section needs improvements, examples and explanations." -msgstr "This section needs improvements, examples and explanations." +msgstr "Цей розділ потребує вдосконалень, прикладів і пояснень." #: ../../configuration/firewall/general-legacy.rst:288 msgid "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed." -msgstr "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed." +msgstr "Це встановлює дію за замовчуванням для набору правил, якщо жодне правило не відповідає критеріям пакета. Якщо defacult-action встановлено на ``jump``, тоді ``default-jump-target`` також потрібен." #: ../../configuration/firewall/ipv4.rst:142 #: ../../configuration/firewall/ipv6.rst:142 @@ -15169,77 +16723,85 @@ msgstr "This set the default action of the rule-set if no rule matched a packet #: ../../configuration/interfaces/openvpn.rst:278 msgid "This sets the accepted ciphers to use when version => 2.4.0 and NCP is enabled (which is the default). Default NCP cipher for versions >= 2.4.0 is aes256gcm. The first cipher in this list is what server pushes to clients." -msgstr "This sets the accepted ciphers to use when version => 2.4.0 and NCP is enabled (which is the default). Default NCP cipher for versions >= 2.4.0 is aes256gcm. The first cipher in this list is what server pushes to clients." +msgstr "Це встановлює прийнятні шифри для використання, коли версія => 2.4.0 і NCP увімкнено (це за замовчуванням). Шифр NCP за замовчуванням для версій >= 2.4.0 — aes256gcm. Перший шифр у цьому списку — це те, що сервер надсилає клієнтам." #: ../../configuration/interfaces/openvpn.rst:260 msgid "This sets the cipher when NCP (Negotiable Crypto Parameters) is disabled or OpenVPN version < 2.4.0." -msgstr "This sets the cipher when NCP (Negotiable Crypto Parameters) is disabled or OpenVPN version < 2.4.0." +msgstr "Це встановлює шифр, коли NCP (переговорні криптопараметри) вимкнено або версія OpenVPN < 2.4.0." #: ../../configuration/service/dns.rst:120 msgid "This setting, which defaults to 3600 seconds, puts a maximum on the amount of time negative entries are cached." -msgstr "This setting, which defaults to 3600 seconds, puts a maximum on the amount of time negative entries are cached." +msgstr "Цей параметр, який за замовчуванням становить 3600 секунд, визначає максимальний час кешування негативних записів." #: ../../configuration/service/dns.rst:128 msgid "This setting defaults to 1500 and is valid between 10 and 60000." -msgstr "This setting defaults to 1500 and is valid between 10 and 60000." +msgstr "Цей параметр за замовчуванням становить 1500 і дійсний від 10 до 60 000." #: ../../configuration/firewall/global-options.rst:58 msgid "This setting enable or disable the response of icmp broadcast messages. The following system parameter will be altered:" -msgstr "This setting enable or disable the response of icmp broadcast messages. The following system parameter will be altered:" +msgstr "Цей параметр дозволяє або вимикає відповідь на широкомовні повідомлення icmp. Буде змінено наступний системний параметр:" #: ../../configuration/firewall/global-options.rst:66 msgid "This setting handle if VyOS accept packets with a source route option. The following system parameter will be altered:" -msgstr "This setting handle if VyOS accept packets with a source route option. The following system parameter will be altered:" +msgstr "Цей параметр керує, якщо VyOS приймає пакети з параметром вихідного маршруту. Буде змінено наступний системний параметр:" #: ../../configuration/highavailability/index.rst:310 msgid "This setup will make the VRRP process execute the ``/config/scripts/vrrp-check.sh script`` every 60 seconds, and transition the group to the fault state if it fails (i.e. exits with non-zero status) three times:" -msgstr "This setup will make the VRRP process execute the ``/config/scripts/vrrp-check.sh script`` every 60 seconds, and transition the group to the fault state if it fails (i.e. exits with non-zero status) three times:" +msgstr "Це налаштування змусить процес VRRP виконувати сценарій ``/config/scripts/vrrp-check.sh`` кожні 60 секунд і переводити групу в стан помилки, якщо він не вдається (тобто виходить із ненульовим статусом) тричі :" #: ../../_include/interface-dhcpv6-options.txt:28 msgid "This statement specifies dhcp6c to only exchange informational configuration parameters with servers. A list of DNS server addresses is an example of such parameters. This statement is useful when the client does not need stateful configuration parameters such as IPv6 addresses or prefixes." -msgstr "This statement specifies dhcp6c to only exchange informational configuration parameters with servers. A list of DNS server addresses is an example of such parameters. This statement is useful when the client does not need stateful configuration parameters such as IPv6 addresses or prefixes." +msgstr "Цей оператор вказує, що dhcp6c обмінюється лише інформаційними параметрами конфігурації з серверами. Прикладом таких параметрів є список адрес DNS-серверів. Цей оператор корисний, коли клієнту не потрібні параметри конфігурації зі збереженням стану, такі як адреси IPv6 або префікси." #: ../../configuration/protocols/ospf.rst:109 msgid "This support may be enabled administratively (and indefinitely) with the :cfgcmd:`administrative` command. It may also be enabled conditionally. Conditional enabling of max-metric router-lsas can be for a period of seconds after startup with the :cfgcmd:`on-startup <seconds>` command and/or for a period of seconds prior to shutdown with the :cfgcmd:`on-shutdown <seconds>` command. The time range is 5 to 86400." -msgstr "This support may be enabled administratively (and indefinitely) with the :cfgcmd:`administrative` command. It may also be enabled conditionally. Conditional enabling of max-metric router-lsas can be for a period of seconds after startup with the :cfgcmd:`on-startup <seconds>` command and/or for a period of seconds prior to shutdown with the :cfgcmd:`on-shutdown <seconds>` command. The time range is 5 to 86400." +msgstr "Цю підтримку можна ввімкнути адміністративно (і безстроково) за допомогою команди :cfgcmd:`administrative`. Він також може бути включений умовно. Умовне ввімкнення max-metric router-lsas може здійснюватися протягом кількох секунд після запуску за допомогою :cfgcmd:`під час запуску<seconds> ` та/або протягом кількох секунд до вимкнення за допомогою :cfgcmd:`on-shutdown<seconds> ` команда. Діапазон часу від 5 до 86400." #: ../../configuration/nat/nat44.rst:423 msgid "This technique is commonly referred to as NAT Reflection or Hairpin NAT." -msgstr "This technique is commonly referred to as NAT Reflection or Hairpin NAT." +msgstr "Ця техніка зазвичай називається NAT Reflection або Hairpin NAT." #: ../../_include/interface-ip.txt:164 msgid "This technology is known by different names:" -msgstr "This technology is known by different names:" +msgstr "Ця технологія відома під різними назвами:" #: ../../configuration/trafficpolicy/index.rst:357 msgid "This the simplest queue possible you can apply to your traffic. Traffic must go through a finite queue before it is actually sent. You must define how many packets that queue can contain." -msgstr "This the simplest queue possible you can apply to your traffic. Traffic must go through a finite queue before it is actually sent. You must define how many packets that queue can contain." +msgstr "Це найпростіша черга, яку можна застосувати до трафіку. Трафік повинен пройти через кінцеву чергу, перш ніж його буде фактично відправлено. Ви повинні визначити, скільки пакетів може містити черга." #: ../../configuration/interfaces/vxlan.rst:194 msgid "This topology was built using GNS3." -msgstr "This topology was built using GNS3." +msgstr "Ця топологія була побудована з використанням GNS3." + +#: ../../configuration/system/option.rst:38 +msgid "This will add the following option to the Kernel commandline:" +msgstr "This will add the following option to the Kernel commandline:" + +#: ../../configuration/system/option.rst:48 +msgid "This will add the following two options to the Kernel commandline:" +msgstr "This will add the following two options to the Kernel commandline:" #: ../../configuration/interfaces/ethernet.rst:9 msgid "This will be the most widely used interface on a router carrying traffic to the real world." -msgstr "This will be the most widely used interface on a router carrying traffic to the real world." +msgstr "Це буде найпоширеніший інтерфейс на маршрутизаторі, що передає трафік у реальний світ." -#: ../../configuration/protocols/static.rst:171 +#: ../../configuration/protocols/static.rst:204 msgid "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." -msgstr "This will configure a static ARP entry always resolving `<address>` to `<mac>` for interface `<interface>`." +msgstr "Це налаштує статичний запис ARP, який завжди розв’язує `<address> ` до `<mac> ` для інтерфейсу `<interface> `." #: ../../configuration/trafficpolicy/index.rst:164 msgid "This will match TCP traffic with source port 80." -msgstr "This will match TCP traffic with source port 80." +msgstr "Це відповідатиме TCP-трафіку вихідному порту 80." -#: ../../configuration/service/dns.rst:295 +#: ../../configuration/service/dns.rst:389 msgid "This will render the following ddclient_ configuration entry:" -msgstr "This will render the following ddclient_ configuration entry:" +msgstr "Це відобразить такий запис конфігурації ddclient_:" #: ../../configuration/firewall/ipv6.rst:969 msgid "This will show you a basic firewall overview" -msgstr "This will show you a basic firewall overview" +msgstr "Це покаже вам базовий огляд брандмауера" -#: ../../configuration/firewall/ipv4.rst:961 +#: ../../configuration/firewall/ipv4.rst:984 msgid "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" msgstr "This will show you a basic firewall overview, for all ruleset, and not only for ipv4" @@ -15253,88 +16815,108 @@ msgstr "This will show you a basic summary of zones configuration." #: ../../configuration/firewall/general-legacy.rst:936 msgid "This will show you a rule-set statistic since the last boot." -msgstr "This will show you a rule-set statistic since the last boot." +msgstr "Це покаже вам статистику набору правил з моменту останнього завантаження." -#: ../../configuration/firewall/ipv4.rst:1112 +#: ../../configuration/firewall/ipv4.rst:1135 #: ../../configuration/firewall/ipv6.rst:1135 msgid "This will show you a statistic of all rule-sets since the last boot." -msgstr "This will show you a statistic of all rule-sets since the last boot." +msgstr "Це покаже вам статистику всіх наборів правил з моменту останнього завантаження." -#: ../../configuration/firewall/ipv4.rst:1016 +#: ../../configuration/firewall/ipv4.rst:1039 #: ../../configuration/firewall/ipv6.rst:1032 msgid "This will show you a summary of rule-sets and groups" -msgstr "This will show you a summary of rule-sets and groups" +msgstr "Це покаже вам підсумок наборів правил і груп" -#: ../../configuration/trafficpolicy/index.rst:1188 +#: ../../configuration/trafficpolicy/index.rst:1256 msgid "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." -msgstr "This workaround lets you apply a shaping policy to the ingress traffic by first redirecting it to an in-between virtual interface (`Intermediate Functional Block`_). There, in that virtual interface, you will be able to apply any of the policies that work for outbound traffic, for instance, a shaping one." +msgstr "Це обхідне рішення дає змогу застосувати політику формування до вхідного трафіку, спершу перенаправляючи його на проміжний віртуальний інтерфейс (`Проміжний функціональний блок`_). Там, у цьому віртуальному інтерфейсі, ви зможете застосувати будь-яку політику, яка працює для вихідного трафіку, наприклад, політику формування." #: ../../configuration/nat/nat44.rst:590 msgid "This would generate the following configuration:" -msgstr "This would generate the following configuration:" +msgstr "Це створить таку конфігурацію:" #: ../../configuration/service/snmp.rst:19 msgid "Three significant versions of SNMP have been developed and deployed. SNMPv1 is the original version of the protocol. More recent versions, SNMPv2c and SNMPv3, feature improvements in performance, flexibility and security." -msgstr "Three significant versions of SNMP have been developed and deployed. SNMPv1 is the original version of the protocol. More recent versions, SNMPv2c and SNMPv3, feature improvements in performance, flexibility and security." +msgstr "Було розроблено та розгорнуто три важливі версії SNMP. SNMPv1 є оригінальною версією протоколу. Останні версії, SNMPv2c і SNMPv3, мають покращену продуктивність, гнучкість і безпеку." #: ../../configuration/service/router-advert.rst:1 msgid "Time, in milliseconds, that a node assumes a neighbor is reachable after having received a reachability confirmation" -msgstr "Time, in milliseconds, that a node assumes a neighbor is reachable after having received a reachability confirmation" +msgstr "Час у мілісекундах, протягом якого вузол вважає сусіда доступним після отримання підтвердження доступності" #: ../../configuration/system/time-zone.rst:5 msgid "Time Zone" -msgstr "Time Zone" +msgstr "Часовий пояс" #: ../../configuration/system/time-zone.rst:7 msgid "Time Zone setting is very important as e.g all your logfile entries will be based on the configured zone. Without proper time zone configuration it will be very difficult to compare logfiles from different systems." -msgstr "Time Zone setting is very important as e.g all your logfile entries will be based on the configured zone. Without proper time zone configuration it will be very difficult to compare logfiles from different systems." +msgstr "Налаштування часового поясу є дуже важливим, оскільки, наприклад, усі ваші записи в журналі базуватимуться на налаштованому поясі. Без належної конфігурації часового поясу буде дуже важко порівнювати файли журналів з різних систем." #: ../../configuration/service/router-advert.rst:1 msgid "Time in milliseconds between retransmitted Neighbor Solicitation messages" -msgstr "Time in milliseconds between retransmitted Neighbor Solicitation messages" +msgstr "Час у мілісекундах між повторно переданими повідомленнями Neighbor Solicitation" #: ../../configuration/service/router-advert.rst:1 msgid "Time in seconds that the prefix will remain preferred (default 4 hours)" -msgstr "Time in seconds that the prefix will remain preferred (default 4 hours)" +msgstr "Час у секундах, протягом якого префікс залишатиметься пріоритетним (за замовчуванням 4 години)" #: ../../configuration/service/router-advert.rst:1 msgid "Time in seconds that the prefix will remain valid (default: 30 days)" -msgstr "Time in seconds that the prefix will remain valid (default: 30 days)" +msgstr "Час у секундах, протягом якого префікс залишатиметься дійсним (за замовчуванням: 30 днів)" + +#: ../../configuration/service/router-advert.rst:1 +msgid "Time in seconds that the prefix will remain valid (default: 65528 seconds)" +msgstr "Time in seconds that the prefix will remain valid (default: 65528 seconds)" #: ../../configuration/service/webproxy.rst:177 msgid "Time is in minutes and defaults to 60." -msgstr "Time is in minutes and defaults to 60." +msgstr "Час у хвилинах і за замовчуванням 60." -#: ../../configuration/firewall/ipv4.rst:874 +#: ../../configuration/firewall/ipv4.rst:897 #: ../../configuration/firewall/ipv6.rst:883 #: ../../configuration/policy/route.rst:225 msgid "Time to match the defined rule." -msgstr "Time to match the defined rule." +msgstr "Час відповідати визначеному правилу." + +#: ../../configuration/service/ipoe-server.rst:368 +#: ../../configuration/service/pppoe-server.rst:534 +#: ../../configuration/vpn/l2tp.rst:488 +#: ../../configuration/vpn/pptp.rst:412 +#: ../../configuration/vpn/sstp.rst:446 +msgid "Timeout in seconds" +msgstr "Timeout in seconds" #: ../../configuration/protocols/failover.rst:24 msgid "Timeout in seconds between health target checks." -msgstr "Timeout in seconds between health target checks." +msgstr "Час очікування в секундах між перевірками працездатності." -#: ../../configuration/vpn/sstp.rst:234 +#: ../../configuration/service/ipoe-server.rst:174 +#: ../../configuration/service/pppoe-server.rst:136 +#: ../../configuration/vpn/l2tp.rst:179 +#: ../../configuration/vpn/pptp.rst:119 +#: ../../configuration/vpn/sstp.rst:152 msgid "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" -msgstr "Timeout to wait reply for Interim-Update packets. (default 3 seconds)" +msgstr "Час очікування відповіді на пакети Interim-Update. (за замовчуванням 3 секунди)" -#: ../../configuration/vpn/sstp.rst:254 +#: ../../configuration/service/ipoe-server.rst:194 +#: ../../configuration/service/pppoe-server.rst:156 +#: ../../configuration/vpn/l2tp.rst:199 +#: ../../configuration/vpn/pptp.rst:139 +#: ../../configuration/vpn/sstp.rst:172 msgid "Timeout to wait response from server (seconds)" -msgstr "Timeout to wait response from server (seconds)" +msgstr "Час очікування відповіді від сервера (секунди)" -#: ../../configuration/protocols/bgp.rst:667 +#: ../../configuration/protocols/bgp.rst:689 #: ../../configuration/protocols/isis.rst:257 msgid "Timers" -msgstr "Timers" +msgstr "Таймери" #: ../../configuration/interfaces/bridge.rst:130 msgid "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" -msgstr "To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge" +msgstr "Щоб активувати міст із підтримкою VLAN, потрібно активувати цей параметр, щоб використовувати параметри VLAN для мосту" -#: ../../configuration/vpn/l2tp.rst:58 +#: ../../configuration/vpn/l2tp.rst:108 msgid "To allow VPN-clients access via your external address, a NAT rule is required:" -msgstr "To allow VPN-clients access via your external address, a NAT rule is required:" +msgstr "Щоб дозволити VPN-клієнтам доступ через вашу зовнішню адресу, потрібне правило NAT:" #: ../../configuration/service/mdns.rst:68 msgid "To allow listing additional custom domain, for example ``openthread.thread.home.arpa``, so that it can reflected in addition to the default ``local``, use the following command:" @@ -15344,21 +16926,21 @@ msgstr "To allow listing additional custom domain, for example ``openthread.thre msgid "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" msgstr "To allow only specific services, for example ``_airplay._tcp`` or ``_ipp._tcp``, (instead of all services) to be re-broadcasted, use the following command:" -#: ../../configuration/vpn/site2site_ipsec.rst:257 +#: ../../configuration/vpn/site2site_ipsec.rst:260 msgid "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" -msgstr "To allow traffic to pass through to clients, you need to add the following rules. (if you used the default configuration at the top of this page)" +msgstr "Щоб дозволити проходження трафіку до клієнтів, потрібно додати наступні правила. (якщо ви використовували конфігурацію за замовчуванням у верхній частині цієї сторінки)" #: ../../configuration/policy/examples.rst:200 msgid "To apply this policy to the correct interface, configure it on the interface the inbound local host will send through to reach our destined target host (in our example eth1)." -msgstr "To apply this policy to the correct interface, configure it on the interface the inbound local host will send through to reach our destined target host (in our example eth1)." +msgstr "Щоб застосувати цю політику до правильного інтерфейсу, налаштуйте її на інтерфейсі, через який надсилатиметься вхідний локальний хост, щоб досягти цільового хоста (у нашому прикладі eth1)." #: ../../configuration/service/webproxy.rst:381 msgid "To auto update the blacklist files" -msgstr "To auto update the blacklist files" +msgstr "Для автоматичного оновлення файлів чорного списку" #: ../../configuration/service/pppoe-server.rst:59 msgid "To automatically assign the client an IP address as tunnel endpoint, a client IP pool is needed. The source can be either RADIUS or a local subnet or IP range definition." -msgstr "To automatically assign the client an IP address as tunnel endpoint, a client IP pool is needed. The source can be either RADIUS or a local subnet or IP range definition." +msgstr "Щоб автоматично призначити клієнту IP-адресу як кінцеву точку тунелю, потрібен пул IP-адрес клієнта. Джерелом може бути RADIUS, локальна підмережа чи визначення діапазону IP-адрес." #: ../../configuration/service/pppoe-server.rst:59 msgid "To automatically assign the client an IP address as tunnel endpoint, a client IP pool is needed. The source can be either RADIUS or a named pool. There is possibility to create multiple named pools. Each named pool can include only one address range. To use multiple address ranges configure ``next-pool`` option." @@ -15366,13 +16948,13 @@ msgstr "To automatically assign the client an IP address as tunnel endpoint, a c #: ../../configuration/firewall/general-legacy.rst:314 msgid "To be used only when ``action`` is set to ``jump``. Use this command to specify jump target." -msgstr "To be used only when ``action`` is set to ``jump``. Use this command to specify jump target." +msgstr "Використовується лише тоді, коли для ``action`` встановлено ``jump``. Використовуйте цю команду, щоб вказати ціль переходу." #: ../../configuration/firewall/bridge.rst:140 #: ../../configuration/firewall/ipv4.rst:187 #: ../../configuration/firewall/ipv6.rst:187 msgid "To be used only when ``defult-action`` is set to ``jump``. Use this command to specify jump target for default rule." -msgstr "To be used only when ``defult-action`` is set to ``jump``. Use this command to specify jump target for default rule." +msgstr "Використовується лише тоді, коли для ``defult-action`` встановлено ``jump``. Використовуйте цю команду, щоб указати ціль переходу для правила за замовчуванням." #: ../../configuration/firewall/ipv4.rst:126 #: ../../configuration/firewall/ipv6.rst:126 @@ -15404,15 +16986,15 @@ msgstr "To be used only when action is set to jump. Use this command to specify #: ../../configuration/service/webproxy.rst:408 msgid "To bypass the proxy for every request that is coming from a specific source:" -msgstr "To bypass the proxy for every request that is coming from a specific source:" +msgstr "Щоб обійти проксі для кожного запиту, який надходить із певного джерела:" #: ../../configuration/service/webproxy.rst:400 msgid "To bypass the proxy for every request that is directed to a specific destination:" -msgstr "To bypass the proxy for every request that is directed to a specific destination:" +msgstr "Щоб обійти проксі-сервер для кожного запиту, спрямованого до певного адресата:" #: ../../configuration/service/ipoe-server.rst:65 msgid "To configure IPv6 assignments for clients, two options need to be configured. A global prefix which is terminated on the clients cpe and a delegated prefix, the client can use for devices routed via the clients cpe." -msgstr "To configure IPv6 assignments for clients, two options need to be configured. A global prefix which is terminated on the clients cpe and a delegated prefix, the client can use for devices routed via the clients cpe." +msgstr "Щоб налаштувати призначення IPv6 для клієнтів, потрібно налаштувати два параметри. Глобальний префікс, який закінчується на cpe клієнта, і делегований префікс, який клієнт може використовувати для пристроїв, маршрутизованих через cpe клієнта." #: ../../configuration/firewall/index.rst:179 msgid "To configure VyOS with the :doc:`legacy firewall configuration </configuration/firewall/general-legacy>`" @@ -15428,76 +17010,80 @@ msgstr "To configure VyOS with the new :doc:`firewall configuration </configurat #: ../../configuration/service/webproxy.rst:386 msgid "To configure blocking add the following to the configuration" -msgstr "To configure blocking add the following to the configuration" +msgstr "Щоб налаштувати блокування, додайте наступне до конфігурації" #: ../../configuration/vpn/site2site_ipsec.rst:10 msgid "To configure site-to-site connection you need to add peers with the ``set vpn ipsec site-to-site peer <name>`` command." -msgstr "To configure site-to-site connection you need to add peers with the ``set vpn ipsec site-to-site peer <name>`` command." +msgstr "Щоб налаштувати з’єднання «сайт-сайт», вам потрібно додати однорангові вузли за допомогою однорангового вузла «set vpn ipsec site-to-site».<name> `` команда." #: ../../configuration/system/syslog.rst:11 msgid "To configure syslog, you need to switch into configuration mode." -msgstr "To configure syslog, you need to switch into configuration mode." +msgstr "Щоб налаштувати syslog, вам потрібно перейти в режим конфігурації." #: ../../configuration/system/lcd.rst:12 msgid "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." -msgstr "To configure your LCD display you must first identify the used hardware, and connectivity of the display to your system. This can be any serial port (`ttySxx`) or serial via USB or even old parallel port interfaces." +msgstr "Щоб налаштувати РК-дисплей, ви повинні спочатку визначити використовуване апаратне забезпечення та підключення дисплея до вашої системи. Це може бути будь-який послідовний порт (`ttySxx`) або послідовний через USB або навіть старі інтерфейси паралельного порту." -#: ../../configuration/service/ipoe-server.rst:98 +#: ../../configuration/service/ipoe-server.rst:99 msgid "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." -msgstr "To create VLANs per user during runtime, the following settings are required on a per interface basis. VLAN ID and VLAN range can be present in the configuration at the same time." +msgstr "Щоб створити VLAN для кожного користувача під час виконання, необхідні такі параметри для кожного інтерфейсу. Ідентифікатор VLAN і діапазон VLAN можуть бути присутніми в конфігурації одночасно." -#: ../../configuration/system/login.rst:377 +#: ../../configuration/system/login.rst:381 msgid "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." -msgstr "To create a new line in your login message you need to escape the new line character by using ``\\\\n``." +msgstr "Щоб створити новий рядок у вашому повідомленні для входу, вам потрібно екранувати символ нового рядка за допомогою ``\\\\n``." #: ../../configuration/interfaces/l2tpv3.rst:131 msgid "To create more than one tunnel, use distinct UDP ports." -msgstr "To create more than one tunnel, use distinct UDP ports." +msgstr "Щоб створити більше одного тунелю, використовуйте різні порти UDP." #: ../../configuration/policy/examples.rst:71 msgid "To create routing table 100 and add a new default gateway to be used by traffic matching our route policy:" -msgstr "To create routing table 100 and add a new default gateway to be used by traffic matching our route policy:" +msgstr "Щоб створити таблицю маршрутизації 100 і додати новий шлюз за замовчуванням, який використовуватиметься трафіком, що відповідає нашій політиці маршрутизації:" #: ../../configuration/firewall/zone.rst:80 msgid "To define a zone setup either one with interfaces or a local zone." -msgstr "To define a zone setup either one with interfaces or a local zone." +msgstr "Щоб визначити налаштування зони з інтерфейсами або локальної зони." -#: ../../configuration/service/router-advert.rst:75 +#: ../../configuration/service/router-advert.rst:101 msgid "To disable advertisements without deleting the configuration:" -msgstr "To disable advertisements without deleting the configuration:" +msgstr "Щоб вимкнути рекламу без видалення конфігурації:" -#: ../../configuration/system/login.rst:190 +#: ../../configuration/system/login.rst:194 msgid "To display the configured OTP user key, use the command:" -msgstr "To display the configured OTP user key, use the command:" +msgstr "Щоб відобразити налаштований ключ користувача OTP, скористайтеся командою:" #: ../../configuration/vpn/openconnect.rst:226 msgid "To display the configured OTP user settings, use the command:" -msgstr "To display the configured OTP user settings, use the command:" +msgstr "Щоб відобразити налаштовані параметри користувача OTP, скористайтеся командою:" #: ../../configuration/protocols/ospf.rst:515 #: ../../configuration/protocols/ospf.rst:1227 msgid "To enable/disable helper support for a specific neighbour, the router-id (A.B.C.D) has to be specified." -msgstr "To enable/disable helper support for a specific neighbour, the router-id (A.B.C.D) has to be specified." +msgstr "Щоб увімкнути/вимкнути допоміжну підтримку для певного сусіда, необхідно вказати ідентифікатор маршрутизатора (ABCD)." #: ../../configuration/protocols/pim6.rst:80 msgid "To enable MLD reports and query on interfaces `eth0` and `eth1`:" msgstr "To enable MLD reports and query on interfaces `eth0` and `eth1`:" -#: ../../configuration/vpn/l2tp.rst:141 +#: ../../configuration/service/ipoe-server.rst:116 +#: ../../configuration/service/pppoe-server.rst:78 +#: ../../configuration/vpn/l2tp.rst:121 +#: ../../configuration/vpn/pptp.rst:61 +#: ../../configuration/vpn/sstp.rst:94 msgid "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." -msgstr "To enable RADIUS based authentication, the authentication mode needs to be changed within the configuration. Previous settings like the local users, still exists within the configuration, however they are not used if the mode has been changed from local to radius. Once changed back to local, it will use all local accounts again." +msgstr "Щоб увімкнути автентифікацію на основі RADIUS, режим автентифікації потрібно змінити в конфігурації. Попередні параметри, як-от локальні користувачі, все ще існують у конфігурації, однак вони не використовуються, якщо режим було змінено з локального на радіус. Після повернення на локальний він знову використовуватиме всі локальні облікові записи." #: ../../configuration/vpn/l2tp.rst:182 msgid "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." -msgstr "To enable bandwidth shaping via RADIUS, the option rate-limit needs to be enabled." +msgstr "Щоб увімкнути формування пропускної здатності через RADIUS, потрібно ввімкнути опцію обмеження швидкості." -#: ../../configuration/service/https.rst:68 +#: ../../configuration/service/https.rst:72 msgid "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" -msgstr "To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor log`" +msgstr "Щоб увімкнути повідомлення про налагодження. Доступно через :opcmd:`show log` або :opcmd:`monitor log`" #: ../../configuration/service/mdns.rst:22 msgid "To enable mDNS repeater you need to configure at least two interfaces. To re-broadcast all incoming mDNS packets from any interface configured here to any other interface configured under this section." -msgstr "To enable mDNS repeater you need to configure at least two interfaces. To re-broadcast all incoming mDNS packets from any interface configured here to any other interface configured under this section." +msgstr "Щоб увімкнути повторювач mDNS, потрібно налаштувати принаймні два інтерфейси. Щоб повторно транслювати всі вхідні пакети mDNS з будь-якого налаштованого тут інтерфейсу на будь-який інший інтерфейс, налаштований у цьому розділі." #: ../../configuration/service/mdns.rst:23 msgid "To enable mDNS repeater you need to configure at least two interfaces so that all incoming mDNS packets from one interface configured here can be re-broadcasted to any other interface(s) configured under this section." @@ -15509,104 +17095,116 @@ msgstr "To enable the HTTP security headers in the configuration file, use the c #: ../../configuration/loadbalancing/wan.rst:115 msgid "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" -msgstr "To exclude traffic from load balancing, traffic matching an exclude rule is not balanced but routed through the system routing table instead:" +msgstr "Щоб виключити трафік із балансування навантаження, трафік, який відповідає правилу виключення, не балансується, а направляється через системну таблицю маршрутизації:" + +#: ../../configuration/vpn/l2tp.rst:282 +msgid "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." +msgstr "To explain the usage of LNS follow our blueprint :ref:`examples-lac-lns`." #: ../../configuration/service/snmp.rst:216 msgid "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." -msgstr "To extend SNMP agent functionality, custom scripts can be executed every time the agent is being called. This can be achieved by using ``arbitrary extensioncommands``. The first step is to create a functional script of course, then upload it to your VyOS instance via the command ``scp your_script.sh vyos@your_router:/config/user-data``. Once the script is uploaded, it needs to be configured via the command below." +msgstr "Щоб розширити функціональні можливості агента SNMP, під час кожного виклику агента можна виконувати спеціальні сценарії. Цього можна досягти за допомогою ``довільних команд розширення``. Звичайно, першим кроком є створення функціонального сценарію, а потім завантаження його у ваш екземпляр VyOS за допомогою команди ``scp your_script.sh vyos@your_router:/config/user-data``. Після завантаження сценарію його потрібно налаштувати за допомогою наведеної нижче команди." #: ../../configuration/service/broadcast-relay.rst:57 msgid "To forward all broadcast packets received on `UDP port 1900` on `eth3`, `eth4` or `eth5` to all other interfaces in this configuration." -msgstr "To forward all broadcast packets received on `UDP port 1900` on `eth3`, `eth4` or `eth5` to all other interfaces in this configuration." +msgstr "Для пересилання всіх широкомовних пакетів, отриманих через `UDP-порт 1900` на `eth3`, `eth4` або `eth5`, до всіх інших інтерфейсів у цій конфігурації." #: ../../configuration/vpn/sstp.rst:32 msgid "To generate the CA, the server private key and certificates the following commands can be used." -msgstr "To generate the CA, the server private key and certificates the following commands can be used." +msgstr "Щоб створити центр сертифікації, закритий ключ сервера та сертифікати, можна використовувати наступні команди." #: ../../configuration/interfaces/wireless.rst:594 msgid "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." -msgstr "To get it to work as an access point with this configuration you will need to set up a DHCP server to work with that network. You can - of course - also bridge the Wireless interface with any configured bridge (:ref:`bridge-interface`) on the system." +msgstr "Щоб він працював як точка доступу з цією конфігурацією, вам потрібно буде налаштувати сервер DHCP для роботи з цією мережею. Ви, звичайно, також можете з'єднати бездротовий інтерфейс з будь-яким налаштованим мостом (:ref:`bridge-interface`) у системі." -#: ../../configuration/service/dhcp-server.rst:566 +#: ../../configuration/service/dhcp-server.rst:625 msgid "To hand out individual prefixes to your clients the following configuration is used:" -msgstr "To hand out individual prefixes to your clients the following configuration is used:" +msgstr "Для роздачі індивідуальних префіксів вашим клієнтам використовується така конфігурація:" -#: ../../configuration/highavailability/index.rst:336 +#: ../../configuration/vpn/ipsec.rst:405 +msgid "To import it from the filesystem use:" +msgstr "To import it from the filesystem use:" + +#: ../../configuration/highavailability/index.rst:346 msgid "To know more about scripting, check the :ref:`command-scripting` section." -msgstr "To know more about scripting, check the :ref:`command-scripting` section." +msgstr "Щоб дізнатися більше про сценарії, перегляньте розділ :ref:`command-scripting`." #: ../../configuration/service/mdns.rst:52 msgid "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" -msgstr "To listen on both `eth0` and `eth1` mDNS packets and also repeat packets received on `eth0` to `eth1` (and vice-versa) use the following commands:" +msgstr "Щоб прослуховувати пакети mDNS як `eth0`, так і `eth1`, а також повторювати пакети, отримані на `eth0`, до `eth1` (і навпаки), використовуйте такі команди:" -#: ../../configuration/protocols/static.rst:161 +#: ../../configuration/protocols/static.rst:194 msgid "To manipulate or display ARP_ table entries, the following commands are implemented." -msgstr "To manipulate or display ARP_ table entries, the following commands are implemented." +msgstr "Щоб маніпулювати або відображати записи таблиці ARP_, реалізовано наступні команди." #: ../../configuration/protocols/ospf.rst:505 #: ../../configuration/protocols/ospf.rst:1217 msgid "To perform a graceful shutdown, the FRR ``graceful-restart prepare ip ospf`` EXEC-level command needs to be issued before restarting the ospfd daemon." -msgstr "To perform a graceful shutdown, the FRR ``graceful-restart prepare ip ospf`` EXEC-level command needs to be issued before restarting the ospfd daemon." +msgstr "Щоб виконати плавне завершення роботи, перед перезапуском демона ospfd потрібно ввести команду FRR ``graceful-restart priprave ip ospf`` рівня EXEC." #: ../../_include/interface-dhcpv6-prefix-delegation.txt:17 msgid "To request a /56 prefix from your ISP use:" -msgstr "To request a /56 prefix from your ISP use:" +msgstr "Щоб запитати префікс /56 у свого провайдера, скористайтеся:" -#: ../../configuration/service/dhcp-server.rst:680 +#: ../../configuration/service/dhcp-server.rst:741 msgid "To restart the DHCPv6 server" -msgstr "To restart the DHCPv6 server" +msgstr "Щоб перезапустити сервер DHCPv6" #: ../../configuration/nat/nat44.rst:327 msgid "To setup SNAT, we need to know:" -msgstr "To setup SNAT, we need to know:" +msgstr "Щоб налаштувати SNAT, нам потрібно знати:" #: ../../configuration/nat/nat44.rst:521 msgid "To setup a destination NAT rule we need to gather:" -msgstr "To setup a destination NAT rule we need to gather:" +msgstr "Щоб налаштувати правило NAT призначення, нам потрібно зібрати:" #: ../../configuration/interfaces/wwan.rst:329 msgid "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" -msgstr "To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the firmware provided in the file ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use the following command:" +msgstr "Для оновлення мікропрограми VyOS також постачає двійковий файл `qmi-firmware-update`. Щоб оновити мікропрограму, наприклад, модуля Sierra Wireless MC7710 до мікропрограми, наданої у файлі ``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe``, скористайтеся такою командою:" -#: ../../configuration/service/ipoe-server.rst:113 +#: ../../configuration/service/ipoe-server.rst:114 msgid "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." -msgstr "To use a RADIUS server for authentication and bandwidth-shaping, the following example configuration can be used." +msgstr "Щоб використовувати сервер RADIUS для автентифікації та формування пропускної здатності, можна використати наступний приклад конфігурації." #: ../../configuration/service/pppoe-server.rst:93 msgid "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." -msgstr "To use a radius server, you need to switch to authentication mode RADIUS and then configure it." +msgstr "Щоб використовувати радіус-сервер, потрібно перейти в режим автентифікації RADIUS, а потім налаштувати його." -#: ../../configuration/service/dns.rst:321 +#: ../../configuration/service/dns.rst:415 msgid "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." -msgstr "To use such a service, one must define a login, password, one or multiple hostnames, protocol and server." +msgstr "Щоб скористатися такою послугою, необхідно визначити логін, пароль, одне або декілька імен хостів, протокол і сервер." #: ../../configuration/service/salt-minion.rst:19 msgid "To use the Salt-Minion, a running Salt-Master is required. You can find more in the `Salt Poject Documentaion <https://docs.saltproject.io/en/latest/contents.html>`_" -msgstr "To use the Salt-Minion, a running Salt-Master is required. You can find more in the `Salt Poject Documentaion <https://docs.saltproject.io/en/latest/contents.html>`_" +msgstr "Щоб використовувати Salt-Minion, потрібен запущений Salt-Master. Ви можете знайти більше в `Documentaion Salt Poject<https://docs.saltproject.io/en/latest/contents.html> `_" #: ../../configuration/service/https.rst:77 msgid "To use this full configuration we asume a public accessible hostname." -msgstr "To use this full configuration we asume a public accessible hostname." +msgstr "Щоб використовувати цю повну конфігурацію, ми припускаємо загальнодоступне ім’я хоста." #: ../../configuration/interfaces/vxlan.rst:196 msgid "Topology:" -msgstr "Topology:" +msgstr "Топологія:" #: ../../configuration/interfaces/vxlan.rst:128 msgid "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" -msgstr "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" +msgstr "Топологія: PC4 - Leaf2 - Spine1 - Leaf3 - PC5" + +#: ../../configuration/service/ipoe-server.rst:433 +msgid "Toubleshooting" +msgstr "Toubleshooting" #: ../../configuration/highavailability/index.rst:171 msgid "Track" -msgstr "Track" +msgstr "Трек" #: ../../configuration/highavailability/index.rst:173 msgid "Track option to track non VRRP interface states. VRRP changes status to ``FAULT`` if one of the track interfaces in state ``down``." -msgstr "Track option to track non VRRP interface states. VRRP changes status to ``FAULT`` if one of the track interfaces in state ``down``." +msgstr "Опція відстеження для відстеження станів інтерфейсу без VRRP. VRRP змінює статус на ``FAULT``, якщо один із інтерфейсів доріжки перебуває в стані ``вимкнено``." #: ../../configuration/protocols/bgp.rst:146 msgid "Traditional BGP did not have the feature to detect a remote peer's capabilities, e.g. whether it can handle prefix types other than IPv4 unicast routes. This was a big problem using Multiprotocol Extension for BGP in an operational network. :rfc:`2842` adopted a feature called Capability Negotiation. *bgpd* use this Capability Negotiation to detect the remote peer's capabilities. If a peer is only configured as an IPv4 unicast neighbor, *bgpd* does not send these Capability Negotiation packets (at least not unless other optional BGP features require capability negotiation)." -msgstr "Traditional BGP did not have the feature to detect a remote peer's capabilities, e.g. whether it can handle prefix types other than IPv4 unicast routes. This was a big problem using Multiprotocol Extension for BGP in an operational network. :rfc:`2842` adopted a feature called Capability Negotiation. *bgpd* use this Capability Negotiation to detect the remote peer's capabilities. If a peer is only configured as an IPv4 unicast neighbor, *bgpd* does not send these Capability Negotiation packets (at least not unless other optional BGP features require capability negotiation)." +msgstr "Традиційний BGP не мав функції виявлення можливостей віддаленого вузла, наприклад, чи може він обробляти типи префіксів, відмінні від одноадресних маршрутів IPv4. Це було великою проблемою використання багатопротокольного розширення для BGP у робочій мережі. :rfc:`2842` прийняв функцію під назвою Capability Negotiation. *bgpd* використовує це узгодження можливостей для виявлення можливостей віддаленого однорангового вузла. Якщо одноранговий вузол налаштований лише як одноадресний сусід IPv4, *bgpd* не надсилає ці пакети узгодження можливостей (принаймні, якщо інші додаткові функції BGP не потребують узгодження можливостей)." #: ../../configuration/firewall/index.rst:175 msgid "Traditionally firewalls weere configured with the concept of data going in and out of an interface. The router just listened to the data flowing through and responding as required if it was directed at the router itself." @@ -15614,27 +17212,27 @@ msgstr "Traditionally firewalls weere configured with the concept of data going #: ../../configuration/interfaces/openvpn.rst:9 msgid "Traditionally hardware routers implement IPsec exclusively due to relative ease of implementing it in hardware and insufficient CPU power for doing encryption in software. Since VyOS is a software router, this is less of a concern. OpenVPN has been widely used on UNIX platform for a long time and is a popular option for remote access VPN, though it's also capable of site-to-site connections." -msgstr "Traditionally hardware routers implement IPsec exclusively due to relative ease of implementing it in hardware and insufficient CPU power for doing encryption in software. Since VyOS is a software router, this is less of a concern. OpenVPN has been widely used on UNIX platform for a long time and is a popular option for remote access VPN, though it's also capable of site-to-site connections." +msgstr "Традиційно апаратні маршрутизатори використовують IPsec виключно через відносну легкість впровадження в апаратному забезпеченні та недостатню потужність центрального процесора для виконання шифрування в програмному забезпеченні. Оскільки VyOS є програмним маршрутизатором, це не викликає занепокоєння. OpenVPN широко використовувався на платформі UNIX протягом тривалого часу та є популярним варіантом для віддаленого доступу до VPN, хоча він також здатний підключатися між сайтами." #: ../../configuration/nat/nat44.rst:143 msgid "Traffic Filters" -msgstr "Traffic Filters" +msgstr "Фільтри трафіку" #: ../../configuration/nat/nat44.rst:145 msgid "Traffic Filters are used to control which packets will have the defined NAT rules applied. Five different filters can be applied within a NAT rule." -msgstr "Traffic Filters are used to control which packets will have the defined NAT rules applied. Five different filters can be applied within a NAT rule." +msgstr "Фільтри трафіку використовуються для контролю, до яких пакетів застосовуватимуться визначені правила NAT. У межах правила NAT можна застосувати п’ять різних фільтрів." #: ../../configuration/trafficpolicy/index.rst:5 msgid "Traffic Policy" -msgstr "Traffic Policy" +msgstr "Політика дорожнього руху" #: ../../configuration/firewall/zone.rst:56 msgid "Traffic cannot flow between zone member interface and any interface that is not a zone member." -msgstr "Traffic cannot flow between zone member interface and any interface that is not a zone member." +msgstr "Трафік не може проходити між інтерфейсом члена зони та будь-яким інтерфейсом, який не є членом зони." #: ../../configuration/protocols/igmp.rst:22 msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using IGMP (Internet Group Management Protocol)." -msgstr "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using IGMP (Internet Group Management Protocol)." +msgstr "Трафік із джерел багатоадресної передачі буде надходити до точки зустрічі, а одержувачі отримуватимуть його зі спільного дерева за допомогою IGMP (Internet Group Management Protocol)." #: ../../configuration/protocols/pim6.rst:15 msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using MLD (Multicast Listener Discovery)." @@ -15644,7 +17242,7 @@ msgstr "Traffic from multicast sources will go to the Rendezvous Point, and rece msgid "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." msgstr "Traffic from multicast sources will go to the Rendezvous Point, and receivers will pull it from a shared tree using :abbr:`IGMP (Internet Group Management Protocol)`." -#: ../../configuration/firewall/ipv4.rst:928 +#: ../../configuration/firewall/ipv4.rst:951 #: ../../configuration/firewall/ipv6.rst:937 msgid "Traffic must be symmetric" msgstr "Traffic must be symmetric" @@ -15653,38 +17251,44 @@ msgstr "Traffic must be symmetric" msgid "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" msgstr "Traffic which is received by the router on an interface which is member of a bridge is processed on the **Bridge Layer**. A simplified packet flow diagram for this layer is shown next:" -#: ../../configuration/highavailability/index.rst:322 +#: ../../configuration/highavailability/index.rst:332 msgid "Transition scripts" -msgstr "Transition scripts" +msgstr "Скрипти переходів" -#: ../../configuration/highavailability/index.rst:324 +#: ../../configuration/highavailability/index.rst:334 msgid "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" -msgstr "Transition scripts can help you implement various fixups, such as starting and stopping services, or even modifying the VyOS config on VRRP transition. This setup will make the VRRP process execute the ``/config/scripts/vrrp-fail.sh`` with argument ``Foo`` when VRRP fails, and the ``/config/scripts/vrrp-master.sh`` when the router becomes the master:" +msgstr "Сценарії переходу можуть допомогти вам реалізувати різні виправлення, такі як запуск і зупинка служб або навіть зміна конфігурації VyOS під час переходу VRRP. Це налаштування змусить процес VRRP виконувати ``/config/scripts/vrrp-fail.sh`` з аргументом ``Foo``, коли VRRP виходить з ладу, і ``/config/scripts/vrrp-master.sh`` коли маршрутизатор стає головним:" #: ../../configuration/policy/examples.rst:56 msgid "Transparent Proxy" -msgstr "Transparent Proxy" +msgstr "Прозорий проксі" #: ../../configuration/interfaces/openvpn.rst:701 #: ../../configuration/interfaces/tunnel.rst:227 +#: ../../configuration/vpn/pptp.rst:484 +#: ../../configuration/vpn/sstp.rst:580 msgid "Troubleshooting" -msgstr "Troubleshooting" +msgstr "Вирішення проблем" #: ../../configuration/protocols/pim6.rst:41 msgid "Tuning commands" -msgstr "Tuning commands" +msgstr "Команди налаштування" #: ../../configuration/interfaces/tunnel.rst:6 msgid "Tunnel" -msgstr "Tunnel" +msgstr "Тунель" #: ../../configuration/interfaces/tunnel.rst:187 msgid "Tunnel keys" -msgstr "Tunnel keys" +msgstr "Тунельні ключі" + +#: ../../configuration/vpn/l2tp.rst:280 +msgid "Tunnel password used to authenticate the client (LAC)" +msgstr "Tunnel password used to authenticate the client (LAC)" #: ../../configuration/loadbalancing/wan.rst:257 msgid "Two environment variables are available:" -msgstr "Two environment variables are available:" +msgstr "Доступні дві змінні середовища:" #: ../../configuration/firewall/flowtables.rst:104 msgid "Two interfaces are going to be used in the flowtables: eth0 and eth1" @@ -15692,19 +17296,19 @@ msgstr "Two interfaces are going to be used in the flowtables: eth0 and eth1" #: ../../configuration/service/ssh.rst:188 msgid "Two new files ``/config/auth/id_rsa_rpki`` and ``/config/auth/id_rsa_rpki.pub`` will be created." -msgstr "Two new files ``/config/auth/id_rsa_rpki`` and ``/config/auth/id_rsa_rpki.pub`` will be created." +msgstr "Буде створено два нових файли ``/config/auth/id_rsa_rpki`` та ``/config/auth/id_rsa_rpki.pub``." #: ../../configuration/interfaces/macsec.rst:155 msgid "Two routers connected both via eth1 through an untrusted switch" -msgstr "Two routers connected both via eth1 through an untrusted switch" +msgstr "Два маршрутизатори з’єдналися через eth1 через ненадійний комутатор" #: ../../configuration/service/monitoring.rst:26 msgid "Type of metrics grouping when push to Azure Data Explorer. The default is ``table-per-metric``." -msgstr "Type of metrics grouping when push to Azure Data Explorer. The default is ``table-per-metric``." +msgstr "Тип групування показників під час надсилання в Azure Data Explorer. Типовим є ``таблиця за показником``." #: ../../configuration/nat/nat44.rst:618 msgid "Typically, a 1-to-1 NAT rule omits the destination port (all ports) and replaces the protocol with either **all** or **ip**." -msgstr "Typically, a 1-to-1 NAT rule omits the destination port (all ports) and replaces the protocol with either **all** or **ip**." +msgstr "Як правило, правило NAT 1-до-1 пропускає порт призначення (усі порти) і замінює протокол на **усі** або **ip**." #: ../../configuration/service/broadcast-relay.rst:5 msgid "UDP Broadcast Relay" @@ -15712,59 +17316,63 @@ msgstr "UDP Broadcast Relay" #: ../../configuration/interfaces/l2tpv3.rst:110 msgid "UDP mode works better with NAT:" -msgstr "UDP mode works better with NAT:" +msgstr "Режим UDP краще працює з NAT:" -#: ../../configuration/vpn/l2tp.rst:34 +#: ../../configuration/vpn/l2tp.rst:84 msgid "UDP port 1701 for IPsec" -msgstr "UDP port 1701 for IPsec" +msgstr "UDP-порт 1701 для IPsec" -#: ../../configuration/vpn/l2tp.rst:39 +#: ../../configuration/vpn/l2tp.rst:89 msgid "UDP port 4500 (NAT-T)" -msgstr "UDP port 4500 (NAT-T)" +msgstr "UDP порт 4500 (NAT-T)" -#: ../../configuration/vpn/l2tp.rst:32 +#: ../../configuration/vpn/l2tp.rst:82 msgid "UDP port 500 (IKE)" -msgstr "UDP port 500 (IKE)" +msgstr "UDP-порт 500 (IKE)" #: ../../configuration/service/webproxy.rst:17 msgid "URL Filtering is provided by SquidGuard_." -msgstr "URL Filtering is provided by SquidGuard_." +msgstr "Фільтрування URL-адрес забезпечує SquidGuard_." #: ../../configuration/service/webproxy.rst:315 msgid "URL filtering" -msgstr "URL filtering" +msgstr "Фільтрування URL-адрес" #: ../../configuration/service/salt-minion.rst:45 msgid "URL with signature of master for auth reply verification" -msgstr "URL with signature of master for auth reply verification" +msgstr "URL-адреса з підписом майстра для перевірки авторизації відповіді" #: ../../configuration/service/console-server.rst:55 msgid "USB to serial converters will handle most of their work in software so you should be carefull with the selected baudrate as some times they can't cope with the expected speed." -msgstr "USB to serial converters will handle most of their work in software so you should be carefull with the selected baudrate as some times they can't cope with the expected speed." +msgstr "Перетворювачі USB на послідовний порт виконають більшу частину своєї роботи в програмному забезпеченні, тому вам слід бути обережними з вибраною швидкістю передачі даних, оскільки іноді вони не можуть впоратися з очікуваною швидкістю." #: ../../configuration/system/syslog.rst:128 msgid "UUCP subsystem" -msgstr "UUCP subsystem" +msgstr "Підсистема UUCP" + +#: ../../configuration/interfaces/ethernet.rst:73 +msgid "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" +msgstr "Under some circumstances, LRO is known to modify the packet headers of forwarded traffic, which breaks the end-to-end principle of computer networking. LRO is also only able to offload TCP segments encapsulated in IPv4 packets. Due to these limitations, it is recommended to use GRO (Generic Receive Offload) where possible. More information on the limitations of LRO can be found here: https://lwn.net/Articles/358910/" #: ../../configuration/interfaces/vxlan.rst:102 msgid "Unicast" -msgstr "Unicast" +msgstr "Одноадресний" #: ../../configuration/highavailability/index.rst:188 msgid "Unicast VRRP" -msgstr "Unicast VRRP" +msgstr "Одноадресний VRRP" #: ../../configuration/interfaces/vxlan.rst:340 msgid "Unicast VXLAN" -msgstr "Unicast VXLAN" +msgstr "Одноадресний VXLAN" #: ../../configuration/service/webproxy.rst:41 msgid "Unit of this command is MB." -msgstr "Unit of this command is MB." +msgstr "Одиницею цієї команди є МБ." #: ../../configuration/trafficpolicy/index.rst:42 msgid "Units" -msgstr "Units" +msgstr "одиниць" #: ../../configuration/interfaces/openvpn.rst:171 msgid "Until VyOS 1.4, the only option for site-to-site OpenVPN without PKI was to use pre-shared keys. That option is still available but it is deprecated and will be removed in the future. However, if you need to set up a tunnel to an older VyOS version or a system with older OpenVPN, you need to still need to know how to use it." @@ -15772,61 +17380,68 @@ msgstr "Until VyOS 1.4, the only option for site-to-site OpenVPN without PKI was #: ../../configuration/trafficpolicy/index.rst:705 msgid "Up to seven queues -defined as classes_ with different priorities- can be configured. Packets are placed into queues based on associated match criteria. Packets are transmitted from the queues in priority order. If classes with a higher priority are being filled with packets continuously, packets from lower priority classes will only be transmitted after traffic volume from higher priority classes decreases." -msgstr "Up to seven queues -defined as classes_ with different priorities- can be configured. Packets are placed into queues based on associated match criteria. Packets are transmitted from the queues in priority order. If classes with a higher priority are being filled with packets continuously, packets from lower priority classes will only be transmitted after traffic volume from higher priority classes decreases." +msgstr "Можна налаштувати до семи черг, визначених як класи_ з різними пріоритетами. Пакети розміщуються в чергах на основі відповідних критеріїв відповідності. Пакети передаються з черг у пріоритетному порядку. Якщо класи з вищим пріоритетом постійно заповнюються пакетами, пакети з класів з нижчим пріоритетом будуть передані лише після того, як обсяг трафіку з класів з вищим пріоритетом зменшиться." #: ../../configuration/service/webproxy.rst:338 msgid "Update" -msgstr "Update" +msgstr "оновлення" -#: ../../configuration/container/index.rst:171 +#: ../../configuration/container/index.rst:207 msgid "Update container image" -msgstr "Update container image" +msgstr "Оновити зображення контейнера" -#: ../../configuration/firewall/ipv4.rst:1175 +#: ../../configuration/firewall/ipv4.rst:1198 #: ../../configuration/firewall/ipv6.rst:1191 msgid "Update geoip database" -msgstr "Update geoip database" +msgstr "Оновити базу даних geoip" #: ../../configuration/system/updates.rst:3 msgid "Updates" msgstr "Updates" -#: ../../configuration/protocols/rpki.rst:99 +#: ../../configuration/protocols/rpki.rst:97 msgid "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." -msgstr "Updates from the RPKI cache servers are directly applied and path selection is updated accordingly. (Soft reconfiguration must be enabled for this to work)." +msgstr "Оновлення з кеш-серверів RPKI застосовуються безпосередньо, а вибір шляху оновлюється відповідно. (Щоб це працювало, необхідно ввімкнути м’яке переналаштування)." -#: ../../configuration/vpn/sstp.rst:90 +#: ../../configuration/service/pppoe-server.rst:267 +#: ../../configuration/vpn/l2tp.rst:391 +#: ../../configuration/vpn/pptp.rst:315 +#: ../../configuration/vpn/sstp.rst:349 msgid "Upload bandwidth limit in kbit/s for `<user>`." -msgstr "Upload bandwidth limit in kbit/s for `<user>`." +msgstr "Обмеження пропускної здатності завантаження в кбіт/с для `<user> `." + +#: ../../configuration/service/ipoe-server.rst:325 +msgid "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." +msgstr "Upload bandwidth limit in kbit/s for for user on interface `<interface>`." #: ../../configuration/loadbalancing/wan.rst:209 msgid "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" -msgstr "Upon reception of an incoming packet, when a response is sent, it might be desired to ensure that it leaves from the same interface as the inbound one. This can be achieved by enabling sticky connections in the load balancing:" +msgstr "Після отримання вхідного пакета, коли надсилається відповідь, може бути бажаним переконатися, що він виходить із того самого інтерфейсу, що й вхідний. Цього можна досягти, увімкнувши липкі з’єднання під час балансування навантаження:" #: ../../configuration/service/router-advert.rst:1 msgid "Upon shutdown, this option will deprecate the prefix by announcing it in the shutdown RA" -msgstr "Upon shutdown, this option will deprecate the prefix by announcing it in the shutdown RA" +msgstr "Після завершення роботи цей параметр припинить підтримку префікса, оголошуючи його в RA завершення роботи" #: ../../configuration/interfaces/wireless.rst:352 #: ../../configuration/interfaces/wireless.rst:552 msgid "Use 802.11n protocol" -msgstr "Use 802.11n protocol" +msgstr "Використовуйте протокол 802.11n" #: ../../configuration/service/https.rst:23 msgid "Use CA certificate from PKI subsystem" msgstr "Use CA certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:365 +#: ../../configuration/service/dns.rst:379 msgid "Use DynDNS as your preferred provider:" -msgstr "Use DynDNS as your preferred provider:" +msgstr "Використовуйте DynDNS як бажаного постачальника:" #: ../../configuration/service/monitoring.rst:88 msgid "Use TLS but skip host validation" -msgstr "Use TLS but skip host validation" +msgstr "Використовуйте TLS, але пропускайте перевірку хоста" #: ../../configuration/service/webproxy.rst:281 msgid "Use TLS encryption." -msgstr "Use TLS encryption." +msgstr "Використовуйте шифрування TLS." #: ../../configuration/service/https.rst:31 msgid "Use :abbr:`DH (Diffie–Hellman)` parameters from PKI subsystem. Must be at least 2048 bits in length." @@ -15834,152 +17449,176 @@ msgstr "Use :abbr:`DH (Diffie–Hellman)` parameters from PKI subsystem. Must be #: ../../configuration/vpn/sstp.rst:121 msgid "Use `<subnet>` as the IP pool for all connecting clients." -msgstr "Use `<subnet>` as the IP pool for all connecting clients." +msgstr "Використовуйте `<subnet> ` як пул IP для всіх підключених клієнтів." #: ../../configuration/system/syslog.rst:236 msgid "Use ``show log | strip-private`` if you want to hide private data when sharing your logs." -msgstr "Use ``show log | strip-private`` if you want to hide private data when sharing your logs." +msgstr "Використовуйте ``показати журнал | strip-private``, якщо ви хочете приховати приватні дані під час спільного використання ваших журналів." #: ../../configuration/system/conntrack.rst:0 msgid "Use `delete system conntrack modules` to deactive all modules." -msgstr "Use `delete system conntrack modules` to deactive all modules." +msgstr "Використовуйте `delete system conntrack modules`, щоб деактивувати всі модулі." #: ../../configuration/service/webproxy.rst:250 msgid "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." -msgstr "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." +msgstr "Використовуйте постійне з’єднання LDAP. Зазвичай підключення LDAP відкрито лише під час перевірки імені користувача, щоб зберегти ресурси на сервері LDAP. Цей параметр змушує з’єднання LDAP залишатися відкритим, що дозволяє повторно використовувати його для подальшої перевірки користувача." -#: ../../configuration/firewall/ipv4.rst:515 +#: ../../configuration/firewall/ipv4.rst:538 #: ../../configuration/firewall/ipv6.rst:525 msgid "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." -msgstr "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." +msgstr "Використовуйте певну групу адрес. Додайте символ ``!`` для інвертованих критеріїв відповідності." -#: ../../configuration/firewall/ipv4.rst:578 +#: ../../configuration/firewall/ipv4.rst:601 #: ../../configuration/firewall/ipv6.rst:588 msgid "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." -msgstr "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." +msgstr "Використовуйте певну доменну групу. Додайте символ ``!`` для інвертованих критеріїв відповідності." -#: ../../configuration/firewall/ipv4.rst:599 +#: ../../configuration/firewall/ipv4.rst:622 #: ../../configuration/firewall/ipv6.rst:609 msgid "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." -msgstr "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." +msgstr "Використовуйте певну mac-групу. Додайте символ ``!`` для інвертованих критеріїв відповідності." -#: ../../configuration/firewall/ipv4.rst:536 +#: ../../configuration/firewall/ipv4.rst:559 #: ../../configuration/firewall/ipv6.rst:546 msgid "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." -msgstr "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." +msgstr "Використовуйте певну мережеву групу. Додайте символ ``!`` для інвертованих критеріїв відповідності." -#: ../../configuration/firewall/ipv4.rst:557 +#: ../../configuration/firewall/ipv4.rst:580 #: ../../configuration/firewall/ipv6.rst:567 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." -msgstr "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." +msgstr "Використовуйте певну групу портів. Додайте символ ``!`` для інвертованих критеріїв відповідності." + +#: ../../configuration/service/dhcp-server.rst:430 +msgid "Use active-active HA mode." +msgstr "Use active-active HA mode." #: ../../configuration/nat/nat44.rst:259 msgid "Use address `masquerade` (the interfaces primary address) on rule 30" -msgstr "Use address `masquerade` (the interfaces primary address) on rule 30" +msgstr "Використовуйте адресу `masquerade` (основну адресу інтерфейсу) за правилом 30" #: ../../configuration/service/https.rst:58 msgid "Use an automatically generated self-signed certificate" -msgstr "Use an automatically generated self-signed certificate" +msgstr "Використовуйте автоматично згенерований самопідписаний сертифікат" #: ../../_include/interface-ip.txt:104 msgid "Use any local address, configured on any interface if this is not set." -msgstr "Use any local address, configured on any interface if this is not set." +msgstr "Використовуйте будь-яку локальну адресу, налаштовану на будь-якому інтерфейсі, якщо це не встановлено." -#: ../../configuration/service/dns.rst:279 +#: ../../configuration/service/dns.rst:357 msgid "Use auth key file at ``/config/auth/my.key``" -msgstr "Use auth key file at ``/config/auth/my.key``" +msgstr "Використовуйте файл ключа авторизації за адресою ``/config/auth/my.key``" #: ../../configuration/service/https.rst:27 msgid "Use certificate from PKI subsystem" msgstr "Use certificate from PKI subsystem" -#: ../../configuration/service/dns.rst:408 +#: ../../configuration/service/dns.rst:504 msgid "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." -msgstr "Use configured `<url>` to determine your IP address. ddclient_ will load `<url>` and tries to extract your IP address from the response." +msgstr "Використовуйте налаштований `<url> `, щоб визначити вашу IP-адресу. ddclient_ завантажить `<url> ` і намагається отримати вашу IP-адресу з відповіді." + +#: ../../configuration/service/dns.rst:462 +msgid "Use deSEC (dedyn.io) as your preferred provider:" +msgstr "Use deSEC (dedyn.io) as your preferred provider:" #: ../../configuration/firewall/general-legacy.rst:478 msgid "Use inverse-match to match anything except the given country-codes." -msgstr "Use inverse-match to match anything except the given country-codes." +msgstr "Використовуйте зворотний відповідник, щоб знайти будь-що, окрім наведених кодів країн." #: ../../configuration/service/https.rst:33 msgid "Use local socket for API" -msgstr "Use local socket for API" +msgstr "Використовуйте локальний сокет для API" -#: ../../configuration/vpn/sstp.rst:288 +#: ../../configuration/vpn/sstp.rst:357 msgid "Use local user `foo` with password `bar`" -msgstr "Use local user `foo` with password `bar`" +msgstr "Використовуйте локальний користувач `foo` з паролем `bar`" #: ../../configuration/service/webproxy.rst:379 msgid "Use tab completion to get a list of categories." -msgstr "Use tab completion to get a list of categories." +msgstr "Використовуйте завершення табуляції, щоб отримати список категорій." -#: ../../configuration/system/option.rst:53 +#: ../../configuration/system/option.rst:83 msgid "Use the address of the specified interface on the local machine as the source address of the connection." -msgstr "Use the address of the specified interface on the local machine as the source address of the connection." +msgstr "Використовуйте адресу вказаного інтерфейсу на локальній машині як адресу джерела підключення." #: ../../configuration/nat/nat66.rst:111 msgid "Use the following topology to build a nat66 based isolated network between internal and external networks (dynamic prefix is not supported):" -msgstr "Use the following topology to build a nat66 based isolated network between internal and external networks (dynamic prefix is not supported):" +msgstr "Використовуйте наступну топологію для створення ізольованої мережі на основі nat66 між внутрішньою та зовнішньою мережами (динамічний префікс не підтримується):" #: ../../configuration/nat/nat66.rst:142 msgid "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." msgstr "Use the following topology to translate internal user local addresses (``fc::/7``) to DHCPv6-PD provided prefixes from an ISP connected to a VyOS HA pair." -#: ../../configuration/system/option.rst:48 +#: ../../configuration/system/option.rst:78 msgid "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." -msgstr "Use the specified address on the local machine as the source address of the connection. Only useful on systems with more than one address." +msgstr "Використовуйте вказану адресу на локальній машині як адресу джерела підключення. Корисно лише в системах з кількома адресами." #: ../../configuration/protocols/mpls.rst:113 msgid "Use these commands if you would like to set the discovery hello and hold time parameters." -msgstr "Use these commands if you would like to set the discovery hello and hold time parameters." +msgstr "Використовуйте ці команди, якщо ви бажаєте встановити параметри часу відкриття та часу утримання." #: ../../configuration/protocols/mpls.rst:196 msgid "Use these commands if you would like to set the discovery hello and hold time parameters for the targeted LDP neighbors." -msgstr "Use these commands if you would like to set the discovery hello and hold time parameters for the targeted LDP neighbors." +msgstr "Використовуйте ці команди, якщо ви хочете встановити параметри часу привітання та утримання виявлення для цільових сусідів LDP." #: ../../configuration/protocols/mpls.rst:136 msgid "Use these commands to control the exporting of forwarding equivalence classes (FECs) for LDP to neighbors. This would be useful for example on only announcing the labeled routes that are needed and not ones that are not needed, such as announcing loopback interfaces and no others." -msgstr "Use these commands to control the exporting of forwarding equivalence classes (FECs) for LDP to neighbors. This would be useful for example on only announcing the labeled routes that are needed and not ones that are not needed, such as announcing loopback interfaces and no others." +msgstr "Використовуйте ці команди, щоб керувати експортом класів еквівалентності пересилання (FEC) для LDP сусідам. Це було б корисно, наприклад, для оголошення лише потрібних маршрутів з мітками, а не тих, які непотрібні, наприклад, оголошення петлевих інтерфейсів і жодних інших." #: ../../configuration/protocols/mpls.rst:126 msgid "Use these commands to control the importing of forwarding equivalence classes (FECs) for LDP from neighbors. This would be useful for example on only accepting the labeled routes that are needed and not ones that are not needed, such as accepting loopback interfaces and rejecting all others." -msgstr "Use these commands to control the importing of forwarding equivalence classes (FECs) for LDP from neighbors. This would be useful for example on only accepting the labeled routes that are needed and not ones that are not needed, such as accepting loopback interfaces and rejecting all others." +msgstr "Використовуйте ці команди, щоб керувати імпортуванням класів еквівалентності пересилання (FEC) для LDP від сусідів. Це було б корисно, наприклад, для прийняття лише позначених маршрутів, які потрібні, а не тих, які непотрібні, наприклад, прийняття петлевих інтерфейсів і відхилення всіх інших." #: ../../configuration/protocols/igmp.rst:125 msgid "Use this PIM command in the selected interface to set the priority (1-4294967295) you want to influence in the election of a node to become the Designated Router for a LAN segment. The default priority is 1, set a higher value to give the router more preference in the DR election process." -msgstr "Use this PIM command in the selected interface to set the priority (1-4294967295) you want to influence in the election of a node to become the Designated Router for a LAN segment. The default priority is 1, set a higher value to give the router more preference in the DR election process." +msgstr "Використовуйте цю команду PIM у вибраному інтерфейсі, щоб установити пріоритет (1-4294967295), на який ви хочете вплинути під час вибору вузла, який стане призначеним маршрутизатором для сегмента локальної мережі. Пріоритет за замовчуванням – 1, встановіть вище значення, щоб надати маршрутизатору більше переваг у процесі виборів DR." #: ../../configuration/protocols/igmp.rst:140 msgid "Use this PIM command to modify the time out value (31-60000 seconds) for an `(S,G) <https://tools.ietf.org/html/rfc7761#section-4.1>`_ flow. 31 seconds is chosen for a lower bound as some hardware platforms cannot see data flowing in better than 30 seconds chunks." -msgstr "Use this PIM command to modify the time out value (31-60000 seconds) for an `(S,G) <https://tools.ietf.org/html/rfc7761#section-4.1>`_ flow. 31 seconds is chosen for a lower bound as some hardware platforms cannot see data flowing in better than 30 seconds chunks." +msgstr "Використовуйте цю команду PIM, щоб змінити значення часу очікування (31-60000 секунд) для `(S,G)<https://tools.ietf.org/html/rfc7761#section-4.1> `_ потік. 31 секунду вибрано для нижньої межі, оскільки деякі апаратні платформи не можуть бачити передачу даних порціями довше ніж 30 секунд." #: ../../configuration/service/pppoe-server.rst:275 msgid "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." -msgstr "Use this comand to set the IPv6 address pool from which a PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Використовуйте цю команду, щоб установити пул адрес IPv6, з якого клієнт PPPoE отримуватиме префікс IPv6 визначеної вами довжини (маски) для завершення кінцевої точки PPPoE на своєму боці. Довжину маски можна встановити від 48 до 128 біт, значення за замовчуванням — 64." + +#: ../../configuration/service/ipoe-server.rst:261 +msgid "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an IPoE client will get an IPv6 prefix of your defined length (mask) to terminate the IPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/service/pppoe-server.rst:355 +msgid "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPPoE client will get an IPv6 prefix of your defined length (mask) to terminate the PPPoE endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." -#: ../../configuration/vpn/sstp.rst:137 +#: ../../configuration/vpn/pptp.rst:223 +msgid "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an PPTP client will get an IPv6 prefix of your defined length (mask) to terminate the PPTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." + +#: ../../configuration/vpn/sstp.rst:257 msgid "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." -msgstr "Use this comand to set the IPv6 address pool from which an SSTP client will get an IPv6 prefix of your defined length (mask) to terminate the SSTP endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Використовуйте цю команду, щоб установити пул адрес IPv6, з якого клієнт SSTP отримуватиме префікс IPv6 визначеної вами довжини (маски) для завершення кінцевої точки SSTP на своєму боці. Довжину маски можна встановити від 48 до 128 біт, значення за замовчуванням — 64." + +#: ../../configuration/vpn/l2tp.rst:299 +msgid "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." +msgstr "Use this comand to set the IPv6 address pool from which an l2tp client will get an IPv6 prefix of your defined length (mask) to terminate the l2tp endpoint at their side. The mask length can be set from 48 to 128 bit long, the default value is 64." #: ../../configuration/service/pppoe-server.rst:93 msgid "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." -msgstr "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation." +msgstr "Використовуйте цю команду для кожного пулу IP-адрес клієнта, який ви хочете визначити. Адреси цього пулу будуть надані клієнтам PPPoE. Ви повинні використовувати нотацію CIDR." #: ../../configuration/service/pppoe-server.rst:93 msgid "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation and it must be within a /24 subnet." -msgstr "Use this command for every pool of client IP addresses you want to define. The addresses of this pool will be given to PPPoE clients. You must use CIDR notation and it must be within a /24 subnet." +msgstr "Використовуйте цю команду для кожного пулу IP-адрес клієнта, який ви хочете визначити. Адреси цього пулу будуть надані клієнтам PPPoE. Ви повинні використовувати нотацію CIDR, і вона має бути в межах підмережі /24." #: ../../configuration/protocols/mpls.rst:144 msgid "Use this command if you would like for the router to advertise FECs with a label of 0 for explicit null operations." -msgstr "Use this command if you would like for the router to advertise FECs with a label of 0 for explicit null operations." +msgstr "Використовуйте цю команду, якщо ви хочете, щоб маршрутизатор повідомляв FEC з міткою 0 для явних нульових операцій." #: ../../configuration/protocols/mpls.rst:152 msgid "Use this command if you would like to control the local FEC allocations for LDP. A good example would be for your local router to not allocate a label for everything. Just a label for what it's useful. A good example would be just a loopback label." -msgstr "Use this command if you would like to control the local FEC allocations for LDP. A good example would be for your local router to not allocate a label for everything. Just a label for what it's useful. A good example would be just a loopback label." +msgstr "Використовуйте цю команду, якщо ви бажаєте керувати локальним розподілом FEC для LDP. Хорошим прикладом може бути те, що ваш локальний маршрутизатор не призначає мітку для всього. Просто позначка того, що це корисно. Хорошим прикладом може бути лише петлева мітка." #: ../../configuration/protocols/mpls.rst:119 msgid "Use this command if you would like to set the TCP session hold time intervals." -msgstr "Use this command if you would like to set the TCP session hold time intervals." +msgstr "Використовуйте цю команду, якщо ви хочете встановити інтервали часу утримання сеансу TCP." #: ../../configuration/protocols/pim6.rst:53 msgid "Use this command to allow the selected interface to join a multicast group." @@ -15987,7 +17626,7 @@ msgstr "Use this command to allow the selected interface to join a multicast gro #: ../../configuration/protocols/pim.rst:191 msgid "Use this command to allow the selected interface to join a multicast group defining the multicast address you want to join and the source IP address too." -msgstr "Use this command to allow the selected interface to join a multicast group defining the multicast address you want to join and the source IP address too." +msgstr "Використовуйте цю команду, щоб дозволити вибраному інтерфейсу приєднатися до групи багатоадресної адреси, визначаючи адресу багатоадресної адреси, до якої ви хочете приєднатися, а також IP-адресу джерела." #: ../../configuration/protocols/pim6.rst:57 msgid "Use this command to allow the selected interface to join a source-specific multicast group." @@ -15995,176 +17634,192 @@ msgstr "Use this command to allow the selected interface to join a source-specif #: ../../configuration/interfaces/openvpn.rst:712 msgid "Use this command to check the tunnel status for OpenVPN client interfaces." -msgstr "Use this command to check the tunnel status for OpenVPN client interfaces." +msgstr "Використовуйте цю команду, щоб перевірити статус тунелю для клієнтських інтерфейсів OpenVPN." #: ../../configuration/interfaces/openvpn.rst:716 msgid "Use this command to check the tunnel status for OpenVPN server interfaces." -msgstr "Use this command to check the tunnel status for OpenVPN server interfaces." +msgstr "Використовуйте цю команду, щоб перевірити статус тунелю для інтерфейсів сервера OpenVPN." #: ../../configuration/interfaces/openvpn.rst:720 msgid "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." -msgstr "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." +msgstr "Використовуйте цю команду, щоб перевірити статус тунелю для міжсайтових інтерфейсів OpenVPN." -#: ../../configuration/system/ipv6.rst:154 +#: ../../configuration/system/ipv6.rst:167 msgid "Use this command to clear Border Gateway Protocol statistics or status." -msgstr "Use this command to clear Border Gateway Protocol statistics or status." +msgstr "Використовуйте цю команду, щоб очистити статистику або статус Border Gateway Protocol." #: ../../configuration/service/pppoe-server.rst:287 msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." -msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Використовуйте цю команду, щоб налаштувати делегування префікса DHCPv6 (RFC3633). Вам потрібно буде встановити пул IPv6 і довжину префікса делегування. З визначеного пулу IPv6 ви роздаватимете мережі визначеної довжини (префікс делегування). Довжину префікса делегування можна встановити від 32 до 64 біт." + +#: ../../configuration/service/ipoe-server.rst:269 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on IPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/service/pppoe-server.rst:363 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPPoE. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." -#: ../../configuration/vpn/sstp.rst:146 +#: ../../configuration/vpn/pptp.rst:231 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on PPTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." + +#: ../../configuration/vpn/sstp.rst:265 msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." -msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on SSTP. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Використовуйте цю команду, щоб налаштувати делегування префікса DHCPv6 (RFC3633) на SSTP. Вам потрібно буде встановити пул IPv6 і довжину префікса делегування. З визначеного пулу IPv6 ви роздаватимете мережі визначеної довжини (префікс делегування). Довжину префікса делегування можна встановити від 32 до 64 біт." + +#: ../../configuration/vpn/l2tp.rst:307 +msgid "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." +msgstr "Use this command to configure DHCPv6 Prefix Delegation (RFC3633) on l2tp. You will have to set your IPv6 pool and the length of the delegation prefix. From the defined IPv6 pool you will be handing out networks of the defined length (delegation-prefix). The length of the delegation prefix can be set from 32 to 64 bit long." #: ../../configuration/service/pppoe-server.rst:120 msgid "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." -msgstr "Use this command to configure Dynamic Authorization Extensions to RADIUS so that you can remotely disconnect sessions and change some authentication parameters." +msgstr "Використовуйте цю команду, щоб налаштувати динамічні розширення авторизації для RADIUS, щоб ви могли віддалено відключати сеанси та змінювати деякі параметри автентифікації." -#: ../../configuration/protocols/static.rst:112 -#: ../../configuration/protocols/static.rst:125 +#: ../../configuration/protocols/static.rst:146 +#: ../../configuration/protocols/static.rst:159 msgid "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." -msgstr "Use this command to configure a \"black-hole\" route on the router. A black-hole route is a route for which the system silently discard packets that are matched. This prevents networks leaking out public interfaces, but it does not prevent them from being used as a more specific route inside your network." +msgstr "Використовуйте цю команду, щоб налаштувати маршрут "чорна діра" на маршрутизаторі. Маршрут чорної діри — це маршрут, для якого система мовчки відкидає пакети, які збігаються. Це запобігає витоку з мереж загальнодоступних інтерфейсів, але це не заважає використовувати їх як більш специфічний маршрут у вашій мережі." #: ../../configuration/trafficpolicy/index.rst:649 msgid "Use this command to configure a Network Emulator policy defining its name and the fixed amount of time you want to add to all packet going out of the interface. The latency will be added through the Token Bucket Filter qdisc. It will only take effect if you have configured its bandwidth too. You can use secs, ms and us. Default: 50ms." -msgstr "Use this command to configure a Network Emulator policy defining its name and the fixed amount of time you want to add to all packet going out of the interface. The latency will be added through the Token Bucket Filter qdisc. It will only take effect if you have configured its bandwidth too. You can use secs, ms and us. Default: 50ms." +msgstr "Використовуйте цю команду, щоб налаштувати політику емулятора мережі, визначивши її назву та фіксований проміжок часу, який ви хочете додати до всіх пакетів, що виходять з інтерфейсу. Затримку буде додано за допомогою диска Token Bucket Filter. Він почне діяти, лише якщо ви також налаштували його пропускну здатність. Ви можете використовувати secs, ms і us. За замовчуванням: 50 мс." #: ../../configuration/trafficpolicy/index.rst:753 msgid "Use this command to configure a Priority Queue policy, set its name, set a class with a priority from 1 to 7 and define a hard limit on the real queue size. When this limit is reached, new packets are dropped." -msgstr "Use this command to configure a Priority Queue policy, set its name, set a class with a priority from 1 to 7 and define a hard limit on the real queue size. When this limit is reached, new packets are dropped." +msgstr "Використовуйте цю команду, щоб налаштувати політику пріоритетної черги, встановити її назву, установити клас із пріоритетом від 1 до 7 і визначити жорстке обмеження для реального розміру черги. Коли цей ліміт досягається, нові пакети відкидаються." #: ../../configuration/trafficpolicy/index.rst:814 msgid "Use this command to configure a Random-Detect policy, set its name and set the available bandwidth for this policy. It is used for calculating the average queue size after some idle time. It should be set to the bandwidth of your interface. Random Detect is not a shaping policy, this command will not shape." -msgstr "Use this command to configure a Random-Detect policy, set its name and set the available bandwidth for this policy. It is used for calculating the average queue size after some idle time. It should be set to the bandwidth of your interface. Random Detect is not a shaping policy, this command will not shape." +msgstr "Використовуйте цю команду, щоб налаштувати політику Random-Detect, встановити її назву та доступну пропускну здатність для цієї політики. Він використовується для розрахунку середнього розміру черги після деякого простою. Його слід налаштувати на пропускну здатність вашого інтерфейсу. Випадкове виявлення не є політикою формування, ця команда не формує." #: ../../configuration/trafficpolicy/index.rst:885 msgid "Use this command to configure a Random-Detect policy and set its name, then name the IP Precedence for the virtual queue you are configuring and what the maximum size of its queue will be (from 1 to 1-4294967295 packets). Packets are dropped when the current queue length reaches this value." -msgstr "Use this command to configure a Random-Detect policy and set its name, then name the IP Precedence for the virtual queue you are configuring and what the maximum size of its queue will be (from 1 to 1-4294967295 packets). Packets are dropped when the current queue length reaches this value." +msgstr "Використовуйте цю команду, щоб налаштувати політику Random-Detect і встановити її ім’я, а потім назвіть пріоритет IP для віртуальної черги, яку ви налаштовуєте, і максимальний розмір її черги (від 1 до 1-4294967295 пакетів). Пакети відкидаються, коли поточна довжина черги досягає цього значення." #: ../../configuration/trafficpolicy/index.rst:834 msgid "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its mark (drop) probability will be. Set the probability by giving the N value of the fraction 1/N (default: 10)." -msgstr "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its mark (drop) probability will be. Set the probability by giving the N value of the fraction 1/N (default: 10)." +msgstr "Використовуйте цю команду, щоб налаштувати політику випадкового виявлення та встановити її ім’я, а потім вказати Пріоритет IP-адреси для віртуальної черги, яку ви налаштовуєте, і якою буде ймовірність її позначення (скидання). Установіть імовірність, надавши значення N дробу 1/N (за замовчуванням: 10)." #: ../../configuration/trafficpolicy/index.rst:843 msgid "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its maximum threshold for random detection will be (from 0 to 4096 packets, default: 18). At this size, the marking (drop) probability is maximal." -msgstr "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its maximum threshold for random detection will be (from 0 to 4096 packets, default: 18). At this size, the marking (drop) probability is maximal." +msgstr "Використовуйте цю команду, щоб налаштувати політику випадкового виявлення та встановити її ім’я, а потім вказати IP-пріоритет для віртуальної черги, яку ви налаштовуєте, і максимальний поріг для випадкового виявлення (від 0 до 4096 пакетів, за замовчуванням: 18). При цьому розмірі ймовірність маркування (випадання) максимальна." #: ../../configuration/trafficpolicy/index.rst:852 msgid "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its minimum threshold for random detection will be (from 0 to 4096 packets). If this value is exceeded, packets start being eligible for being dropped." -msgstr "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what its minimum threshold for random detection will be (from 0 to 4096 packets). If this value is exceeded, packets start being eligible for being dropped." +msgstr "Використовуйте цю команду, щоб налаштувати політику випадкового виявлення та встановити її ім’я, а потім вказати пріоритет IP-адреси для віртуальної черги, яку ви налаштовуєте, і яким буде її мінімальний поріг для випадкового виявлення (від 0 до 4096 пакетів). Якщо це значення перевищено, пакети починають бути придатними для відкидання." #: ../../configuration/trafficpolicy/index.rst:823 msgid "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what the size of its average-packet should be (in bytes, default: 1024)." -msgstr "Use this command to configure a Random-Detect policy and set its name, then state the IP Precedence for the virtual queue you are configuring and what the size of its average-packet should be (in bytes, default: 1024)." +msgstr "Використовуйте цю команду, щоб налаштувати політику Random-Detect і встановити її ім’я, а потім вказати Пріоритет IP для віртуальної черги, яку ви налаштовуєте, і розмір її середнього пакета (у байтах, за замовчуванням: 1024)." #: ../../configuration/trafficpolicy/index.rst:947 msgid "Use this command to configure a Rate-Control policy, set its name and the maximum amount of time a packet can be queued (default: 50 ms)." -msgstr "Use this command to configure a Rate-Control policy, set its name and the maximum amount of time a packet can be queued (default: 50 ms)." +msgstr "Використовуйте цю команду, щоб налаштувати політику Rate-Control, встановити її назву та максимальний час, протягом якого пакет може стояти в черзі (за замовчуванням: 50 мс)." #: ../../configuration/trafficpolicy/index.rst:930 msgid "Use this command to configure a Rate-Control policy, set its name and the rate limit you want to have." -msgstr "Use this command to configure a Rate-Control policy, set its name and the rate limit you want to have." +msgstr "Використовуйте цю команду, щоб налаштувати політику контролю швидкості, установити її назву та ліміт швидкості, який ви хочете мати." #: ../../configuration/trafficpolicy/index.rst:935 msgid "Use this command to configure a Rate-Control policy, set its name and the size of the bucket in bytes which will be available for burst." -msgstr "Use this command to configure a Rate-Control policy, set its name and the size of the bucket in bytes which will be available for burst." +msgstr "Використовуйте цю команду, щоб налаштувати політику Rate-Control, установити її ім’я та розмір сегмента в байтах, який буде доступний для пакету." #: ../../configuration/trafficpolicy/index.rst:987 msgid "Use this command to configure a Round-Robin policy, set its name, set a class ID, and the quantum for that class. The deficit counter will add that value each round." -msgstr "Use this command to configure a Round-Robin policy, set its name, set a class ID, and the quantum for that class. The deficit counter will add that value each round." +msgstr "Використовуйте цю команду, щоб налаштувати політику Round-Robin, встановити її назву, ідентифікатор класу та квант для цього класу. Лічильник дефіциту додаватиме це значення кожного раунду." #: ../../configuration/trafficpolicy/index.rst:994 msgid "Use this command to configure a Round-Robin policy, set its name, set a class ID, and the queue size in packets." -msgstr "Use this command to configure a Round-Robin policy, set its name, set a class ID, and the queue size in packets." +msgstr "Використовуйте цю команду, щоб налаштувати політику Round-Robin, встановити її назву, ідентифікатор класу та розмір черги в пакетах." #: ../../configuration/trafficpolicy/index.rst:1049 msgid "Use this command to configure a Shaper policy, set its name, define a class and set the guaranteed traffic you want to allocate to that class." -msgstr "Use this command to configure a Shaper policy, set its name, define a class and set the guaranteed traffic you want to allocate to that class." +msgstr "Використовуйте цю команду, щоб налаштувати політику Shaper, встановити її ім’я, визначити клас і встановити гарантований трафік, який ви хочете розподілити для цього класу." #: ../../configuration/trafficpolicy/index.rst:1063 msgid "Use this command to configure a Shaper policy, set its name, define a class and set the maximum speed possible for this class. The default ceiling value is the bandwidth value." -msgstr "Use this command to configure a Shaper policy, set its name, define a class and set the maximum speed possible for this class. The default ceiling value is the bandwidth value." +msgstr "Використовуйте цю команду, щоб налаштувати політику Shaper, встановити її назву, визначити клас і встановити максимальну можливу швидкість для цього класу. Максимальним значенням за замовчуванням є значення пропускної здатності." #: ../../configuration/trafficpolicy/index.rst:1070 msgid "Use this command to configure a Shaper policy, set its name, define a class and set the priority for usage of available bandwidth once guarantees have been met. The lower the priority number, the higher the priority. The default priority value is 0, the highest priority." -msgstr "Use this command to configure a Shaper policy, set its name, define a class and set the priority for usage of available bandwidth once guarantees have been met. The lower the priority number, the higher the priority. The default priority value is 0, the highest priority." +msgstr "Використовуйте цю команду, щоб налаштувати політику Shaper, установити її назву, визначити клас і встановити пріоритет для використання доступної пропускної здатності після того, як гарантії будуть виконані. Чим менше число пріоритету, тим вищий пріоритет. Значення пріоритету за замовчуванням — 0, найвищий пріоритет." #: ../../configuration/trafficpolicy/index.rst:1056 msgid "Use this command to configure a Shaper policy, set its name, define a class and set the size of the `tocken bucket`_ in bytes, which will be available to be sent at ceiling speed (default: 15Kb)." -msgstr "Use this command to configure a Shaper policy, set its name, define a class and set the size of the `tocken bucket`_ in bytes, which will be available to be sent at ceiling speed (default: 15Kb)." +msgstr "Використовуйте цю команду, щоб налаштувати політику Shaper, встановити її ім’я, визначити клас і встановити розмір `токенів`_ у байтах, які будуть доступні для надсилання з максимальною швидкістю (за замовчуванням: 15 Кб)." #: ../../configuration/trafficpolicy/index.rst:1042 msgid "Use this command to configure a Shaper policy, set its name and the maximum bandwidth for all combined traffic." -msgstr "Use this command to configure a Shaper policy, set its name and the maximum bandwidth for all combined traffic." +msgstr "Використовуйте цю команду, щоб налаштувати політику Shaper, встановити її назву та максимальну пропускну здатність для всього об’єднаного трафіку." #: ../../configuration/service/pppoe-server.rst:193 msgid "Use this command to configure a data-rate limit to PPPOoE clients for traffic download or upload. The rate-limit is set in kbit/sec." -msgstr "Use this command to configure a data-rate limit to PPPOoE clients for traffic download or upload. The rate-limit is set in kbit/sec." +msgstr "Використовуйте цю команду, щоб налаштувати обмеження швидкості передачі даних для клієнтів PPPOoE для завантаження або вивантаження трафіку. Обмеження швидкості встановлюється в кбіт/с." #: ../../configuration/trafficpolicy/index.rst:378 msgid "Use this command to configure a drop-tail policy (PFIFO). Choose a unique name for this policy and the size of the queue by setting the number of packets it can contain (maximum 4294967295)." -msgstr "Use this command to configure a drop-tail policy (PFIFO). Choose a unique name for this policy and the size of the queue by setting the number of packets it can contain (maximum 4294967295)." +msgstr "Використовуйте цю команду, щоб налаштувати політику відкидання (PFIFO). Виберіть унікальну назву для цієї політики та розмір черги, установивши кількість пакетів, які вона може містити (максимум 4294967295)." #: ../../configuration/protocols/mpls.rst:98 msgid "Use this command to configure a specific session hold time for LDP peers. Set the IP address of the LDP peer and a session hold time that should be configured for it. You may have to reset the neighbor for this to work." -msgstr "Use this command to configure a specific session hold time for LDP peers. Set the IP address of the LDP peer and a session hold time that should be configured for it. You may have to reset the neighbor for this to work." +msgstr "Використовуйте цю команду, щоб налаштувати певний час утримання сеансу для вузлів LDP. Встановіть IP-адресу вузла LDP і час утримання сеансу, який потрібно налаштувати для нього. Можливо, вам доведеться скинути налаштування сусіда, щоб це спрацювало." #: ../../configuration/trafficpolicy/index.rst:571 msgid "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), a class matching rule name and its description." -msgstr "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), a class matching rule name and its description." +msgstr "Використовуйте цю команду, щоб налаштувати Ingress Policer, визначивши його назву, ідентифікатор класу (1-4090), назву правила відповідності класу та його опис." #: ../../configuration/trafficpolicy/index.rst:611 msgid "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), and the priority (0-20, default 20) in which the rule is evaluated (the lower the number, the higher the priority)." -msgstr "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090), and the priority (0-20, default 20) in which the rule is evaluated (the lower the number, the higher the priority)." +msgstr "Використовуйте цю команду, щоб налаштувати Ingress Policer, визначивши його назву, ідентифікатор класу (1-4090) і пріоритет (0-20, за замовчуванням 20), у якому оцінюється правило (чим менше число, тим вищий пріоритет) ." #: ../../configuration/trafficpolicy/index.rst:591 msgid "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the burst size in bytes for this class (default: 15)." -msgstr "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the burst size in bytes for this class (default: 15)." +msgstr "Використовуйте цю команду, щоб налаштувати Ingress Policer, визначивши його назву, ідентифікатор класу (1-4090) і розмір пакету в байтах для цього класу (за замовчуванням: 15)." #: ../../configuration/trafficpolicy/index.rst:583 msgid "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the maximum allowed bandwidth for this class." -msgstr "Use this command to configure an Ingress Policer, defining its name, a class identifier (1-4090) and the maximum allowed bandwidth for this class." +msgstr "Використовуйте цю команду, щоб налаштувати Ingress Policer, визначивши його назву, ідентифікатор класу (1-4090) і максимально дозволену пропускну здатність для цього класу." #: ../../configuration/trafficpolicy/index.rst:604 msgid "Use this command to configure an Ingress Policer, defining its name and the burst size in bytes (default: 15) for its default policy." -msgstr "Use this command to configure an Ingress Policer, defining its name and the burst size in bytes (default: 15) for its default policy." +msgstr "Використовуйте цю команду, щоб налаштувати Ingress Policer, визначивши його назву та розмір пакету в байтах (за замовчуванням: 15) для політики за замовчуванням." #: ../../configuration/trafficpolicy/index.rst:598 msgid "Use this command to configure an Ingress Policer, defining its name and the maximum allowed bandwidth for its default policy." -msgstr "Use this command to configure an Ingress Policer, defining its name and the maximum allowed bandwidth for its default policy." +msgstr "Використовуйте цю команду, щоб налаштувати Ingress Policer, визначивши його ім’я та максимально допустиму пропускну здатність для політики за замовчуванням." #: ../../configuration/trafficpolicy/index.rst:517 msgid "Use this command to configure an fq-codel policy, set its name, and define a hard limit on the real queue size. When this limit is reached, new packets are dropped (default: 10240 packets)." -msgstr "Use this command to configure an fq-codel policy, set its name, and define a hard limit on the real queue size. When this limit is reached, new packets are dropped (default: 10240 packets)." +msgstr "Використовуйте цю команду, щоб налаштувати політику fq-codel, встановити її назву та визначити жорстке обмеження для реального розміру черги. Коли цей ліміт досягається, нові пакети відкидаються (за замовчуванням: 10240 пакетів)." #: ../../configuration/trafficpolicy/index.rst:523 msgid "Use this command to configure an fq-codel policy, set its name, and define the acceptable minimum standing/persistent queue delay. This minimum delay is identified by tracking the local minimum queue delay that packets experience (default: 5ms)." -msgstr "Use this command to configure an fq-codel policy, set its name, and define the acceptable minimum standing/persistent queue delay. This minimum delay is identified by tracking the local minimum queue delay that packets experience (default: 5ms)." +msgstr "Використовуйте цю команду, щоб налаштувати політику fq-codel, встановити її ім’я та визначити прийнятну мінімальну затримку постійної/постійної черги. Цю мінімальну затримку визначають шляхом відстеження локальної мінімальної затримки в черзі пакетів (за замовчуванням: 5 мс)." #: ../../configuration/trafficpolicy/index.rst:497 msgid "Use this command to configure an fq-codel policy, set its name and the maximum number of bytes (default: 1514) to be dequeued from a queue at once." -msgstr "Use this command to configure an fq-codel policy, set its name and the maximum number of bytes (default: 1514) to be dequeued from a queue at once." +msgstr "Використовуйте цю команду, щоб налаштувати політику fq-codel, встановити її ім’я та максимальну кількість байтів (за замовчуванням: 1514), які потрібно виключити з черги одночасно." #: ../../configuration/trafficpolicy/index.rst:503 msgid "Use this command to configure an fq-codel policy, set its name and the number of sub-queues (default: 1024) into which packets are classified." -msgstr "Use this command to configure an fq-codel policy, set its name and the number of sub-queues (default: 1024) into which packets are classified." +msgstr "Використовуйте цю команду, щоб налаштувати політику fq-codel, встановити її назву та кількість підчерг (за замовчуванням: 1024), у які класифікуються пакети." #: ../../configuration/trafficpolicy/index.rst:509 msgid "Use this command to configure an fq-codel policy, set its name and the time period used by the control loop of CoDel to detect when a persistent queue is developing, ensuring that the measured minimum delay does not become too stale (default: 100ms)." -msgstr "Use this command to configure an fq-codel policy, set its name and the time period used by the control loop of CoDel to detect when a persistent queue is developing, ensuring that the measured minimum delay does not become too stale (default: 100ms)." +msgstr "Використовуйте цю команду, щоб налаштувати політику fq-codel, установити її ім’я та період часу, який використовується контуром керування CoDel для виявлення, коли створюється постійна черга, гарантуючи, що виміряна мінімальна затримка не стане надто застарілою (за замовчуванням: 100 мс). ." #: ../../configuration/protocols/igmp.rst:112 msgid "Use this command to configure an interface with IGMP so that PIM can receive IGMP reports and query on the selected interface. By default IGMP version 3 will be used." -msgstr "Use this command to configure an interface with IGMP so that PIM can receive IGMP reports and query on the selected interface. By default IGMP version 3 will be used." +msgstr "Використовуйте цю команду, щоб налаштувати інтерфейс із IGMP, щоб PIM міг отримувати звіти IGMP і здійснювати запити до вибраного інтерфейсу. За замовчуванням буде використано IGMP версії 3." #: ../../configuration/protocols/mpls.rst:92 msgid "Use this command to configure authentication for LDP peers. Set the IP address of the LDP peer and a password that should be shared in order to become neighbors." -msgstr "Use this command to configure authentication for LDP peers. Set the IP address of the LDP peer and a password that should be shared in order to become neighbors." +msgstr "Використовуйте цю команду, щоб налаштувати автентифікацію для вузлів LDP. Встановіть IP-адресу однорангового вузла LDP і пароль, який потрібно надати, щоб стати сусідами." #: ../../configuration/protocols/pim.rst:198 msgid "Use this command to configure in the selected interface the IGMP host query interval (1-1800) in seconds that PIM will use." -msgstr "Use this command to configure in the selected interface the IGMP host query interval (1-1800) in seconds that PIM will use." +msgstr "Використовуйте цю команду, щоб налаштувати у вибраному інтерфейсі інтервал запиту хосту IGMP (1-1800) у секундах, який використовуватиме PIM." #: ../../configuration/protocols/pim.rst:202 msgid "Use this command to configure in the selected interface the IGMP query response timeout value (10-250) in deciseconds. If a report is not returned in the specified time, it will be assumed the (S,G) or (*,G) state :rfc:`7761#section-4.1` has timed out." @@ -16176,7 +17831,7 @@ msgstr "Use this command to configure in the selected interface the IGMP query r #: ../../configuration/protocols/igmp.rst:163 msgid "Use this command to configure in the selected interface the IGMP query response timeout value (10-250) in deciseconds. If a report is not returned in the specified time, it will be assumed the `(S,G) or (*,G) state <https://tools.ietf.org/html/rfc7761#section-4.1>`_ has timed out." -msgstr "Use this command to configure in the selected interface the IGMP query response timeout value (10-250) in deciseconds. If a report is not returned in the specified time, it will be assumed the `(S,G) or (*,G) state <https://tools.ietf.org/html/rfc7761#section-4.1>`_ has timed out." +msgstr "Використовуйте цю команду, щоб налаштувати у вибраному інтерфейсі значення часу очікування відповіді на запит IGMP (10-250) у децисекундах. Якщо звіт не буде повернено протягом зазначеного часу, буде прийнято стан «(S,G) або (*,G)<https://tools.ietf.org/html/rfc7761#section-4.1> `_ минув час очікування." #: ../../configuration/protocols/pim6.rst:47 msgid "Use this command to configure in the selected interface the MLD host query interval (1-65535) in seconds that PIM will use. The default value is 125 seconds." @@ -16184,64 +17839,79 @@ msgstr "Use this command to configure in the selected interface the MLD host que #: ../../configuration/service/pppoe-server.rst:99 msgid "Use this command to configure the IP address and the shared secret key of your RADIUS server. You can have multiple RADIUS servers configured if you wish to achieve redundancy." -msgstr "Use this command to configure the IP address and the shared secret key of your RADIUS server. You can have multiple RADIUS servers configured if you wish to achieve redundancy." +msgstr "Використовуйте цю команду, щоб налаштувати IP-адресу та спільний секретний ключ вашого сервера RADIUS. Ви можете налаштувати кілька серверів RADIUS, якщо бажаєте досягти резервування." #: ../../configuration/protocols/mpls.rst:82 msgid "Use this command to configure the IP address used as the LDP router-id of the local device." -msgstr "Use this command to configure the IP address used as the LDP router-id of the local device." +msgstr "Використовуйте цю команду, щоб налаштувати IP-адресу, яка використовується як ідентифікатор маршрутизатора LDP локального пристрою." #: ../../configuration/protocols/igmp.rst:134 msgid "Use this command to configure the PIM hello interval in seconds (1-180) for the selected interface." -msgstr "Use this command to configure the PIM hello interval in seconds (1-180) for the selected interface." +msgstr "Використовуйте цю команду, щоб налаштувати інтервал привітання PIM у секундах (1-180) для вибраного інтерфейсу." #: ../../configuration/system/flow-accounting.rst:119 msgid "Use this command to configure the sampling rate for flow accounting. The system samples one in every `<rate>` packets, where `<rate>` is the value configured for the sampling-rate option. The advantage of sampling every n packets, where n > 1, allows you to decrease the amount of processing resources required for flow accounting. The disadvantage of not sampling every packet is that the statistics produced are estimates of actual data flows." -msgstr "Use this command to configure the sampling rate for flow accounting. The system samples one in every `<rate>` packets, where `<rate>` is the value configured for the sampling-rate option. The advantage of sampling every n packets, where n > 1, allows you to decrease the amount of processing resources required for flow accounting. The disadvantage of not sampling every packet is that the statistics produced are estimates of actual data flows." +msgstr "Використовуйте цю команду, щоб налаштувати частоту дискретизації для обліку потоку. Система вибирає по одному в кожному `<rate> ` пакети, де `<rate> ` — це значення, налаштоване для параметра частоти дискретизації. Перевага вибірки кожні n пакетів, де n > 1, дозволяє зменшити кількість ресурсів обробки, необхідних для обліку потоку. Недоліком вибірки не кожного пакета є те, що створена статистика є оцінкою фактичних потоків даних." #: ../../configuration/trafficpolicy/index.rst:640 msgid "Use this command to configure the burst size of the traffic in a Network Emulator policy. Define the name of the Network Emulator policy and its traffic burst size (it will be configured through the Token Bucket Filter qdisc). Default:15kb. It will only take effect if you have configured its bandwidth too." -msgstr "Use this command to configure the burst size of the traffic in a Network Emulator policy. Define the name of the Network Emulator policy and its traffic burst size (it will be configured through the Token Bucket Filter qdisc). Default:15kb. It will only take effect if you have configured its bandwidth too." +msgstr "Використовуйте цю команду, щоб налаштувати розмір пакету трафіку в політиці емулятора мережі. Визначте назву політики емулятора мережі та розмір пакету трафіку (його буде налаштовано за допомогою диска Token Bucket Filter). За замовчуванням: 15 Кб. Він почне діяти, лише якщо ви також налаштували його пропускну здатність." #: ../../configuration/service/pppoe-server.rst:47 msgid "Use this command to configure the local gateway IP address." -msgstr "Use this command to configure the local gateway IP address." +msgstr "Використовуйте цю команду, щоб налаштувати IP-адресу локального шлюзу." #: ../../configuration/trafficpolicy/index.rst:634 msgid "Use this command to configure the maximum rate at which traffic will be shaped in a Network Emulator policy. Define the name of the policy and the rate." -msgstr "Use this command to configure the maximum rate at which traffic will be shaped in a Network Emulator policy. Define the name of the policy and the rate." +msgstr "Використовуйте цю команду, щоб налаштувати максимальну швидкість, з якою трафік формуватиметься в політиці емулятора мережі. Визначте назву поліса та ставку." #: ../../configuration/system/sflow.rst:41 msgid "Use this command to configure the sampling rate for sFlow accounting (default: 1000)" -msgstr "Use this command to configure the sampling rate for sFlow accounting (default: 1000)" +msgstr "Використовуйте цю команду, щоб налаштувати частоту дискретизації для обліку sFlow (за замовчуванням: 1000)" #: ../../configuration/service/pppoe-server.rst:37 msgid "Use this command to configure the username and the password of a locally configured user." -msgstr "Use this command to configure the username and the password of a locally configured user." +msgstr "Використовуйте цю команду, щоб налаштувати ім’я користувача та пароль локально налаштованого користувача." #: ../../configuration/protocols/ospf.rst:168 msgid "Use this command to control the maximum number of equal cost paths to reach a specific destination. The upper limit may differ if you change the value of MULTIPATH_NUM during compilation. The default is MULTIPATH_NUM (64)." -msgstr "Use this command to control the maximum number of equal cost paths to reach a specific destination. The upper limit may differ if you change the value of MULTIPATH_NUM during compilation. The default is MULTIPATH_NUM (64)." +msgstr "Використовуйте цю команду, щоб керувати максимальною кількістю однакових шляхів для досягнення певного пункту призначення. Верхня межа може відрізнятися, якщо ви зміните значення MULTIPATH_NUM під час компіляції. Типовим є MULTIPATH_NUM (64)." #: ../../configuration/trafficpolicy/index.rst:398 msgid "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." -msgstr "Use this command to create a Fair-Queue policy and give it a name. It is based on the Stochastic Fairness Queueing and can be applied to outbound traffic." +msgstr "Використовуйте цю команду, щоб створити політику Fair-Queue і дати їй назву. Він заснований на черзі стохастичної справедливості та може бути застосований до вихідного трафіку." + +#: ../../configuration/vpn/l2tp.rst:68 +msgid "Use this command to define IPsec interface." +msgstr "Use this command to define IPsec interface." #: ../../configuration/trafficpolicy/index.rst:425 msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." -msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of maximum packets allowed to wait in the queue. Any other packet will be dropped." +msgstr "Використовуйте цю команду, щоб визначити політику чесної черги на основі стохастичної справедливої черги та встановити максимальну кількість пакетів, яким дозволено очікувати в черзі. Будь-який інший пакет буде відкинуто." #: ../../configuration/trafficpolicy/index.rst:416 msgid "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." -msgstr "Use this command to define a Fair-Queue policy, based on the Stochastic Fairness Queueing, and set the number of seconds at which a new queue algorithm perturbation will occur (maximum 4294967295)." - -#: ../../configuration/service/pppoe-server.rst:81 -#: ../../configuration/vpn/sstp.rst:132 +msgstr "Використовуйте цю команду, щоб визначити політику чесної черги на основі стохастичного чередування в черзі та встановити кількість секунд, за яку відбудеться нове порушення алгоритму черги (максимум 4294967295)." + +#: ../../configuration/service/ipoe-server.rst:277 +#: ../../configuration/service/pppoe-server.rst:371 +#: ../../configuration/vpn/l2tp.rst:315 +#: ../../configuration/vpn/pptp.rst:239 +#: ../../configuration/vpn/sstp.rst:273 +msgid "Use this command to define default IPv6 address pool name." +msgstr "Use this command to define default IPv6 address pool name." + +#: ../../configuration/service/ipoe-server.rst:77 +#: ../../configuration/service/pppoe-server.rst:61 +#: ../../configuration/vpn/l2tp.rst:48 +#: ../../configuration/vpn/pptp.rst:50 +#: ../../configuration/vpn/sstp.rst:75 msgid "Use this command to define default address pool name." msgstr "Use this command to define default address pool name." #: ../../configuration/system/name-server.rst:53 msgid "Use this command to define domains, one at a time, so that the system uses them to complete unqualified host names. Maximum: 6 entries." -msgstr "Use this command to define domains, one at a time, so that the system uses them to complete unqualified host names. Maximum: 6 entries." +msgstr "Використовуйте цю команду, щоб визначити домени по одному, щоб система використовувала їх для завершення некваліфікованих імен хостів. Максимум: 6 записів." #: ../../configuration/protocols/pim.rst:211 msgid "Use this command to define in the selected interface whether you choose IGMP version 2 or 3." @@ -16249,100 +17919,119 @@ msgstr "Use this command to define in the selected interface whether you choose #: ../../configuration/protocols/igmp.rst:172 msgid "Use this command to define in the selected interface whether you choose IGMP version 2 or 3. The default value is 3." -msgstr "Use this command to define in the selected interface whether you choose IGMP version 2 or 3. The default value is 3." +msgstr "Використовуйте цю команду, щоб визначити у вибраному інтерфейсі, чи ви вибрали IGMP версії 2 чи 3. Значення за замовчуванням – 3." #: ../../configuration/service/pppoe-server.rst:70 msgid "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the IP address range to be given to PPPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +#: ../../configuration/service/ipoe-server.rst:70 +msgid "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to IPoE clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + #: ../../configuration/service/pppoe-server.rst:73 msgid "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." -msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." +msgstr "Використовуйте цю команду, щоб визначити першу IP-адресу пулу адрес, яка буде надана клієнтам PPPoE. Він має бути в підмережі /24." -#: ../../configuration/vpn/sstp.rst:121 +#: ../../configuration/vpn/pptp.rst:43 +msgid "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to PPTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/vpn/sstp.rst:68 msgid "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." msgstr "Use this command to define the first IP address of a pool of addresses to be given to SSTP clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." -#: ../../configuration/service/pppoe-server.rst:42 +#: ../../configuration/vpn/l2tp.rst:41 +msgid "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to l2tp clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:54 +msgid "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." +msgstr "Use this command to define the first IP address of a pool of addresses to be given to pppoe clients. If notation ``x.x.x.x-x.x.x.x``, it must be within a /24 subnet. If notation ``x.x.x.x/x`` is used there is possibility to set host/netmask." + +#: ../../configuration/service/pppoe-server.rst:65 msgid "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." -msgstr "Use this command to define the interface the PPPoE server will use to listen for PPPoE clients." +msgstr "Використовуйте цю команду, щоб визначити інтерфейс, який сервер PPPoE використовуватиме для прослуховування клієнтів PPPoE." #: ../../configuration/service/pppoe-server.rst:79 msgid "Use this command to define the last IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." -msgstr "Use this command to define the last IP address of a pool of addresses to be given to PPPoE clients. It must be within a /24 subnet." +msgstr "Використовуйте цю команду, щоб визначити останню IP-адресу пулу адрес, які будуть надані клієнтам PPPoE. Він має бути в підмережі /24." #: ../../configuration/trafficpolicy/index.rst:681 msgid "Use this command to define the length of the queue of your Network Emulator policy. Set the policy name and the maximum number of packets (1-4294967295) the queue may hold queued at a time." -msgstr "Use this command to define the length of the queue of your Network Emulator policy. Set the policy name and the maximum number of packets (1-4294967295) the queue may hold queued at a time." +msgstr "Використовуйте цю команду, щоб визначити довжину черги вашої політики емулятора мережі. Встановіть назву політики та максимальну кількість пакетів (1-4294967295), які черга може містити в черзі за раз." #: ../../configuration/system/ip.rst:23 msgid "Use this command to define the maximum number of entries to keep in the ARP cache (1024, 2048, 4096, 8192, 16384, 32768)." -msgstr "Use this command to define the maximum number of entries to keep in the ARP cache (1024, 2048, 4096, 8192, 16384, 32768)." +msgstr "Використовуйте цю команду, щоб визначити максимальну кількість записів, які зберігатимуться в кеші ARP (1024, 2048, 4096, 8192, 16384, 32768)." #: ../../configuration/system/ipv6.rst:14 msgid "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." -msgstr "Use this command to define the maximum number of entries to keep in the Neighbor cache (1024, 2048, 4096, 8192, 16384, 32768)." +msgstr "Використовуйте цю команду, щоб визначити максимальну кількість записів, які зберігатимуться в кеші Neighbor (1024, 2048, 4096, 8192, 16384, 32768)." -#: ../../configuration/service/pppoe-server.rst:77 -#: ../../configuration/vpn/sstp.rst:128 +#: ../../configuration/service/ipoe-server.rst:332 +#: ../../configuration/service/pppoe-server.rst:450 +#: ../../configuration/vpn/l2tp.rst:404 +#: ../../configuration/vpn/pptp.rst:328 +#: ../../configuration/vpn/sstp.rst:362 msgid "Use this command to define the next address pool name." msgstr "Use this command to define the next address pool name." #: ../../configuration/service/pppoe-server.rst:31 msgid "Use this command to define whether your PPPoE clients will locally authenticate in your VyOS system or in RADIUS server." -msgstr "Use this command to define whether your PPPoE clients will locally authenticate in your VyOS system or in RADIUS server." +msgstr "Використовуйте цю команду, щоб визначити, чи будуть ваші клієнти PPPoE локально автентифікуватися у вашій системі VyOS чи на сервері RADIUS." #: ../../_include/interface-disable-link-detect.txt:4 msgid "Use this command to direct an interface to not detect any physical state changes on a link, for example, when the cable is unplugged." -msgstr "Use this command to direct an interface to not detect any physical state changes on a link, for example, when the cable is unplugged." +msgstr "Використовуйте цю команду, щоб наказати інтерфейсу не виявляти будь-які зміни фізичного стану на з’єднанні, наприклад, коли кабель від’єднано." #: ../../configuration/system/ip.rst:14 msgid "Use this command to disable IPv4 directed broadcast forwarding on all interfaces." -msgstr "Use this command to disable IPv4 directed broadcast forwarding on all interfaces." +msgstr "Використовуйте цю команду, щоб вимкнути направлене широкомовне пересилання IPv4 на всіх інтерфейсах." #: ../../configuration/system/ip.rst:10 msgid "Use this command to disable IPv4 forwarding on all interfaces." -msgstr "Use this command to disable IPv4 forwarding on all interfaces." +msgstr "Використовуйте цю команду, щоб вимкнути переадресацію IPv4 на всіх інтерфейсах." #: ../../configuration/system/ipv6.rst:10 msgid "Use this command to disable IPv6 forwarding on all interfaces." -msgstr "Use this command to disable IPv6 forwarding on all interfaces." +msgstr "Використовуйте цю команду, щоб вимкнути переадресацію IPv6 на всіх інтерфейсах." #: ../../configuration/system/ipv6.rst:19 msgid "Use this command to disable IPv6 operation on interface when Duplicate Address Detection fails on Link-Local address." -msgstr "Use this command to disable IPv6 operation on interface when Duplicate Address Detection fails on Link-Local address." +msgstr "Використовуйте цю команду, щоб вимкнути роботу IPv6 на інтерфейсі, якщо не вдається виявити повторювану адресу на локальній адресі посилання." #: ../../_include/interface-disable-flow-control.txt:16 msgid "Use this command to disable the generation of Ethernet flow control (pause frames)." -msgstr "Use this command to disable the generation of Ethernet flow control (pause frames)." +msgstr "Використовуйте цю команду, щоб вимкнути генерацію керування потоком Ethernet (призупинити кадри)." #: ../../configuration/trafficpolicy/index.rst:659 msgid "Use this command to emulate noise in a Network Emulator policy. Set the policy name and the percentage of corrupted packets you want. A random error will be introduced in a random position for the chosen percent of packets." -msgstr "Use this command to emulate noise in a Network Emulator policy. Set the policy name and the percentage of corrupted packets you want. A random error will be introduced in a random position for the chosen percent of packets." +msgstr "Використовуйте цю команду для емуляції шуму в політиці емулятора мережі. Встановіть назву політики та потрібний відсоток пошкоджених пакетів. Випадкова помилка буде введена у випадкову позицію для вибраного відсотка пакетів." #: ../../configuration/trafficpolicy/index.rst:667 msgid "Use this command to emulate packet-loss conditions in a Network Emulator policy. Set the policy name and the percentage of loss packets your traffic will suffer." -msgstr "Use this command to emulate packet-loss conditions in a Network Emulator policy. Set the policy name and the percentage of loss packets your traffic will suffer." +msgstr "Використовуйте цю команду для емуляції умов втрати пакетів у політиці емулятора мережі. Встановіть назву політики та відсоток втрачених пакетів, які зазнає ваш трафік." #: ../../configuration/trafficpolicy/index.rst:674 msgid "Use this command to emulate packet-reordering conditions in a Network Emulator policy. Set the policy name and the percentage of reordered packets your traffic will suffer." -msgstr "Use this command to emulate packet-reordering conditions in a Network Emulator policy. Set the policy name and the percentage of reordered packets your traffic will suffer." +msgstr "Використовуйте цю команду для емуляції умов перевпорядкування пакетів у політиці емулятора мережі. Встановіть назву політики та відсоток переупорядкованих пакетів, від яких постраждає ваш трафік." #: ../../configuration/protocols/mpls.rst:105 msgid "Use this command to enable, disable, or specify hop count for TTL security for LDP peers. By default the value is set to 255 (or max TTL)." -msgstr "Use this command to enable, disable, or specify hop count for TTL security for LDP peers. By default the value is set to 255 (or max TTL)." +msgstr "Використовуйте цю команду, щоб увімкнути, вимкнути або вказати кількість переходів для безпеки TTL для вузлів LDP. За замовчуванням встановлено значення 255 (або максимальний TTL)." #: ../../configuration/protocols/mpls.rst:78 msgid "Use this command to enable LDP on the interface you define." -msgstr "Use this command to enable LDP on the interface you define." +msgstr "Використовуйте цю команду, щоб увімкнути LDP на визначеному вами інтерфейсі." #: ../../configuration/protocols/mpls.rst:74 msgid "Use this command to enable MPLS processing on the interface you define." -msgstr "Use this command to enable MPLS processing on the interface you define." +msgstr "Використовуйте цю команду, щоб увімкнути обробку MPLS на визначеному вами інтерфейсі." #: ../../configuration/protocols/igmp.rst:97 msgid "Use this command to enable PIM in the selected interface so that it can communicate with PIM neighbors." -msgstr "Use this command to enable PIM in the selected interface so that it can communicate with PIM neighbors." +msgstr "Використовуйте цю команду, щоб увімкнути PIM у вибраному інтерфейсі, щоб він міг спілкуватися з сусідами PIM." #: ../../configuration/protocols/pim6.rst:31 msgid "Use this command to enable PIMv6 in the selected interface so that it can communicate with PIMv6 neighbors. This command also enables MLD reports and query on the interface unless :cfgcmd:`mld disable` is configured." @@ -16350,31 +18039,31 @@ msgstr "Use this command to enable PIMv6 in the selected interface so that it ca #: ../../configuration/interfaces/pppoe.rst:248 msgid "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." -msgstr "Use this command to enable acquisition of IPv6 address using stateless autoconfig (SLAAC)." +msgstr "Використовуйте цю команду, щоб увімкнути отримання адреси IPv6 за допомогою автоконфігурації без збереження стану (SLAAC)." -#: ../../configuration/service/pppoe-server.rst:236 +#: ../../configuration/service/pppoe-server.rst:310 msgid "Use this command to enable bandwidth shaping via RADIUS." -msgstr "Use this command to enable bandwidth shaping via RADIUS." +msgstr "Використовуйте цю команду, щоб увімкнути формування пропускної здатності через RADIUS." #: ../../_include/interface-ip.txt:137 msgid "Use this command to enable proxy Address Resolution Protocol (ARP) on this interface. Proxy ARP allows an Ethernet interface to respond with its own :abbr:`MAC (Media Access Control)` address to ARP requests for destination IP addresses on subnets attached to other interfaces on the system. Subsequent packets sent to those destination IP addresses are forwarded appropriately by the system." -msgstr "Use this command to enable proxy Address Resolution Protocol (ARP) on this interface. Proxy ARP allows an Ethernet interface to respond with its own :abbr:`MAC (Media Access Control)` address to ARP requests for destination IP addresses on subnets attached to other interfaces on the system. Subsequent packets sent to those destination IP addresses are forwarded appropriately by the system." +msgstr "Використовуйте цю команду, щоб увімкнути протокол розпізнавання адрес проксі (ARP) у цьому інтерфейсі. Проксі-АРП дозволяє інтерфейсу Ethernet відповідати власною адресою :abbr:`MAC (Media Access Control)` на запити ARP щодо IP-адрес призначення в підмережах, приєднаних до інших інтерфейсів у системі. Наступні пакети, надіслані на ці IP-адреси призначення, пересилаються системою належним чином." #: ../../configuration/protocols/mpls.rst:177 msgid "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." -msgstr "Use this command to enable targeted LDP sessions to the local router. The router will then respond to any sessions that are trying to connect to it that are not a link local type of TCP connection." +msgstr "Використовуйте цю команду, щоб увімкнути цільові сеанси LDP до локального маршрутизатора. Потім маршрутизатор відповідатиме на будь-які сеанси, які намагаються підключитися до нього, але не є локальним типом TCP-з’єднання." -#: ../../configuration/service/pppoe-server.rst:249 +#: ../../configuration/service/pppoe-server.rst:323 msgid "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." -msgstr "Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) packets, which can be used as a session balancing mechanism with other PPPoE servers." +msgstr "Використовуйте цю команду, щоб увімкнути затримку пакетів PADO (PPPoE Active Discovery Offer), які можна використовувати як механізм балансування сесії з іншими серверами PPPoE." #: ../../configuration/protocols/mpls.rst:184 msgid "Use this command to enable the local router to try and connect with a targeted LDP session to another router." -msgstr "Use this command to enable the local router to try and connect with a targeted LDP session to another router." +msgstr "Використовуйте цю команду, щоб дозволити локальному маршрутизатору спробувати підключитися за допомогою цільового сеансу LDP до іншого маршрутизатора." #: ../../configuration/firewall/general-legacy.rst:301 msgid "Use this command to enable the logging of the default action." -msgstr "Use this command to enable the logging of the default action." +msgstr "Використовуйте цю команду, щоб увімкнути журналювання дії за замовчуванням." #: ../../configuration/firewall/general.rst:431 msgid "Use this command to enable the logging of the default action on custom chains." @@ -16386,295 +18075,327 @@ msgstr "Use this command to enable the logging of the default action on custom c msgid "Use this command to enable the logging of the default action on the specified chain." msgstr "Use this command to enable the logging of the default action on the specified chain." -#: ../../configuration/system/ipv6.rst:165 +#: ../../configuration/system/ipv6.rst:178 msgid "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." -msgstr "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." +msgstr "Використовуйте цю команду, щоб очистити кеш маршруту IPv6 ядра. Адресу можна додати, щоб очистити її лише для цього маршруту." #: ../../configuration/firewall/general-legacy.rst:948 msgid "Use this command to get an overview of a zone." -msgstr "Use this command to get an overview of a zone." +msgstr "Використовуйте цю команду, щоб отримати огляд зони." -#: ../../configuration/system/ipv6.rst:120 +#: ../../configuration/system/ipv6.rst:133 msgid "Use this command to get information about OSPFv3." -msgstr "Use this command to get information about OSPFv3." +msgstr "Використовуйте цю команду, щоб отримати інформацію про OSPFv3." -#: ../../configuration/system/ipv6.rst:142 +#: ../../configuration/system/ipv6.rst:155 msgid "Use this command to get information about the RIPNG protocol" -msgstr "Use this command to get information about the RIPNG protocol" +msgstr "Використовуйте цю команду, щоб отримати інформацію про протокол RIPNG" #: ../../configuration/interfaces/pppoe.rst:110 msgid "Use this command to instruct the system to establish a PPPoE connection automatically once traffic passes through the interface. A disabled on-demand connection is established at boot time and remains up. If the link fails for any reason, the link is brought back up immediately." -msgstr "Use this command to instruct the system to establish a PPPoE connection automatically once traffic passes through the interface. A disabled on-demand connection is established at boot time and remains up. If the link fails for any reason, the link is brought back up immediately." +msgstr "Використовуйте цю команду, щоб наказати системі автоматично встановлювати з’єднання PPPoE, коли трафік проходить через інтерфейс. Вимкнене з’єднання на вимогу встановлюється під час завантаження та залишається активним. Якщо з будь-якої причини зв’язок не вдається зв’язатися, його буде негайно відновлено." #: ../../configuration/interfaces/pppoe.rst:201 msgid "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." -msgstr "Use this command to link the PPPoE connection to a physical interface. Each PPPoE connection must be established over a physical interface. Interfaces can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs." +msgstr "Використовуйте цю команду, щоб підключити з’єднання PPPoE до фізичного інтерфейсу. Кожне з’єднання PPPoE має бути встановлено через фізичний інтерфейс. Інтерфейси можуть бути звичайними інтерфейсами Ethernet, VIF або інтерфейсами з’єднання/VIF." -#: ../../configuration/service/pppoe-server.rst:311 +#: ../../configuration/service/ipoe-server.rst:394 +msgid "Use this command to locally check the active sessions in the IPoE server." +msgstr "Use this command to locally check the active sessions in the IPoE server." + +#: ../../configuration/service/pppoe-server.rst:587 msgid "Use this command to locally check the active sessions in the PPPoE server." -msgstr "Use this command to locally check the active sessions in the PPPoE server." +msgstr "Використовуйте цю команду для локальної перевірки активних сеансів на сервері PPPoE." + +#: ../../configuration/vpn/pptp.rst:446 +msgid "Use this command to locally check the active sessions in the PPTP server." +msgstr "Use this command to locally check the active sessions in the PPTP server." + +#: ../../configuration/vpn/sstp.rst:542 +msgid "Use this command to locally check the active sessions in the SSTP server." +msgstr "Use this command to locally check the active sessions in the SSTP server." #: ../../configuration/protocols/igmp.rst:104 msgid "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." -msgstr "Use this command to manually configure a Rendezvous Point for PIM so that join messages can be sent there. Set the Rendevouz Point address and the matching prefix of group ranges covered. These values must be shared with every router participating in the PIM network." +msgstr "Використовуйте цю команду, щоб вручну налаштувати точку зустрічі для PIM, щоб туди можна було надсилати повідомлення про приєднання. Встановіть адресу точки Rendevouz і відповідний префікс охоплених групових діапазонів. Ці значення мають надаватися кожному маршрутизатору, що бере участь у мережі PIM." #: ../../configuration/interfaces/pppoe.rst:185 #: ../../configuration/interfaces/sstp-client.rst:70 msgid "Use this command to not install advertised DNS nameservers into the local system." -msgstr "Use this command to not install advertised DNS nameservers into the local system." +msgstr "Використовуйте цю команду, щоб не встановлювати оголошені сервери імен DNS у локальній системі." #: ../../configuration/protocols/mpls.rst:171 msgid "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." -msgstr "Use this command to prefer IPv4 for TCP peer transport connection for LDP when both an IPv4 and IPv6 LDP address are configured on the same interface." +msgstr "Використовуйте цю команду, щоб віддати перевагу IPv4 для однорангового транспортного з’єднання TCP для LDP, коли обидві адреси LDP IPv4 і IPv6 налаштовані на одному інтерфейсі." -#: ../../configuration/system/ipv6.rst:160 +#: ../../configuration/system/ipv6.rst:173 msgid "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." -msgstr "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an address or interface." +msgstr "Використовуйте цю команду, щоб скинути кеш протоколу виявлення сусідів IPv6 для адреси або інтерфейсу." #: ../../configuration/protocols/mpls.rst:252 msgid "Use this command to reset an LDP neighbor/TCP session that is established" -msgstr "Use this command to reset an LDP neighbor/TCP session that is established" +msgstr "Використовуйте цю команду, щоб скинути встановлений сеанс сусіда LDP/TCP" #: ../../configuration/interfaces/openvpn.rst:735 msgid "Use this command to reset the OpenVPN process on a specific interface." -msgstr "Use this command to reset the OpenVPN process on a specific interface." +msgstr "Використовуйте цю команду, щоб скинути процес OpenVPN на певному інтерфейсі." #: ../../configuration/interfaces/openvpn.rst:731 msgid "Use this command to reset the specified OpenVPN client." -msgstr "Use this command to reset the specified OpenVPN client." +msgstr "Використовуйте цю команду, щоб скинути вказаний клієнт OpenVPN." #: ../../configuration/interfaces/pppoe.rst:85 msgid "Use this command to restrict the PPPoE session on a given access concentrator. Normally, a host sends a PPPoE initiation packet to start the PPPoE discovery process, a number of access concentrators respond with offer packets and the host selects one of the responding access concentrators to serve this session." -msgstr "Use this command to restrict the PPPoE session on a given access concentrator. Normally, a host sends a PPPoE initiation packet to start the PPPoE discovery process, a number of access concentrators respond with offer packets and the host selects one of the responding access concentrators to serve this session." +msgstr "Використовуйте цю команду, щоб обмежити сеанс PPPoE на даному концентраторі доступу. Зазвичай хост надсилає пакет ініціації PPPoE, щоб розпочати процес виявлення PPPoE, декілька концентраторів доступу відповідають пакетами пропозицій, і хост вибирає один із відповідних концентраторів доступу для обслуговування цього сеансу." #: ../../configuration/protocols/mpls.rst:237 msgid "Use this command to see LDP interface information" -msgstr "Use this command to see LDP interface information" +msgstr "Використовуйте цю команду, щоб переглянути інформацію про інтерфейс LDP" #: ../../configuration/protocols/mpls.rst:241 msgid "Use this command to see LDP neighbor information" -msgstr "Use this command to see LDP neighbor information" +msgstr "Використовуйте цю команду, щоб переглянути інформацію про сусідів LDP" #: ../../configuration/protocols/mpls.rst:245 msgid "Use this command to see detailed LDP neighbor information" -msgstr "Use this command to see detailed LDP neighbor information" +msgstr "Використовуйте цю команду, щоб переглянути детальну інформацію про сусідів LDP" #: ../../configuration/protocols/mpls.rst:233 msgid "Use this command to see discovery hello information" -msgstr "Use this command to see discovery hello information" +msgstr "Використовуйте цю команду, щоб переглянути інформацію про відкриття" #: ../../configuration/protocols/mpls.rst:229 msgid "Use this command to see the Label Information Base." -msgstr "Use this command to see the Label Information Base." +msgstr "Використовуйте цю команду, щоб переглянути інформаційну базу міток." -#: ../../configuration/service/pppoe-server.rst:26 +#: ../../configuration/service/pppoe-server.rst:33 msgid "Use this command to set a name for this PPPoE-server access concentrator." -msgstr "Use this command to set a name for this PPPoE-server access concentrator." +msgstr "Використовуйте цю команду, щоб встановити назву для цього концентратора доступу до PPPoE-сервера." #: ../../configuration/interfaces/pppoe.rst:172 msgid "Use this command to set re-dial delay time to be used with persist PPPoE sessions. When the PPPoE session is terminated by peer, and on-demand option is not set, the router will attempt to re-establish the PPPoE link." -msgstr "Use this command to set re-dial delay time to be used with persist PPPoE sessions. When the PPPoE session is terminated by peer, and on-demand option is not set, the router will attempt to re-establish the PPPoE link." +msgstr "Використовуйте цю команду, щоб установити час затримки повторного набору для використання з постійними сеансами PPPoE. Якщо сеанс PPPoE припинено одноранговим вузлом, а опція на вимогу не встановлена, маршрутизатор спробує відновити з’єднання PPPoE." #: ../../configuration/interfaces/pppoe.rst:180 msgid "Use this command to set the IP address of the local endpoint of a PPPoE session. If it is not set it will be negotiated." -msgstr "Use this command to set the IP address of the local endpoint of a PPPoE session. If it is not set it will be negotiated." +msgstr "Використовуйте цю команду, щоб установити IP-адресу локальної кінцевої точки сеансу PPPoE. Якщо він не встановлений, це буде предметом переговорів." #: ../../configuration/interfaces/pppoe.rst:190 msgid "Use this command to set the IP address of the remote endpoint of a PPPoE session. If it is not set it will be negotiated." -msgstr "Use this command to set the IP address of the remote endpoint of a PPPoE session. If it is not set it will be negotiated." +msgstr "Використовуйте цю команду, щоб установити IP-адресу віддаленої кінцевої точки сеансу PPPoE. Якщо він не встановлений, це буде предметом переговорів." #: ../../configuration/service/pppoe-server.rst:51 msgid "Use this command to set the IPv4 or IPv6 address of every Doman Name Server you want to configure. They will be propagated to PPPoE clients." -msgstr "Use this command to set the IPv4 or IPv6 address of every Doman Name Server you want to configure. They will be propagated to PPPoE clients." +msgstr "Використовуйте цю команду, щоб установити адресу IPv4 або IPv6 кожного сервера доменних імен, який ви хочете налаштувати. Вони будуть поширені клієнтам PPPoE." #: ../../configuration/protocols/mpls.rst:88 msgid "Use this command to set the IPv4 or IPv6 transport-address used by LDP." -msgstr "Use this command to set the IPv4 or IPv6 transport-address used by LDP." +msgstr "Використовуйте цю команду, щоб установити транспортну адресу IPv4 або IPv6, яку використовує LDP." #: ../../configuration/interfaces/pppoe.rst:161 msgid "Use this command to set the idle timeout interval to be used with on-demand PPPoE sessions. When an on-demand connection is established, the link is brought up only when traffic is sent and is disabled when the link is idle for the interval specified." -msgstr "Use this command to set the idle timeout interval to be used with on-demand PPPoE sessions. When an on-demand connection is established, the link is brought up only when traffic is sent and is disabled when the link is idle for the interval specified." +msgstr "Використовуйте цю команду, щоб установити інтервал часу простою, який буде використовуватись із сеансами PPPoE на вимогу. Коли встановлено з’єднання на вимогу, посилання відкривається лише під час надсилання трафіку та вимикається, коли посилання неактивне протягом указаного інтервалу." #: ../../configuration/interfaces/pppoe.rst:102 msgid "Use this command to set the password for authenticating with a remote PPPoE endpoint. Authentication is optional from the system's point of view but most service providers require it." -msgstr "Use this command to set the password for authenticating with a remote PPPoE endpoint. Authentication is optional from the system's point of view but most service providers require it." +msgstr "Використовуйте цю команду, щоб установити пароль для автентифікації за допомогою віддаленої кінцевої точки PPPoE. Автентифікація є необов’язковою з точки зору системи, але більшість постачальників послуг її вимагають." #: ../../configuration/firewall/general-legacy.rst:320 msgid "Use this command to set the target to use. Action queue must be defined to use this setting" -msgstr "Use this command to set the target to use. Action queue must be defined to use this setting" +msgstr "Використовуйте цю команду, щоб встановити ціль для використання. Для використання цього параметра необхідно визначити чергу дій" #: ../../configuration/interfaces/pppoe.rst:96 msgid "Use this command to set the username for authenticating with a remote PPPoE endpoint. Authentication is optional from the system's point of view but most service providers require it." -msgstr "Use this command to set the username for authenticating with a remote PPPoE endpoint. Authentication is optional from the system's point of view but most service providers require it." +msgstr "Використовуйте цю команду, щоб установити ім’я користувача для автентифікації за допомогою віддаленої кінцевої точки PPPoE. Автентифікація є необов’язковою з точки зору системи, але більшість постачальників послуг її вимагають." #: ../../configuration/system/ipv6.rst:117 msgid "Use this command to show IPv6 Border Gateway Protocol information." -msgstr "Use this command to show IPv6 Border Gateway Protocol information." +msgstr "Використовуйте цю команду, щоб показати інформацію протоколу прикордонного шлюзу IPv6." -#: ../../configuration/system/ipv6.rst:50 +#: ../../configuration/system/ipv6.rst:63 msgid "Use this command to show IPv6 Neighbor Discovery Protocol information." -msgstr "Use this command to show IPv6 Neighbor Discovery Protocol information." +msgstr "Використовуйте цю команду, щоб показати інформацію про протокол виявлення сусідів IPv6." -#: ../../configuration/system/ipv6.rst:58 +#: ../../configuration/system/ipv6.rst:71 msgid "Use this command to show IPv6 forwarding status." -msgstr "Use this command to show IPv6 forwarding status." +msgstr "Використовуйте цю команду, щоб показати стан пересилання IPv6." -#: ../../configuration/system/ipv6.rst:54 +#: ../../configuration/system/ipv6.rst:67 msgid "Use this command to show IPv6 multicast group membership." -msgstr "Use this command to show IPv6 multicast group membership." +msgstr "Використовуйте цю команду, щоб показати членство в групі групової адресації IPv6." -#: ../../configuration/system/ipv6.rst:62 +#: ../../configuration/system/ipv6.rst:75 msgid "Use this command to show IPv6 routes." -msgstr "Use this command to show IPv6 routes." +msgstr "Використовуйте цю команду, щоб показати маршрути IPv6." -#: ../../configuration/system/ipv6.rst:105 +#: ../../configuration/system/ipv6.rst:118 msgid "Use this command to show all IPv6 access lists" -msgstr "Use this command to show all IPv6 access lists" +msgstr "Використовуйте цю команду, щоб показати всі списки доступу IPv6" -#: ../../configuration/system/ipv6.rst:90 +#: ../../configuration/system/ipv6.rst:103 msgid "Use this command to show all IPv6 prefix lists" -msgstr "Use this command to show all IPv6 prefix lists" +msgstr "Використовуйте цю команду, щоб показати всі списки префіксів IPv6" -#: ../../configuration/system/ipv6.rst:146 +#: ../../configuration/system/ipv6.rst:159 msgid "Use this command to show the status of the RIPNG protocol" -msgstr "Use this command to show the status of the RIPNG protocol" +msgstr "Використовуйте цю команду, щоб показати статус протоколу RIPNG" #: ../../configuration/system/name-server.rst:21 msgid "Use this command to specify a DNS server for the system to be used for DNS lookups. More than one DNS server can be added, configuring one at a time. Both IPv4 and IPv6 addresses are supported." -msgstr "Use this command to specify a DNS server for the system to be used for DNS lookups. More than one DNS server can be added, configuring one at a time. Both IPv4 and IPv6 addresses are supported." +msgstr "Використовуйте цю команду, щоб вказати сервер DNS для системи, яка буде використовуватися для пошуку DNS. Можна додати більше одного DNS-сервера, налаштовуючи по одному. Підтримуються адреси IPv4 і IPv6." #: ../../configuration/service/webproxy.rst:25 msgid "Use this command to specify a domain name to be appended to domain-names within URLs that do not include a dot ``.`` the domain is appended." -msgstr "Use this command to specify a domain name to be appended to domain-names within URLs that do not include a dot ``.`` the domain is appended." +msgstr "Використовуйте цю команду, щоб вказати доменне ім’я, яке буде додано до доменних імен у URL-адресах, які не містять крапку ``.`` домен додається." #: ../../configuration/interfaces/pppoe.rst:195 msgid "Use this command to specify a service name by which the local PPPoE interface can select access concentrators to connect with. It will connect to any access concentrator if not set." -msgstr "Use this command to specify a service name by which the local PPPoE interface can select access concentrators to connect with. It will connect to any access concentrator if not set." +msgstr "Використовуйте цю команду, щоб вказати назву служби, за допомогою якої локальний інтерфейс PPPoE може вибрати концентратори доступу для підключення. Він підключатиметься до будь-якого концентратора доступу, якщо його не встановлено." #: ../../configuration/system/ip.rst:28 msgid "Use this command to use Layer 4 information for IPv4 ECMP hashing." -msgstr "Use this command to use Layer 4 information for IPv4 ECMP hashing." +msgstr "Використовуйте цю команду, щоб використовувати інформацію рівня 4 для хешування IPv4 ECMP." #: ../../configuration/protocols/mpls.rst:159 msgid "Use this command to use a Cisco non-compliant format to send and interpret the Dual-Stack capability TLV for IPv6 LDP communications. This is related to :rfc:`7552`." -msgstr "Use this command to use a Cisco non-compliant format to send and interpret the Dual-Stack capability TLV for IPv6 LDP communications. This is related to :rfc:`7552`." +msgstr "Використовуйте цю команду, щоб використовувати несумісний формат Cisco для надсилання та інтерпретації TLV можливості Dual-Stack для зв’язку IPv6 LDP. Це пов’язано з :rfc:`7552`." #: ../../configuration/protocols/mpls.rst:165 msgid "Use this command to use ordered label distribution control mode. FRR by default uses independent label distribution control mode for label distribution. This is related to :rfc:`5036`." -msgstr "Use this command to use ordered label distribution control mode. FRR by default uses independent label distribution control mode for label distribution. This is related to :rfc:`5036`." +msgstr "Використовуйте цю команду, щоб використовувати режим керування впорядкованим розподілом міток. FRR за замовчуванням використовує незалежний режим керування розподілом міток для розповсюдження міток. Це пов’язано з :rfc:`5036`." #: ../../configuration/system/ipv6.rst:24 msgid "Use this command to user Layer 4 information for ECMP hashing." -msgstr "Use this command to user Layer 4 information for ECMP hashing." +msgstr "Використовуйте цю команду, щоб використовувати інформацію рівня 4 для хешування ECMP." #: ../../configuration/interfaces/wireless.rst:431 msgid "Use this command to view operational status and details wireless-specific information about all wireless interfaces." -msgstr "Use this command to view operational status and details wireless-specific information about all wireless interfaces." +msgstr "Використовуйте цю команду для перегляду робочого стану та детальної інформації про всі бездротові інтерфейси." #: ../../configuration/interfaces/wireless.rst:420 msgid "Use this command to view operational status and wireless-specific information about all wireless interfaces." -msgstr "Use this command to view operational status and wireless-specific information about all wireless interfaces." +msgstr "Використовуйте цю команду, щоб переглянути робочий стан і інформацію про всі бездротові інтерфейси." #: ../../configuration/interfaces/wireless.rst:498 msgid "Use this command to view wireless interface queue information. The wireless interface identifier can range from wlan0 to wlan999." -msgstr "Use this command to view wireless interface queue information. The wireless interface identifier can range from wlan0 to wlan999." +msgstr "Використовуйте цю команду для перегляду інформації про чергу бездротового інтерфейсу. Ідентифікатор бездротового інтерфейсу може варіюватися від wlan0 до wlan999." #: ../../configuration/service/lldp.rst:142 msgid "Used for troubleshooting." -msgstr "Used for troubleshooting." +msgstr "Використовується для усунення несправностей." #: ../../configuration/service/webproxy.rst:121 msgid "Used to block a specific mime-type." -msgstr "Used to block a specific mime-type." +msgstr "Використовується для блокування певного типу mime." #: ../../configuration/service/webproxy.rst:60 msgid "Used to block specific domains by the Proxy. Specifying \"vyos.net\" will block all access to vyos.net, and specifying \".xxx\" will block all access to URLs having an URL ending on .xxx." -msgstr "Used to block specific domains by the Proxy. Specifying \"vyos.net\" will block all access to vyos.net, and specifying \".xxx\" will block all access to URLs having an URL ending on .xxx." +msgstr "Використовується для блокування певних доменів проксі-сервером. Якщо вказати «vyos.net», буде заблоковано будь-який доступ до vyos.net, а якщо вказати «.xxx», буде заблоковано будь-який доступ до URL-адрес, URL-адреса яких закінчується на .xxx." #: ../../configuration/system/syslog.rst:114 msgid "User-level messages" -msgstr "User-level messages" +msgstr "Повідомлення на рівні користувача" + +#: ../../configuration/service/ipoe-server.rst:250 +#: ../../configuration/service/pppoe-server.rst:212 +#: ../../configuration/vpn/l2tp.rst:255 +#: ../../configuration/vpn/pptp.rst:195 +#: ../../configuration/vpn/sstp.rst:228 +msgid "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." +msgstr "User interface can be put to VRF context via RADIUS Access-Accept packet, or change it via RADIUS CoA. ``Accel-VRF-Name`` is used from these purposes. It is custom `ACCEL-PPP attribute`_. Define it in your RADIUS server." #: ../../configuration/policy/examples.rst:18 msgid "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." -msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." +msgstr "Використовуючи «м'яку реконфігурацію», ми отримуємо оновлення політики без відмов від сусіда." #: ../../configuration/interfaces/openvpn.rst:346 msgid "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." -msgstr "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." +msgstr "Використання **openvpn-option -reneg-sec** може бути складним. Цей параметр використовується для повторного узгодження каналу даних через n секунд. Якщо використовується як на сервері, так і на клієнті, нижче значення ініціює повторне узгодження. Якщо встановити значення 0 на одній стороні з’єднання (щоб вимкнути її), вибране значення на іншій стороні визначатиме, коли відбудеться повторне узгодження." -#: ../../configuration/protocols/bgp.rst:900 +#: ../../configuration/protocols/bgp.rst:922 msgid "Using BGP confederation" -msgstr "Using BGP confederation" +msgstr "Використання конфедерації BGP" -#: ../../configuration/protocols/bgp.rst:899 +#: ../../configuration/protocols/bgp.rst:921 msgid "Using BGP route-reflectors" -msgstr "Using BGP route-reflectors" +msgstr "Використання відбивачів маршрутів BGP" -#: ../../configuration/interfaces/bridge.rst:225 +#: ../../configuration/interfaces/bridge.rst:234 msgid "Using VLAN aware Bridge" -msgstr "Using VLAN aware Bridge" +msgstr "Використання мосту з підтримкою VLAN" + +#: ../../configuration/vpn/sstp.rst:29 +msgid "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" +msgstr "Using our documentation chapter - :ref:`pki` generate and install CA and Server certificate" -#: ../../configuration/interfaces/bridge.rst:266 +#: ../../configuration/interfaces/bridge.rst:275 msgid "Using the operation mode command to view Bridge Information" -msgstr "Using the operation mode command to view Bridge Information" +msgstr "Використання команди режиму роботи для перегляду інформації про міст" #: ../../configuration/interfaces/wireguard.rst:408 msgid "Using this command, you will create a new client configuration which can connect to ``interface`` on this router. The public key from the specified interface is automatically extracted and embedded into the configuration." -msgstr "Using this command, you will create a new client configuration which can connect to ``interface`` on this router. The public key from the specified interface is automatically extracted and embedded into the configuration." +msgstr "Використовуючи цю команду, ви створите нову конфігурацію клієнта, який зможе підключитися до ``інтерфейсу`` на цьому маршрутизаторі. Відкритий ключ із зазначеного інтерфейсу автоматично витягується та вбудовується в конфігурацію." #: ../../configuration/protocols/bgp.rst:343 msgid "Usually this configuration is used in PEs (Provider Edge) to replace the incoming customer AS number so the connected CE ( Customer Edge) can use the same AS number as the other customer sites. This allows customers of the provider network to use the same AS number across their sites." -msgstr "Usually this configuration is used in PEs (Provider Edge) to replace the incoming customer AS number so the connected CE ( Customer Edge) can use the same AS number as the other customer sites. This allows customers of the provider network to use the same AS number across their sites." +msgstr "Зазвичай ця конфігурація використовується в PE (Provider Edge) для заміни вхідного номера AS клієнта, щоб підключений CE (Customer Edge) міг використовувати той самий номер AS, що й інші сайти клієнтів. Це дозволяє клієнтам мережі провайдера використовувати той самий номер AS на своїх сайтах." #: ../../configuration/interfaces/wireless.rst:220 msgid "VHT (Very High Throughput) capabilities (802.11ac)" -msgstr "VHT (Very High Throughput) capabilities (802.11ac)" +msgstr "Можливості VHT (дуже висока пропускна здатність) (802.11ac)" #: ../../configuration/interfaces/wireless.rst:267 msgid "VHT link adaptation capabilities" -msgstr "VHT link adaptation capabilities" +msgstr "Можливості адаптації каналу VHT" #: ../../configuration/interfaces/wireless.rst:245 msgid "VHT operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes)" -msgstr "VHT operating channel center frequency - center freq 1 (for use with 80, 80+80 and 160 modes)" +msgstr "Центральна частота робочого каналу VHT - центральна частота 1 (для використання з режимами 80, 80+80 і 160)" #: ../../configuration/interfaces/wireless.rst:248 msgid "VHT operating channel center frequency - center freq 2 (for use with the 80+80 mode)" -msgstr "VHT operating channel center frequency - center freq 2 (for use with the 80+80 mode)" +msgstr "Центральна частота робочого каналу VHT - центральна частота 2 (для використання в режимі 80+80)" #: ../../configuration/interfaces/bonding.rst:275 #: ../../configuration/interfaces/bridge.rst:123 -#: ../../configuration/interfaces/ethernet.rst:107 +#: ../../configuration/interfaces/ethernet.rst:123 #: ../../configuration/interfaces/pseudo-ethernet.rst:63 #: ../../configuration/interfaces/virtual-ethernet.rst:30 #: ../../configuration/interfaces/wireless.rst:398 msgid "VLAN" msgstr "VLAN" +#: ../../configuration/service/pppoe-server.rst:232 +msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." +msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named ``vlan_mon``, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." + #: ../../configuration/service/pppoe-server.rst:163 msgid "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." -msgstr "VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module named `vlan_mon`, which is monitoring incoming vlans and creates the necessary VLAN if required and allowed. VyOS supports the use of either VLAN ID's or entire ranges, both values can be defined at the same time for an interface." +msgstr "VLAN можна створювати за допомогою Accel-ppp на льоту за допомогою модуля ядра під назвою `vlan_mon`, який відстежує вхідні vlan і створює необхідну VLAN, якщо це потрібно та дозволено. VyOS підтримує використання ідентифікаторів VLAN або цілих діапазонів, обидва значення можна визначити одночасно для інтерфейсу." -#: ../../configuration/interfaces/bridge.rst:231 +#: ../../configuration/interfaces/bridge.rst:240 msgid "VLAN 10 on member interface `eth2` (ACCESS mode)" -msgstr "VLAN 10 on member interface `eth2` (ACCESS mode)" +msgstr "VLAN 10 на членському інтерфейсі `eth2` (режим ДОСТУПУ)" #: ../../configuration/interfaces/pppoe.rst:363 msgid "VLAN Example" -msgstr "VLAN Example" +msgstr "Приклад VLAN" -#: ../../configuration/interfaces/bridge.rst:134 +#: ../../configuration/interfaces/bridge.rst:143 msgid "VLAN Options" -msgstr "VLAN Options" +msgstr "Параметри VLAN" + +#: ../../configuration/service/ipoe-server.rst:315 +msgid "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" +msgstr "VLAN monitor for automatic creation of VLAN interfaces for specific user on specific <interface>" #: ../../configuration/service/lldp.rst:28 msgid "VLAN name" -msgstr "VLAN name" +msgstr "Ім'я VLAN" #: ../../configuration/vpn/ipsec.rst:29 msgid "VMware users should ensure that a VMXNET3 adapter is used. E1000 adapters have known issues with GRE processing." -msgstr "VMware users should ensure that a VMXNET3 adapter is used. E1000 adapters have known issues with GRE processing." +msgstr "Користувачі VMware повинні переконатися, що використовується адаптер VMXNET3. Адаптери E1000 мають відомі проблеми з обробкою GRE." #: ../../configuration/vpn/index.rst:3 msgid "VPN" @@ -16682,68 +18403,68 @@ msgstr "VPN" #: ../../configuration/vpn/l2tp.rst:68 msgid "VPN-clients will request configuration parameters, optionally you can DNS parameter to the client." -msgstr "VPN-clients will request configuration parameters, optionally you can DNS parameter to the client." +msgstr "VPN-клієнти запитуватимуть параметри конфігурації, за бажанням ви можете надати параметр DNS клієнту." #: ../../configuration/vrf/index.rst:7 msgid "VRF" msgstr "VRF" -#: ../../configuration/vrf/index.rst:411 +#: ../../configuration/vrf/index.rst:430 msgid "VRF Route Leaking" -msgstr "VRF Route Leaking" +msgstr "Витік маршруту VRF" -#: ../../configuration/vrf/index.rst:283 +#: ../../configuration/vrf/index.rst:302 msgid "VRF and NAT" msgstr "VRF and NAT" -#: ../../configuration/vrf/index.rst:380 +#: ../../configuration/vrf/index.rst:399 msgid "VRF blue routing table" -msgstr "VRF blue routing table" +msgstr "Синя таблиця маршрутизації VRF" -#: ../../configuration/vrf/index.rst:347 +#: ../../configuration/vrf/index.rst:366 msgid "VRF default routing table" -msgstr "VRF default routing table" +msgstr "Таблиця маршрутизації VRF за замовчуванням" -#: ../../configuration/vrf/index.rst:363 +#: ../../configuration/vrf/index.rst:382 msgid "VRF red routing table" -msgstr "VRF red routing table" +msgstr "Червона таблиця маршрутизації VRF" -#: ../../configuration/vrf/index.rst:235 -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:254 +#: ../../configuration/vrf/index.rst:261 msgid "VRF route leaking" -msgstr "VRF route leaking" +msgstr "Витік маршруту VRF" -#: ../../configuration/vrf/index.rst:242 +#: ../../configuration/vrf/index.rst:261 msgid "VRF topology example" -msgstr "VRF topology example" +msgstr "Приклад топології VRF" #: ../../configuration/highavailability/index.rst:8 msgid "VRRP (Virtual Router Redundancy Protocol) provides active/backup redundancy for routers. Every VRRP router has a physical IP/IPv6 address, and a virtual address. On startup, routers elect the master, and the router with the highest priority becomes the master and assigns the virtual address to its interface. All routers with lower priorities become backup routers. The master then starts sending keepalive packets to notify other routers that it's available. If the master fails and stops sending keepalive packets, the router with the next highest priority becomes the new master and takes over the virtual address." -msgstr "VRRP (Virtual Router Redundancy Protocol) provides active/backup redundancy for routers. Every VRRP router has a physical IP/IPv6 address, and a virtual address. On startup, routers elect the master, and the router with the highest priority becomes the master and assigns the virtual address to its interface. All routers with lower priorities become backup routers. The master then starts sending keepalive packets to notify other routers that it's available. If the master fails and stops sending keepalive packets, the router with the next highest priority becomes the new master and takes over the virtual address." +msgstr "VRRP (Virtual Router Redundancy Protocol) забезпечує активне/резервне резервування для маршрутизаторів. Кожен маршрутизатор VRRP має фізичну адресу IP/IPv6 і віртуальну адресу. Під час запуску маршрутизатори обирають головного, а маршрутизатор із найвищим пріоритетом стає головним і призначає віртуальну адресу своєму інтерфейсу. Усі маршрутизатори з нижчими пріоритетами стають резервними. Потім головний починає надсилати пакети підтримки активності, щоб сповістити інші маршрутизатори про те, що він доступний. Якщо головний маршрутизатор дає збій і припиняє надсилати пакети підтримки активності, маршрутизатор із наступним найвищим пріоритетом стає новим головним і приймає віртуальну адресу." #: ../../configuration/highavailability/index.rst:150 msgid "VRRP can use two modes: preemptive and non-preemptive. In the preemptive mode, if a router with a higher priority fails and then comes back, routers with lower priority will give up their master status. In non-preemptive mode, the newly elected master will keep the master status and the virtual address indefinitely." -msgstr "VRRP can use two modes: preemptive and non-preemptive. In the preemptive mode, if a router with a higher priority fails and then comes back, routers with lower priority will give up their master status. In non-preemptive mode, the newly elected master will keep the master status and the virtual address indefinitely." +msgstr "VRRP може використовувати два режими: превентивний і непревентивний. У режимі випередження, якщо маршрутизатор з вищим пріоритетом виходить з ладу, а потім повертається, маршрутизатори з нижчим пріоритетом відмовляться від свого головного статусу. У безпереважному режимі новообраний майстер зберігатиме статус головного та віртуальну адресу необмежений час." #: ../../configuration/highavailability/index.rst:301 msgid "VRRP functionality can be extended with scripts. VyOS supports two kinds of scripts: health check scripts and transition scripts. Health check scripts execute custom checks in addition to the master router reachability. Transition scripts are executed when VRRP state changes from master to backup or fault and vice versa and can be used to enable or disable certain services, for example." -msgstr "VRRP functionality can be extended with scripts. VyOS supports two kinds of scripts: health check scripts and transition scripts. Health check scripts execute custom checks in addition to the master router reachability. Transition scripts are executed when VRRP state changes from master to backup or fault and vice versa and can be used to enable or disable certain services, for example." +msgstr "Функціональність VRRP можна розширити за допомогою скриптів. VyOS підтримує два типи сценаріїв: сценарії перевірки справності та сценарії переходу. Сценарії перевірки працездатності виконують спеціальні перевірки на додаток до доступності головного маршрутизатора. Сценарії переходу виконуються, коли стан VRRP змінюється з головного на резервний або збій і навпаки, і їх можна використовувати, наприклад, для ввімкнення або вимкнення певних служб." #: ../../configuration/highavailability/index.rst:28 msgid "VRRP groups are created with the ``set high-availability vrrp group $GROUP_NAME`` commands. The required parameters are interface, vrid, and address." -msgstr "VRRP groups are created with the ``set high-availability vrrp group $GROUP_NAME`` commands. The required parameters are interface, vrid, and address." +msgstr "Групи VRRP створюються за допомогою команд ``set high-availability vrrp group $GROUP_NAME``. Необхідними параметрами є інтерфейс, vrid і адреса." #: ../../configuration/highavailability/index.rst:17 msgid "VRRP keepalive packets use multicast, and VRRP setups are limited to a single datalink layer segment. You can setup multiple VRRP groups (also called virtual routers). Virtual routers are identified by a VRID (Virtual Router IDentifier). If you setup multiple groups on the same interface, their VRIDs must be unique if they use the same address family, but it's possible (even if not recommended for readability reasons) to use duplicate VRIDs on different interfaces." -msgstr "VRRP keepalive packets use multicast, and VRRP setups are limited to a single datalink layer segment. You can setup multiple VRRP groups (also called virtual routers). Virtual routers are identified by a VRID (Virtual Router IDentifier). If you setup multiple groups on the same interface, their VRIDs must be unique if they use the same address family, but it's possible (even if not recommended for readability reasons) to use duplicate VRIDs on different interfaces." +msgstr "Пакети підтримки активності VRRP використовують багатоадресну передачу, а налаштування VRRP обмежені одним сегментом рівня каналу даних. Ви можете налаштувати кілька груп VRRP (також званих віртуальними маршрутизаторами). Віртуальні маршрутизатори ідентифікуються VRID (ідентифікатор віртуального маршрутизатора). Якщо ви встановлюєте кілька груп на одному інтерфейсі, їхні VRID мають бути унікальними, якщо вони використовують ту саму сім’ю адрес, але можна (навіть якщо це не рекомендується з міркувань зручності читання) використовувати повторювані VRID на різних інтерфейсах." #: ../../configuration/highavailability/index.rst:98 msgid "VRRP priority can be set with ``priority`` option:" -msgstr "VRRP priority can be set with ``priority`` option:" +msgstr "Пріоритет VRRP можна встановити за допомогою параметра ``priority``:" #: ../../configuration/interfaces/vti.rst:5 msgid "VTI - Virtual Tunnel Interface" -msgstr "VTI - Virtual Tunnel Interface" +msgstr "VTI - інтерфейс віртуального тунелю" #: ../../configuration/interfaces/vxlan.rst:7 msgid "VXLAN" @@ -16751,37 +18472,45 @@ msgstr "VXLAN" #: ../../configuration/interfaces/vxlan.rst:17 msgid "VXLAN is an evolution of efforts to standardize an overlay encapsulation protocol. It increases the scalability up to 16 million logical networks and allows for layer 2 adjacency across IP networks. Multicast or unicast with head-end replication (HER) is used to flood broadcast, unknown unicast, and multicast (BUM) traffic." -msgstr "VXLAN is an evolution of efforts to standardize an overlay encapsulation protocol. It increases the scalability up to 16 million logical networks and allows for layer 2 adjacency across IP networks. Multicast or unicast with head-end replication (HER) is used to flood broadcast, unknown unicast, and multicast (BUM) traffic." +msgstr "VXLAN — це еволюція зусиль зі стандартизації протоколу накладеної інкапсуляції. Це збільшує масштабованість до 16 мільйонів логічних мереж і забезпечує суміжність рівня 2 між мережами IP. Багатоадресна або одноадресна розсилка з головною реплікацією (HER) використовується для лавинного широкомовного, невідомого одноадресного та багатоадресного трафіку (BUM)." #: ../../configuration/interfaces/vxlan.rst:49 msgid "VXLAN specific options" -msgstr "VXLAN specific options" +msgstr "Особливі параметри VXLAN" #: ../../configuration/interfaces/vxlan.rst:28 msgid "VXLAN was officially documented by the IETF in :rfc:`7348`." -msgstr "VXLAN was officially documented by the IETF in :rfc:`7348`." +msgstr "VXLAN був офіційно задокументований IETF у :rfc:`7348`." #: ../../configuration/interfaces/wireless.rst:110 msgid "Valid values are 0..255." -msgstr "Valid values are 0..255." +msgstr "Дійсні значення: 0..255." #: ../../configuration/system/syslog.rst:167 msgid "Value" -msgstr "Value" +msgstr "Цінність" -#: ../../configuration/vpn/sstp.rst:263 +#: ../../configuration/service/ipoe-server.rst:203 +#: ../../configuration/service/pppoe-server.rst:165 +#: ../../configuration/vpn/l2tp.rst:208 +#: ../../configuration/vpn/pptp.rst:148 +#: ../../configuration/vpn/sstp.rst:181 msgid "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." -msgstr "Value to send to RADIUS server in NAS-IP-Address attribute and to be matched in DM/CoA requests. Also DM/CoA server will bind to that address." +msgstr "Значення для надсилання на сервер RADIUS в атрибуті NAS-IP-Address і відповідність у запитах DM/CoA. Також сервер DM/CoA прив’яжеться до цієї адреси." -#: ../../configuration/vpn/sstp.rst:258 +#: ../../configuration/service/ipoe-server.rst:198 +#: ../../configuration/service/pppoe-server.rst:160 +#: ../../configuration/vpn/l2tp.rst:203 +#: ../../configuration/vpn/pptp.rst:143 +#: ../../configuration/vpn/sstp.rst:176 msgid "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." -msgstr "Value to send to RADIUS server in NAS-Identifier attribute and to be matched in DM/CoA requests." +msgstr "Значення для надсилання на сервер RADIUS в атрибуті NAS-Identifier і для відповідності в запитах DM/CoA." #: ../../configuration/highavailability/index.rst:212 #: ../../configuration/service/tftp-server.rst:65 #: ../../configuration/vpn/openconnect.rst:83 msgid "Verification" -msgstr "Verification" +msgstr "Перевірка" #: ../../configuration/vpn/remoteaccess_ipsec.rst:168 msgid "Verification:" @@ -16793,67 +18522,67 @@ msgstr "Verify that connections are hitting the rule on both sides:" #: ../../configuration/highavailability/index.rst:291 msgid "Version" -msgstr "Version" +msgstr "Версія" -#: ../../configuration/highavailability/index.rst:339 +#: ../../configuration/highavailability/index.rst:349 msgid "Virtual-server" -msgstr "Virtual-server" +msgstr "Віртуальний сервер" -#: ../../configuration/highavailability/index.rst:398 +#: ../../configuration/highavailability/index.rst:408 msgid "Virtual-server can be configured with VRRP virtual address or without VRRP." -msgstr "Virtual-server can be configured with VRRP virtual address or without VRRP." +msgstr "Віртуальний сервер можна налаштувати з віртуальною адресою VRRP або без VRRP." #: ../../configuration/interfaces/virtual-ethernet.rst:7 msgid "Virtual Ethernet" -msgstr "Virtual Ethernet" +msgstr "Віртуальний Ethernet" -#: ../../configuration/highavailability/index.rst:342 +#: ../../configuration/highavailability/index.rst:352 msgid "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." -msgstr "Virtual Server allows to Load-balance traffic destination virtual-address:port between several real servers." +msgstr "Віртуальний сервер дозволяє балансувати навантаження трафіку призначення virtual-address:port між кількома реальними серверами." #: ../../configuration/container/index.rst:94 msgid "Volume is either mounted as rw (read-write - default) or ro (read-only)" -msgstr "Volume is either mounted as rw (read-write - default) or ro (read-only)" +msgstr "Том монтується як rw (читання-запис - за замовчуванням) або ro (лише читання)" #: ../../configuration/service/ssh.rst:30 msgid "VyOS 1.1 supported login as user ``root``. This has been removed due to tighter security in VyOS 1.2." -msgstr "VyOS 1.1 supported login as user ``root``. This has been removed due to tighter security in VyOS 1.2." +msgstr "VyOS 1.1 підтримував вхід як користувач ``root``. Це було видалено через посилення безпеки у VyOS 1.2." #: ../../_include/interface-dhcpv6-prefix-delegation.txt:3 msgid "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." -msgstr "VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix Delegation is supported by most ISPs who provide native IPv6 for consumers on fixed networks." +msgstr "VyOS 1.3 (equuleus) підтримує DHCPv6-PD (:rfc:`3633`). Делегування префіксів DHCPv6 підтримується більшістю провайдерів, які надають власний IPv6 для споживачів у стаціонарних мережах." -#: ../../configuration/vrf/index.rst:84 +#: ../../configuration/vrf/index.rst:103 msgid "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." -msgstr "VyOS 1.4 (sagitta) introduced dynamic routing support for VRFs." +msgstr "VyOS 1.4 (sagitta) представила підтримку динамічної маршрутизації для VRF." -#: ../../configuration/pki/index.rst:9 +#: ../../configuration/pki/index.rst:11 msgid "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." -msgstr "VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions by hand." +msgstr "VyOS 1.4 змінив спосіб зберігання ключів шифрування або сертифікатів у системі. В епоху до VyOS 1.4 сертифікати зберігалися в /config, і кожна служба посилалася на файл. Це ускладнило копіювання запущеної конфігурації із системи A до системи B, оскільки вам довелося копіювати файли та їхні дозволи вручну." #: ../../configuration/service/ntp.rst:33 msgid "VyOS 1.4 uses chrony instead of ntpd (see :vytask:`T3008`) which will no longer accept anonymous NTP requests as in VyOS 1.3. All configurations will be migrated to keep the anonymous functionality. For new setups if you have clients using your VyOS installation as NTP server, you must specify the `allow-client` directive." -msgstr "VyOS 1.4 uses chrony instead of ntpd (see :vytask:`T3008`) which will no longer accept anonymous NTP requests as in VyOS 1.3. All configurations will be migrated to keep the anonymous functionality. For new setups if you have clients using your VyOS installation as NTP server, you must specify the `allow-client` directive." +msgstr "VyOS 1.4 використовує chrony замість ntpd (див. :vytask:`T3008`), який більше не прийматиме анонімні запити NTP, як у VyOS 1.3. Усі конфігурації буде перенесено, щоб зберегти анонімну функціональність. Для нових налаштувань, якщо у вас є клієнти, які використовують вашу інсталяцію VyOS як сервер NTP, ви повинні вказати директиву `allow-client`." #: ../../configuration/interfaces/bonding.rst:-1 msgid "VyOS Arista EOS setup" -msgstr "VyOS Arista EOS setup" +msgstr "Налаштування VyOS Arista EOS" -#: ../../configuration/vpn/ipsec.rst:120 +#: ../../configuration/vpn/ipsec.rst:123 msgid "VyOS ESP group has the next options:" -msgstr "VyOS ESP group has the next options:" +msgstr "Група VyOS ESP має такі параметри:" #: ../../configuration/service/router-advert.rst:1 msgid "VyOS Field" -msgstr "VyOS Field" +msgstr "Поле VyOS" #: ../../configuration/vpn/ipsec.rst:45 msgid "VyOS IKE group has the next options:" -msgstr "VyOS IKE group has the next options:" +msgstr "Група VyOS IKE має такі параметри:" #: ../../configuration/service/snmp.rst:202 msgid "VyOS MIBs" -msgstr "VyOS MIBs" +msgstr "VyOS MIB" #: ../../configuration/nat/nat66.rst:-1 msgid "VyOS NAT66 DHCPv6 using a dummy interface" @@ -16861,31 +18590,35 @@ msgstr "VyOS NAT66 DHCPv6 using a dummy interface" #: ../../configuration/nat/nat66.rst:-1 msgid "VyOS NAT66 Simple Configure" -msgstr "VyOS NAT66 Simple Configure" +msgstr "Просте налаштування VyOS NAT66" #: ../../configuration/trafficpolicy/index.rst:624 msgid "VyOS Network Emulator policy emulates the conditions you can suffer in a real network. You will be able to configure things like rate, burst, delay, packet loss, packet corruption or packet reordering." -msgstr "VyOS Network Emulator policy emulates the conditions you can suffer in a real network. You will be able to configure things like rate, burst, delay, packet loss, packet corruption or packet reordering." +msgstr "Політика емулятора мережі VyOS емулює умови, які можуть виникнути в реальній мережі. Ви зможете налаштувати такі речі, як швидкість, пакет, затримка, втрата пакетів, пошкодження пакетів або перевпорядкування пакетів." #: ../../configuration/service/router-advert.rst:1 msgid "VyOS Option" -msgstr "VyOS Option" +msgstr "Варіант VyOS" #: ../../configuration/policy/examples.rst:92 msgid "VyOS Policy-Based Routing (PBR) works by matching source IP address ranges and forwarding the traffic using different routing tables." -msgstr "VyOS Policy-Based Routing (PBR) works by matching source IP address ranges and forwarding the traffic using different routing tables." +msgstr "Маршрутизація на основі політики VyOS (PBR) працює шляхом зіставлення діапазонів IP-адрес джерела та перенаправлення трафіку за допомогою різних таблиць маршрутизації." #: ../../configuration/service/snmp.rst:67 msgid "VyOS SNMP supports both IPv4 and IPv6." -msgstr "VyOS SNMP supports both IPv4 and IPv6." +msgstr "VyOS SNMP підтримує як IPv4, так і IPv6." #: ../../configuration/interfaces/sstp-client.rst:16 msgid "VyOS also comes with a build in SSTP server, see :ref:`sstp`." -msgstr "VyOS also comes with a build in SSTP server, see :ref:`sstp`." +msgstr "VyOS також поставляється з вбудованим сервером SSTP, див. :ref:`sstp`." -#: ../../configuration/service/dhcp-server.rst:504 +#: ../../configuration/service/dhcp-server.rst:563 msgid "VyOS also provides DHCPv6 server functionality which is described in this section." -msgstr "VyOS also provides DHCPv6 server functionality which is described in this section." +msgstr "VyOS також надає функції сервера DHCPv6, які описані в цьому розділі." + +#: ../../configuration/vpn/ipsec.rst:474 +msgid "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." +msgstr "VyOS also supports (currently) two different modes of authentication, local and RADIUS. To create a new local user named ``vyos`` with password ``vyos`` use the following commands." #: ../../configuration/vpn/remoteaccess_ipsec.rst:127 msgid "VyOS also supports two different modes of authentication, local and RADIUS. To create a new local user named \"vyos\" with a password of \"vyos\" use the following commands." @@ -16893,84 +18626,92 @@ msgstr "VyOS also supports two different modes of authentication, local and RADI #: ../../configuration/vpn/dmvpn.rst:290 msgid "VyOS can also run in DMVPN spoke mode." -msgstr "VyOS can also run in DMVPN spoke mode." +msgstr "VyOS також може працювати в розмовному режимі DMVPN." #: ../../configuration/system/conntrack.rst:6 msgid "VyOS can be configured to track connections using the connection tracking subsystem. Connection tracking becomes operational once either stateful firewall or NAT is configured." -msgstr "VyOS can be configured to track connections using the connection tracking subsystem. Connection tracking becomes operational once either stateful firewall or NAT is configured." +msgstr "VyOS можна налаштувати для відстеження підключень за допомогою підсистеми відстеження підключень. Відстеження підключень починає працювати після налаштування брандмауера з відстеженням стану або NAT." #: ../../configuration/interfaces/openvpn.rst:573 msgid "VyOS can not only act as an OpenVPN site-to-site or server for multiple clients. You can indeed also configure any VyOS OpenVPN interface as an OpenVPN client connecting to a VyOS OpenVPN server or any other OpenVPN server." -msgstr "VyOS can not only act as an OpenVPN site-to-site or server for multiple clients. You can indeed also configure any VyOS OpenVPN interface as an OpenVPN client connecting to a VyOS OpenVPN server or any other OpenVPN server." +msgstr "VyOS може не лише діяти як OpenVPN site-to-site або сервер для кількох клієнтів. Ви також можете налаштувати будь-який інтерфейс VyOS OpenVPN як клієнт OpenVPN, що підключається до сервера VyOS OpenVPN або будь-якого іншого сервера OpenVPN." #: ../../configuration/interfaces/ethernet.rst:34 #: ../../configuration/interfaces/ethernet.rst:53 msgid "VyOS default will be `auto`." -msgstr "VyOS default will be `auto`." +msgstr "За замовчуванням VyOS буде `auto`." #: ../../configuration/protocols/babel.rst:20 msgid "VyOS does not have a special command to start the Babel process. The Babel process starts when the first Babel enabled interface is configured." -msgstr "VyOS does not have a special command to start the Babel process. The Babel process starts when the first Babel enabled interface is configured." +msgstr "VyOS не має спеціальної команди для запуску процесу Babel. Процес Babel запускається, коли налаштовано перший інтерфейс із підтримкою Babel." #: ../../configuration/protocols/ospf.rst:27 msgid "VyOS does not have a special command to start the OSPF process. The OSPF process starts when the first ospf enabled interface is configured." -msgstr "VyOS does not have a special command to start the OSPF process. The OSPF process starts when the first ospf enabled interface is configured." +msgstr "VyOS не має спеціальної команди для запуску процесу OSPF. Процес OSPF запускається, коли налаштовано перший інтерфейс з підтримкою ospf." #: ../../configuration/protocols/ospf.rst:1083 msgid "VyOS does not have a special command to start the OSPFv3 process. The OSPFv3 process starts when the first ospf enabled interface is configured." -msgstr "VyOS does not have a special command to start the OSPFv3 process. The OSPFv3 process starts when the first ospf enabled interface is configured." +msgstr "VyOS не має спеціальної команди для запуску процесу OSPFv3. Процес OSPFv3 запускається, коли налаштовано перший інтерфейс з підтримкою ospf." #: ../../configuration/protocols/igmp.rst:9 msgid "VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**, **IGMP** and **IGMP-Proxy**." -msgstr "VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**, **IGMP** and **IGMP-Proxy**." +msgstr "VyOS полегшує IP Multicast, підтримуючи **PIM Sparse Mode**, **IGMP** і **IGMP-Proxy**." #: ../../configuration/protocols/pim6.rst:7 msgid "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." msgstr "VyOS facilitates IPv6 Multicast by supporting **PIMv6** and **MLD**." -#: ../../configuration/service/dns.rst:214 +#: ../../configuration/service/ids.rst:17 +msgid "VyOS includes the FastNetMon Community Edition." +msgstr "VyOS includes the FastNetMon Community Edition." + +#: ../../configuration/service/dns.rst:295 msgid "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." -msgstr "VyOS is able to update a remote DNS record when an interface gets a new IP address. In order to do so, VyOS includes ddclient_, a Perl script written for this only one purpose." +msgstr "VyOS може оновлювати віддалений запис DNS, коли інтерфейс отримує нову IP-адресу. Для цього VyOS включає ddclient_, сценарій Perl, написаний лише для цієї мети." -#: ../../configuration/service/dns.rst:319 +#: ../../configuration/service/dns.rst:413 msgid "VyOS is also able to use any service relying on protocols supported by ddclient." -msgstr "VyOS is also able to use any service relying on protocols supported by ddclient." +msgstr "VyOS також може використовувати будь-які служби, що спираються на протоколи, які підтримуються ddclient." #: ../../configuration/service/snmp.rst:72 msgid "VyOS itself supports SNMPv2_ (version 2) and SNMPv3_ (version 3) where the later is recommended because of improved security (optional authentication and encryption)." -msgstr "VyOS itself supports SNMPv2_ (version 2) and SNMPv3_ (version 3) where the later is recommended because of improved security (optional authentication and encryption)." +msgstr "Сама VyOS підтримує SNMPv2_ (версія 2) і SNMPv3_ (версія 3), де рекомендується останній через покращену безпеку (додаткова автентифікація та шифрування)." #: ../../configuration/trafficpolicy/index.rst:337 msgid "VyOS lets you control traffic in many different ways, here we will cover every possibility. You can configure as many policies as you want, but you will only be able to apply one policy per interface and direction (inbound or outbound)." -msgstr "VyOS lets you control traffic in many different ways, here we will cover every possibility. You can configure as many policies as you want, but you will only be able to apply one policy per interface and direction (inbound or outbound)." +msgstr "VyOS дозволяє контролювати трафік різними способами, тут ми розглянемо всі можливості. Ви можете налаштувати скільки завгодно політик, але ви зможете застосувати лише одну політику для кожного інтерфейсу та напрямку (вхідного чи вихідного)." #: ../../configuration/firewall/general-legacy.rst:17 msgid "VyOS makes use of Linux `netfilter <https://netfilter.org/>`_ for packet filtering." -msgstr "VyOS makes use of Linux `netfilter <https://netfilter.org/>`_ for packet filtering." +msgstr "VyOS використовує Linux `netfilter<https://netfilter.org/> `_ для фільтрації пакетів." #: ../../configuration/protocols/bgp.rst:12 msgid "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" -msgstr "VyOS makes use of :abbr:`FRR (Free Range Routing)` and we would like to thank them for their effort!" +msgstr "VyOS використовує :abbr:`FRR (Free Range Routing)`, і ми хотіли б подякувати їм за їх зусилля!" -#: ../../configuration/pki/index.rst:21 +#: ../../configuration/pki/index.rst:23 msgid "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." -msgstr "VyOS not only can now manage certificates issued by 3rd party Certificate Authorities, it can also act as a CA on its own. You can create your own root CA and sign keys with it by making use of some simple op-mode commands." +msgstr "VyOS тепер не тільки може керувати сертифікатами, виданими сторонніми центрами сертифікації, але також може самостійно діяти як ЦС. Ви можете створити власний кореневий центр сертифікації та підписувати ним ключі, використовуючи кілька простих команд операційного режиму." -#: ../../configuration/pki/index.rst:35 +#: ../../configuration/pki/index.rst:37 msgid "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." -msgstr "VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other keypairs from an easy to access operational level command." +msgstr "Тепер у VyOS також є можливість створювати CA, ключі, ключі Diffie-Hellman та інші пари ключів за допомогою легкодоступної команди операційного рівня." -#: ../../configuration/pki/index.rst:292 +#: ../../configuration/pki/index.rst:323 msgid "VyOS operational mode commands are not only available for generating keys but also to display them." -msgstr "VyOS operational mode commands are not only available for generating keys but also to display them." +msgstr "Команди режиму роботи VyOS доступні не тільки для генерації ключів, але й для їх відображення." #: ../../configuration/service/https.rst:7 msgid "VyOS provide an HTTP API. You can use it to execute op-mode commands, update VyOS, set or delete config." -msgstr "VyOS provide an HTTP API. You can use it to execute op-mode commands, update VyOS, set or delete config." +msgstr "VyOS надає HTTP API. Ви можете використовувати його для виконання команд операційного режиму, оновлення VyOS, налаштування або видалення конфігурації." #: ../../configuration/service/dns.rst:10 msgid "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." -msgstr "VyOS provides DNS infrastructure for small networks. It is designed to be lightweight and have a small footprint, suitable for resource constrained routers and firewalls. For this we utilize PowerDNS recursor." +msgstr "VyOS надає інфраструктуру DNS для невеликих мереж. Він розроблений як легкий і має невелику площу, що підходить для маршрутизаторів і брандмауерів з обмеженими ресурсами. Для цього ми використовуємо рекурсор PowerDNS." + +#: ../../configuration/service/dhcp-server.rst:172 +msgid "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" +msgstr "VyOS provides High Availability support for DHCP server. DHCP High Availability can act in two different modes:" #: ../../configuration/vpn/remoteaccess_ipsec.rst:144 msgid "VyOS provides a command to generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server." @@ -16978,31 +18719,35 @@ msgstr "VyOS provides a command to generate a connection profile used by Windows #: ../../configuration/policy/as-path-list.rst:5 msgid "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **as-path-list** is one of them." -msgstr "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **as-path-list** is one of them." +msgstr "VyOS надає команди політики виключно для фільтрації трафіку BGP і маніпуляції: **as-path-list** є однією з них." #: ../../configuration/policy/community-list.rst:5 msgid "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **community-list** is one of them." -msgstr "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **community-list** is one of them." +msgstr "VyOS надає команди політики виключно для фільтрації трафіку BGP і маніпуляції: **community-list** є однією з них." #: ../../configuration/policy/extcommunity-list.rst:5 msgid "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **extcommunity-list** is one of them." -msgstr "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **extcommunity-list** is one of them." +msgstr "VyOS надає команди політики виключно для фільтрації трафіку BGP і маніпуляції: **extcommunity-list** є однією з них." #: ../../configuration/policy/large-community-list.rst:5 msgid "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **large-community-list** is one of them." -msgstr "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **large-community-list** is one of them." +msgstr "VyOS надає команди політики виключно для фільтрації трафіку BGP і маніпуляції: **large-community-list** є однією з них." #: ../../configuration/interfaces/openvpn.rst:703 msgid "VyOS provides some operational commands on OpenVPN." -msgstr "VyOS provides some operational commands on OpenVPN." +msgstr "VyOS надає деякі робочі команди на OpenVPN." -#: ../../configuration/service/dhcp-server.rst:138 +#: ../../configuration/service/dhcp-server.rst:172 msgid "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." -msgstr "VyOS provides support for DHCP failover. DHCP failover must be configured explicitly by the following statements." +msgstr "VyOS підтримує DHCP-перехід після відмови. Відмовостійкість DHCP має бути налаштована явно за допомогою наступних операторів." + +#: ../../configuration/pki/index.rst:255 +msgid "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." +msgstr "VyOS provides this utility to import existing certificates/key files directly into PKI from op-mode. Previous to VyOS 1.4, certificates were stored under the /config folder permanently and will be retained post upgrade." #: ../../configuration/loadbalancing/reverse-proxy.rst:8 msgid "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." -msgstr "VyOS reverse-proxy is balancer and proxy server that provides high-availability, load balancing and proxying for TCP (level 4) and HTTP-based (level 7) applications." +msgstr "VyOS reverse-proxy — це балансир і проксі-сервер, який забезпечує високу доступність, балансування навантаження та проксі-сервер для програм на базі TCP (рівень 4) і HTTP (рівень 7)." #: ../../configuration/protocols/pim.rst:9 msgid "VyOS supports :abbr:`PIM-SM (PIM Sparse Mode)` as well as :abbr:`IGMP (Internet Group Management Protocol)` v2 and v3" @@ -17010,7 +18755,7 @@ msgstr "VyOS supports :abbr:`PIM-SM (PIM Sparse Mode)` as well as :abbr:`IGMP (I #: ../../configuration/protocols/pim.rst:26 msgid "VyOS supports both IGMP version 2 and version 3 (which allows source-specific multicast)." -msgstr "VyOS supports both IGMP version 2 and version 3 (which allows source-specific multicast)." +msgstr "VyOS підтримує як IGMP версії 2, так і версії 3 (що дозволяє багатоадресну розсилку з певним джерелом)." #: ../../configuration/protocols/pim6.rst:22 msgid "VyOS supports both MLD version 1 and version 2 (which allows source-specific multicast)." @@ -17018,7 +18763,11 @@ msgstr "VyOS supports both MLD version 1 and version 2 (which allows source-spec #: ../../configuration/system/flow-accounting.rst:7 msgid "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." -msgstr "VyOS supports flow-accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." +msgstr "VyOS підтримує облік потоків як для трафіку IPv4, так і для IPv6. Система діє як експортер потоку, і ви можете використовувати її з будь-яким сумісним колектором." + +#: ../../configuration/vpn/ipsec.rst:452 +msgid "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." +msgstr "VyOS supports multiple IKEv2 remote-access connections. Every connection can have its dedicated IKE/ESP ciphers, certificates or local listen address for e.g. inbound load balancing." #: ../../configuration/system/updates.rst:5 msgid "VyOS supports online checking for updates" @@ -17026,19 +18775,19 @@ msgstr "VyOS supports online checking for updates" #: ../../configuration/system/sflow.rst:5 msgid "VyOS supports sFlow accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." -msgstr "VyOS supports sFlow accounting for both IPv4 and IPv6 traffic. The system acts as a flow exporter, and you are free to use it with any compatible collector." +msgstr "VyOS підтримує облік sFlow як для трафіку IPv4, так і для IPv6. Система діє як експортер потоку, і ви можете використовувати її з будь-яким сумісним колектором." #: ../../configuration/system/conntrack.rst:67 msgid "VyOS supports setting timeouts for connections according to the connection type. You can set timeout values for generic connections, for ICMP connections, UDP connections, or for TCP connections in a number of different states." -msgstr "VyOS supports setting timeouts for connections according to the connection type. You can set timeout values for generic connections, for ICMP connections, UDP connections, or for TCP connections in a number of different states." +msgstr "VyOS підтримує встановлення тайм-аутів для підключень відповідно до типу підключення. Ви можете встановити значення часу очікування для загальних з’єднань, для з’єднань ICMP, з’єднань UDP або для з’єднань TCP у кількох різних станах." #: ../../configuration/interfaces/pppoe.rst:23 msgid "VyOS supports setting up PPPoE in two different ways to a PPPoE internet connection. This is because most ISPs provide a modem that is also a wireless router." -msgstr "VyOS supports setting up PPPoE in two different ways to a PPPoE internet connection. This is because most ISPs provide a modem that is also a wireless router." +msgstr "VyOS підтримує налаштування PPPoE двома різними способами для підключення до Інтернету PPPoE. Це пояснюється тим, що більшість провайдерів надають модем, який також є бездротовим маршрутизатором." #: ../../configuration/service/dhcp-server.rst:7 msgid "VyOS uses ISC DHCP server for both IPv4 and IPv6 address assignment." -msgstr "VyOS uses ISC DHCP server for both IPv4 and IPv6 address assignment." +msgstr "VyOS використовує сервер ISC DHCP для призначення адрес IPv4 і IPv6." #: ../../configuration/service/dhcp-server.rst:7 msgid "VyOS uses Kea DHCP server for both IPv4 and IPv6 address assignment." @@ -17050,64 +18799,64 @@ msgstr "VyOS uses [FRRouting](https://frrouting.org/) as the control plane for d #: ../../configuration/interfaces/wwan.rst:12 msgid "VyOS uses the `interfaces wwan` subsystem for configuration." -msgstr "VyOS uses the `interfaces wwan` subsystem for configuration." +msgstr "VyOS використовує підсистему `interfaces wwan` для налаштування." #: ../../_include/interface-mirror.txt:9 msgid "VyOS uses the `mirror` option to configure port mirroring. The configuration is divided into 2 different directions. Destination ports should be configured for different traffic directions." -msgstr "VyOS uses the `mirror` option to configure port mirroring. The configuration is divided into 2 different directions. Destination ports should be configured for different traffic directions." +msgstr "VyOS використовує опцію `mirror` для налаштування дзеркального відображення портів. Конфігурація розділена на 2 різні напрямки. Порти призначення повинні бути налаштовані для різних напрямків трафіку." #: ../../configuration/service/pppoe-server.rst:9 msgid "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." -msgstr "VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be used with local authentication or a connected RADIUS server." +msgstr "VyOS використовує `accel-ppp`_ для забезпечення функцій сервера PPPoE. Його можна використовувати з локальною автентифікацією або підключеним сервером RADIUS." -#: ../../configuration/service/ipoe-server.rst:9 +#: ../../configuration/service/ipoe-server.rst:7 msgid "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." -msgstr "VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over Ethernet)` server functionality. It can be used with local authentication (mac-address) or a connected RADIUS server." +msgstr "VyOS використовує `accel-ppp`_ для забезпечення функцій сервера :abbr:`IPoE (Internet Protocol over Ethernet). Його можна використовувати з локальною автентифікацією (mac-адреса) або підключеним сервером RADIUS." -#: ../../configuration/vpn/l2tp.rst:6 +#: ../../configuration/vpn/l2tp.rst:7 msgid "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." -msgstr "VyOS utilizes accel-ppp_ to provide L2TP server functionality. It can be used with local authentication or a connected RADIUS server." +msgstr "VyOS використовує accel-ppp_ для забезпечення функцій сервера L2TP. Його можна використовувати з локальною автентифікацією або підключеним сервером RADIUS." #: ../../configuration/vpn/sstp.rst:16 msgid "VyOS utilizes accel-ppp_ to provide SSTP server functionality. We support both local and RADIUS authentication." -msgstr "VyOS utilizes accel-ppp_ to provide SSTP server functionality. We support both local and RADIUS authentication." +msgstr "VyOS використовує accel-ppp_ для забезпечення функціональності сервера SSTP. Ми підтримуємо як локальну, так і RADIUS-автентифікацію." #: ../../configuration/loadbalancing/wan.rst:31 msgid "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." -msgstr "WAN Load Balacing should not be used when dynamic routing protocol is used/needed. This feature creates customized routing tables and firewall rules, that makes it incompatible to use with routing protocols." +msgstr "Балансування навантаження WAN не слід використовувати, якщо використовується/потрібний протокол динамічної маршрутизації. Ця функція створює налаштовані таблиці маршрутизації та правила брандмауера, що робить її несумісною з протоколами маршрутизації." -#: ../../configuration/vpn/site2site_ipsec.rst:164 +#: ../../configuration/vpn/site2site_ipsec.rst:167 msgid "WAN interface on `eth1`" -msgstr "WAN interface on `eth1`" +msgstr "Інтерфейс WAN на `eth1`" #: ../../configuration/loadbalancing/wan.rst:4 msgid "WAN load balancing" -msgstr "WAN load balancing" +msgstr "Балансування навантаження WAN" #: ../../configuration/interfaces/wireless.rst:7 msgid "WLAN/WIFI - Wireless LAN" -msgstr "WLAN/WIFI - Wireless LAN" +msgstr "WLAN/WIFI - бездротова локальна мережа" #: ../../configuration/interfaces/wireless.rst:145 msgid "WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]" -msgstr "WMM-PS Unscheduled Automatic Power Save Delivery [U-APSD]" +msgstr "WMM-PS незапланована автоматична доставка енергії [U-APSD]" #: ../../configuration/interfaces/wireless.rst:351 #: ../../configuration/interfaces/wireless.rst:551 msgid "WPA passphrase ``12345678``" -msgstr "WPA passphrase ``12345678``" +msgstr "Парольна фраза WPA ``12345678``" #: ../../configuration/interfaces/wwan.rst:7 msgid "WWAN - Wireless Wide-Area-Network" -msgstr "WWAN - Wireless Wide-Area-Network" +msgstr "WWAN – бездротова глобальна мережа" #: ../../configuration/system/syslog.rst:183 msgid "Warning" -msgstr "Warning" +msgstr "УВАГА" #: ../../configuration/system/syslog.rst:183 msgid "Warning conditions" -msgstr "Warning conditions" +msgstr "Умови попередження" #: ../../configuration/interfaces/openvpn.rst:54 msgid "We'll configure OpenVPN using self-signed certificates, and then discuss the legacy pre-shared key mode." @@ -17115,71 +18864,79 @@ msgstr "We'll configure OpenVPN using self-signed certificates, and then discuss #: ../../configuration/nat/nat44.rst:782 msgid "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." -msgstr "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." +msgstr "Ми використаємо створені вище групи IKE та ESP для цієї VPN. Оскільки нам потрібен доступ до 2 різних підмереж на дальній стороні, нам знадобляться два різних тунелі. Якщо ви змінили імена групи ESP і групи IKE на попередньому кроці, переконайтеся, що ви використовуєте правильні імена і тут." -#: ../../configuration/vpn/ipsec.rst:232 +#: ../../configuration/vpn/ipsec.rst:236 msgid "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." -msgstr "We assume that the LEFT router has static 192.0.2.10 address on eth0, and the RIGHT router has a dynamic address on eth0." +msgstr "Ми припускаємо, що ЛІВИЙ маршрутизатор має статичну адресу 192.0.2.10 на eth0, а ПРАВИЙ маршрутизатор має динамічну адресу на eth0." #: ../../configuration/system/lcd.rst:41 msgid "We can't support all displays from the beginning. If your display type is missing, please create a feature request via Phabricator_." -msgstr "We can't support all displays from the beginning. If your display type is missing, please create a feature request via Phabricator_." +msgstr "Ми не можемо підтримувати всі дисплеї з самого початку. Якщо тип відображення відсутній, створіть запит на функцію через Phabricator_." #: ../../configuration/vpn/openconnect.rst:35 msgid "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." -msgstr "We can also create the certificates using Cerbort which is an easy-to-use client that fetches a certificate from Let's Encrypt an open certificate authority launched by the EFF, Mozilla, and others and deploys it to a web server." +msgstr "Ми також можемо створювати сертифікати за допомогою Cerbort, який є простим у використанні клієнтом, який отримує сертифікат із відкритого центру сертифікації Let's Encrypt, запущеного EFF, Mozilla та іншими, і розгортає його на веб-сервері." -#: ../../configuration/protocols/rpki.rst:158 +#: ../../configuration/protocols/rpki.rst:168 msgid "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" -msgstr "We can build route-maps for import based on these states. Here is a simple RPKI configuration, where `routinator` is the RPKI-validating \"cache\" server with ip `192.0.2.1`:" +msgstr "Ми можемо створювати маршрутні карти для імпорту на основі цих станів. Ось проста конфігурація RPKI, де `routinator` — це сервер «кешу», що перевіряє RPKI, з ip `192.0.2.1`:" + +#: ../../configuration/vpn/ipsec.rst:456 +msgid "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." +msgstr "We configure a new connection named ``rw`` for road-warrior, that identifies itself as ``192.0.2.1`` to the clients and uses the ``vyos`` certificate signed by the `CAcert_Class3_Root`` intermediate CA. We select our previously specified IKE/ESP groups and also link the IP address pool to draw addresses from." -#: ../../configuration/protocols/bgp.rst:1249 +#: ../../configuration/protocols/bgp.rst:1271 msgid "We could expand on this and also deny link local and multicast in the rule 20 action deny." -msgstr "We could expand on this and also deny link local and multicast in the rule 20 action deny." +msgstr "Ми могли б розширити це, а також заборонити локальне та багатоадресне посилання в забороні дії правила 20." #: ../../configuration/interfaces/openvpn.rst:633 msgid "We do not have CLI nodes for every single OpenVPN option. If an option is missing, a feature request should be opened at Phabricator_ so all users can benefit from it (see :ref:`issues_features`)." -msgstr "We do not have CLI nodes for every single OpenVPN option. If an option is missing, a feature request should be opened at Phabricator_ so all users can benefit from it (see :ref:`issues_features`)." +msgstr "У нас немає вузлів CLI для кожного окремого параметра OpenVPN. Якщо опція відсутня, запит на функцію слід відкрити на Phabricator_, щоб усі користувачі могли скористатися нею (див. :ref:`issues_features`)." #: ../../configuration/service/eventhandler.rst:78 msgid "We don't recomend to use arguments. Using environments is more preffereble." -msgstr "We don't recomend to use arguments. Using environments is more preffereble." +msgstr "Ми не рекомендуємо використовувати аргументи. Краще використовувати середовища." + +#: ../../configuration/vpn/ipsec.rst:506 +msgid "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." +msgstr "We generate a connection profile used by Windows clients that will connect to the \"rw\" connection on our VyOS server on the VPN servers IP address/fqdn `vpn.vyos.net`." #: ../../configuration/interfaces/wireguard.rst:148 msgid "We listen on port 51820" -msgstr "We listen on port 51820" +msgstr "Слухаємо порт 51820" #: ../../configuration/vpn/openconnect.rst:26 msgid "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" -msgstr "We need to generate the certificate which authenticates users who attempt to access the network resource through the SSL VPN tunnels. The following commands will create a self signed certificates and will be stored in configuration:" +msgstr "Нам потрібно створити сертифікат, який автентифікує користувачів, які намагаються отримати доступ до мережевого ресурсу через тунелі SSL VPN. Наступні команди створять самопідписані сертифікати та будуть збережені в конфігурації:" -#: ../../configuration/system/option.rst:85 +#: ../../configuration/system/option.rst:115 msgid "We now utilize `tuned` for dynamic resource balancing based on profiles." -msgstr "We now utilize `tuned` for dynamic resource balancing based on profiles." +msgstr "Тепер ми використовуємо `tuned` для динамічного балансування ресурсів на основі профілів." #: ../../configuration/interfaces/wireguard.rst:143 msgid "We only allow the 192.168.2.0/24 subnet to travel over the tunnel" -msgstr "We only allow the 192.168.2.0/24 subnet to travel over the tunnel" +msgstr "Ми дозволяємо лише підмережі 192.168.2.0/24 проходити через тунель" #: ../../configuration/nat/nat44.rst:723 msgid "We only need a single step for this interface:" -msgstr "We only need a single step for this interface:" +msgstr "Для цього інтерфейсу нам потрібен лише один крок:" #: ../../configuration/interfaces/wireguard.rst:149 msgid "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" -msgstr "We route all traffic for the 192.168.2.0/24 network to interface `wg01`" +msgstr "Ми направляємо весь трафік для мережі 192.168.2.0/24 на інтерфейс `wg01`" -#: ../../configuration/system/login.rst:420 +#: ../../configuration/system/login.rst:424 msgid "We use a vontainer providing the TACACS serve rin this example." -msgstr "We use a vontainer providing the TACACS serve rin this example." +msgstr "У цьому прикладі ми використовуємо вонтейнер, який надає службу TACACS." #: ../../configuration/firewall/flowtables.rst:114 msgid "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." msgstr "We will only accept traffic comming from interface eth0, protocol tcp and destination port 1122. All other traffic traspassing the router should be blocked." -#: ../../configuration/service/dhcp-server.rst:331 +#: ../../configuration/service/dhcp-server.rst:387 msgid "Web Proxy Autodiscovery (WPAD) URL" -msgstr "Web Proxy Autodiscovery (WPAD) URL" +msgstr "URL-адреса автоматичного виявлення веб-проксі (WPAD)." #: ../../configuration/service/webproxy.rst:5 msgid "Webproxy" @@ -17195,63 +18952,71 @@ msgstr "Webserver should only listen on specified IP address" #: ../../configuration/protocols/mpls.rst:220 msgid "When LDP is working, you will be able to see label information in the outcome of ``show ip route``. Besides that information, there are also specific *show* commands for LDP:" -msgstr "When LDP is working, you will be able to see label information in the outcome of ``show ip route``. Besides that information, there are also specific *show* commands for LDP:" +msgstr "Коли LDP працює, ви зможете побачити інформацію про мітку в результатах ``show ip route``. Окрім цієї інформації, існують також спеціальні команди *show* для LDP:" #: ../../configuration/protocols/pim.rst:75 msgid "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." msgstr "When PIM receives a register packet the source of the packet will be compared to the prefix-list specified, and if a permit is received normal processing continues. If a deny is returned for the source address of the register packet a register stop message is sent to the source." -#: ../../configuration/vrf/index.rst:73 +#: ../../configuration/vrf/index.rst:92 msgid "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." -msgstr "When VRFs are used it is not only mandatory to create a VRF but also the VRF itself needs to be assigned to an interface." +msgstr "У разі використання VRF не лише обов’язково створити VRF, але й сам VRF потрібно призначити інтерфейсу." -#: ../../configuration/service/dns.rst:354 +#: ../../configuration/service/dns.rst:445 +msgid "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." +msgstr "When a ``custom`` DynDNS provider is used, the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper when entering above command for available protocols." + +#: ../../configuration/service/dns.rst:451 msgid "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." -msgstr "When a ``custom`` DynDNS provider is used the `<server>` where update requests are being sent to must be specified." +msgstr "Коли використовується ``власний`` постачальник DynDNS, `<server> ` має бути вказано, куди надсилаються запити на оновлення." -#: ../../configuration/service/dns.rst:347 +#: ../../configuration/service/dns.rst:361 msgid "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." -msgstr "When a ``custom`` DynDNS provider is used the protocol used for communicating to the provider must be specified under `<protocol>`. See the embedded completion helper for available protocols." +msgstr "Якщо використовується ``настроюваний`` постачальник DynDNS, протокол, який використовується для зв’язку з постачальником, має бути вказаний у розділі `<protocol> `. Перегляньте доступні протоколи у вбудованому помічнику завершення." #: ../../configuration/interfaces/bonding.rst:60 msgid "When a failover occurs in active-backup mode, bonding will issue one or more gratuitous ARPs on the newly active slave. One gratuitous ARP is issued for the bonding master interface and each VLAN interfaces configured above it, provided that the interface has at least one IP address configured. Gratuitous ARPs issued for VLAN interfaces are tagged with the appropriate VLAN id." -msgstr "When a failover occurs in active-backup mode, bonding will issue one or more gratuitous ARPs on the newly active slave. One gratuitous ARP is issued for the bonding master interface and each VLAN interfaces configured above it, provided that the interface has at least one IP address configured. Gratuitous ARPs issued for VLAN interfaces are tagged with the appropriate VLAN id." +msgstr "Коли відмова відбувається в режимі активного резервного копіювання, з’єднання видасть один або кілька безкоштовних ARP на щойно активному підлеглому пристрої. Один безкоштовний ARP видається для головного інтерфейсу з’єднання та кожного інтерфейсу VLAN, налаштованого над ним, за умови, що інтерфейс має принаймні одну налаштовану IP-адресу. Безкоштовні ARP, видані для інтерфейсів VLAN, позначаються відповідним ідентифікатором VLAN." #: ../../configuration/interfaces/bonding.rst:112 msgid "When a link is reconnected or a new slave joins the bond the receive traffic is redistributed among all active slaves in the bond by initiating ARP Replies with the selected MAC address to each of the clients. The updelay parameter (detailed below) must be set to a value equal or greater than the switch's forwarding delay so that the ARP Replies sent to the peers will not be blocked by the switch." -msgstr "When a link is reconnected or a new slave joins the bond the receive traffic is redistributed among all active slaves in the bond by initiating ARP Replies with the selected MAC address to each of the clients. The updelay parameter (detailed below) must be set to a value equal or greater than the switch's forwarding delay so that the ARP Replies sent to the peers will not be blocked by the switch." +msgstr "Коли канал повторно підключається або новий підлеглий пристрій приєднується до зв’язку, отриманий трафік перерозподіляється між усіма активними підлеглими в зв’язку шляхом ініціювання ARP-відповідей із вибраною MAC-адресою кожному з клієнтів. Для параметра updelay (детально описано нижче) має бути встановлено значення, що дорівнює або перевищує затримку пересилання комутатора, щоб ARP-відповіді, надіслані одноранговим вузлам, не блокувалися комутатором." #: ../../configuration/trafficpolicy/index.rst:361 msgid "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." -msgstr "When a packet is to be sent, it will have to go through that queue, so the packet will be placed at the tail of it. When the packet completely goes through it, it will be dequeued emptying its place in the queue and being eventually handed to the NIC to be actually sent out." +msgstr "Коли пакет буде надіслано, він повинен буде пройти цю чергу, тому пакет буде розміщено в її хвості. Коли пакет повністю пройде через нього, його буде виключено з черги, звільнивши його місце в черзі, і врешті-решт буде передано в мережевий адаптер для фактичного відправлення." -#: ../../configuration/protocols/bgp.rst:684 +#: ../../configuration/protocols/bgp.rst:589 +msgid "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." +msgstr "When a peer receives a martian nexthop as part of the NLRI for a route permit the nexthop to be used as such, instead of rejecting and resetting the connection." + +#: ../../configuration/protocols/bgp.rst:706 msgid "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." -msgstr "When a route fails, a routing update is sent to withdraw the route from the network's routing tables. When the route is re-enabled, the change in availability is also advertised. A route that continually fails and returns requires a great deal of network traffic to update the network about the route's status." +msgstr "У разі помилки маршруту надсилається оновлення маршрутизації, щоб видалити маршрут із таблиць маршрутизації мережі. Коли маршрут повторно ввімкнено, зміна доступності також повідомляється. Маршрут, який постійно дає збій і повертається, потребує великого обсягу мережевого трафіку для оновлення мережі про статус маршруту." #: ../../configuration/protocols/bgp.rst:135 msgid "When adding IPv6 routing information exchange feature to BGP. There were some proposals. :abbr:`IETF (Internet Engineering Task Force)` :abbr:`IDR (Inter Domain Routing)` adopted a proposal called Multiprotocol Extension for BGP. The specification is described in :rfc:`2283`. The protocol does not define new protocols. It defines new attributes to existing BGP. When it is used exchanging IPv6 routing information it is called BGP-4+. When it is used for exchanging multicast routing information it is called MBGP." -msgstr "When adding IPv6 routing information exchange feature to BGP. There were some proposals. :abbr:`IETF (Internet Engineering Task Force)` :abbr:`IDR (Inter Domain Routing)` adopted a proposal called Multiprotocol Extension for BGP. The specification is described in :rfc:`2283`. The protocol does not define new protocols. It defines new attributes to existing BGP. When it is used exchanging IPv6 routing information it is called BGP-4+. When it is used for exchanging multicast routing information it is called MBGP." +msgstr "Під час додавання функції обміну інформацією про маршрутизацію IPv6 до BGP. Були деякі пропозиції. :abbr:`IETF (Internet Engineering Task Force)` :abbr:`IDR (Inter Domain Routing)` прийняв пропозицію під назвою Multiprotocol Extension for BGP. Специфікація описана в :rfc:`2283`. Протокол не визначає нових протоколів. Він визначає нові атрибути для існуючого BGP. Коли він використовується для обміну інформацією про маршрутизацію IPv6, він називається BGP-4+. Коли він використовується для обміну інформацією про багатоадресну маршрутизацію, він називається MBGP." #: ../../configuration/service/dns.rst:155 msgid "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." msgstr "When an authoritative server does not answer a query or sends a reply the recursor does not like, it is throttled. Any servers matching the supplied netmasks will never be throttled." -#: ../../configuration/service/pppoe-server.rst:169 +#: ../../configuration/service/pppoe-server.rst:238 msgid "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." -msgstr "When configured, PPPoE will create the necessary VLANs when required. Once the user session has been cancelled and the VLAN is not needed anymore, VyOS will remove it again." +msgstr "Після налаштування PPPoE за потреби створить необхідні VLAN. Після того, як сеанс користувача буде скасовано і VLAN більше не потрібен, VyOS видалить його знову." #: ../../configuration/trafficpolicy/index.rst:828 msgid "When configuring a Random-Detect policy: **the higher the precedence number, the higher the priority**." -msgstr "When configuring a Random-Detect policy: **the higher the precedence number, the higher the priority**." +msgstr "Під час налаштування політики випадкового виявлення: **що вищий номер пріоритету, то вищий пріоритет**." #: ../../configuration/trafficpolicy/index.rst:178 msgid "When configuring your filter, you can use the ``Tab`` key to see the many different parameters you can configure." -msgstr "When configuring your filter, you can use the ``Tab`` key to see the many different parameters you can configure." +msgstr "Під час налаштування фільтра ви можете використовувати клавішу ``Tab``, щоб побачити багато різних параметрів, які ви можете налаштувати." #: ../../configuration/trafficpolicy/index.rst:44 msgid "When configuring your traffic policy, you will have to set data rate values, watch out the units you are managing, it is easy to get confused with the different prefixes and suffixes you can use. VyOS will always show you the different units you can use." -msgstr "When configuring your traffic policy, you will have to set data rate values, watch out the units you are managing, it is easy to get confused with the different prefixes and suffixes you can use. VyOS will always show you the different units you can use." +msgstr "Під час налаштування політики трафіку вам доведеться встановити значення швидкості передачі даних, стежити за одиницями, якими ви керуєте, легко заплутатися з різними префіксами та суфіксами, які ви можете використовувати. VyOS завжди покаже вам різні одиниці, які ви можете використовувати." #: ../../configuration/firewall/bridge.rst:210 #: ../../configuration/firewall/ipv4.rst:290 @@ -17265,37 +19030,41 @@ msgstr "When defining the translated address, called ``backends``, a ``weight`` #: ../../configuration/trafficpolicy/index.rst:420 msgid "When dequeuing, each hash-bucket with data is queried in a round robin fashion. You can configure the length of the queue." -msgstr "When dequeuing, each hash-bucket with data is queried in a round robin fashion. You can configure the length of the queue." +msgstr "Під час видалення з черги кожне хеш-бакет із даними запитується циклічно. Ви можете налаштувати довжину черги." #: ../../configuration/nat/nat44.rst:129 msgid "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." -msgstr "When designing your NAT ruleset leave some space between consecutive rules for later extension. Your ruleset could start with numbers 10, 20, 30. You thus can later extend the ruleset and place new rules between existing ones." +msgstr "Розробляючи свій набір правил NAT, залиште деякий простір між послідовними правилами для подальшого розширення. Ваш набір правил може починатися з номерів 10, 20, 30. Таким чином ви можете пізніше розширити набір правил і розмістити нові правила між існуючими." -#: ../../configuration/vrf/index.rst:188 +#: ../../configuration/vrf/index.rst:207 msgid "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." -msgstr "When doing fault isolation with ping, you should first run it on the local host, to verify that the local network interface is up and running. Then, continue with hosts and gateways further down the road towards your destination. Round-trip time and packet loss statistics are computed." +msgstr "Виконуючи ізоляцію помилок за допомогою ping, ви повинні спочатку запустити його на локальному хості, щоб переконатися, що інтерфейс локальної мережі працює та працює. Потім продовжуйте з хостами та шлюзами далі по дорозі до місця призначення. Обчислюється час передачі даних і статистика втрат пакетів." -#: ../../configuration/pki/index.rst:176 -#: ../../configuration/pki/index.rst:219 +#: ../../configuration/vpn/ipsec.rst:529 +msgid "When first connecting to the new VPN the user is prompted to enter proper credentials." +msgstr "When first connecting to the new VPN the user is prompted to enter proper credentials." + +#: ../../configuration/pki/index.rst:178 +#: ../../configuration/pki/index.rst:221 msgid "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" -msgstr "When loading the certificate you need to manually strip the ``-----BEGIN CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" +msgstr "Під час завантаження сертифіката вам потрібно вручну видалити теги ``-----BEGIN CERTIFICATE-----`` і ``-----END CERTIFICATE-----``. Крім того, сертифікат/ключ має бути представлено в одному рядку без розривів рядків (``\\n``), це можна зробити за допомогою такої команди оболонки:" -#: ../../configuration/pki/index.rst:197 -#: ../../configuration/pki/index.rst:235 +#: ../../configuration/pki/index.rst:199 +#: ../../configuration/pki/index.rst:237 msgid "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" -msgstr "When loading the certificate you need to manually strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs to be presented in a single line without line breaks (``\\n``), this can be done using the following shell command:" +msgstr "Під час завантаження сертифіката вам потрібно вручну видалити теги ``-----BEGIN KEY-----`` і ``-----END KEY-----``. Крім того, сертифікат/ключ має бути представлено в одному рядку без розривів рядків (``\\n``), це можна зробити за допомогою такої команди оболонки:" #: ../../configuration/policy/route.rst:240 msgid "When mathcing all patterns defined in a rule, then different actions can be made. This includes droping the packet, modifying certain data, or setting a different routing table." -msgstr "When mathcing all patterns defined in a rule, then different actions can be made. This includes droping the packet, modifying certain data, or setting a different routing table." +msgstr "Під час зіставлення всіх шаблонів, визначених у правилі, можна виконувати різні дії. Це включає видалення пакета, зміну певних даних або встановлення іншої таблиці маршрутизації." #: ../../_include/interface-dhcpv6-options.txt:17 msgid "When no-release is specified, dhcp6c will send a release message on client exit to prevent losing an assigned address or prefix." -msgstr "When no-release is specified, dhcp6c will send a release message on client exit to prevent losing an assigned address or prefix." +msgstr "Якщо вказано відсутність випуску, dhcp6c надішле повідомлення про випуск під час виходу клієнта, щоб запобігти втраті призначеної адреси чи префікса." #: ../../configuration/system/syslog.rst:233 msgid "When no options/parameters are used, the contents of the main syslog file are displayed." -msgstr "When no options/parameters are used, the contents of the main syslog file are displayed." +msgstr "Якщо параметри/параметри не використовуються, відображається вміст головного файлу системного журналу." #: ../../configuration/protocols/pim.rst:65 msgid "When processing packets from a neighbor process the number of packets incoming at one time before moving on to the next task." @@ -17303,15 +19072,15 @@ msgstr "When processing packets from a neighbor process the number of packets in #: ../../_include/interface-dhcpv6-options.txt:40 msgid "When rapid-commit is specified, dhcp6c will include a rapid-commit option in solicit messages and wait for an immediate reply instead of advertisements." -msgstr "When rapid-commit is specified, dhcp6c will include a rapid-commit option in solicit messages and wait for an immediate reply instead of advertisements." +msgstr "Якщо вказано швидку фіксацію, dhcp6c включатиме опцію швидкої фіксації в запитуваних повідомленнях і чекатиме негайної відповіді замість реклами." #: ../../configuration/protocols/bgp.rst:287 msgid "When remote peer does not have capability negotiation feature, remote peer will not send any capabilities at all. In that case, bgp configures the peer with configured capabilities." -msgstr "When remote peer does not have capability negotiation feature, remote peer will not send any capabilities at all. In that case, bgp configures the peer with configured capabilities." +msgstr "Якщо віддалений одноранговий вузол не має функції узгодження можливостей, віддалений одноранговий вузол взагалі не надсилатиме жодних можливостей. У цьому випадку bgp налаштовує одноранговий вузол із налаштованими можливостями." #: ../../configuration/trafficpolicy/index.rst:479 msgid "When running it at 1Gbit and lower, you may want to reduce the `queue-limit` to 1000 packets or less. In rates like 10Mbit, you may want to set it to 600 packets." -msgstr "When running it at 1Gbit and lower, you may want to reduce the `queue-limit` to 1000 packets or less. In rates like 10Mbit, you may want to set it to 600 packets." +msgstr "Якщо він працює на швидкості 1 Гбіт і нижче, можливо, ви захочете зменшити `ліміт черги` до 1000 пакетів або менше. Для таких швидкостей, як 10 Мбіт, ви можете встановити 600 пакетів." #: ../../configuration/protocols/pim.rst:113 msgid "When sending PIM hello packets tell PIM to not send any v6 secondary addresses on the interface. This information is used to allow PIM to use v6 nexthops in it's decision for :abbr:`RPF (Reverse Path Forwarding)` lookup if this option is not set (default)." @@ -17319,60 +19088,68 @@ msgstr "When sending PIM hello packets tell PIM to not send any v6 secondary add #: ../../configuration/interfaces/pppoe.rst:108 msgid "When set the interface is enabled for \"dial-on-demand\"." -msgstr "When set the interface is enabled for \"dial-on-demand\"." +msgstr "Коли встановлено, інтерфейс увімкнено для «набору номера за вимогою»." #: ../../configuration/vpn/dmvpn.rst:144 msgid "When specified, this should be the only keyword for the interface." -msgstr "When specified, this should be the only keyword for the interface." +msgstr "Якщо вказано, це має бути єдине ключове слово для інтерфейсу." -#: ../../configuration/system/option.rst:60 +#: ../../configuration/system/option.rst:90 msgid "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." -msgstr "When starting a VyOS live system (the installation CD) the configured keyboard layout defaults to US. As this might not suite everyones use case you can adjust the used keyboard layout on the system console." +msgstr "Під час запуску живої системи VyOS (інсталяційний компакт-диск) налаштованою розкладкою клавіатури за замовчуванням є США. Оскільки це може не підходити для всіх, ви можете налаштувати використовувану розкладку клавіатури на системній консолі." #: ../../configuration/service/dhcp-server.rst:63 #: ../../configuration/service/dhcp-server.rst:152 msgid "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." -msgstr "When the DHCP server is considering dynamically allocating an IP address to a client, it first sends an ICMP Echo request (a ping) to the address being assigned. It waits for a second, and if no ICMP Echo response has been heard, it assigns the address." +msgstr "Коли сервер DHCP розглядає можливість динамічного призначення IP-адреси клієнту, він спочатку надсилає запит ICMP Echo (ping) на призначену адресу. Він чекає секунду, і якщо відповідь ICMP Echo не було почуто, він призначає адресу." -#: ../../configuration/vpn/site2site_ipsec.rst:416 +#: ../../configuration/vpn/site2site_ipsec.rst:419 msgid "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." -msgstr "When the close-action option is set on the peers, the connection-type of each peer has to considered carefully. For example, if the option is set on both peers, then both would attempt to initiate and hold open multiple copies of each child SA. This might lead to instability of the device or cpu/memory utilization." +msgstr "Коли на однорангових вузлах встановлено опцію близької дії, потрібно ретельно розглянути тип підключення кожного однорангового вузла. Наприклад, якщо опцію встановлено на обох вузлах, обидва намагатимуться ініціювати та утримувати відкриті кілька копій кожного дочірнього SA. Це може призвести до нестабільної роботи пристрою або використання ЦП/пам’яті." #: ../../configuration/firewall/global-options.rst:43 msgid "When the command above is set, VyOS will answer every ICMP echo request addressed to itself, but that will only happen if no other rule is applied dropping or rejecting local echo requests. In case of conflict, VyOS will not answer ICMP echo requests." -msgstr "When the command above is set, VyOS will answer every ICMP echo request addressed to itself, but that will only happen if no other rule is applied dropping or rejecting local echo requests. In case of conflict, VyOS will not answer ICMP echo requests." +msgstr "Якщо встановлено наведену вище команду, VyOS відповідатиме на кожен ICMP-ехо-запит, адресований самому собі, але це станеться, лише якщо не буде застосовано жодне інше правило, що скидає або відхиляє локальні ехо-запити. У разі конфлікту VyOS не відповідатиме на ехо-запити ICMP." #: ../../configuration/firewall/global-options.rst:52 msgid "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." -msgstr "When the command above is set, VyOS will answer no ICMP echo request addressed to itself at all, no matter where it comes from or whether more specific rules are being applied to accept them." +msgstr "Якщо наведено наведену вище команду, VyOS взагалі не відповідатиме на запити відлуння ICMP, адресовані самому собі, незалежно від того, звідки вони надходять і чи застосовуються більш конкретні правила для їх прийняття." + +#: ../../configuration/highavailability/index.rst:321 +msgid "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" +msgstr "When the vrrp group is a member of the sync group will use only the sync group health check script. This example shows how to configure it for the sync group:" #: ../../_include/interface-address-with-dhcp.txt:14 msgid "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" -msgstr "When using DHCP to retrieve IPv4 address and if local customizations are needed, they should be possible using the enter and exit hooks provided. The hook dirs are:" +msgstr "Під час використання DHCP для отримання адреси IPv4 і якщо потрібні локальні налаштування, вони повинні бути можливими за допомогою наданих гаків входу та виходу. Каталоги гаків:" #: ../../configuration/interfaces/bonding.rst:505 msgid "When using EVE-NG to lab this environment ensure you are using e1000 as the desired driver for your VyOS network interfaces. When using the regular virtio network driver no LACP PDUs will be sent by VyOS thus the port-channel will never become active!" -msgstr "When using EVE-NG to lab this environment ensure you are using e1000 as the desired driver for your VyOS network interfaces. When using the regular virtio network driver no LACP PDUs will be sent by VyOS thus the port-channel will never become active!" +msgstr "Використовуючи EVE-NG для випробування цього середовища, переконайтеся, що ви використовуєте e1000 як бажаний драйвер для ваших мережевих інтерфейсів VyOS. Під час використання звичайного мережевого драйвера virtio жодні LACP PDU не надсилатимуться VyOS, тому порт-канал ніколи не стане активним!" #: ../../configuration/nat/nat44.rst:365 msgid "When using NAT for a large number of host systems it recommended that a minimum of 1 IP address is used to NAT every 256 host systems. This is due to the limit of 65,000 port numbers available for unique translations and a reserving an average of 200-300 sessions per host system." -msgstr "When using NAT for a large number of host systems it recommended that a minimum of 1 IP address is used to NAT every 256 host systems. This is due to the limit of 65,000 port numbers available for unique translations and a reserving an average of 200-300 sessions per host system." +msgstr "При використанні NAT для великої кількості хост-систем рекомендується використовувати принаймні 1 IP-адресу для NAT на кожні 256 хост-систем. Це пов’язано з обмеженням у 65 000 номерів портів, доступних для унікальних перекладів, і резервуванням у середньому 200–300 сеансів на одну хост-систему." #: ../../configuration/nat/nat44.rst:250 msgid "When using NAT for a large number of host systems it recommended that a minimum of 1 IP address is used to NAT every 256 private host systems. This is due to the limit of 65,000 port numbers available for unique translations and a reserving an average of 200-300 sessions per host system." -msgstr "When using NAT for a large number of host systems it recommended that a minimum of 1 IP address is used to NAT every 256 private host systems. This is due to the limit of 65,000 port numbers available for unique translations and a reserving an average of 200-300 sessions per host system." +msgstr "При використанні NAT для великої кількості хост-систем рекомендується використовувати принаймні 1 IP-адресу для NAT на кожні 256 приватних хост-систем. Це пов’язано з обмеженням у 65 000 номерів портів, доступних для унікальних перекладів, і резервуванням у середньому 200–300 сеансів на одну хост-систему." #: ../../configuration/protocols/rpki.rst:151 msgid "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." -msgstr "When using SSH, known-hosts-file, private-key-file and public-key-file are mandatory options." +msgstr "Під час використання SSH обов’язковими параметрами є файл відомих хостів, файл приватного ключа та файл відкритого ключа." + +#: ../../configuration/protocols/rpki.rst:161 +msgid "When using SSH, private-key-file and public-key-file are mandatory options." +msgstr "When using SSH, private-key-file and public-key-file are mandatory options." #: ../../configuration/vpn/openconnect.rst:222 msgid "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" -msgstr "When using Time-based one-time password (TOTP) (OTP HOTP-time), be sure that the time on the server and the OTP token generator are synchronized by NTP" +msgstr "Використовуючи одноразовий пароль на основі часу (TOTP) (OTP HOTP-time), переконайтеся, що час на сервері та генератор маркерів OTP синхронізовано за допомогою NTP" #: ../../configuration/interfaces/vti.rst:25 msgid "When using site-to-site IPsec with VTI interfaces, be sure to disable route autoinstall" -msgstr "When using site-to-site IPsec with VTI interfaces, be sure to disable route autoinstall" +msgstr "Під час використання IPsec типу «сайт-сайт» з інтерфейсами VTI обов’язково вимкніть автоматичне встановлення маршруту" #: ../../configuration/interfaces/pppoe.rst:157 msgid "When using the IPv6 protocol, MRU must be at least 1280 bytes." @@ -17380,7 +19157,7 @@ msgstr "When using the IPv6 protocol, MRU must be at least 1280 bytes." #: ../../configuration/interfaces/bonding.rst:398 msgid "When utilizing VyOS in an environment with Arista gear you can use this blue print as an initial setup to get an LACP bond / port-channel operational between those two devices." -msgstr "When utilizing VyOS in an environment with Arista gear you can use this blue print as an initial setup to get an LACP bond / port-channel operational between those two devices." +msgstr "Використовуючи VyOS у середовищі з обладнанням Arista, ви можете використовувати цей проект як початкове налаштування, щоб забезпечити роботу зв’язку LACP/каналу порту між цими двома пристроями." #: ../../configuration/firewall/general.rst:57 msgid "Where, main key words and configuration paths that needs to be understood:" @@ -17388,7 +19165,7 @@ msgstr "Where, main key words and configuration paths that needs to be understoo #: ../../configuration/protocols/bgp.rst:108 msgid "Where both routes were received from eBGP peers, then prefer the route which is already selected. Note that this check is not applied if :cfgcmd:`bgp bestpath compare-routerid` is configured. This check can prevent some cases of oscillation." -msgstr "Where both routes were received from eBGP peers, then prefer the route which is already selected. Note that this check is not applied if :cfgcmd:`bgp bestpath compare-routerid` is configured. This check can prevent some cases of oscillation." +msgstr "Якщо обидва маршрути отримано від вузлів eBGP, віддайте перевагу маршруту, який уже вибрано. Зауважте, що ця перевірка не застосовується, якщо налаштовано :cfgcmd:`bgp bestpath compare-routerid`. Ця перевірка може запобігти деяким випадкам коливань." #: ../../configuration/firewall/ipv4.rst:42 msgid "Where firewall base chain to configure firewall filtering rules for transit traffic is ``set firewall ipv4 forward filter ...``, which happens in stage 5, highlightened with red color." @@ -17400,7 +19177,7 @@ msgstr "Where firewall base chain to configure firewall filtering rules for tran #: ../../configuration/protocols/bgp.rst:86 msgid "Where routes with a MED were received from the same AS, prefer the route with the lowest MED." -msgstr "Where routes with a MED were received from the same AS, prefer the route with the lowest MED." +msgstr "Якщо маршрути з MED були отримані від однієї AS, віддайте перевагу маршруту з найнижчим MED." #: ../../_include/interface-ipv6.txt:77 msgid "Whether to accept DAD (Duplicate Address Detection)." @@ -17408,97 +19185,108 @@ msgstr "Whether to accept DAD (Duplicate Address Detection)." #: ../../configuration/nat/nat44.rst:342 msgid "Which generates the following configuration:" -msgstr "Which generates the following configuration:" +msgstr "Що генерує таку конфігурацію:" #: ../../configuration/nat/nat44.rst:458 msgid "Which results in a configuration of:" -msgstr "Which results in a configuration of:" +msgstr "Що призводить до конфігурації:" #: ../../configuration/nat/nat44.rst:542 msgid "Which would generate the following NAT destination configuration:" -msgstr "Which would generate the following NAT destination configuration:" +msgstr "Що створить таку конфігурацію призначення NAT:" #: ../../configuration/firewall/groups.rst:44 msgid "While **network groups** accept IP networks in CIDR notation, specific IP addresses can be added as a 32-bit prefix. If you foresee the need to add a mix of addresses and networks, the network group is recommended." -msgstr "While **network groups** accept IP networks in CIDR notation, specific IP addresses can be added as a 32-bit prefix. If you foresee the need to add a mix of addresses and networks, the network group is recommended." +msgstr "Хоча **мережеві групи** приймають IP-мережі в нотації CIDR, певні IP-адреси можна додавати як 32-розрядний префікс. Якщо ви передбачаєте необхідність додати поєднання адрес і мереж, рекомендовано групу мереж." #: ../../configuration/interfaces/openvpn.rst:43 msgid "While many are aware of OpenVPN as a Client VPN solution, it is often overlooked as a site-to-site VPN solution due to lack of support for this mode in many router platforms." -msgstr "While many are aware of OpenVPN as a Client VPN solution, it is often overlooked as a site-to-site VPN solution due to lack of support for this mode in many router platforms." +msgstr "Хоча багато хто знає про OpenVPN як про клієнтське рішення VPN, його часто не помічають як рішення VPN типу "сайт-сайт" через відсутність підтримки цього режиму на багатьох платформах маршрутизаторів." #: ../../configuration/interfaces/tunnel.rst:213 msgid "While normal GRE is for layer 3, GRETAP is for layer 2. GRETAP can encapsulate Ethernet frames, thus it can be bridged with other interfaces to create datalink layer segments that span multiple remote sites." -msgstr "While normal GRE is for layer 3, GRETAP is for layer 2. GRETAP can encapsulate Ethernet frames, thus it can be bridged with other interfaces to create datalink layer segments that span multiple remote sites." +msgstr "У той час як звичайний GRE призначений для рівня 3, GRETAP призначений для рівня 2. GRETAP може інкапсулювати кадри Ethernet, таким чином його можна з’єднати з іншими інтерфейсами для створення сегментів рівня каналу даних, які охоплюють кілька віддалених сайтів." #: ../../configuration/service/ssh.rst:125 msgid "Whitelist of addresses and networks. Always allow inbound connections from these systems." -msgstr "Whitelist of addresses and networks. Always allow inbound connections from these systems." +msgstr "Білий список адрес і мереж. Завжди дозволяйте вхідні з’єднання з цих систем." #: ../../configuration/interfaces/openvpn.rst:642 msgid "Will add ``persistent-key`` at the end of the generated OpenVPN configuration. Please use this only as last resort - things might break and OpenVPN won't start if you pass invalid options/syntax." -msgstr "Will add ``persistent-key`` at the end of the generated OpenVPN configuration. Please use this only as last resort - things might break and OpenVPN won't start if you pass invalid options/syntax." +msgstr "Додасть ``persistent-key`` в кінці згенерованої конфігурації OpenVPN. Будь ласка, використовуйте це лише в крайньому випадку - щось може зламатися, і OpenVPN не запуститься, якщо ви передасте недійсні параметри/синтаксис." #: ../../configuration/interfaces/openvpn.rst:649 msgid "Will add ``push \"keepalive 1 10\"`` to the generated OpenVPN config file." -msgstr "Will add ``push \"keepalive 1 10\"`` to the generated OpenVPN config file." +msgstr "Буде додано ``push "keepalive 1 10"`` до створеного файлу конфігурації OpenVPN." #: ../../configuration/system/flow-accounting.rst:56 msgid "Will be recorded only packets/flows on **incoming** direction in configured interfaces by default." -msgstr "Will be recorded only packets/flows on **incoming** direction in configured interfaces by default." +msgstr "Будуть записані лише пакети/потоки у **вхідному** напрямку в налаштованих інтерфейсах за замовчуванням." #: ../../configuration/service/dhcp-server.rst:31 msgid "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" -msgstr "Will drop `<shared-network-name>_` from client DNS record, using only the host declaration name and domain: `<hostname>.<domain-name>`" +msgstr "Випаде `<shared-network-name> _` із запису DNS клієнта, використовуючи лише назву декларації хоста та домен: `<hostname> .<domain-name> `" + +#: ../../configuration/vpn/ipsec.rst:501 +msgid "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." +msgstr "Windows 10 does not allow a user to choose the integrity and encryption ciphers using the GUI and it uses some older proposals by default. A user can only change the proposals on the client side by configuring the IPSec connection profile via PowerShell." + +#: ../../configuration/service/pppoe-server.rst:579 +#: ../../configuration/vpn/l2tp.rst:514 +#: ../../configuration/vpn/pptp.rst:438 +#: ../../configuration/vpn/sstp.rst:472 +msgid "Windows Internet Name Service (WINS) servers propagated to client" +msgstr "Windows Internet Name Service (WINS) servers propagated to client" #: ../../configuration/vpn/remoteaccess_ipsec.rst:147 msgid "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." msgstr "Windows expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/interfaces/wireguard.rst:7 -#: ../../configuration/pki/index.rst:132 +#: ../../configuration/pki/index.rst:134 msgid "WireGuard" msgstr "WireGuard" #: ../../configuration/interfaces/wireguard.rst:0 msgid "WireGuard Client QR code" -msgstr "WireGuard Client QR code" +msgstr "QR-код клієнта WireGuard" #: ../../configuration/interfaces/wireguard.rst:142 msgid "WireGuard interface itself uses address 10.1.0.1/30" -msgstr "WireGuard interface itself uses address 10.1.0.1/30" +msgstr "Сам інтерфейс WireGuard використовує адресу 10.1.0.1/30" #: ../../configuration/interfaces/wireguard.rst:9 msgid "WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. See https://www.wireguard.com for more information." -msgstr "WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. See https://www.wireguard.com for more information." +msgstr "WireGuard — це надзвичайно проста, але швидка та сучасна VPN, яка використовує найсучаснішу криптографію. Для отримання додаткової інформації відвідайте https://www.wireguard.com." #: ../../configuration/interfaces/wireguard.rst:25 msgid "WireGuard requires the generation of a keypair, which includes a private key to decrypt incoming traffic, and a public key for peer(s) to encrypt traffic." -msgstr "WireGuard requires the generation of a keypair, which includes a private key to decrypt incoming traffic, and a public key for peer(s) to encrypt traffic." +msgstr "WireGuard вимагає генерації пари ключів, яка включає закритий ключ для розшифровки вхідного трафіку та відкритий ключ для однорангового (ів) шифрування трафіку." #: ../../configuration/interfaces/wwan.rst:68 msgid "WirelessModem (WWAN) options" -msgstr "WirelessModem (WWAN) options" +msgstr "Параметри бездротового модему (WWAN)." #: ../../configuration/interfaces/wireless.rst:353 #: ../../configuration/interfaces/wireless.rst:553 msgid "Wireless channel ``1``" -msgstr "Wireless channel ``1``" +msgstr "Бездротовий канал ``1``" #: ../../configuration/interfaces/wireless.rst:119 msgid "Wireless device type for this interface" -msgstr "Wireless device type for this interface" +msgstr "Тип бездротового пристрою для цього інтерфейсу" #: ../../configuration/interfaces/wireless.rst:99 msgid "Wireless hardware device used as underlay radio." -msgstr "Wireless hardware device used as underlay radio." +msgstr "Бездротовий апаратний пристрій, який використовується як підкладка радіо." #: ../../configuration/interfaces/wireless.rst:40 msgid "Wireless options" -msgstr "Wireless options" +msgstr "Бездротові параметри" #: ../../configuration/interfaces/wireless.rst:301 msgid "Wireless options (Station/Client)" -msgstr "Wireless options (Station/Client)" +msgstr "Бездротові параметри (станція/клієнт)" #: ../../configuration/firewall/index.rst:7 msgid "With VyOS being based on top of Linux and its kernel, the Netfilter project created the iptables and now the successor nftables for the Linux kernel to work directly on the data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g. a web server OR another device)." @@ -17506,165 +19294,173 @@ msgstr "With VyOS being based on top of Linux and its kernel, the Netfilter proj #: ../../configuration/interfaces/wireguard.rst:269 msgid "With WireGuard, a Road Warrior VPN config is similar to a site-to-site VPN. It just lacks the ``address`` and ``port`` statements." -msgstr "With WireGuard, a Road Warrior VPN config is similar to a site-to-site VPN. It just lacks the ``address`` and ``port`` statements." +msgstr "З WireGuard конфігурація VPN Road Warrior схожа на VPN типу "сайт-сайт". У ньому лише відсутні оператори ``адреса`` і ``порт``." #: ../../configuration/interfaces/pppoe.rst:336 msgid "With the ``name-server`` option set to ``none``, VyOS will ignore the nameservers your ISP sends you and thus you can fully rely on the ones you have configured statically." -msgstr "With the ``name-server`` option set to ``none``, VyOS will ignore the nameservers your ISP sends you and thus you can fully rely on the ones you have configured statically." +msgstr "Якщо для параметра ``name-server`` встановлено значення ``none``, VyOS ігноруватиме сервери імен, які надсилає вам ваш провайдер, тому ви можете повністю покладатися на ті, які ви налаштували статично." #: ../../configuration/firewall/global-options.rst:31 msgid "With the firewall you can set rules to accept, drop or reject ICMP in, out or local traffic. You can also use the general **firewall all-ping** command. This command affects only to LOCAL (packets destined for your VyOS system), not to IN or OUT traffic." -msgstr "With the firewall you can set rules to accept, drop or reject ICMP in, out or local traffic. You can also use the general **firewall all-ping** command. This command affects only to LOCAL (packets destined for your VyOS system), not to IN or OUT traffic." +msgstr "За допомогою брандмауера ви можете встановлювати правила прийняття, видалення або відхилення вхідного, вихідного або локального трафіку ICMP. Ви також можете використовувати загальну команду **firewall all-ping**. Ця команда впливає лише на LOCAL (пакети, призначені для вашої системи VyOS), а не на вхідний або вихідний трафік." #: ../../configuration/loadbalancing/reverse-proxy.rst:75 msgid "With this command, you can specify how the URL path should be matched against incoming requests." -msgstr "With this command, you can specify how the URL path should be matched against incoming requests." +msgstr "За допомогою цієї команди ви можете вказати, як URL-шлях має відповідати вхідним запитам." + +#: ../../configuration/firewall/index.rst:166 +msgid "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." +msgstr "With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." #: ../../configuration/firewall/index.rst:166 msgid "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." msgstr "With zone-based firewalls a new concept was implemented, in addtion to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in addition to the existing inbound and outbound rules from the traditional concept above." -#: ../../configuration/service/dhcp-server.rst:257 -#: ../../configuration/service/dhcp-server.rst:262 -#: ../../configuration/service/dhcp-server.rst:267 -#: ../../configuration/service/dhcp-server.rst:277 -#: ../../configuration/service/dhcp-server.rst:282 -#: ../../configuration/service/dhcp-server.rst:312 -#: ../../configuration/service/dhcp-server.rst:317 -#: ../../configuration/service/dhcp-server.rst:322 -#: ../../configuration/service/dhcp-server.rst:342 -#: ../../configuration/service/dhcp-server.rst:347 -#: ../../configuration/service/dhcp-server.rst:357 +#: ../../configuration/service/dhcp-server.rst:313 +#: ../../configuration/service/dhcp-server.rst:318 +#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:338 +#: ../../configuration/service/dhcp-server.rst:368 +#: ../../configuration/service/dhcp-server.rst:373 +#: ../../configuration/service/dhcp-server.rst:378 +#: ../../configuration/service/dhcp-server.rst:398 +#: ../../configuration/service/dhcp-server.rst:403 +#: ../../configuration/service/dhcp-server.rst:413 msgid "Y" -msgstr "Y" +msgstr "І" #: ../../configuration/firewall/zone.rst:118 msgid "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." -msgstr "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." +msgstr "Ви завжди застосовуєте набір правил до зони з іншої зони, тому рекомендується створити один набір правил для кожної пари зон." -#: ../../configuration/system/login.rst:365 +#: ../../configuration/system/login.rst:369 msgid "You are able to set post-login or pre-login banner messages to display certain information for this system." -msgstr "You are able to set post-login or pre-login banner messages to display certain information for this system." +msgstr "Ви можете налаштувати банерні повідомлення після входу або перед входом, щоб відображати певну інформацію для цієї системи." #: ../../configuration/service/snmp.rst:206 msgid "You are be able to download the files using SCP, once the SSH service has been activated like so" -msgstr "You are be able to download the files using SCP, once the SSH service has been activated like so" +msgstr "Ви зможете завантажувати файли за допомогою SCP, якщо послугу SSH таким чином активовано" #: ../../configuration/highavailability/index.rst:162 msgid "You can also configure the time interval for preemption with the \"preempt-delay\" option. For example, to set the higher priority router to take over in 180 seconds, use:" -msgstr "You can also configure the time interval for preemption with the \"preempt-delay\" option. For example, to set the higher priority router to take over in 180 seconds, use:" +msgstr "Ви також можете налаштувати часовий інтервал для випередження за допомогою параметра "preempt-delay". Наприклад, щоб налаштувати маршрутизатор з вищим пріоритетом, щоб він переймав роботу через 180 секунд, скористайтеся:" #: ../../configuration/system/conntrack.rst:99 msgid "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." -msgstr "You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to create a rule defining the packet and flow selector." +msgstr "Ви також можете визначити спеціальні значення часу очікування для застосування до певної підмножини з’єднань на основі селектора пакетів і потоків. Для цього вам потрібно створити правило, що визначає селектор пакетів і потоків." -#: ../../configuration/service/dns.rst:312 +#: ../../configuration/service/dns.rst:406 msgid "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" -msgstr "You can also keep different DNS zone updated. Just create a new config node: ``set service dns dynamic interface <interface> rfc2136 <other-service-name>``" +msgstr "Ви також можете постійно оновлювати різні зони DNS. Просто створіть новий вузол конфігурації: ``set service dns dynamic interface<interface> rfc2136<other-service-name> ``" -#: ../../configuration/system/ipv6.rst:107 +#: ../../configuration/service/router-advert.rst:58 +msgid "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." +msgstr "You can also opt for using `::/64` as prefix for your :abbr:`RAs (Router Advertisements)`. This will take the IPv6 GUA prefix assigned to the interface, which comes in handy when using DHCPv6-PD." + +#: ../../configuration/system/ipv6.rst:120 msgid "You can also specify which IPv6 access-list should be shown:" -msgstr "You can also specify which IPv6 access-list should be shown:" +msgstr "Ви також можете вказати, який список доступу IPv6 має відображатися:" #: ../../configuration/protocols/pim6.rst:42 msgid "You can also tune multicast with the following commands." -msgstr "You can also tune multicast with the following commands." +msgstr "Ви також можете налаштувати групову розсилку за допомогою наступних команд." #: ../../configuration/service/pppoe-server.rst:139 msgid "You can also use another attributes for identify client for disconnect, like Framed-IP-Address, Acct-Session-Id, etc. Result commands appears in log." -msgstr "You can also use another attributes for identify client for disconnect, like Framed-IP-Address, Acct-Session-Id, etc. Result commands appears in log." +msgstr "Ви також можете використовувати інші атрибути для ідентифікації клієнта для відключення, як-от Framed-IP-Address, Acct-Session-Id тощо. Команди результатів з’являються в журналі." #: ../../configuration/trafficpolicy/index.rst:200 msgid "You can also write a description for a filter:" -msgstr "You can also write a description for a filter:" +msgstr "Ви також можете написати опис для фільтра:" -#: ../../configuration/system/login.rst:78 +#: ../../configuration/system/login.rst:82 msgid "You can assign multiple keys to the same user by using a unique identifier per SSH key." -msgstr "You can assign multiple keys to the same user by using a unique identifier per SSH key." +msgstr "Ви можете призначити кілька ключів одному користувачеві, використовуючи унікальний ідентифікатор для кожного ключа SSH." #: ../../configuration/nat/nat44.rst:400 msgid "You can avoid the \"leaky\" behavior by using a firewall policy that drops \"invalid\" state packets." -msgstr "You can avoid the \"leaky\" behavior by using a firewall policy that drops \"invalid\" state packets." +msgstr "Ви можете уникнути «витоку» поведінки, використовуючи політику брандмауера, яка відкидає «недійсні» пакети стану." #: ../../configuration/interfaces/bonding.rst:318 msgid "You can check your NIC driver by issuing :opcmd:`show interfaces ethernet eth0 physical | grep -i driver`" -msgstr "You can check your NIC driver by issuing :opcmd:`show interfaces ethernet eth0 physical | grep -i driver`" +msgstr "Ви можете перевірити драйвер мережевої карти, виконавши :opcmd:`show interfaces ethernet eth0 physical | grep -i драйвер`" #: ../../configuration/trafficpolicy/index.rst:314 msgid "You can configure a policy into a class through the ``queue-type`` setting." -msgstr "You can configure a policy into a class through the ``queue-type`` setting." +msgstr "Ви можете налаштувати політику в клас за допомогою параметра ``queue-type``." #: ../../configuration/trafficpolicy/index.rst:559 msgid "You can configure classes (up to 4090) with different settings and a default policy which will be applied to any traffic not matching any of the configured classes." -msgstr "You can configure classes (up to 4090) with different settings and a default policy which will be applied to any traffic not matching any of the configured classes." +msgstr "Ви можете налаштувати класи (до 4090) з різними параметрами та політикою за замовчуванням, яка застосовуватиметься до будь-якого трафіку, що не відповідає жодному з налаштованих класів." #: ../../configuration/system/flow-accounting.rst:53 msgid "You can configure multiple interfaces which whould participate in flow accounting." -msgstr "You can configure multiple interfaces which whould participate in flow accounting." +msgstr "Ви можете налаштувати кілька інтерфейсів, які будуть брати участь в обліку потоків." #: ../../configuration/system/sflow.rst:32 msgid "You can configure multiple interfaces which whould participate in sflow accounting." -msgstr "You can configure multiple interfaces which whould participate in sflow accounting." +msgstr "Ви можете налаштувати кілька інтерфейсів, які будуть брати участь в обліку sflow." #: ../../_include/interface-vlan-8021q.txt:29 msgid "You can create multiple VLAN interfaces on a physical interface. The VLAN ID range is from 0 to 4094." -msgstr "You can create multiple VLAN interfaces on a physical interface. The VLAN ID range is from 0 to 4094." +msgstr "Ви можете створити кілька інтерфейсів VLAN на фізичному інтерфейсі. Діапазон ідентифікаторів VLAN від 0 до 4094." #: ../../configuration/highavailability/index.rst:72 msgid "You can disable a VRRP group with ``disable`` option:" -msgstr "You can disable a VRRP group with ``disable`` option:" +msgstr "Ви можете вимкнути групу VRRP за допомогою параметра ``disable``:" -#: ../../configuration/system/ipv6.rst:122 +#: ../../configuration/system/ipv6.rst:135 msgid "You can get more specific OSPFv3 information by using the parameters shown below:" -msgstr "You can get more specific OSPFv3 information by using the parameters shown below:" +msgstr "Ви можете отримати більш точну інформацію OSPFv3 за допомогою наведених нижче параметрів:" #: ../../configuration/interfaces/wireguard.rst:168 msgid "You can not assign the same allowed-ips statement to multiple WireGuard peers. This a design decision. For more information please check the `WireGuard mailing list`_." -msgstr "You can not assign the same allowed-ips statement to multiple WireGuard peers. This a design decision. For more information please check the `WireGuard mailing list`_." +msgstr "Ви не можете призначити той самий оператор дозволених IP-адрес декільком вузлам WireGuard. Це дизайнерське рішення. Для отримання додаткової інформації перегляньте `список розсилки WireGuard`_." #: ../../configuration/service/mdns.rst:46 msgid "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" -msgstr "You can not run this in a VRRP setup, if multiple mDNS repeaters are launched in a subnet you will experience the mDNS packet storm death!" +msgstr "Ви не можете запустити це в налаштуваннях VRRP, якщо в підмережі запущено кілька повторювачів mDNS, ви відчуєте загибель пакетного шторму mDNS!" -#: ../../configuration/vpn/sstp.rst:332 +#: ../../configuration/vpn/sstp.rst:505 msgid "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." -msgstr "You can now \"dial\" the peer with the follwoing command: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." +msgstr "Тепер ви можете «набрати» вузла за допомогою такої команди: ``sstpc --log-level 4 --log-stderr --user vyos --password vyos vpn.example.com -- call vyos``." -#: ../../configuration/system/login.rst:443 +#: ../../configuration/system/login.rst:447 msgid "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." -msgstr "You can now SSH into your system using admin/admin as a default user supplied from the ``lfkeitel/tacacs_plus:latest`` container." +msgstr "Тепер ви можете підключатися до вашої системи через SSH, використовуючи admin/admin як користувача за замовчуванням, який надається з контейнера ``lfkeitel/tacacs_plus:latest``." -#: ../../configuration/trafficpolicy/index.rst:1158 +#: ../../configuration/trafficpolicy/index.rst:1226 msgid "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" -msgstr "You can only apply one policy per interface and direction, but you could reuse a policy on different interfaces and directions:" +msgstr "Ви можете застосувати лише одну політику для кожного інтерфейсу та напрямку, але ви можете повторно використовувати політику для різних інтерфейсів та напрямків:" #: ../../configuration/service/broadcast-relay.rst:51 msgid "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" -msgstr "You can run the UDP broadcast relay service on multiple routers connected to a subnet. There is **NO** UDP broadcast relay packet storm!" +msgstr "Ви можете запустити службу широкомовної ретрансляції UDP на кількох маршрутизаторах, підключених до підмережі. Існує **НЕМАЄ** UDP широкомовного ретрансляційного пакетного шторму!" -#: ../../configuration/service/dhcp-server.rst:176 +#: ../../configuration/service/dhcp-server.rst:226 msgid "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." -msgstr "You can specify a static DHCP assignment on a per host basis. You will need the MAC address of the station and your desired IP address. The address must be inside the subnet definition but can be outside of the range statement." +msgstr "Ви можете вказати статичне призначення DHCP для кожного хоста. Вам знадобиться MAC-адреса станції та бажана IP-адреса. Адреса має бути всередині визначення підмережі, але може бути поза оператором діапазону." #: ../../configuration/service/snmp.rst:197 msgid "You can test the SNMPv3 functionality from any linux based system, just run the following command: ``snmpwalk -v 3 -u vyos -a SHA -A vyos12345678 -x AES -X vyos12345678 -l authPriv 192.0.2.1 .1``" -msgstr "You can test the SNMPv3 functionality from any linux based system, just run the following command: ``snmpwalk -v 3 -u vyos -a SHA -A vyos12345678 -x AES -X vyos12345678 -l authPriv 192.0.2.1 .1``" +msgstr "Ви можете протестувати функціональність SNMPv3 з будь-якої системи на базі Linux, просто запустіть таку команду: ``snmpwalk -v 3 -u vyos -a SHA -A vyos12345678 -x AES -X vyos12345678 -l authPriv 192.0.2.1 .1``" #: ../../configuration/firewall/general-legacy.rst:774 msgid "You can use wildcard ``*`` to match a group of interfaces." -msgstr "You can use wildcard ``*`` to match a group of interfaces." +msgstr "Ви можете використовувати символ підстановки ``*``, щоб відповідати групі інтерфейсів." #: ../../configuration/highavailability/index.rst:40 msgid "You can verify your VRRP group status with the operational mode ``run show vrrp`` command:" -msgstr "You can verify your VRRP group status with the operational mode ``run show vrrp`` command:" +msgstr "Ви можете перевірити статус своєї групи VRRP за допомогою команди робочого режиму ``run show vrrp``:" #: ../../configuration/policy/examples.rst:208 msgid "You can view that the policy is being correctly (or incorrectly) utilised with the following command:" -msgstr "You can view that the policy is being correctly (or incorrectly) utilised with the following command:" +msgstr "Ви можете переконатися, що політика використовується правильно (чи неправильно), за допомогою такої команди:" #: ../../configuration/protocols/ospf.rst:1344 msgid "You cannot easily redistribute IPv6 routes via OSPFv3 on a WireGuard interface link. This requires you to configure link-local addresses manually on the WireGuard interfaces, see :vytask:`T1483`." -msgstr "You cannot easily redistribute IPv6 routes via OSPFv3 on a WireGuard interface link. This requires you to configure link-local addresses manually on the WireGuard interfaces, see :vytask:`T1483`." +msgstr "Ви не можете легко перерозподіляти маршрути IPv6 через OSPFv3 за посиланням інтерфейсу WireGuard. Для цього потрібно вручну налаштувати локальні адреси посилань на інтерфейсах WireGuard, див. :vytask:`T1483`." #: ../../configuration/interfaces/openvpn.rst:119 msgid "You do **not** need to copy the certificate to the other router. Instead, you need to retrieve its SHA-256 fingerprint. OpenVPN only supports SHA-256 fingerprints at the moment, so you need to use the following command:" @@ -17672,39 +19468,39 @@ msgstr "You do **not** need to copy the certificate to the other router. Instead #: ../../configuration/system/flow-accounting.rst:135 msgid "You may also additionally configure timeouts for different types of connections." -msgstr "You may also additionally configure timeouts for different types of connections." +msgstr "Ви також можете додатково налаштувати тайм-аути для різних типів підключень." #: ../../configuration/protocols/bgp.rst:291 msgid "You may prefer locally configured capabilities more than the negotiated capabilities even though remote peer sends capabilities. If the peer is configured by :cfgcmd:`override-capability`, VyOS ignores received capabilities then override negotiated capabilities with configured values." -msgstr "You may prefer locally configured capabilities more than the negotiated capabilities even though remote peer sends capabilities. If the peer is configured by :cfgcmd:`override-capability`, VyOS ignores received capabilities then override negotiated capabilities with configured values." +msgstr "Ви можете віддати перевагу локально налаштованим можливостям більше, ніж узгодженим можливостям, навіть якщо віддалені однорангові надсилають можливості. Якщо вузол налаштовано за допомогою :cfgcmd:`override-capability`, VyOS ігнорує отримані можливості, а потім замінює узгоджені можливості налаштованими значеннями." #: ../../configuration/protocols/bgp.rst:314 msgid "You may want to disable sending Capability Negotiation OPEN message optional parameter to the peer when remote peer does not implement Capability Negotiation. Please use :cfgcmd:`disable-capability-negotiation` command to disable the feature." -msgstr "You may want to disable sending Capability Negotiation OPEN message optional parameter to the peer when remote peer does not implement Capability Negotiation. Please use :cfgcmd:`disable-capability-negotiation` command to disable the feature." +msgstr "Можливо, ви захочете вимкнути надсилання необов’язкового параметра повідомлення Capability Negotiation OPEN одноранговому вузлу, якщо віддалений вузол не реалізує Capability Negotiation. Щоб вимкнути функцію, скористайтеся командою :cfgcmd:`disable-capability-negotiation`." #: ../../configuration/firewall/zone.rst:58 msgid "You need 2 separate firewalls to define traffic: one for each direction." -msgstr "You need 2 separate firewalls to define traffic: one for each direction." +msgstr "Для визначення трафіку потрібні 2 окремі брандмауери: по одному для кожного напрямку." #: ../../configuration/system/flow-accounting.rst:14 msgid "You need to disable the in-memory table in production environments! Using :abbr:`IMT (In-Memory Table)` may lead to heavy CPU overloading and unstable flow-accounting behavior." -msgstr "You need to disable the in-memory table in production environments! Using :abbr:`IMT (In-Memory Table)` may lead to heavy CPU overloading and unstable flow-accounting behavior." +msgstr "Вам потрібно вимкнути таблицю в пам’яті у робочих середовищах! Використання :abbr:`IMT (In-Memory Table)` може призвести до сильного перевантаження ЦП і нестабільної поведінки обліку потоків." #: ../../configuration/interfaces/pppoe.rst:329 msgid "You need your PPPoE credentials from your DSL ISP in order to configure this. The usual username is in the form of name@host.net but may vary depending on ISP." -msgstr "You need your PPPoE credentials from your DSL ISP in order to configure this. The usual username is in the form of name@host.net but may vary depending on ISP." +msgstr "Щоб налаштувати це, вам знадобляться ваші облікові дані PPPoE від вашого DSL ISP. Зазвичай ім’я користувача має форму name@host.net, але може відрізнятися залежно від ISP." #: ../../configuration/policy/examples.rst:52 msgid "You now see the longer AS path." -msgstr "You now see the longer AS path." +msgstr "Тепер ви бачите довший шлях AS." #: ../../configuration/interfaces/pppoe.rst:353 msgid "You should add a firewall to your configuration above as well by assigning it to the pppoe0 itself as shown here:" -msgstr "You should add a firewall to your configuration above as well by assigning it to the pppoe0 itself as shown here:" +msgstr "Ви також повинні додати брандмауер до своєї конфігурації вище, призначивши його самому pppoe0, як показано тут:" #: ../../configuration/interfaces/openvpn.rst:227 msgid "You should also ensure that the OUTISDE_LOCAL firewall group is applied to the WAN interface and a direction (local)." -msgstr "You should also ensure that the OUTISDE_LOCAL firewall group is applied to the WAN interface and a direction (local)." +msgstr "Ви також повинні переконатися, що група брандмауера OUTISDE_LOCAL застосована до інтерфейсу WAN і напрямку (локального)." #: ../../configuration/interfaces/wireguard.rst:225 msgid "You should also ensure that the OUTSIDE_LOCAL firewall group is applied to the WAN interface and a direction (local)." @@ -17712,27 +19508,31 @@ msgstr "You should also ensure that the OUTSIDE_LOCAL firewall group is applied #: ../../configuration/interfaces/wireguard.rst:136 msgid "You will also need the public key of your peer as well as the network(s) you want to tunnel (allowed-ips) to configure a WireGuard tunnel. The public key below is always the public key from your peer, not your local one." -msgstr "You will also need the public key of your peer as well as the network(s) you want to tunnel (allowed-ips) to configure a WireGuard tunnel. The public key below is always the public key from your peer, not your local one." +msgstr "Щоб налаштувати тунель WireGuard, вам також знадобиться відкритий ключ вашого вузла, а також мережі, які ви хочете тунелювати (дозволені IP-адреси). Наведений нижче відкритий ключ завжди є відкритим ключем від вашого однорангового, а не вашого локального." #: ../../configuration/interfaces/pppoe.rst:327 msgid "Your ISPs modem is connected to port ``eth0`` of your VyOS box." -msgstr "Your ISPs modem is connected to port ``eth0`` of your VyOS box." +msgstr "Модем вашого інтернет-провайдера підключено до порту ``eth0`` вашого пристрою VyOS." + +#: ../../configuration/service/router-advert.rst:110 +msgid "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" +msgstr "Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router beeing ``2001:db8:beef:2::1``" #: ../../configuration/system/ip.rst:31 #: ../../configuration/system/ipv6.rst:27 #: ../../configuration/vrf/index.rst:44 msgid "Zebra/Kernel route filtering" -msgstr "Zebra/Kernel route filtering" +msgstr "Фільтрування маршрутів Zebra/Kernel" #: ../../configuration/system/ip.rst:33 #: ../../configuration/system/ipv6.rst:29 #: ../../configuration/vrf/index.rst:46 msgid "Zebra supports prefix-lists and Route Mapss to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel." -msgstr "Zebra supports prefix-lists and Route Mapss to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel." +msgstr "Zebra підтримує списки префіксів і Route Mapss для відповідності маршрутам, отриманим від інших компонентів FRR. Можливості дозволу/заборони, надані цими командами, можна використовувати для фільтрації маршрутів, які zebra встановлюватиме в ядро." #: ../../configuration/firewall/general-legacy.rst:944 msgid "Zone-Policy Overview" -msgstr "Zone-Policy Overview" +msgstr "Огляд зональної політики" #: ../../configuration/firewall/index.rst:159 msgid "Zone-based firewall" @@ -17740,7 +19540,7 @@ msgstr "Zone-based firewall" #: ../../configuration/firewall/zone.rst:7 msgid "Zone Based Firewall" -msgstr "Zone Based Firewall" +msgstr "Зональний брандмауер" #: ../../configuration/firewall/zone.rst:7 msgid "Zone Based Firewall (Deprecated)" @@ -17748,95 +19548,99 @@ msgstr "Zone Based Firewall (Deprecated)" #: ../../configuration/protocols/ospf.rst:792 msgid "[A.B.C.D] – link-state-id. With this specified the command displays portion of the network environment that is being described by the advertisement. The value entered depends on the advertisement’s LS type. It must be entered in the form of an IP address." -msgstr "[A.B.C.D] – link-state-id. With this specified the command displays portion of the network environment that is being described by the advertisement. The value entered depends on the advertisement’s LS type. It must be entered in the form of an IP address." +msgstr "[ABCD] – ідентифікатор стану посилання. Якщо вказати це, команда відображає частину мережевого середовища, яке описується рекламою. Введене значення залежить від типу LS оголошення. Його необхідно ввести у вигляді IP-адреси." #: ../../configuration/service/webproxy.rst:414 msgid "(This can be useful when a called service has many and/or often changing destination addresses - e.g. Netflix.)" -msgstr "(This can be useful when a called service has many and/or often changing destination addresses - e.g. Netflix.)" +msgstr "(Це може бути корисним, якщо викликана служба має багато та/або часто змінювані адреси призначення, наприклад Netflix.)" #: ../../configuration/protocols/isis.rst:52 msgid ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." -msgstr ":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing." +msgstr ":abbr:`AFI (Ідентифікатор повноважень родини адрес)` - ``49`` Значення AFI 49 — це те, що IS-IS використовує для приватної адресації." -#: ../../configuration/protocols/static.rst:152 +#: ../../configuration/protocols/static.rst:185 msgid ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." -msgstr ":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used for discovering the link layer address, such as a MAC address, associated with a given internet layer address, typically an IPv4 address. This mapping is a critical function in the Internet protocol suite. ARP was defined in 1982 by :rfc:`826` which is Internet Standard STD 37." +msgstr ":abbr:`ARP (Address Resolution Protocol)` — це протокол зв’язку, який використовується для виявлення адреси канального рівня, наприклад MAC-адреси, пов’язаної з даною адресою рівня Інтернету, як правило, адресою IPv4. Це відображення є критично важливою функцією в наборі протоколів Інтернету. ARP був визначений у 1982 році :rfc:`826`, який є стандартом Інтернету STD 37." #: ../../configuration/protocols/bfd.rst:11 msgid ":abbr:`BFD (Bidirectional Forwarding Detection)` is described and extended by the following RFCs: :rfc:`5880`, :rfc:`5881` and :rfc:`5883`." -msgstr ":abbr:`BFD (Bidirectional Forwarding Detection)` is described and extended by the following RFCs: :rfc:`5880`, :rfc:`5881` and :rfc:`5883`." +msgstr ":abbr:`BFD (Bidirectional Forwarding Detection)` описано та розширено в таких RFC: :rfc:`5880`, :rfc:`5881` та :rfc:`5883`." #: ../../configuration/protocols/bgp.rst:7 msgid ":abbr:`BGP (Border Gateway Protocol)` is one of the Exterior Gateway Protocols and the de facto standard interdomain routing protocol. The latest BGP version is 4. BGP-4 is described in :rfc:`1771` and updated by :rfc:`4271`. :rfc:`2858` adds multiprotocol support to BGP." -msgstr ":abbr:`BGP (Border Gateway Protocol)` is one of the Exterior Gateway Protocols and the de facto standard interdomain routing protocol. The latest BGP version is 4. BGP-4 is described in :rfc:`1771` and updated by :rfc:`4271`. :rfc:`2858` adds multiprotocol support to BGP." +msgstr ":abbr:`BGP (протокол прикордонного шлюзу)` є одним із протоколів зовнішніх шлюзів і де-факто стандартним протоколом міждоменного маршрутизації. Остання версія BGP – 4. BGP-4 описано в :rfc:`1771` і оновлено :rfc:`4271`. :rfc:`2858` додає багатопротокольну підтримку до BGP." #: ../../configuration/interfaces/macsec.rst:85 msgid ":abbr:`CKN (MACsec connectivity association name)` key" -msgstr ":abbr:`CKN (MACsec connectivity association name)` key" +msgstr ":abbr: Ключ CKN (назва асоціації підключення MACsec)." #: ../../configuration/vpn/dmvpn.rst:7 msgid ":abbr:`DMVPN (Dynamic Multipoint Virtual Private Network)` is a dynamic :abbr:`VPN (Virtual Private Network)` technology originally developed by Cisco. While their implementation was somewhat proprietary, the underlying technologies are actually standards based. The three technologies are:" -msgstr ":abbr:`DMVPN (Dynamic Multipoint Virtual Private Network)` is a dynamic :abbr:`VPN (Virtual Private Network)` technology originally developed by Cisco. While their implementation was somewhat proprietary, the underlying technologies are actually standards based. The three technologies are:" +msgstr ":abbr:`DMVPN (Dynamic Multipoint Virtual Private Network)` — це динамічна технологія :abbr:`VPN (Virtual Private Network)`, спочатку розроблена Cisco. Хоча їх реалізація була певною мірою запатентованою, базові технології насправді базуються на стандартах. Ці три технології:" #: ../../configuration/nat/nat44.rst:91 msgid ":abbr:`DNAT (Destination Network Address Translation)` changes the destination address of packets passing through the router, while :ref:`source-nat` changes the source address of packets. DNAT is typically used when an external (public) host needs to initiate a session with an internal (private) host. A customer needs to access a private service behind the routers public IP. A connection is established with the routers public IP address on a well known port and thus all traffic for this port is rewritten to address the internal (private) host." -msgstr ":abbr:`DNAT (Destination Network Address Translation)` changes the destination address of packets passing through the router, while :ref:`source-nat` changes the source address of packets. DNAT is typically used when an external (public) host needs to initiate a session with an internal (private) host. A customer needs to access a private service behind the routers public IP. A connection is established with the routers public IP address on a well known port and thus all traffic for this port is rewritten to address the internal (private) host." +msgstr ":abbr:`DNAT (Destination Network Address Translation)` змінює адресу призначення пакетів, що проходять через маршрутизатор, тоді як :ref:`source-nat` змінює адресу джерела пакетів. DNAT зазвичай використовується, коли зовнішньому (загальнодоступному) хосту потрібно ініціювати сеанс із внутрішнім (приватним) хостом. Клієнту потрібно отримати доступ до приватної служби за публічною IP-адресою маршрутизатора. З’єднання встановлюється з загальнодоступною IP-адресою маршрутизатора на добре відомому порту, і таким чином увесь трафік для цього порту переписується на адресу внутрішнього (приватного) хоста." #: ../../_include/interface-eapol.txt:1 msgid ":abbr:`EAP (Extensible Authentication Protocol)` over LAN (EAPoL) is a network port authentication protocol used in IEEE 802.1X (Port Based Network Access Control) developed to give a generic network sign-on to access network resources." -msgstr ":abbr:`EAP (Extensible Authentication Protocol)` over LAN (EAPoL) is a network port authentication protocol used in IEEE 802.1X (Port Based Network Access Control) developed to give a generic network sign-on to access network resources." +msgstr ":abbr:`EAP (Extensible Authentication Protocol)` через локальну мережу (EAPoL) — це протокол автентифікації мережевого порту, який використовується в IEEE 802.1X (керування мережевим доступом на основі портів), розроблений для загального входу в мережу для доступу до мережевих ресурсів." #: ../../_include/interface-ipv6.txt:25 msgid ":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address." -msgstr ":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in :rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address." +msgstr ":abbr:`EUI-64 (64-Bit Extended Unique Identifier)`, як зазначено в :rfc:`4291`, дозволяє хосту призначити йому унікальну 64-bit IPv6-адресу." #: ../../configuration/interfaces/geneve.rst:9 msgid ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports all of the capabilities of :abbr:`VXLAN (Virtual Extensible LAN)`, :abbr:`NVGRE (Network Virtualization using Generic Routing Encapsulation)`, and :abbr:`STT (Stateless Transport Tunneling)` and was designed to overcome their perceived limitations. Many believe GENEVE could eventually replace these earlier formats entirely." -msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports all of the capabilities of :abbr:`VXLAN (Virtual Extensible LAN)`, :abbr:`NVGRE (Network Virtualization using Generic Routing Encapsulation)`, and :abbr:`STT (Stateless Transport Tunneling)` and was designed to overcome their perceived limitations. Many believe GENEVE could eventually replace these earlier formats entirely." +msgstr ":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` підтримує всі можливості :abbr:`VXLAN (Virtual Extensible LAN)`, :abbr:`NVGRE (Network Virtualization using Generic Routing Encapsulation)` та :abbr:` STT (Stateless Transport Tunneling)` і був розроблений для подолання їхніх передбачуваних обмежень. Багато хто вважає, що GENEVE може зрештою повністю замінити ці попередні формати." #: ../../configuration/vpn/ipsec.rst:7 msgid ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." -msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (or IPIP/IPsec, SIT/IPsec, or any other stateless tunnel protocol over IPsec) is the usual way to protect the traffic inside a tunnel." +msgstr ":abbr:`GRE (Generic Routing Encapsulation)`, GRE/IPsec (або IPIP/IPsec, SIT/IPsec або будь-який інший тунельний протокол без збереження стану через IPsec) — це звичайний спосіб захисту трафіку всередині тунелю." -#: ../../configuration/interfaces/ethernet.rst:74 +#: ../../configuration/interfaces/ethernet.rst:90 msgid ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." -msgstr ":abbr:`GRO (Generic receive offload)` is the complement to GSO. Ideally any frame assembled by GRO should be segmented to create an identical sequence of frames using GSO, and any sequence of frames segmented by GSO should be able to be reassembled back to the original by GRO. The only exception to this is IPv4 ID in the case that the DF bit is set for a given IP header. If the value of the IPv4 ID is not sequentially incrementing it will be altered so that it is when a frame assembled via GRO is segmented via GSO." +msgstr ":abbr:`GRO (Generic receive offload)` є доповненням до GSO. В ідеалі будь-який кадр, зібраний за допомогою GRO, повинен бути сегментований для створення ідентичної послідовності кадрів за допомогою GSO, а будь-яка послідовність кадрів, сегментована за допомогою GSO, повинна мати можливість повторно зібратися до оригіналу за допомогою GRO. Єдиним винятком із цього є ідентифікатор IPv4 у випадку, якщо біт DF встановлено для певного IP-заголовка. Якщо значення ідентифікатора IPv4 не збільшується послідовно, воно буде змінено таким чином, коли кадр, зібраний через GRO, сегментується через GSO." -#: ../../configuration/interfaces/ethernet.rst:64 +#: ../../configuration/interfaces/ethernet.rst:80 msgid ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." -msgstr ":abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data broken out over multiple skbuffs that have been resized to match the MSS provided via skb_shinfo()->gso_size." +msgstr ":abbr:`GSO (Generic Segmentation Offload)` — це чисте програмне розвантаження, призначене для вирішення випадків, коли драйвери пристроїв не можуть виконувати описані вище розвантаження. Що відбувається в GSO, так це те, що даний skbuff матиме свої дані, розбиті на кілька skbuff, розмір яких було змінено відповідно до MSS, наданого через skb_shinfo()->gso_size." #: ../../configuration/protocols/igmp-proxy.rst:9 msgid ":abbr:`IGMP (Internet Group Management Protocol)` proxy sends IGMP host messages on behalf of a connected client. The configuration must define one, and only one upstream interface, and one or more downstream interfaces." -msgstr ":abbr:`IGMP (Internet Group Management Protocol)` proxy sends IGMP host messages on behalf of a connected client. The configuration must define one, and only one upstream interface, and one or more downstream interfaces." +msgstr ":abbr: Проксі-сервер `IGMP (Internet Group Management Protocol)` надсилає повідомлення хосту IGMP від імені підключеного клієнта. Конфігурація повинна визначати один і тільки один висхідний інтерфейс і один або більше низхідних інтерфейсів." #: ../../configuration/vpn/dmvpn.rst:14 msgid ":abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc:`4301`" -msgstr ":abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc:`4301`" +msgstr ":abbr:`IPSec (IP Security)` - забагато RFC для списку, але починаються з :rfc:`4301`" #: ../../configuration/protocols/isis.rst:9 msgid ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." -msgstr ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." +msgstr ":abbr:`IS-IS (Intermediate System to Intermediate System)` — це внутрішній протокол шлюзу (IGP) із станом зв’язку, який описано в ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS запускає алгоритм Дейкстри за найкоротшим шляхом (SPF), щоб створити базу даних топології мережі та на основі цієї бази даних визначити найкращий (тобто найнижчий) шлях до пункту призначення. Проміжні системи (назва маршрутизаторів) обмінюються інформацією про топологію зі своїми безпосередньо підключеними сусідами. IS-IS працює безпосередньо на канальному рівні (рівень 2). Адреси IS-IS називаються :abbr:`NETs (Network Entity Titles)` і можуть мати довжину від 8 до 20 байтів, але зазвичай вони мають довжину 10 байт. База даних дерева, створена за допомогою IS-IS, подібна до бази даних, створеної за допомогою OSPF, оскільки вибрані шляхи мають бути подібними. Порівняння з OSPF неминуче, і часто є доцільним для того, щоб визначити, як мережа буде реагувати на IGP." -#: ../../configuration/vrf/index.rst:401 +#: ../../configuration/vrf/index.rst:420 msgid ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." -msgstr ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." +msgstr ":abbr:`L3VPN VRF (віртуальні приватні мережі рівня 3)` bgpd підтримує IPv4 RFC 4364 і IPv6 RFC 4659. Маршрути L3VPN і пов’язані з ними мітки VRF MPLS можуть бути розподілені між сусідами VPN SAFI за замовчуванням, тобто не VRF , примірник BGP. Мітки VRF MPLS досягаються за допомогою основних міток MPLS, які поширюються за допомогою LDP або BGP з позначкою unicast. bgpd також підтримує витік маршрутів між VRF." #: ../../configuration/protocols/mpls.rst:46 msgid ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling protocol that distributes labels creating MPLS label switched paths in a dynamic manner. LDP is not a routing protocol, as it relies on other routing protocols for forwarding decisions. LDP cannot bootstrap itself, and therefore relies on said routing protocols for communication with other routers that use LDP." -msgstr ":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling protocol that distributes labels creating MPLS label switched paths in a dynamic manner. LDP is not a routing protocol, as it relies on other routing protocols for forwarding decisions. LDP cannot bootstrap itself, and therefore relies on said routing protocols for communication with other routers that use LDP." +msgstr ":abbr:`LDP (Label Distribution Protocol)` — це протокол сигналізації MPLS на основі TCP, який динамічно розподіляє мітки, створюючи шляхи з комутацією міток MPLS. LDP не є протоколом маршрутизації, оскільки він покладається на інші протоколи маршрутизації для пересилання рішень. LDP не може самозавантажуватися, і тому покладається на зазначені протоколи маршрутизації для зв’язку з іншими маршрутизаторами, які використовують LDP." #: ../../configuration/service/lldp.rst:7 msgid ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." -msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer protocol in the Internet Protocol Suite used by network devices for advertising their identity, capabilities, and neighbors on an IEEE 802 local area network, principally wired Ethernet. The protocol is formally referred to by the IEEE as Station and Media Access Control Connectivity Discovery specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79." +msgstr ":abbr:`LLDP (Link Layer Discovery Protocol)` — це протокол рівня зв’язку, який не залежить від постачальника, у пакеті Інтернет-протоколів, який використовується мережевими пристроями для реклами своєї ідентичності, можливостей і сусідів у локальній мережі IEEE 802, головним чином дротовому Ethernet. Протокол офіційно називається IEEE як Station and Media Access Control Connectivity Discovery, визначений у IEEE 802.1AB та IEEE 802.3-2012, розділ 6, пункт 79." + +#: ../../configuration/interfaces/ethernet.rst:64 +msgid ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." +msgstr ":abbr:`LRO (Large Receive Offload)` is a technique designed to boost the efficiency of how your computer's network interface card (NIC) processes incoming network traffic. Typically, network data arrives in smaller chunks called packets. Processing each packet individually consumes CPU (central processing unit) resources. Lots of small packets can lead to a performance bottleneck. Instead of handing the CPU each packet as it comes in, LRO instructs the NIC to combine multiple incoming packets into a single, larger packet. This larger packet is then passed to the CPU for processing." #: ../../configuration/interfaces/macsec.rst:74 msgid ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." -msgstr ":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys between individual peers." +msgstr ":abbr:`MKA (протокол узгодження ключів MACsec)` використовується для синхронізації ключів між окремими вузлами." #: ../../configuration/protocols/mpls.rst:7 msgid ":abbr:`MPLS (Multi-Protocol Label Switching)` is a packet forwarding paradigm which differs from regular IP forwarding. Instead of IP addresses being used to make the decision on finding the exit interface, a router will instead use an exact match on a 32 bit/4 byte header called the MPLS label. This label is inserted between the ethernet (layer 2) header and the IP (layer 3) header. One can statically or dynamically assign label allocations, but we will focus on dynamic allocation of labels using some sort of label distribution protocol (such as the aptly named Label Distribution Protocol / LDP, Resource Reservation Protocol / RSVP, or Segment Routing through OSPF/ISIS). These protocols allow for the creation of a unidirectional/unicast path called a labeled switched path (initialized as LSP) throughout the network that operates very much like a tunnel through the network. An easy way of thinking about how an MPLS LSP actually forwards traffic throughout a network is to think of a GRE tunnel. They are not the same in how they operate, but they are the same in how they handle the tunneled packet. It would be good to think of MPLS as a tunneling technology that can be used to transport many different types of packets, to aid in traffic engineering by allowing one to specify paths throughout the network (using RSVP or SR), and to generally allow for easier intra/inter network transport of data packets." -msgstr ":abbr:`MPLS (Multi-Protocol Label Switching)` is a packet forwarding paradigm which differs from regular IP forwarding. Instead of IP addresses being used to make the decision on finding the exit interface, a router will instead use an exact match on a 32 bit/4 byte header called the MPLS label. This label is inserted between the ethernet (layer 2) header and the IP (layer 3) header. One can statically or dynamically assign label allocations, but we will focus on dynamic allocation of labels using some sort of label distribution protocol (such as the aptly named Label Distribution Protocol / LDP, Resource Reservation Protocol / RSVP, or Segment Routing through OSPF/ISIS). These protocols allow for the creation of a unidirectional/unicast path called a labeled switched path (initialized as LSP) throughout the network that operates very much like a tunnel through the network. An easy way of thinking about how an MPLS LSP actually forwards traffic throughout a network is to think of a GRE tunnel. They are not the same in how they operate, but they are the same in how they handle the tunneled packet. It would be good to think of MPLS as a tunneling technology that can be used to transport many different types of packets, to aid in traffic engineering by allowing one to specify paths throughout the network (using RSVP or SR), and to generally allow for easier intra/inter network transport of data packets." +msgstr ":abbr:`MPLS (Multi-Protocol Label Switching)` — це парадигма пересилання пакетів, яка відрізняється від звичайного пересилання IP. Замість того, щоб IP-адреси використовувалися для прийняття рішення щодо пошуку інтерфейсу виходу, маршрутизатор замість цього використовуватиме точний збіг у 32-бітному/4-байтному заголовку, що називається міткою MPLS. Ця мітка вставляється між заголовком Ethernet (рівень 2) і заголовком IP (рівень 3). Розподіл міток можна призначати статично або динамічно, але ми зосередимося на динамічному розподілі міток за допомогою певного протоколу розподілу міток (наприклад, протокол розподілу міток з влучною назвою / LDP, протокол резервування ресурсів / RSVP або маршрутизація сегментів через OSPF/ISIS ). Ці протоколи дозволяють створювати односпрямований/одноадресний шлях, званий позначеним комутаційним шляхом (ініціалізований як LSP), у всій мережі, який працює дуже схоже на тунель через мережу. Простий спосіб подумати про те, як MPLS LSP фактично пересилає трафік через мережу, це подумати про тунель GRE. Вони не однакові в тому, як вони працюють, але вони однакові в тому, як вони обробляють тунельований пакет. Було б добре думати про MPLS як про технологію тунелювання, яку можна використовувати для транспортування багатьох різних типів пакетів, для допомоги в плануванні трафіку, дозволяючи вказувати шляхи по всій мережі (за допомогою RSVP або SR), і загалом дозволити спрощений внутрішньо-/міжмережевий транспорт пакетів даних." #: ../../configuration/nat/nat64.rst:7 msgid ":abbr:`NAT64 (IPv6-to-IPv4 Prefix Translation)` is a critical component in modern networking, facilitating communication between IPv6 and IPv4 networks. This documentation outlines the setup, configuration, and usage of the NAT64 feature in your project. Whether you are transitioning to IPv6 or need to seamlessly connect IPv4 and IPv6 devices. NAT64 is a stateful translation mechanism that translates IPv6 addresses to IPv4 addresses and IPv4 addresses to IPv6 addresses. NAT64 is used to enable IPv6-only clients to contact IPv4 servers using unicast UDP, TCP, or ICMP." @@ -17844,31 +19648,31 @@ msgstr ":abbr:`NAT64 (IPv6-to-IPv4 Prefix Translation)` is a critical component #: ../../configuration/nat/nat44.rst:7 msgid ":abbr:`NAT (Network Address Translation)` is a common method of remapping one IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device. The technique was originally used as a shortcut to avoid the need to readdress every host when a network was moved. It has become a popular and essential tool in conserving global address space in the face of IPv4 address exhaustion. One Internet-routable IP address of a NAT gateway can be used for an entire private network." -msgstr ":abbr:`NAT (Network Address Translation)` is a common method of remapping one IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device. The technique was originally used as a shortcut to avoid the need to readdress every host when a network was moved. It has become a popular and essential tool in conserving global address space in the face of IPv4 address exhaustion. One Internet-routable IP address of a NAT gateway can be used for an entire private network." +msgstr ":abbr:`NAT (Network Address Translation)` — це поширений метод перевідображення одного простору IP-адрес в інший шляхом зміни інформації про мережеву адресу в IP-заголовку пакетів, коли вони передаються через пристрій маршрутизації трафіку. Цей метод спочатку використовувався як швидкий спосіб, щоб уникнути необхідності переадресовувати кожен хост під час переміщення мережі. Він став популярним і важливим інструментом для збереження глобального адресного простору в умовах виснаження адрес IPv4. Одну IP-адресу шлюзу NAT, яку можна маршрутизувати в Інтернеті, можна використовувати для всієї приватної мережі." #: ../../configuration/nat/nat44.rst:121 msgid ":abbr:`NAT (Network Address Translation)` is configured entirely on a series of so called `rules`. Rules are numbered and evaluated by the underlying OS in numerical order! The rule numbers can be changes by utilizing the :cfgcmd:`rename` and :cfgcmd:`copy` commands." -msgstr ":abbr:`NAT (Network Address Translation)` is configured entirely on a series of so called `rules`. Rules are numbered and evaluated by the underlying OS in numerical order! The rule numbers can be changes by utilizing the :cfgcmd:`rename` and :cfgcmd:`copy` commands." +msgstr ":abbr:`NAT (Network Address Translation)` повністю налаштовано за серією так званих `правил`. Правила нумеруються та оцінюються базовою ОС у порядку номерів! Номери правил можна змінити за допомогою команд :cfgcmd:`rename` і :cfgcmd:`copy`." #: ../../configuration/protocols/isis.rst:65 msgid ":abbr:`NET (Network Entity Title)` selector: ``00`` Must always be 00. This setting indicates \"this system\" or \"local system.\"" -msgstr ":abbr:`NET (Network Entity Title)` selector: ``00`` Must always be 00. This setting indicates \"this system\" or \"local system.\"" +msgstr ":abbr: Селектор `NET (Назва мережевого об’єкта)`: ``00`` завжди має бути 00. Цей параметр вказує на «цю систему» або «локальну систему»." #: ../../configuration/vpn/dmvpn.rst:12 msgid ":abbr:`NHRP (Next Hop Resolution Protocol)` :rfc:`2332`" -msgstr ":abbr:`NHRP (Next Hop Resolution Protocol)` :rfc:`2332`" +msgstr ":abbr:`NHRP (Протокол вирішення наступного переходу)` :rfc:`2332`" #: ../../configuration/nat/nat66.rst:7 msgid ":abbr:`NPTv6 (IPv6-to-IPv6 Network Prefix Translation)` is an address translation technology based on IPv6 networks, used to convert an IPv6 address prefix in an IPv6 message into another IPv6 address prefix. We call this address translation method NAT66. Devices that support the NAT66 function are called NAT66 devices, which can provide NAT66 source and destination address translation functions." -msgstr ":abbr:`NPTv6 (IPv6-to-IPv6 Network Prefix Translation)` is an address translation technology based on IPv6 networks, used to convert an IPv6 address prefix in an IPv6 message into another IPv6 address prefix. We call this address translation method NAT66. Devices that support the NAT66 function are called NAT66 devices, which can provide NAT66 source and destination address translation functions." +msgstr ":abbr:`NPTv6 (трансляція префіксів мережі IPv6-to-IPv6)` — це технологія перекладу адрес на основі мереж IPv6, яка використовується для перетворення префікса адреси IPv6 у повідомленні IPv6 в інший префікс адреси IPv6. Ми називаємо цей метод трансляції адрес NAT66. Пристрої, які підтримують функцію NAT66, називаються пристроями NAT66, які можуть забезпечувати функції трансляції адрес джерела та призначення NAT66." #: ../../configuration/service/ntp.rst:7 msgid ":abbr:`NTP (Network Time Protocol`) is a networking protocol for clock synchronization between computer systems over packet-switched, variable-latency data networks. In operation since before 1985, NTP is one of the oldest Internet protocols in current use." -msgstr ":abbr:`NTP (Network Time Protocol`) is a networking protocol for clock synchronization between computer systems over packet-switched, variable-latency data networks. In operation since before 1985, NTP is one of the oldest Internet protocols in current use." +msgstr ":abbr:`NTP (Network Time Protocol`) — це мережевий протокол для синхронізації годинника між комп’ютерними системами через мережі передачі даних із комутацією пакетів і змінною затримкою. NTP, що працює до 1985 року, є одним із найстаріших Інтернет-протоколів, що використовуються на даний момент." #: ../../configuration/protocols/ospf.rst:7 msgid ":abbr:`OSPF (Open Shortest Path First)` is a routing protocol for Internet Protocol (IP) networks. It uses a link state routing (LSR) algorithm and falls into the group of interior gateway protocols (IGPs), operating within a single autonomous system (AS). It is defined as OSPF Version 2 in :rfc:`2328` (1998) for IPv4. Updates for IPv6 are specified as OSPF Version 3 in :rfc:`5340` (2008). OSPF supports the :abbr:`CIDR (Classless Inter-Domain Routing)` addressing model." -msgstr ":abbr:`OSPF (Open Shortest Path First)` is a routing protocol for Internet Protocol (IP) networks. It uses a link state routing (LSR) algorithm and falls into the group of interior gateway protocols (IGPs), operating within a single autonomous system (AS). It is defined as OSPF Version 2 in :rfc:`2328` (1998) for IPv4. Updates for IPv6 are specified as OSPF Version 3 in :rfc:`5340` (2008). OSPF supports the :abbr:`CIDR (Classless Inter-Domain Routing)` addressing model." +msgstr ":abbr:`OSPF (Спершу відкрити найкоротший шлях)` — це протокол маршрутизації для мереж Інтернет-протоколу (IP). Він використовує алгоритм маршрутизації стану зв’язку (LSR) і входить до групи внутрішніх протоколів шлюзу (IGP), що працюють в одній автономній системі (AS). Він визначений як версія OSPF 2 у :rfc:`2328` (1998) для IPv4. Оновлення для IPv6 указано як версія OSPF 3 у :rfc:`5340` (2008). OSPF підтримує модель адресації :abbr:`CIDR (безкласова міждоменна маршрутизація)`." #: ../../configuration/protocols/pim.rst:12 msgid ":abbr:`PIM (Protocol Independent Multicast)` must be configured in every interface of every participating router. Every router must also have the location of the Rendevouz Point manually configured. Then, unidirectional shared trees rooted at the Rendevouz Point will automatically be built for multicast distribution." @@ -17876,27 +19680,31 @@ msgstr ":abbr:`PIM (Protocol Independent Multicast)` must be configured in every #: ../../configuration/interfaces/pppoe.rst:9 msgid ":abbr:`PPPoE (Point-to-Point Protocol over Ethernet)` is a network protocol for encapsulating PPP frames inside Ethernet frames. It appeared in 1999, in the context of the boom of DSL as the solution for tunneling packets over the DSL connection to the :abbr:`ISPs (Internet Service Providers)` IP network, and from there to the rest of the Internet. A 2005 networking book noted that \"Most DSL providers use PPPoE, which provides authentication, encryption, and compression.\" Typical use of PPPoE involves leveraging the PPP facilities for authenticating the user with a username and password, predominately via the PAP protocol and less often via CHAP." -msgstr ":abbr:`PPPoE (Point-to-Point Protocol over Ethernet)` is a network protocol for encapsulating PPP frames inside Ethernet frames. It appeared in 1999, in the context of the boom of DSL as the solution for tunneling packets over the DSL connection to the :abbr:`ISPs (Internet Service Providers)` IP network, and from there to the rest of the Internet. A 2005 networking book noted that \"Most DSL providers use PPPoE, which provides authentication, encryption, and compression.\" Typical use of PPPoE involves leveraging the PPP facilities for authenticating the user with a username and password, predominately via the PAP protocol and less often via CHAP." +msgstr ":abbr:`PPPoE (протокол точка-точка через Ethernet)` — це мережевий протокол для інкапсуляції кадрів PPP у кадри Ethernet. Він з’явився в 1999 році в контексті буму DSL як рішення для тунелювання пакетів через DSL-з’єднання до IP-мережі :abbr:`ISP (Internet Service Providers)`, а звідти до решти Інтернету. У книзі з мереж 2005 року зазначено, що «Більшість провайдерів DSL використовують PPPoE, який забезпечує автентифікацію, шифрування та стиснення». Типове використання PPPoE передбачає використання засобів PPP для автентифікації користувача за допомогою імені користувача та пароля, переважно через протокол PAP і рідше через CHAP." #: ../../configuration/service/router-advert.rst:7 msgid ":abbr:`RAs (Router advertisements)` are described in :rfc:`4861#section-4.6.2`. They are part of what is known as :abbr:`SLAAC (Stateless Address Autoconfiguration)`." -msgstr ":abbr:`RAs (Router advertisements)` are described in :rfc:`4861#section-4.6.2`. They are part of what is known as :abbr:`SLAAC (Stateless Address Autoconfiguration)`." +msgstr ":abbr:`RAs (оголошення маршрутизатора)` описано в :rfc:`4861#section-4.6.2`. Вони є частиною так званого :abbr:`SLAAC (Stateless Address Autoconfiguration)`." #: ../../configuration/protocols/rip.rst:9 msgid ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior gateway protocol. RIP was developed in the 1970s at Xerox Labs as part of the XNS routing protocol. RIP is a distance-vector protocol and is based on the Bellman-Ford algorithms. As a distance-vector protocol, RIP router send updates to its neighbors periodically, thus allowing the convergence to a known topology. In each update, the distance to any given network will be broadcast to its neighboring router." -msgstr ":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior gateway protocol. RIP was developed in the 1970s at Xerox Labs as part of the XNS routing protocol. RIP is a distance-vector protocol and is based on the Bellman-Ford algorithms. As a distance-vector protocol, RIP router send updates to its neighbors periodically, thus allowing the convergence to a known topology. In each update, the distance to any given network will be broadcast to its neighboring router." +msgstr ":abbr:`RIP (Routing Information Protocol)` — це широко розповсюджений внутрішній протокол шлюзу. RIP був розроблений у 1970-х роках у Xerox Labs як частина протоколу маршрутизації XNS. RIP — це дистанційно-векторний протокол, який базується на алгоритмах Беллмана-Форда. Як протокол вектора відстані RIP-маршрутизатор періодично надсилає оновлення своїм сусідам, таким чином дозволяючи конвергенцію до відомої топології. У кожному оновленні відстань до будь-якої даної мережі транслюватиметься на сусідній маршрутизатор." #: ../../configuration/protocols/rpki.rst:14 msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infrastructure)` designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (інфраструктура відкритих ключів ресурсів)` — це структура :abbr:`PKI (інфраструктура відкритих ключів)`, розроблена для захисту інфраструктури маршрутизації Інтернету. Він пов’язує оголошення маршрутів BGP із правильним вихідним :abbr:`ASN (автономним системним номером)`, який маршрутизатори BGP можуть потім використовувати для перевірки кожного маршруту на відповідність :abbr:`ROA (Route Origin Authorization)` на дійсність. RPKI описано в :rfc:`6480`." + +#: ../../configuration/protocols/rpki.rst:14 +msgid ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." +msgstr ":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to secure the Internet routing infrastructure. It associates BGP route announcements with the correct originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then use to check each route against the corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is described in :rfc:`6480`." -#: ../../configuration/interfaces/ethernet.rst:82 +#: ../../configuration/interfaces/ethernet.rst:98 msgid ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" -msgstr ":abbr:`RPS (Receive Packet Steering)` is logically a software implementation of :abbr:`RSS (Receive Side Scaling)`. Being in software, it is necessarily called later in the datapath. Whereas RSS selects the queue and hence CPU that will run the hardware interrupt handler, RPS selects the CPU to perform protocol processing above the interrupt handler. This is accomplished by placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS:" +msgstr ":abbr:`RPS (Receive Packet Steering)` є логічно програмною реалізацією :abbr:`RSS (Receive Side Scaling)`. Перебуваючи в програмному забезпеченні, він обов'язково викликається пізніше в шляху даних. У той час як RSS вибирає чергу і, отже, ЦП, який запускатиме обробник апаратних переривань, RPS вибирає ЦП для виконання обробки протоколу над обробником переривань. Це досягається шляхом розміщення пакета в черзі резервування потрібного ЦП і пробудження ЦП для обробки. RPS має деякі переваги перед RSS:" #: ../../_include/interface-ipv6.txt:4 msgid ":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts can configure themselves automatically when connected to an IPv6 network using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control Message Protocol version 6)` router discovery messages. When first connected to a network, a host sends a link-local router solicitation multicast request for its configuration parameters; routers respond to such a request with a router advertisement packet that contains Internet Layer configuration parameters." -msgstr ":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts can configure themselves automatically when connected to an IPv6 network using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control Message Protocol version 6)` router discovery messages. When first connected to a network, a host sends a link-local router solicitation multicast request for its configuration parameters; routers respond to such a request with a router advertisement packet that contains Internet Layer configuration parameters." +msgstr ":abbr:`SLAAC (автоконфігурація адреси без стану)` :rfc:`4862`. Хости IPv6 можуть автоматично налаштовуватися під час підключення до мережі IPv6 за допомогою протоколу Neighbor Discovery Protocol через :abbr:`ICMPv6 (Internet Control Message Protocol version 6)` повідомлення про виявлення маршрутизатора. При першому підключенні до мережі хост надсилає багатоадресний запит маршрутизатора локального каналу зв’язку для своїх параметрів конфігурації; маршрутизатори відповідають на такий запит пакетом оголошення маршрутизатора, який містить параметри конфігурації Інтернет-рівня." #: ../../configuration/nat/nat64.rst:28 msgid ":abbr:`SNAT64 (IPv6-to-IPv4 Source Address Translation)` is a stateful translation mechanism that translates IPv6 addresses to IPv4 addresses." @@ -17904,103 +19712,103 @@ msgstr ":abbr:`SNAT64 (IPv6-to-IPv4 Source Address Translation)` is a stateful t #: ../../configuration/nat/nat44.rst:78 msgid ":abbr:`SNAT (Source Network Address Translation)` is the most common form of :abbr:`NAT (Network Address Translation)` and is typically referred to simply as NAT. To be more correct, what most people refer to as :abbr:`NAT (Network Address Translation)` is actually the process of :abbr:`PAT (Port Address Translation)`, or NAT overload. SNAT is typically used by internal users/private hosts to access the Internet - the source address is translated and thus kept private." -msgstr ":abbr:`SNAT (Source Network Address Translation)` is the most common form of :abbr:`NAT (Network Address Translation)` and is typically referred to simply as NAT. To be more correct, what most people refer to as :abbr:`NAT (Network Address Translation)` is actually the process of :abbr:`PAT (Port Address Translation)`, or NAT overload. SNAT is typically used by internal users/private hosts to access the Internet - the source address is translated and thus kept private." +msgstr ":abbr:`SNAT (Source Network Address Translation)` є найпоширенішою формою :abbr:`NAT (Network Address Translation)` і зазвичай називається просто NAT. Щоб бути точнішим, те, що більшість людей називають :abbr:`NAT (трансляція мережевих адрес)`, насправді є процесом :abbr:`PAT (перетворення адрес портів)` або перевантаженням NAT. SNAT зазвичай використовується внутрішніми користувачами/приватними хостами для доступу до Інтернету - адреса джерела перекладається і, таким чином, залишається приватною." #: ../../configuration/service/snmp.rst:7 msgid ":abbr:`SNMP (Simple Network Management Protocol)` is an Internet Standard protocol for collecting and organizing information about managed devices on IP networks and for modifying that information to change device behavior. Devices that typically support SNMP include cable modems, routers, switches, servers, workstations, printers, and more." -msgstr ":abbr:`SNMP (Simple Network Management Protocol)` is an Internet Standard protocol for collecting and organizing information about managed devices on IP networks and for modifying that information to change device behavior. Devices that typically support SNMP include cable modems, routers, switches, servers, workstations, printers, and more." +msgstr ":abbr:`SNMP (Simple Network Management Protocol)` — це стандартний протокол Інтернету для збору й упорядкування інформації про керовані пристрої в IP-мережах і для зміни цієї інформації для зміни поведінки пристрою. Пристрої, які зазвичай підтримують SNMP, включають кабельні модеми, маршрутизатори, комутатори, сервери, робочі станції, принтери тощо." #: ../../configuration/nat/nat66.rst:25 msgid ":abbr:`SNPTv6 (Source IPv6-to-IPv6 Network Prefix Translation)` The conversion function is mainly used in the following scenarios:" -msgstr ":abbr:`SNPTv6 (Source IPv6-to-IPv6 Network Prefix Translation)` The conversion function is mainly used in the following scenarios:" +msgstr ":abbr:`SNPTv6 (Переклад вихідного мережевого префікса IPv6 на IPv6)` Функція перетворення в основному використовується в таких сценаріях:" #: ../../configuration/service/ssh.rst:7 msgid ":abbr:`SSH (Secure Shell)` is a cryptographic network protocol for operating network services securely over an unsecured network. The standard TCP port for SSH is 22. The best known example application is for remote login to computer systems by users." -msgstr ":abbr:`SSH (Secure Shell)` is a cryptographic network protocol for operating network services securely over an unsecured network. The standard TCP port for SSH is 22. The best known example application is for remote login to computer systems by users." +msgstr ":abbr:`SSH (Secure Shell)` — це криптографічний мережевий протокол для безпечної роботи мережевих служб у незахищеній мережі. Стандартним TCP-портом для SSH є 22. Найвідомішим прикладом програми є віддалений вхід користувачів у комп’ютерні системи." #: ../../configuration/vpn/sstp.rst:7 msgid ":abbr:`SSTP (Secure Socket Tunneling Protocol)` is a form of :abbr:`VPN (Virtual Private Network)` tunnel that provides a mechanism to transport PPP traffic through an SSL/TLS channel. SSL/TLS provides transport-level security with key negotiation, encryption and traffic integrity checking. The use of SSL/TLS over TCP port 443 allows SSTP to pass through virtually all firewalls and proxy servers except for authenticated web proxies." -msgstr ":abbr:`SSTP (Secure Socket Tunneling Protocol)` is a form of :abbr:`VPN (Virtual Private Network)` tunnel that provides a mechanism to transport PPP traffic through an SSL/TLS channel. SSL/TLS provides transport-level security with key negotiation, encryption and traffic integrity checking. The use of SSL/TLS over TCP port 443 allows SSTP to pass through virtually all firewalls and proxy servers except for authenticated web proxies." +msgstr ":abbr:`SSTP (Secure Socket Tunneling Protocol)` — це форма :abbr:`VPN (Virtual Private Network)` тунелю, який забезпечує механізм транспортування трафіку PPP через канал SSL/TLS. SSL/TLS забезпечує безпеку на транспортному рівні з узгодженням ключа, шифруванням і перевіркою цілісності трафіку. Використання SSL/TLS через TCP-порт 443 дозволяє SSTP проходити практично через усі брандмауери та проксі-сервери, за винятком автентифікованих веб-проксі." #: ../../configuration/interfaces/sstp-client.rst:9 msgid ":abbr:`SSTP (Secure Socket Tunneling Protocol)` is a form of :abbr:`VTP (Virtual Private Network)` tunnel that provides a mechanism to transport PPP traffic through an SSL/TLS channel. SSL/TLS provides transport-level security with key negotiation, encryption and traffic integrity checking. The use of SSL/TLS over TCP port 443 (by default, port can be changed) allows SSTP to pass through virtually all firewalls and proxy servers except for authenticated web proxies." -msgstr ":abbr:`SSTP (Secure Socket Tunneling Protocol)` is a form of :abbr:`VTP (Virtual Private Network)` tunnel that provides a mechanism to transport PPP traffic through an SSL/TLS channel. SSL/TLS provides transport-level security with key negotiation, encryption and traffic integrity checking. The use of SSL/TLS over TCP port 443 (by default, port can be changed) allows SSTP to pass through virtually all firewalls and proxy servers except for authenticated web proxies." +msgstr ":abbr:`SSTP (Secure Socket Tunneling Protocol)` — це форма :abbr:`VTP (Virtual Private Network)` тунелю, який забезпечує механізм транспортування трафіку PPP через канал SSL/TLS. SSL/TLS забезпечує безпеку на транспортному рівні з узгодженням ключа, шифруванням і перевіркою цілісності трафіку. Використання SSL/TLS через порт TCP 443 (за замовчуванням порт можна змінити) дозволяє SSTP проходити практично через усі брандмауери та проксі-сервери, за винятком автентифікованих веб-проксі." #: ../../configuration/interfaces/bridge.rst:92 msgid ":abbr:`STP (Spanning Tree Protocol)` is a network protocol that builds a loop-free logical topology for Ethernet networks. The basic function of STP is to prevent bridge loops and the broadcast radiation that results from them. Spanning tree also allows a network design to include backup links providing fault tolerance if an active link fails." -msgstr ":abbr:`STP (Spanning Tree Protocol)` is a network protocol that builds a loop-free logical topology for Ethernet networks. The basic function of STP is to prevent bridge loops and the broadcast radiation that results from them. Spanning tree also allows a network design to include backup links providing fault tolerance if an active link fails." +msgstr ":abbr:`STP (Spanning Tree Protocol)` — це мережевий протокол, який створює логічну топологію без петель для мереж Ethernet. Основною функцією STP є запобігання виникненню мостових петель і випромінюванню, яке є їх результатом. Spanning Tree також дозволяє проектувати мережу для включення резервних каналів, що забезпечує відмовостійкість у разі збою активного каналу." #: ../../configuration/service/tftp-server.rst:7 msgid ":abbr:`TFTP (Trivial File Transfer Protocol)` is a simple, lockstep file transfer protocol which allows a client to get a file from or put a file onto a remote host. One of its primary uses is in the early stages of nodes booting from a local area network. TFTP has been used for this application because it is very simple to implement." -msgstr ":abbr:`TFTP (Trivial File Transfer Protocol)` is a simple, lockstep file transfer protocol which allows a client to get a file from or put a file onto a remote host. One of its primary uses is in the early stages of nodes booting from a local area network. TFTP has been used for this application because it is very simple to implement." +msgstr ":abbr:`TFTP (Trivial File Transfer Protocol)` — це простий, надійний протокол передачі файлів, який дозволяє клієнту отримувати файл або розміщувати його на віддаленому хості. Одне з його основних застосувань — на ранніх стадіях завантаження вузлів із локальної мережі. TFTP використовувався для цієї програми, оскільки його дуже просто реалізувати." #: ../../configuration/interfaces/geneve.rst:57 msgid ":abbr:`VNI (Virtual Network Identifier)` is an identifier for a unique element of a virtual network. In many situations this may represent an L2 segment, however, the control plane defines the forwarding semantics of decapsulated packets. The VNI MAY be used as part of ECMP forwarding decisions or MAY be used as a mechanism to distinguish between overlapping address spaces contained in the encapsulated packet when load balancing across CPUs." -msgstr ":abbr:`VNI (Virtual Network Identifier)` is an identifier for a unique element of a virtual network. In many situations this may represent an L2 segment, however, the control plane defines the forwarding semantics of decapsulated packets. The VNI MAY be used as part of ECMP forwarding decisions or MAY be used as a mechanism to distinguish between overlapping address spaces contained in the encapsulated packet when load balancing across CPUs." +msgstr ":abbr:`VNI (Virtual Network Identifier)` — ідентифікатор унікального елемента віртуальної мережі. У багатьох ситуаціях це може представляти сегмент L2, однак площина керування визначає семантику пересилання декапсульованих пакетів. VNI МОЖЕ використовуватися як частина рішень про пересилання ECMP або МОЖЕ використовуватися як механізм для розрізнення між адресними просторами, що перекриваються, що містяться в інкапсульованому пакеті, під час балансування навантаження між ЦП." #: ../../configuration/vrf/index.rst:9 msgid ":abbr:`VRF (Virtual Routing and Forwarding)` devices combined with ip rules provides the ability to create virtual routing and forwarding domains (aka VRFs, VRF-lite to be specific) in the Linux network stack. One use case is the multi-tenancy problem where each tenant has their own unique routing tables and in the very least need different default gateways." -msgstr ":abbr:`VRF (Virtual Routing and Forwarding)` devices combined with ip rules provides the ability to create virtual routing and forwarding domains (aka VRFs, VRF-lite to be specific) in the Linux network stack. One use case is the multi-tenancy problem where each tenant has their own unique routing tables and in the very least need different default gateways." +msgstr ":abbr: Пристрої `VRF (віртуальна маршрутизація та пересилання)` у поєднанні з правилами ip надають можливість створювати віртуальні домени маршрутизації та пересилання (відомі також як VRF, VRF-lite, щоб бути конкретним) у стеку мережі Linux. Одним із варіантів використання є проблема з кількома орендарями, коли кожен орендар має власні унікальні таблиці маршрутизації та щонайменше потребує різних шлюзів за замовчуванням." #: ../../configuration/interfaces/vxlan.rst:9 msgid ":abbr:`VXLAN (Virtual Extensible LAN)` is a network virtualization technology that attempts to address the scalability problems associated with large cloud computing deployments. It uses a VLAN-like encapsulation technique to encapsulate OSI layer 2 Ethernet frames within layer 4 UDP datagrams, using 4789 as the default IANA-assigned destination UDP port number. VXLAN endpoints, which terminate VXLAN tunnels and may be either virtual or physical switch ports, are known as :abbr:`VTEPs (VXLAN tunnel endpoints)`." -msgstr ":abbr:`VXLAN (Virtual Extensible LAN)` is a network virtualization technology that attempts to address the scalability problems associated with large cloud computing deployments. It uses a VLAN-like encapsulation technique to encapsulate OSI layer 2 Ethernet frames within layer 4 UDP datagrams, using 4789 as the default IANA-assigned destination UDP port number. VXLAN endpoints, which terminate VXLAN tunnels and may be either virtual or physical switch ports, are known as :abbr:`VTEPs (VXLAN tunnel endpoints)`." +msgstr ":abbr:`VXLAN (Virtual Extensible LAN)` — це технологія віртуалізації мережі, яка намагається вирішити проблеми масштабованості, пов’язані з розгортанням великих хмарних обчислень. Він використовує техніку інкапсуляції, подібну до VLAN, для інкапсуляції фреймів OSI рівня 2 Ethernet у дейтаграми UDP рівня 4, використовуючи 4789 як номер порту призначення UDP за замовчуванням, призначений IANA. Кінцеві точки VXLAN, які закінчують тунелі VXLAN і можуть бути віртуальними або фізичними портами комутатора, відомі як :abbr:`VTEP (кінцеві точки тунелю VXLAN)`." #: ../../configuration/interfaces/wireless.rst:16 msgid ":abbr:`WAP (Wireless Access-Point)` provides network access to connecting stations if the physical hardware supports acting as a WAP" -msgstr ":abbr:`WAP (Wireless Access-Point)` provides network access to connecting stations if the physical hardware supports acting as a WAP" +msgstr ":abbr:`WAP (Wireless Access-Point)` забезпечує доступ до мережі для підключених станцій, якщо фізичне обладнання підтримує роботу як WAP" #: ../../configuration/interfaces/wireless.rst:9 msgid ":abbr:`WLAN (Wireless LAN)` interface provide 802.11 (a/b/g/n/ac) wireless support (commonly referred to as Wi-Fi) by means of compatible hardware. If your hardware supports it, VyOS supports multiple logical wireless interfaces per physical device." -msgstr ":abbr:`WLAN (Wireless LAN)` interface provide 802.11 (a/b/g/n/ac) wireless support (commonly referred to as Wi-Fi) by means of compatible hardware. If your hardware supports it, VyOS supports multiple logical wireless interfaces per physical device." +msgstr ":abbr: Інтерфейс `WLAN (Wireless LAN)` забезпечує бездротову підтримку 802.11 (a/b/g/n/ac) (зазвичай відомий як Wi-Fi) за допомогою сумісного обладнання. Якщо ваше апаратне забезпечення це підтримує, VyOS підтримує кілька логічних бездротових інтерфейсів на фізичний пристрій." #: ../../configuration/interfaces/wireless.rst:336 msgid ":abbr:`WPA (Wi-Fi Protected Access)` and WPA2 Enterprise in combination with 802.1x based authentication can be used to authenticate users or computers in a domain." -msgstr ":abbr:`WPA (Wi-Fi Protected Access)` and WPA2 Enterprise in combination with 802.1x based authentication can be used to authenticate users or computers in a domain." +msgstr ":abbr:`WPA (Wi-Fi Protected Access)` і WPA2 Enterprise у поєднанні з автентифікацією на основі 802.1x можна використовувати для автентифікації користувачів або комп’ютерів у домені." #: ../../configuration/vpn/dmvpn.rst:13 msgid ":abbr:`mGRE (Multipoint Generic Routing Encapsulation)` :rfc:`1702`" -msgstr ":abbr:`mGRE (Multipoint Generic Routing Encapsulation)` :rfc:`1702`" +msgstr ":abbr:`mGRE (багатоточкова загальна інкапсуляція маршрутизації)` :rfc:`1702`" #: ../../configuration/protocols/ospf.rst:797 msgid ":cfgcmd:`adv-router <A.B.C.D>` – router id, which link advertisements need to be reviewed." -msgstr ":cfgcmd:`adv-router <A.B.C.D>` – router id, which link advertisements need to be reviewed." +msgstr ":cfgcmd:`adv-роутер<A.B.C.D> ` – ідентифікатор маршрутизатора, оголошення про посилання якого потрібно переглядати." #: ../../configuration/protocols/ospf.rst:800 msgid ":cfgcmd:`self-originate` displays only self-originated LSAs from the local router." -msgstr ":cfgcmd:`self-originate` displays only self-originated LSAs from the local router." +msgstr ":cfgcmd:`self-originate` відображає лише самостійно створені LSA з локального маршрутизатора." #: ../../configuration/service/conntrack-sync.rst:34 msgid ":cfgcmd:`set service conntrack-sync interface eth0 peer 192.168.0.250`" -msgstr ":cfgcmd:`set service conntrack-sync interface eth0 peer 192.168.0.250`" +msgstr ":cfgcmd:`встановити сервіс conntrack-sync інтерфейс eth0 peer 192.168.0.250`" #: ../../configuration/service/webproxy.rst:383 msgid ":code:`set service webproxy url-filtering squidguard auto-update update-hour 23`" -msgstr ":code:`set service webproxy url-filtering squidguard auto-update update-hour 23`" +msgstr ":code:`встановіть сервіс веб-проксі фільтрація URL-адрес squidguard автооновлення оновлення години 23`" #: ../../configuration/service/webproxy.rst:388 msgid ":code:`set service webproxy url-filtering squidguard block-category ads`" -msgstr ":code:`set service webproxy url-filtering squidguard block-category ads`" +msgstr ":code:`встановіть службу фільтрування URL-адрес веб-проксі squidguard блок-категорію оголошень`" #: ../../configuration/service/webproxy.rst:390 msgid ":code:`set service webproxy url-filtering squidguard block-category malware`" -msgstr ":code:`set service webproxy url-filtering squidguard block-category malware`" +msgstr ":code:`встановіть службу фільтрування URL-адрес веб-проксі squidguard зловмисне програмне забезпечення категорії блоків`" #: ../../configuration/service/webproxy.rst:405 msgid ":code:`set service webproxy whitelist destination-address 192.0.2.0/24`" -msgstr ":code:`set service webproxy whitelist destination-address 192.0.2.0/24`" +msgstr ":code:`встановіть білий список служби webproxy адреса призначення 192.0.2.0/24`" #: ../../configuration/service/webproxy.rst:403 msgid ":code:`set service webproxy whitelist destination-address 198.51.100.33`" -msgstr ":code:`set service webproxy whitelist destination-address 198.51.100.33`" +msgstr ":code:`встановіть білий список служби веб-проксі адреса призначення 198.51.100.33`" #: ../../configuration/service/webproxy.rst:410 msgid ":code:`set service webproxy whitelist source-address 192.168.1.2`" -msgstr ":code:`set service webproxy whitelist source-address 192.168.1.2`" +msgstr ":code:`встановити білий список веб-проксі-сервісу вихідну адресу 192.168.1.2`" #: ../../configuration/service/webproxy.rst:412 msgid ":code:`set service webproxy whitelist source-address 192.168.2.0/24`" -msgstr ":code:`set service webproxy whitelist source-address 192.168.2.0/24`" +msgstr ":code:`встановити білий список веб-проксі-сервісу вихідну адресу 192.168.2.0/24`" #: ../../configuration/policy/index.rst:1 msgid ":lastproofread:2021-07-12" @@ -18008,107 +19816,111 @@ msgstr ":lastproofread:2021-07-12" #: ../../configuration/interfaces/wireguard.rst:177 msgid ":opcmd:`generate pki wireguard key-pair`." -msgstr ":opcmd:`generate pki wireguard key-pair`." +msgstr ":opcmd:`генерувати пару ключів pki wireguard`." -#: ../../configuration/vrf/index.rst:88 +#: ../../configuration/vrf/index.rst:107 msgid ":ref:`routing-bgp`" msgstr ":ref:`routing-bgp`" -#: ../../configuration/vrf/index.rst:104 +#: ../../configuration/vrf/index.rst:123 msgid ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" -msgstr ":ref:`routing-bgp`: ``set vrf name <name> protocols bgp ...``" +msgstr ":ref:`routing-bgp`: ``налаштувати назву vrf<name> протоколи bgp ...``" -#: ../../configuration/vrf/index.rst:89 +#: ../../configuration/vrf/index.rst:108 msgid ":ref:`routing-isis`" msgstr ":ref:`routing-isis`" -#: ../../configuration/vrf/index.rst:105 +#: ../../configuration/vrf/index.rst:124 msgid ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" -msgstr ":ref:`routing-isis`: ``set vrf name <name> protocols isis ...``" +msgstr ":ref:`routing-isis`: ``налаштувати назву vrf<name> протоколи isis ...``" -#: ../../configuration/vrf/index.rst:90 +#: ../../configuration/vrf/index.rst:109 msgid ":ref:`routing-ospf`" msgstr ":ref:`routing-ospf`" -#: ../../configuration/vrf/index.rst:106 +#: ../../configuration/vrf/index.rst:125 msgid ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" -msgstr ":ref:`routing-ospf`: ``set vrf name <name> protocols ospf ...``" +msgstr ":ref:`routing-ospf`: ``встановити назву vrf<name> протоколи ospf ...``" -#: ../../configuration/vrf/index.rst:91 +#: ../../configuration/vrf/index.rst:110 msgid ":ref:`routing-ospfv3`" msgstr ":ref:`routing-ospfv3`" -#: ../../configuration/vrf/index.rst:107 +#: ../../configuration/vrf/index.rst:126 msgid ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" -msgstr ":ref:`routing-ospfv3`: ``set vrf name <name> protocols ospfv3 ...``" +msgstr ":ref:`routing-ospfv3`: ``встановити назву vrf<name> протоколи ospfv3 ...``" -#: ../../configuration/vrf/index.rst:92 +#: ../../configuration/vrf/index.rst:111 msgid ":ref:`routing-static`" msgstr ":ref:`routing-static`" -#: ../../configuration/vrf/index.rst:108 +#: ../../configuration/vrf/index.rst:127 msgid ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" -msgstr ":ref:`routing-static`: ``set vrf name <name> protocols static ...``" +msgstr ":ref:`routing-static`: ``встановити назву vrf<name> протоколи статичні ...``" #: ../../_include/interface-dhcp-options.txt:4 msgid ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." -msgstr ":rfc:`2131` states: The client MAY choose to explicitly provide the identifier through the 'client identifier' option. If the client supplies a 'client identifier', the client MUST use the same 'client identifier' in all subsequent messages, and the server MUST use that identifier to identify the client." +msgstr ":rfc:`2131` стверджує: Клієнт МОЖЕ вибрати явне надання ідентифікатора за допомогою параметра «ідентифікатор клієнта». Якщо клієнт надає «ідентифікатор клієнта», клієнт ПОВИНЕН використовувати той самий «ідентифікатор клієнта» в усіх наступних повідомленнях, а сервер ПОВИНЕН використовувати цей ідентифікатор для ідентифікації клієнта." -#: ../../configuration/service/dns.rst:230 +#: ../../configuration/service/dns.rst:311 msgid ":rfc:`2136` Based" -msgstr ":rfc:`2136` Based" +msgstr ":rfc:`2136` На основі" #: ../../configuration/protocols/ospf.rst:140 msgid ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." -msgstr ":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2 (changes) in section 16.4.1 a change to the path preference algorithm that prevents possible routing loops that were possible in the old version of OSPFv2. More specifically it demands that inter-area paths and intra-area backbone path are now of equal preference but still both preferred to external paths." +msgstr ":rfc:`2328`, наступник :rfc:`1583`, пропонує відповідно до розділу G.2 (зміни) у розділі 16.4.1 зміну алгоритму переваги шляху, який запобігає можливим петлям маршрутизації, які були можливі в старому версія OSPFv2. Більш конкретно, це вимагає, щоб шляхи між областями та магістральні шляхи всередині зони тепер мали однакову перевагу, але обидва надавали перевагу зовнішнім шляхам." -#: ../../configuration/pki/index.rst:15 +#: ../../configuration/pki/index.rst:17 msgid ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." -msgstr ":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\" to all services requiring any kind of encryption key(s). In short, public and private certificates are now stored in PKCS#8 format in the regular VyOS CLI. Keys can now be added, edited, and deleted using the regular set/edit/delete CLI commands." +msgstr ":vytask:`T3642` описує нову підсистему CLI, яка служить «сховищем сертифікатів» для всіх служб, які потребують будь-якого типу ключа(ів) шифрування. Коротше кажучи, публічні та приватні сертифікати тепер зберігаються у форматі PKCS#8 у звичайному VyOS CLI. Тепер ключі можна додавати, редагувати та видаляти за допомогою звичайних команд CLI set/edit/delete." #: ../../configuration/service/eventhandler.rst:19 msgid "`1. Create an event handler`_" -msgstr "`1. Create an event handler`_" +msgstr "`1. Створити обробник подій`_" #: ../../configuration/service/eventhandler.rst:21 msgid "`2. Add regex to the script`_" -msgstr "`2. Add regex to the script`_" +msgstr "`2. Додайте регулярний вираз до сценарію`_" #: ../../configuration/service/eventhandler.rst:23 msgid "`3. Add a full path to the script`_" -msgstr "`3. Add a full path to the script`_" +msgstr "`3. Додайте повний шлях до сценарію`_" #: ../../configuration/service/eventhandler.rst:25 msgid "`4. Add optional parameters`_" -msgstr "`4. Add optional parameters`_" +msgstr "`4. Додайте додаткові параметри`_" -#: ../../configuration/service/dhcp-server.rst:154 +#: ../../configuration/service/dhcp-server.rst:203 msgid "`<name>` must be identical on both sides!" -msgstr "`<name>` must be identical on both sides!" +msgstr "`<name> ` повинні бути однаковими з обох сторін!" -#: ../../configuration/pki/index.rst:202 +#: ../../configuration/trafficpolicy/index.rst:1156 +msgid "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." +msgstr "`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management system, implemented as a queue discipline (qdisc) for the Linux kernel. It is designed to replace and improve upon the complex hierarchy of simple qdiscs presently required to effectively tackle the bufferbloat problem at the network edge." + +#: ../../configuration/pki/index.rst:204 msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" -msgstr "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``" +msgstr "``$ tail -n +2 ca.key | голова -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:181 +#: ../../configuration/pki/index.rst:183 msgid "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" -msgstr "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``" +msgstr "``$ tail -n +2 ca.pem | голова -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:240 +#: ../../configuration/pki/index.rst:242 msgid "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" -msgstr "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``" +msgstr "``$ tail -n +2 cert.key | голова -n -1 | tr -d '\\n'``" -#: ../../configuration/pki/index.rst:224 +#: ../../configuration/pki/index.rst:226 msgid "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" -msgstr "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``" +msgstr "``$ tail -n +2 cert.pem | голова -n -1 | tr -d '\\n'``" #: ../../configuration/loadbalancing/wan.rst:274 msgid "``+`` successful" -msgstr "``+`` successful" +msgstr "``+`` успішно" #: ../../configuration/loadbalancing/wan.rst:275 msgid "``-`` failed" -msgstr "``-`` failed" +msgstr "``-`` не вдалося" #: ../../_include/interface-address-with-dhcp.txt:19 msgid "``/config/scripts/dhcp-client/post-hooks.d/``" @@ -18124,31 +19936,31 @@ msgstr "``0.pool.ntp.org``" #: ../../configuration/interfaces/macsec.rst:101 msgid "``0``: No replay window, strict check" -msgstr "``0``: No replay window, strict check" +msgstr "``0``: немає вікна повтору, сувора перевірка" #: ../../configuration/interfaces/wireless.rst:256 msgid "``0`` - 20 or 40 MHz channel width (default)" -msgstr "``0`` - 20 or 40 MHz channel width (default)" +msgstr "``0`` - ширина каналу 20 або 40 МГц (за замовчуванням)" #: ../../configuration/interfaces/macsec.rst:102 msgid "``1-4294967295``: Number of packets that could be misordered" -msgstr "``1-4294967295``: Number of packets that could be misordered" +msgstr "``1-4294967295``: кількість пакетів, які можуть бути неправильно впорядковані" #: ../../configuration/system/console.rst:39 msgid "``115200`` - 115,200 bps (default for serial console)" -msgstr "``115200`` - 115,200 bps (default for serial console)" +msgstr "``115200`` - 115 200 біт/с (за замовчуванням для послідовної консолі)" #: ../../configuration/system/console.rst:32 msgid "``1200`` - 1200 bps" -msgstr "``1200`` - 1200 bps" +msgstr "``1200`` - 1200 біт/с" #: ../../configuration/system/console.rst:36 msgid "``19200`` - 19,200 bps" -msgstr "``19200`` - 19,200 bps" +msgstr "``19200`` - 19 200 біт/с" #: ../../configuration/policy/examples.rst:162 msgid "``192.168.2.254`` IP addreess on VyOS eth2 from ISP2" -msgstr "``192.168.2.254`` IP addreess on VyOS eth2 from ISP2" +msgstr "``192.168.2.254`` IP-адреса на VyOS eth2 від ISP2" #: ../../configuration/service/ntp.rst:50 msgid "``1.pool.ntp.org``" @@ -18156,15 +19968,15 @@ msgstr "``1.pool.ntp.org``" #: ../../configuration/interfaces/wireless.rst:257 msgid "``1`` - 80 MHz channel width" -msgstr "``1`` - 80 MHz channel width" +msgstr "``1`` - ширина каналу 80 МГц" #: ../../configuration/policy/examples.rst:161 msgid "``203.0.113.254`` IP addreess on VyOS eth1 from ISP1" -msgstr "``203.0.113.254`` IP addreess on VyOS eth1 from ISP1" +msgstr "``203.0.113.254`` IP-адреса на VyOS eth1 від ISP1" #: ../../configuration/system/console.rst:33 msgid "``2400`` - 2400 bps" -msgstr "``2400`` - 2400 bps" +msgstr "``2400`` - 2400 біт/с" #: ../../configuration/service/ntp.rst:51 msgid "``2.pool.ntp.org``" @@ -18172,23 +19984,23 @@ msgstr "``2.pool.ntp.org``" #: ../../configuration/interfaces/wireless.rst:258 msgid "``2`` - 160 MHz channel width" -msgstr "``2`` - 160 MHz channel width" +msgstr "``2`` - ширина каналу 160 МГц" #: ../../configuration/system/console.rst:37 msgid "``38400`` - 38,400 bps (default for Xen console)" -msgstr "``38400`` - 38,400 bps (default for Xen console)" +msgstr "``38400`` - 38 400 біт/с (за замовчуванням для консолі Xen)" #: ../../configuration/interfaces/wireless.rst:259 msgid "``3`` - 80+80 MHz channel width" -msgstr "``3`` - 80+80 MHz channel width" +msgstr "``3`` - ширина каналу 80+80 МГц" #: ../../configuration/system/console.rst:34 msgid "``4800`` - 4800 bps" -msgstr "``4800`` - 4800 bps" +msgstr "``4800`` - 4800 біт/с" #: ../../configuration/system/console.rst:38 msgid "``57600`` - 57,600 bps" -msgstr "``57600`` - 57,600 bps" +msgstr "``57600`` - 57 600 біт/с" #: ../../configuration/nat/nat64.rst:31 msgid "``64:ff9b::/96`` is the well-known prefix for IPv4-embedded IPv6 addresses. The prefix is used to represent IPv4 addresses in an IPv6 address format. The IPv4 address is encoded in the low-order 32 bits of the IPv6 address. The high-order 32 bits are set to the well-known prefix 64:ff9b::/96." @@ -18196,43 +20008,55 @@ msgstr "``64:ff9b::/96`` is the well-known prefix for IPv4-embedded IPv6 address #: ../../configuration/interfaces/bonding.rst:43 msgid "``802.3ad`` - IEEE 802.3ad Dynamic link aggregation. Creates aggregation groups that share the same speed and duplex settings. Utilizes all slaves in the active aggregator according to the 802.3ad specification." -msgstr "``802.3ad`` - IEEE 802.3ad Dynamic link aggregation. Creates aggregation groups that share the same speed and duplex settings. Utilizes all slaves in the active aggregator according to the 802.3ad specification." +msgstr "``802.3ad`` - IEEE 802.3ad Агрегація динамічних посилань. Створює групи агрегації з однаковими параметрами швидкості та дуплексу. Використовує всі підлеглі в активному агрегаторі відповідно до специфікації 802.3ad." #: ../../configuration/system/console.rst:35 msgid "``9600`` - 9600 bps" -msgstr "``9600`` - 9600 bps" +msgstr ""9600" - 9600 біт/с" -#: ../../configuration/vpn/ipsec.rst:149 +#: ../../configuration/vpn/ipsec.rst:152 msgid "``< dh-group >`` defines a Diffie-Hellman group for PFS;" -msgstr "``< dh-group >`` defines a Diffie-Hellman group for PFS;" +msgstr "``< dh-group >`` визначає групу Діффі-Хеллмана для PFS;" + +#: ../../configuration/service/dns.rst:172 +msgid "``@`` Use @ as record name to set the record for the root domain." +msgstr "``@`` Use @ as record name to set the record for the root domain." #: ../../configuration/protocols/segment-routing.rst:41 msgid "``Known limitations:``" -msgstr "``Known limitations:``" +msgstr "``Відомі обмеження``" + +#: ../../configuration/service/ipoe-server.rst:247 +#: ../../configuration/service/pppoe-server.rst:209 +#: ../../configuration/vpn/l2tp.rst:252 +#: ../../configuration/vpn/pptp.rst:192 +#: ../../configuration/vpn/sstp.rst:225 +msgid "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." +msgstr "``Stateful-IPv6-Address-Pool`` and ``Delegated-IPv6-Prefix-Pool`` are defined in RFC6911. If they are not defined in your RADIUS server, add new dictionary_." #: ../../configuration/loadbalancing/wan.rst:259 msgid "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" -msgstr "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored" +msgstr "``WLB_INTERFACE_NAME=[назва інтерфейсу]``: інтерфейс для моніторингу" #: ../../configuration/loadbalancing/wan.rst:260 msgid "``WLB_INTERFACE_STATE=[ACTIVE|FAILED]``: Interface state" -msgstr "``WLB_INTERFACE_STATE=[ACTIVE|FAILED]``: Interface state" +msgstr "``WLB_INTERFACE_STATE=[ACTIVE|FAILED]``: Стан інтерфейсу" #: ../../configuration/interfaces/wireless.rst:91 msgid "``a`` - 802.11a - 54 Mbits/sec" -msgstr "``a`` - 802.11a - 54 Mbits/sec" +msgstr "``a`` - 802.11a - 54 Мбіт/с" #: ../../configuration/interfaces/wireless.rst:95 msgid "``ac`` - 802.11ac - 1300 Mbits/sec" -msgstr "``ac`` - 802.11ac - 1300 Mbits/sec" +msgstr "``ac`` - 802.11ac - 1300 Мбіт/с" -#: ../../configuration/policy/route-map.rst:375 +#: ../../configuration/policy/route-map.rst:378 msgid "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" -msgstr "``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008" +msgstr "``accept-own-nexthop`` - Значення відомих спільнот accept-own-nexthop 0xFFFF0008" -#: ../../configuration/policy/route-map.rst:368 +#: ../../configuration/policy/route-map.rst:371 msgid "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" -msgstr "``accept-own`` - Well-known communities value ACCEPT_OWN 0xFFFF0001" +msgstr "``accept-own`` - Значення відомих спільнот ACCEPT_OWN 0xFFFF0001" #: ../../configuration/firewall/bridge.rst:72 #: ../../configuration/firewall/ipv4.rst:88 @@ -18242,111 +20066,135 @@ msgstr "``accept``: accept the packet." #: ../../configuration/interfaces/wireless.rst:121 msgid "``access-point`` - Access-point forwards packets between other nodes" -msgstr "``access-point`` - Access-point forwards packets between other nodes" +msgstr "``точка доступу`` - точка доступу пересилає пакети між іншими вузлами" #: ../../configuration/vpn/ipsec.rst:61 msgid "``action`` keep-alive failure action:" -msgstr "``action`` keep-alive failure action:" +msgstr "``action`` дія невдалої підтримки:" #: ../../configuration/interfaces/bonding.rst:55 msgid "``active-backup`` - Active-backup policy: Only one slave in the bond is active. A different slave becomes active if, and only if, the active slave fails. The bond's MAC address is externally visible on only one port (network adapter) to avoid confusing the switch." -msgstr "``active-backup`` - Active-backup policy: Only one slave in the bond is active. A different slave becomes active if, and only if, the active slave fails. The bond's MAC address is externally visible on only one port (network adapter) to avoid confusing the switch." +msgstr "``active-backup`` - політика активного резервного копіювання: активним є лише один підлеглий пристрій у зв'язку. Інший підлеглий пристрій стає активним тоді і тільки тоді, коли активний підлеглий пристрій виходить з ладу. MAC-адреса зв’язку видима зовні лише на одному порту (мережевому адаптері), щоб уникнути переплутання комутатора." #: ../../configuration/interfaces/bonding.rst:87 msgid "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." -msgstr "``adaptive-load-balance`` - Adaptive load balancing: includes transmit-load-balance plus receive load balancing for IPV4 traffic, and does not require any special switch support. The receive load balancing is achieved by ARP negotiation. The bonding driver intercepts the ARP Replies sent by the local system on their way out and overwrites the source hardware address with the unique hardware address of one of the slaves in the bond such that different peers use different hardware addresses for the server." +msgstr "``adaptive-load-balance`` – адаптивний баланс навантаження: включає балансування навантаження передавання та балансування навантаження прийому для трафіку IPV4 і не потребує спеціальної підтримки комутатора. Балансування навантаження на отримання досягається узгодженням ARP. Драйвер зв’язування перехоплює ARP-відповіді, надіслані локальною системою, і перезаписує апаратну адресу джерела унікальною апаратною адресою одного з підлеглих пристроїв у зв’язку, щоб різні вузли використовували різні апаратні адреси для сервера." -#: ../../configuration/vpn/ipsec.rst:96 +#: ../../configuration/vpn/ipsec.rst:98 msgid "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" -msgstr "``aggressive`` use Aggressive mode for Key Exchanges in the IKEv1 protocol aggressive mode is much more insecure compared to Main mode;" +msgstr "``aggressive`` використовувати агресивний режим для обміну ключами в протоколі IKEv1 агресивний режим набагато небезпечніший порівняно з основним режимом;" #: ../../configuration/protocols/failover.rst:40 msgid "``all-available`` all checking target addresses must be available to pass this check" -msgstr "``all-available`` all checking target addresses must be available to pass this check" +msgstr "``all-available`` всі цільові адреси перевірки повинні бути доступні для проходження цієї перевірки" #: ../../configuration/protocols/failover.rst:43 msgid "``any-available`` any of the checking target addresses must be available to pass this check" -msgstr "``any-available`` any of the checking target addresses must be available to pass this check" +msgstr "``any-available`` будь-яка з цільових адрес перевірки має бути доступною для проходження цієї перевірки" -#: ../../configuration/vpn/site2site_ipsec.rst:385 +#: ../../configuration/service/dns.rst:174 +msgid "``any`` Use any as record name to configure the record as a wildcard." +msgstr "``any`` Use any as record name to configure the record as a wildcard." + +#: ../../configuration/vpn/site2site_ipsec.rst:388 msgid "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." -msgstr "``authentication local-id/remote-id`` - IKE identification is used for validation of VPN peer devices during IKE negotiation. If you do not configure local/remote-identity, the device uses the IPv4 or IPv6 address that corresponds to the local/remote peer by default. In certain network setups (like ipsec interface with dynamic address, or behind the NAT ), the IKE ID received from the peer does not match the IKE gateway configured on the device. This can lead to a Phase 1 validation failure. So, make sure to configure the local/remote id explicitly and ensure that the IKE ID is the same as the remote-identity configured on the peer device." +msgstr "``authentication local-id/remote-id`` - ідентифікація IKE використовується для перевірки однорангових пристроїв VPN під час узгодження IKE. Якщо ви не налаштуєте локальну/віддалену ідентифікацію, пристрій за умовчанням використовує адресу IPv4 або IPv6, яка відповідає локальному/віддаленому вузлу. У певних налаштуваннях мережі (наприклад, інтерфейс ipsec із динамічною адресою або за NAT) ідентифікатор IKE, отриманий від однорангового пристрою, не відповідає шлюзу IKE, налаштованому на пристрої. Це може призвести до збою перевірки фази 1. Отже, переконайтеся, що ви явно налаштували локальний/віддалений ідентифікатор і переконайтеся, що ідентифікатор IKE збігається з ідентифікатором віддаленого пристрою, налаштованим на одноранговому пристрої." + +#: ../../configuration/vpn/site2site_ipsec.rst:18 +msgid "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" +msgstr "``authentication`` - configure authentication between VyOS and a remote peer. If pre-shared-secret mode is used, the secret key must be defined in ``set vpn ipsec authentication`` and suboptions:" #: ../../configuration/vpn/site2site_ipsec.rst:18 msgid "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" -msgstr "``authentication`` - configure authentication between VyOS and a remote peer. Suboptions:" +msgstr "``authentication`` - налаштувати автентифікацію між VyOS і віддаленим вузлом. Підопції:" #: ../../configuration/interfaces/wireless.rst:92 msgid "``b`` - 802.11b - 11 Mbits/sec" -msgstr "``b`` - 802.11b - 11 Mbits/sec" +msgstr "``b`` - 802.11b - 11 Мбіт/с" #: ../../configuration/policy/route-map.rst:164 msgid "``babel`` - Babel routing protocol (Babel)" -msgstr "``babel`` - Babel routing protocol (Babel)" +msgstr "``babel`` - протокол маршрутизації Babel (Babel)" #: ../../configuration/loadbalancing/reverse-proxy.rst:79 msgid "``begin`` Matches the beginning of the URL path" -msgstr "``begin`` Matches the beginning of the URL path" +msgstr "``begin`` Відповідає початку URL-шляху" #: ../../configuration/policy/route-map.rst:165 msgid "``bgp`` - Border Gateway Protocol (BGP)" -msgstr "``bgp`` - Border Gateway Protocol (BGP)" +msgstr "``bgp`` - протокол прикордонного шлюзу (BGP)" -#: ../../configuration/vpn/site2site_ipsec.rst:147 +#: ../../configuration/vpn/site2site_ipsec.rst:150 msgid "``bind`` - select a VTI interface to bind to this peer;" -msgstr "``bind`` - select a VTI interface to bind to this peer;" +msgstr "``bind`` - вибрати інтерфейс VTI для прив'язки до цього вузла;" -#: ../../configuration/policy/route-map.rst:376 +#: ../../configuration/policy/route-map.rst:379 msgid "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" -msgstr "``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A" +msgstr "``blackhole`` - відомі спільноти оцінюють BLACKHOLE 0xFFFF029A" #: ../../configuration/interfaces/bonding.rst:70 msgid "``broadcast`` - Broadcast policy: transmits everything on all slave interfaces." -msgstr "``broadcast`` - Broadcast policy: transmits everything on all slave interfaces." +msgstr "``broadcast`` - Політика широкомовлення: передає все на всіх підлеглих інтерфейсах." #: ../../configuration/loadbalancing/wan.rst:86 msgid "``burst``: Number of packets allowed to overshoot the limit within ``period``. Default 5." -msgstr "``burst``: Number of packets allowed to overshoot the limit within ``period``. Default 5." +msgstr "``burst``: кількість пакетів, дозволена для перевищення ліміту протягом ``періоду``. За замовчуванням 5." #: ../../configuration/vpn/site2site_ipsec.rst:56 msgid "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" -msgstr "``ca-cert-file`` - CA certificate file. Using for authenticating remote peer;" +msgstr "``ca-cert-file`` - файл сертифіката CA. Використання для автентифікації віддаленого вузла;" + +#: ../../configuration/vpn/site2site_ipsec.rst:61 +msgid "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" +msgstr "``ca-certificate`` - CA certificate in PKI configuration. Using for authenticating remote peer;" #: ../../configuration/service/lldp.rst:65 msgid "``cdp`` - Listen for CDP for Cisco routers/switches" -msgstr "``cdp`` - Listen for CDP for Cisco routers/switches" +msgstr "``cdp`` - Прослуховування CDP для маршрутизаторів/комутаторів Cisco" #: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" -msgstr "``cert-file`` - certificate file, which will be used for authenticating local router on remote peer;" +msgstr "``cert-file`` - файл сертифіката, який буде використовуватися для аутентифікації локального маршрутизатора на віддаленому пірі;" + +#: ../../configuration/vpn/site2site_ipsec.rst:64 +msgid "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" +msgstr "``certificate`` - certificate file in PKI configuration, which will be used for authenticating local router on remote peer;" + +#: ../../configuration/vpn/ipsec.rst:66 +msgid "``clear`` closes the CHILD_SA and does not take further action (default);" +msgstr "``clear`` closes the CHILD_SA and does not take further action (default);" #: ../../configuration/vpn/ipsec.rst:65 msgid "``clear`` set action to clear;" -msgstr "``clear`` set action to clear;" +msgstr "``clear`` встановити дію для очищення;" #: ../../configuration/vpn/site2site_ipsec.rst:411 msgid "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." -msgstr "``close-action = none | clear | hold | restart`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +msgstr "``близька дія = немає | ясно | тримати | restart`` - визначає дію, яку потрібно виконати, якщо віддалений одноранговий вузол несподівано закриє CHILD_SA (див. вище значення значень). Closeaction не слід використовувати, якщо одноранговий вузол використовує повторну автентифікацію або унікальні ідентифікатори." + +#: ../../configuration/vpn/site2site_ipsec.rst:414 +msgid "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." +msgstr "``close-action = none | clear | trap | start`` - defines the action to take if the remote peer unexpectedly closes a CHILD_SA (see above for meaning of values). A closeaction should not be used if the peer uses reauthentication or uniqueids." #: ../../configuration/vpn/ipsec.rst:47 msgid "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" -msgstr "``close-action`` defines the action to take if the remote peer unexpectedly closes a CHILD_SA:" +msgstr "``close-action`` визначає дію, яку потрібно виконати, якщо віддалений одноранговий вузол несподівано закриває CHILD_SA:" -#: ../../configuration/vpn/ipsec.rst:122 +#: ../../configuration/vpn/ipsec.rst:125 msgid "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." msgstr "``compression`` Enables the IPComp(IP Payload Compression) protocol which allows compressing the content of IP packets." #: ../../configuration/vpn/ipsec.rst:129 msgid "``compression`` whether IPComp compression of content is proposed on the connection:" -msgstr "``compression`` whether IPComp compression of content is proposed on the connection:" +msgstr "``стиск``, чи пропонується стиснення вмісту IPComp у з'єднанні:" #: ../../configuration/policy/route-map.rst:166 msgid "``connected`` - Connected routes (directly attached subnet or host)" -msgstr "``connected`` - Connected routes (directly attached subnet or host)" +msgstr "``connected`` - підключені маршрути (прямо підключена підмережа або хост)" -#: ../../configuration/vpn/site2site_ipsec.rst:72 +#: ../../configuration/vpn/site2site_ipsec.rst:69 msgid "``connection-type`` - how to handle this connection process. Possible variants:" -msgstr "``connection-type`` - how to handle this connection process. Possible variants:" +msgstr "``connection-type`` - як обробляти цей процес підключення. Можливі варіанти:" #: ../../configuration/firewall/bridge.rst:74 #: ../../configuration/firewall/ipv4.rst:90 @@ -18356,67 +20204,71 @@ msgstr "``continue``: continue parsing next rule." #: ../../configuration/vpn/site2site_ipsec.rst:62 msgid "``crl-file`` - file with the Certificate Revocation List. Using to check if a certificate for the remote peer is valid or revoked;" -msgstr "``crl-file`` - file with the Certificate Revocation List. Using to check if a certificate for the remote peer is valid or revoked;" +msgstr "``crl-file`` - файл зі списком відкликаних сертифікатів. Використання, щоб перевірити, чи сертифікат для віддаленого однорангового вузла дійсний чи відкликаний;" #: ../../configuration/system/task-scheduler.rst:22 msgid "``d`` - Execution interval in days" -msgstr "``d`` - Execution interval in days" +msgstr "``d`` - Інтервал виконання в днях" #: ../../configuration/vpn/site2site_ipsec.rst:400 msgid "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." -msgstr "``dead-peer-detection action = clear | hold | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, hold, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``hold`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +msgstr "``виявлення мертвого однорангового пристрою = очищення | тримати | restart`` - сповіщення R_U_THERE (IKEv1) або порожні ІНФОРМАЦІЙНІ повідомлення (IKEv2) періодично надсилаються, щоб перевірити працездатність однорангового IPsec. Значення очищення, утримання та перезапуску активують DPD і визначають дію, яку потрібно виконати після тайм-ауту. З ``clear`` з'єднання закрито без жодних подальших дій. ``hold`` встановлює політику перехоплення, яка перехоплюватиме відповідний трафік і намагатиметься повторно узгодити з’єднання на вимогу. ``restart`` негайно ініціює спробу повторного узгодження з'єднання." + +#: ../../configuration/vpn/site2site_ipsec.rst:403 +msgid "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." +msgstr "``dead-peer-detection action = clear | trap | restart`` - R_U_THERE notification messages(IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. The values clear, trap, and restart all activate DPD and determine the action to perform on a timeout. With ``clear`` the connection is closed with no further actions taken. ``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the connection on demand. ``restart`` will immediately trigger an attempt to re-negotiate the connection." #: ../../configuration/vpn/ipsec.rst:56 msgid "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" -msgstr "``dead-peer-detection`` controls the use of the Dead Peer Detection protocol (DPD, RFC 3706) where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer:" +msgstr "``dead-peer-detection`` контролює використання протоколу Dead Peer Detection (DPD, RFC 3706), де періодично надсилаються сповіщення R_U_THERE (IKEv1) або порожні ІНФОРМАЦІЙНІ повідомлення (IKEv2) для перевірки жвавості IPsec одноліток:" -#: ../../configuration/vpn/site2site_ipsec.rst:88 +#: ../../configuration/vpn/site2site_ipsec.rst:85 msgid "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" -msgstr "``default-esp-group`` - ESP group to use by default for traffic encryption. Might be overwritten by individual settings for tunnel or VTI interface binding;" +msgstr "``default-esp-group`` - група ESP, яка використовується за замовчуванням для шифрування трафіку. Може бути перезаписано індивідуальними налаштуваннями зв’язування інтерфейсу тунелю або VTI;" -#: ../../configuration/vpn/site2site_ipsec.rst:92 +#: ../../configuration/vpn/site2site_ipsec.rst:89 msgid "``description`` - description for this peer;" -msgstr "``description`` - description for this peer;" +msgstr "``description`` - опис для цього пір;" -#: ../../configuration/vpn/ipsec.rst:101 +#: ../../configuration/vpn/ipsec.rst:103 msgid "``dh-group`` dh-group;" -msgstr "``dh-group`` dh-group;" +msgstr "``dh-група'' dh-група;" -#: ../../configuration/vpn/site2site_ipsec.rst:23 +#: ../../configuration/vpn/site2site_ipsec.rst:24 msgid "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" -msgstr "``dhcp-interface`` - ID for authentication generated from DHCP address dynamically;" +msgstr "``dhcp-interface`` - ID для аутентифікації, що генерується з адреси DHCP динамічно;" -#: ../../configuration/vpn/site2site_ipsec.rst:94 +#: ../../configuration/vpn/site2site_ipsec.rst:91 msgid "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" -msgstr "``dhcp-interface`` - use an IP address, received from DHCP for IPSec connection with this peer, instead of ``local-address``;" +msgstr "``dhcp-interface`` - використовувати IP-адресу, отриману від DHCP для IPSec-з'єднання з цим піром, замість ``local-address``;" -#: ../../configuration/vpn/ipsec.rst:88 +#: ../../configuration/vpn/ipsec.rst:90 msgid "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." msgstr "``disable-mobike`` disables MOBIKE Support. MOBIKE is only available for IKEv2 and enabled by default." -#: ../../configuration/vpn/site2site_ipsec.rst:396 +#: ../../configuration/vpn/site2site_ipsec.rst:399 msgid "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." -msgstr "``disable-route-autoinstall`` - This option when configured disables the routes installed in the default table 220 for site-to-site ipsec. It is mostly used with VTI configuration." +msgstr "``disable-route-autoinstall`` - цей параметр, коли налаштовано, вимикає маршрути, встановлені в таблиці за замовчуванням 220 для ipsec від сайту до сайту. Здебільшого використовується з конфігурацією VTI." -#: ../../configuration/vpn/ipsec.rst:162 +#: ../../configuration/vpn/ipsec.rst:166 msgid "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" -msgstr "``disable-route-autoinstall`` Do not automatically install routes to remote networks;" +msgstr "``disable-route-autoinstall`` Не встановлювати автоматично маршрути до віддалених мереж;" #: ../../configuration/vpn/site2site_ipsec.rst:119 msgid "``disable`` - disable this tunnel;" -msgstr "``disable`` - disable this tunnel;" +msgstr "``disable`` - відключити цей тунель;" -#: ../../configuration/vpn/ipsec.rst:147 +#: ../../configuration/vpn/ipsec.rst:150 msgid "``disable`` Disable PFS;" -msgstr "``disable`` Disable PFS;" +msgstr "``disable`` Вимкнути PFS;" #: ../../configuration/vpn/ipsec.rst:132 msgid "``disable`` disable IPComp compression (default);" -msgstr "``disable`` disable IPComp compression (default);" +msgstr "``disable`` вимкнути стиснення IPComp (за замовчуванням);" #: ../../configuration/vpn/ipsec.rst:96 msgid "``disable`` disable MOBIKE;" -msgstr "``disable`` disable MOBIKE;" +msgstr "``disable`` вимкнути MOBIKE;" #: ../../configuration/firewall/bridge.rst:76 #: ../../configuration/firewall/ipv4.rst:92 @@ -18424,173 +20276,177 @@ msgstr "``disable`` disable MOBIKE;" msgid "``drop``: drop the packet." msgstr "``drop``: drop the packet." -#: ../../configuration/system/login.rst:71 +#: ../../configuration/system/login.rst:75 msgid "``ecdsa-sha2-nistp256``" msgstr "``ecdsa-sha2-nistp256``" -#: ../../configuration/system/login.rst:72 +#: ../../configuration/system/login.rst:76 msgid "``ecdsa-sha2-nistp384``" msgstr "``ecdsa-sha2-nistp384``" -#: ../../configuration/system/login.rst:73 +#: ../../configuration/system/login.rst:77 msgid "``ecdsa-sha2-nistp521``" msgstr "``ecdsa-sha2-nistp521``" #: ../../configuration/service/lldp.rst:66 msgid "``edp`` - Listen for EDP for Extreme routers/switches" -msgstr "``edp`` - Listen for EDP for Extreme routers/switches" +msgstr "``edp`` - Прослуховування EDP для маршрутизаторів/комутаторів Extreme" -#: ../../configuration/vpn/ipsec.rst:145 +#: ../../configuration/vpn/ipsec.rst:148 msgid "``enable`` Inherit Diffie-Hellman group from IKE group (default);" -msgstr "``enable`` Inherit Diffie-Hellman group from IKE group (default);" +msgstr "``enable`` Успадкувати групу Діффі-Хеллмана з групи IKE (за замовчуванням);" #: ../../configuration/vpn/ipsec.rst:134 msgid "``enable`` enable IPComp compression;" -msgstr "``enable`` enable IPComp compression;" +msgstr "``enable`` увімкнути стиснення IPComp;" #: ../../configuration/vpn/ipsec.rst:94 msgid "``enable`` enable MOBIKE (default for IKEv2);" -msgstr "``enable`` enable MOBIKE (default for IKEv2);" +msgstr "``enable`` увімкнути MOBIKE (за замовчуванням для IKEv2);" -#: ../../configuration/vpn/ipsec.rst:103 +#: ../../configuration/vpn/ipsec.rst:105 msgid "``encryption`` encryption algorithm;" -msgstr "``encryption`` encryption algorithm;" +msgstr "алгоритм шифрування ``encryption``;" -#: ../../configuration/vpn/ipsec.rst:153 +#: ../../configuration/vpn/ipsec.rst:156 msgid "``encryption`` encryption algorithm (default 128 bit AES-CBC);" -msgstr "``encryption`` encryption algorithm (default 128 bit AES-CBC);" +msgstr "алгоритм шифрування ``encryption`` (за замовчуванням 128 біт AES-CBC);" #: ../../configuration/loadbalancing/reverse-proxy.rst:80 msgid "``end`` Matches the end of the URL path." -msgstr "``end`` Matches the end of the URL path." +msgstr "``end`` Збігається з кінцем URL-шляху." #: ../../configuration/vpn/site2site_ipsec.rst:121 msgid "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" -msgstr "``esp-group`` - define ESP group for encrypt traffic, defined by this tunnel;" +msgstr "``esp-group`` - визначити групу ESP для шифрування трафіку, визначеного цим тунелем;" -#: ../../configuration/vpn/site2site_ipsec.rst:149 +#: ../../configuration/vpn/site2site_ipsec.rst:152 msgid "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." -msgstr "``esp-group`` - define ESP group for encrypt traffic, passed this VTI interface." +msgstr "``esp-group`` - визначає групу ESP для шифрування трафіку, переданого цим інтерфейсом VTI." #: ../../configuration/loadbalancing/reverse-proxy.rst:81 msgid "``exact`` Requires an exactly match of the URL path" -msgstr "``exact`` Requires an exactly match of the URL path" +msgstr "``exact`` Потрібна точна відповідність URL-шляху" #: ../../configuration/service/lldp.rst:67 msgid "``fdp`` - Listen for FDP for Foundry routers/switches" -msgstr "``fdp`` - Listen for FDP for Foundry routers/switches" +msgstr "``fdp`` - Прослуховування FDP для маршрутизаторів/комутаторів Foundry" #: ../../configuration/vpn/site2site_ipsec.rst:68 msgid "``file`` - path to the key file;" -msgstr "``file`` - path to the key file;" +msgstr "``file`` - шлях до ключового файлу;" #: ../../configuration/vpn/ipsec.rst:164 msgid "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -msgstr "``flexvpn`` Allow FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" +msgstr "``flexvpn`` Дозволити корисне навантаження ідентифікатора постачальника FlexVPN (лише IKEv2). Надішліть корисне навантаження ідентифікатора постачальника Cisco FlexVPN (лише IKEv2), яке потрібне для того, щоб пристрої марки Cisco дозволяли узгоджувати локальний селектор трафіку (з точки зору strongSwan), який не є призначеною віртуальною IP-адресою, якщо таку адресу запитує сильний Лебідь. Надсилання ідентифікатора постачальника Cisco FlexVPN запобігає вузлу звузити локальний селектор трафіку ініціатора та дозволяє йому, наприклад, домовитися про TS 0.0.0.0/0 == 0.0.0.0/0 замість цього. Це було протестовано за допомогою шаблону Cisco «режим тунелю ipsec ipv4», але також має працювати для інкапсуляції GRE;" -#: ../../configuration/vpn/ipsec.rst:164 +#: ../../configuration/vpn/ipsec.rst:168 msgid "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" msgstr "``flexvpn`` Allows FlexVPN vendor ID payload (IKEv2 only). Send the Cisco FlexVPN vendor ID payload (IKEv2 only), which is required in order to make Cisco brand devices allow negotiating a local traffic selector (from strongSwan's point of view) that is not the assigned virtual IP address if such an address is requested by strongSwan. Sending the Cisco FlexVPN vendor ID prevents the peer from narrowing the initiator's local traffic selector and allows it to e.g. negotiate a TS of 0.0.0.0/0 == 0.0.0.0/0 instead. This has been tested with a \"tunnel mode ipsec ipv4\" Cisco template but should also work for GRE encapsulation;" -#: ../../configuration/vpn/site2site_ipsec.rst:97 +#: ../../configuration/vpn/site2site_ipsec.rst:94 msgid "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" -msgstr "``force-udp-encapsulation`` - force encapsulation of ESP into UDP datagrams. Useful in case if between local and remote side is firewall or NAT, which not allows passing plain ESP packets between them;" +msgstr "``force-udp-encapsulation`` - примусова інкапсуляція ESP в дейтаграми UDP. Корисно у випадку, якщо між локальною та віддаленою сторонами є брандмауер або NAT, які не дозволяють передавати прості пакети ESP між ними;" #: ../../configuration/interfaces/wireless.rst:93 msgid "``g`` - 802.11g - 54 Mbits/sec (default)" -msgstr "``g`` - 802.11g - 54 Mbits/sec (default)" +msgstr "``g`` - 802.11g - 54 Мбіт/с (за замовчуванням)" -#: ../../configuration/policy/route-map.rst:367 +#: ../../configuration/policy/route-map.rst:370 msgid "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" -msgstr "``graceful-shutdown`` - Well-known communities value GRACEFUL_SHUTDOWN 0xFFFF0000" +msgstr "`` graceful-shutdown `` - відомі спільноти мають значення GRACEFUL_SHUTDOWN 0xFFFF0000" #: ../../configuration/system/task-scheduler.rst:21 msgid "``h`` - Execution interval in hours" -msgstr "``h`` - Execution interval in hours" +msgstr "``h`` - Інтервал виконання в годинах" -#: ../../configuration/vpn/ipsec.rst:105 +#: ../../configuration/vpn/ipsec.rst:107 msgid "``hash`` hash algorithm." -msgstr "``hash`` hash algorithm." +msgstr "``хеш`` хеш-алгоритм." -#: ../../configuration/vpn/ipsec.rst:155 +#: ../../configuration/vpn/ipsec.rst:158 msgid "``hash`` hash algorithm (default sha1)." -msgstr "``hash`` hash algorithm (default sha1)." +msgstr "Хеш-алгоритм ``хеш`` (за замовчуванням sha1)." #: ../../configuration/vpn/ipsec.rst:52 msgid "``hold`` set action to hold;" -msgstr "``hold`` set action to hold;" +msgstr "``hold`` встановити дію для утримання;" #: ../../configuration/vpn/ipsec.rst:63 msgid "``hold`` set action to hold (default)" -msgstr "``hold`` set action to hold (default)" +msgstr "``hold`` встановити дію для утримання (за замовчуванням)" #: ../../configuration/interfaces/wireless.rst:154 msgid "``ht40+`` - Both 20 MHz and 40 MHz with secondary channel above the primary channel" -msgstr "``ht40+`` - Both 20 MHz and 40 MHz with secondary channel above the primary channel" +msgstr "``ht40+`` - як 20 МГц, так і 40 МГц із вторинним каналом над основним каналом" #: ../../configuration/interfaces/wireless.rst:152 msgid "``ht40-`` - Both 20 MHz and 40 MHz with secondary channel below the primary channel" -msgstr "``ht40-`` - Both 20 MHz and 40 MHz with secondary channel below the primary channel" +msgstr "``ht40-`` - 20 МГц і 40 МГц з вторинним каналом нижче основного каналу" #: ../../configuration/system/console.rst:26 msgid "``hvc0`` - Xen console" -msgstr "``hvc0`` - Xen console" +msgstr "``hvc0`` - консоль Xen" -#: ../../configuration/vpn/site2site_ipsec.rst:25 +#: ../../configuration/vpn/site2site_ipsec.rst:26 msgid "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" -msgstr "``id`` - static ID's for authentication. In general local and remote address ``<x.x.x.x>``, ``<h:h:h:h:h:h:h:h>`` or ``%any``;" +msgstr "``id`` - статичні ідентифікатори для автентифікації. Загальна локальна та віддалена адреса ``<x.x.x.x> ``, ``<h:h:h:h:h:h:h:h> `` або ``%any``;" -#: ../../configuration/vpn/site2site_ipsec.rst:101 +#: ../../configuration/vpn/site2site_ipsec.rst:98 msgid "``ike-group`` - IKE group to use for key exchanges;" -msgstr "``ike-group`` - IKE group to use for key exchanges;" +msgstr "``ike-group`` - група IKE для використання для обміну ключами;" -#: ../../configuration/vpn/ipsec.rst:82 +#: ../../configuration/vpn/ipsec.rst:84 msgid "``ikev1`` use IKEv1 for Key Exchange;" -msgstr "``ikev1`` use IKEv1 for Key Exchange;" +msgstr "``ikev1`` використовувати IKEv1 для обміну ключами;" -#: ../../configuration/vpn/site2site_ipsec.rst:103 +#: ../../configuration/vpn/site2site_ipsec.rst:100 msgid "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" -msgstr "``ikev2-reauth`` - reauthenticate remote peer during the rekeying process. Can be used only with IKEv2. Create a new IKE_SA from the scratch and try to recreate all IPsec SAs;" +msgstr "``ikev2-reauth`` - повторна автентифікація віддаленого вузла під час процесу зміни ключа. Можна використовувати лише з IKEv2. Створіть новий IKE_SA з нуля та спробуйте відтворити всі IPsec SA;" -#: ../../configuration/vpn/ipsec.rst:73 +#: ../../configuration/vpn/ipsec.rst:75 msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done. Setting this parameter enables remote host re-authentication during an IKE rekey." #: ../../configuration/vpn/ipsec.rst:75 msgid "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" -msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticate the peer. In IKEv1, reauthentication is always done:" +msgstr "``ikev2-reauth``, вказує на те, що повторне введення ключа IKE_SA має також повторно автентифікувати однорангового вузла. У IKEv1 повторна автентифікація виконується завжди:" -#: ../../configuration/vpn/ipsec.rst:84 +#: ../../configuration/vpn/ipsec.rst:86 msgid "``ikev2`` use IKEv2 for Key Exchange;" -msgstr "``ikev2`` use IKEv2 for Key Exchange;" +msgstr "``ikev2`` використовує IKEv2 для обміну ключами;" #: ../../configuration/firewall/general-legacy.rst:751 msgid "``in``: Ruleset for forwarded packets on an inbound interface" -msgstr "``in``: Ruleset for forwarded packets on an inbound interface" +msgstr "``in``: набір правил для пересилання пакетів на вхідному інтерфейсі" -#: ../../configuration/vpn/site2site_ipsec.rst:75 +#: ../../configuration/vpn/site2site_ipsec.rst:72 msgid "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" -msgstr "``initiate`` - does initial connection to remote peer immediately after configuring and after boot. In this mode the connection will not be restarted in case of disconnection, therefore should be used only together with DPD or another session tracking methods;" +msgstr "``ініціювати`` - виконує початкове підключення до віддаленого вузла відразу після налаштування та після завантаження. У цьому режимі підключення не буде перезапущено у разі розриву, тому його слід використовувати лише разом із DPD або іншими методами відстеження сесії;" -#: ../../configuration/vpn/ipsec.rst:166 +#: ../../configuration/system/option.rst:50 +msgid "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" +msgstr "``intel_idle.max_cstate=0`` Disable intel_idle and fall back on acpi_idle" + +#: ../../configuration/vpn/ipsec.rst:170 msgid "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" -msgstr "``interface`` Interface Name to use. The name of the interface on which virtual IP addresses should be installed. If not specified the addresses will be installed on the outbound interface;" +msgstr "``interface`` Назва інтерфейсу для використання. Ім'я інтерфейсу, на якому мають бути встановлені віртуальні IP-адреси. Якщо не вказано, адреси будуть встановлені на вихідному інтерфейсі;" -#: ../../configuration/pki/index.rst:148 +#: ../../configuration/pki/index.rst:150 msgid "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." -msgstr "``interface`` is used for the VyOS CLI command to identify the WireGuard interface where this private key is to be used." +msgstr "``interface`` використовується для команди VyOS CLI для визначення інтерфейсу WireGuard, де має використовуватися цей закритий ключ." -#: ../../configuration/policy/route-map.rst:366 +#: ../../configuration/policy/route-map.rst:369 msgid "``internet`` - Well-known communities value 0" -msgstr "``internet`` - Well-known communities value 0" +msgstr "``інтернет`` - відомі спільноти мають значення 0" -#: ../../configuration/vpn/ipsec.rst:69 +#: ../../configuration/vpn/ipsec.rst:71 msgid "``interval`` keep-alive interval in seconds <2-86400> (default 30);" -msgstr "``interval`` keep-alive interval in seconds <2-86400> (default 30);" +msgstr "``interval`` інтервал підтримки активності в секундах <2-86400> (за замовчуванням 30);" #: ../../configuration/policy/route-map.rst:167 msgid "``isis`` - Intermediate System to Intermediate System (IS-IS)" -msgstr "``isis`` - Intermediate System to Intermediate System (IS-IS)" +msgstr "``isis`` - проміжна система до проміжної системи (IS-IS)" #: ../../configuration/firewall/bridge.rst:78 #: ../../configuration/firewall/ipv4.rst:96 @@ -18600,19 +20456,23 @@ msgstr "``jump``: jump to another custom chain." #: ../../configuration/policy/route-map.rst:168 msgid "``kernel`` - Kernel routes" -msgstr "``kernel`` - Kernel routes" +msgstr "``kernel`` - маршрути ядра" -#: ../../configuration/vpn/ipsec.rst:78 +#: ../../configuration/vpn/ipsec.rst:80 msgid "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" -msgstr "``key-exchange`` which protocol should be used to initialize the connection If not set both protocols are handled and connections will use IKEv2 when initiating, but accept any protocol version when responding:" +msgstr "``обмін ключами``, який протокол слід використовувати для ініціалізації з’єднання. Якщо не встановлено, обробляються обидва протоколи, і з’єднання використовуватимуть IKEv2 під час ініціювання, але прийматимуть будь-яку версію протоколу під час відповіді:" #: ../../configuration/vpn/site2site_ipsec.rst:65 msgid "``key`` - a private key, which will be used for authenticating local router on remote peer:" -msgstr "``key`` - a private key, which will be used for authenticating local router on remote peer:" +msgstr "``key`` - приватний ключ, який буде використовуватися для автентифікації локального маршрутизатора на віддаленому пірі:" -#: ../../configuration/system/option.rst:107 +#: ../../configuration/service/https.rst:96 +msgid "``key`` use API keys configured in ``service https api keys``" +msgstr "``key`` use API keys configured in ``service https api keys``" + +#: ../../configuration/system/option.rst:137 msgid "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." -msgstr "``latency``: A server profile focused on lowering network latency. This profile favors performance over power savings by setting ``intel_pstate`` and ``min_perf_pct=100``." +msgstr "``latency``: профіль сервера, спрямований на зниження затримки мережі. Цей профіль надає перевагу продуктивності, а не енергозбереженню, встановлюючи ``intel_pstate`` і ``min_perf_pct=100``." #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "``least-connection`` Distributes requests to the server with the fewest active connections" @@ -18620,103 +20480,111 @@ msgstr "``least-connection`` Distributes requests to the server with the fewest #: ../../configuration/loadbalancing/reverse-proxy.rst:108 msgid "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" -msgstr "``least-connection`` Distributes requests tp tje server wotj the fewest active connections" +msgstr "``least-connection`` Розповсюджує запити на сервер tje без найменшої кількості активних з’єднань" -#: ../../configuration/vpn/ipsec.rst:125 +#: ../../configuration/vpn/ipsec.rst:128 msgid "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" -msgstr "``life-bytes`` ESP life in bytes <1024-26843545600000>. Number of bytes transmitted over an IPsec SA before it expires;" +msgstr "``life-bytes`` Термін служби ESP у байтах <1024-26843545600000>. Кількість байтів, переданих через IPsec SA до закінчення терміну дії;" -#: ../../configuration/vpn/ipsec.rst:128 +#: ../../configuration/vpn/ipsec.rst:131 msgid "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" -msgstr "``life-packets`` ESP life in packets <1000-26843545600000>. Number of packets transmitted over an IPsec SA before it expires;" +msgstr "``life-packets`` Термін служби ESP у пакетах <1000-26843545600000>. Кількість пакетів, переданих через IPsec SA до закінчення терміну дії;" -#: ../../configuration/vpn/ipsec.rst:131 +#: ../../configuration/vpn/ipsec.rst:134 msgid "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" -msgstr "``lifetime`` ESP lifetime in seconds <30-86400> (default 3600). How long a particular instance of a connection (a set of encryption/authentication keys for user packets) should last, from successful negotiation to expiry;" +msgstr "``lifetime`` Час життя ESP в секундах <30-86400> (за замовчуванням 3600). Як довго має тривати певний екземпляр з’єднання (набір ключів шифрування/автентифікації для пакетів користувача), від успішного узгодження до завершення терміну дії;" -#: ../../configuration/vpn/ipsec.rst:86 +#: ../../configuration/vpn/ipsec.rst:88 msgid "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" msgstr "``lifetime`` IKE lifetime in seconds <0-86400> (default 28800);" #: ../../configuration/vpn/ipsec.rst:90 msgid "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" -msgstr "``lifetime`` IKE lifetime in seconds <30-86400> (default 28800);" +msgstr "``lifetime`` Час життя IKE в секундах <30-86400> (за замовчуванням 28800);" -#: ../../configuration/policy/route-map.rst:373 +#: ../../configuration/policy/route-map.rst:376 msgid "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" -msgstr "``llgr-stale`` - Well-known communities value LLGR_STALE 0xFFFF0006" +msgstr "``llgr-stale`` - Значення загальновідомих спільнот LLGR_STALE 0xFFFF0006" -#: ../../configuration/vpn/site2site_ipsec.rst:107 +#: ../../configuration/vpn/site2site_ipsec.rst:104 msgid "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" -msgstr "``local-address`` - local IP address for IPSec connection with this peer. If defined ``any``, then an IP address which configured on interface with default route will be used;" +msgstr "``local-address`` - локальна IP-адреса для з'єднання IPSec з цим вузлом. Якщо визначено ``будь-який``, тоді використовуватиметься IP-адреса, налаштована на інтерфейсі з маршрутом за замовчуванням;" -#: ../../configuration/policy/route-map.rst:363 +#: ../../configuration/policy/route-map.rst:366 msgid "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" -msgstr "``local-as`` - Well-known communities value NO_EXPORT_SUBCONFED 0xFFFFFF03" +msgstr "``local-as`` - Значення відомих спільнот NO_EXPORT_SUBCONFED 0xFFFFFF03" -#: ../../configuration/vpn/site2site_ipsec.rst:31 +#: ../../configuration/vpn/site2site_ipsec.rst:32 msgid "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" -msgstr "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" +msgstr "``local-id`` - ID локального маршрутизатора VyOS. Якщо визначено, під час автентифікації його буде надіслано віддаленому одноранговому вузлу;" + +#: ../../configuration/vpn/site2site_ipsec.rst:50 +msgid "``local-key`` - name of PKI key-pair with local private key" +msgstr "``local-key`` - name of PKI key-pair with local private key" #: ../../configuration/firewall/general-legacy.rst:753 msgid "``local``: Ruleset for packets destined for this router" -msgstr "``local``: Ruleset for packets destined for this router" +msgstr "``локальний``: набір правил для пакетів, призначених для цього маршрутизатора" #: ../../configuration/vpn/site2site_ipsec.rst:123 msgid "``local`` - define a local source for match traffic, which should be encrypted and send to this peer:" -msgstr "``local`` - define a local source for match traffic, which should be encrypted and send to this peer:" +msgstr "``local`` - визначте локальне джерело для збігового трафіку, який має бути зашифрований і надісланий цьому піру:" #: ../../configuration/system/task-scheduler.rst:20 msgid "``m`` - Execution interval in minutes" -msgstr "``m`` - Execution interval in minutes" +msgstr "``m`` - Інтервал виконання в хвилинах" #: ../../configuration/policy/examples.rst:99 msgid "``main`` Routing table used by VyOS and other interfaces not participating in PBR" -msgstr "``main`` Routing table used by VyOS and other interfaces not participating in PBR" +msgstr "``main`` Таблиця маршрутизації, яка використовується VyOS та іншими інтерфейсами, які не беруть участь у PBR" -#: ../../configuration/vpn/ipsec.rst:93 +#: ../../configuration/vpn/ipsec.rst:95 msgid "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" -msgstr "``main`` use Main mode for Key Exchanges in the IKEv1 Protocol (Recommended Default);" +msgstr "``main`` використовувати головний режим для обміну ключами в протоколі IKEv1 (рекомендований типовий);" #: ../../configuration/service/eventhandler.rst:72 msgid "``message``: Full message that has triggered the script." -msgstr "``message``: Full message that has triggered the script." +msgstr "``message``: повне повідомлення, яке запустило сценарій." + +#: ../../configuration/system/option.rst:40 +msgid "``mitigations=off``" +msgstr "``mitigations=off``" #: ../../configuration/vpn/ipsec.rst:92 msgid "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" -msgstr "``mobike`` enable MOBIKE Support. MOBIKE is only available for IKEv2:" +msgstr "``mobike`` увімкнути підтримку MOBIKE. MOBIKE доступний лише для IKEv2:" -#: ../../configuration/vpn/site2site_ipsec.rst:35 +#: ../../configuration/vpn/site2site_ipsec.rst:36 msgid "``mode`` - mode for authentication between VyOS and remote peer:" -msgstr "``mode`` - mode for authentication between VyOS and remote peer:" +msgstr "``mode`` - режим аутентифікації між VyOS і віддаленим піром:" -#: ../../configuration/vpn/ipsec.rst:91 +#: ../../configuration/vpn/ipsec.rst:93 msgid "``mode`` IKEv1 Phase 1 Mode Selection:" -msgstr "``mode`` IKEv1 Phase 1 Mode Selection:" +msgstr "``mode`` IKEv1 Фаза 1 Вибір режиму:" -#: ../../configuration/vpn/ipsec.rst:136 +#: ../../configuration/vpn/ipsec.rst:139 msgid "``mode`` the type of the connection:" -msgstr "``mode`` the type of the connection:" +msgstr "``mode`` тип з'єднання:" #: ../../configuration/interfaces/wireless.rst:123 msgid "``monitor`` - Passively monitor all packets on the frequency/channel" -msgstr "``monitor`` - Passively monitor all packets on the frequency/channel" +msgstr "``monitor`` - пасивно стежити за всіма пакетами на частоті/каналі" #: ../../configuration/interfaces/wireless.rst:240 msgid "``multi-user-beamformee`` - Support for operation as single user beamformer" -msgstr "``multi-user-beamformee`` - Support for operation as single user beamformer" +msgstr "``multi-user-beamformee`` - Підтримка роботи як один користувач beamformer" #: ../../configuration/interfaces/wireless.rst:239 msgid "``multi-user-beamformer`` - Support for operation as single user beamformer" -msgstr "``multi-user-beamformer`` - Support for operation as single user beamformer" +msgstr "``multi-user-beamformer`` - Підтримка роботи в якості однокористувацького засобу формування променя" #: ../../configuration/interfaces/wireless.rst:94 msgid "``n`` - 802.11n - 600 Mbits/sec" -msgstr "``n`` - 802.11n - 600 Mbits/sec" +msgstr "``n`` - 802.11n - 600 Мбіт/с" #: ../../configuration/pki/pki_cli_import_help.txt:5 msgid "``name`` is used for the VyOS CLI command to identify this key. This key ``name`` is then used in the CLI configuration to reference the key instance." -msgstr "``name`` is used for the VyOS CLI command to identify this key. This key ``name`` is then used in the CLI configuration to reference the key instance." +msgstr "``name`` використовується для команди VyOS CLI для визначення цього ключа. Це «ім’я» ключа потім використовується в конфігурації CLI для посилання на екземпляр ключа." #: ../../configuration/firewall/global-options.rst:79 msgid "``net.ipv4.conf.all.accept_redirects``" @@ -18744,7 +20612,7 @@ msgstr "``net.ipv4.icmp_echo_ignore_broadcasts``" #: ../../configuration/firewall/global-options.rst:117 msgid "``net.ipv4.tcp_rfc1337``" -msgstr "``net.ipv4.tcp_rfc1337``" +msgstr "``net.ipv4.tcp_rfc1337''" #: ../../configuration/firewall/global-options.rst:109 msgid "``net.ipv4.tcp_syncookies``" @@ -18758,122 +20626,138 @@ msgstr "``net.ipv6.conf.all.accept_redirects``" msgid "``net.ipv6.conf.all.accept_source_route``" msgstr "``net.ipv6.conf.all.accept_source_route``" -#: ../../configuration/policy/route-map.rst:364 +#: ../../configuration/policy/route-map.rst:367 msgid "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" -msgstr "``no-advertise`` - Well-known communities value NO_ADVERTISE 0xFFFFFF02" +msgstr "``no-advertise`` - Значення загальновідомих спільнот NO_ADVERTISE 0xFFFFFF02" -#: ../../configuration/policy/route-map.rst:365 +#: ../../configuration/policy/route-map.rst:368 msgid "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" -msgstr "``no-export`` - Well-known communities value NO_EXPORT 0xFFFFFF01" +msgstr "``no-export`` - Значення загальновідомих спільнот NO_EXPORT 0xFFFFFF01" -#: ../../configuration/policy/route-map.rst:374 +#: ../../configuration/policy/route-map.rst:377 msgid "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" -msgstr "``no-llgr`` - Well-known communities value NO_LLGR 0xFFFF0007" +msgstr "``no-llgr`` - значення загальновідомих спільнот NO_LLGR 0xFFFF0007" -#: ../../configuration/policy/route-map.rst:377 +#: ../../configuration/policy/route-map.rst:380 msgid "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" -msgstr "``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04" +msgstr "``no-peer`` - відомі спільноти мають значення NOPEER 0xFFFFFF04" #: ../../configuration/vpn/ipsec.rst:80 msgid "``no`` disable remote host re-authenticaton during an IKE rekey;" -msgstr "``no`` disable remote host re-authenticaton during an IKE rekey;" +msgstr "``ні`` вимкнути повторну автентифікацію віддаленого хоста під час повторного введення ключа;" #: ../../configuration/system/task-scheduler.rst:19 msgid "``none`` - Execution interval in minutes" -msgstr "``none`` - Execution interval in minutes" +msgstr "``none`` - Інтервал виконання в хвилинах" -#: ../../configuration/vpn/site2site_ipsec.rst:85 +#: ../../configuration/vpn/site2site_ipsec.rst:82 msgid "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." -msgstr "``none`` - loads the connection only, which then can be manually initiated or used as a responder configuration." +msgstr "``none`` - завантажує лише з'єднання, яке потім можна ініціювати вручну або використовувати як конфігурацію відповідача." #: ../../configuration/vpn/ipsec.rst:50 msgid "``none`` set action to none (default);" -msgstr "``none`` set action to none (default);" +msgstr "``none`` встановити дію на none (за замовчуванням);" #: ../../configuration/service/ntp.rst:57 msgid "``noselect`` marks the server as unused, except for display purposes. The server is discarded by the selection algorithm." -msgstr "``noselect`` marks the server as unused, except for display purposes. The server is discarded by the selection algorithm." +msgstr "``noselect`` позначає сервер як невикористаний, за винятком цілей відображення. Сервер відкидається алгоритмом вибору." #: ../../configuration/service/ntp.rst:60 msgid "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" -msgstr "``nts`` enables Network Time Security (NTS) for the server as specified in :rfc:`8915`" +msgstr "``nts`` вмикає Network Time Security (NTS) для сервера, як зазначено в :rfc:`8915`" -#: ../../configuration/vpn/ipsec.rst:160 +#: ../../configuration/vpn/ipsec.rst:164 msgid "``options``" -msgstr "``options``" +msgstr "``параметри``" #: ../../configuration/policy/route-map.rst:169 msgid "``ospf`` - Open Shortest Path First (OSPFv2)" -msgstr "``ospf`` - Open Shortest Path First (OSPFv2)" +msgstr "``ospf`` - спочатку відкрити найкоротший шлях (OSPFv2)" #: ../../configuration/policy/route-map.rst:170 msgid "``ospfv3`` - Open Shortest Path First (IPv6) (OSPFv3)" -msgstr "``ospfv3`` - Open Shortest Path First (IPv6) (OSPFv3)" +msgstr "``ospfv3`` - спочатку відкрити найкоротший шлях (IPv6) (OSPFv3)" #: ../../configuration/firewall/general-legacy.rst:752 msgid "``out``: Ruleset for forwarded packets on an outbound interface" -msgstr "``out``: Ruleset for forwarded packets on an outbound interface" +msgstr "``out``: набір правил для пересилання пакетів на вихідному інтерфейсі" + +#: ../../configuration/vpn/site2site_ipsec.rst:54 +msgid "``passphrase`` - local private key passphrase" +msgstr "``passphrase`` - local private key passphrase" + +#: ../../configuration/vpn/site2site_ipsec.rst:67 +msgid "``passphrase`` - private key passphrase, if needed." +msgstr "``passphrase`` - private key passphrase, if needed." #: ../../configuration/vpn/site2site_ipsec.rst:70 msgid "``password`` - passphrase private key, if needed." -msgstr "``password`` - passphrase private key, if needed." +msgstr "``password`` - секретний ключ парольної фрази, якщо потрібно." -#: ../../configuration/pki/index.rst:163 +#: ../../configuration/pki/index.rst:165 msgid "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." -msgstr "``peer`` is used for the VyOS CLI command to identify the WireGuard peer where this secred is to be used." +msgstr "``peer`` використовується для команди VyOS CLI для визначення однорангового вузла WireGuard, де цей secred має використовуватися." #: ../../configuration/loadbalancing/wan.rst:88 msgid "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." -msgstr "``period``: Time window for rate calculation. Possible values: ``second`` (one second), ``minute`` (one minute), ``hour`` (one hour). Default is ``second``." +msgstr "``period``: часове вікно для розрахунку курсу. Можливі значення: ``second`` (одна секунда), ``minute`` (одна хвилина), ``hour`` (одна година). Типовим є ``другий``." -#: ../../configuration/vpn/ipsec.rst:142 +#: ../../configuration/vpn/ipsec.rst:145 msgid "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" -msgstr "``pfs`` whether Perfect Forward Secrecy of keys is desired on the connection's keying channel and defines a Diffie-Hellman group for PFS:" +msgstr "``pfs``, вказує на те, що ідеальна пряма секретність ключів потрібна на каналі ключів з’єднання та визначає групу Діффі-Хеллмана для PFS:" #: ../../configuration/service/ntp.rst:63 msgid "``pool`` mobilizes persistent client mode association with a number of remote servers." -msgstr "``pool`` mobilizes persistent client mode association with a number of remote servers." +msgstr "``pool`` мобілізує постійний зв'язок режиму клієнта з низкою віддалених серверів." #: ../../configuration/vpn/site2site_ipsec.rst:126 -#: ../../configuration/vpn/site2site_ipsec.rst:136 +#: ../../configuration/vpn/site2site_ipsec.rst:139 msgid "``port`` - define port. Have effect only when used together with ``prefix``;" -msgstr "``port`` - define port. Have effect only when used together with ``prefix``;" +msgstr "``port`` - визначити порт. Має ефект лише при використанні разом із ``префіксом``;" -#: ../../configuration/vpn/site2site_ipsec.rst:37 +#: ../../configuration/vpn/site2site_ipsec.rst:38 msgid "``pre-shared-secret`` - use predefined shared secret phrase;" -msgstr "``pre-shared-secret`` - use predefined shared secret phrase;" +msgstr "``pre-shared-secret`` - використовувати попередньо визначену спільну секретну фразу;" #: ../../configuration/service/ntp.rst:66 msgid "``prefer`` marks the server as preferred. All other things being equal, this host will be chosen for synchronization among a set of correctly operating hosts." -msgstr "``prefer`` marks the server as preferred. All other things being equal, this host will be chosen for synchronization among a set of correctly operating hosts." +msgstr "``prefer`` позначає сервер як бажаний. За інших рівних умов цей хост буде обрано для синхронізації серед набору коректно працюючих хостів." #: ../../configuration/vpn/site2site_ipsec.rst:128 msgid "``prefix`` - IP network at local side." -msgstr "``prefix`` - IP network at local side." +msgstr "``prefix`` - IP мережа на локальній стороні." -#: ../../configuration/vpn/site2site_ipsec.rst:138 +#: ../../configuration/vpn/site2site_ipsec.rst:141 msgid "``prefix`` - IP network at remote side." -msgstr "``prefix`` - IP network at remote side." +msgstr "``prefix`` - IP мережа на віддаленій стороні." -#: ../../configuration/vpn/ipsec.rst:107 +#: ../../configuration/vpn/ipsec.rst:109 msgid "``prf`` pseudo-random function." -msgstr "``prf`` pseudo-random function." +msgstr "``prf`` псевдовипадкова функція." -#: ../../configuration/vpn/ipsec.rst:151 +#: ../../configuration/vpn/site2site_ipsec.rst:130 +msgid "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" +msgstr "``priority`` - Add priority for policy-based IPSec VPN tunnels(lowest value more preferable)" + +#: ../../configuration/system/option.rst:51 +msgid "``processor.max_cstate=1`` Limit processor to maximum C-state 1" +msgstr "``processor.max_cstate=1`` Limit processor to maximum C-state 1" + +#: ../../configuration/vpn/ipsec.rst:154 msgid "``proposal`` ESP-group proposal with number <1-65535>:" -msgstr "``proposal`` ESP-group proposal with number <1-65535>:" +msgstr "``пропозиція`` Пропозиція ESP-групи з номером <1-65535>:" -#: ../../configuration/vpn/ipsec.rst:99 +#: ../../configuration/vpn/ipsec.rst:101 msgid "``proposal`` the list of proposals and their parameters:" -msgstr "``proposal`` the list of proposals and their parameters:" +msgstr "``proposal`` перелік пропозицій та їх параметри:" -#: ../../configuration/vpn/site2site_ipsec.rst:130 +#: ../../configuration/vpn/site2site_ipsec.rst:133 msgid "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" -msgstr "``protocol`` - define the protocol for match traffic, which should be encrypted and send to this peer;" +msgstr "``protocol`` - визначте протокол для збігового трафіку, який повинен бути зашифрований і відправлений цьому одноранговому вузлу;" -#: ../../configuration/vpn/site2site_ipsec.rst:21 +#: ../../configuration/vpn/site2site_ipsec.rst:22 msgid "``psk`` - Preshared secret key name:" -msgstr "``psk`` - Preshared secret key name:" +msgstr "``psk`` - Попереднє ім'я секретного ключа:" #: ../../configuration/firewall/bridge.rst:83 #: ../../configuration/firewall/ipv4.rst:101 @@ -18883,41 +20767,53 @@ msgstr "``queue``: Enqueue packet to userspace." #: ../../configuration/loadbalancing/wan.rst:91 msgid "``rate``: Number of packets. Default 5." -msgstr "``rate``: Number of packets. Default 5." +msgstr "``rate``: кількість пакетів. За замовчуванням 5." #: ../../configuration/firewall/ipv4.rst:94 #: ../../configuration/firewall/ipv6.rst:94 msgid "``reject``: reject the packet." msgstr "``reject``: reject the packet." -#: ../../configuration/vpn/site2site_ipsec.rst:111 +#: ../../configuration/vpn/site2site_ipsec.rst:108 msgid "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." -msgstr "``remote-address`` - remote IP address or hostname for IPSec connection. IPv4 or IPv6 address is used when a peer has a public static IP address. Hostname is a DNS name which could be used when a peer has a public IP address and DNS name, but an IP address could be changed from time to time." +msgstr "``remote-address`` - віддалена IP-адреса або ім'я хоста для з'єднання IPSec. Адреса IPv4 або IPv6 використовується, коли одноранговий вузол має загальнодоступну статичну IP-адресу. Ім’я хосту – це ім’я DNS, яке можна використовувати, якщо одноранговий вузол має загальнодоступну IP-адресу та ім’я DNS, але час від часу IP-адресу можна змінювати." #: ../../configuration/vpn/site2site_ipsec.rst:44 msgid "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" -msgstr "``remote-id`` - define an ID for remote peer, instead of using peer name or address. Useful in case if the remote peer is behind NAT or if ``mode x509`` is used;" +msgstr "``remote-id`` - визначте ідентифікатор віддаленого вузла замість використання імені або адреси вузла. Корисно у випадку, якщо віддалений вузол знаходиться за NAT або якщо використовується ``режим x509``;" -#: ../../configuration/vpn/site2site_ipsec.rst:133 +#: ../../configuration/vpn/site2site_ipsec.rst:52 +msgid "``remote-key`` - name of PKI key-pair with remote public key" +msgstr "``remote-key`` - name of PKI key-pair with remote public key" + +#: ../../configuration/vpn/site2site_ipsec.rst:136 msgid "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" -msgstr "``remote`` - define the remote destination for match traffic, which should be encrypted and send to this peer:" +msgstr "``remote`` - визначте віддалене призначення для збігового трафіку, який має бути зашифрований і надісланий цьому одноранговому вузлу:" + +#: ../../configuration/vpn/site2site_ipsec.rst:113 +msgid "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" +msgstr "``replay-window`` - IPsec replay window to configure for this CHILD_SA (default: 32), a value of 0 disables IPsec replay protection" #: ../../configuration/loadbalancing/reverse-proxy.rst:64 msgid "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" -msgstr "``req-ssl-sni`` SSL Server Name Indication (SNI) request match" +msgstr "``req-ssl-sni`` Збіг запиту індикації імені сервера SSL (SNI)." #: ../../configuration/loadbalancing/wan.rst:172 msgid "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" -msgstr "``resp-time``: the maximum response time for ping in seconds. Range 1...30, default 5" +msgstr "``resp-time``: максимальний час відповіді на ping у секундах. Діапазон 1...30, за замовчуванням 5" -#: ../../configuration/vpn/site2site_ipsec.rst:80 +#: ../../configuration/vpn/site2site_ipsec.rst:77 msgid "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." -msgstr "``respond`` - does not try to initiate a connection to a remote peer. In this mode, the IPSec session will be established only after initiation from a remote peer. Could be useful when there is no direct connectivity to the peer due to firewall or NAT in the middle of the local and remote side." +msgstr "``respond`` - не намагається ініціювати з'єднання з віддаленим вузлом. У цьому режимі сеанс IPSec буде встановлено лише після ініціації від віддаленого вузла. Може бути корисним, коли немає прямого підключення до однорангового пристрою через брандмауер або NAT у середині локальної та віддаленої сторони." + +#: ../../configuration/vpn/ipsec.rst:68 +msgid "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" +msgstr "``restart`` immediately tries to re-negotiate the CHILD_SA under a fresh IKE_SA;" #: ../../configuration/vpn/ipsec.rst:54 #: ../../configuration/vpn/ipsec.rst:67 msgid "``restart`` set action to restart;" -msgstr "``restart`` set action to restart;" +msgstr "``restart`` встановити дію для перезапуску;" #: ../../configuration/firewall/bridge.rst:80 #: ../../configuration/firewall/ipv4.rst:98 @@ -18927,47 +20823,55 @@ msgstr "``return``: Return from the current chain and continue at the next rule #: ../../configuration/policy/route-map.rst:171 msgid "``rip`` - Routing Information Protocol (RIP)" -msgstr "``rip`` - Routing Information Protocol (RIP)" +msgstr "``rip`` - протокол інформації про маршрутизацію (RIP)" #: ../../configuration/policy/route-map.rst:172 msgid "``ripng`` - Routing Information Protocol next-generation (IPv6) (RIPng)" -msgstr "``ripng`` - Routing Information Protocol next-generation (IPv6) (RIPng)" +msgstr "``ripng`` - протокол інформації про маршрутизацію наступного покоління (IPv6) (RIPng)" #: ../../configuration/interfaces/bonding.rst:75 msgid "``round-robin`` - Round-robin policy: Transmit packets in sequential order from the first available slave through the last." -msgstr "``round-robin`` - Round-robin policy: Transmit packets in sequential order from the first available slave through the last." +msgstr "``round-robin`` - політика циклічного передачі: передача пакетів у послідовному порядку від першого доступного підлеглого до останнього." #: ../../configuration/loadbalancing/reverse-proxy.rst:106 msgid "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" -msgstr "``round-robin`` Distributes requests in a circular manner, sequentially sending each request to the next server in line" +msgstr "``round-robin`` Розповсюджує запити циклічним способом, послідовно надсилаючи кожен запит на наступний сервер у рядку" -#: ../../configuration/policy/route-map.rst:369 +#: ../../configuration/policy/route-map.rst:372 msgid "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" -msgstr "``route-filter-translated-v4`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" +msgstr "``route-filter-translated-v4`` - Значення відомих спільнот ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002" -#: ../../configuration/policy/route-map.rst:371 +#: ../../configuration/policy/route-map.rst:374 msgid "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" -msgstr "``route-filter-translated-v6`` - Well-known communities value ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" +msgstr "``route-filter-translated-v6`` - Значення відомих спільнот ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004" -#: ../../configuration/policy/route-map.rst:370 +#: ../../configuration/policy/route-map.rst:373 msgid "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" -msgstr "``route-filter-v4`` - Well-known communities value ROUTE_FILTER_v4 0xFFFF0003" +msgstr "``route-filter-v4`` - Значення відомих спільнот ROUTE_FILTER_v4 0xFFFF0003" -#: ../../configuration/policy/route-map.rst:372 +#: ../../configuration/policy/route-map.rst:375 msgid "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" -msgstr "``route-filter-v6`` - Well-known communities value ROUTE_FILTER_v6 0xFFFF0005" +msgstr "``route-filter-v6`` - Значення відомих спільнот ROUTE_FILTER_v6 0xFFFF0005" #: ../../configuration/vpn/site2site_ipsec.rst:48 msgid "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" -msgstr "``rsa-key-name`` - shared RSA key for authentication. The key must be defined in the ``set vpn rsa-keys`` section;" +msgstr "``rsa-key-name`` - спільний ключ RSA для автентифікації. Ключ має бути визначений у розділі ``set vpn rsa-keys``;" + +#: ../../configuration/vpn/site2site_ipsec.rst:48 +msgid "``rsa`` - options for RSA authentication mode:" +msgstr "``rsa`` - options for RSA authentication mode:" + +#: ../../configuration/vpn/site2site_ipsec.rst:40 +msgid "``rsa`` - use simple shared RSA key." +msgstr "``rsa`` - use simple shared RSA key." #: ../../configuration/vpn/site2site_ipsec.rst:39 msgid "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" -msgstr "``rsa`` - use simple shared RSA key. The key must be defined in the ``set vpn rsa-keys`` section;" +msgstr "``rsa`` - використовувати простий спільний ключ RSA. Ключ повинен бути визначений у розділі ``set vpn rsa-keys``;" -#: ../../configuration/vpn/site2site_ipsec.rst:27 +#: ../../configuration/vpn/site2site_ipsec.rst:28 msgid "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" -msgstr "``secret`` - predefined shared secret. Used if configured mode ``pre-shared-secret``;" +msgstr "``secret`` - попередньо визначений спільний секрет. Використовується, якщо налаштовано режим ``pre-shared-secret``;" #: ../../configuration/firewall/index.rst:90 msgid "``set firewall bridge forward filter ...``." @@ -18978,10 +20882,13 @@ msgid "``set firewall ipv4 forward filter ...``." msgstr "``set firewall ipv4 forward filter ...``." #: ../../configuration/firewall/index.rst:54 -#: ../../configuration/firewall/index.rst:72 msgid "``set firewall ipv4 input filter ...``." msgstr "``set firewall ipv4 input filter ...``." +#: ../../configuration/firewall/index.rst:72 +msgid "``set firewall ipv4 output filter ...``." +msgstr "``set firewall ipv4 output filter ...``." + #: ../../configuration/firewall/index.rst:63 msgid "``set firewall ipv6 forward filter ...``." msgstr "``set firewall ipv6 forward filter ...``." @@ -18996,51 +20903,67 @@ msgstr "``set firewall ipv6 output filter ...``." #: ../../configuration/interfaces/wireless.rst:238 msgid "``single-user-beamformee`` - Support for operation as single user beamformee" -msgstr "``single-user-beamformee`` - Support for operation as single user beamformee" +msgstr "``single-user-beamformee`` - Підтримка роботи як однокористувацький beamformee" #: ../../configuration/interfaces/wireless.rst:237 msgid "``single-user-beamformer`` - Support for operation as single user beamformer" -msgstr "``single-user-beamformer`` - Support for operation as single user beamformer" +msgstr "``single-user-beamformer`` - Підтримка роботи в якості однокористувацького засобу формування променя" #: ../../configuration/service/lldp.rst:68 msgid "``sonmp`` - Listen for SONMP for Nortel routers/switches" -msgstr "``sonmp`` - Listen for SONMP for Nortel routers/switches" +msgstr "``sonmp`` - Прослуховування SONMP для маршрутизаторів/комутаторів Nortel" #: ../../configuration/loadbalancing/reverse-proxy.rst:104 msgid "``source-address`` Distributes requests based on the source IP address of the client" -msgstr "``source-address`` Distributes requests based on the source IP address of the client" +msgstr "``source-address`` Розповсюджує запити на основі вихідної IP-адреси клієнта" -#: ../../configuration/system/login.rst:74 +#: ../../configuration/system/login.rst:78 msgid "``ssh-dss``" msgstr "``ssh-dss``" -#: ../../configuration/system/login.rst:75 +#: ../../configuration/system/login.rst:79 msgid "``ssh-ed25519``" msgstr "``ssh-ed25519``" -#: ../../configuration/system/login.rst:49 +#: ../../configuration/system/login.rst:53 msgid "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" msgstr "``ssh-rsa AAAAB3NzaC1yc2EAAAABAA...VBD5lKwEWB username@host.example.com``" -#: ../../configuration/system/login.rst:76 +#: ../../configuration/system/login.rst:80 msgid "``ssh-rsa``" -msgstr "``ssh-rsa``" +msgstr "``ssh-rsa''" #: ../../configuration/loadbalancing/reverse-proxy.rst:66 msgid "``ssl-fc-sni-end`` SSL frontend match end of connection Server Name" -msgstr "``ssl-fc-sni-end`` SSL frontend match end of connection Server Name" +msgstr "``ssl-fc-sni-end`` Інтерфейс SSL збігається з назвою сервера підключення" #: ../../configuration/loadbalancing/reverse-proxy.rst:65 msgid "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" -msgstr "``ssl-fc-sni`` SSL frontend connection Server Name Indication match" +msgstr "``ssl-fc-sni`` SSL зовнішнє з'єднання Індикатор індикації сервера відповідає" + +#: ../../configuration/vpn/ipsec.rst:54 +msgid "``start`` tries to immediately re-create the CHILD_SA;" +msgstr "``start`` tries to immediately re-create the CHILD_SA;" #: ../../configuration/policy/route-map.rst:173 msgid "``static`` - Statically configured routes" -msgstr "``static`` - Statically configured routes" +msgstr "``static`` - Статично налаштовані маршрути" #: ../../configuration/interfaces/wireless.rst:122 msgid "``station`` - Connects to another access point" -msgstr "``station`` - Connects to another access point" +msgstr "``станція`` - Підключається до іншої точки доступу" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:185 +msgid "``status 200-399`` Expecting a non-failure response code" +msgstr "``status 200-399`` Expecting a non-failure response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:184 +msgid "``status 200`` Expecting a 200 response code" +msgstr "``status 200`` Expecting a 200 response code" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:186 +msgid "``string success`` Expecting the string `success` in the response body" +msgstr "``string success`` Expecting the string `success` in the response body" #: ../../configuration/firewall/ipv4.rst:103 #: ../../configuration/firewall/ipv6.rst:103 @@ -19049,182 +20972,226 @@ msgstr "``synproxy``: synproxy the packet." #: ../../configuration/system/sysctl.rst:9 msgid "``sysctl`` is used to modify kernel parameters at runtime. The parameters available are those listed under /proc/sys/." -msgstr "``sysctl`` is used to modify kernel parameters at runtime. The parameters available are those listed under /proc/sys/." +msgstr "``sysctl`` використовується для зміни параметрів ядра під час виконання. Доступні параметри, перелічені в /proc/sys/." #: ../../configuration/policy/examples.rst:163 msgid "``table 10`` Routing table used for ISP1" -msgstr "``table 10`` Routing table used for ISP1" +msgstr "``table 10`` Таблиця маршрутизації, яка використовується для ISP1" #: ../../configuration/policy/examples.rst:97 msgid "``table 10`` Routing table used for VLAN 10 (192.168.188.0/24)" -msgstr "``table 10`` Routing table used for VLAN 10 (192.168.188.0/24)" +msgstr "``table 10`` Таблиця маршрутизації, що використовується для VLAN 10 (192.168.188.0/24)" #: ../../configuration/policy/examples.rst:164 msgid "``table 11`` Routing table used for ISP2" -msgstr "``table 11`` Routing table used for ISP2" +msgstr "``table 11`` Таблиця маршрутизації, яка використовується для ISP2" #: ../../configuration/policy/examples.rst:98 msgid "``table 11`` Routing table used for VLAN 11 (192.168.189.0/24)" -msgstr "``table 11`` Routing table used for VLAN 11 (192.168.189.0/24)" +msgstr "``table 11`` Таблиця маршрутизації, що використовується для VLAN 11 (192.168.189.0/24)" #: ../../configuration/policy/route-map.rst:174 msgid "``table`` - Non-main Kernel Routing Table" -msgstr "``table`` - Non-main Kernel Routing Table" +msgstr "``table`` - неосновна таблиця маршрутизації ядра" #: ../../configuration/loadbalancing/wan.rst:174 msgid "``target``: the target to be sent ICMP packets to, address can be an IPv4 address or hostname" -msgstr "``target``: the target to be sent ICMP packets to, address can be an IPv4 address or hostname" +msgstr "``target``: ціль, до якої буде надіслано пакети ICMP, адресою може бути адреса IPv4 або ім’я хоста" #: ../../configuration/loadbalancing/wan.rst:176 msgid "``test-script``: A user defined script must return 0 to be considered successful and non-zero to fail. Scripts are located in /config/scripts, for different locations the full path needs to be provided" -msgstr "``test-script``: A user defined script must return 0 to be considered successful and non-zero to fail. Scripts are located in /config/scripts, for different locations the full path needs to be provided" +msgstr "``test-script``: визначений користувачем сценарій повинен повертати 0, щоб вважатися успішним, і відмінне від нуля, щоб вийти з ладу. Сценарії знаходяться в /config/scripts, для різних розташувань необхідно вказати повний шлях" #: ../../configuration/loadbalancing/wan.rst:92 msgid "``threshold``: ``below`` or ``above`` the specified rate limit." -msgstr "``threshold``: ``below`` or ``above`` the specified rate limit." +msgstr "``поріг``: ``нижче`` або ``вище`` вказаного обмеження швидкості." -#: ../../configuration/system/option.rst:97 +#: ../../configuration/system/option.rst:127 msgid "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." -msgstr "``throughput``: A server profile focused on improving network throughput. This profile favors performance over power savings by setting ``intel_pstate`` and ``max_perf_pct=100`` and increasing kernel network buffer sizes." +msgstr "``пропускна здатність``: профіль сервера, спрямований на підвищення пропускної здатності мережі. Цей профіль надає перевагу продуктивності, а не енергозбереженню, встановлюючи ``intel_pstate`` і ``max_perf_pct=100`` і збільшуючи розміри мережевого буфера ядра." -#: ../../configuration/vpn/ipsec.rst:71 +#: ../../configuration/vpn/ipsec.rst:73 msgid "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" -msgstr "``timeout`` keep-alive timeout in seconds <2-86400> (default 120) IKEv1 only" +msgstr "``timeout`` тайм-аут підтримки активності в секундах <2-86400> (за замовчуванням 120) Лише IKEv1" + +#: ../../configuration/service/https.rst:98 +msgid "``token`` use JWT tokens." +msgstr "``token`` use JWT tokens." #: ../../configuration/interfaces/bonding.rst:80 msgid "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." -msgstr "``transmit-load-balance`` - Adaptive transmit load balancing: channel bonding that does not require any special switch support." +msgstr "``transmit-load-balance`` – адаптивне вирівнювання навантаження передавання: зв’язування каналів, яке не потребує спеціальної підтримки комутатора." -#: ../../configuration/vpn/ipsec.rst:140 +#: ../../configuration/vpn/ipsec.rst:143 msgid "``transport`` transport mode;" -msgstr "``transport`` transport mode;" +msgstr "``транспорт`` вид транспорту;" + +#: ../../configuration/vpn/ipsec.rst:63 +msgid "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" +msgstr "``trap`` installs a trap policy, which will catch matching traffic and tries to re-negotiate the tunnel on-demand;" + +#: ../../configuration/vpn/ipsec.rst:52 +msgid "``trap`` installs a trap policy for the CHILD_SA;" +msgstr "``trap`` installs a trap policy for the CHILD_SA;" #: ../../configuration/loadbalancing/wan.rst:179 msgid "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" -msgstr "``ttl-limit``: For the UDP TTL limit test the hop count limit must be specified. The limit must be shorter than the path length, an ICMP time expired message is needed to be returned for a successful test. default 1" +msgstr "``ttl-limit``: для перевірки обмеження UDP TTL необхідно вказати обмеження кількості переходів. Обмеження має бути коротшим за довжину шляху, для успішного тестування потрібне повідомлення ICMP, термін дії якого закінчився. за замовчуванням 1" #: ../../configuration/system/console.rst:24 msgid "``ttySN`` - Serial device name" -msgstr "``ttySN`` - Serial device name" +msgstr "``ttySN`` - Послідовне ім'я пристрою" #: ../../configuration/system/console.rst:25 msgid "``ttyUSBX`` - USB Serial device name" -msgstr "``ttyUSBX`` - USB Serial device name" +msgstr "``ttyUSBX`` - ім'я пристрою USB Serial" #: ../../configuration/vpn/site2site_ipsec.rst:116 msgid "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" -msgstr "``tunnel`` - define criteria for traffic to be matched for encrypting and send it to a peer:" +msgstr "``tunnel`` - визначте критерії для трафіку, який буде зіставлений для шифрування, і відправте його одноранговому:" -#: ../../configuration/vpn/ipsec.rst:138 +#: ../../configuration/vpn/ipsec.rst:141 msgid "``tunnel`` tunnel mode (default);" -msgstr "``tunnel`` tunnel mode (default);" +msgstr "режим тунелю ``tunnel`` (за замовчуванням);" #: ../../configuration/loadbalancing/wan.rst:182 msgid "``type``: Specify the type of test. type can be ping, ttl or a user defined script" -msgstr "``type``: Specify the type of test. type can be ping, ttl or a user defined script" +msgstr "``type``: вкажіть тип тесту. Тип може бути ping, ttl або визначений користувачем скрипт" -#: ../../configuration/vpn/site2site_ipsec.rst:51 +#: ../../configuration/vpn/site2site_ipsec.rst:56 msgid "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" -msgstr "``use-x509-id`` - use local ID from x509 certificate. Cannot be used when ``id`` is defined;" +msgstr "``use-x509-id`` - використовувати локальний ідентифікатор із сертифіката x509. Не можна використовувати, якщо визначено ``id``;" -#: ../../configuration/vpn/site2site_ipsec.rst:152 +#: ../../configuration/vpn/site2site_ipsec.rst:155 msgid "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." msgstr "``virtual-address`` - Defines a virtual IP address which is requested by the initiator and one or several IPv4 and/or IPv6 addresses are assigned from multiple pools by the responder." #: ../../configuration/vpn/ipsec.rst:168 msgid "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." -msgstr "``virtual-ip`` Allow install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all." +msgstr "``virtual-ip`` Дозволити встановлення віртуальних IP-адрес. Розділений комами список віртуальних IP-адрес для запиту в корисних даних конфігурації IKEv2 або конфігурації режиму IKEv1. Адреси підстановки 0.0.0.0 і :: запитують довільну адресу, можна визначити конкретні адреси. Проте особа, яка відповідає, може повернути іншу адресу або не повернути її взагалі." -#: ../../configuration/vpn/ipsec.rst:168 +#: ../../configuration/vpn/ipsec.rst:172 msgid "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." msgstr "``virtual-ip`` Allows to install virtual-ip addresses. Comma separated list of virtual IPs to request in IKEv2 configuration payloads or IKEv1 Mode Config. The wildcard addresses 0.0.0.0 and :: request an arbitrary address, specific addresses may be defined. The responder may return a different address, though, or none at all. Define the ``virtual-address`` option to configure the IP address in site-to-site hierarchy." #: ../../configuration/policy/route-map.rst:175 msgid "``vnc`` - Virtual Network Control (VNC)" -msgstr "``vnc`` - Virtual Network Control (VNC)" +msgstr "``vnc`` - керування віртуальною мережею (VNC)" -#: ../../configuration/vpn/site2site_ipsec.rst:140 +#: ../../configuration/vpn/site2site_ipsec.rst:143 msgid "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" -msgstr "``vti`` - use a VTI interface for traffic encryption. Any traffic, which will be send to VTI interface will be encrypted and send to this peer. Using VTI makes IPSec configuration much flexible and easier in complex situation, and allows to dynamically add/delete remote networks, reachable via a peer, as in this mode router don't need to create additional SA/policy for each remote network:" +msgstr "``vti`` - використовувати інтерфейс VTI для шифрування трафіку. Будь-який трафік, який надсилатиметься до інтерфейсу VTI, буде зашифровано та надсилатиметься цьому вузлу. Використання VTI робить конфігурацію IPSec набагато гнучкою та простішою в складних ситуаціях, а також дозволяє динамічно додавати/видаляти віддалені мережі, доступні через одноранговий пристрій, оскільки в цьому режимі маршрутизатору не потрібно створювати додаткові SA/політики для кожної віддаленої мережі:" -#: ../../configuration/vpn/site2site_ipsec.rst:54 +#: ../../configuration/pki/index.rst:386 +msgid "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." +msgstr "``vyos_cert`` is a leaf server certificate used to identify the VyOS router, signed by the server intermediary CA." + +#: ../../configuration/pki/index.rst:383 +msgid "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." +msgstr "``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, which are signed by the root CA." + +#: ../../configuration/pki/index.rst:389 +msgid "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." +msgstr "``vyos_example_user`` is a leaf client certificate used to identify a user, signed by client intermediary CA." + +#: ../../configuration/pki/index.rst:381 +msgid "``vyos_root_ca`` is the root certificate authority." +msgstr "``vyos_root_ca`` is the root certificate authority." + +#: ../../configuration/vpn/site2site_ipsec.rst:59 msgid "``x509`` - options for x509 authentication mode:" -msgstr "``x509`` - options for x509 authentication mode:" +msgstr "``x509`` - параметри режиму аутентифікації x509:" #: ../../configuration/vpn/site2site_ipsec.rst:42 msgid "``x509`` - use certificates infrastructure for authentication." -msgstr "``x509`` - use certificates infrastructure for authentication." +msgstr "``x509`` - використовувати інфраструктуру сертифікатів для автентифікації." #: ../../configuration/interfaces/bonding.rst:119 msgid "``xor-hash`` - XOR policy: Transmit based on the selected transmit hash policy. The default policy is a simple [(source MAC address XOR'd with destination MAC address XOR packet type ID) modulo slave count]. Alternate transmit policies may be selected via the :cfgcmd:`hash-policy` option, described below." -msgstr "``xor-hash`` - XOR policy: Transmit based on the selected transmit hash policy. The default policy is a simple [(source MAC address XOR'd with destination MAC address XOR packet type ID) modulo slave count]. Alternate transmit policies may be selected via the :cfgcmd:`hash-policy` option, described below." +msgstr "``xor-hash`` - політика XOR: передача на основі обраної політики хешування передачі. Політика за замовчуванням — це проста [(вихідна MAC-адреса XOR'd з MAC-адресою призначення XOR тип пакета) за модулем кількості підлеглих]. Альтернативні політики передачі можна вибрати за допомогою опції :cfgcmd:`hash-policy`, описаної нижче." #: ../../configuration/vpn/ipsec.rst:78 msgid "``yes`` enable remote host re-authentication during an IKE rekey;" -msgstr "``yes`` enable remote host re-authentication during an IKE rekey;" +msgstr "``yes`` увімкнути повторну автентифікацію віддаленого хоста під час повторного ключа IKE;" + +#: ../../configuration/service/ntp.rst:90 +msgid "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." +msgstr "`ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are made and the estimated offset includes the one second error." + +#: ../../configuration/service/ntp.rst:94 +msgid "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." +msgstr "`smear`: When smearing a leap second, the leap status is suppressed on the server and the served time is corrected slowly by slewing instead of stepping. The clients do not need any special configuration as they do not know there is any leap second and they follow the server time which eventually brings them back to UTC. Care must be taken to ensure they use only NTP servers which smear the leap second in exactly the same way for synchronisation." -#: ../../configuration/system/option.rst:39 +#: ../../configuration/system/option.rst:69 msgid "`source-address` and `source-interface` can not be used at the same time." -msgstr "`source-address` and `source-interface` can not be used at the same time." +msgstr "`source-address` та `source-interface` не можна використовувати одночасно." + +#: ../../configuration/service/ntp.rst:102 +msgid "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." +msgstr "`system`: When inserting a leap second, the kernel steps the system clock backwards by one second when the clock gets to 00:00:00 UTC. When deleting a leap second, it steps forward by one second when the clock gets to 23:59:59 UTC." + +#: ../../configuration/service/ntp.rst:107 +msgid "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" +msgstr "`timezone`: This directive specifies a timezone in the system timezone database which chronyd can use to determine when will the next leap second occur and what is the current offset between TAI and UTC. It will periodically check if 23:59:59 and 23:59:60 are valid times in the timezone. This normally works with the right/UTC timezone which is the default" #: ../../configuration/protocols/rpki.rst:12 msgid "`tweet by EvilMog`_, 2020-02-21" -msgstr "`tweet by EvilMog`_, 2020-02-21" +msgstr "`твіт від EvilMog`_, 2020-02-21" #: ../../configuration/system/acceleration.rst:111 msgid "a bandwidth test over the VPN got these results:" -msgstr "a bandwidth test over the VPN got these results:" +msgstr "тест пропускної здатності через VPN дав такі результати:" #: ../../configuration/loadbalancing/wan.rst:276 msgid "a blank indicates that no test has been carried out" -msgstr "a blank indicates that no test has been carried out" +msgstr "порожній знак означає, що тест не проводився" #: ../../configuration/nat/nat44.rst:750 #: ../../configuration/nat/nat44.rst:755 msgid "aes256 Encryption" -msgstr "aes256 Encryption" +msgstr "Шифрування aes256" #: ../../configuration/system/syslog.rst:173 msgid "alert" -msgstr "alert" +msgstr "Попередження" #: ../../configuration/system/syslog.rst:110 #: ../../configuration/system/syslog.rst:169 #: ../../configuration/system/syslog.rst:219 msgid "all" -msgstr "all" +msgstr "все" -#: ../../configuration/vrf/index.rst:428 +#: ../../configuration/vrf/index.rst:447 msgid "an RD / RTLIST" -msgstr "an RD / RTLIST" +msgstr "RD / RTLIST" #: ../../configuration/loadbalancing/wan.rst:16 msgid "an interface with a nexthop" -msgstr "an interface with a nexthop" +msgstr "інтерфейс із nexthop" #: ../../configuration/policy/access-list.rst:38 msgid "any: any IP address to match." -msgstr "any: any IP address to match." +msgstr "будь-який: будь-яка відповідна IP-адреса." #: ../../configuration/policy/access-list.rst:67 msgid "any: any IPv6 address to match." -msgstr "any: any IPv6 address to match." +msgstr "будь-який: будь-яка відповідна адреса IPv6." #: ../../configuration/system/syslog.rst:120 msgid "auth" -msgstr "auth" +msgstr "авт" #: ../../configuration/system/syslog.rst:221 msgid "authorization" -msgstr "authorization" +msgstr "авторизація" #: ../../configuration/interfaces/ethernet.rst:30 msgid "auto - interface duplex setting is auto-negotiated" -msgstr "auto - interface duplex setting is auto-negotiated" +msgstr "auto - дуплексне налаштування інтерфейсу узгоджується автоматично" #: ../../configuration/interfaces/ethernet.rst:41 msgid "auto - interface speed is auto-negotiated" -msgstr "auto - interface speed is auto-negotiated" +msgstr "auto - швидкість інтерфейсу автоматично узгоджується" #: ../../configuration/system/frr.rst:32 msgid "bgpd" @@ -19232,147 +21199,151 @@ msgstr "bgpd" #: ../../configuration/service/router-advert.rst:13 msgid "bonding" -msgstr "bonding" +msgstr "склеювання" -#: ../../configuration/service/dhcp-server.rst:305 +#: ../../configuration/service/dhcp-server.rst:361 msgid "boot-size" -msgstr "boot-size" +msgstr "розмір чобота" -#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:354 msgid "bootfile-name" -msgstr "bootfile-name" +msgstr "ім'я завантажувального файлу" -#: ../../configuration/service/dhcp-server.rst:300 +#: ../../configuration/service/dhcp-server.rst:356 msgid "bootfile-name, filename" -msgstr "bootfile-name, filename" +msgstr "ім'я завантажувального файлу, ім'я файлу" -#: ../../configuration/service/dhcp-server.rst:288 +#: ../../configuration/service/dhcp-server.rst:344 msgid "bootfile-server" -msgstr "bootfile-server" +msgstr "завантажувальний файл-сервер" -#: ../../configuration/service/dhcp-server.rst:303 +#: ../../configuration/service/dhcp-server.rst:359 msgid "bootfile-size" -msgstr "bootfile-size" +msgstr "розмір завантажувального файлу" #: ../../configuration/service/router-advert.rst:14 msgid "bridge" -msgstr "bridge" +msgstr "Міст" -#: ../../configuration/service/dhcp-server.rst:236 +#: ../../configuration/service/dhcp-server.rst:292 msgid "client-prefix-length" msgstr "client-prefix-length" #: ../../configuration/vpn/pptp.rst:30 msgid "client example (debian 9)" -msgstr "client example (debian 9)" +msgstr "приклад клієнта (debian 9)" #: ../../configuration/system/syslog.rst:142 msgid "clock" -msgstr "clock" +msgstr "Годинник" #: ../../configuration/system/syslog.rst:142 msgid "clock daemon (note 2)" -msgstr "clock daemon (note 2)" +msgstr "демон годинника (примітка 2)" #: ../../configuration/system/syslog.rst:178 msgid "crit" -msgstr "crit" +msgstr "крит" #: ../../configuration/system/syslog.rst:130 msgid "cron" -msgstr "cron" +msgstr "хрон" #: ../../configuration/system/syslog.rst:118 msgid "daemon" -msgstr "daemon" +msgstr "демон" -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:499 msgid "ddclient_ has another way to determine the WAN IP address. This is controlled by:" -msgstr "ddclient_ has another way to determine the WAN IP address. This is controlled by:" +msgstr "ddclient_ має інший спосіб визначення IP-адреси WAN. Це контролюється:" -#: ../../configuration/service/dns.rst:218 +#: ../../configuration/service/dns.rst:232 msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." -msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other similar website. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." +msgstr "ddclient_ використовує два методи для оновлення запису DNS. Перший надсилатиме оновлення безпосередньо до демона DNS відповідно до :rfc:`2136`. Другий передбачає сторонню службу, як-от DynDNS.com або будь-який інший подібний веб-сайт. Цей метод використовує запити HTTP для передачі нової IP-адреси. Ви можете налаштувати обидва у VyOS." -#: ../../configuration/service/dns.rst:413 +#: ../../configuration/service/dns.rst:299 +msgid "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." +msgstr "ddclient_ uses two methods to update a DNS record. The first one will send updates directly to the DNS daemon, in compliance with :rfc:`2136`. The second one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS." + +#: ../../configuration/service/dns.rst:509 msgid "ddclient_ will skip any address located before the string set in `<pattern>`." -msgstr "ddclient_ will skip any address located before the string set in `<pattern>`." +msgstr "ddclient_ пропустить будь-яку адресу, розташовану перед рядком, установленим у `<pattern> `." #: ../../configuration/system/syslog.rst:191 msgid "debug" -msgstr "debug" +msgstr "Відлагоджувати" #: ../../configuration/service/router-advert.rst:1 msgid "decrement-lifetime" -msgstr "decrement-lifetime" +msgstr "декремент-час життя" -#: ../../configuration/service/dhcp-server.rst:335 +#: ../../configuration/service/dhcp-server.rst:391 msgid "default-lease-time, max-lease-time" msgstr "default-lease-time, max-lease-time" #: ../../configuration/service/router-advert.rst:1 msgid "default-lifetime" -msgstr "default-lifetime" +msgstr "термін служби за замовчуванням" #: ../../configuration/service/router-advert.rst:1 msgid "default-preference" -msgstr "default-preference" +msgstr "налаштування за замовчуванням" -#: ../../configuration/service/dhcp-server.rst:248 +#: ../../configuration/service/dhcp-server.rst:304 msgid "default-router" -msgstr "default-router" +msgstr "маршрутизатор за замовчуванням" #: ../../configuration/trafficpolicy/index.rst:862 msgid "default min-threshold" -msgstr "default min-threshold" +msgstr "мінімальний поріг за замовчуванням" #: ../../configuration/service/router-advert.rst:1 msgid "deprecate-prefix" msgstr "deprecate-prefix" -#: ../../configuration/highavailability/index.rst:354 +#: ../../configuration/highavailability/index.rst:364 msgid "destination-hashing" -msgstr "destination-hashing" +msgstr "призначення-хешування" -#: ../../configuration/service/dhcp-server.rst:285 +#: ../../configuration/service/dhcp-server.rst:341 msgid "dhcp-server-identifier" -msgstr "dhcp-server-identifier" +msgstr "dhcp-сервер-ідентифікатор" -#: ../../configuration/highavailability/index.rst:364 +#: ../../configuration/highavailability/index.rst:374 msgid "direct" -msgstr "direct" +msgstr "Прямий" #: ../../configuration/system/syslog.rst:223 msgid "directory" -msgstr "directory" +msgstr "Довідник" #: ../../configuration/interfaces/pppoe.rst:241 #: ../../configuration/interfaces/sstp-client.rst:113 #: ../../_include/interface-ip.txt:190 msgid "disable: No source validation" -msgstr "disable: No source validation" +msgstr "відключити: немає перевірки джерела" #: ../../configuration/service/router-advert.rst:1 msgid "dnssl" -msgstr "dnssl" +msgstr "DNSSL" -#: ../../configuration/service/dhcp-server.rst:263 -#: ../../configuration/service/dhcp-server.rst:265 +#: ../../configuration/service/dhcp-server.rst:319 +#: ../../configuration/service/dhcp-server.rst:321 msgid "domain-name" -msgstr "domain-name" +msgstr "Доменне ім'я" -#: ../../configuration/service/dhcp-server.rst:260 +#: ../../configuration/service/dhcp-server.rst:316 msgid "domain-name-servers" -msgstr "domain-name-servers" +msgstr "сервери доменних імен" -#: ../../configuration/service/dhcp-server.rst:318 -#: ../../configuration/service/dhcp-server.rst:320 +#: ../../configuration/service/dhcp-server.rst:374 +#: ../../configuration/service/dhcp-server.rst:376 msgid "domain-search" -msgstr "domain-search" +msgstr "доменний пошук" #: ../../configuration/system/syslog.rst:171 msgid "emerg" -msgstr "emerg" +msgstr "з'являється" #: ../../configuration/firewall/global-options.rst:84 msgid "enable or disable ICMPv4 redirect messages send by VyOS The following system parameter will be altered:" @@ -19380,48 +21351,48 @@ msgstr "enable or disable ICMPv4 redirect messages send by VyOS The following sy #: ../../configuration/firewall/general-legacy.rst:98 msgid "enable or disable ICMPv4 redirect messages send by VyOS The following system parameter will be altered:" -msgstr "enable or disable ICMPv4 redirect messages send by VyOS The following system parameter will be altered:" +msgstr "увімкнути або вимкнути повідомлення перенаправлення ICMPv4, які надсилаються VyOS. Наступний системний параметр буде змінено:" #: ../../configuration/firewall/global-options.rst:76 msgid "enable or disable of ICMPv4 or ICMPv6 redirect messages accepted by VyOS. The following system parameter will be altered:" -msgstr "enable or disable of ICMPv4 or ICMPv6 redirect messages accepted by VyOS. The following system parameter will be altered:" +msgstr "увімкнути або вимкнути повідомлення перенаправлення ICMPv4 або ICMPv6, які приймає VyOS. Буде змінено наступний системний параметр:" #: ../../configuration/firewall/global-options.rst:91 msgid "enable or disable the logging of martian IPv4 packets. The following system parameter will be altered:" -msgstr "enable or disable the logging of martian IPv4 packets. The following system parameter will be altered:" +msgstr "увімкнути або вимкнути журналювання марсіанських пакетів IPv4. Буде змінено наступний системний параметр:" #: ../../configuration/system/syslog.rst:181 msgid "err" -msgstr "err" +msgstr "помилка" #: ../../configuration/service/router-advert.rst:15 msgid "ethernet" -msgstr "ethernet" +msgstr "Ethernet" #: ../../configuration/policy/access-list.rst:68 msgid "exact-match: exact match of the network prefixes." -msgstr "exact-match: exact match of the network prefixes." +msgstr "exact-match: точний збіг префіксів мережі." -#: ../../configuration/service/dhcp-server.rst:343 +#: ../../configuration/service/dhcp-server.rst:399 msgid "exclude" -msgstr "exclude" +msgstr "Виключити" -#: ../../configuration/service/dhcp-server.rst:348 +#: ../../configuration/service/dhcp-server.rst:404 msgid "failover" -msgstr "failover" +msgstr "Перехід після відмови" #: ../../configuration/interfaces/bonding.rst:155 msgid "fast: Request partner to transmit LACPDUs every 1 second" -msgstr "fast: Request partner to transmit LACPDUs every 1 second" +msgstr "швидкий: попросіть партнера передавати LACPDU кожну 1 секунду" #: ../../configuration/system/syslog.rst:225 msgid "file <file name>" -msgstr "file <file name>" +msgstr "файл<file name>" -#: ../../configuration/protocols/bgp.rst:826 -#: ../../configuration/protocols/bgp.rst:832 +#: ../../configuration/protocols/bgp.rst:848 +#: ../../configuration/protocols/bgp.rst:854 msgid "filter-list" -msgstr "filter-list" +msgstr "фільтр-список" #: ../../configuration/system/syslog.rst:134 msgid "ftp" @@ -19429,21 +21400,25 @@ msgstr "ftp" #: ../../configuration/interfaces/ethernet.rst:31 msgid "full - always use full-duplex" -msgstr "full - always use full-duplex" +msgstr "full - завжди використовуйте повний дуплекс" + +#: ../../configuration/service/router-advert.rst:16 +msgid "geneve" +msgstr "geneve" #: ../../configuration/interfaces/ethernet.rst:32 msgid "half - always use half-duplex" -msgstr "half - always use half-duplex" +msgstr "половина - завжди використовуйте напівдуплекс" #: ../../configuration/service/router-advert.rst:1 msgid "hop-limit" -msgstr "hop-limit" +msgstr "хоп-ліміт" #: ../../configuration/policy/access-list.rst:39 msgid "host: single host IP address to match." -msgstr "host: single host IP address to match." +msgstr "хост: єдина IP-адреса хоста для відповідності." -#: ../../configuration/system/option.rst:89 +#: ../../configuration/system/option.rst:119 msgid "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" msgstr "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" @@ -19453,84 +21428,92 @@ msgstr "https://community.openvpn.net/openvpn/wiki/DataChannelOffload/Features" #: ../../configuration/system/acceleration.rst:28 msgid "if there is a supported device, enable Intel® QAT" -msgstr "if there is a supported device, enable Intel® QAT" +msgstr "якщо є підтримуваний пристрій, увімкніть Intel® QAT" #: ../../configuration/system/acceleration.rst:24 msgid "if there is non device the command will show ```No QAT device found```" -msgstr "if there is non device the command will show ```No QAT device found```" +msgstr "якщо немає пристрою, команда покаже ```Пристрій QAT не знайдено```" #: ../../configuration/system/syslog.rst:189 msgid "info" -msgstr "info" +msgstr "Інформація" #: ../../configuration/service/router-advert.rst:1 msgid "interval" -msgstr "interval" +msgstr "Інтервал" -#: ../../configuration/protocols/rpki.rst:56 +#: ../../configuration/protocols/rpki.rst:54 msgid "invalid" -msgstr "invalid" +msgstr "Недійсний" #: ../../configuration/policy/access-list.rst:40 msgid "inverse-match: network/netmask to match (requires network be defined)." -msgstr "inverse-match: network/netmask to match (requires network be defined)." +msgstr "inverse-match: мережа/маска мережі для відповідності (потрібно визначити мережу)." -#: ../../configuration/service/dhcp-server.rst:268 -#: ../../configuration/service/dhcp-server.rst:270 +#: ../../configuration/service/dhcp-server.rst:324 +#: ../../configuration/service/dhcp-server.rst:326 msgid "ip-forwarding" -msgstr "ip-forwarding" +msgstr "ip-переадресація" #: ../../configuration/system/frr.rst:33 msgid "isisd" msgstr "isisd" +#: ../../configuration/interfaces/ethernet.rst:106 +msgid "it can be used with any NIC" +msgstr "it can be used with any NIC" + #: ../../configuration/interfaces/ethernet.rst:90 msgid "it can be used with any NIC," -msgstr "it can be used with any NIC," +msgstr "його можна використовувати з будь-якою мережевою карткою," + +#: ../../configuration/interfaces/ethernet.rst:108 +msgid "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" +msgstr "it does not increase hardware device interrupt rate, although it does introduce inter-processor interrupts (IPIs)" #: ../../configuration/interfaces/ethernet.rst:92 msgid "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." -msgstr "it does not increase hardware device interrupt rate (although it does introduce inter-processor interrupts (IPIs))." +msgstr "це не збільшує частоту переривань апаратного пристрою (хоча вводить міжпроцесорні переривання (IPI))." #: ../../configuration/system/syslog.rst:112 msgid "kern" msgstr "kern" -#: ../../configuration/service/router-advert.rst:16 +#: ../../configuration/service/router-advert.rst:17 msgid "l2tpv3" -msgstr "l2tpv3" +msgstr "L2TPv3" #: ../../configuration/system/frr.rst:34 msgid "ldpd" msgstr "ldpd" -#: ../../configuration/service/dhcp-server.rst:333 +#: ../../configuration/service/dhcp-server.rst:389 msgid "lease" -msgstr "lease" +msgstr "оренда" -#: ../../configuration/highavailability/index.rst:351 +#: ../../configuration/highavailability/index.rst:361 msgid "least-connection" -msgstr "least-connection" +msgstr "найменший зв'язок" -#: ../../configuration/vpn/site2site_ipsec.rst:275 +#: ../../configuration/vpn/site2site_ipsec.rst:278 msgid "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" -msgstr "left local_ip: 192.168.0.10 # VPN Gateway, behind NAT device" +msgstr "лівий локальний_ip: 192.168.0.10 # Шлюз VPN, за пристроєм NAT" -#: ../../configuration/vpn/site2site_ipsec.rst:167 +#: ../../configuration/vpn/site2site_ipsec.rst:170 msgid "left local_ip: `198.51.100.3` # server side WAN IP" -msgstr "left local_ip: `198.51.100.3` # server side WAN IP" +msgstr "лівий локальний_ip: `198.51.100.3` # WAN IP на стороні сервера" -#: ../../configuration/vpn/site2site_ipsec.rst:276 +#: ../../configuration/vpn/site2site_ipsec.rst:279 msgid "left public_ip:172.18.201.10" -msgstr "left public_ip:172.18.201.10" +msgstr "залишив public_ip:172.18.201.10" -#: ../../configuration/vpn/site2site_ipsec.rst:165 +#: ../../configuration/vpn/site2site_ipsec.rst:168 msgid "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" -msgstr "left subnet: `192.168.0.0/24` site1, server side (i.e. locality, actually there is no client or server roles)" +msgstr "ліва підмережа: `192.168.0.0/24` site1, сторона сервера (тобто місцевість, насправді немає ролей клієнта чи сервера)" #: ../../configuration/service/router-advert.rst:1 msgid "link-mtu" -msgstr "link-mtu" +msgstr "лінк-мен" #: ../../configuration/system/syslog.rst:144 msgid "local0" @@ -19538,63 +21521,63 @@ msgstr "local0" #: ../../configuration/system/syslog.rst:146 msgid "local1" -msgstr "local1" +msgstr "місцевий1" #: ../../configuration/system/syslog.rst:148 msgid "local2" -msgstr "local2" +msgstr "місцевий2" #: ../../configuration/system/syslog.rst:150 msgid "local3" -msgstr "local3" +msgstr "місцевий3" #: ../../configuration/system/syslog.rst:152 msgid "local4" -msgstr "local4" +msgstr "місцевий4" #: ../../configuration/system/syslog.rst:154 msgid "local5" -msgstr "local5" +msgstr "місцевий5" #: ../../configuration/system/syslog.rst:156 msgid "local6" -msgstr "local6" +msgstr "місцевий6" #: ../../configuration/system/syslog.rst:158 msgid "local7" -msgstr "local7" +msgstr "місцевий7" #: ../../configuration/system/syslog.rst:144 msgid "local use 0 (local0)" -msgstr "local use 0 (local0)" +msgstr "локальне використання 0 (локальний0)" #: ../../configuration/system/syslog.rst:146 msgid "local use 1 (local1)" -msgstr "local use 1 (local1)" +msgstr "локальне використання 1 (локальний1)" #: ../../configuration/system/syslog.rst:148 msgid "local use 2 (local2)" -msgstr "local use 2 (local2)" +msgstr "локальне використання 2 (локальний2)" #: ../../configuration/system/syslog.rst:150 msgid "local use 3 (local3)" -msgstr "local use 3 (local3)" +msgstr "локальне використання 3 (локальний3)" #: ../../configuration/system/syslog.rst:152 msgid "local use 4 (local4)" -msgstr "local use 4 (local4)" +msgstr "локальне використання 4 (локальний4)" #: ../../configuration/system/syslog.rst:154 msgid "local use 5 (local5)" -msgstr "local use 5 (local5)" +msgstr "локальне використання 5 (локальний5)" #: ../../configuration/system/syslog.rst:158 msgid "local use 7 (local7)" -msgstr "local use 7 (local7)" +msgstr "локальне використання 7 (локальний7)" -#: ../../configuration/highavailability/index.rst:355 +#: ../../configuration/highavailability/index.rst:365 msgid "locality-based-least-connection" -msgstr "locality-based-least-connection" +msgstr "найменший зв'язок на основі місцевості" #: ../../configuration/system/syslog.rst:140 msgid "logalert" @@ -19602,13 +21585,13 @@ msgstr "logalert" #: ../../configuration/system/syslog.rst:138 msgid "logaudit" -msgstr "logaudit" +msgstr "логаудит" #: ../../configuration/interfaces/pppoe.rst:237 #: ../../configuration/interfaces/sstp-client.rst:109 #: ../../_include/interface-ip.txt:186 msgid "loose: Each incoming packet's source address is also tested against the FIB and if the source address is not reachable via any interface the packet check will fail." -msgstr "loose: Each incoming packet's source address is also tested against the FIB and if the source address is not reachable via any interface the packet check will fail." +msgstr "loose: адреса джерела кожного вхідного пакету також перевіряється на FIB, і якщо адреса джерела недоступна через будь-який інтерфейс, перевірка пакета не вдасться." #: ../../configuration/system/syslog.rst:124 msgid "lpr" @@ -19616,7 +21599,7 @@ msgstr "lpr" #: ../../configuration/service/mdns.rst:2 msgid "mDNS Repeater" -msgstr "mDNS Repeater" +msgstr "Повторювач mDNS" #: ../../configuration/service/mdns.rst:38 msgid "mDNS repeater can be configured to re-broadcast only specific services. By default, all services are re-broadcasted." @@ -19628,68 +21611,68 @@ msgstr "mDNS repeater can be enabled either on IPv4 socket or on IPv6 socket or #: ../../configuration/service/mdns.rst:29 msgid "mDNS repeater can be temporarily disabled without deleting the service using" -msgstr "mDNS repeater can be temporarily disabled without deleting the service using" +msgstr "Повторювач mDNS можна тимчасово вимкнути без видалення служби за допомогою" #: ../../configuration/system/syslog.rst:116 msgid "mail" -msgstr "mail" +msgstr "Пошта" #: ../../configuration/service/router-advert.rst:1 msgid "managed-flag" -msgstr "managed-flag" +msgstr "керований прапор" #: ../../configuration/policy/route.rst:125 msgid "match-frag: Second and further fragments of fragmented packets." -msgstr "match-frag: Second and further fragments of fragmented packets." +msgstr "match-frag: другий і наступні фрагменти фрагментованих пакетів." #: ../../configuration/policy/route.rst:146 msgid "match-ipsec: match inbound IPsec packets." -msgstr "match-ipsec: match inbound IPsec packets." +msgstr "match-ipsec: зіставляти вхідні пакети IPsec." #: ../../configuration/policy/route.rst:126 msgid "match-non-frag: Head fragments or unfragmented packets." -msgstr "match-non-frag: Head fragments or unfragmented packets." +msgstr "match-non-frag: головні фрагменти або нефрагментовані пакети." #: ../../configuration/policy/route.rst:147 msgid "match-none: match inbound non-IPsec packets." -msgstr "match-none: match inbound non-IPsec packets." +msgstr "match-none: шукати вхідні пакети, відмінні від IPsec." #: ../../configuration/highavailability/index.rst:32 msgid "minimal config" -msgstr "minimal config" +msgstr "мінімальна конфігурація" #: ../../configuration/protocols/segment-routing.rst:115 msgid "more information related IGP - :ref:`routing-isis`" -msgstr "more information related IGP - :ref:`routing-isis`" +msgstr "більше інформації про IGP - :ref:`routing-isis`" #: ../../configuration/protocols/segment-routing.rst:184 msgid "more information related IGP - :ref:`routing-ospf`" -msgstr "more information related IGP - :ref:`routing-ospf`" +msgstr "більше інформації про IGP - :ref:`routing-ospf`" -#: ../../configuration/service/dhcp-server.rst:258 +#: ../../configuration/service/dhcp-server.rst:314 #: ../../configuration/service/router-advert.rst:1 msgid "name-server" -msgstr "name-server" +msgstr "сервер імен" -#: ../../configuration/service/dhcp-server.rst:280 +#: ../../configuration/service/dhcp-server.rst:336 msgid "netbios-name-servers" -msgstr "netbios-name-servers" +msgstr "сервери імен netbios" #: ../../configuration/policy/access-list.rst:41 msgid "network: network/netmask to match (requires inverse-match be defined)." -msgstr "network: network/netmask to match (requires inverse-match be defined)." +msgstr "мережа: мережа/маска мережі для відповідності (потрібно визначити інверсну відповідність)." #: ../../configuration/policy/access-list.rst:69 msgid "network: network/netmask to match (requires inverse-match be defined) BUG, NO invert-match option in access-list6" -msgstr "network: network/netmask to match (requires inverse-match be defined) BUG, NO invert-match option in access-list6" +msgstr "мережа: мережа/маска мережі для відповідності (потрібно визначити інверсну відповідність) ПОМИЛКА, НЕМАЄ опції інвертованої відповідності в списку доступу6" #: ../../configuration/system/syslog.rst:126 msgid "news" -msgstr "news" +msgstr "Новини" -#: ../../configuration/service/dhcp-server.rst:290 +#: ../../configuration/service/dhcp-server.rst:346 msgid "next-server" -msgstr "next-server" +msgstr "наступний сервер" #: ../../configuration/service/router-advert.rst:1 msgid "no-autonomous-flag" @@ -19697,35 +21680,35 @@ msgstr "no-autonomous-flag" #: ../../configuration/service/router-advert.rst:1 msgid "no-on-link-flag" -msgstr "no-on-link-flag" +msgstr "прапор відсутності посилання" -#: ../../configuration/protocols/rpki.rst:61 +#: ../../configuration/protocols/rpki.rst:59 msgid "notfound" -msgstr "notfound" +msgstr "не знайдено" #: ../../configuration/system/syslog.rst:185 msgid "notice" -msgstr "notice" +msgstr "Повідомлення" #: ../../configuration/system/syslog.rst:136 msgid "ntp" -msgstr "ntp" +msgstr "NTP" -#: ../../configuration/service/dhcp-server.rst:273 +#: ../../configuration/service/dhcp-server.rst:329 msgid "ntp-server" -msgstr "ntp-server" +msgstr "ntp-сервер" -#: ../../configuration/service/dhcp-server.rst:275 +#: ../../configuration/service/dhcp-server.rst:331 msgid "ntp-servers" -msgstr "ntp-servers" +msgstr "ntp-сервери" #: ../../configuration/loadbalancing/wan.rst:17 msgid "one rule with a LAN (inbound-interface) and the WAN (interface)." -msgstr "one rule with a LAN (inbound-interface) and the WAN (interface)." +msgstr "одне правило з LAN (вхідний інтерфейс) і WAN (інтерфейс)." -#: ../../configuration/service/router-advert.rst:17 +#: ../../configuration/service/router-advert.rst:18 msgid "openvpn" -msgstr "openvpn" +msgstr "OpenVPN" #: ../../configuration/system/frr.rst:35 msgid "ospf6d" @@ -19737,103 +21720,103 @@ msgstr "ospfd" #: ../../configuration/protocols/ospf.rst:207 msgid "ospfd supports Opaque LSA :rfc:`2370` as partial support for MPLS Traffic Engineering LSAs. The opaque-lsa capability must be enabled in the configuration." -msgstr "ospfd supports Opaque LSA :rfc:`2370` as partial support for MPLS Traffic Engineering LSAs. The opaque-lsa capability must be enabled in the configuration." +msgstr "ospfd підтримує Opaque LSA :rfc:`2370` як часткову підтримку для MPLS Traffic Engineering LSA. Можливість opaque-lsa має бути ввімкнена в конфігурації." #: ../../configuration/service/router-advert.rst:1 msgid "other-config-flag" -msgstr "other-config-flag" +msgstr "інший конфігураційний прапор" #: ../../configuration/vpn/index.rst:18 msgid "pages to sort" -msgstr "pages to sort" +msgstr "сторінок для сортування" #: ../../configuration/policy/as-path-list.rst:13 msgid "policy as-path-list" -msgstr "policy as-path-list" +msgstr "політика as-path-list" #: ../../configuration/policy/community-list.rst:13 msgid "policy community-list" -msgstr "policy community-list" +msgstr "політика спільноти-список" #: ../../configuration/policy/extcommunity-list.rst:13 msgid "policy extcommunity-list" -msgstr "policy extcommunity-list" +msgstr "політика extcommunity-list" #: ../../configuration/policy/large-community-list.rst:13 msgid "policy large-community-list" -msgstr "policy large-community-list" +msgstr "політика large-community-list" -#: ../../configuration/service/dhcp-server.rst:313 -#: ../../configuration/service/dhcp-server.rst:315 +#: ../../configuration/service/dhcp-server.rst:369 +#: ../../configuration/service/dhcp-server.rst:371 msgid "pop-server" -msgstr "pop-server" +msgstr "поп-сервер" #: ../../configuration/service/router-advert.rst:1 msgid "preferred-lifetime" -msgstr "preferred-lifetime" +msgstr "бажаний довічно" -#: ../../configuration/protocols/bgp.rst:827 -#: ../../configuration/protocols/bgp.rst:831 +#: ../../configuration/protocols/bgp.rst:849 +#: ../../configuration/protocols/bgp.rst:853 msgid "prefix-list, distribute-list" msgstr "prefix-list, distribute-list" -#: ../../configuration/service/router-advert.rst:18 +#: ../../configuration/service/router-advert.rst:19 msgid "pseudo-ethernet" -msgstr "pseudo-ethernet" +msgstr "псевдо-Ethernet" -#: ../../configuration/service/dhcp-server.rst:338 -#: ../../configuration/service/dhcp-server.rst:340 +#: ../../configuration/service/dhcp-server.rst:394 +#: ../../configuration/service/dhcp-server.rst:396 msgid "range" -msgstr "range" +msgstr "Діапазон" #: ../../configuration/service/router-advert.rst:1 msgid "reachable-time" -msgstr "reachable-time" +msgstr "доступний час" -#: ../../configuration/system/ip.rst:82 +#: ../../configuration/system/ip.rst:95 msgid "reset commands" -msgstr "reset commands" +msgstr "Скидання команд" #: ../../configuration/service/router-advert.rst:1 msgid "retrans-timer" -msgstr "retrans-timer" +msgstr "ретрансляційний таймер" -#: ../../configuration/service/dhcp-server.rst:325 +#: ../../configuration/service/dhcp-server.rst:381 msgid "rfc3442-static-route, windows-static-route" -msgstr "rfc3442-static-route, windows-static-route" +msgstr "rfc3442-статичний-маршрут, windows-статичний-маршрут" #: ../../configuration/highavailability/index.rst:200 msgid "rfc3768-compatibility" -msgstr "rfc3768-compatibility" +msgstr "rfc3768-сумісність" -#: ../../configuration/vpn/site2site_ipsec.rst:277 +#: ../../configuration/vpn/site2site_ipsec.rst:280 msgid "right local_ip: 172.18.202.10 # right side WAN IP" -msgstr "right local_ip: 172.18.202.10 # right side WAN IP" +msgstr "правий локальний_ip: 172.18.202.10 # права сторона WAN IP" -#: ../../configuration/vpn/site2site_ipsec.rst:169 +#: ../../configuration/vpn/site2site_ipsec.rst:172 msgid "right local_ip: `203.0.113.2` # remote office side WAN IP" -msgstr "right local_ip: `203.0.113.2` # remote office side WAN IP" +msgstr "right local_ip: `203.0.113.2` # WAN IP на стороні віддаленого офісу" -#: ../../configuration/vpn/site2site_ipsec.rst:168 +#: ../../configuration/vpn/site2site_ipsec.rst:171 msgid "right subnet: `10.0.0.0/24` site2,remote office side" -msgstr "right subnet: `10.0.0.0/24` site2,remote office side" +msgstr "права підмережа: `10.0.0.0/24` site2, сторона віддаленого офісу" #: ../../configuration/system/frr.rst:37 msgid "ripd" msgstr "ripd" -#: ../../configuration/highavailability/index.rst:349 +#: ../../configuration/highavailability/index.rst:359 msgid "round-robin" -msgstr "round-robin" +msgstr "кругової" -#: ../../configuration/protocols/bgp.rst:825 -#: ../../configuration/protocols/bgp.rst:833 +#: ../../configuration/protocols/bgp.rst:847 +#: ../../configuration/protocols/bgp.rst:855 msgid "route-map" -msgstr "route-map" +msgstr "маршрут-карта" -#: ../../configuration/service/dhcp-server.rst:250 +#: ../../configuration/service/dhcp-server.rst:306 msgid "routers" -msgstr "routers" +msgstr "маршрутизатори" #: ../../configuration/system/flow-accounting.rst:144 #: ../../configuration/system/sflow.rst:3 @@ -19842,53 +21825,57 @@ msgstr "sFlow" #: ../../configuration/system/sflow.rst:7 msgid "sFlow is a technology that enables monitoring of network traffic by sending sampled packets to a collector device." -msgstr "sFlow is a technology that enables monitoring of network traffic by sending sampled packets to a collector device." +msgstr "sFlow — це технологія, яка дозволяє відстежувати мережевий трафік шляхом надсилання вибіркових пакетів на пристрій збирача." #: ../../configuration/system/syslog.rst:132 msgid "security" -msgstr "security" +msgstr "Безпека" -#: ../../configuration/service/dhcp-server.rst:283 +#: ../../configuration/service/dhcp-server.rst:339 msgid "server-identifier" -msgstr "server-identifier" +msgstr "сервер-ідентифікатор" #: ../../configuration/vpn/pptp.rst:17 msgid "server example" -msgstr "server example" +msgstr "приклад сервера" #: ../../configuration/system/conntrack.rst:98 msgid "set a destination and/or source address. Accepted input:" -msgstr "set a destination and/or source address. Accepted input:" +msgstr "встановити адресу призначення та/або джерела. Прийнятий вхід:" #: ../../configuration/nat/nat44.rst:751 #: ../../configuration/nat/nat44.rst:756 msgid "sha256 Hashes" -msgstr "sha256 Hashes" +msgstr "sha256 Хеші" -#: ../../configuration/system/ip.rst:50 +#: ../../configuration/system/ip.rst:63 msgid "show commands" -msgstr "show commands" +msgstr "Показати команди" -#: ../../configuration/service/dhcp-server.rst:289 +#: ../../configuration/service/dhcp-server.rst:345 msgid "siaddr" -msgstr "siaddr" +msgstr "побачити" #: ../../configuration/interfaces/bonding.rst:153 msgid "slow: Request partner to transmit LACPDUs every 30 seconds" -msgstr "slow: Request partner to transmit LACPDUs every 30 seconds" +msgstr "повільно: попросіть партнера передавати LACPDU кожні 30 секунд" -#: ../../configuration/service/dhcp-server.rst:308 -#: ../../configuration/service/dhcp-server.rst:310 +#: ../../configuration/service/dhcp-server.rst:364 +#: ../../configuration/service/dhcp-server.rst:366 msgid "smtp-server" -msgstr "smtp-server" +msgstr "smtp-сервер" + +#: ../../configuration/interfaces/ethernet.rst:107 +msgid "software filters can easily be added to hash over new protocols" +msgstr "software filters can easily be added to hash over new protocols" #: ../../configuration/interfaces/ethernet.rst:91 msgid "software filters can easily be added to hash over new protocols," -msgstr "software filters can easily be added to hash over new protocols," +msgstr "програмні фільтри можна легко додати до хешування нових протоколів," -#: ../../configuration/highavailability/index.rst:353 +#: ../../configuration/highavailability/index.rst:363 msgid "source-hashing" -msgstr "source-hashing" +msgstr "вихідне хешування" #: ../../configuration/vpn/dmvpn.rst:241 msgid "spoke01-spoke04" @@ -19896,145 +21883,145 @@ msgstr "spoke01-spoke04" #: ../../configuration/vpn/dmvpn.rst:288 msgid "spoke05" -msgstr "spoke05" +msgstr "говорив05" -#: ../../configuration/service/dhcp-server.rst:353 +#: ../../configuration/service/dhcp-server.rst:409 msgid "static-mapping" -msgstr "static-mapping" +msgstr "статичне відображення" -#: ../../configuration/service/dhcp-server.rst:323 +#: ../../configuration/service/dhcp-server.rst:379 msgid "static-route" -msgstr "static-route" +msgstr "статичний маршрут" #: ../../configuration/interfaces/pppoe.rst:233 #: ../../configuration/interfaces/sstp-client.rst:105 #: ../../_include/interface-ip.txt:182 msgid "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." -msgstr "strict: Each incoming packet is tested against the FIB and if the interface is not the best reverse path the packet check will fail. By default failed packets are discarded." +msgstr "строгий: кожен вхідний пакет перевіряється на FIB, і якщо інтерфейс не є найкращим зворотним шляхом, перевірка пакета не вдасться. За замовчуванням невдалі пакети відкидаються." -#: ../../configuration/service/dhcp-server.rst:238 +#: ../../configuration/service/dhcp-server.rst:294 msgid "subnet-mask" -msgstr "subnet-mask" +msgstr "Маска підмережі" #: ../../configuration/system/syslog.rst:122 msgid "syslog" -msgstr "syslog" +msgstr "Системний журнал" #: ../../configuration/system/syslog.rst:228 msgid "tail" -msgstr "tail" +msgstr "хвіст" #: ../../configuration/trafficpolicy/index.rst:18 msgid "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." -msgstr "tc_ is a powerful tool for Traffic Control found at the Linux kernel. However, its configuration is often considered a cumbersome task. Fortunately, VyOS eases the job through its CLI, while using ``tc`` as backend." +msgstr "tc_ — це потужний інструмент для керування трафіком, який міститься в ядрі Linux. Однак його налаштування часто вважають громіздким завданням. На щастя, VyOS полегшує роботу через свій CLI, використовуючи ``tc`` як серверну частину." -#: ../../configuration/service/dhcp-server.rst:293 -#: ../../configuration/service/dhcp-server.rst:295 +#: ../../configuration/service/dhcp-server.rst:349 +#: ../../configuration/service/dhcp-server.rst:351 msgid "tftp-server-name" -msgstr "tftp-server-name" +msgstr "tftp-ім'я-сервера" #: ../../configuration/protocols/segment-routing.rst:98 #: ../../configuration/protocols/segment-routing.rst:176 msgid "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." -msgstr "this option allows to configure prefix-sid on SR. The ‘no-php-flag’ means NO Penultimate Hop Popping that allows SR node to request to its neighbor to not pop the label. The ‘explicit-null’ flag allows SR node to request to its neighbor to send IP packet with the EXPLICIT-NULL label. The ‘n-flag-clear’ option can be used to explicitly clear the Node flag that is set by default for Prefix-SIDs associated to loopback addresses. This option is necessary to configure Anycast-SIDs." +msgstr "цей параметр дозволяє налаштувати prefix-sid на SR. Позначка «no-php-flag» означає БЕЗ передостаннього переходу, який дозволяє вузлу SR запитувати свого сусіда, щоб він не відкривав мітку. Прапор «explicit-null» дозволяє вузлу SR запитувати у свого сусіда надіслати IP-пакет із міткою EXPLICIT-NULL. Параметр 'n-flag-clear' можна використовувати для явного очищення позначки Node, встановленої за замовчуванням для Prefix-SID, пов’язаних із петлевими адресами. Цей параметр необхідний для налаштування ідентифікаторів безпеки Anycast." -#: ../../configuration/service/dhcp-server.rst:242 -#: ../../configuration/service/dhcp-server.rst:244 +#: ../../configuration/service/dhcp-server.rst:298 +#: ../../configuration/service/dhcp-server.rst:300 msgid "time-offset" -msgstr "time-offset" +msgstr "зміщення часу" -#: ../../configuration/service/dhcp-server.rst:253 +#: ../../configuration/service/dhcp-server.rst:309 msgid "time-server" -msgstr "time-server" +msgstr "сервер часу" -#: ../../configuration/service/dhcp-server.rst:255 +#: ../../configuration/service/dhcp-server.rst:311 msgid "time-servers" -msgstr "time-servers" +msgstr "сервери часу" -#: ../../configuration/highavailability/index.rst:365 -#: ../../configuration/service/router-advert.rst:19 +#: ../../configuration/highavailability/index.rst:375 +#: ../../configuration/service/router-advert.rst:20 msgid "tunnel" -msgstr "tunnel" +msgstr "Тунель" #: ../../configuration/system/syslog.rst:156 msgid "use 6 (local6)" -msgstr "use 6 (local6)" +msgstr "використовувати 6 (локальний6)" #: ../../configuration/system/acceleration.rst:16 msgid "use this command to check if there is an Intel® QAT supported Processor in your system." -msgstr "use this command to check if there is an Intel® QAT supported Processor in your system." +msgstr "використовуйте цю команду, щоб перевірити, чи є у вашій системі процесор із підтримкою Intel® QAT." #: ../../configuration/system/syslog.rst:114 msgid "user" -msgstr "user" +msgstr "Користувач" #: ../../configuration/system/syslog.rst:128 msgid "uucp" msgstr "uucp" -#: ../../configuration/protocols/rpki.rst:50 +#: ../../configuration/protocols/rpki.rst:48 msgid "valid" -msgstr "valid" +msgstr "дійсний" #: ../../configuration/service/router-advert.rst:1 msgid "valid-lifetime" -msgstr "valid-lifetime" +msgstr "термін дії" #: ../../configuration/interfaces/virtual-ethernet.rst:13 msgid "veth interfaces need to be created in pairs - it's called the peer name" -msgstr "veth interfaces need to be created in pairs - it's called the peer name" +msgstr "інтерфейси veth потрібно створювати парами - це називається іменем однорангового вузла" -#: ../../configuration/service/router-advert.rst:20 +#: ../../configuration/service/router-advert.rst:21 msgid "vxlan" -msgstr "vxlan" +msgstr "VXLAN" #: ../../configuration/system/syslog.rst:183 msgid "warning" -msgstr "warning" +msgstr "УВАГА" #: ../../configuration/protocols/segment-routing.rst:189 msgid "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." -msgstr "we described the configuration SR ISIS / SR OSPF using 2 connected with them to share label information." +msgstr "ми описали конфігурацію SR ISIS / SR OSPF з використанням 2 пов'язаних з ними для обміну інформацією про мітки." -#: ../../configuration/highavailability/index.rst:352 +#: ../../configuration/highavailability/index.rst:362 msgid "weighted-least-connection" -msgstr "weighted-least-connection" +msgstr "зважений найменший зв'язок" -#: ../../configuration/highavailability/index.rst:350 +#: ../../configuration/highavailability/index.rst:360 msgid "weighted-round-robin" -msgstr "weighted-round-robin" +msgstr "зважений круговий" #: ../../configuration/trafficpolicy/index.rst:93 msgid "while a *byte* is written as a single **b**." -msgstr "while a *byte* is written as a single **b**." +msgstr "тоді як *байт* записується як один **b**." -#: ../../configuration/service/dhcp-server.rst:278 +#: ../../configuration/service/dhcp-server.rst:334 msgid "wins-server" -msgstr "wins-server" +msgstr "wins-сервер" -#: ../../configuration/service/router-advert.rst:21 +#: ../../configuration/service/router-advert.rst:22 msgid "wireguard" -msgstr "wireguard" +msgstr "WireGuard" -#: ../../configuration/service/router-advert.rst:22 +#: ../../configuration/service/router-advert.rst:23 msgid "wireless" -msgstr "wireless" +msgstr "бездротовий" #: ../../configuration/system/acceleration.rst:133 msgid "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." -msgstr "with :cfgcmd:`set system acceleration qat` on both systems the bandwidth increases." +msgstr "з :cfgcmd:`встановити прискорення системи qat` в обох системах пропускна здатність збільшується." -#: ../../configuration/service/dhcp-server.rst:328 +#: ../../configuration/service/dhcp-server.rst:384 msgid "wpad-url" msgstr "wpad-url" -#: ../../configuration/service/dhcp-server.rst:330 +#: ../../configuration/service/dhcp-server.rst:386 msgid "wpad-url, wpad-url code 252 = text" -msgstr "wpad-url, wpad-url code 252 = text" +msgstr "wpad-url, код wpad-url 252 = текст" -#: ../../configuration/service/router-advert.rst:23 +#: ../../configuration/service/router-advert.rst:24 msgid "wwan" -msgstr "wwan" +msgstr "WWAN" #: ../../configuration/system/frr.rst:38 msgid "zebra" diff --git a/docs/_locale/uk/contributing.pot b/docs/_locale/uk/contributing.pot index 4db4247d..efd84cce 100644 --- a/docs/_locale/uk/contributing.pot +++ b/docs/_locale/uk/contributing.pot @@ -10,11 +10,11 @@ msgstr "" #: ../../contributing/development.rst:653 msgid "\"${vyos_libexecdir}/validators/foo bar $VAR(@)\" will be executed, <constraintErrorMessage> will be displayed on failure" -msgstr "\"${vyos_libexecdir}/validators/foo bar $VAR(@)\" will be executed, <constraintErrorMessage> will be displayed on failure" +msgstr ""${vyos_libexecdir}/validators/foo bar $VAR(@)" буде виконано,<constraintErrorMessage> буде відображено в разі невдачі" #: ../../contributing/development.rst:647 msgid "<constraintErrorMessage> will be displayed on failure" -msgstr "<constraintErrorMessage> will be displayed on failure" +msgstr "<constraintErrorMessage>буде відображено в разі невдачі" #: ../../contributing/development.rst:632 msgid "<node name=\"mynode\"> </node>" @@ -22,19 +22,19 @@ msgstr "<node name=\"mynode\"> </node>" #: ../../contributing/development.rst:667 msgid "<properties> <completionHelp> <list> foo bar </list>" -msgstr "<properties> <completionHelp> <list> foo bar </list>" +msgstr "<properties><completionHelp><list>foo бар</list>" #: ../../contributing/development.rst:670 msgid "<properties> <completionHelp> <path> vpn ipsec esp-group </path> ..." -msgstr "<properties> <completionHelp> <path> vpn ipsec esp-group </path> ..." +msgstr "<properties><completionHelp><path>vpn ipsec esp-група</path> ..." #: ../../contributing/development.rst:673 msgid "<properties> <completionHelp> <script> /path/to/script </script> ..." -msgstr "<properties> <completionHelp> <script> /path/to/script </script> ..." +msgstr "<properties><completionHelp><script> /path/to/script </script>..." #: ../../contributing/development.rst:646 msgid "<properties> <constraint> <regex> ..." -msgstr "<properties> <constraint> <regex> ..." +msgstr "<properties><constraint><regex>..." #: ../../contributing/development.rst:652 msgid "<properties> <constraint> <validator> <name =\"foo\" argument=\"bar\">" @@ -42,7 +42,7 @@ msgstr "<properties> <constraint> <validator> <name =\"foo\" argument=\"bar\">" #: ../../contributing/development.rst:638 msgid "<properties> <help>My node</help>" -msgstr "<properties> <help>My node</help>" +msgstr "<properties><help>Мій вузол</help>" #: ../../contributing/development.rst:664 msgid "<properties> <multi/>" @@ -50,11 +50,11 @@ msgstr "<properties> <multi/>" #: ../../contributing/development.rst:660 msgid "<properties> <priority>999</priority>" -msgstr "<properties> <priority>999</priority>" +msgstr "<properties><priority>999</priority>" #: ../../contributing/development.rst:641 msgid "<properties> <valueHelp> <format> format </format> <description> some string </description>" -msgstr "<properties> <valueHelp> <format> format </format> <description> some string </description>" +msgstr "<properties><valueHelp><format>формат</format><description> якийсь рядок</description>" #: ../../contributing/development.rst:635 msgid "<tagNode name=\"mynode> </node>" @@ -62,23 +62,35 @@ msgstr "<tagNode name=\"mynode> </node>" #: ../../contributing/upstream-packages.rst:81 msgid "A fork with packaging changes for VyOS is kept at https://github.com/vyos/hvinfo" -msgstr "A fork with packaging changes for VyOS is kept at https://github.com/vyos/hvinfo" +msgstr "Відгалуження зі змінами упаковки для VyOS зберігається на https://github.com/vyos/hvinfo" #: ../../contributing/development.rst:31 msgid "A good approach for writing commit messages is actually to have a look at the file(s) history by invoking ``git log path/to/file.txt``." -msgstr "A good approach for writing commit messages is actually to have a look at the file(s) history by invoking ``git log path/to/file.txt``." +msgstr "Хорошим підходом для написання повідомлень комітів є перегляд історії файлів за допомогою ``git log path/to/file.txt``." #: ../../contributing/debugging.rst:44 msgid "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." -msgstr "A number of flags can be set up to change the behaviour of VyOS at runtime. These flags can be toggled using either environment variables or creating files." +msgstr "Для зміни поведінки VyOS під час виконання можна встановити ряд прапорців. Ці прапорці можна перемикати за допомогою змінних середовища або створення файлів." + +#: ../../contributing/issues-features.rst:86 +msgid "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." +msgstr "A reasonably detailed description of the feature: what it is, how it's supposed to work, and how you'd use it. The maintainers aren't familiar with every feature of every protocol and tool, and community contributors who are looking for tasks to work on will also appreciate more information that helps them implement and test a feature." + +#: ../../contributing/issues-features.rst:42 +msgid "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." +msgstr "A sequence of actions that triggers the bug. We understand that it's not always possible, but it makes developer's job a lot easier and also allows any community member to independently confirm that the bug still exists or if it's already fixed." + +#: ../../contributing/issues-features.rst:33 +msgid "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." +msgstr "A sequence of configuration commands or a complete configuration file required to recreate a setup where the bug occurs. Please avoid partial configs: a sequence of commands is easy to paste into the console, a complete config is easy to load in a VM, but a partial config is neither! At least not until we implement a \"merge from the CLI\" feature that allows pasting config file chunks into a session." #: ../../contributing/development.rst:74 msgid "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" -msgstr "A single, short, summary of the commit (recommended 50 characters or less, not exceeding 80 characters) containing a prefix of the changed component and the corresponding Phabricator_ reference e.g. ``snmp: T1111:`` or ``ethernet: T2222:`` - multiple components could be concatenated as in ``snmp: ethernet: T3333``" +msgstr "Єдиний короткий підсумок коміту (рекомендовано 50 символів або менше, не більше 80 символів), що містить префікс зміненого компонента та відповідне посилання Phabricator_, наприклад ``snmp: T1111:`` або ``ethernet: T2222:` ` - кілька компонентів можуть бути об'єднані, як у ``snmp: ethernet: T3333``" #: ../../contributing/development.rst:569 msgid "Abbreviations and acronyms **must** be capitalized." -msgstr "Abbreviations and acronyms **must** be capitalized." +msgstr "Абревіатури та абревіатури **повинні** бути написані з великої літери." #: ../../contributing/build-vyos.rst:443 #: ../../contributing/build-vyos.rst:631 @@ -87,257 +99,273 @@ msgstr "Accel-PPP" #: ../../contributing/development.rst:577 msgid "Acronyms also **must** be capitalized to visually distinguish them from normal words:" -msgstr "Acronyms also **must** be capitalized to visually distinguish them from normal words:" +msgstr "Акроніми також **повинні** писати з великої літери, щоб візуально відрізняти їх від звичайних слів:" #: ../../contributing/development.rst:165 msgid "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" -msgstr "Add file to Git index using ``git add myfile``, or for a whole directory: ``git add somedir/*``" +msgstr "Додайте файл до індексу Git за допомогою ``git add myfile`` або для цілого каталогу: ``git add somedir/*``" -#: ../../contributing/testing.rst:100 +#: ../../contributing/testing.rst:103 msgid "Add one or more IP addresses" -msgstr "Add one or more IP addresses" +msgstr "Додайте одну або кілька IP-адрес" #: ../../contributing/development.rst:502 msgid "Address" -msgstr "Address" +msgstr "Адреса" #: ../../contributing/build-vyos.rst:840 msgid "After a minute or two you will find the generated DEB packages next to the vyos-1x source directory:" -msgstr "After a minute or two you will find the generated DEB packages next to the vyos-1x source directory:" +msgstr "Через хвилину або дві ви побачите згенеровані пакети DEB поруч із вихідним каталогом vyos-1x:" #: ../../contributing/build-vyos.rst:667 #: ../../contributing/build-vyos.rst:696 #: ../../contributing/build-vyos.rst:731 msgid "After compiling the packages you will find yourself the newly generated `*.deb` binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them to the ``vyos-build/packages`` folder for inclusion during the ISO build." -msgstr "After compiling the packages you will find yourself the newly generated `*.deb` binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them to the ``vyos-build/packages`` folder for inclusion during the ISO build." +msgstr "Після компіляції пакунків ви знайдете щойно згенеровані двійкові файли ``.deb`» у ``vyos-build/packages/linux-kernel``, звідки ви можете скопіювати їх до папки ``vyos-build/packages`` для включення під час збірки ISO." #: ../../contributing/testing.rst:51 msgid "After its first boot into the newly installed system the main Smoketest script is executed, it can be found here: `/usr/bin/vyos-smoketest`" -msgstr "After its first boot into the newly installed system the main Smoketest script is executed, it can be found here: `/usr/bin/vyos-smoketest`" +msgstr "Після першого завантаження щойно встановленої системи виконується основний сценарій Smoketest, його можна знайти тут: `/usr/bin/vyos-smoketest`" #: ../../contributing/development.rst:7 msgid "All VyOS source code is hosted on GitHub under the VyOS organization which can be found here: https://github.com/vyos" -msgstr "All VyOS source code is hosted on GitHub under the VyOS organization which can be found here: https://github.com/vyos" +msgstr "Весь вихідний код VyOS розміщено на GitHub в рамках організації VyOS, яку можна знайти тут: https://github.com/vyos" #: ../../contributing/development.rst:680 msgid "All commit time checks should be in the verify() function of the script" -msgstr "All commit time checks should be in the verify() function of the script" +msgstr "Усі перевірки часу фіксації мають бути у функції verify() сценарію" #: ../../contributing/development.rst:514 msgid "All interface definition XML input files (.in suffix) will be sent to the GCC preprocess and the output is stored in the `build/interface-definitions` folder. The previously mentioned `scripts/build-command-templates` script operates on the `build/interface-definitions` folder to generate all required CLI nodes." -msgstr "All interface definition XML input files (.in suffix) will be sent to the GCC preprocess and the output is stored in the `build/interface-definitions` folder. The previously mentioned `scripts/build-command-templates` script operates on the `build/interface-definitions` folder to generate all required CLI nodes." +msgstr "Усі вхідні XML-файли визначення інтерфейсу (суфікс .in) буде надіслано до попередньої обробки GCC, а вихідні дані збережуться в папці `build/interface-definitions`. Згаданий раніше сценарій `scripts/build-command-templates` працює з папкою `build/interface-definitions`, щоб створити всі необхідні вузли CLI." #: ../../contributing/issues-features.rst:14 msgid "All issues should be reported to the developers. This lets the developers know what is not working properly. Without this sort of feedback every developer will believe that everything is working correctly." -msgstr "All issues should be reported to the developers. This lets the developers know what is not working properly. Without this sort of feedback every developer will believe that everything is working correctly." +msgstr "Про всі проблеми слід повідомляти розробників. Це дозволяє розробникам знати, що не працює належним чином. Без такого роду відгуків кожен розробник вважатиме, що все працює правильно." #: ../../contributing/development.rst:683 msgid "All logic should be in the scripts" -msgstr "All logic should be in the scripts" +msgstr "Вся логіка повинна бути в скриптах" #: ../../contributing/development.rst:90 msgid "All text of the commit message should be wrapped at 72 characters if possible which makes reading commit logs easier with ``git log`` on a standard terminal (which happens to be 80x25)" -msgstr "All text of the commit message should be wrapped at 72 characters if possible which makes reading commit logs easier with ``git log`` on a standard terminal (which happens to be 80x25)" +msgstr "Увесь текст повідомлення коміту, якщо це можливо, має бути обернуто 72 символами, що полегшує читання журналів комітів за допомогою ``git log`` на стандартному терміналі (розмір якого буває 80x25)" #: ../../contributing/development.rst:99 msgid "Always use the ``-x`` option to the ``git cherry-pick`` command when back or forward porting an individual commit. This automatically appends the line: ``(cherry picked from commit <ID>)`` to the original authors commit message making it easier when bisecting problems." -msgstr "Always use the ``-x`` option to the ``git cherry-pick`` command when back or forward porting an individual commit. This automatically appends the line: ``(cherry picked from commit <ID>)`` to the original authors commit message making it easier when bisecting problems." +msgstr "Завжди використовуйте опцію ``-x`` для команди ``git cherry-pick`` під час зворотного або прямого перенесення окремого коміту. Це автоматично додає рядок: ``(вишня, вибрана з коміту<ID> )`` до оригінального повідомлення авторів, що полегшує розділення проблем навпіл." #: ../../contributing/development.rst:336 msgid "Another advantage is testability of the code. Mocking the entire config subsystem is hard, while constructing an internal representation by hand is way simpler." -msgstr "Another advantage is testability of the code. Mocking the entire config subsystem is hard, while constructing an internal representation by hand is way simpler." +msgstr "Ще однією перевагою є можливість тестування коду. Знущатися над усією підсистемою конфігурації важко, тоді як побудувати внутрішнє представлення вручну набагато простіше." #: ../../contributing/build-vyos.rst:742 msgid "Any \"modified\" package may refer to an altered version of e.g. vyos-1x package that you would like to test before filing a pull request on GitHub." -msgstr "Any \"modified\" package may refer to an altered version of e.g. vyos-1x package that you would like to test before filing a pull request on GitHub." +msgstr "Будь-який «модифікований» пакет може стосуватися зміненої версії, наприклад пакета vyos-1x, який ви хотіли б перевірити перед тим, як подавати запит на отримання на GitHub." #: ../../contributing/build-vyos.rst:871 msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." -msgstr "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." +msgstr "Будь-які пакунки в каталозі пакетів буде додано до iso під час збірки, замінивши вихідні. Переконайтеся, що ви видалили їх (як вихідні каталоги, так і зібрані пакунки deb), якщо ви хочете зібрати iso з чистих пакетів." + +#: ../../contributing/issues-features.rst:100 +msgid "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" +msgstr "Are there any adverse or non-obvious interactions with other features? Should it be mutually exclusive with anything?" + +#: ../../contributing/issues-features.rst:99 +msgid "Are there any limitations (hardware support, resource usage)?" +msgstr "Are there any limitations (hardware support, resource usage)?" #: ../../contributing/testing.rst:57 msgid "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." -msgstr "As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system." +msgstr "Оскільки Smoketests змінить конфігурацію системи, а ви ввійшли в систему віддалено, ви можете втратити підключення до системи." #: ../../contributing/testing.rst:13 msgid "As the VyOS documentation is not only for users but also for the developers - and we keep no secret documentation - this section describes how the automated testing works." -msgstr "As the VyOS documentation is not only for users but also for the developers - and we keep no secret documentation - this section describes how the automated testing works." +msgstr "Оскільки документація VyOS призначена не лише для користувачів, а й для розробників, і ми не зберігаємо документацію в секреті, у цьому розділі описано, як працює автоматизоване тестування." #: ../../contributing/build-vyos.rst:817 msgid "Assume we want to build the vyos-1x package on our own and modify it to our needs. We first need to clone the repository from GitHub." -msgstr "Assume we want to build the vyos-1x package on our own and modify it to our needs. We first need to clone the repository from GitHub." +msgstr "Припустімо, що ми хочемо створити пакунок vyos-1x самостійно та змінити його відповідно до наших потреб. Спочатку нам потрібно клонувати репозиторій з GitHub." #: ../../contributing/development.rst:175 msgid "Attach patch to Phabricator task" -msgstr "Attach patch to Phabricator task" +msgstr "Додайте патч до завдання Phabricator" #: ../../contributing/development.rst:619 msgid "Bad: \"Disables IPv6 forwarding\"" -msgstr "Bad: \"Disables IPv6 forwarding\"" +msgstr "Погано: «Вимикає переадресацію IPv6»" #: ../../contributing/development.rst:563 msgid "Bad: \"Frobnication algorithm.\"" -msgstr "Bad: \"Frobnication algorithm.\"" +msgstr "Погано: «Алгоритм Frobnication»." #: ../../contributing/development.rst:605 msgid "Bad: \"Set TCP connection timeout\"" -msgstr "Bad: \"Set TCP connection timeout\"" +msgstr "Погано: «Установити тайм-аут з’єднання TCP»" #: ../../contributing/development.rst:562 msgid "Bad: \"frobnication algorithm\"" -msgstr "Bad: \"frobnication algorithm\"" +msgstr "Погано: "алгоритм фробнікації"" #: ../../contributing/development.rst:574 msgid "Bad: \"tcp connection timeout\"" -msgstr "Bad: \"tcp connection timeout\"" +msgstr "Погано: "тайм-аут з'єднання tcp"" #: ../../contributing/development.rst:594 msgid "Bad: PPPOE, IPSEC" -msgstr "Bad: PPPOE, IPSEC" +msgstr "Погано: PPPOE, IPSEC" #: ../../contributing/development.rst:595 msgid "Bad: pppoe, ipsec" -msgstr "Bad: pppoe, ipsec" +msgstr "Погано: PPPOE, IPSEC" #: ../../contributing/development.rst:583 msgid "Bad: radius (unless it's about the distance between a center of a circle and any of its points)" -msgstr "Bad: radius (unless it's about the distance between a center of a circle and any of its points)" +msgstr "Погано: радіус (якщо це не відстань між центром кола та будь-якою з його точок)" #: ../../contributing/debugging.rst:160 msgid "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." -msgstr "Beeing brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow doen the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +msgstr "Якщо проявити сміливість і запустити останні поточні випуски, іноді можуть виникнути помилки через кутові випадки, які ми пропустили в нашому дизайні. Ці помилки слід надсилати через Phabricator_, але ви можете допомогти нам звузити проблему. Увійдіть у свою систему VyOS і перейдіть у режим конфігурації, ввівши ``configure``. Тепер перезавантажте вашу конфігурацію завантаження, просто ввівши ``load`` і потім return." + +#: ../../contributing/debugging.rst:160 +msgid "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." +msgstr "Being brave and running the latest rolling releases will sometimes trigger bugs due to corner cases we missed in our design. Those bugs should be filed via Phabricator_ but you can help us to narrow down the issue. Login to your VyOS system and change into configuration mode by typing ``configure``. Now re-load your boot configuration by simply typing ``load`` followed by return." #: ../../contributing/debugging.rst:170 msgid "Boot Timing" -msgstr "Boot Timing" +msgstr "Час завантаження" #: ../../contributing/issues-features.rst:10 msgid "Bug Report/Issue" -msgstr "Bug Report/Issue" +msgstr "Повідомлення про помилку/проблема" + +#: ../../contributing/issues-features.rst:117 +msgid "Bug reports that lack reproducing procedures." +msgstr "Bug reports that lack reproducing procedures." #: ../../contributing/build-vyos.rst:825 msgid "Build" -msgstr "Build" +msgstr "Будувати" #: ../../contributing/build-vyos.rst:122 msgid "Build Container" -msgstr "Build Container" +msgstr "Побудувати контейнер" #: ../../contributing/build-vyos.rst:215 msgid "Build ISO" -msgstr "Build ISO" +msgstr "Збірка ISO" #: ../../contributing/build-vyos.rst:5 msgid "Build VyOS" -msgstr "Build VyOS" +msgstr "Збірка VyOS" #: ../../contributing/build-vyos.rst:147 msgid "Build from source" -msgstr "Build from source" +msgstr "Збірка з джерела" #: ../../contributing/build-vyos.rst:622 msgid "Building Out-Of-Tree Modules" -msgstr "Building Out-Of-Tree Modules" +msgstr "Створення позадеревних модулів" #: ../../contributing/build-vyos.rst:475 msgid "Building The Kernel" -msgstr "Building The Kernel" +msgstr "Створення ядра" #: ../../contributing/build-vyos.rst:286 msgid "Building VyOS on Windows WSL2 with Docker integrated into WSL2 will work like a charm. No problems are known so far!" -msgstr "Building VyOS on Windows WSL2 with Docker integrated into WSL2 will work like a charm. No problems are known so far!" +msgstr "Збірка VyOS на Windows WSL2 з Docker, інтегрованим у WSL2, буде працювати як чарівність. Поки що жодних проблем не відомо!" #: ../../contributing/build-vyos.rst:745 msgid "Building an ISO with any customized package is in no way different than building a regular (customized or not) ISO image. Simply place your modified `*.deb` package inside the `packages` folder within `vyos-build`. The build process will then pickup your custom package and integrate it into your ISO." -msgstr "Building an ISO with any customized package is in no way different than building a regular (customized or not) ISO image. Simply place your modified `*.deb` package inside the `packages` folder within `vyos-build`. The build process will then pickup your custom package and integrate it into your ISO." +msgstr "Створення ISO за допомогою будь-якого налаштованого пакету нічим не відрізняється від створення звичайного (налаштованого чи ні) образу ISO. Просто помістіть свій змінений пакет `*.deb` в папку `packages` у `vyos-build`. Після цього процес збірки підбере ваш спеціальний пакет та інтегрує його у ваш ISO." #: ../../contributing/build-vyos.rst:624 msgid "Building the kernel is one part, but now you also need to build the required out-of-tree modules so everything is lined up and the ABIs match. To do so, you can again take a look at ``vyos-build/packages/linux-kernel/Jenkinsfile`` to see all of the required modules and their selected versions. We will show you how to build all the current required modules." -msgstr "Building the kernel is one part, but now you also need to build the required out-of-tree modules so everything is lined up and the ABIs match. To do so, you can again take a look at ``vyos-build/packages/linux-kernel/Jenkinsfile`` to see all of the required modules and their selected versions. We will show you how to build all the current required modules." +msgstr "Збірка ядра є однією частиною, але тепер вам також потрібно зібрати необхідні модулі поза деревом, щоб усе було вирівняно та відповідали ABI. Щоб зробити це, ви можете ще раз переглянути ``vyos-build/packages/linux-kernel/Jenkinsfile``, щоб побачити всі необхідні модулі та їх вибрані версії. Ми покажемо вам, як створити всі поточні необхідні модулі." #: ../../contributing/build-vyos.rst:515 msgid "Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed. Expect 20 minutes (or even longer) on lower end hardware." -msgstr "Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed. Expect 20 minutes (or even longer) on lower end hardware." +msgstr "Створення ядра займе деякий час залежно від швидкості та кількості процесора/ядер і швидкості диска. Очікуйте 20 хвилин (або навіть більше) на нижчому обладнанні." #: ../../contributing/build-vyos.rst:13 msgid "Building using a :ref:`build_docker` container, although not the only way, is the easiest way as all dependencies are managed for you. However, you can also set up your own build machine and run a :ref:`build_native`." -msgstr "Building using a :ref:`build_docker` container, although not the only way, is the easiest way as all dependencies are managed for you. However, you can also set up your own build machine and run a :ref:`build_native`." +msgstr "Збірка за допомогою контейнера :ref:`build_docker`, хоч і не єдиний спосіб, є найпростішим шляхом, оскільки всі залежності керуються за вас. Однак ви також можете налаштувати власну машину збирання та запустити :ref:`build_native`." #: ../../contributing/development.rst:247 msgid "But we are here to assist you and want to guide you through how you can become a good VyOS contributor. The rules we have are not there to punish you - the rules are in place to help us all. What does it mean? By having a consistent coding style it becomes very easy for new contributors and also longtime contributors to navigate through the sources and all the implied logic of the spaghetti code." -msgstr "But we are here to assist you and want to guide you through how you can become a good VyOS contributor. The rules we have are not there to punish you - the rules are in place to help us all. What does it mean? By having a consistent coding style it becomes very easy for new contributors and also longtime contributors to navigate through the sources and all the implied logic of the spaghetti code." +msgstr "Але ми тут, щоб допомогти вам, і хочемо допомогти вам, як ви можете стати хорошим учасником VyOS. Наші правила створені не для того, щоб карати вас, а для того, щоб допомогти нам усім. Що це означає? Маючи послідовний стиль кодування, новачкам і давнім учасникам стає дуже легко орієнтуватися в джерелах і всій неявній логіці спагетті-коду." #: ../../contributing/development.rst:686 msgid "C++ Backend Code" -msgstr "C++ Backend Code" +msgstr "Базовий код C++" #: ../../contributing/development.rst:551 msgid "Capitalization and punctuation" -msgstr "Capitalization and punctuation" +msgstr "Вживання великої літери та пунктуація" #: ../../contributing/build-vyos.rst:488 msgid "Check out the required kernel version - see ``vyos-build/data/defaults.json`` file (example uses kernel 4.19.146):" -msgstr "Check out the required kernel version - see ``vyos-build/data/defaults.json`` file (example uses kernel 4.19.146):" +msgstr "Перевірте потрібну версію ядра - перегляньте файл ``vyos-build/data/defaults.json`` (у прикладі використовується ядро 4.19.146):" #: ../../contributing/development.rst:149 msgid "Clone: ``git clone https://github.com/<user>/vyos-1x.git``" -msgstr "Clone: ``git clone https://github.com/<user>/vyos-1x.git``" +msgstr "Клон: ``git clone https://github.com/<user> /vyos-1x.git``" #: ../../contributing/build-vyos.rst:481 msgid "Clone the kernel source to `vyos-build/packages/linux-kernel/`:" -msgstr "Clone the kernel source to `vyos-build/packages/linux-kernel/`:" +msgstr "Клонуйте джерело ядра до `vyos-build/packages/linux-kernel/`:" #: ../../contributing/development.rst:187 msgid "Coding Guidelines" -msgstr "Coding Guidelines" +msgstr "Інструкції з кодування" #: ../../contributing/development.rst:490 msgid "Command definitions are purely declarative, and cannot contain any logic. All logic for generating config files for target applications, restarting services and so on is implemented in configuration scripts instead." -msgstr "Command definitions are purely declarative, and cannot contain any logic. All logic for generating config files for target applications, restarting services and so on is implemented in configuration scripts instead." +msgstr "Визначення команд є суто декларативними і не можуть містити жодної логіки. Натомість уся логіка для створення файлів конфігурації для цільових програм, перезапуску служб тощо реалізована в сценаріях конфігурації." #: ../../contributing/development.rst:168 msgid "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." -msgstr "Commit the changes by calling ``git commit``. Please use a meaningful commit headline (read above) and don't forget to reference the Phabricator_ ID." +msgstr "Зафіксуйте зміни, викликавши ``git commit``. Будь ласка, використовуйте змістовний заголовок коміту (прочитайте вище) і не забудьте вказати посилання на Phabricator_ ID." -#: ../../contributing/testing.rst:152 +#: ../../contributing/testing.rst:155 msgid "Config Load Tests" -msgstr "Config Load Tests" +msgstr "Тести навантаження конфігурації" #: ../../contributing/debugging.rst:132 msgid "Config Migration Scripts" -msgstr "Config Migration Scripts" +msgstr "Налаштувати сценарії міграції" #: ../../contributing/debugging.rst:158 msgid "Configuration Error on System Boot" -msgstr "Configuration Error on System Boot" +msgstr "Помилка конфігурації під час завантаження системи" #: ../../contributing/development.rst:260 msgid "Configuration Script Structure and Behaviour" -msgstr "Configuration Script Structure and Behaviour" +msgstr "Структура та поведінка сценарію конфігурації" #: ../../contributing/issues-features.rst:24 msgid "Consult the documentation_ to ensure that you have configured your system correctly" -msgstr "Consult the documentation_ to ensure that you have configured your system correctly" +msgstr "Зверніться до документації_, щоб переконатися, що ви правильно налаштували свою систему" #: ../../contributing/development.rst:705 msgid "Continuous Integration" -msgstr "Continuous Integration" +msgstr "Безперервна інтеграція" #: ../../contributing/build-vyos.rst:295 msgid "Customize" -msgstr "Customize" +msgstr "Налаштувати" -#: ../../contributing/testing.rst:101 +#: ../../contributing/testing.rst:104 msgid "DHCP client and DHCPv6 prefix delegation" -msgstr "DHCP client and DHCPv6 prefix delegation" +msgstr "Клієнт DHCP і делегування префікса DHCPv6" #: ../../contributing/upstream-packages.rst:46 msgid "DMVPN patches are added by this commit: https://github.com/vyos/vyos-strongswan/commit/1cf12b0f2f921bfc51affa3b81226" -msgstr "DMVPN patches are added by this commit: https://github.com/vyos/vyos-strongswan/commit/1cf12b0f2f921bfc51affa3b81226" +msgstr "Патчі DMVPN додаються цим комітом: https://github.com/vyos/vyos-strongswan/commit/1cf12b0f2f921bfc51affa3b81226" #: ../../contributing/build-vyos.rst:753 msgid "Debian APT is not very verbose when it comes to errors. If your ISO build breaks for whatever reason and you suspect it's a problem with APT dependencies or installation you can add this small patch which increases the APT verbosity during ISO build." -msgstr "Debian APT is not very verbose when it comes to errors. If your ISO build breaks for whatever reason and you suspect it's a problem with APT dependencies or installation you can add this small patch which increases the APT verbosity during ISO build." +msgstr "Debian APT не дуже багатослівний, коли йдеться про помилки. Якщо ваша збірка ISO ламається з будь-якої причини, і ви підозрюєте, що це проблема із залежностями APT або інсталяцією, ви можете додати цей невеликий патч, який збільшує детальність APT під час збірки ISO." #: ../../contributing/build-vyos.rst:42 msgid "Debian Bookworm for VyOS 1.4 (sagitta)" @@ -349,7 +377,7 @@ msgstr "Debian Bookworm for the upcoming VyOS 1.5/circinus/current (subject to c #: ../../contributing/build-vyos.rst:154 msgid "Debian Bullseye for VyOS 1.4 (sagitta, current) - aka the rolling release" -msgstr "Debian Bullseye for VyOS 1.4 (sagitta, current) - aka the rolling release" +msgstr "Debian Bullseye для VyOS 1.4 (sagitta, поточний) - також поточний випуск" #: ../../contributing/build-vyos.rst:154 msgid "Debian Bullseye for VyOS 1.4 (sagitta)" @@ -357,43 +385,43 @@ msgstr "Debian Bullseye for VyOS 1.4 (sagitta)" #: ../../contributing/build-vyos.rst:41 msgid "Debian Buster for VyOS 1.3 (equuleus)" -msgstr "Debian Buster for VyOS 1.3 (equuleus)" +msgstr "Debian Buster для VyOS 1.3 (equuleus)" #: ../../contributing/build-vyos.rst:40 msgid "Debian Jessie for VyOS 1.2 (crux)" -msgstr "Debian Jessie for VyOS 1.2 (crux)" +msgstr "Debian Jessie для VyOS 1.2 (суть)" #: ../../contributing/upstream-packages.rst:31 msgid "Debian does keep their package in git, but it's upstream tarball imported into git without its original commit history. To be able to merge new tags in, we keep a fork of the upstream repository with packaging files imported from Debian at https://github.com/vyos/keepalived-upstream" -msgstr "Debian does keep their package in git, but it's upstream tarball imported into git without its original commit history. To be able to merge new tags in, we keep a fork of the upstream repository with packaging files imported from Debian at https://github.com/vyos/keepalived-upstream" +msgstr "Debian справді зберігає свій пакет у git, але це архівний архів, імпортований у git без оригінальної історії комітів. Щоб мати можливість об’єднувати нові теги, ми зберігаємо розгалуження репозиторію upstream із файлами пакувань, імпортованими з Debian, за адресою https://github.com/vyos/keepalived-upstream" #: ../../contributing/debugging.rst:5 msgid "Debugging" -msgstr "Debugging" +msgstr "Налагодження" #: ../../contributing/debugging.rst:96 msgid "Debugging Python Code with PDB" -msgstr "Debugging Python Code with PDB" +msgstr "Налагодження коду Python за допомогою PDB" #: ../../contributing/development.rst:503 msgid "Description" -msgstr "Description" +msgstr "Опис" #: ../../contributing/development.rst:120 msgid "Determinine source package" -msgstr "Determinine source package" +msgstr "Визначте вихідний пакет" #: ../../contributing/development.rst:5 msgid "Development" -msgstr "Development" +msgstr "розвиток" #: ../../contributing/development.rst:643 msgid "Do not add angle brackets around the format, they will be inserted automatically" -msgstr "Do not add angle brackets around the format, they will be inserted automatically" +msgstr "Не додавайте кутові дужки навколо формату, вони будуть вставлені автоматично" #: ../../contributing/build-vyos.rst:83 msgid "Docker" -msgstr "Docker" +msgstr "Докер" #: ../../contributing/build-vyos.rst:135 msgid "Dockerhub" @@ -401,11 +429,11 @@ msgstr "Dockerhub" #: ../../contributing/build-vyos.rst:112 msgid "Doing so grants privileges equivalent to the ``root`` user! It is recommended to remove the non-root user from the ``docker`` group after building the VyOS ISO. See also `Docker as non-root`_." -msgstr "Doing so grants privileges equivalent to the ``root`` user! It is recommended to remove the non-root user from the ``docker`` group after building the VyOS ISO. See also `Docker as non-root`_." +msgstr "Це надає привілеї, еквівалентні користувачам ``root``! Рекомендується видалити некоренева користувача з групи ``docker`` після створення VyOS ISO. Дивіться також `Docker як non-root`_." #: ../../contributing/upstream-packages.rst:17 msgid "Due to issues in the upstream version that sometimes set interfaces down, a modified version is used." -msgstr "Due to issues in the upstream version that sometimes set interfaces down, a modified version is used." +msgstr "Через проблеми у попередній версії, через які іноді інтерфейси не працюють, використовується модифікована версія." #: ../../contributing/build-vyos.rst:87 msgid "Due to the updated version of Docker, the following examples may become invalid." @@ -413,32 +441,32 @@ msgstr "Due to the updated version of Docker, the following examples may become #: ../../contributing/debugging.rst:172 msgid "During the migration and extensive rewrite of functionality from Perl into Python a significant increase in the overall system boottime was noticed. The system boot time can be analysed and a graph can be generated in the end which shows in detail who called whom during the system startup phase." -msgstr "During the migration and extensive rewrite of functionality from Perl into Python a significant increase in the overall system boottime was noticed. The system boot time can be analysed and a graph can be generated in the end which shows in detail who called whom during the system startup phase." +msgstr "Під час міграції та значного переписування функціональності з Perl на Python було помічено значне збільшення загального часу завантаження системи. Можна проаналізувати час завантаження системи та зрештою створити графік, який детально показує, хто кому телефонував під час фази запуску системи." #: ../../contributing/development.rst:717 msgid "Each module is build on demand if a new commit on the branch in question is found. After a successful run the resulting Debian Package(s) will be deployed to our Debian repository which is used during build time. It is located here: http://dev.packages.vyos.net/repositories/." -msgstr "Each module is build on demand if a new commit on the branch in question is found. After a successful run the resulting Debian Package(s) will be deployed to our Debian repository which is used during build time. It is located here: http://dev.packages.vyos.net/repositories/." +msgstr "Кожен модуль збирається на вимогу, якщо знайдено новий коміт у відповідній гілці. Після успішного запуску отриманий пакет(и) Debian буде розгорнуто в нашому репозиторії Debian, який використовується під час збирання. Він знаходиться тут: http://dev.packages.vyos.net/repositories/." #: ../../contributing/build-vyos.rst:447 msgid "Each of those modules holds a dependency on the kernel version and if you are lucky enough to receive an ISO build error which sounds like:" -msgstr "Each of those modules holds a dependency on the kernel version and if you are lucky enough to receive an ISO build error which sounds like:" +msgstr "Кожен із цих модулів залежить від версії ядра, і якщо вам пощастить отримати помилку збірки ISO, яка звучить так:" #: ../../contributing/development.rst:504 msgid "Enabled/Disabled" -msgstr "Enabled/Disabled" +msgstr "Увімкнено/вимкнено" #: ../../contributing/issues-features.rst:29 msgid "Ensure the problem is reproducible" -msgstr "Ensure the problem is reproducible" +msgstr "Переконайтеся, що проблему можна відтворити" #: ../../contributing/development.rst:104 msgid "Every change set must be consistent (self containing)! Do not fix multiple bugs in a single commit. If you already worked on multiple fixes in the same file use `git add --patch` to only add the parts related to the one issue into your upcoming commit." -msgstr "Every change set must be consistent (self containing)! Do not fix multiple bugs in a single commit. If you already worked on multiple fixes in the same file use `git add --patch` to only add the parts related to the one issue into your upcoming commit." +msgstr "Кожен набір змін має бути узгодженим (самовмісним)! Не виправляйте кілька помилок в одному коміті. Якщо ви вже працювали над кількома виправленнями в одному файлі, скористайтеся `git add --patch`, щоб додати лише частини, пов’язані з однією проблемою, у ваш майбутній комміт." #: ../../contributing/development.rst:412 -#: ../../contributing/testing.rst:66 +#: ../../contributing/testing.rst:69 msgid "Example:" -msgstr "Example:" +msgstr "приклад:" #: ../../contributing/development.rst:559 #: ../../contributing/development.rst:571 @@ -447,19 +475,19 @@ msgstr "Example:" #: ../../contributing/development.rst:602 #: ../../contributing/development.rst:616 msgid "Examples:" -msgstr "Examples:" +msgstr "приклади:" #: ../../contributing/development.rst:377 msgid "Exceptions, including ``VyOSError`` (which is raised by ``vyos.config.Config`` on improper config operations, such as trying to use ``list_nodes()`` on a non-tag node) should not be silenced or caught and re-raised as config error. Sure this will not look pretty on user's screen, but it will make way better bug reports, and help users (and most VyOS users are IT professionals) do their own debugging as well." -msgstr "Exceptions, including ``VyOSError`` (which is raised by ``vyos.config.Config`` on improper config operations, such as trying to use ``list_nodes()`` on a non-tag node) should not be silenced or caught and re-raised as config error. Sure this will not look pretty on user's screen, but it will make way better bug reports, and help users (and most VyOS users are IT professionals) do their own debugging as well." +msgstr "Винятки, включно з ``VyOSError`` (який викликає ``vyos.config.Config`` під час неправильних операцій конфігурації, таких як спроба використання ``list_nodes()`` на вузлі без тегів), не слід вимикати. або перехоплено та повторно піднято як помилку конфігурації. Звісно, це не виглядатиме гарно на екрані користувача, але це покращить звіти про помилки та допоможе користувачам (а більшість користувачів VyOS є ІТ-фахівцями) також виконувати власне налагодження." #: ../../contributing/development.rst:182 msgid "Export last commit to patch file: ``git format-patch`` or export the last two commits into its appropriate patch files: ``git format-patch -2``" -msgstr "Export last commit to patch file: ``git format-patch`` or export the last two commits into its appropriate patch files: ``git format-patch -2``" +msgstr "Експортуйте останній комміт у файл виправлення: ``git format-patch`` або експортуйте останні два коміти у відповідні файли виправлення: ``git format-patch -2``" #: ../../contributing/development.rst:657 msgid "External arithmetic validator may be added if there's demand, complex validation is better left to commit-time scripts" -msgstr "External arithmetic validator may be added if there's demand, complex validation is better left to commit-time scripts" +msgstr "Зовнішній арифметичний валідатор може бути доданий, якщо є попит, складну перевірку краще залишити для сценаріїв під час фіксації" #: ../../contributing/debugging.rst:87 msgid "FRR" @@ -467,208 +495,236 @@ msgstr "FRR" #: ../../contributing/issues-features.rst:68 msgid "Feature Request" -msgstr "Feature Request" +msgstr "Запит на функцію" + +#: ../../contributing/issues-features.rst:72 +msgid "Feature Requests" +msgstr "Feature Requests" + +#: ../../contributing/issues-features.rst:116 +msgid "Feature requests that do not include required information and need clarification." +msgstr "Feature requests that do not include required information and need clarification." #: ../../contributing/build-vyos.rst:600 msgid "Firmware" -msgstr "Firmware" +msgstr "Прошивка" #: ../../contributing/build-vyos.rst:633 msgid "First, clone the source code and check out the appropriate version by running:" -msgstr "First, clone the source code and check out the appropriate version by running:" +msgstr "Спочатку клонуйте вихідний код і перевірте відповідну версію, виконавши:" #: ../../contributing/development.rst:177 msgid "Follow the above steps on how to \"Fork repository to submit a Patch\". Instead of uploading \"pushing\" your changes to GitHub you can export the patches/ commits and send it to maintainers@vyos.net or attach it directly to the bug (preferred over email)" -msgstr "Follow the above steps on how to \"Fork repository to submit a Patch\". Instead of uploading \"pushing\" your changes to GitHub you can export the patches/ commits and send it to maintainers@vyos.net or attach it directly to the bug (preferred over email)" +msgstr "Дотримуйтеся наведених вище кроків, щоб «форкувати репозиторій, щоб надіслати виправлення». Замість того, щоб завантажувати свої зміни на GitHub, ви можете експортувати виправлення/коміти та надіслати їх на supporters@vyos.net або прикріпити безпосередньо до помилки (бажано, ніж електронною поштою)" #: ../../contributing/development.rst:85 msgid "Followed by a message which describes all the details like:" -msgstr "Followed by a message which describes all the details like:" +msgstr "Далі слідує повідомлення з описом усіх деталей, таких як:" #: ../../contributing/debugging.rst:48 msgid "For each feature, a file called ``vyos.feature.debug`` can be created to toggle the feature on. If a parameter is required it can be placed inside the file as its first line." -msgstr "For each feature, a file called ``vyos.feature.debug`` can be created to toggle the feature on. If a parameter is required it can be placed inside the file as its first line." +msgstr "Для кожної функції можна створити файл під назвою ``vyos.feature.debug``, щоб увімкнути функцію. Якщо параметр потрібен, його можна розмістити всередині файлу як його перший рядок." #: ../../contributing/development.rst:384 msgid "For easy orientation we suggest you take a look on the ``ntp.py`` or ``interfaces-bonding.py`` (for tag nodes) implementation. Both files can be found in the vyos-1x_ repository." -msgstr "For easy orientation we suggest you take a look on the ``ntp.py`` or ``interfaces-bonding.py`` (for tag nodes) implementation. Both files can be found in the vyos-1x_ repository." +msgstr "Для легкої орієнтації ми пропонуємо вам поглянути на реалізацію ``ntp.py`` або ``interfaces-bonding.py`` (для вузлів тегів). Обидва файли можна знайти в репозиторії vyos-1x_." #: ../../contributing/debugging.rst:55 msgid "For example, ``/tmp/vyos.ifconfig.debug`` can be created to enable interface debugging." -msgstr "For example, ``/tmp/vyos.ifconfig.debug`` can be created to enable interface debugging." +msgstr "Наприклад, ``/tmp/vyos.ifconfig.debug`` можна створити, щоб увімкнути налагодження інтерфейсу." #: ../../contributing/debugging.rst:61 msgid "For example running, ``export VYOS_IFCONFIG_DEBUG=\"\"`` on your vbash, will have the same effect as ``touch /tmp/vyos.ifconfig.debug``." -msgstr "For example running, ``export VYOS_IFCONFIG_DEBUG=\"\"`` on your vbash, will have the same effect as ``touch /tmp/vyos.ifconfig.debug``." +msgstr "Наприклад, запуск ``export VYOS_IFCONFIG_DEBUG=""`` на вашому vbash матиме той самий ефект, що ``touch /tmp/vyos.ifconfig.debug``." #: ../../contributing/build-vyos.rst:72 msgid "For the packages required, you can refer to the ``docker/Dockerfile`` file in the repository_. The ``./build-vyos-image`` script will also warn you if any dependencies are missing." -msgstr "For the packages required, you can refer to the ``docker/Dockerfile`` file in the repository_. The ``./build-vyos-image`` script will also warn you if any dependencies are missing." +msgstr "Для отримання необхідних пакетів ви можете звернутися до файлу ``docker/Dockerfile`` у repository_. Сценарій ``./build-vyos-image`` також попередить вас, якщо будь-які залежності відсутні." #: ../../contributing/development.rst:151 msgid "Fork: ``git remote add myfork https://github.com/<user>/vyos-1x.git``" -msgstr "Fork: ``git remote add myfork https://github.com/<user>/vyos-1x.git``" +msgstr "Fork: ``git remote add myfork https://github.com/<user> /vyos-1x.git``" #: ../../contributing/development.rst:138 msgid "Fork Repository and submit Patch" -msgstr "Fork Repository and submit Patch" +msgstr "Форк репозиторію та надішліть патч" #: ../../contributing/development.rst:140 msgid "Forking the repository and submitting a GitHub pull-request is the preferred way of submitting your changes to VyOS. You can fork any VyOS repository to your very own GitHub account by just appending ``/fork`` to any repository's URL on GitHub. To e.g. fork the ``vyos-1x`` repository, open the following URL in your favourite browser: https://github.com/vyos/vyos-1x/fork" -msgstr "Forking the repository and submitting a GitHub pull-request is the preferred way of submitting your changes to VyOS. You can fork any VyOS repository to your very own GitHub account by just appending ``/fork`` to any repository's URL on GitHub. To e.g. fork the ``vyos-1x`` repository, open the following URL in your favourite browser: https://github.com/vyos/vyos-1x/fork" +msgstr "Розгалуження репозиторію та надсилання запиту на отримання GitHub є кращим способом надсилання ваших змін до VyOS. Ви можете розділити будь-яке сховище VyOS на свій власний обліковий запис GitHub, просто додавши ``/fork`` до URL-адреси будь-якого сховища на GitHub. Щоб, наприклад, розгалужити репозиторій ``vyos-1x``, відкрийте наступну URL-адресу у вашому улюбленому браузері: https://github.com/vyos/vyos-1x/fork" #: ../../contributing/development.rst:200 msgid "Formatting" -msgstr "Formatting" +msgstr "Форматування" #: ../../contributing/development.rst:495 msgid "GNU Preprocessor" -msgstr "GNU Preprocessor" +msgstr "Препроцесор GNU" #: ../../contributing/issues-features.rst:26 msgid "Get community support via Slack_ or our Forum_" -msgstr "Get community support via Slack_ or our Forum_" +msgstr "Отримайте підтримку спільноти через Slack_ або наш форум_" #: ../../contributing/development.rst:618 msgid "Good: \"Disable IPv6 forwarding\"" -msgstr "Good: \"Disable IPv6 forwarding\"" +msgstr "Добре: «Вимкнути переадресацію IPv6»" #: ../../contributing/development.rst:561 msgid "Good: \"Frobnication algorithm\"" -msgstr "Good: \"Frobnication algorithm\"" +msgstr "Добре: "Алгоритм Frobnication"" #: ../../contributing/development.rst:573 #: ../../contributing/development.rst:604 msgid "Good: \"TCP connection timeout\"" -msgstr "Good: \"TCP connection timeout\"" +msgstr "Добре: "Тайм-аут з'єднання TCP"" #: ../../contributing/development.rst:593 msgid "Good: PPPoE, IPsec" -msgstr "Good: PPPoE, IPsec" +msgstr "Добре: PPPoE, IPsec" #: ../../contributing/development.rst:582 msgid "Good: RADIUS (as in remote authentication for dial-in user services)" -msgstr "Good: RADIUS (as in remote authentication for dial-in user services)" +msgstr "Хороший: RADIUS (як у віддаленій автентифікації для телефонних служб користувачів)" #: ../../contributing/build-vyos.rst:284 msgid "Good luck!" -msgstr "Good luck!" +msgstr "Удачі!" #: ../../contributing/development.rst:535 msgid "Guidelines" -msgstr "Guidelines" +msgstr "Настанови" #: ../../contributing/development.rst:545 msgid "Help String" -msgstr "Help String" +msgstr "Рядок довідки" #: ../../contributing/development.rst:51 msgid "Help future maintainers of VyOS (it could be you!) to find out why certain things have been changed in the codebase or why certain features have been added" -msgstr "Help future maintainers of VyOS (it could be you!) to find out why certain things have been changed in the codebase or why certain features have been added" +msgstr "Допоможіть майбутнім супроводжувачам VyOS (це можете бути ви!) дізнатися, чому певні речі були змінені в кодовій базі або чому були додані певні функції" #: ../../contributing/development.rst:575 msgid "Horrible: \"Tcp connection timeout\"" -msgstr "Horrible: \"Tcp connection timeout\"" +msgstr "Жахливо: "Тайм-аут підключення TCP"" #: ../../contributing/development.rst:564 msgid "Horrible: \"frobnication algorithm.\"" -msgstr "Horrible: \"frobnication algorithm.\"" +msgstr "Жахливо: "алгоритм фробнікації"." -#: ../../contributing/issues-features.rst:63 +#: ../../contributing/issues-features.rst:67 msgid "How can we reproduce this Bug?" -msgstr "How can we reproduce this Bug?" +msgstr "Як ми можемо відтворити цю помилку?" -#: ../../contributing/testing.rst:103 +#: ../../contributing/issues-features.rst:98 +msgid "How you'd configure it by hand there?" +msgstr "How you'd configure it by hand there?" + +#: ../../contributing/testing.rst:106 msgid "IP and IPv6 options" -msgstr "IP and IPv6 options" +msgstr "Варіанти IP та IPv6" #: ../../contributing/build-vyos.rst:348 msgid "ISO Build Issues" -msgstr "ISO Build Issues" +msgstr "Проблеми збірки ISO" #: ../../contributing/debugging.rst:12 msgid "ISO image build" -msgstr "ISO image build" +msgstr "Створення образу ISO" #: ../../contributing/issues-features.rst:19 msgid "I have found a bug, what should I do?" -msgstr "I have found a bug, what should I do?" +msgstr "Я знайшов помилку, що мені робити?" #: ../../contributing/development.rst:607 msgid "If a verb is essential, keep it. For example, in the help text of ``set system ipv6 disable-forwarding``, \"Disable IPv6 forwarding on all interfaces\" is a perfectly justified wording." -msgstr "If a verb is essential, keep it. For example, in the help text of ``set system ipv6 disable-forwarding``, \"Disable IPv6 forwarding on all interfaces\" is a perfectly justified wording." +msgstr "Якщо дієслово важливе, збережіть його. Наприклад, у довідковому тексті ``set system ipv6 disable-forwarding``, «Вимкнути пересилання IPv6 на всіх інтерфейсах» є цілком виправданим формулюванням." #: ../../contributing/development.rst:94 msgid "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" -msgstr "If applicable a reference to a previous commit should be made linking those commits nicely when browsing the history: ``After commit abcd12ef (\"snmp: this is a headline\") a Python import statement is missing, throwing the following exception: ABCDEF``" +msgstr "Якщо застосовно, має бути зроблено посилання на попередній комміт, який гарно зв’язує ці коміти під час перегляду історії: ``Після фіксації abcd12ef ("snmp: це заголовок") відсутній оператор імпорту Python, викликаючи такий виняток: ABCDEF``" + +#: ../../contributing/issues-features.rst:46 +msgid "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." +msgstr "If it's a regression, tell us a VyOS version where the feature still worked correctly. It's perfect if you can tell exactly which version broke it, but we understand that it's not always easy or feasible — any working version is acceptable." #: ../../contributing/development.rst:64 msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." -msgstr "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." +msgstr "Якщо у комітах вашого запиту на отримання відсутнє посилання Phabricator_, ми маємо попросити вас змінити повідомлення коміту. Інакше нам доведеться його відхилити." + +#: ../../contributing/issues-features.rst:126 +msgid "If there is no response after further two weeks, the task will be automatically closed." +msgstr "If there is no response after further two weeks, the task will be automatically closed." + +#: ../../contributing/issues-features.rst:124 +msgid "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." +msgstr "If there is no response from the reporter within two weeks, the task bot will add a comment (\"Any news?\") to remind the reporter to reply." #: ../../contributing/build-vyos.rst:739 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." -msgstr "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." +msgstr "Якщо у вас достатньо сміливості, щоб самостійно створити образ ISO, який містить будь-який модифікований пакет від нашої організації GitHub – це те місце, щоб бути." + +#: ../../contributing/issues-features.rst:50 +msgid "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." +msgstr "If you aren't certain what the correct behavior is and if what you see is really a bug, or if you don't have a reproducing procedure that reliably triggers it, please create a post on the forum or ask in the chat first — or, if you have a subscription, create a support ticket. Our team and community members can help you identify the bug and work around it, then create an actionable and testable bug report." #: ../../contributing/build-vyos.rst:602 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." -msgstr "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." +msgstr "Якщо ви оновлюєте ядро або додаєте нові драйвери, вам може знадобитися нове мікропрограмне забезпечення. Створіть новий пакет ``vyos-linux-firmware`` із доданими допоміжними сценаріями." #: ../../contributing/development.rst:39 msgid "In a big system, such as VyOS, that is comprised of multiple components, it's impossible to keep track of all the changes and bugs/feature requests in one's head. We use a bugtracker known as Phabricator_ for it (\"issue tracker\" would be a better term, but this one stuck)." -msgstr "In a big system, such as VyOS, that is comprised of multiple components, it's impossible to keep track of all the changes and bugs/feature requests in one's head. We use a bugtracker known as Phabricator_ for it (\"issue tracker\" would be a better term, but this one stuck)." +msgstr "У великій системі, такій як VyOS, яка складається з кількох компонентів, неможливо відстежувати всі зміни та помилки/запити на функції в своїй голові. Для цього ми використовуємо багтрекер, відомий як Phabricator_ (кращим терміном був би «трекер проблем», але цей застряг)." #: ../../contributing/development.rst:267 msgid "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." -msgstr "In addition this also helps when browsing the GitHub codebase on a mobile device if you happen to be a crazy scientist." +msgstr "Крім того, це також допоможе під час перегляду кодової бази GitHub на мобільному пристрої, якщо ви випадково божевільний учений." -#: ../../contributing/issues-features.rst:56 +#: ../../contributing/issues-features.rst:60 msgid "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." -msgstr "In order to open up a bug-report/feature request you need to create yourself an account on VyOS Phabricator_. On the left side of the specific project (VyOS 1.2 or VyOS 1.3) you will find quick-links for opening a bug-report/feature request." +msgstr "Щоб відкрити звіт про помилку/запит на функцію, вам потрібно створити обліковий запис на VyOS Phabricator_. У лівій частині конкретного проекту (VyOS 1.2 або VyOS 1.3) ви знайдете швидкі посилання для відкриття звіту про помилку/запиту функції." #: ../../contributing/development.rst:153 msgid "In order to record you as the author of the fix please identify yourself to Git by setting up your name and email. This can be done local for this one and only repository ``git config`` or globally using ``git config --global``." -msgstr "In order to record you as the author of the fix please identify yourself to Git by setting up your name and email. This can be done local for this one and only repository ``git config`` or globally using ``git config --global``." +msgstr "Щоб записати вас як автора виправлення, ідентифікуйте себе в Git, вказавши своє ім’я та електронну адресу. Це можна зробити локально для цього єдиного сховища ``git config`` або глобально за допомогою ``git config --global``." #: ../../contributing/debugging.rst:81 msgid "In order to retrieve the debug output on the command-line you need to disable ``vyos-configd`` in addition. This can be run either one-time by calling ``sudo systemctl stop vyos-configd`` or make this reboot-safe by calling ``sudo systemctl disable vyos-configd``." -msgstr "In order to retrieve the debug output on the command-line you need to disable ``vyos-configd`` in addition. This can be run either one-time by calling ``sudo systemctl stop vyos-configd`` or make this reboot-safe by calling ``sudo systemctl disable vyos-configd``." +msgstr "Щоб отримати вихідні дані налагодження в командному рядку, вам потрібно додатково вимкнути ``vyos-configd``. Це можна запустити одноразово, викликавши ``sudo systemctl stop vyos-configd``, або зробити це перезавантаження безпечним, викликавши ``sudo systemctl disable vyos-configd``." #: ../../contributing/development.rst:80 msgid "In some contexts, the first line is treated as the subject of an email and the rest of the text as the body. The blank line separating the summary from the body is critical (unless you omit the body entirely); tools like rebase can get confused if you run the two together." -msgstr "In some contexts, the first line is treated as the subject of an email and the rest of the text as the body. The blank line separating the summary from the body is critical (unless you omit the body entirely); tools like rebase can get confused if you run the two together." +msgstr "У деяких контекстах перший рядок вважається темою електронного листа, а решта тексту – основним. Порожній рядок, що відокремлює резюме від основної частини, є критичним (якщо ви повністю не пропускаєте основної частини); такі інструменти, як rebase, можуть заплутатися, якщо ви запускаєте обидва разом." #: ../../contributing/build-vyos.rst:594 msgid "In the end you will be presented with the kernel binary packages which you can then use in your custom ISO build process, by placing all the `*.deb` files in the vyos-build/packages folder where they will be used automatically when building VyOS as documented above." -msgstr "In the end you will be presented with the kernel binary packages which you can then use in your custom ISO build process, by placing all the `*.deb` files in the vyos-build/packages folder where they will be used automatically when building VyOS as documented above." +msgstr "Наприкінці вам буде надано бінарні пакети ядра, які потім ви зможете використати у своєму спеціальному процесі збірки ISO, помістивши всі файли `*.deb` у папку vyos-build/packages, де вони автоматично використовуватимуться під час збирання VyOS, як зазначено вище." #: ../../contributing/upstream-packages.rst:22 msgid "In the future, we may switch to using systemd infrastructure instead. Building it doesn't require a special procedure." -msgstr "In the future, we may switch to using systemd infrastructure instead. Building it doesn't require a special procedure." +msgstr "У майбутньому ми можемо перейти на використання інфраструктури systemd. Його виготовлення не вимагає особливої процедури." #: ../../contributing/issues-features.rst:45 msgid "Include output" -msgstr "Include output" +msgstr "Включити вихід" #: ../../contributing/debugging.rst:106 msgid "Insert the following statement right before the section where you want to investigate a problem (e.g. a statement you see in a backtrace): ``import pdb; pdb.set_trace()`` Optionally you can surrounded this statement by an ``if`` which only triggers under the condition you are interested in." -msgstr "Insert the following statement right before the section where you want to investigate a problem (e.g. a statement you see in a backtrace): ``import pdb; pdb.set_trace()`` Optionally you can surrounded this statement by an ``if`` which only triggers under the condition you are interested in." +msgstr "Вставте наступний оператор безпосередньо перед розділом, де ви хочете дослідити проблему (наприклад, оператор, який ви бачите у зворотному трасуванні): ``import pdb; pdb.set_trace()`` За бажанням ви можете оточити цей оператор ``if``, який запускається лише за умови, яка вас цікавить." #: ../../contributing/build-vyos.rst:850 msgid "Install" -msgstr "Install" +msgstr "Встановити" #: ../../contributing/upstream-packages.rst:53 msgid "Install https://pypi.org/project/stdeb/" -msgstr "Install https://pypi.org/project/stdeb/" +msgstr "Встановити https://pypi.org/project/stdeb/" #: ../../contributing/build-vyos.rst:85 msgid "Installing Docker_ and prerequisites:" -msgstr "Installing Docker_ and prerequisites:" +msgstr "Встановлення Docker_ і передумови:" #: ../../contributing/development.rst:506 msgid "Instead of supplying all those XML nodes multiple times there are now include files with predefined features. Brief overview:" -msgstr "Instead of supplying all those XML nodes multiple times there are now include files with predefined features. Brief overview:" +msgstr "Замість надання всіх цих XML-вузлів багаторазово, тепер є файли включення з попередньо визначеними функціями. Короткий огляд:" #: ../../contributing/build-vyos.rst:672 msgid "Intel NIC" @@ -676,7 +732,7 @@ msgstr "Intel NIC" #: ../../contributing/build-vyos.rst:444 msgid "Intel NIC drivers" -msgstr "Intel NIC drivers" +msgstr "Драйвери Intel NIC" #: ../../contributing/build-vyos.rst:701 msgid "Intel QAT" @@ -686,130 +742,138 @@ msgstr "Intel QAT" msgid "Inter QAT" msgstr "Inter QAT" -#: ../../contributing/testing.rst:91 +#: ../../contributing/testing.rst:94 msgid "Interface based tests" -msgstr "Interface based tests" +msgstr "Тести на основі інтерфейсу" + +#: ../../contributing/issues-features.rst:96 +msgid "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" +msgstr "Is the feature supported by the underlying component (FreeRangeRouting, nftables, Kea...) already?" #: ../../contributing/issues-features.rst:5 msgid "Issues/Feature requests" -msgstr "Issues/Feature requests" +msgstr "Проблеми/запити на функції" #: ../../contributing/issues-features.rst:12 msgid "Issues or bugs are found in any software project. VyOS is not an exception." -msgstr "Issues or bugs are found in any software project. VyOS is not an exception." +msgstr "Проблеми чи помилки можна знайти в будь-якому програмному проекті. VyOS не є винятком." #: ../../contributing/upstream-packages.rst:85 msgid "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." -msgstr "It's an Ada program and requires GNAT and gprbuild for building, dependencies are properly specified so just follow debuild's suggestions." +msgstr "Це програма на Ada, для створення якої потрібні GNAT і gprbuild, залежності вказані належним чином, тому просто дотримуйтеся порад debuild." + +#: ../../contributing/issues-features.rst:103 +msgid "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." +msgstr "It's fine if you cannot provide some of that information, but if you can, it makes the work of developers considerably simpler, so try to do the research to answer those questions." #: ../../contributing/debugging.rst:58 msgid "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." -msgstr "It is also possible to set up the debugging using environment variables. In that case, the name will be (in uppercase) VYOS_FEATURE_DEBUG." +msgstr "Також можна налаштувати налагодження за допомогою змінних середовища. У такому випадку ім’я буде (у верхньому регістрі) VYOS_FEATURE_DEBUG." #: ../../contributing/testing.rst:18 msgid "Jenkins CI" -msgstr "Jenkins CI" +msgstr "Дженкінс CI" #: ../../contributing/build-vyos.rst:856 msgid "Just install using the following commands:" -msgstr "Just install using the following commands:" +msgstr "Просто встановіть за допомогою таких команд:" #: ../../contributing/development.rst:46 msgid "Keep track of the progress (what we've already done in this branch and what we still need to do)." -msgstr "Keep track of the progress (what we've already done in this branch and what we still need to do)." +msgstr "Слідкуйте за прогресом (що ми вже зробили в цій гілці і що нам ще потрібно зробити)." #: ../../contributing/upstream-packages.rst:28 msgid "Keepalived normally isn't updated to newer feature releases between Debian versions, so we are building it from source." -msgstr "Keepalived normally isn't updated to newer feature releases between Debian versions, so we are building it from source." +msgstr "Keepalived зазвичай не оновлюється до нових версій функцій між версіями Debian, тому ми будуємо його з початкового коду." #: ../../contributing/debugging.rst:25 msgid "Kernel" -msgstr "Kernel" +msgstr "Ядро" #: ../../contributing/build-vyos.rst:827 msgid "Launch Docker container and build package" -msgstr "Launch Docker container and build package" +msgstr "Запустіть контейнер Docker і створіть пакет" #: ../../contributing/development.rst:633 msgid "Leaf nodes (nodes with values) use <leafNode> tag instead" -msgstr "Leaf nodes (nodes with values) use <leafNode> tag instead" +msgstr "Використання листових вузлів (вузлів із значеннями).<leafNode> натомість тег" #: ../../contributing/development.rst:240 msgid "Let's face it: VyOS is full of spaghetti code where logic for reading the VyOS config, generating daemon configs, and restarting processes is all mixed up." -msgstr "Let's face it: VyOS is full of spaghetti code where logic for reading the VyOS config, generating daemon configs, and restarting processes is all mixed up." +msgstr "Давайте подивимося правді в очі: VyOS наповнена спагетті-кодом, де логіка читання конфігурації VyOS, генерації конфігурацій демона та перезапуску процесів змішана." #: ../../contributing/debugging.rst:101 msgid "Let us assume you want to debug a Python script that is called by an op-mode command. After you found the script by looking up the op-mode-defitions you can edit the script in the live system using e.g. vi: ``vi /usr/libexec/vyos/op_mode/show_xyz.py``" -msgstr "Let us assume you want to debug a Python script that is called by an op-mode command. After you found the script by looking up the op-mode-defitions you can edit the script in the live system using e.g. vi: ``vi /usr/libexec/vyos/op_mode/show_xyz.py``" +msgstr "Припустімо, ви хочете налагодити сценарій Python, який викликається командою режиму op-mode. Після того, як ви знайшли сценарій, переглянувши op-mode-defitions, ви можете редагувати сценарій у живій системі, наприклад, за допомогою vi: ``vi /usr/libexec/vyos/op_mode/show_xyz.py``" #: ../../contributing/development.rst:189 msgid "Like any other project we have some small guidelines about our source code, too. The rules we have are not there to punish you - the rules are in place to help us all. By having a consistent coding style it becomes very easy for new and also longtime contributors to navigate through the sources and all the implied logic of any one source file.." -msgstr "Like any other project we have some small guidelines about our source code, too. The rules we have are not there to punish you - the rules are in place to help us all. By having a consistent coding style it becomes very easy for new and also longtime contributors to navigate through the sources and all the implied logic of any one source file.." +msgstr "Як і в будь-якому іншому проекті, у нас також є деякі невеликі вказівки щодо вихідного коду. Наші правила створені не для того, щоб карати вас, а для того, щоб допомогти нам усім. Маючи послідовний стиль кодування, новачкам і давнім учасникам стає дуже легко орієнтуватися в джерелах і всій неявній логіці будь-якого вихідного файлу." #: ../../contributing/development.rst:109 msgid "Limits:" -msgstr "Limits:" +msgstr "Обмеження:" #: ../../contributing/build-vyos.rst:430 msgid "Linux Kernel" -msgstr "Linux Kernel" +msgstr "Ядро Linux" #: ../../contributing/debugging.rst:42 msgid "Live System" -msgstr "Live System" +msgstr "Жива система" -#: ../../contributing/testing.rst:102 +#: ../../contributing/testing.rst:105 msgid "MTU size" -msgstr "MTU size" +msgstr "Розмір PERSON" #: ../../contributing/development.rst:162 msgid "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" -msgstr "Make your changes and save them. Do the following for all changes files to record them in your created Git commit:" +msgstr "Внесіть зміни та збережіть їх. Зробіть наступне для всіх файлів змін, щоб записати їх у створений комміт Git:" -#: ../../contributing/testing.rst:61 +#: ../../contributing/testing.rst:64 msgid "Manual Smoketest Run" -msgstr "Manual Smoketest Run" +msgstr "Ручний запуск Smoketest" -#: ../../contributing/testing.rst:169 +#: ../../contributing/testing.rst:172 msgid "Manual config load test" -msgstr "Manual config load test" +msgstr "Навантажувальний тест конфігурації вручну" #: ../../contributing/upstream-packages.rst:6 msgid "Many base system packages are pulled straight from Debian's main and contrib repositories, but there are exceptions." -msgstr "Many base system packages are pulled straight from Debian's main and contrib repositories, but there are exceptions." +msgstr "Багато базових системних пакетів витягуються безпосередньо з основних сховищ Debian і contrib, але є винятки." #: ../../contributing/development.rst:622 msgid "Migrating old CLI" -msgstr "Migrating old CLI" +msgstr "Перенесення старого CLI" #: ../../contributing/development.rst:677 msgid "Move default values to scripts" -msgstr "Move default values to scripts" +msgstr "Перемістити значення за замовчуванням у сценарії" #: ../../contributing/build-vyos.rst:35 msgid "Native Build" -msgstr "Native Build" +msgstr "Рідна збірка" #: ../../contributing/development.rst:629 msgid "New syntax" -msgstr "New syntax" +msgstr "Новий синтаксис" #: ../../contributing/development.rst:230 msgid "No code incompatible with Python3" -msgstr "No code incompatible with Python3" +msgstr "Немає коду, несумісного з Python3" #: ../../contributing/development.rst:228 msgid "No new features in Perl" -msgstr "No new features in Perl" +msgstr "У Perl немає нових функцій" #: ../../contributing/development.rst:229 msgid "No old style command definitions" -msgstr "No old style command definitions" +msgstr "Немає старих визначень команд" #: ../../contributing/upstream-packages.rst:68 #: ../../contributing/upstream-packages.rst:76 msgid "No special build procedure is required." -msgstr "No special build procedure is required." +msgstr "Спеціальна процедура нарощування не потрібна." #: ../../contributing/development.rst:649 #: ../../contributing/development.rst:656 @@ -817,55 +881,55 @@ msgstr "No special build procedure is required." #: ../../contributing/development.rst:679 #: ../../contributing/development.rst:682 msgid "None" -msgstr "None" +msgstr "Жодного" #: ../../contributing/development.rst:630 msgid "Notes" -msgstr "Notes" +msgstr "Примітки" #: ../../contributing/build-vyos.rst:236 msgid "Now a fresh build of the VyOS ISO can begin. Change directory to the ``vyos-build`` directory and run:" -msgstr "Now a fresh build of the VyOS ISO can begin. Change directory to the ``vyos-build`` directory and run:" +msgstr "Тепер можна почати нову збірку VyOS ISO. Змініть каталог на каталог ``vyos-build`` і запустіть:" #: ../../contributing/build-vyos.rst:217 msgid "Now as you are aware of the prerequisites we can continue and build our own ISO from source. For this we have to fetch the latest source code from GitHub. Please note as this will differ for both `current` and `crux`." -msgstr "Now as you are aware of the prerequisites we can continue and build our own ISO from source. For this we have to fetch the latest source code from GitHub. Please note as this will differ for both `current` and `crux`." +msgstr "Тепер, коли ви знаєте про передумови, ми можемо продовжити і створювати власний ISO з початкового коду. Для цього нам потрібно отримати останній вихідний код з GitHub. Зауважте, що це буде різним для `current` і `crux`." #: ../../contributing/build-vyos.rst:424 msgid "Now it's time to fix the package mirror and rerun the last step until the package installation succeeds again!" -msgstr "Now it's time to fix the package mirror and rerun the last step until the package installation succeeds again!" +msgstr "Тепер настав час виправити дзеркало пакета та повторити останній крок, доки інсталяція пакета не вдасться знову!" #: ../../contributing/build-vyos.rst:509 msgid "Now we can use the helper script ``build-kernel.sh`` which does all the necessary voodoo by applying required patches from the `vyos-build/packages/linux-kernel/patches` folder, copying our kernel configuration ``x86_64_vyos_defconfig`` to the right location, and finally building the Debian packages." -msgstr "Now we can use the helper script ``build-kernel.sh`` which does all the necessary voodoo by applying required patches from the `vyos-build/packages/linux-kernel/patches` folder, copying our kernel configuration ``x86_64_vyos_defconfig`` to the right location, and finally building the Debian packages." +msgstr "Тепер ми можемо використати допоміжний скрипт ``build-kernel.sh``, який виконує всі необхідні вуду, застосовуючи необхідні патчі з папки `vyos-build/packages/linux-kernel/patches`, копіюючи нашу конфігурацію ядра ``x86_64_vyos_defconfig` `` у потрібне розташування та, нарешті, збирання пакунків Debian." #: ../../contributing/build-vyos.rst:199 msgid "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` to spawn your development containers in your current working directory." -msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` to spawn your development containers in your current working directory." +msgstr "Тепер у вас є два нові псевдоніми ``vybld`` і ``vybld_crux`` для створення ваших контейнерів розробки у вашому поточному робочому каталозі." #: ../../contributing/development.rst:628 msgid "Old concept/syntax" -msgstr "Old concept/syntax" +msgstr "Стара концепція/синтаксис" -#: ../../contributing/testing.rst:63 +#: ../../contributing/testing.rst:66 msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." -msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." +msgstr "З іншого боку, оскільки кожен тест міститься в окремому файлі, можна завжди виконати один Smoketest вручну, просто запустивши тестові сценарії Python." #: ../../contributing/build-vyos.rst:174 msgid "Once you have the required dependencies installed, you may proceed with the steps described in :ref:`build_iso`." -msgstr "Once you have the required dependencies installed, you may proceed with the steps described in :ref:`build_iso`." +msgstr "Після встановлення необхідних залежностей ви можете продовжити кроки, описані в :ref:`build_iso`." #: ../../contributing/debugging.rst:112 msgid "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" -msgstr "Once you run ``show xyz`` and your condition is triggered you should be dropped into the python debugger:" +msgstr "Щойно ви запустите ``show xyz`` і ваша умова спрацює, ви повинні перейти до налагоджувача python:" -#: ../../contributing/testing.rst:171 +#: ../../contributing/testing.rst:174 msgid "One is not bound to load all configurations one after another but can also load individual test configurations on his own." -msgstr "One is not bound to load all configurations one after another but can also load individual test configurations on his own." +msgstr "Людина не зобов’язана завантажувати всі конфігурації одну за одною, але також може завантажувати окремі тестові конфігурації самостійно." #: ../../contributing/testing.rst:7 msgid "One of the major advantages introduced in VyOS 1.3 is an autmated test framework. When assembling an ISO image multiple things can go wrong badly and publishing a faulty ISO makes no sense. The user is disappointed by the quality of the image and the developers get flodded with bug reports over and over again." -msgstr "One of the major advantages introduced in VyOS 1.3 is an autmated test framework. When assembling an ISO image multiple things can go wrong badly and publishing a faulty ISO makes no sense. The user is disappointed by the quality of the image and the developers get flodded with bug reports over and over again." +msgstr "Однією з головних переваг VyOS 1.3 є автоматизована тестова структура. Під час збирання образу ISO багато речей можуть піти не так, і публікація несправного ISO не має сенсу. Користувач розчарований якістю зображення, а розробники знову і знову отримують повідомлення про помилки." #: ../../contributing/testing.rst:7 msgid "One of the major advantages introduced in VyOS 1.3 is an automated test framework. When assembling an ISO image multiple things can go wrong badly and publishing a faulty ISO makes no sense. The user is disappointed by the quality of the image and the developers get flodded with bug reports over and over again." @@ -873,88 +937,100 @@ msgstr "One of the major advantages introduced in VyOS 1.3 is an automated test #: ../../contributing/development.rst:665 msgid "Only applicable to leaf nodes" -msgstr "Only applicable to leaf nodes" +msgstr "Застосовується лише до листових вузлів" #: ../../contributing/build-vyos.rst:401 msgid "Other packages (e.g. vyos-1x) add dependencies to the ISO build procedure on e.g. the wireguard-modules package which itself adds a dependency on the kernel version used due to the module it ships. This may change (for WireGuard) in future kernel releases but as long as we have out-of-tree modules." -msgstr "Other packages (e.g. vyos-1x) add dependencies to the ISO build procedure on e.g. the wireguard-modules package which itself adds a dependency on the kernel version used due to the module it ships. This may change (for WireGuard) in future kernel releases but as long as we have out-of-tree modules." +msgstr "Інші пакунки (наприклад, vyos-1x) додають залежності до процедури збирання ISO, наприклад, пакунок wireguard-modules, який сам по собі додає залежність від версії ядра, що використовується через модуль, який він постачає. Це може змінитися (для WireGuard) у майбутніх випусках ядра, але якщо у нас є модулі поза деревом." #: ../../contributing/upstream-packages.rst:39 msgid "Our StrongSWAN build differs from the upstream:" -msgstr "Our StrongSWAN build differs from the upstream:" +msgstr "Наша збірка StrongSWAN відрізняється від попередньої:" + +#: ../../contributing/testing.rst:20 +msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." +msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successful test drive." #: ../../contributing/testing.rst:20 msgid "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." -msgstr "Our `VyOS CI`_ system is based on Jenkins and builds all our required packages for VyOS 1.2 to 1.4. In addition to the package build, there is the vyos-build Job which builds and tests the VyOS ISO image which is published after a successfull test drive." +msgstr "Наша система `VyOS CI`_ заснована на Jenkins і збирає всі необхідні пакети для VyOS 1.2-1.4. Окрім збірки пакета, існує завдання vyos-build, яке створює та тестує ISO-образ VyOS, який публікується після успішного тестування." #: ../../contributing/development.rst:10 msgid "Our code is split into several modules. VyOS is composed of multiple individual packages, some of them are forks of upstream packages and are periodically synced with upstream, so keeping the whole source under a single repository would be very inconvenient and slow. There is now an ongoing effort to consolidate all VyOS-specific framework/config packages into vyos-1x package, but the basic structure is going to stay the same, just with fewer and fewer packages while the base code is rewritten from Perl/BASH into Python using and XML based interface definition for the CLI." -msgstr "Our code is split into several modules. VyOS is composed of multiple individual packages, some of them are forks of upstream packages and are periodically synced with upstream, so keeping the whole source under a single repository would be very inconvenient and slow. There is now an ongoing effort to consolidate all VyOS-specific framework/config packages into vyos-1x package, but the basic structure is going to stay the same, just with fewer and fewer packages while the base code is rewritten from Perl/BASH into Python using and XML based interface definition for the CLI." +msgstr "Наш код розбитий на кілька модулів. VyOS складається з кількох окремих пакетів, деякі з них є розгалуженнями вихідних пакетів і періодично синхронізуються з попереднім потоком, тому зберігати весь вихідний код в одному репозиторії було б дуже незручно та повільно. Зараз тривають спроби консолідувати всі специфічні для VyOS пакети рамок/налаштувань у пакет vyos-1x, але базова структура залишиться незмінною, лише з дедалі меншою кількістю пакетів, тоді як базовий код переписується з Perl/BASH на Використання Python і визначення інтерфейсу на основі XML для CLI." #: ../../contributing/upstream-packages.rst:49 msgid "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" -msgstr "Our op mode scripts use the python-vici module, which is not included in Debian's build, and isn't quite easy to integrate in that build. For this reason we debianize that module by hand now, using this procedure:" +msgstr "Наші сценарії операційного режиму використовують модуль python-vici, який не входить до збірки Debian, і його нелегко інтегрувати в цю збірку. З цієї причини ми зараз дебіанізуємо цей модуль вручну, використовуючи цю процедуру:" -#: ../../contributing/testing.rst:93 +#: ../../contributing/testing.rst:96 msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." -msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." +msgstr "Наші smoketests не лише перевіряють демони та сервери, а й перевіряють, чи працює те, що ми налаштували для інтерфейсу. Таким чином, існує загальний базовий клас під назвою: ``base_interfaces_test.py``, який містить увесь загальний код, який підтримує і тестується інтерфейсом." #: ../../contributing/build-vyos.rst:737 #: ../../contributing/build-vyos.rst:806 msgid "Packages" -msgstr "Packages" +msgstr "Пакети" #: ../../contributing/development.rst:27 msgid "Patches are always more than welcome. To have a clean and easy to maintain repository we have some guidelines when working with Git. A clean repository eases the automatic generation of a changelog file." -msgstr "Patches are always more than welcome. To have a clean and easy to maintain repository we have some guidelines when working with Git. A clean repository eases the automatic generation of a changelog file." +msgstr "Патчі завжди більш ніж вітаються. Щоб мати чистий і простий в обслуговуванні репозиторій, у нас є деякі рекомендації щодо роботи з Git. Чисте сховище полегшує автоматичне створення файлу журналу змін." #: ../../contributing/upstream-packages.rst:42 msgid "Patches for DMVPN are merged in" -msgstr "Patches for DMVPN are merged in" +msgstr "Патчі для DMVPN об’єднані" #: ../../contributing/development.rst:661 msgid "Please leave a comment explaining why the priority was chosen (e.g. \"after interfaces are configured\")" -msgstr "Please leave a comment explaining why the priority was chosen (e.g. \"after interfaces are configured\")" +msgstr "Залиште коментар, пояснюючи, чому було обрано пріоритет (наприклад, «після налаштування інтерфейсів»)" #: ../../contributing/development.rst:115 msgid "Please submit your patches using the well-known GitHub pull-request against our repositories found in the VyOS GitHub organisation at https://github.com/vyos" -msgstr "Please submit your patches using the well-known GitHub pull-request against our repositories found in the VyOS GitHub organisation at https://github.com/vyos" +msgstr "Будь ласка, надішліть свої виправлення за допомогою відомого запиту GitHub для наших репозиторіїв, які знаходяться в організації VyOS GitHub за адресою https://github.com/vyos" #: ../../contributing/development.rst:254 msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." -msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Pyhon interface." +msgstr "Будь ласка, використовуйте наступний шаблон як хорошу відправну точку під час розробки нових модулів або навіть перепишіть цілу купу коду в новому стилі інтерфейсу XML/Pyhon." -#: ../../contributing/testing.rst:104 +#: ../../contributing/development.rst:254 +msgid "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." +msgstr "Please use the following template as good starting point when developing new modules or even rewrite a whole bunch of code in the new style XML/Python interface." + +#: ../../contributing/testing.rst:107 msgid "Port description" -msgstr "Port description" +msgstr "Опис порту" -#: ../../contributing/testing.rst:105 +#: ../../contributing/testing.rst:108 msgid "Port disable" -msgstr "Port disable" +msgstr "Вимкнути порт" #: ../../contributing/development.rst:612 msgid "Prefer infinitives" -msgstr "Prefer infinitives" +msgstr "Віддавайте перевагу інфінітивам" #: ../../contributing/development.rst:37 msgid "Prepare patch/commit" -msgstr "Prepare patch/commit" +msgstr "Підготуйте патч/комміт" #: ../../contributing/development.rst:49 msgid "Prepare release notes for upcoming releases" -msgstr "Prepare release notes for upcoming releases" +msgstr "Підготуйте примітки до випуску для майбутніх випусків" #: ../../contributing/build-vyos.rst:9 msgid "Prerequisites" -msgstr "Prerequisites" +msgstr "передумови" #: ../../contributing/debugging.rst:188 msgid "Priorities" -msgstr "Priorities" +msgstr "Пріоритети" -#: ../../contributing/issues-features.rst:61 +#: ../../contributing/issues-features.rst:91 +msgid "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." +msgstr "Proposed CLI syntax, if the feature requires new commands. Please include both configuration and operational mode commands, if both are required." + +#: ../../contributing/issues-features.rst:65 msgid "Provide as much information as you can" -msgstr "Provide as much information as you can" +msgstr "Надайте якомога більше інформації" #: ../../contributing/development.rst:234 msgid "Python" @@ -962,15 +1038,15 @@ msgstr "Python" #: ../../contributing/development.rst:202 msgid "Python: Tabs **shall not** be used. Every indentation level should be 4 spaces" -msgstr "Python: Tabs **shall not** be used. Every indentation level should be 4 spaces" +msgstr "Python: вкладки **не можна** використовувати. Кожен рівень відступу повинен складатися з 4 пробілів" #: ../../contributing/development.rst:195 msgid "Python 3 **shall** be used. How long can we keep Python 2 alive anyway? No considerations for Python 2 compatibility **should** be taken at any time." -msgstr "Python 3 **shall** be used. How long can we keep Python 2 alive anyway? No considerations for Python 2 compatibility **should** be taken at any time." +msgstr "**Потрібно** використовувати Python 3. Як довго ми можемо підтримувати Python 2? Жодних міркувань щодо сумісності з Python 2 **не слід** враховувати." #: ../../contributing/development.rst:243 msgid "Python (or any other language, for that matter) does not provide automatic protection from bad design, so we need to also devise design guidelines and follow them to keep the system extensible and maintainable." -msgstr "Python (or any other language, for that matter) does not provide automatic protection from bad design, so we need to also devise design guidelines and follow them to keep the system extensible and maintainable." +msgstr "Python (або будь-яка інша мова, якщо на те пішло) не забезпечує автоматичного захисту від поганого дизайну, тому нам також потрібно розробити вказівки щодо дизайну та слідувати їм, щоб зберегти систему розширюваною та зручною для обслуговування." #: ../../contributing/build-vyos.rst:785 msgid "QEMU" @@ -978,184 +1054,200 @@ msgstr "QEMU" #: ../../contributing/development.rst:556 msgid "Rationale: this seems to be the unwritten standard in network device CLIs, and a good aesthetic compromise." -msgstr "Rationale: this seems to be the unwritten standard in network device CLIs, and a good aesthetic compromise." +msgstr "Обґрунтування: це здається неписаним стандартом у CLI мережевих пристроїв і хорошим естетичним компромісом." #: ../../contributing/debugging.rst:89 msgid "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." -msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is located inside our ``vyos-1x:python/vyos/frr.py``. It comes with an embedded debugging/ (print style) debugger as vyos.ifconfig does." +msgstr "В останніх версіях використовується структура ``vyos.frr``. Клас Python знаходиться всередині нашого ``vyos-1x:python/vyos/frr.py``. Він постачається із вбудованим налагоджувачем налагодження/(стиль друку), як це робить vyos.ifconfig." -#: ../../contributing/issues-features.rst:54 +#: ../../contributing/issues-features.rst:58 msgid "Report a Bug" -msgstr "Report a Bug" +msgstr "Повідомити про помилку" #: ../../contributing/build-vyos.rst:787 msgid "Run the following command after building the ISO image." -msgstr "Run the following command after building the ISO image." +msgstr "Виконайте наступну команду після створення образу ISO." #: ../../contributing/build-vyos.rst:796 msgid "Run the following command after building the QEMU image." -msgstr "Run the following command after building the QEMU image." +msgstr "Виконайте наступну команду після створення образу QEMU." #: ../../contributing/build-vyos.rst:677 #: ../../contributing/build-vyos.rst:706 msgid "Simply use our wrapper script to build all of the driver modules." -msgstr "Simply use our wrapper script to build all of the driver modules." +msgstr "Просто використовуйте наш сценарій оболонки, щоб створити всі модулі драйвера." #: ../../contributing/build-vyos.rst:102 msgid "Since VyOS has switched to Debian (11) Bullseye in its ``current`` branch, you will require individual container for `current`, `equuleus` and `crux` builds." -msgstr "Since VyOS has switched to Debian (11) Bullseye in its ``current`` branch, you will require individual container for `current`, `equuleus` and `crux` builds." +msgstr "Оскільки VyOS перейшла на Debian (11) Bullseye у своїй гілці ``current``, вам знадобиться окремий контейнер для збірок `current`, `equuleus` і `crux`." #: ../../contributing/testing.rst:30 msgid "Smoketests" -msgstr "Smoketests" +msgstr "Димові тести" #: ../../contributing/testing.rst:32 msgid "Smoketests executes predefined VyOS CLI commands and checks if the desired daemon/service configuration is rendert - that is how to put it \"short\"." -msgstr "Smoketests executes predefined VyOS CLI commands and checks if the desired daemon/service configuration is rendert - that is how to put it \"short\"." +msgstr "Smoketests виконує попередньо визначені команди CLI VyOS і перевіряє, чи відображено потрібну конфігурацію демона/сервісу – тобто, як це сказати «коротко»." #: ../../contributing/testing.rst:45 msgid "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." -msgstr "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +msgstr "Отже, якщо ви плануєте створити власний власний образ ISO і не хочете використовувати наші тести smoketest, переконайтеся, що у вас встановлено пакет `vyos-1x-smoketest`." + +#: ../../contributing/testing.rst:45 +msgid "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." +msgstr "So if you plan to build your own custom ISO image and want to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." #: ../../contributing/build-vyos.rst:202 msgid "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." -msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." +msgstr "Деякі пакунки VyOS (а саме vyos-1x) постачаються з тестами під час збирання, які перевіряють, що деякі внутрішні виклики бібліотеки працюють належним чином. Ці тести виконуються за допомогою модуля Python Unittest. Якщо ви хочете створити пакет ``vyos-1x`` (який є нашим основним пакетом розробки), вам потрібно запустити свій контейнер Docker за допомогою такого аргументу: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0 ``, інакше ці тести будуть невдалими." #: ../../contributing/development.rst:586 msgid "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." -msgstr "Some abbreviations are traditionally written in mixed case. Generally, if it contains words \"over\" or \"version\", the letter **should** be lowercase. If there's an accepted spelling (especially if defined by an RFC or another standard), it **must** be followed." +msgstr "Деякі абревіатури традиційно пишуться у змішаному регістрі. Як правило, якщо він містить слова «над» або «версія», літера **повинна** бути малою. Якщо існує прийнятний варіант написання (особливо якщо він визначений RFC або іншим стандартом), його **необхідно** дотримуватися." -#: ../../contributing/testing.rst:202 +#: ../../contributing/testing.rst:205 msgid "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." -msgstr "Some of the configurations have preconditions which need to be met. Those most likely include generation of crypographic keys before the config can be applied - you will get a commit error otherwise. If you are interested how those preconditions are fulfilled check the vyos-build_ repository and the ``scripts/check-qemu-install`` file." +msgstr "Деякі з конфігурацій мають попередні умови, які необхідно виконати. Вони, швидше за все, включають генерацію крипографічних ключів перед застосуванням конфігурації - інакше ви отримаєте помилку фіксації. Якщо вас цікавить, як виконуються ці попередні умови, перевірте репозиторій vyos-build_ і файл ``scripts/check-qemu-install``." #: ../../contributing/debugging.rst:98 msgid "Sometimes it might be useful to debug Python code interactively on the live system rather than a IDE. This can be achieved using pdb." -msgstr "Sometimes it might be useful to debug Python code interactively on the live system rather than a IDE. This can be achieved using pdb." +msgstr "Іноді може бути корисним налагодити код Python в інтерактивному режимі в живій системі, а не в IDE. Цього можна досягти за допомогою pdb." #: ../../contributing/build-vyos.rst:269 msgid "Start the build:" -msgstr "Start the build:" +msgstr "Почніть збірку:" #: ../../contributing/build-vyos.rst:17 msgid "Starting with VyOS 1.2 the release model of VyOS has changed. VyOS is now **free as in speech, but not as in beer**. This means that while VyOS is still an open source project, the release ISOs are no longer free and can only be obtained via subscription, or by contributing to the community." -msgstr "Starting with VyOS 1.2 the release model of VyOS has changed. VyOS is now **free as in speech, but not as in beer**. This means that while VyOS is still an open source project, the release ISOs are no longer free and can only be obtained via subscription, or by contributing to the community." +msgstr "Починаючи з VyOS 1.2 модель випуску VyOS змінилася. VyOS тепер **вільний, як у мові, але не як у пиві**. Це означає, що хоча VyOS все ще є проектом з відкритим вихідним кодом, випуски ISO більше не є безкоштовними, і їх можна отримати лише через підписку або шляхом участі в спільноті." #: ../../contributing/development.rst:25 msgid "Submit a Patch" -msgstr "Submit a Patch" +msgstr "Надіслати патч" #: ../../contributing/development.rst:171 msgid "Submit the patch ``git push`` and create the GitHub pull-request." -msgstr "Submit the patch ``git push`` and create the GitHub pull-request." +msgstr "Надішліть патч ``git push`` і створіть GitHub pull-request." #: ../../contributing/development.rst:223 msgid "Summary" -msgstr "Summary" +msgstr "Резюме" #: ../../contributing/development.rst:122 msgid "Suppose you want to make a change in the webproxy script but yet you do not know which of the many VyOS packages ship this file. You can determine the VyOS package name in question by using Debian's ``dpkg -S`` command of your running VyOS installation." -msgstr "Suppose you want to make a change in the webproxy script but yet you do not know which of the many VyOS packages ship this file. You can determine the VyOS package name in question by using Debian's ``dpkg -S`` command of your running VyOS installation." +msgstr "Припустімо, ви хочете внести зміни в сценарій веб-проксі, але все ще не знаєте, який із багатьох пакетів VyOS надсилає цей файл. Ви можете визначити відповідне ім’я пакета VyOS за допомогою команди Debian ``dpkg -S`` вашої запущеної інсталяції VyOS." #: ../../contributing/debugging.rst:18 msgid "System Startup" -msgstr "System Startup" +msgstr "Запуск системи" + +#: ../../contributing/issues-features.rst:108 +msgid "Task auto-closing" +msgstr "Task auto-closing" + +#: ../../contributing/issues-features.rst:118 +msgid "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." +msgstr "Tasks that are implemented and tested by the implementation author, but require testing in the real-world environment that only the reporter can replicate (e.g., hardware we do not have, specific network conditions...)." #: ../../contributing/development.rst:214 msgid "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." -msgstr "Template processor **should** be used for generating config files. Built-in string formatting **may** be used for simple line-oriented formats where every line is self-contained, such as iptables rules. Template processor **must** be used for structured, multi-line formats such as those used by ISC DHCPd." +msgstr "Процесор шаблону **потрібно** використовувати для створення конфігураційних файлів. Вбудоване форматування рядків **може** використовуватися для простих рядково-орієнтованих форматів, де кожен рядок самодостатній, наприклад, правила iptables. Процесор шаблонів **має** використовуватися для структурованих багаторядкових форматів, таких як ті, що використовуються ISC DHCPd." #: ../../contributing/testing.rst:5 msgid "Testing" -msgstr "Testing" +msgstr "Тестування" #: ../../contributing/development.rst:212 msgid "Text generation" -msgstr "Text generation" +msgstr "Генерація тексту" #: ../../contributing/development.rst:688 msgid "The CLI parser used in VyOS is a mix of bash, bash-completion helper and the C++ backend library [vyatta-cfg](https://github.com/vyos/vyatta-cfg). This section is a reference of common CLI commands and the respective entry point in the C/C++ code." -msgstr "The CLI parser used in VyOS is a mix of bash, bash-completion helper and the C++ backend library [vyatta-cfg](https://github.com/vyos/vyatta-cfg). This section is a reference of common CLI commands and the respective entry point in the C/C++ code." +msgstr "Синтаксичний аналізатор CLI, який використовується у VyOS, є сумішшю bash, помічника завершення bash і серверної бібліотеки C++ [vyatta-cfg](https://github.com/vyos/vyatta-cfg). У цьому розділі є посилання на загальні команди CLI та відповідну точку входу в код C/C++." #: ../../contributing/build-vyos.rst:674 msgid "The Intel NIC drivers do not come from a Git repository, instead we just fetch the tarballs from our mirror and compile them." -msgstr "The Intel NIC drivers do not come from a Git repository, instead we just fetch the tarballs from our mirror and compile them." +msgstr "Драйвери Intel NIC не надходять із сховища Git, натомість ми просто отримуємо tar-файли з нашого дзеркала та компілюємо їх." #: ../../contributing/build-vyos.rst:702 msgid "The Intel QAT (Quick Assist Technology) drivers do not come from a Git repository, instead we just fetch the tarballs from 01.org, Intel's open-source website." -msgstr "The Intel QAT (Quick Assist Technology) drivers do not come from a Git repository, instead we just fetch the tarballs from 01.org, Intel's open-source website." +msgstr "Драйвери Intel QAT (Quick Assist Technology) не надходять зі сховища Git, натомість ми просто отримуємо архівні файли з 01.org, веб-сайту Intel з відкритим кодом." #: ../../contributing/build-vyos.rst:432 msgid "The Linux kernel used by VyOS is heavily tied to the ISO build process. The file ``data/defaults.json`` hosts a JSON definition of the kernel version used ``kernel_version`` and the ``kernel_flavor`` of the kernel which represents the kernel's LOCAL_VERSION. Both together form the kernel version variable in the system:" -msgstr "The Linux kernel used by VyOS is heavily tied to the ISO build process. The file ``data/defaults.json`` hosts a JSON definition of the kernel version used ``kernel_version`` and the ``kernel_flavor`` of the kernel which represents the kernel's LOCAL_VERSION. Both together form the kernel version variable in the system:" +msgstr "Ядро Linux, яке використовується VyOS, тісно пов’язане з процесом збирання ISO. Файл ``data/defaults.json`` містить визначення JSON версії ядра, що використовується ``kernel_version`` і ``kernel_flavor`` ядра, яке представляє LOCAL_VERSION ядра. Обидва разом утворюють змінну версії ядра в системі:" #: ../../contributing/development.rst:22 msgid "The README.md file will guide you to use the this top level repository." -msgstr "The README.md file will guide you to use the this top level repository." +msgstr "Файл README.md допоможе вам використовувати це сховище верхнього рівня." #: ../../contributing/development.rst:370 msgid "The ``apply()`` and ``generate()`` functions may ``raise ConfigError`` if, for example, the daemon failed to start with the updated config. It shouldn't be a substitute for proper config checking in the ``verify()`` function. All reasonable effort should be made to verify that generated configuration is valid and will be accepted by the daemon, including, when necessary, cross- checks with other VyOS configuration subtrees." -msgstr "The ``apply()`` and ``generate()`` functions may ``raise ConfigError`` if, for example, the daemon failed to start with the updated config. It shouldn't be a substitute for proper config checking in the ``verify()`` function. All reasonable effort should be made to verify that generated configuration is valid and will be accepted by the daemon, including, when necessary, cross- checks with other VyOS configuration subtrees." +msgstr "Функції ``apply()`` і ``generate()`` можуть ``викликати ConfigError``, якщо, наприклад, демон не запустився з оновленою конфігурацією. Це не повинно замінити правильну перевірку конфігурації у функції ``verify()``. Необхідно докласти всіх розумних зусиль, щоб переконатися, що згенерована конфігурація дійсна і буде прийнята демоном, включаючи, за необхідності, перехресні перевірки з іншими піддеревами конфігурації VyOS." #: ../../contributing/development.rst:351 msgid "The ``apply()`` function applies the generated configuration to the live system. It should use non-disruptive reload whenever possible. It may execute disruptive operations such as daemon process restart if a particular component does not support non-disruptive reload, or when the expected service degradation is minimal (for example, in case of auxiliary services such as LLDPd). In case of high impact services such as VPN daemon and routing protocols, when non- disruptive reload is supported for some but not all types of configuration changes, scripts authors should make effort to determine if a configuration change can be done in a non-disruptive way and only resort to disruptive restart if it cannot be avoided." -msgstr "The ``apply()`` function applies the generated configuration to the live system. It should use non-disruptive reload whenever possible. It may execute disruptive operations such as daemon process restart if a particular component does not support non-disruptive reload, or when the expected service degradation is minimal (for example, in case of auxiliary services such as LLDPd). In case of high impact services such as VPN daemon and routing protocols, when non- disruptive reload is supported for some but not all types of configuration changes, scripts authors should make effort to determine if a configuration change can be done in a non-disruptive way and only resort to disruptive restart if it cannot be avoided." +msgstr "Функція ``apply()`` застосовує згенеровану конфігурацію до живої системи. Він повинен використовувати безперервне перезавантаження, коли це можливо. Він може виконувати зривні операції, такі як перезапуск процесу демона, якщо певний компонент не підтримує безперебійне перезавантаження або коли очікуване погіршення сервісу є мінімальним (наприклад, у випадку допоміжних служб, таких як LLDPd). У разі значних служб, таких як VPN-демон і протоколи маршрутизації, коли підтримується перезавантаження без збоїв для деяких, але не для всіх типів змін конфігурації, авторам сценаріїв слід докласти зусиль, щоб визначити, чи можна змінити конфігурацію без зривів. і вдаватися до аварійного перезапуску, лише якщо його неможливо уникнути." #: ../../contributing/development.rst:349 msgid "The ``generate()`` function generates config files for system components." -msgstr "The ``generate()`` function generates config files for system components." +msgstr "Функція ``generate()`` створює файли конфігурації для системних компонентів." #: ../../contributing/development.rst:328 msgid "The ``get_config()`` function must convert the VyOS config to an abstract, internal representation. No other function is allowed to call the ``vyos.config. Config`` object method directly. The rationale for it is that when config reads are mixed with other logic, it's very hard to change the config syntax since you need to weed out every occurrence of the old syntax. If syntax-specific code is confined to a single function, the rest of the code can be left untouched as long as the internal representation remains compatible." -msgstr "The ``get_config()`` function must convert the VyOS config to an abstract, internal representation. No other function is allowed to call the ``vyos.config. Config`` object method directly. The rationale for it is that when config reads are mixed with other logic, it's very hard to change the config syntax since you need to weed out every occurrence of the old syntax. If syntax-specific code is confined to a single function, the rest of the code can be left untouched as long as the internal representation remains compatible." +msgstr "Функція ``get_config()`` має перетворити конфігурацію VyOS на абстрактне внутрішнє представлення. Жодній іншій функції не дозволяється викликати ``vyos.config. Безпосередньо налаштувати метод об’єкта. Обґрунтування цього полягає в тому, що коли читання конфігурації змішується з іншою логікою, дуже важко змінити синтаксис конфігурації, оскільки вам потрібно відсіяти кожне входження старого синтаксису. Якщо специфічний для синтаксису код обмежено однією функцією, решту коду можна залишити недоторканим, якщо внутрішнє представлення залишається сумісним." #: ../../contributing/testing.rst:48 msgid "The ``make test`` command from the vyos-build_ repository will launch a new QEmu instance and the ISO image is first installed to the virtual harddisk." -msgstr "The ``make test`` command from the vyos-build_ repository will launch a new QEmu instance and the ISO image is first installed to the virtual harddisk." +msgstr "Команда ``make test`` зі сховища vyos-build_ запустить новий екземпляр QEmu, а ISO-образ спочатку встановлюється на віртуальний жорсткий диск." #: ../../contributing/development.rst:340 msgid "The ``verify()`` function takes your internal representation of the config and checks if it's valid, otherwise it must raise ``ConfigError`` with an error message that describes the problem and possibly suggests how to fix it. It must not make any changes to the system. The rationale for it is again testability and, in the future when the config backend is ready and every script is rewritten in this fashion, ability to execute commit dry run (\"commit test\" like in JunOS) and abort commit before making any changes to the system if an error is found in any component." -msgstr "The ``verify()`` function takes your internal representation of the config and checks if it's valid, otherwise it must raise ``ConfigError`` with an error message that describes the problem and possibly suggests how to fix it. It must not make any changes to the system. The rationale for it is again testability and, in the future when the config backend is ready and every script is rewritten in this fashion, ability to execute commit dry run (\"commit test\" like in JunOS) and abort commit before making any changes to the system if an error is found in any component." +msgstr "Функція ``verify()`` бере ваше внутрішнє представлення конфігурації та перевіряє, чи вона дійсна, інакше вона повинна викликати ``ConfigError`` з повідомленням про помилку, яке описує проблему та, можливо, пропонує, як її виправити. Він не повинен вносити жодних змін у систему. Обґрунтуванням для цього знову є можливість перевірки, а в майбутньому, коли сервер конфігурації буде готовий і кожен сценарій буде переписано таким чином, можливість виконати сухий прогін фіксації («тест фіксації», як у JunOS) і скасувати фіксацію перед внесенням будь-яких змін до системи, якщо в будь-якому компоненті виявлено помилку." #: ../../contributing/development.rst:392 msgid "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." -msgstr "The bash (or better vbash) completion in VyOS is defined in *templates*. Templates are text files (called ``node.def``) stored in a directory tree. The directory names define the command names, and template files define the command behaviour. Before VyOS 1.2 (crux) this files were created by hand. After a complex redesign process_ the new style template are automatically generated from a XML input file." +msgstr "Завершення bash (або краще vbash) у VyOS визначено в *шаблонах*. Шаблони — це текстові файли (так звані ``node.def``), що зберігаються в дереві каталогів. Імена каталогів визначають імена команд, а файли шаблонів визначають поведінку команд. До VyOS 1.2 (crux) ці файли створювалися вручну. Після складного процесу редизайну_ новий шаблон стилю автоматично генерується з вхідного файлу XML." + +#: ../../contributing/issues-features.rst:39 +msgid "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." +msgstr "The behavior you expect and how it's different from the behavior you observe. Don't just include command outputs or traffic dumps — try to explain at least briefly why they are wrong and what they should be." #: ../../contributing/build-vyos.rst:116 msgid "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" -msgstr "The build process needs to be built on a local file system, building on SMB or NFS shares will result in the container failing to build properly! VirtualBox Drive Share is also not an option as block device operations are not implemented and the drive is always mounted as \"nodev\"" +msgstr "Процес збірки має бути побудований на локальній файловій системі, збірка на спільних ресурсах SMB або NFS призведе до того, що контейнер не збиратиметься належним чином! VirtualBox Drive Share також не доступний, оскільки операції з блоковими пристроями не реалізовані, а диск завжди монтується як "nodev"" -#: ../../contributing/testing.rst:159 +#: ../../contributing/testing.rst:162 msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" -msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" +msgstr "Усі конфігурації походять від виробничих систем і можуть виступати не лише як тестовий приклад, але й як посилання, якщо потрібно ввімкнути певну функцію. Конфігурації можна знайти тут: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" #: ../../contributing/build-vyos.rst:149 msgid "The container can also be built directly from source:" -msgstr "The container can also be built directly from source:" +msgstr "Контейнер також можна створити безпосередньо з джерела:" #: ../../contributing/build-vyos.rst:124 msgid "The container can be built by hand or by fetching the pre-built one from DockerHub. Using the pre-built containers from the `VyOS DockerHub organisation`_ will ensure that the container is always up-to-date. A rebuild is triggered once the container changes (please note this will take 2-3 hours after pushing to the vyos-build repository)." -msgstr "The container can be built by hand or by fetching the pre-built one from DockerHub. Using the pre-built containers from the `VyOS DockerHub organisation`_ will ensure that the container is always up-to-date. A rebuild is triggered once the container changes (please note this will take 2-3 hours after pushing to the vyos-build repository)." +msgstr "Контейнер можна створити вручну або отримати попередньо зібраний з DockerHub. Використання попередньо зібраних контейнерів від `організації VyOS DockerHub`_ гарантує, що контейнер завжди буде актуальним. Відновлення запускається після зміни контейнера (зауважте, що це займе 2-3 години після надсилання до репозиторію vyos-build)." #: ../../contributing/development.rst:219 msgid "The default template processor for VyOS code is Jinja2_." -msgstr "The default template processor for VyOS code is Jinja2_." +msgstr "Типовим процесором шаблонів для коду VyOS є Jinja2_." #: ../../contributing/build-vyos.rst:813 msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." -msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." +msgstr "Найпростіший спосіб скомпілювати ваш пакунок — за допомогою згаданого вище контейнера :ref:`build_docker`, він містить усі необхідні залежності для всіх пакетів, пов’язаних з VyOS." -#: ../../contributing/testing.rst:164 +#: ../../contributing/testing.rst:167 msgid "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." -msgstr "The entire test is controlled by the main wrapper script ``/usr/bin/vyos-configtest`` which behaves in the same way as the main smoketest script. It scans the folder for potential configuration files and issues a ``load`` command one after another." +msgstr "Весь тест контролюється основним сценарієм оболонки ``/usr/bin/vyos-configtest``, який поводиться так само, як і основний сценарій smoketest. Він сканує папку на наявність потенційних файлів конфігурації та видає команду ``load`` одну за одною." #: ../../contributing/debugging.rst:52 msgid "The file can be placed in ``/tmp`` for one time debugging (as the file will be removed on reboot) or placed in '/config' to stay permanently." -msgstr "The file can be placed in ``/tmp`` for one time debugging (as the file will be removed on reboot) or placed in '/config' to stay permanently." +msgstr "Файл можна помістити в ``/tmp`` для одноразового налагодження (оскільки файл буде видалено під час перезавантаження) або помістити в '/config', щоб залишитися назавжди." #: ../../contributing/development.rst:553 msgid "The first word of every help string **must** be capitalized. There **must not** be a period at the end of help strings." -msgstr "The first word of every help string **must** be capitalized. There **must not** be a period at the end of help strings." +msgstr "Перше слово кожного рядка довідки **повинно** бути великим. У кінці довідкових рядків **не повинно** бути крапки." #: ../../contributing/build-vyos.rst:26 msgid "The following includes the build process for VyOS 1.2 to the latest version." @@ -1163,119 +1255,131 @@ msgstr "The following includes the build process for VyOS 1.2 to the latest vers #: ../../contributing/development.rst:71 msgid "The format should be and is inspired by: https://git-scm.com/book/ch5-2.html It is also worth reading https://chris.beams.io/posts/git-commit/" -msgstr "The format should be and is inspired by: https://git-scm.com/book/ch5-2.html It is also worth reading https://chris.beams.io/posts/git-commit/" +msgstr "Формат має бути та натхненний: https://git-scm.com/book/ch5-2.html Також варто прочитати https://chris.beams.io/posts/git-commit/" #: ../../contributing/development.rst:404 msgid "The great thing about schemas is not only that people can know the complete grammar for certain, but also that it can be automatically verified. The `scripts/build-command-templates` script that converts the XML definitions to old style templates also verifies them against the schema, so a bad definition will cause the package build to fail. I do agree that the format is verbose, but there is no other format now that would allow this. Besides, a specialized XML editor can alleviate the issue with verbosity." -msgstr "The great thing about schemas is not only that people can know the complete grammar for certain, but also that it can be automatically verified. The `scripts/build-command-templates` script that converts the XML definitions to old style templates also verifies them against the schema, so a bad definition will cause the package build to fail. I do agree that the format is verbose, but there is no other format now that would allow this. Besides, a specialized XML editor can alleviate the issue with verbosity." +msgstr "Чудова особливість схем полягає не тільки в тому, що люди можуть точно знати повну граматику, але й у тому, що її можна автоматично перевірити. Сценарій `scripts/build-command-templates`, який перетворює визначення XML на шаблони старого стилю, також перевіряє їх на відповідність схемі, тому неправильне визначення призведе до помилки збирання пакета. Я згоден, що формат є багатослівним, але зараз немає іншого формату, який би це дозволяв. Крім того, спеціалізований редактор XML може полегшити проблему багатослівності." #: ../../contributing/development.rst:44 msgid "The information is used in three ways:" -msgstr "The information is used in three ways:" +msgstr "Інформація використовується трьома способами:" #: ../../contributing/build-vyos.rst:477 msgid "The kernel build is quite easy, most of the required steps can be found in the ``vyos-build/packages/linux-kernel/Jenkinsfile`` but we will walk you through it." -msgstr "The kernel build is quite easy, most of the required steps can be found in the ``vyos-build/packages/linux-kernel/Jenkinsfile`` but we will walk you through it." +msgstr "Збірка ядра досить проста, більшість необхідних кроків можна знайти в ``vyos-build/packages/linux-kernel/Jenkinsfile``, але ми проведемо вас через це." #: ../../contributing/build-vyos.rst:465 msgid "The most obvious reasons could be:" -msgstr "The most obvious reasons could be:" +msgstr "Найбільш очевидними причинами можуть бути:" #: ../../contributing/upstream-packages.rst:83 msgid "The original repo is at https://github.com/dmbaturin/hvinfo" -msgstr "The original repo is at https://github.com/dmbaturin/hvinfo" +msgstr "Оригінальне репо є на https://github.com/dmbaturin/hvinfo" -#: ../../contributing/testing.rst:154 +#: ../../contributing/testing.rst:157 msgid "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." -msgstr "The other part of our tests are called \"config load tests\". The config load tests will load - one after another - arbitrary configuration files to test if the configuration migration scripts work as designed and that a given set of functionality still can be loaded with a fresh VyOS ISO image." +msgstr "Інша частина наших тестів називається «навантажувальні тести конфігурації». Тести завантаження конфігурації завантажуватимуть — один за одним — довільні файли конфігурації, щоб перевірити, чи сценарії міграції конфігурації працюють належним чином і чи можна завантажити певний набір функціональних можливостей за допомогою свіжого ISO-образу VyOS." #: ../../contributing/issues-features.rst:47 msgid "The output you get when you find a bug can provide lots of information. If you get an error message on the screen, copy it exactly. Having the exact message can provide detail that the developers can use. Like wise if you have any log messages that also are from the time of the issue, include those. They may also contain information that is helpful for the development team." -msgstr "The output you get when you find a bug can provide lots of information. If you get an error message on the screen, copy it exactly. Having the exact message can provide detail that the developers can use. Like wise if you have any log messages that also are from the time of the issue, include those. They may also contain information that is helpful for the development team." +msgstr "Результати, які ви отримуєте, коли ви знаходите помилку, можуть надати багато інформації. Якщо на екрані з’явиться повідомлення про помилку, точно скопіюйте його. Наявність точного повідомлення може надати деталі, які розробники зможуть використовувати. Так само, якщо у вас є будь-які повідомлення журналу, які також є з моменту проблеми, додайте їх. Вони також можуть містити інформацію, корисну для команди розробників." #: ../../contributing/upstream-packages.rst:60 msgid "The package ends up in deb_dist dir." -msgstr "The package ends up in deb_dist dir." +msgstr "Пакунок потрапляє в каталог deb_dist." + +#: ../../contributing/debugging.rst:148 +msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" +msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When running individual migrators for testing, you need to convert the \"magic string\" on your own by:" #: ../../contributing/debugging.rst:148 msgid "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" -msgstr "The reason is that the configuration migration backend is rewritten and uses a new form of \"magic string\" which is applied on demand when real config migration is run on boot. When runnint individual migrators for testing, you need to convert the \"magic string\" on your own by:" +msgstr "Причина полягає в тому, що бекенд міграції конфігурації переписаний і використовує нову форму «магічного рядка», який застосовується на вимогу, коли справжня міграція конфігурації виконується під час завантаження. Під час запуску окремих міграторів для тестування вам потрібно самостійно перетворити «магічний рядок»:" #: ../../contributing/development.rst:19 msgid "The repository that contains all the ISO build scripts is: https://github.com/vyos/vyos-build" -msgstr "The repository that contains all the ISO build scripts is: https://github.com/vyos/vyos-build" +msgstr "Репозиторій, який містить усі сценарії збірки ISO: https://github.com/vyos/vyos-build" #: ../../contributing/testing.rst:54 msgid "The script only searches for executable \"test-cases\" under ``/usr/libexec/vyos/tests/smoke/cli/`` and executes them one by one." -msgstr "The script only searches for executable \"test-cases\" under ``/usr/libexec/vyos/tests/smoke/cli/`` and executes them one by one." +msgstr "Сценарій лише шукає виконувані "тестові випадки" в ``/usr/libexec/vyos/tests/smoke/cli/`` і виконує їх один за іншим." #: ../../contributing/build-vyos.rst:23 msgid "The source code remains public and an ISO can be built using the process outlined in this chapter." -msgstr "The source code remains public and an ISO can be built using the process outlined in this chapter." +msgstr "Вихідний код залишається загальнодоступним, і ISO можна створити за допомогою процесу, описаного в цьому розділі." #: ../../contributing/upstream-packages.rst:44 msgid "The source is at https://github.com/vyos/vyos-strongswan" -msgstr "The source is at https://github.com/vyos/vyos-strongswan" +msgstr "Джерело за адресою https://github.com/vyos/vyos-strongswan" #: ../../contributing/upstream-packages.rst:20 msgid "The source is located at https://github.com/vyos/vyos-netplug" -msgstr "The source is located at https://github.com/vyos/vyos-netplug" +msgstr "Джерело розміщено за адресою https://github.com/vyos/vyos-netplug" #: ../../contributing/development.rst:236 msgid "The switch to the Python programming language for new code is not merely a change of the language, but a chance to rethink and improve the programming approach." -msgstr "The switch to the Python programming language for new code is not merely a change of the language, but a chance to rethink and improve the programming approach." +msgstr "Перехід на мову програмування Python для нового коду – це не просто зміна мови, а шанс переосмислити та вдосконалити підхід до програмування." #: ../../contributing/debugging.rst:20 msgid "The system startup can be debugged (like loading in the configuration file from ``/config/config.boot``. This can be achieve by extending the Kernel command-line in the bootloader." -msgstr "The system startup can be debugged (like loading in the configuration file from ``/config/config.boot``. This can be achieve by extending the Kernel command-line in the bootloader." +msgstr "Запуск системи можна налагодити (наприклад, завантаження файлу конфігурації з ``/config/config.boot``. Цього можна досягти шляхом розширення командного рядка ядра у завантажувачі." #: ../../contributing/build-vyos.rst:350 msgid "There are (rare) situations where building an ISO image is not possible at all due to a broken package feed in the background. APT is not very good at reporting the root cause of the issue. Your ISO build will likely fail with a more or less similar looking error message:" -msgstr "There are (rare) situations where building an ISO image is not possible at all due to a broken package feed in the background. APT is not very good at reporting the root cause of the issue. Your ISO build will likely fail with a more or less similar looking error message:" +msgstr "Бувають (рідкісні) ситуації, коли створення ISO-образу взагалі неможливе через несправний канал пакетів у фоновому режимі. APT не дуже добре повідомляє про першопричину проблеми. Ваша збірка ISO, ймовірно, завершиться невдачею з більш-менш схожим на вигляд повідомленням про помилку:" #: ../../contributing/build-vyos.rst:11 msgid "There are different ways you can build VyOS." -msgstr "There are different ways you can build VyOS." +msgstr "Ви можете створити VyOS різними способами." #: ../../contributing/development.rst:205 msgid "There are extensions to e.g. VIM (xmllint) which will help you to get your indention levels correct. Add to following to your .vimrc file: ``au FileType xml setlocal equalprg=xmllint\\ --format\\ --recover\\ -\\ 2>/dev/null`` now you can call the linter using ``gg=G`` in command mode." -msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get your indention levels correct. Add to following to your .vimrc file: ``au FileType xml setlocal equalprg=xmllint\\ --format\\ --recover\\ -\\ 2>/dev/null`` now you can call the linter using ``gg=G`` in command mode." +msgstr "Існують розширення, наприклад, для VIM (xmllint), які допоможуть вам отримати правильні рівні відступів. Додайте наступне до свого файлу .vimrc: ``au FileType xml setlocal equalprg=xmllint\\ --format\\ --recover\\ -\\ 2>/dev/null`` тепер ви можете викликати linter за допомогою ``gg=G` ` в командному режимі." #: ../../contributing/debugging.rst:7 msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." -msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." +msgstr "Є два прапорці, які допомагають у налагодженні сценаріїв конфігурації. Оскільки проблеми із завантаженням конфігурації виявлятимуться під час завантаження, прапорці передаються як параметри завантаження ядра." + +#: ../../contributing/issues-features.rst:110 +msgid "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." +msgstr "There is a special status for tasks where all work on the side of maintainers and contributors is complete: \"Needs reporter action\"." #: ../../contributing/build-vyos.rst:297 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" -msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" +msgstr "Цей ISO можна налаштувати за допомогою наступного списку параметрів конфігурації. Повний і поточний список можна створити за допомогою ``./build-vyos-image --help``:" #: ../../contributing/debugging.rst:185 msgid "This can also be done permanently by changing ``/boot/grub/grub.cfg``." -msgstr "This can also be done permanently by changing ``/boot/grub/grub.cfg``." +msgstr "Це також можна зробити постійно, змінивши ``/boot/grub/grub.cfg``." #: ../../contributing/upstream-packages.rst:9 msgid "This chapter lists those exceptions and gives you a brief overview what we have done on those packages. If you only want to build yourself a fresh ISO you can completely skip this chapter. It may become interesting once you have a VyOS deep dive." -msgstr "This chapter lists those exceptions and gives you a brief overview what we have done on those packages. If you only want to build yourself a fresh ISO you can completely skip this chapter. It may become interesting once you have a VyOS deep dive." +msgstr "У цьому розділі перераховано ці винятки та надано короткий огляд того, що ми зробили з цими пакетами. Якщо ви хочете створити свіжий ISO, ви можете повністю пропустити цей розділ. Це може стати цікавим, коли ви глибоко зануритеся у VyOS." #: ../../contributing/debugging.rst:177 msgid "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" -msgstr "This is done by utilizing the ``systemd-bootchart`` package which is now installed by default on the VyOS 1.3 (equuleus) branch. The configuration is also versioned so we get comparable results. ``systemd-bootchart`` is configured using this file: bootchart.conf_" +msgstr "Це робиться за допомогою пакета ``systemd-bootchart``, який тепер встановлено за замовчуванням у гілці VyOS 1.3 (equuleus). Конфігурація також має версії, тому ми отримуємо порівняльні результати. ``systemd-bootchart`` налаштовується за допомогою цього файлу: bootchart.conf_" + +#: ../../contributing/issues-features.rst:122 +msgid "This is what will happen when a task is set to \"Needs reporter action\":" +msgstr "This is what will happen when a task is set to \"Needs reporter action\":" #: ../../contributing/development.rst:132 msgid "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" -msgstr "This means the file in question (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) is located in the ``vyatta-webproxy`` package which can be found here: https://github.com/vyos/vyatta-webproxy" +msgstr "Це означає, що відповідний файл (``/opt/vyatta/sbin/vyatta-update-webproxy.pl``) знаходиться в пакеті ``vyatta-webproxy``, який можна знайти тут: https://github. com/vyos/vyatta-webproxy" #: ../../contributing/upstream-packages.rst:65 msgid "This package doesn't exist in Debian. A debianized fork is kept at https://github.com/vyos/mdns-repeater" -msgstr "This package doesn't exist in Debian. A debianized fork is kept at https://github.com/vyos/mdns-repeater" +msgstr "Цей пакет не існує в Debian. Дебіанізований форк зберігається за адресою https://github.com/vyos/mdns-repeater" #: ../../contributing/upstream-packages.rst:73 msgid "This package doesn't exist in Debian. A debianized fork is kept at https://github.com/vyos/udp-broadcast-relay" -msgstr "This package doesn't exist in Debian. A debianized fork is kept at https://github.com/vyos/udp-broadcast-relay" +msgstr "Цей пакет не існує в Debian. Дебіанізований форк зберігається за адресою https://github.com/vyos/udp-broadcast-relay" #: ../../contributing/build-vyos.rst:612 msgid "This tries to automatically detect which blobs are needed based on which drivers were built. If it fails to find the correct files you can add them manually to ``vyos-build/packages/linux-kernel/build-linux-firmware.sh``:" -msgstr "This tries to automatically detect which blobs are needed based on which drivers were built. If it fails to find the correct files you can add them manually to ``vyos-build/packages/linux-kernel/build-linux-firmware.sh``:" +msgstr "Це намагається автоматично визначити, які блоби потрібні на основі того, які драйвери були зібрані. Якщо не вдалося знайти правильні файли, ви можете додати їх вручну до ``vyos-build/packages/linux-kernel/build-linux-firmware.sh``:" #: ../../contributing/build-vyos.rst:76 msgid "This will guide you through the process of building a VyOS ISO using Docker. This process has been tested on clean installs of Debian Bullseye (11) and Bookworm (12)." @@ -1283,111 +1387,123 @@ msgstr "This will guide you through the process of building a VyOS ISO using Doc #: ../../contributing/build-vyos.rst:28 msgid "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." -msgstr "This will guide you through the process of building a VyOS ISO using Docker_. This process has been tested on clean installs of Debian Jessie, Stretch, and Buster." +msgstr "Це проведе вас через процес створення VyOS ISO за допомогою Docker_. Цей процес перевірено на чистих інсталяціях Debian Jessie, Stretch і Buster." -#: ../../contributing/testing.rst:148 +#: ../../contributing/testing.rst:151 msgid "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." -msgstr "This will limit the `bond` interface test to only make use of `eth1` and `eth2` as member ports." +msgstr "Це обмежить тест інтерфейсу `bond` лише використанням `eth1` і `eth2` як членських портів." -#: ../../contributing/testing.rst:98 +#: ../../contributing/testing.rst:101 msgid "Those common tests consists out of:" -msgstr "Those common tests consists out of:" +msgstr "Ці загальні тести складаються з:" #: ../../contributing/build-vyos.rst:173 msgid "Tips and Tricks" -msgstr "Tips and Tricks" +msgstr "Поради та підказки" #: ../../contributing/build-vyos.rst:108 msgid "To be able to use Docker_ without ``sudo``, the current non-root user must be added to the ``docker`` group by calling: ``sudo usermod -aG docker yourusername``." -msgstr "To be able to use Docker_ without ``sudo``, the current non-root user must be added to the ``docker`` group by calling: ``sudo usermod -aG docker yourusername``." +msgstr "Щоб мати можливість використовувати Docker_ без ``sudo``, поточного користувача без root необхідно додати до групи ``docker``, викликавши: ``sudo usermod -aG docker yourusername``." #: ../../contributing/build-vyos.rst:37 msgid "To build VyOS natively you require a properly configured build host with the following Debian versions installed:" -msgstr "To build VyOS natively you require a properly configured build host with the following Debian versions installed:" +msgstr "Щоб зібрати VyOS нативно, вам потрібен правильно налаштований хост збірки з такими встановленими версіями Debian:" #: ../../contributing/development.rst:711 msgid "To build our modules we utilize a CI/CD Pipeline script. Each and every VyOS component comes with it's own ``Jenkinsfile`` which is (more or less) a copy. The Pipeline utilizes the Docker container from the :ref:`build_iso` section - but instead of building it from source on every run, we rather always fetch a fresh copy (if needed) from Dockerhub_." -msgstr "To build our modules we utilize a CI/CD Pipeline script. Each and every VyOS component comes with it's own ``Jenkinsfile`` which is (more or less) a copy. The Pipeline utilizes the Docker container from the :ref:`build_iso` section - but instead of building it from source on every run, we rather always fetch a fresh copy (if needed) from Dockerhub_." +msgstr "Для створення наших модулів ми використовуємо сценарій CI/CD Pipeline. Кожен компонент VyOS має власний ``Jenkinsfile``, який є (більш-менш) копією. У конвеєрі використовується контейнер Docker із розділу :ref:`build_iso`, але замість того, щоб створювати його з вихідних кодів під час кожного запуску, ми завжди отримуємо свіжу копію (за потреби) з Dockerhub_." #: ../../contributing/debugging.rst:196 msgid "To debug issues in priorities or to see what's going on in the background you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution order of the scripts." -msgstr "To debug issues in priorities or to see what's going on in the background you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution order of the scripts." +msgstr "Щоб усунути проблеми з пріоритетами або побачити, що відбувається у фоновому режимі, ви можете скористатися сценарієм ``/opt/vyatta/sbin/priority.pl``, який показує вам порядок виконання сценаріїв." + +#: ../../contributing/build-vyos.rst:373 +msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" +msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directory. This is explained in the following step by step procedure:" #: ../../contributing/build-vyos.rst:373 msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" -msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" +msgstr "Щоб налагодити процес збірки та отримати додаткову інформацію про те, що може бути основною причиною, вам потрібно використати `chroot`, щоб перейти в каталог збірки. Це пояснюється в наступній покроковій процедурі:" + +#: ../../contributing/debugging.rst:182 +msgid "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" +msgstr "To enable boot time graphing change the Kernel commandline and add the following string: ``init=/usr/lib/systemd/systemd-bootchart``" #: ../../contributing/debugging.rst:182 msgid "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" -msgstr "To enable boot time graphing change the Kernel commandline and add the folowing string: ``init=/usr/lib/systemd/systemd-bootchart``" +msgstr "Щоб увімкнути графік часу завантаження, змініть командний рядок ядра та додайте такий рядок: ``init=/usr/lib/systemd/systemd-bootchart``" #: ../../contributing/debugging.rst:93 msgid "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" -msgstr "To enable debugging just run: ``$ touch /tmp/vyos.frr.debug``" +msgstr "Щоб увімкнути налагодження, просто запустіть: ``$ touch /tmp/vyos.frr.debug``" + +#: ../../contributing/testing.rst:60 +msgid "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." +msgstr "To enable smoketest debugging (print of the CLI set commands used) you can run: ``touch /tmp/vyos.smoketest.debug``." #: ../../contributing/development.rst:547 msgid "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." -msgstr "To ensure uniform look and feel, and improve readability, we should follow a set of guidelines consistently." +msgstr "Щоб забезпечити єдиний вигляд і відчуття, а також покращити читабельність, ми повинні послідовно дотримуватися набору вказівок." #: ../../contributing/development.rst:55 msgid "To make this approach work, every change must be associated with a task number (prefixed with **T**) and a component. If there is no bug report/feature request for the changes you are going to make, you have to create a Phabricator_ task first. Once there is an entry in Phabricator_, you should reference its id in your commit message, as shown below:" -msgstr "To make this approach work, every change must be associated with a task number (prefixed with **T**) and a component. If there is no bug report/feature request for the changes you are going to make, you have to create a Phabricator_ task first. Once there is an entry in Phabricator_, you should reference its id in your commit message, as shown below:" +msgstr "Щоб цей підхід працював, кожна зміна має бути пов’язана з номером завдання (з префіксом **T**) і компонентом. Якщо для змін, які ви збираєтеся внести, немає звіту про помилку/запиту на функції, вам потрібно спочатку створити завдання Phabricator_. Якщо у Phabricator_ є запис, ви повинні посилатися на його ідентифікатор у своєму повідомленні коміту, як показано нижче:" #: ../../contributing/build-vyos.rst:137 msgid "To manually download the container from DockerHub, run:" -msgstr "To manually download the container from DockerHub, run:" +msgstr "Щоб вручну завантажити контейнер із DockerHub, виконайте:" #: ../../contributing/build-vyos.rst:46 msgid "To start, clone the repository to your local machine:" -msgstr "To start, clone the repository to your local machine:" +msgstr "Для початку клонуйте репозиторій на локальну машину:" #: ../../contributing/build-vyos.rst:852 msgid "To take your newly created package on a test drive you can simply SCP it to a running VyOS instance and install the new `*.deb` package over the current running one." -msgstr "To take your newly created package on a test drive you can simply SCP it to a running VyOS instance and install the new `*.deb` package over the current running one." +msgstr "Щоб взяти ваш щойно створений пакет на тест-драйв, ви можете просто перенести його на запущений екземпляр VyOS і встановити новий пакет `*.deb` поверх поточного запущеного." #: ../../contributing/build-vyos.rst:751 msgid "Troubleshooting" -msgstr "Troubleshooting" +msgstr "Вирішення проблем" #: ../../contributing/development.rst:362 msgid "Unless absolutely necessary, configuration scripts should not modify the active configuration of system components directly. Whenever at all possible, scripts should generate a configuration file or files that can be applied with a single command such as reloading a service through systemd init. Inserting statements one by one is particularly discouraged, for example, when configuring netfilter rules, saving them to a file and loading it with iptables-restore should always be preferred to executing iptables directly." -msgstr "Unless absolutely necessary, configuration scripts should not modify the active configuration of system components directly. Whenever at all possible, scripts should generate a configuration file or files that can be applied with a single command such as reloading a service through systemd init. Inserting statements one by one is particularly discouraged, for example, when configuring netfilter rules, saving them to a file and loading it with iptables-restore should always be preferred to executing iptables directly." +msgstr "Без крайньої необхідності сценарії конфігурації не повинні безпосередньо змінювати активну конфігурацію компонентів системи. Якщо це можливо, сценарії повинні генерувати файл або файли конфігурації, які можна застосувати за допомогою однієї команди, наприклад перезавантажити службу через systemd init. Особливо не рекомендується вставляти оператори один за одним, наприклад, під час налаштування правил netfilter, збереження їх у файлі та завантаження його за допомогою iptables-restore завжди слід віддавати перевагу, ніж виконання безпосередньо iptables." #: ../../contributing/upstream-packages.rst:4 msgid "Upstream packages" -msgstr "Upstream packages" +msgstr "Вихідні пакети" #: ../../contributing/development.rst:567 msgid "Use of abbreviations and acronyms" -msgstr "Use of abbreviations and acronyms" +msgstr "Використання скорочень і акронімів" #: ../../contributing/development.rst:538 msgid "Use of numbers" -msgstr "Use of numbers" +msgstr "Використання чисел" #: ../../contributing/development.rst:540 msgid "Use of numbers in command names **should** be avoided unless a number is a part of a protocol name or similar. Thus, ``protocols ospfv3`` is perfectly fine, but something like ``server-1`` is questionable at best." -msgstr "Use of numbers in command names **should** be avoided unless a number is a part of a protocol name or similar. Thus, ``protocols ospfv3`` is perfectly fine, but something like ``server-1`` is questionable at best." +msgstr "**Слід** уникати використання чисел у назвах команд, окрім випадків, коли число є частиною назви протоколу чи подібного. Таким чином, ``протоколи ospfv3`` цілком нормальні, але щось на кшталт ``server-1`` викликає сумніви в кращому випадку." #: ../../contributing/development.rst:598 msgid "Use of verbs" -msgstr "Use of verbs" +msgstr "Вживання дієслів" #: ../../contributing/development.rst:650 msgid "Use regex" -msgstr "Use regex" +msgstr "Використовуйте регулярний вираз" #: ../../contributing/debugging.rst:125 msgid "Useful commands are:" -msgstr "Useful commands are:" +msgstr "Корисні команди:" #: ../../contributing/development.rst:501 msgid "VIF (incl. VIF-S/VIF-C)" -msgstr "VIF (incl. VIF-S/VIF-C)" +msgstr "VIF (включаючи VIF-S/VIF-C)" -#: ../../contributing/testing.rst:106 +#: ../../contributing/testing.rst:109 msgid "VLANs (QinQ and regular 802.1q)" -msgstr "VLANs (QinQ and regular 802.1q)" +msgstr "VLAN (QinQ і звичайний 802.1q)" #: ../../contributing/build-vyos.rst:794 msgid "VMware" @@ -1395,19 +1511,23 @@ msgstr "VMware" #: ../../contributing/development.rst:614 msgid "Verbs, when they are necessary, **should** be in their infinitive form." -msgstr "Verbs, when they are necessary, **should** be in their infinitive form." +msgstr "Дієслова, коли вони необхідні, **повинні** бути у формі інфінітива." #: ../../contributing/development.rst:600 msgid "Verbs **should** be avoided. If a verb can be omitted, omit it." -msgstr "Verbs **should** be avoided. If a verb can be omitted, omit it." +msgstr "Дієслів **слід** уникати. Якщо дієслово можна пропустити, пропустіть його." #: ../../contributing/build-vyos.rst:782 msgid "Virtualization Platforms" -msgstr "Virtualization Platforms" +msgstr "Платформи віртуалізації" #: ../../contributing/debugging.rst:190 msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." -msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." +msgstr "VyOS CLI — це пріоритети. Кожен вузол CLI має відповідний файл ``node.def`` і, можливо, прикріплений сценарій, який виконується, коли вузол присутній. Вузли можуть мати пріоритет, і під час завантаження системи або будь-якого іншого ``фіксування`` конфігурації всі сценарії виконуються від найнижчого до найвищого пріоритету. Це добре, оскільки це дає детерміновану поведінку." + +#: ../../contributing/debugging.rst:190 +msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." +msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to highest priority. This is good as this gives a deterministic behavior." #: ../../contributing/build-vyos.rst:168 msgid "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due to software version updates, it is recommended to use the official Docker Hub image to build VyOS ISO." @@ -1415,87 +1535,99 @@ msgstr "VyOS has switched to Debian (12) Bookworm in its ``current`` branch, Due #: ../../contributing/build-vyos.rst:808 msgid "VyOS itself comes with a bunch of packages that are specific to our system and thus cannot be found in any Debian mirror. Those packages can be found at the `VyOS GitHub project`_ in their source format can easily be compiled into a custom Debian (`*.deb`) package." -msgstr "VyOS itself comes with a bunch of packages that are specific to our system and thus cannot be found in any Debian mirror. Those packages can be found at the `VyOS GitHub project`_ in their source format can easily be compiled into a custom Debian (`*.deb`) package." +msgstr "Сама VyOS постачається з купою пакетів, які є специфічними для нашої системи, тому їх неможливо знайти в жодному дзеркалі Debian. Ці пакунки можна знайти в проекті `VyOS GitHub`_ у вихідному форматі, який можна легко скомпілювати у спеціальний пакет Debian (`*.deb`)." #: ../../contributing/development.rst:707 msgid "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. Our `VyOS CI`_ server is publicly accessible here: https://ci.vyos.net. You can get a brief overview of all required components shipped in a VyOS ISO." -msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. Our `VyOS CI`_ server is publicly accessible here: https://ci.vyos.net. You can get a brief overview of all required components shipped in a VyOS ISO." +msgstr "VyOS використовує Jenkins_ як службу постійної інтеграції (CI). Наш сервер `VyOS CI`_ є загальнодоступним тут: https://ci.vyos.net. Ви можете отримати короткий огляд усіх необхідних компонентів, що поставляються в VyOS ISO." #: ../../contributing/build-vyos.rst:640 msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" -msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" +msgstr "Ми знову використовуємо допоміжний сценарій і деякі патчі, щоб збірка працювала. Просто запустіть таку команду:" + +#: ../../contributing/issues-features.rst:114 +msgid "We assign that status to:" +msgstr "We assign that status to:" #: ../../contributing/testing.rst:25 msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." -msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." +msgstr "Ми розрізняємо два незалежні тести, які виконуються паралельно двома окремими екземплярами QEmu, які запускаються через ``make test`` і ``make testc`` зі сховища vyos-build_." #: ../../contributing/build-vyos.rst:389 msgid "We now are free to run any command we would like to use for debugging, e.g. re-installing the failed package after updating the repository." -msgstr "We now are free to run any command we would like to use for debugging, e.g. re-installing the failed package after updating the repository." +msgstr "Тепер ми можемо виконувати будь-яку команду, яку хочемо використати для налагодження, наприклад, повторне встановлення невдалого пакета після оновлення репозиторію." #: ../../contributing/build-vyos.rst:381 msgid "We now need to mount some required, volatile filesystems" -msgstr "We now need to mount some required, volatile filesystems" +msgstr "Тепер нам потрібно змонтувати деякі необхідні енергозалежні файлові системи" #: ../../contributing/development.rst:111 msgid "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." -msgstr "We only accept bugfixes in packages other than https://github.com/vyos/vyos-1x as no new functionality should use the old style templates (``node.def`` and Perl/BASH code. Use the new style XML/Python interface instead." +msgstr "Ми приймаємо лише виправлення помилок у пакетах, відмінних від https://github.com/vyos/vyos-1x, оскільки жодна нова функціональність не повинна використовувати старі шаблони стилю (``node.def`` і код Perl/BASH. Використовуйте новий стиль XML Натомість інтерфейс /Python." + +#: ../../contributing/issues-features.rst:128 +msgid "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" +msgstr "We will not auto-close tasks with any other status and will not close tasks for the lack of maintainer activity!" #: ../../contributing/development.rst:87 msgid "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" -msgstr "What/why/how something has been changed, makes everyone's life easier when working with `git bisect`" +msgstr "Що/чому/як щось було змінено, полегшує життя кожного під час роботи з `git bisect`" #: ../../contributing/issues-features.rst:42 msgid "What commands did you use? Use e.g. ``run show configuration commands``" -msgstr "What commands did you use? Use e.g. ``run show configuration commands``" +msgstr "Які команди ви використовували? Використовуйте, наприклад, ``виконати, показати команди конфігурації``" #: ../../contributing/issues-features.rst:41 msgid "What was the configuration prior to the change?" -msgstr "What was the configuration prior to the change?" +msgstr "Якою була конфігурація до зміни?" #: ../../contributing/issues-features.rst:40 msgid "What were you attempting to achieve?" -msgstr "What were you attempting to achieve?" +msgstr "Чого ви намагалися досягти?" #: ../../contributing/testing.rst:35 msgid "When and ISO image is assembled by the `VyOS CI`_, the ``BUILD_SMOKETEST`` parameter is enabled by default, which will extend the ISO configuration line with the following packages:" -msgstr "When and ISO image is assembled by the `VyOS CI`_, the ``BUILD_SMOKETEST`` parameter is enabled by default, which will extend the ISO configuration line with the following packages:" +msgstr "Коли образ ISO збирається `VyOS CI`_, параметр ``BUILD_SMOKETEST`` вмикається за замовчуванням, що розширить рядок конфігурації ISO такими пакетами:" #: ../../contributing/debugging.rst:14 msgid "When having trouble compiling your own ISO image or debugging Jenkins issues you can follow the steps at :ref:`iso_build_issues`." -msgstr "When having trouble compiling your own ISO image or debugging Jenkins issues you can follow the steps at :ref:`iso_build_issues`." +msgstr "Якщо у вас виникли проблеми зі збиранням власного образу ISO або з усуненням проблем із Дженкінсом, виконайте дії, наведені в :ref:`iso_build_issues`." #: ../../contributing/development.rst:225 msgid "When modifying the source code, remember these rules of the legacy elimination campaign:" -msgstr "When modifying the source code, remember these rules of the legacy elimination campaign:" +msgstr "Змінюючи вихідний код, пам’ятайте про ці правила кампанії з усунення застарілих версій:" #: ../../contributing/build-vyos.rst:281 msgid "When the build is successful, the resulting iso can be found inside the ``build`` directory as ``live-image-[architecture].hybrid.iso``." -msgstr "When the build is successful, the resulting iso can be found inside the ``build`` directory as ``live-image-[architecture].hybrid.iso``." +msgstr "Коли збірка пройшла успішно, отриманий iso можна знайти в каталозі ``build`` як ``live-image-[architecture].hybrid.iso``." #: ../../contributing/debugging.rst:134 msgid "When writing a new configuration migrator it may happen that you see an error when you try to invoke it manually on a development system. This error will look like:" -msgstr "When writing a new configuration migrator it may happen that you see an error when you try to invoke it manually on a development system. This error will look like:" +msgstr "Під час написання нового засобу міграції конфігурації може статися, що ви побачите помилку під час спроби викликати його вручну в системі розробки. Ця помилка виглядатиме так:" #: ../../contributing/issues-features.rst:31 msgid "When you are able to verify that it is actually a bug, spend some time to document how to reproduce the issue. This documentation can be invaluable." -msgstr "When you are able to verify that it is actually a bug, spend some time to document how to reproduce the issue. This documentation can be invaluable." +msgstr "Коли ви зможете переконатися, що це справді помилка, витратите деякий час, щоб задокументувати, як відтворити проблему. Ця документація може бути неоціненною." #: ../../contributing/testing.rst:109 msgid "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." -msgstr "When you are working on interface configuration and you also wan't to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +msgstr "Коли ви працюєте над конфігурацією інтерфейсу і не бажаєте перевіряти, чи пройшли тести Smoketests, ви зазвичай втрачаєте віддалене SSH-з’єднання з вашим :abbr:`DUT (Device Under Test)`. Щоб вирішити цю проблему, деякі з тестів на основі інтерфейсу можна заздалегідь викликати зі змінною середовища, щоб обмежити кількість інтерфейсів, які використовуються в тесті. За замовчуванням використовуються всі інтерфейси, наприклад, усі інтерфейси Ethernet." + +#: ../../contributing/testing.rst:112 +msgid "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." +msgstr "When you are working on interface configuration and you also want to test if the Smoketests pass you would normally loose the remote SSH connection to your :abbr:`DUT (Device Under Test)`. To handle this issue, some of the interface based tests can be called with an environment variable beforehand to limit the number of interfaces used in the test. By default all interface e.g. all Ethernet interfaces are used." #: ../../contributing/issues-features.rst:21 msgid "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." -msgstr "When you believe you have found a bug, it is always a good idea to verify the issue prior to opening a bug request." +msgstr "Якщо ви вважаєте, що знайшли помилку, завжди доцільно перевірити проблему, перш ніж відкривати запит про помилку." #: ../../contributing/issues-features.rst:34 msgid "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." -msgstr "When you wish to have a developer fix a bug that you found, helping them reproduce the issue is beneficial to everyone. Be sure to include information about the hardware you are using, commands that you were running, any other activities that you may have been doing at the time. This additional information can be very useful." +msgstr "Якщо ви хочете, щоб розробник виправив помилку, яку ви знайшли, допомога йому відтворити проблему буде корисною для всіх. Обов’язково вкажіть інформацію про апаратне забезпечення, яке ви використовуєте, команди, які ви запускали, будь-які інші дії, які ви, можливо, виконували в той час. Ця додаткова інформація може бути дуже корисною." -#: ../../contributing/issues-features.rst:62 +#: ../../contributing/issues-features.rst:66 msgid "Which version of VyOS are you using? ``run show version``" -msgstr "Which version of VyOS are you using? ``run show version``" +msgstr "Яку версію VyOS ви використовуєте? ``виконати показову версію``" #: ../../contributing/build-vyos.rst:406 #: ../../contributing/build-vyos.rst:595 @@ -1504,39 +1636,43 @@ msgstr "WireGuard" #: ../../contributing/development.rst:69 msgid "Writing good commit messages" -msgstr "Writing good commit messages" +msgstr "Написання хороших повідомлень про коміти" #: ../../contributing/development.rst:203 msgid "XML: Tabs **shall not** be used. Every indentation level should be 2 spaces" -msgstr "XML: Tabs **shall not** be used. Every indentation level should be 2 spaces" +msgstr "XML: вкладки **не можна** використовувати. Кожен рівень відступу має складатися з 2 пробілів" #: ../../contributing/development.rst:390 msgid "XML (used for CLI definitions)" -msgstr "XML (used for CLI definitions)" +msgstr "XML (використовується для визначень CLI)" #: ../../contributing/development.rst:497 msgid "XML interface definition files use the `xml.in` file extension which was implemented in :vytask:`T1843`. XML interface definitions tend to have a lot of duplicated code in areas such as:" -msgstr "XML interface definition files use the `xml.in` file extension which was implemented in :vytask:`T1843`. XML interface definitions tend to have a lot of duplicated code in areas such as:" +msgstr "Файли визначення інтерфейсу XML використовують розширення файлу `xml.in`, яке було реалізовано в :vytask:`T1843`. Визначення інтерфейсу XML, як правило, містять багато дубльованого коду в таких областях, як:" #: ../../contributing/development.rst:399 msgid "XML interface definitions for VyOS come with a RelaxNG schema and are located in the vyos-1x_ module. This schema is a slightly modified schema from VyConf_ alias VyOS 2.0 So VyOS 1.2.x interface definitions will be reusable in Nextgen VyOS Versions with very minimal changes." -msgstr "XML interface definitions for VyOS come with a RelaxNG schema and are located in the vyos-1x_ module. This schema is a slightly modified schema from VyConf_ alias VyOS 2.0 So VyOS 1.2.x interface definitions will be reusable in Nextgen VyOS Versions with very minimal changes." +msgstr "Визначення інтерфейсу XML для VyOS постачаються зі схемою RelaxNG і знаходяться в модулі vyos-1x_. Ця схема є дещо зміненою схемою VyConf_ псевдонім VyOS 2.0, тому визначення інтерфейсу VyOS 1.2.x можна буде повторно використовувати у версіях VyOS Nextgen з дуже мінімальними змінами." #: ../../contributing/build-vyos.rst:867 msgid "You can also place the generated `*.deb` into your ISO build environment to include it in a custom iso, see :ref:`build_custom_packages` for more information." -msgstr "You can also place the generated `*.deb` into your ISO build environment to include it in a custom iso, see :ref:`build_custom_packages` for more information." +msgstr "Ви також можете розмістити згенерований файл `*.deb` у своєму середовищі збірки ISO, щоб включити його в користувацьку iso, див. :ref:`build_custom_packages` для отримання додаткової інформації." #: ../../contributing/build-vyos.rst:175 msgid "You can create yourself some handy Bash aliases to always launch the latest - per release train (`current` or `crux`) - container. Add the following to your ``.bash_aliases`` file:" -msgstr "You can create yourself some handy Bash aliases to always launch the latest - per release train (`current` or `crux`) - container. Add the following to your ``.bash_aliases`` file:" +msgstr "Ви можете створити собі кілька зручних псевдонімів Bash, щоб завжди запускати найновіший контейнер для кожного випуску («current» або «crux»). Додайте наступне до свого файлу ``.bash_aliases``:" #: ../../contributing/debugging.rst:122 msgid "You can type ``help`` to get an overview of the available commands, and ``help command`` to get more information on each command." -msgstr "You can type ``help`` to get an overview of the available commands, and ``help command`` to get more information on each command." +msgstr "Ви можете ввести ``help``, щоб отримати огляд доступних команд, і ``help command``, щоб отримати більше інформації про кожну команду." #: ../../contributing/issues-features.rst:70 msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." -msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "У вас є уявлення про те, як покращити VyOS, або вам потрібна конкретна функція, яка буде корисною для всіх користувачів VyOS? Щоб надіслати запит на функцію, виконайте пошук Phabricator_, якщо запит уже очікує на розгляд. Ви можете покращити його або, якщо не знайдете, створити новий, скориставшись швидким посиланням ліворуч під конкретним проектом." + +#: ../../contributing/issues-features.rst:74 +msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." #: ../../contributing/build-vyos.rst:470 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" @@ -1544,39 +1680,56 @@ msgstr "You have your own custom kernel `*.deb` packages in the `packages` folde #: ../../contributing/build-vyos.rst:434 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" -msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" +msgstr "У вас є власні пакети ядра `*.deb` у папці `packages`, але ви забули про створення всіх необхідних позадеревних модулів, таких як Accel-PPP, WireGuard, Intel QAT, Intel NIC" + +#: ../../contributing/issues-features.rst:80 +msgid "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." +msgstr "You must create a task before you start working on a feature. Yes, even if it's a tiny feature — we use the task tracker to generate release notes, so it's essential that everything is reflected there." + +#: ../../contributing/issues-features.rst:84 +msgid "You must include at least the following:" +msgstr "You must include at least the following:" #: ../../contributing/debugging.rst:166 msgid "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." -msgstr "You shoudl now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +msgstr "Тепер ви повинні побачити зворотне трасування Python, яке допоможе нам вирішити цю проблему. Додайте його до завдання Phabricator_." + +#: ../../contributing/issues-features.rst:31 +#: ../../contributing/issues-features.rst:94 +msgid "You should include the following information:" +msgstr "You should include the following information:" + +#: ../../contributing/debugging.rst:166 +msgid "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." +msgstr "You should now see a Python backtrace which will help us to handle the issue, please attach it to the Phabricator_ task." #: ../../contributing/development.rst:146 msgid "You then can proceed with cloning your fork or add a new remote to your local repository:" -msgstr "You then can proceed with cloning your fork or add a new remote to your local repository:" +msgstr "Потім ви можете продовжити клонування свого форка або додати новий пульт до свого локального сховища:" #: ../../contributing/development.rst:262 msgid "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." -msgstr "Your configuration script or operation mode script which is also written in Python3 should have a line break on 80 characters. This seems to be a bit odd nowadays but as some people also work remotely or program using vi(m) this is a fair good standard which I hope we can rely on." +msgstr "Ваш сценарій конфігурації або сценарій режиму роботи, який також написаний на Python3, повинен мати розрив рядка на 80 символів. Сьогодні це здається трохи дивним, але оскільки деякі люди також працюють віддалено або програмують за допомогою vi(m), це досить хороший стандарт, на який, я сподіваюся, ми можемо покластися." -#: ../../contributing/testing.rst:107 +#: ../../contributing/testing.rst:110 msgid "..." msgstr "..." #: ../../contributing/development.rst:509 msgid "`IPv4, IPv6 and DHCP(v6)`_ address assignment" -msgstr "`IPv4, IPv6 and DHCP(v6)`_ address assignment" +msgstr "`IPv4, IPv6 і DHCP(v6)`_ призначення адреси" #: ../../contributing/development.rst:510 msgid "`IPv4, IPv6`_ address assignment" -msgstr "`IPv4, IPv6`_ address assignment" +msgstr "`IPv4, IPv6`_ призначення адреси" #: ../../contributing/development.rst:512 msgid "`MAC address`_ assignment" -msgstr "`MAC address`_ assignment" +msgstr "`MAC-адреса`_ призначення" #: ../../contributing/development.rst:511 msgid "`VLAN (VIF)`_ definition" -msgstr "`VLAN (VIF)`_ definition" +msgstr "Визначення `VLAN (VIF)`_" #: ../../contributing/upstream-packages.rst:55 msgid "`./configure --enable-python-eggs`" @@ -1584,47 +1737,47 @@ msgstr "`./configure --enable-python-eggs`" #: ../../contributing/development.rst:62 msgid "``Jenkins: add current Git commit ID to build description``" -msgstr "``Jenkins: add current Git commit ID to build description``" +msgstr "``Jenkins: додайте поточний ідентифікатор коміту Git до опису збірки``" #: ../../contributing/debugging.rst:67 msgid "``command`` - Once set, all commands used, and their responses received from the OS, will be presented on the screen for inspection." -msgstr "``command`` - Once set, all commands used, and their responses received from the OS, will be presented on the screen for inspection." +msgstr "``команда`` – після встановлення всі використані команди та відповіді на них, отримані від ОС, будуть представлені на екрані для перевірки." #: ../../contributing/development.rst:699 msgid "``commit``" -msgstr "``commit``" +msgstr "``здійснити``" #: ../../contributing/development.rst:61 msgid "``ddclient: T1030: auto create runtime directories``" -msgstr "``ddclient: T1030: auto create runtime directories``" +msgstr "``ddclient: T1030: автоматично створювати каталоги середовища виконання``" #: ../../contributing/debugging.rst:70 msgid "``developer`` - Should a command fail, instead of printing a message to the user explaining how to report issues, the python interpreter will start a PBD post-mortem session to allow the developer to debug the issue. As the debugger will wait from input from the developer, it has the capacity to prevent a router to boot and therefore should only be permanently set up on production if you are ready to see the OS fail to boot." -msgstr "``developer`` - Should a command fail, instead of printing a message to the user explaining how to report issues, the python interpreter will start a PBD post-mortem session to allow the developer to debug the issue. As the debugger will wait from input from the developer, it has the capacity to prevent a router to boot and therefore should only be permanently set up on production if you are ready to see the OS fail to boot." +msgstr "``розробник`` - якщо команда завершується помилкою, замість друку повідомлення для користувача з поясненням, як повідомити про проблеми, інтерпретатор python розпочне сеанс PBD post mortem, щоб дозволити розробнику налагодити проблему. Оскільки налагоджувач чекатиме вхідних даних від розробника, він має здатність запобігти завантаженню маршрутизатора, тому його слід постійно налаштовувати лише у робочому стані, якщо ви готові побачити, що ОС не завантажиться." #: ../../contributing/debugging.rst:64 msgid "``ifconfig`` - Once set, all commands used, and their responses received from the OS, will be presented on the screen for inspection." -msgstr "``ifconfig`` - Once set, all commands used, and their responses received from the OS, will be presented on the screen for inspection." +msgstr "``ifconfig`` - після встановлення всі використані команди та відповіді на них, отримані від ОС, будуть представлені на екрані для перевірки." #: ../../contributing/debugging.rst:77 msgid "``log`` - In some rare cases, it may be useful to see what the OS is doing, including during boot. This option sends all commands used by VyOS to a file. The default file is ``/tmp/full-log`` but it can be changed." -msgstr "``log`` - In some rare cases, it may be useful to see what the OS is doing, including during boot. This option sends all commands used by VyOS to a file. The default file is ``/tmp/full-log`` but it can be changed." +msgstr "``журнал`` - У деяких рідкісних випадках може бути корисно побачити, що робить ОС, зокрема під час завантаження. Цей параметр надсилає всі команди, які використовує VyOS, у файл. Типовим файлом є ``/tmp/full-log``, але його можна змінити." #: ../../contributing/development.rst:693 msgid "``set``" -msgstr "``set``" +msgstr "``набір``" #: ../../contributing/build-vyos.rst:467 msgid "``vyos-build`` repo is outdated, please ``git pull`` to update to the latest release kernel version from us." -msgstr "``vyos-build`` repo is outdated, please ``git pull`` to update to the latest release kernel version from us." +msgstr "Сховище ``vyos-build`` застаріло, будь ласка ``git pull``, щоб оновити до останньої версії ядра від нас." #: ../../contributing/debugging.rst:33 msgid "``vyos-config-debug`` - During development, coding errors can lead to a commit failure on boot, possibly resulting in a failed initialization of the CLI. In this circumstance, the kernel boot parameter ``vyos-config-debug`` will ensure access to the system as user ``vyos``, and will log a Python stack trace to the file ``/tmp/boot-config-trace``. File ``boot-config-trace`` will generate only if config loaded with a failure status." -msgstr "``vyos-config-debug`` - During development, coding errors can lead to a commit failure on boot, possibly resulting in a failed initialization of the CLI. In this circumstance, the kernel boot parameter ``vyos-config-debug`` will ensure access to the system as user ``vyos``, and will log a Python stack trace to the file ``/tmp/boot-config-trace``. File ``boot-config-trace`` will generate only if config loaded with a failure status." +msgstr "``vyos-config-debug`` - під час розробки помилки кодування можуть призвести до помилки фіксації під час завантаження, що, можливо, призведе до невдалої ініціалізації CLI. У цьому випадку параметр завантаження ядра ``vyos-config-debug`` забезпечить доступ до системи як користувач ``vyos`` і запише трасування стека Python у файл ``/tmp/boot-config- слід``. Файл ``boot-config-trace`` буде створено, лише якщо конфігурацію завантажено зі статусом помилки." #: ../../contributing/debugging.rst:27 msgid "``vyos-debug`` - Adding the parameter to the linux boot line will produce timing results for the execution of scripts during commit. If one is seeing an unexpected delay during manual or boot commit, this may be useful in identifying bottlenecks. The internal flag is ``VYOS_DEBUG``, and is found in vyatta-cfg_. Output is directed to ``/var/log/vyatta/cfg-stdout.log``." -msgstr "``vyos-debug`` - Adding the parameter to the linux boot line will produce timing results for the execution of scripts during commit. If one is seeing an unexpected delay during manual or boot commit, this may be useful in identifying bottlenecks. The internal flag is ``VYOS_DEBUG``, and is found in vyatta-cfg_. Output is directed to ``/var/log/vyatta/cfg-stdout.log``." +msgstr "``vyos-debug`` - Додавання параметра до рядка завантаження Linux створить результати синхронізації для виконання сценаріїв під час фіксації. Якщо хтось бачить неочікувану затримку під час ручного або завантажувального фіксування, це може бути корисним для виявлення вузьких місць. Внутрішній прапор — ``VYOS_DEBUG``, його можна знайти у vyatta-cfg_. Вихідні дані спрямовуються до ``/var/log/vyatta/cfg-stdout.log``." #: ../../contributing/upstream-packages.rst:56 msgid "`cd src/libcharon/plugins/vici/python`" @@ -1636,7 +1789,7 @@ msgstr "`cd vyos-strongswan`" #: ../../contributing/upstream-packages.rst:57 msgid "`make`" -msgstr "`make`" +msgstr "`робити`" #: ../../contributing/upstream-packages.rst:58 msgid "`python3 setup.py --command-packages=stdeb.command bdist_deb`" @@ -1644,19 +1797,19 @@ msgstr "`python3 setup.py --command-packages=stdeb.command bdist_deb`" #: ../../contributing/development.rst:672 msgid "allowed: /path/to/script" -msgstr "allowed: /path/to/script" +msgstr "дозволено: /path/to/script" #: ../../contributing/development.rst:669 msgid "allowed: cli-shell-api listNodes vpn ipsec esp-group" -msgstr "allowed: cli-shell-api listNodes vpn ipsec esp-group" +msgstr "дозволено: cli-shell-api listNodes vpn ipsec esp-group" #: ../../contributing/development.rst:666 msgid "allowed: echo foo bar" -msgstr "allowed: echo foo bar" +msgstr "дозволено: панель echo foo" #: ../../contributing/development.rst:681 msgid "begin:/create:/delete:" -msgstr "begin:/create:/delete:" +msgstr "початок:/створити:/видалити:" #: ../../contributing/development.rst:678 msgid "commit:expression:" @@ -1664,23 +1817,27 @@ msgstr "commit:expression:" #: ../../contributing/debugging.rst:128 msgid "contine execution using ``cont``" -msgstr "contine execution using ``cont``" +msgstr "містить виконання за допомогою ``cont''" + +#: ../../contributing/debugging.rst:128 +msgid "continue execution using ``cont``" +msgstr "continue execution using ``cont``" #: ../../contributing/development.rst:675 msgid "default:" -msgstr "default:" +msgstr "за замовчуванням:" #: ../../contributing/debugging.rst:127 msgid "examine variables using ``pp(var)``" -msgstr "examine variables using ``pp(var)``" +msgstr "перевірити змінні за допомогою ``pp(var)``" #: ../../contributing/debugging.rst:129 msgid "get a backtrace using ``bt``" -msgstr "get a backtrace using ``bt``" +msgstr "отримати зворотне трасування за допомогою ``bt``" #: ../../contributing/development.rst:637 msgid "help: My node" -msgstr "help: My node" +msgstr "довідка: Мій вузол" #: ../../contributing/development.rst:701 msgid "https://github.com/vyos/vyatta-cfg/blob/0f42786a0b3/src/commit/commit-algorithm.cpp#L1252" @@ -1696,7 +1853,7 @@ msgstr "https://github.com/vyos/vyatta-cfg/blob/0f42786a0b3/src/cstore/cstore.cp #: ../../contributing/upstream-packages.rst:79 msgid "hvinfo" -msgstr "hvinfo" +msgstr "чому" #: ../../contributing/upstream-packages.rst:26 msgid "keepalived" @@ -1704,11 +1861,11 @@ msgstr "keepalived" #: ../../contributing/upstream-packages.rst:63 msgid "mdns-repeater" -msgstr "mdns-repeater" +msgstr "mdns-ретранслятор" #: ../../contributing/development.rst:663 msgid "multi:" -msgstr "multi:" +msgstr "мульти:" #: ../../contributing/development.rst:631 msgid "mynode/node.def" @@ -1716,35 +1873,35 @@ msgstr "mynode/node.def" #: ../../contributing/development.rst:634 msgid "mynode/node.tag , tag:" -msgstr "mynode/node.tag , tag:" +msgstr "mynode/node.tag , тег:" #: ../../contributing/development.rst:659 msgid "priority: 999" -msgstr "priority: 999" +msgstr "пріоритет: 999" #: ../../contributing/upstream-packages.rst:37 msgid "strongswan" -msgstr "strongswan" +msgstr "сильний лебідь" #: ../../contributing/upstream-packages.rst:41 msgid "strongswan-nm package build is disabled since we don't use NetworkManager" -msgstr "strongswan-nm package build is disabled since we don't use NetworkManager" +msgstr "збірку пакунка strongswan-nm вимкнено, оскільки ми не використовуємо NetworkManager" #: ../../contributing/development.rst:648 msgid "syntax:expression: $VAR(@) in \"foo\", \"bar\", \"baz\"" -msgstr "syntax:expression: $VAR(@) in \"foo\", \"bar\", \"baz\"" +msgstr "синтаксис:вираз: $VAR(@) у "foo", "bar", "baz"" #: ../../contributing/development.rst:655 msgid "syntax:expression: (arithmetic expression)" -msgstr "syntax:expression: (arithmetic expression)" +msgstr "синтаксис:вираз: (арифметичний вираз)" #: ../../contributing/development.rst:651 msgid "syntax:expression: exec ..." -msgstr "syntax:expression: exec ..." +msgstr "синтаксис:вираз: exec ..." #: ../../contributing/development.rst:645 msgid "syntax:expression: pattern" -msgstr "syntax:expression: pattern" +msgstr "синтаксис:вираз: шаблон" #: ../../contributing/upstream-packages.rst:71 msgid "udp-broadcast-relay" @@ -1752,7 +1909,7 @@ msgstr "udp-broadcast-relay" #: ../../contributing/development.rst:640 msgid "val_help: <format>; some string" -msgstr "val_help: <format>; some string" +msgstr "val_help:<format> ; якийсь рядок" #: ../../contributing/upstream-packages.rst:15 msgid "vyos-netplug" diff --git a/docs/_locale/uk/copyright.pot b/docs/_locale/uk/copyright.pot index c2e88942..09c99739 100644 --- a/docs/_locale/uk/copyright.pot +++ b/docs/_locale/uk/copyright.pot @@ -10,7 +10,11 @@ msgstr "" #: ../../copyright.md:1 msgid "Copyright Notice" -msgstr "Copyright Notice" +msgstr "Повідомлення про авторські права" + +#: ../../copyright.md:3 +msgid "Copyright (C) 2018-2023 VyOS maintainers and contributors" +msgstr "Авторське право (C) 2018-2023 Супроводжувачі та учасники VyOS" #: ../../copyright.md:3 msgid "Copyright (C) 2018-2024 VyOS maintainers and contributors" @@ -18,12 +22,12 @@ msgstr "Copyright (C) 2018-2024 VyOS maintainers and contributors" #: ../../copyright.md:9 msgid "Permission is granted to copy and distribute modified versions of this manual under the conditions for verbatim copying, provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one." -msgstr "Permission is granted to copy and distribute modified versions of this manual under the conditions for verbatim copying, provided that the entire resulting derived work is distributed under the terms of a permission notice identical to this one." +msgstr "Надається дозвіл на копіювання та розповсюдження модифікованих версій цього посібника на умовах дослівного копіювання за умови, що вся отримана похідна робота розповсюджується відповідно до умов повідомлення про дозвіл, ідентичного цьому." #: ../../copyright.md:14 msgid "Permission is granted to copy and distribute translations of this manual into another language, under the above conditions for modified versions, except that this permission notice may be stated in a translation approved by the VyOS maintainers." -msgstr "Permission is granted to copy and distribute translations of this manual into another language, under the above conditions for modified versions, except that this permission notice may be stated in a translation approved by the VyOS maintainers." +msgstr "Дозволяється копіювати та розповсюджувати переклади цього посібника на іншу мову за наведених вище умов для модифікованих версій, за винятком того, що це повідомлення про дозвіл може бути зазначено в перекладі, схваленому розробниками VyOS." #: ../../copyright.md:5 msgid "Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and this permission notice are preserved on all copies." -msgstr "Permission is granted to make and distribute verbatim copies of this manual provided the copyright notice and this permission notice are preserved on all copies." +msgstr "Надається дозвіл на створення та розповсюдження дослівних копій цього посібника за умови, що повідомлення про авторські права та це повідомлення про дозвіл збережено на всіх копіях." diff --git a/docs/_locale/uk/documentation.pot b/docs/_locale/uk/documentation.pot index 86105c1c..6593a4b4 100644 --- a/docs/_locale/uk/documentation.pot +++ b/docs/_locale/uk/documentation.pot @@ -8,410 +8,498 @@ msgstr "" "Language: uk\n" "Plural-Forms: nplurals=3; plural=((n%10==1) && (n%100!=11)) ? 0 : ((n%10>=2 && n%10<=4) && ((n%100<12 || n%100>14))) ? 1 : 2;\n" -#: ../../documentation.rst:239 +#: ../../documentation.rst:216 msgid "16bit ASN: ``64496 - 64511``" -msgstr "16bit ASN: ``64496 - 64511``" +msgstr "16-розрядний номер ASN: ``64496 - 64511``" + +#: ../../documentation.rst:84 +msgid "1. Theoretical information" +msgstr "1. Theoretical information" -#: ../../documentation.rst:240 +#: ../../documentation.rst:92 +msgid "2. Configuration description" +msgstr "2. Configuration description" + +#: ../../documentation.rst:217 msgid "32bit ASN: ``65536 - 65551``" -msgstr "32bit ASN: ``65536 - 65551``" +msgstr "32-розрядний номер ASN: ``65536 - 65551``" + +#: ../../documentation.rst:99 +msgid "3. Configuration examples" +msgstr "3. Configuration examples" + +#: ../../documentation.rst:105 +msgid "4. Known issues" +msgstr "4. Known issues" + +#: ../../documentation.rst:113 +msgid "5. Debugging" +msgstr "5. Debugging" -#: ../../documentation.rst:182 +#: ../../documentation.rst:159 msgid "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." -msgstr "A plugin will be used to generate a reference label for each headline. To reference a page or a section in the documentation use the ``:ref:`` command." +msgstr "Плагін використовуватиметься для створення мітки посилання для кожного заголовка. Щоб посилатися на сторінку або розділ у документації, використовуйте команду ``:ref:``." -#: ../../documentation.rst:103 +#: ../../documentation.rst:408 msgid "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." -msgstr "Add modified files to Git index ``$ git add path/to/filename`` or add all unstaged files ``$ git add .``. All files added to the Git index will be part of you following Git commit." +msgstr "Додайте змінені файли до індексу Git ``$ git add path/to/filename`` або додайте всі файли без етапів ``$ git add .``. Усі файли, додані до індексу Git, будуть частиною вас після фіксації Git." -#: ../../documentation.rst:229 +#: ../../documentation.rst:206 msgid "Address space" -msgstr "Address space" +msgstr "Адресний простір" -#: ../../documentation.rst:390 +#: ../../documentation.rst:58 msgid "All RST files must follow the same TOC Level syntax and have to start with" -msgstr "All RST files must follow the same TOC Level syntax and have to start with" +msgstr "Усі файли RST мають відповідати тому самому синтаксису рівня змісту та починати з них" #: ../../documentation.rst:413 msgid "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." -msgstr "An optional section follows. Some commands have requirements like compatible hardware (e.g. Wifi) or some commands you have to set before. For example, it is recommended to set a route-map before configuring BGP." +msgstr "Далі йде необов’язковий розділ. Деякі команди мають вимоги, як-от сумісне обладнання (наприклад, Wi-Fi), або деякі команди, які ви повинні встановити раніше. Наприклад, перед налаштуванням BGP рекомендується встановити карту маршруту." -#: ../../documentation.rst:53 +#: ../../documentation.rst:51 msgid "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." -msgstr "And finally, remember that the reStructuredText files aren't exclusively for generating HTML and PDF. They should be human-readable and easily perused from a console." +msgstr "І, нарешті, пам’ятайте, що файли reStructuredText призначені не виключно для створення HTML і PDF. Вони мають бути зрозумілими для людини та легко переглядатися з консолі." #: ../../documentation.rst:436 msgid "Anything else" -msgstr "Anything else" +msgstr "Будь-що інше" #: ../../documentation.rst:438 msgid "Anything else that is not a configuration or an operation command has no predefined structure." -msgstr "Anything else that is not a configuration or an operation command has no predefined structure." +msgstr "Усе інше, що не є конфігурацією чи командою операції, не має попередньо визначеної структури." -#: ../../documentation.rst:257 +#: ../../documentation.rst:234 msgid "Autolinter" -msgstr "Autolinter" +msgstr "Автолінтер" -#: ../../documentation.rst:94 +#: ../../documentation.rst:399 msgid "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." -msgstr "Check your changes by locally building the documentation ``$ make livehtml``. Sphinx will build the html files in the ``docs/_build`` folder. We provide you with a Docker container for an easy-to-use user experience. Check the README.md_ file of this repository." +msgstr "Перевірте свої зміни, створивши локально документацію ``$ make livehtml``. Sphinx створить файли html у папці ``docs/_build``. Ми пропонуємо вам контейнер Docker для зручного використання. Перевірте файл README.md_ цього репозиторію." -#: ../../documentation.rst:123 +#: ../../documentation.rst:428 msgid "Check your configured remote repositories:" -msgstr "Check your configured remote repositories:" +msgstr "Перевірте налаштовані віддалені сховища:" -#: ../../documentation.rst:78 +#: ../../documentation.rst:383 msgid "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" -msgstr "Clone fork to local machine, then change to that directory ``$ cd vyos-documentation``" +msgstr "Клонуйте розгалуження на локальну машину, а потім перейдіть до цього каталогу ``$ cd vyos-documentation``" -#: ../../documentation.rst:107 +#: ../../documentation.rst:412 msgid "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." -msgstr "Commit your changes with the message, ``$ git commit -m \"<commit message>\"`` or use ``$ git commit -v`` to have your configured editor launched. You can type in a commit message. Again please make yourself comfortable without rules (:ref:`prepare_commit`)." +msgstr "Зафіксуйте свої зміни за допомогою повідомлення ``$ git commit -m "<commit message> "`` або скористайтеся ``$ git commit -v``, щоб запустити ваш налаштований редактор. Ви можете ввести повідомлення про фіксацію. Знову ж таки, будь ласка, розслабтеся без правил (:ref:`prepare_commit`)." #: ../../documentation.rst:399 msgid "Configuration mode pages" -msgstr "Configuration mode pages" +msgstr "Сторінки режиму конфігурації" -#: ../../documentation.rst:84 +#: ../../documentation.rst:389 msgid "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" -msgstr "Create a new branch for your work, use a descriptive name of your work: ``$ git checkout -b <branch-name>``" +msgstr "Створіть нову гілку для своєї роботи, використовуйте описову назву вашої роботи: ``$ git checkout -b<branch-name> ``" -#: ../../documentation.rst:180 +#: ../../documentation.rst:157 msgid "Cross-References" -msgstr "Cross-References" +msgstr "Перехресні посилання" -#: ../../documentation.rst:268 +#: ../../documentation.rst:245 msgid "Custom Sphinx-doc Markup" -msgstr "Custom Sphinx-doc Markup" +msgstr "Спеціальна розмітка Sphinx-doc" -#: ../../documentation.rst:270 +#: ../../documentation.rst:247 msgid "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." -msgstr "Custom commands have been developed for writing the documentation. Please make yourself comfortable with those commands as this eases the way we render the documentation." +msgstr "Розроблено власні команди для написання документації. Будь ласка, влаштуйтеся з цими командами, оскільки це полегшить процес обробки документації." -#: ../../documentation.rst:45 +#: ../../documentation.rst:94 +msgid "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." +msgstr "Describe CLI items related to the service or use case. Each config line or section must be explained, using information provided in the 1st part of the page." + +#: ../../documentation.rst:115 +msgid "Described procedures for debugging a service:" +msgstr "Described procedures for debugging a service:" + +#: ../../documentation.rst:43 msgid "Don't forget to update ``index.rst`` when adding a new node." -msgstr "Don't forget to update ``index.rst`` when adding a new node." +msgstr "Не забудьте оновити ``index.rst`` під час додавання нового вузла." -#: ../../documentation.rst:259 +#: ../../documentation.rst:236 msgid "Each GitHub pull request is automatically linted to check the address space and line length." -msgstr "Each GitHub pull request is automatically linted to check the address space and line length." +msgstr "Кожен запит на отримання GitHub автоматично розміщується для перевірки адресного простору та довжини рядка." -#: ../../documentation.rst:252 +#: ../../documentation.rst:81 +msgid "Each page must contain the following parts:" +msgstr "Each page must contain the following parts:" + +#: ../../documentation.rst:229 msgid "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." -msgstr "Except in ``.. code-block::`` because it uses the html tag ``<pre>`` and renders the same line format from the source rst file." +msgstr "За винятком ``.. code-block::``, оскільки він використовує тег html ``<pre> `` і відображає той самий формат рядка з вихідного першого файлу." -#: ../../documentation.rst:292 +#: ../../documentation.rst:269 msgid "For an inline configuration level command, use ``:cfgcmd:``" -msgstr "For an inline configuration level command, use ``:cfgcmd:``" +msgstr "Для вбудованої команди рівня конфігурації використовуйте ``:cfgcmd:``" -#: ../../documentation.rst:328 +#: ../../documentation.rst:305 msgid "For an inline operational level command, use ``:opcmd:``" -msgstr "For an inline operational level command, use ``:opcmd:``" +msgstr "Для вбудованої команди операційного рівня використовуйте ``:opcmd:``" -#: ../../documentation.rst:186 +#: ../../documentation.rst:163 msgid "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." -msgstr "For example, you want to reference the headline **VLAN** in the **ethernet.rst** page. The plugin generates the label based on the headline and the file path." +msgstr "Наприклад, ви хочете посилатися на заголовок **VLAN** на сторінці **ethernet.rst**. Плагін генерує мітку на основі заголовка та шляху до файлу." -#: ../../documentation.rst:405 +#: ../../documentation.rst:70 msgid "For example:" -msgstr "For example:" +msgstr "Наприклад:" -#: ../../documentation.rst:76 +#: ../../documentation.rst:381 msgid "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" -msgstr "Fork this project on GitHub https://github.com/vyos/vyos-documentation/fork" +msgstr "Розгалужте цей проект на GitHub https://github.com/vyos/vyos-documentation/fork" -#: ../../documentation.rst:58 +#: ../../documentation.rst:363 msgid "Forking Workflow" -msgstr "Forking Workflow" +msgstr "Робочий процес розгалуження" #: ../../documentation.rst:150 msgid "Formating and Sphinxmarkup" -msgstr "Formating and Sphinxmarkup" +msgstr "Форматування та розмітка Sphinx" + +#: ../../documentation.rst:127 +msgid "Formatting and Sphinxmarkup" +msgstr "Formatting and Sphinxmarkup" #: ../../documentation.rst:432 msgid "General concepts for troubleshooting and detailed process descriptions belong here." -msgstr "General concepts for troubleshooting and detailed process descriptions belong here." +msgstr "Загальні поняття щодо усунення несправностей і детальні описи процесів містяться тут." #: ../../documentation.rst:33 msgid "Guidelines" -msgstr "Guidelines" +msgstr "Настанови" #: ../../documentation.rst:423 msgid "If there some troubleshooting guides related to the commands. Explain it in the next optional part." -msgstr "If there some troubleshooting guides related to the commands. Explain it in the next optional part." +msgstr "Якщо є деякі посібники з усунення несправностей, пов’язані з командами. Поясніть це в наступній додатковій частині." -#: ../../documentation.rst:143 +#: ../../documentation.rst:448 +msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" +msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin current``" + +#: ../../documentation.rst:448 msgid "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" -msgstr "If you also want to update your fork on GitHub, use the following: ``$ git push origin master``" +msgstr "Якщо ви також хочете оновити свій форк на GitHub, використовуйте наступне: ``$ git push origin master``" #: ../../documentation.rst:13 msgid "If you are willing to contribute to our documentation this is the definite guide how to do so." -msgstr "If you are willing to contribute to our documentation this is the definite guide how to do so." +msgstr "Якщо ви бажаєте зробити внесок у нашу документацію, це чіткий посібник, як це зробити." #: ../../documentation.rst:16 msgid "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." -msgstr "In contrast to submitting code patches, there is no requirement that you open up a Phabricator_ task prior to submitting a Pull-Request to the documentation." +msgstr "На відміну від надсилання патчів коду, немає вимоги відкривати завдання Phabricator_ перед надсиланням Pull-Request до документації." -#: ../../documentation.rst:417 +#: ../../documentation.rst:75 msgid "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." -msgstr "In the configuration part of the page, all possible configuration options should be documented. Use ``.. cfgcmd::`` described above." +msgstr "У частині сторінки конфігурації мають бути задокументовані всі можливі параметри конфігурації. Використовуйте ``.. cfgcmd::``, як описано вище." -#: ../../documentation.rst:50 +#: ../../documentation.rst:48 msgid "Indent with two spaces." -msgstr "Indent with two spaces." +msgstr "Відступ з двома пробілами." -#: ../../documentation.rst:81 +#: ../../documentation.rst:386 msgid "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" -msgstr "Install the requirements ``$ pip install -r requirements.txt`` (or something similar)" +msgstr "Встановіть вимоги ``$ pip install -r requirements.txt`` (або щось подібне)" -#: ../../documentation.rst:49 +#: ../../documentation.rst:47 msgid "Leave a newline before and after a header." -msgstr "Leave a newline before and after a header." +msgstr "Залиште новий рядок перед і після заголовка." -#: ../../documentation.rst:250 +#: ../../documentation.rst:227 msgid "Limit all lines to a maximum of 80 characters." -msgstr "Limit all lines to a maximum of 80 characters." +msgstr "Обмежте всі рядки максимум 80 символами." -#: ../../documentation.rst:248 +#: ../../documentation.rst:225 msgid "Line length" -msgstr "Line length" +msgstr "Довжина лінії" -#: ../../documentation.rst:87 +#: ../../documentation.rst:392 msgid "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." -msgstr "Make all your changes - please keep our commit rules in mind (:ref:`prepare_commit`). This mainly applies to proper commit messages describing your change (how and why). Please check out the documentation of Sphinx-doc_ or reStructuredText_ if you are not familiar with it. This is used for writing our docs. Additional directives how to write in RST can be obtained from reStructuredTextDirectives_." +msgstr "Внесіть усі ваші зміни - пам’ятайте про наші правила фіксації (:ref:`prepare_commit`). Це в основному стосується правильних повідомлень комітів, що описують вашу зміну (як і чому). Перегляньте документацію Sphinx-doc_ або reStructuredText_, якщо ви з ними не знайомі. Це використовується для написання наших документів. Додаткові директиви, як писати в RST, можна отримати з reStructuredTextDirectives_." -#: ../../documentation.rst:242 +#: ../../documentation.rst:219 msgid "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" -msgstr "Multicast MAC-Addresses: ``90-10-00`` to ``90-10-FF``" +msgstr "Багатоадресні MAC-адреси: від ``90-10-00`` до ``90-10-FF``" -#: ../../documentation.rst:231 +#: ../../documentation.rst:208 msgid "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" -msgstr "Note the following RFCs (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` and :rfc:`7042`), which describe the reserved public IP addresses and autonomous system numbers for the documentation:" +msgstr "Зверніть увагу на такі RFC (:rfc:`5737`, :rfc:`3849`, :rfc:`5389` і :rfc:`7042`), які описують зарезервовані публічні IP-адреси та номери автономних систем для документації:" -#: ../../documentation.rst:118 +#: ../../documentation.rst:423 msgid "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" -msgstr "Once pull requests have been approved, you may want to locally update your forked repository too. First you'll have to add a second remote called `upstream` which points to our main repository. ``$ git remote add upstream https://github.com/vyos/vyos-documentation.git``" +msgstr "Після схвалення запитів на отримання ви можете також локально оновити свій розгалужений репозиторій. Спочатку вам доведеться додати другий віддалений під назвою `upstream`, який вказує на наше головне сховище. ``$ git віддалене додавання вгору https://github.com/vyos/vyos-documentation.git``" #: ../../documentation.rst:429 msgid "Operation mode commands that do not fit in a related configuration mode command must be documented in this part of the documentation." -msgstr "Operation mode commands that do not fit in a related configuration mode command must be documented in this part of the documentation." +msgstr "Команди режиму роботи, які не підходять до відповідної команди режиму конфігурації, повинні бути задокументовані в цій частині документації." #: ../../documentation.rst:427 msgid "Operation mode pages" -msgstr "Operation mode pages" +msgstr "Сторінки режимів роботи" -#: ../../documentation.rst:385 +#: ../../documentation.rst:56 msgid "Page content" -msgstr "Page content" +msgstr "Вміст сторінки" -#: ../../documentation.rst:244 +#: ../../documentation.rst:221 msgid "Please do not use other public address space." -msgstr "Please do not use other public address space." +msgstr "Будь ласка, не використовуйте інший публічний адресний простір." -#: ../../documentation.rst:47 +#: ../../documentation.rst:101 +msgid "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." +msgstr "Practical examples of the service or use case configuration. They must contain topology maps (if applicable) and short descriptions." + +#: ../../documentation.rst:45 msgid "Properly quote commands, filenames and brief code snippets with double backticks." -msgstr "Properly quote commands, filenames and brief code snippets with double backticks." +msgstr "Правильно цитуйте команди, назви файлів і короткі фрагменти коду з подвійними зворотними галочками." -#: ../../documentation.rst:112 +#: ../../documentation.rst:417 msgid "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" -msgstr "Push commits to your GitHub project: ``$ git push -u origin <branch-name>``" +msgstr "Push фіксує ваш проект GitHub: ``$ git push -u origin<branch-name> ``" -#: ../../documentation.rst:420 +#: ../../documentation.rst:78 msgid "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." -msgstr "Related operation command must be documented in the next part of the article. Use ``::opcmd..`` for these commands." +msgstr "Відповідну команду операції необхідно задокументувати в наступній частині статті. Для цих команд використовуйте ``::opcmd..``." -#: ../../documentation.rst:262 +#: ../../documentation.rst:239 msgid "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." -msgstr "Sometimes it is necessary to provide real IP addresses like in the :ref:`examples`. For this, please use the sphinx comment syntax ``.. stop_vyoslinter`` to stop the linter and ``.. start_vyoslinter`` to start." +msgstr "Іноді необхідно надати справжні IP-адреси, як у :ref:`прикладах`. Для цього використовуйте синтаксис коментаря sphinx ``.. stop_vyoslinter`` для зупинки лінтера та ``.. start_vyoslinter`` для запуску." -#: ../../documentation.rst:147 +#: ../../documentation.rst:124 msgid "Style Guide" -msgstr "Style Guide" +msgstr "Керівництво по стилю" -#: ../../documentation.rst:114 +#: ../../documentation.rst:419 msgid "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." -msgstr "Submit pull-request. In GitHub visit the main repository and you should see a banner suggesting to make a pull request. Fill out the form and describe what you do." +msgstr "Надіслати пул-запит. У GitHub відвідайте головне сховище, і ви побачите банер із пропозицією зробити запит на отримання. Заповніть форму та опишіть, що ви робите." -#: ../../documentation.rst:153 +#: ../../documentation.rst:130 msgid "TOC Level" -msgstr "TOC Level" +msgstr "Рівень TOC" #: ../../documentation.rst:38 msgid "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." -msgstr "Take a look at the :doc:`/documentation` page for an intricate explanation of the documentation process." +msgstr "Подивіться на сторінку :doc:`/documentation`, щоб отримати складне пояснення процесу документування." -#: ../../documentation.rst:60 +#: ../../documentation.rst:365 msgid "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." -msgstr "The Forking Workflow is fundamentally different from other popular Git workflows. Instead of using a single server-side repository to act as the \"central\" codebase, it gives every developer their own server-side repository. This means that each contributor has not one, but two Git repositories: a private local one and a public server-side one." +msgstr "Робочий процес Forking принципово відрізняється від інших популярних робочих процесів Git. Замість того, щоб використовувати єдине серверне сховище як «центральну» кодову базу, це надає кожному розробнику власне серверне сховище. Це означає, що кожен учасник має не одне, а два сховища Git: приватне локальне та загальнодоступне на стороні сервера." #: ../../documentation.rst:410 msgid "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." -msgstr "The article starts with a short introduction about the command or the technology. Please include some helpful links or background information." +msgstr "Стаття починається з короткого вступу про команду або технологію. Додайте корисні посилання або довідкову інформацію." -#: ../../documentation.rst:401 +#: ../../documentation.rst:66 msgid "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." -msgstr "The configuration mode folder and the articles cover the specific level of the commands. The exact level depends on the command. This should provide stability for URLs used in the forum or blogpost." +msgstr "Папка режиму налаштування та статті охоплюють певний рівень команд. Точний рівень залежить від команди. Це має забезпечити стабільність URL-адрес, які використовуються на форумі чи в блозі." #: ../../documentation.rst:387 msgid "The documentation has 3 different types of pages. The same kind of pages must have the same structure to achieve a recognition factor." -msgstr "The documentation has 3 different types of pages. The same kind of pages must have the same structure to achieve a recognition factor." +msgstr "Документація має 3 різні типи сторінок. Сторінки одного типу повинні мати однакову структуру, щоб отримати коефіцієнт розпізнавання." #: ../../documentation.rst:25 msgid "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." -msgstr "The documentation source is kept in the Git repository at https://github.com/vyos/vyos-documentation and you can follow the instructions in the README.md_ to build and test your changes." +msgstr "Джерело документації зберігається в сховищі Git за адресою https://github.com/vyos/vyos-documentation, і ви можете дотримуватись інструкцій у README.md_, щоб створити та протестувати свої зміни." -#: ../../documentation.rst:41 +#: ../../documentation.rst:39 msgid "The following is a quick summary of the rules:" -msgstr "The following is a quick summary of the rules:" +msgstr "Нижче наведено короткий виклад правил:" -#: ../../documentation.rst:66 +#: ../../documentation.rst:371 msgid "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." -msgstr "The main advantage of the Forking Workflow is that contributions can be integrated without the need for everybody to push to a single central repository. Developers push to their own server-side repositories, and only the project maintainer can push to the official repository. This allows the maintainer to accept commits from any developer without giving them write access to the official codebase." +msgstr "Основна перевага робочого процесу розгалуження полягає в тому, що внески можна інтегрувати без необхідності пересилання всіх до єдиного центрального сховища. Розробники надсилають дані у власні репозиторії на стороні сервера, і лише супроводжувач проекту може надсилати дані в офіційне сховище. Це дозволяє супроводжувачу приймати коміти від будь-якого розробника, не надаючи їм доступу для запису до офіційної кодової бази." -#: ../../documentation.rst:199 +#: ../../documentation.rst:176 msgid "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." -msgstr "The plugin will warn on build if a headline has a duplicate name in the same document. To prevent this warning, you have to put a custom link on top of the headline." +msgstr "Плагін попереджатиме під час створення, якщо заголовок має повторюване ім’я в тому самому документі. Щоб запобігти цьому попередженню, ви повинні розмістити спеціальне посилання вгорі заголовка." + +#: ../../documentation.rst:86 +msgid "Theoretical information required for users to understand the next document sections:" +msgstr "Theoretical information required for users to understand the next document sections:" #: ../../documentation.rst:35 msgid "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." -msgstr "There are a few things to keep in mind when contributing to the documentation, for the sake of consistency and readability." +msgstr "Є кілька речей, про які слід пам’ятати, додаючи внески до документації, для послідовності та зручності читання." + +#: ../../documentation.rst:107 +msgid "This section must contain a list of:" +msgstr "This section must contain a list of:" -#: ../../documentation.rst:299 +#: ../../documentation.rst:276 msgid "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." -msgstr "To extract a defaultvalue from the XML definitions add a ``:defaultvalue:`` to ``.. cfgcmd::`` directive. To have this feature locally, the vyos-1x submodule must be initialized before. Please be aware to not update the submodule in your PR." +msgstr "Щоб отримати значення за замовчуванням із визначень XML, додайте ``:defaultvalue:`` до директиви ``.. cfgcmd::``. Щоб мати цю функцію локально, субмодуль vyos-1x має бути ініціалізований раніше. Зверніть увагу: не оновлюйте підмодуль у своєму PR." -#: ../../documentation.rst:337 +#: ../../documentation.rst:314 msgid "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." -msgstr "To minimize redundancy, there is a special include directive. It includes a txt file and replace the ``{{ var0 }}`` - ``{{ var9 }}`` with the correct value." +msgstr "Для мінімізації надмірності існує спеціальна директива include. Він містить текстовий файл і замінює ``{{ var0 }}`` - ``{{ var9 }}`` на правильне значення." -#: ../../documentation.rst:46 +#: ../../documentation.rst:44 msgid "Try not to exceed 80 characters per line, but don't break URLs over this." -msgstr "Try not to exceed 80 characters per line, but don't break URLs over this." +msgstr "Намагайтеся не перевищувати 80 символів у рядку, але не розбивайте URL-адреси через це." -#: ../../documentation.rst:241 +#: ../../documentation.rst:218 msgid "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" -msgstr "Unicast MAC Addresses: ``00-53-00`` to ``00-53-FF``" +msgstr "Одноадресні MAC-адреси: від ``00-53-00`` до ``00-53-FF``" -#: ../../documentation.rst:73 +#: ../../documentation.rst:378 msgid "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." -msgstr "Updates to our documentation should be delivered by a GitHub pull-request. This requires you already have a GitHub account." +msgstr "Оновлення нашої документації мають надсилатися за допомогою запиту на підключення GitHub. Для цього потрібен обліковий запис GitHub." -#: ../../documentation.rst:43 +#: ../../documentation.rst:41 msgid "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." -msgstr "Use American English at all times. It's always a good idea to run your text through a grammar and spell checker, such as `Grammarly`_." +msgstr "Завжди використовуйте американську англійську мову. Завжди доцільно перевірити текст через інструмент перевірки граматики та орфографії, наприклад `Grammarly`_." -#: ../../documentation.rst:48 +#: ../../documentation.rst:46 msgid "Use literal blocks for longer snippets." -msgstr "Use literal blocks for longer snippets." +msgstr "Використовуйте літеральні блоки для довших фрагментів." -#: ../../documentation.rst:99 +#: ../../documentation.rst:404 msgid "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." -msgstr "View modified files by calling ``$ git status``. You will get an overview of all files modified by you. You can add individual files to the Git Index in the next step." +msgstr "Перегляньте змінені файли, викликавши ``$ git status``. Ви отримаєте огляд усіх змінених вами файлів. Ви можете додати окремі файли до Git Index на наступному кроці." #: ../../documentation.rst:20 msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." -msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition, as well as PDF files for offline use through LaTeX. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +msgstr "Документація VyOS написана в reStructuredText і створена для читання сторінок документів за допомогою Sphinx, згідно з традицією Python, а також файлів PDF для використання в автономному режимі через LaTeX. Ми вітаємо будь-які внески в документацію. Не тільки нові доповнення, а й виправлення існуючої документації." + +#: ../../documentation.rst:20 +msgid "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." +msgstr "VyOS documentation is written in reStructuredText and generated to Read the Docs pages with Sphinx, as per the Python tradition. We welcome all sorts of contributions to the documentation. Not just new additions but also corrections to existing documentation." #: ../../documentation.rst:9 msgid "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." -msgstr "We encourage every VyOS user to help us improve our documentation as we have a deficit like most software projects. This not only helps you when reading but also everyone else." +msgstr "Ми заохочуємо кожного користувача VyOS допомогти нам покращити нашу документацію, оскільки у нас є дефіцит, як і в більшості програмних проектів. Це допоможе не лише вам під час читання, але й усім іншим." -#: ../../documentation.rst:155 +#: ../../documentation.rst:132 msgid "We use the following syntax for Headlines." -msgstr "We use the following syntax for Headlines." +msgstr "Ми використовуємо наступний синтаксис для заголовків." -#: ../../documentation.rst:277 +#: ../../documentation.rst:254 msgid "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." -msgstr "When documenting CLI commands, use the ``.. cfgcmd::`` directive for all configuration mode commands. An explanation of the described command should be added below this statement. Replace all variable contents with <value> or something similar." +msgstr "Під час документування команд CLI використовуйте директиву ``.. cfgcmd::`` для всіх команд режиму налаштування. Пояснення описаної команди слід додати під цією заявою. Замінити весь вміст змінної на<value> або щось подібне." -#: ../../documentation.rst:316 +#: ../../documentation.rst:293 msgid "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." -msgstr "When documenting operational level commands, use the ``.. opcmd::`` directive. An explanation of the described command should be added below this statement." +msgstr "Під час документування команд робочого рівня використовуйте директиву ``.. opcmd::``. Пояснення описаної команди слід додати під цією заявою." -#: ../../documentation.rst:51 +#: ../../documentation.rst:49 msgid "When in doubt, follow the style of existing documentation." -msgstr "When in doubt, follow the style of existing documentation." +msgstr "Якщо сумніваєтеся, дотримуйтеся стилю існуючої документації." -#: ../../documentation.rst:375 +#: ../../documentation.rst:352 msgid "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." -msgstr "When referencing to VyOS Phabricator Tasks, there is a custom Sphinx Markup command called ``vytask`` that automatically renders to a proper Phabricator URL. This is heavily used in the :ref:`release-notes` section." +msgstr "Коли йдеться про завдання VyOS Phabricator, існує спеціальна команда Sphinx Markup під назвою ``vytask``, яка автоматично відображає правильну URL-адресу Phabricator. Це широко використовується в розділі :ref:`release-notes`." -#: ../../documentation.rst:319 +#: ../../documentation.rst:296 msgid "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." -msgstr "With those custom commands, it is possible to render them in a more descriptive way in the resulting HTML/PDF manual." +msgstr "За допомогою цих користувацьких команд можна відобразити їх у більш описовий спосіб у кінцевому посібнику HTML/PDF." -#: ../../documentation.rst:282 +#: ../../documentation.rst:259 msgid "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." -msgstr "With those custom commands, it will be possible to render them in a more descriptive way in the resulting HTML/PDF manual." +msgstr "За допомогою цих користувальницьких команд можна буде відобразити їх у більш описовий спосіб у кінцевому посібнику HTML/PDF." #: ../../documentation.rst:7 msgid "Write Documentation" -msgstr "Write Documentation" +msgstr "Напишіть документацію" #: ../../documentation.rst:29 msgid "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." -msgstr "You can either install Sphinx (and TeX Live for PDF output) and build the documentation locally, or use the Dockerfile_ to build it in a container." +msgstr "Ви можете встановити Sphinx (і TeX Live для виведення PDF) і створити документацію локально, або використати Dockerfile_, щоб створити її в контейнері." + +#: ../../documentation.rst:29 +msgid "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." +msgstr "You can either install Sphinx and build the documentation locally, or use the Dockerfile_ to build it in a container." -#: ../../documentation.rst:133 +#: ../../documentation.rst:438 msgid "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." -msgstr "Your remote repo on Github is called ``origin``, while the original repo you have forked is called ``upstream``. Now you can locally update your forked repo." +msgstr "Ваше віддалене репо на Github називається ``origin``, тоді як оригінальне репо, яке ви створили, називається ``upstream``. Тепер ви можете локально оновлювати своє розгалужене репо." -#: ../../documentation.rst:235 +#: ../../documentation.rst:212 msgid "``192.0.2.0/24``" msgstr "``192.0.2.0/24``" -#: ../../documentation.rst:236 +#: ../../documentation.rst:213 msgid "``198.51.100.0/24``" msgstr "``198.51.100.0/24``" -#: ../../documentation.rst:238 +#: ../../documentation.rst:215 msgid "``2001:db8::/32``" msgstr "``2001:db8::/32``" -#: ../../documentation.rst:237 +#: ../../documentation.rst:214 msgid "``203.0.113.0/24``" msgstr "``203.0.113.0/24``" -#: ../../documentation.rst:194 +#: ../../documentation.rst:171 msgid "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" -msgstr "``:ref:`Check out VLAN<configuration/interfaces/ethernet:vlan>``" +msgstr "``:ref:`Перевірте VLAN<configuration/interfaces/ethernet:vlan> ``" -#: ../../documentation.rst:190 +#: ../../documentation.rst:167 msgid "``:ref:`configuration/interfaces/ethernet:vlan``" msgstr "``:ref:`configuration/interfaces/ethernet:vlan``" -#: ../../documentation.rst:407 +#: ../../documentation.rst:72 msgid "``set firewall zone`` is written in ``firewall/zone.rst``" -msgstr "``set firewall zone`` is written in ``firewall/zone.rst``" +msgstr "``встановити зону брандмауера`` записується в ``firewall/zone.rst``" -#: ../../documentation.rst:408 +#: ../../documentation.rst:73 msgid "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" -msgstr "``set interfaces ethernet`` is written in ``interfaces/ethernet.rst``" +msgstr "``set interfaces ethernet`` записується в ``interfaces/ethernet.rst``" + +#: ../../documentation.rst:88 +msgid "a simple explanation of what is this page about, why or when it is required to be used" +msgstr "a simple explanation of what is this page about, why or when it is required to be used" -#: ../../documentation.rst:275 +#: ../../documentation.rst:252 msgid "cfgcmd" msgstr "cfgcmd" -#: ../../documentation.rst:335 +#: ../../documentation.rst:312 msgid "cmdinclude" msgstr "cmdinclude" -#: ../../documentation.rst:197 +#: ../../documentation.rst:174 msgid "handle build errors" -msgstr "handle build errors" +msgstr "обробляти помилки збірки" -#: ../../documentation.rst:314 +#: ../../documentation.rst:117 +msgid "how to collect logs or other debugging information (like `show` commands output)" +msgstr "how to collect logs or other debugging information (like `show` commands output)" + +#: ../../documentation.rst:118 +msgid "how to read and what to search for in logs and collected information" +msgstr "how to read and what to search for in logs and collected information" + +#: ../../documentation.rst:109 +msgid "known issues or potential problems for the service or use case" +msgstr "known issues or potential problems for the service or use case" + +#: ../../documentation.rst:291 msgid "opcmd" msgstr "opcmd" -#: ../../documentation.rst:346 +#: ../../documentation.rst:89 +msgid "references to standards, RFCs" +msgstr "references to standards, RFCs" + +#: ../../documentation.rst:323 msgid "the content of interface-address.txt looks like this" -msgstr "the content of interface-address.txt looks like this" +msgstr "вміст interface-address.txt виглядає так" -#: ../../documentation.rst:192 +#: ../../documentation.rst:169 msgid "to use an alternative hyperlink use it this way:" -msgstr "to use an alternative hyperlink use it this way:" +msgstr "щоб використовувати альтернативне гіперпосилання, використовуйте його таким чином:" -#: ../../documentation.rst:373 +#: ../../documentation.rst:350 msgid "vytask" msgstr "vytask" + +#: ../../documentation.rst:119 +msgid "what are indicators of good and bad states in debugging outputs" +msgstr "what are indicators of good and bad states in debugging outputs" + +#: ../../documentation.rst:110 +msgid "workarounds for known issues (if any exist)" +msgstr "workarounds for known issues (if any exist)" diff --git a/docs/_locale/uk/index.pot b/docs/_locale/uk/index.pot index e7c83842..11734a2b 100644 --- a/docs/_locale/uk/index.pot +++ b/docs/_locale/uk/index.pot @@ -10,7 +10,7 @@ msgstr "" #: ../../index.rst:0 msgid "Add missing parts or improve the :ref:`Documentation<documentation:Write Documentation>`." -msgstr "Add missing parts or improve the :ref:`Documentation<documentation:Write Documentation>`." +msgstr "Додайте відсутні частини або вдосконаліть :ref:`документацію<documentation:Write Documentation> `." #: ../../index.rst:72 msgid "Adminguide" @@ -18,72 +18,72 @@ msgstr "Adminguide" #: ../../index.rst:33 msgid "Automate" -msgstr "Automate" +msgstr "Автоматизувати" #: ../../index.rst:25 msgid "Configuration and Operation" -msgstr "Configuration and Operation" +msgstr "Конфігурація та експлуатація" #: ../../index.rst:46 msgid "Contribute and Community" -msgstr "Contribute and Community" +msgstr "Зробіть внесок і спільноту" #: ../../index.rst:85 msgid "Development" -msgstr "Development" +msgstr "розвиток" #: ../../index.rst:0 msgid "Discuss in `Slack <https://slack.vyos.io/>`_ or the `Forum <https://forum.vyos.io>`_." -msgstr "Discuss in `Slack <https://slack.vyos.io/>`_ or the `Forum <https://forum.vyos.io>`_." +msgstr "Обговорити в `Slack<https://slack.vyos.io/> `_ або `Форум<https://forum.vyos.io> `_." #: ../../index.rst:40 msgid "Examples" -msgstr "Examples" +msgstr "Приклади" #: ../../index.rst:63 msgid "First Steps" -msgstr "First Steps" +msgstr "Перші кроки" #: ../../index.rst:12 msgid "Get / Build VyOS" -msgstr "Get / Build VyOS" +msgstr "Отримати / зібрати VyOS" #: ../../index.rst:42 msgid "Get some inspiration from the :ref:`Configuration Blueprints<configexamples/index:Configuration Blueprints>` to build your infrastructure." -msgstr "Get some inspiration from the :ref:`Configuration Blueprints<configexamples/index:Configuration Blueprints>` to build your infrastructure." +msgstr "Почерпніть натхнення з :ref:`Configuration Blueprints<configexamples/index:Configuration Blueprints> ` для створення вашої інфраструктури." #: ../../index.rst:18 msgid "Install VyOS" -msgstr "Install VyOS" +msgstr "Встановіть VyOS" #: ../../index.rst:35 msgid "Integrate VyOS in your automation Workflow with :ref:`Ansible<vyos-ansible>`, have your own :ref:`local scripts<command-scripting>`, or configure VyOS with the :ref:`HTTPS-API<vyosapi>`." -msgstr "Integrate VyOS in your automation Workflow with :ref:`Ansible<vyos-ansible>`, have your own :ref:`local scripts<command-scripting>`, or configure VyOS with the :ref:`HTTPS-API<vyosapi>`." +msgstr "Інтегруйте VyOS у свій робочий процес автоматизації за допомогою :ref:`Ansible<vyos-ansible> `, мати власні :ref:`локальні сценарії<command-scripting> ` або налаштуйте VyOS за допомогою :ref:`HTTPS-API<vyosapi> `." #: ../../index.rst:98 msgid "Misc" -msgstr "Misc" +msgstr "Різне" #: ../../index.rst:0 msgid "Or you can pick up a `Task <https://vyos.dev/>`_ and fix the :ref:`code<contributing/development:development>`." -msgstr "Or you can pick up a `Task <https://vyos.dev/>`_ and fix the :ref:`code<contributing/development:development>`." +msgstr "Або ви можете вибрати «Завдання<https://vyos.dev/> `_ і виправте код :ref:`<contributing/development:development> `." #: ../../index.rst:15 msgid "Quickly :ref:`Build<contributing/build-vyos:build vyos>` your own Image or take a look at how to :ref:`download<installation/install:download>` a free or supported version." -msgstr "Quickly :ref:`Build<contributing/build-vyos:build vyos>` your own Image or take a look at how to :ref:`download<installation/install:download>` a free or supported version." +msgstr "Швидко :ref:`Будуйте<contributing/build-vyos:build vyos> ` ваше власне зображення або подивіться, як :ref:`завантажити<installation/install:download> ` безкоштовна або підтримувана версія." #: ../../index.rst:20 msgid "Read about how to install VyOS on :ref:`Bare Metal<installation/install:installation>` or in a :ref:`Virtual Environment<installation/virtual/index:running vyos in virtual environments>` and how to use an image with the usual :ref:`cloud<installation/cloud/index:running VyOS in Cloud Environments>` providers" -msgstr "Read about how to install VyOS on :ref:`Bare Metal<installation/install:installation>` or in a :ref:`Virtual Environment<installation/virtual/index:running vyos in virtual environments>` and how to use an image with the usual :ref:`cloud<installation/cloud/index:running VyOS in Cloud Environments>` providers" +msgstr "Прочитайте, як встановити VyOS на :ref:`Bare Metal<installation/install:installation> ` або у :ref:`Віртуальному середовищі<installation/virtual/index:running vyos in virtual environments> ` і як використовувати зображення зі звичайною :ref:`хмарою<installation/cloud/index:running VyOS in Cloud Environments> ` провайдери" #: ../../index.rst:0 msgid "There are many ways to contribute to the project." -msgstr "There are many ways to contribute to the project." +msgstr "Є багато способів зробити внесок у проект." #: ../../index.rst:27 msgid "Use the :ref:`Quickstart Guide<quick-start:Quick Start>`, to have a fast overview. Or go deeper and set up :ref:`advanced routing<configuration/protocols/index:protocols>`, :ref:`VRFs<configuration/vrf/index:vrf>`, or :ref:`VPNs<configuration/vpn/index:vpn>` for example." -msgstr "Use the :ref:`Quickstart Guide<quick-start:Quick Start>`, to have a fast overview. Or go deeper and set up :ref:`advanced routing<configuration/protocols/index:protocols>`, :ref:`VRFs<configuration/vrf/index:vrf>`, or :ref:`VPNs<configuration/vpn/index:vpn>` for example." +msgstr "Скористайтеся :ref:`коротким посібником<quick-start:Quick Start> `, щоб мати швидкий огляд. Або зайдіть глибше та налаштуйте :ref:`розширену маршрутизацію<configuration/protocols/index:protocols> `, :ref:`VRF<configuration/vrf/index:vrf> ` або :ref:`VPN<configuration/vpn/index:vpn> ` наприклад." #: ../../index.rst:5 msgid "VyOS User Guide" -msgstr "VyOS User Guide" +msgstr "Посібник користувача VyOS" diff --git a/docs/_locale/uk/installation.pot b/docs/_locale/uk/installation.pot index 4cf97525..37e4975d 100644 --- a/docs/_locale/uk/installation.pot +++ b/docs/_locale/uk/installation.pot @@ -14,59 +14,59 @@ msgstr "$ mkdir rootfs $ sudo mount -o loop vyos-1.4-rolling-202308240020-amd64. #: ../../installation/virtual/gns3.rst:169 msgid "**Advanced** settings tab: Mark the checkbox **Use as a linked base VM** and click ``OK`` to save the changes." -msgstr "**Advanced** settings tab: Mark the checkbox **Use as a linked base VM** and click ``OK`` to save the changes." +msgstr "Вкладка **Додаткові** параметри: поставте прапорець **Використовувати як зв’язану базову віртуальну машину** та натисніть ``OK``, щоб зберегти зміни." #: ../../installation/virtual/gns3.rst:160 msgid "**CD/DVD** tab: Unmount the installation image file by clearing the **Image** entry field." -msgstr "**CD/DVD** tab: Unmount the installation image file by clearing the **Image** entry field." +msgstr "Вкладка **CD/DVD**: відключіть файл інсталяційного образу, очистивши поле введення **Зображення**." #: ../../installation/virtual/gns3.rst:142 msgid "**Delete the VM** from the GNS3 project." -msgstr "**Delete the VM** from the GNS3 project." +msgstr "**Видалити віртуальну машину** з проекту GNS3." #: ../../installation/install.rst:33 msgid "**Early Production Access**" -msgstr "**Early Production Access**" +msgstr "**Доступ до раннього виробництва**" #: ../../installation/install.rst:541 msgid "**First** run a web server - you can use a simple one like `Python's SimpleHTTPServer`_ and start serving the `filesystem.squashfs` file. The file can be found inside the `/live` directory of the extracted contents of the ISO file." -msgstr "**First** run a web server - you can use a simple one like `Python's SimpleHTTPServer`_ and start serving the `filesystem.squashfs` file. The file can be found inside the `/live` directory of the extracted contents of the ISO file." +msgstr "**Спочатку** запустіть веб-сервер – ви можете використати простий, наприклад `Python's SimpleHTTPServer`_, і почати обслуговувати файл `filesystem.squashfs`. Файл можна знайти в каталозі `/live` розпакованого вмісту файлу ISO." #: ../../installation/virtual/gns3.rst:156 msgid "**General settings** tab: Set the boot priority to **HDD**" -msgstr "**General settings** tab: Set the boot priority to **HDD**" +msgstr "Вкладка **Загальні налаштування**: установіть пріоритет завантаження на **HDD**" #: ../../installation/install.rst:37 msgid "**Long-Term Support**" -msgstr "**Long-Term Support**" +msgstr "**Довгострокова підтримка**" #: ../../installation/install.rst:21 msgid "**Nightly (Beta)**" -msgstr "**Nightly (Beta)**" +msgstr "**Ніч (бета)**" #: ../../installation/install.rst:17 msgid "**Nightly (Current)**" -msgstr "**Nightly (Current)**" +msgstr "**Ніч (поточний)**" #: ../../installation/install.rst:29 msgid "**Release Candidate**" -msgstr "**Release Candidate**" +msgstr "**Кандидат на випуск**" #: ../../installation/install.rst:432 msgid "**Requirements**" -msgstr "**Requirements**" +msgstr "**Вимоги**" #: ../../installation/install.rst:546 msgid "**Second**, edit the configuration file of the :ref:`install_from_tftp` so that it shows the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``." -msgstr "**Second**, edit the configuration file of the :ref:`install_from_tftp` so that it shows the correct URL at ``fetch=http://<address_of_your_HTTP_server>/filesystem.squashfs``." +msgstr "**По-друге**, відредагуйте файл конфігурації :ref:`install_from_tftp` так, щоб він показував правильну URL-адресу за адресою ``fetch=http://<address_of_your_HTTP_server> /filesystem.squashfs``." #: ../../installation/install.rst:25 msgid "**Snapshot**" -msgstr "**Snapshot**" +msgstr "**Знімок**" #: ../../installation/install.rst:300 msgid "**Warning**: This will destroy all data on the USB drive!" -msgstr "**Warning**: This will destroy all data on the USB drive!" +msgstr "**Попередження**: це призведе до знищення всіх даних на USB-накопичувачі!" #: ../../installation/vyos-on-baremetal.rst:20 msgid "1x Crucial CT4G4DFS824A (4GB DDR4 RAM 2400 MT/s, PC4-19200)" @@ -78,171 +78,175 @@ msgstr "1x Kingston SUV500MS/120G" #: ../../installation/vyos-on-baremetal.rst:21 msgid "1x SanDisk Ultra Fit 32GB (USB-A 3.0 SDCZ43-032G-G46 mass storage for OS)" -msgstr "1x SanDisk Ultra Fit 32GB (USB-A 3.0 SDCZ43-032G-G46 mass storage for OS)" +msgstr "1x SanDisk Ultra Fit 32 ГБ (USB-A 3.0 SDCZ43-032G-G46 накопичувач для ОС)" #: ../../installation/vyos-on-baremetal.rst:18 msgid "1x Supermicro A2SDi-2C-HLN4F (Intel Atom C3338, 2C/2T, 4MB cache, Quad LAN with Intel C3000 SoC 1GbE)" -msgstr "1x Supermicro A2SDi-2C-HLN4F (Intel Atom C3338, 2C/2T, 4MB cache, Quad LAN with Intel C3000 SoC 1GbE)" +msgstr "1x Supermicro A2SDi-2C-HLN4F (Intel Atom C3338, 2C/2T, 4 МБ кеш-пам’яті, Quad LAN із Intel C3000 SoC 1GbE)" #: ../../installation/vyos-on-baremetal.rst:16 msgid "1x Supermicro CSE-505-203B (19\" 1U chassis, inkl. 200W PSU)" -msgstr "1x Supermicro CSE-505-203B (19\" 1U chassis, inkl. 200W PSU)" +msgstr "1x Supermicro CSE-505-203B (шасі 19" 1U, вкл. блок живлення 200 Вт)" #: ../../installation/vyos-on-baremetal.rst:30 msgid "1x Supermicro MCP-120-00063-0N (Riser Card Bracket)" -msgstr "1x Supermicro MCP-120-00063-0N (Riser Card Bracket)" +msgstr "1x Supermicro MCP-120-00063-0N (кронштейн картки Riser)" #: ../../installation/vyos-on-baremetal.rst:17 msgid "1x Supermicro MCP-260-00085-0B (I/O Shield for A2SDi-2C-HLN4F)" -msgstr "1x Supermicro MCP-260-00085-0B (I/O Shield for A2SDi-2C-HLN4F)" +msgstr "1x Supermicro MCP-260-00085-0B (щит введення/виведення для A2SDi-2C-HLN4F)" #: ../../installation/vyos-on-baremetal.rst:22 msgid "1x Supermicro MCP-320-81302-0B (optional FAN tray)" -msgstr "1x Supermicro MCP-320-81302-0B (optional FAN tray)" +msgstr "1x Supermicro MCP-320-81302-0B (додатковий лоток ВЕНТИЛЯТОРА)" #: ../../installation/vyos-on-baremetal.rst:29 msgid "1x Supermicro RSC-RR1U-E8 (Riser Card)" -msgstr "1x Supermicro RSC-RR1U-E8 (Riser Card)" +msgstr "1x Supermicro RSC-RR1U-E8 (плата райзера)" #: ../../installation/vyos-on-baremetal.rst:103 msgid "1x VARIA Group Item 326745 19\" dual rack for APU4" -msgstr "1x VARIA Group Item 326745 19\" dual rack for APU4" +msgstr "1x VARIA Group Item 326745 19" подвійна стійка для APU4" #: ../../installation/vyos-on-baremetal.rst:101 msgid "1x apu4c4 = 4 i211AT LAN / AMD GX-412TC CPU / 4 GB DRAM / dual SIM" -msgstr "1x apu4c4 = 4 i211AT LAN / AMD GX-412TC CPU / 4 GB DRAM / dual SIM" +msgstr "1x apu4c4 = 4 i211AT LAN / ЦП AMD GX-412TC / 4 ГБ DRAM / дві SIM-карти" #: ../../installation/vyos-on-baremetal.rst:91 msgid "2 miniPCI express (one with SIM socket for 3G modem)." -msgstr "2 miniPCI express (one with SIM socket for 3G modem)." +msgstr "2 miniPCI Express (один з гніздом SIM для 3G модему)." #: ../../installation/vyos-on-baremetal.rst:89 msgid "4 GB DDR3-1333 DRAM, with optional ECC support" -msgstr "4 GB DDR3-1333 DRAM, with optional ECC support" +msgstr "4 ГБ DDR3-1333 DRAM з додатковою підтримкою ECC" #: ../../installation/vyos-on-baremetal.rst:92 msgid "4 Gigabit Ethernet channels using Intel i211AT NICs" -msgstr "4 Gigabit Ethernet channels using Intel i211AT NICs" +msgstr "4 канали Gigabit Ethernet за допомогою мережевих карт Intel i211AT" #: ../../installation/vyos-on-baremetal.rst:87 msgid "AMD Embedded G series GX-412TC, 1 GHz quad Jaguar core with 64 bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2MB L2 cache." -msgstr "AMD Embedded G series GX-412TC, 1 GHz quad Jaguar core with 64 bit and AES-NI support, 32K data + 32K instruction cache per core, shared 2MB L2 cache." +msgstr "AMD Embedded G серії GX-412TC, 1 ГГц чотири ядра Jaguar з 64 бітами та підтримкою AES-NI, 32 Кб даних + 32 Кб кеш-пам’яті інструкцій на ядро, спільний кеш L2 об’ємом 2 МБ." #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 custom VyOS powder coat" -msgstr "APU4 custom VyOS powder coat" +msgstr "Спеціальне порошкове покриття APU4 VyOS" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 desktop back" -msgstr "APU4 desktop back" +msgstr "Задня панель робочого столу APU4" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 desktop closed" -msgstr "APU4 desktop closed" +msgstr "Робочий стіл APU4 закрито" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 rack closed" -msgstr "APU4 rack closed" +msgstr "Стійка APU4 закрита" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 rack front" -msgstr "APU4 rack front" +msgstr "Стійка APU4 передня" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 rack module #1" -msgstr "APU4 rack module #1" +msgstr "Стієчний модуль APU4 №1" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 rack module #2" -msgstr "APU4 rack module #2" +msgstr "Стієчний модуль APU4 №2" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "APU4 rack module #3 with PSU" -msgstr "APU4 rack module #3 with PSU" +msgstr "Стієчний модуль APU4 №3 з блоком живлення" #: ../../installation/virtual/gns3.rst:19 msgid "A VyOS installation image (.iso file). You can find how to get it on the :ref:`installation` page" -msgstr "A VyOS installation image (.iso file). You can find how to get it on the :ref:`installation` page" +msgstr "Образ інсталяції VyOS (файл .iso). Ви можете дізнатися, як отримати його на сторінці :ref:`installation`" #: ../../installation/install.rst:490 msgid "A directory named pxelinux.cfg which must contain the configuration file. We will use the configuration_ file shown below, which we named default_." -msgstr "A directory named pxelinux.cfg which must contain the configuration file. We will use the configuration_ file shown below, which we named default_." +msgstr "Каталог під назвою pxelinux.cfg, який має містити файл конфігурації. Ми будемо використовувати файл конфігурації_, показаний нижче, який ми назвали default_." #: ../../installation/install.rst:25 msgid "A particularly stable release frozen from nightly each month after manual testing. Still contains experimental code." -msgstr "A particularly stable release frozen from nightly each month after manual testing. Still contains experimental code." +msgstr "Особливо стабільний випуск, який зависає щомісяця ввечері після ручного тестування. Все ще містить експериментальний код." #: ../../installation/install.rst:269 msgid "A permanent VyOS installation always requires to go first through a live installation." -msgstr "A permanent VyOS installation always requires to go first through a live installation." +msgstr "Для постійної інсталяції VyOS завжди потрібно спочатку виконати живу інсталяцію." #: ../../installation/virtual/gns3.rst:22 msgid "A working GNS3 installation. For further information see the `GNS3 documentation <https://docs.gns3.com/>`__." -msgstr "A working GNS3 installation. For further information see the `GNS3 documentation <https://docs.gns3.com/>`__." +msgstr "Працююча установка GNS3. Для отримання додаткової інформації дивіться документацію GNS3<https://docs.gns3.com/> `__." #: ../../installation/vyos-on-baremetal.rst:90 msgid "About 6 to 10W of 12V DC power depending on CPU load" -msgstr "About 6 to 10W of 12V DC power depending on CPU load" +msgstr "Приблизно від 6 до 10 Вт живлення 12 В постійного струму залежно від навантаження ЦП" #: ../../installation/cloud/azure.rst:55 msgid "Absorbing Routes" -msgstr "Absorbing Routes" +msgstr "Поглинаючі маршрути" #: ../../installation/install.rst:15 msgid "Access to Images" -msgstr "Access to Images" +msgstr "Доступ до зображень" #: ../../installation/install.rst:15 msgid "Access to Source" -msgstr "Access to Source" +msgstr "Доступ до джерела" #: ../../installation/vyos-on-baremetal.rst:368 msgid "Acrosser AND-J190N1" -msgstr "Acrosser AND-J190N1" +msgstr "Поперек AND-J190N1" #: ../../installation/cloud/azure.rst:45 msgid "Add interface" -msgstr "Add interface" +msgstr "Додати інтерфейс" #: ../../installation/cloud/azure.rst:61 msgid "Add one or more routes for networks you want to pass through the VyOS VM. Next hop type **Virtual Appliance** with the **Next Hop Address** of the VyOS ``LAN`` interface." -msgstr "Add one or more routes for networks you want to pass through the VyOS VM. Next hop type **Virtual Appliance** with the **Next Hop Address** of the VyOS ``LAN`` interface." +msgstr "Додайте один або кілька маршрутів для мереж, які потрібно пропускати через VyOS VM. Наступний крок типу **Virtual Appliance** з **Next Hop Address** інтерфейсу VyOS ``LAN``." #: ../../installation/cloud/aws.rst:27 msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." -msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skeep this step." +msgstr "Додаткове сховище. Ви можете видалити додаткове сховище ``/dev/sdb``. Перший кореневий пристрій буде ``/dev/xvda``. Ви можете пропустити цей крок." + +#: ../../installation/cloud/aws.rst:27 +msgid "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." +msgstr "Additional storage. You can remove additional storage ``/dev/sdb``. First root device will be ``/dev/xvda``. You can skip this step." #: ../../installation/vyos-on-baremetal.rst:394 msgid "Advanced > Serial Port Console Redirection > Console Redirection Settings:" -msgstr "Advanced > Serial Port Console Redirection > Console Redirection Settings:" +msgstr "Додатково > Перенаправлення консолі послідовного порту > Параметри перенаправлення консолі:" #: ../../installation/virtual/gns3.rst:139 msgid "After a successful installation, shutdown the VM with the ``poweroff`` command." -msgstr "After a successful installation, shutdown the VM with the ``poweroff`` command." +msgstr "Після успішного встановлення вимкніть віртуальну машину за допомогою команди ``poweroff``." #: ../../installation/cloud/gcp.rst:41 msgid "After few seconds click to ``instance``" -msgstr "After few seconds click to ``instance``" +msgstr "Через кілька секунд клацніть ``екземпляр``" #: ../../installation/virtual/libvirt.rst:50 msgid "After installation - exit from the console using the key combination ``Ctrl + ]`` and reboot the system." -msgstr "After installation - exit from the console using the key combination ``Ctrl + ]`` and reboot the system." +msgstr "Після встановлення - вийти з консолі за допомогою комбінації клавіш ``Ctrl + ]`` і перезавантажити систему." #: ../../installation/virtual/proxmox.rst:47 msgid "After installation has completed, remove the installation iso using the GUI or ``qm set 200 --ide2 none``." -msgstr "After installation has completed, remove the installation iso using the GUI or ``qm set 200 --ide2 none``." +msgstr "Після завершення інсталяції видаліть iso інсталяції за допомогою графічного інтерфейсу користувача або ``qm set 200 --ide2 none``." #: ../../installation/update.rst:88 msgid "After reboot you might want to verify the version you are running with the :opcmd:`show version` command." -msgstr "After reboot you might want to verify the version you are running with the :opcmd:`show version` command." +msgstr "Після перезавантаження ви можете перевірити версію, яку ви використовуєте, за допомогою команди :opcmd:`show version`." #: ../../installation/install.rst:413 msgid "After the installation is completed, remove the live USB stick or CD." -msgstr "After the installation is completed, remove the live USB stick or CD." +msgstr "Після завершення встановлення вийміть живий USB-накопичувач або компакт-диск." #: ../../installation/migrate-from-vyatta.rst:20 msgid "Also, in Vyatta Core 6.5 remote access VPN interfaces have been renamed from ``pppX`` to ``l2tpX`` and ``pptpX``. If you are using zone based firewalling in Vyatta Core pre-6.5 versions, make sure to change interface names in rules for remote access VPN." -msgstr "Also, in Vyatta Core 6.5 remote access VPN interfaces have been renamed from ``pppX`` to ``l2tpX`` and ``pptpX``. If you are using zone based firewalling in Vyatta Core pre-6.5 versions, make sure to change interface names in rules for remote access VPN." +msgstr "Крім того, у Vyatta Core 6.5 інтерфейси VPN віддаленого доступу було перейменовано з ``pppX`` на ``l2tpX`` і ``pptpX``. Якщо ви використовуєте брандмауер на основі зон у версіях Vyatta Core до 6.5, обов’язково змініть назви інтерфейсів у правилах для VPN віддаленого доступу." #: ../../installation/cloud/aws.rst:3 msgid "Amazon AWS" @@ -250,107 +254,107 @@ msgstr "Amazon AWS" #: ../../installation/cloud/aws.rst:53 msgid "Amazon CloudWatch Agent Usage" -msgstr "Amazon CloudWatch Agent Usage" +msgstr "Використання агента Amazon CloudWatch" #: ../../installation/install.rst:450 msgid "An IP address" -msgstr "An IP address" +msgstr "IP-адреса" #: ../../installation/vyos-on-baremetal.rst:334 msgid "An external RS232 serial port is available, internally a GPIO header as well. It does have Realtek based audio on board for some reason, but you can disable that. Booting works on both USB2 and USB3 ports. Switching between serial BIOS mode and HDMI BIOS mode depends on what is connected at startup; it goes into serial mode if you disconnect HDMI and plug in serial, in all other cases it's HDMI mode." -msgstr "An external RS232 serial port is available, internally a GPIO header as well. It does have Realtek based audio on board for some reason, but you can disable that. Booting works on both USB2 and USB3 ports. Switching between serial BIOS mode and HDMI BIOS mode depends on what is connected at startup; it goes into serial mode if you disconnect HDMI and plug in serial, in all other cases it's HDMI mode." +msgstr "Доступний зовнішній послідовний порт RS232, а також внутрішній роз’єм GPIO. Він чомусь має на борту аудіо на основі Realtek, але ви можете вимкнути це. Завантаження працює на портах USB2 і USB3. Перемикання між послідовним режимом BIOS і режимом HDMI BIOS залежить від того, що підключено під час запуску; він переходить у послідовний режим, якщо ви від'єднаєте HDMI і підключите послідовний порт, у всіх інших випадках це режим HDMI." #: ../../installation/install.rst:554 msgid "And **third**, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart the service with ``sudo service tftpd-hpa restart``." -msgstr "And **third**, restart the TFTP service. If you are using VyOS as your TFTP Server, you can restart the service with ``sudo service tftpd-hpa restart``." +msgstr "І **по-третє**, перезапустіть службу TFTP. Якщо ви використовуєте VyOS як сервер TFTP, ви можете перезапустити службу за допомогою ``sudo service tftpd-hpa restart``." #: ../../installation/install.rst:240 msgid "Another issue of GPG is that it creates a /root/.gnupg directory just for release checking. The dir is small so the fact that it's never used again is an aesthetic problem, but we've had that process fail in the past. But, small key size of the Ed25519 algorithm allows passing public keys in command line arguments, so verification process can be completely stateless:" -msgstr "Another issue of GPG is that it creates a /root/.gnupg directory just for release checking. The dir is small so the fact that it's never used again is an aesthetic problem, but we've had that process fail in the past. But, small key size of the Ed25519 algorithm allows passing public keys in command line arguments, so verification process can be completely stateless:" +msgstr "Інша проблема GPG полягає в тому, що він створює каталог /root/.gnupg лише для перевірки випуску. Каталог невеликий, тому той факт, що він більше ніколи не використовується, є естетичною проблемою, але в минулому у нас були збої в цьому процесі. Але невеликий розмір ключа алгоритму Ed25519 дозволяє передавати відкриті ключі в аргументах командного рядка, тому процес перевірки може бути повністю без стану:" #: ../../installation/install.rst:228 msgid "Another point is that we are using RSA now, which requires absurdly large keys to be secure." -msgstr "Another point is that we are using RSA now, which requires absurdly large keys to be secure." +msgstr "Інший момент полягає в тому, що ми зараз використовуємо RSA, який вимагає абсурдно великих ключів для забезпечення безпеки." #: ../../installation/vyos-on-baremetal.rst:201 msgid "As the APU board itself still used a serial setting of 115200 8N1 it is strongly recommended that you change the VyOS serial interface settings after your first successful boot." -msgstr "As the APU board itself still used a serial setting of 115200 8N1 it is strongly recommended that you change the VyOS serial interface settings after your first successful boot." +msgstr "Оскільки сама плата APU все ще використовувала налаштування послідовного порту 115200 8N1, настійно рекомендується змінити параметри послідовного інтерфейсу VyOS після першого успішного завантаження." #: ../../installation/vyos-on-baremetal.rst:82 msgid "As this platform seems to be quite common in terms of noise, cost, power and performance it makes sense to write a small installation manual." -msgstr "As this platform seems to be quite common in terms of noise, cost, power and performance it makes sense to write a small installation manual." +msgstr "Оскільки ця платформа здається досить поширеною з точки зору шуму, вартості, потужності та продуктивності, має сенс написати невеликий посібник із встановлення." #: ../../installation/virtual/gns3.rst:100 msgid "At the **CD/DVD** tab click on ``Browse...`` and locate the VyOS image you want to install." -msgstr "At the **CD/DVD** tab click on ``Browse...`` and locate the VyOS image you want to install." +msgstr "На вкладці **CD/DVD** натисніть ``Огляд...`` і знайдіть образ VyOS, який потрібно встановити." #: ../../installation/virtual/gns3.rst:95 msgid "At the **HDD** tab, change the Disk interface to **sata** to speed up the boot process." -msgstr "At the **HDD** tab, change the Disk interface to **sata** to speed up the boot process." +msgstr "На вкладці **HDD** змініть інтерфейс диска на **sata**, щоб пришвидшити процес завантаження." #: ../../installation/virtual/gns3.rst:120 msgid "At the general **Preferences** window, click ``OK`` to save and close." -msgstr "At the general **Preferences** window, click ``OK`` to save and close." +msgstr "У загальному вікні **Налаштування** натисніть ``OK``, щоб зберегти та закрити." #: ../../installation/cloud/aws.rst:59 msgid "Attach the created role to your VyOS :abbr:`EC2 (Elastic Compute Cloud)` instance." -msgstr "Attach the created role to your VyOS :abbr:`EC2 (Elastic Compute Cloud)` instance." +msgstr "Приєднайте створену роль до свого екземпляра VyOS :abbr:`EC2 (Elastic Compute Cloud)`." #: ../../installation/install.rst:17 msgid "Automatically built from the current branch. Always up to date with cutting edge development but guaranteed to contain bugs." -msgstr "Automatically built from the current branch. Always up to date with cutting edge development but guaranteed to contain bugs." +msgstr "Автоматично будується з поточної гілки. Завжди в курсі передових розробок, але гарантовано містить помилки." #: ../../installation/install.rst:21 msgid "Automatically built from the development branch and released alongside snapshots. Most likely contains bugs." -msgstr "Automatically built from the development branch and released alongside snapshots. Most likely contains bugs." +msgstr "Автоматично створюється з гілки розробки та випускається разом зі знімками. Швидше за все містить помилки." #: ../../installation/cloud/azure.rst:3 msgid "Azure" -msgstr "Azure" +msgstr "Лазурний" #: ../../installation/cloud/azure.rst:51 msgid "Azure does not allow you attach interface when the instance in the **Running** state." -msgstr "Azure does not allow you attach interface when the instance in the **Running** state." +msgstr "Azure не дозволяє підключати інтерфейс, коли екземпляр перебуває в стані **Виконується**." #: ../../installation/cloud/azure.rst:68 msgid "Azure has a way to access the serial console of a VM, but this needs to be configured on the VyOS. It's there by default, but keep it in mind if you are replacing config.boot and rebooting: ``set system console device ttyS0 speed '9600'``" -msgstr "Azure has a way to access the serial console of a VM, but this needs to be configured on the VyOS. It's there by default, but keep it in mind if you are replacing config.boot and rebooting: ``set system console device ttyS0 speed '9600'``" +msgstr "Azure має спосіб отримати доступ до послідовної консолі віртуальної машини, але це потрібно налаштувати у VyOS. Він є за замовчуванням, але майте це на увазі, якщо ви замінюєте config.boot і перезавантажуєтеся: ``set system console device ttyS0 speed '9600'``" #: ../../installation/vyos-on-baremetal.rst:382 msgid "BIOS Settings:" -msgstr "BIOS Settings:" +msgstr "Параметри BIOS:" #: ../../installation/install.rst:334 msgid "Before a permanent installation, VyOS requires a :ref:`live_installation`." -msgstr "Before a permanent installation, VyOS requires a :ref:`live_installation`." +msgstr "Перед постійним встановленням VyOS вимагає :ref:`live_installation`." #: ../../installation/vyos-on-baremetal.rst:358 msgid "Begin rapidly pressing delete on the keyboard. The boot prompt is very quick, but with a few tries you should be able to get into the BIOS." -msgstr "Begin rapidly pressing delete on the keyboard. The boot prompt is very quick, but with a few tries you should be able to get into the BIOS." +msgstr "Почніть швидко натискати delete на клавіатурі. Підказка про завантаження дуже швидка, але за кілька спроб ви зможете увійти в BIOS." #: ../../installation/virtual/gns3.rst:80 msgid "Being again at the **Preferences** window, having **Qemu VMs** selected and having our new VM selected, click the ``Edit`` button." -msgstr "Being again at the **Preferences** window, having **Qemu VMs** selected and having our new VM selected, click the ``Edit`` button." +msgstr "Знову перебуваючи у вікні **Налаштування**, вибравши **Віртуальні машини Qemu** і вибравши нашу нову віртуальну машину, натисніть кнопку ``Редагувати``." #: ../../installation/vyos-on-baremetal.rst:397 msgid "Bits per second : 9600" -msgstr "Bits per second : 9600" +msgstr "Біт в секунду: 9600" #: ../../installation/install.rst:583 msgid "Black screen on install" -msgstr "Black screen on install" +msgstr "Чорний екран під час встановлення" #: ../../installation/vyos-on-baremetal.rst:362 msgid "Boot to the VyOS installer and install as usual." -msgstr "Boot to the VyOS installer and install as usual." +msgstr "Завантажте інсталятор VyOS і встановіть як зазвичай." #: ../../installation/vyos-on-baremetal.rst:236 msgid "Both device types operate without any moving parts and emit zero noise." -msgstr "Both device types operate without any moving parts and emit zero noise." +msgstr "Обидва типи пристроїв працюють без будь-яких рухомих частин і не видають шуму." #: ../../installation/install.rst:66 msgid "Building from source" -msgstr "Building from source" +msgstr "Будівництво з джерела" #: ../../installation/virtual/libvirt.rst:13 msgid "CLI" @@ -358,231 +362,235 @@ msgstr "CLI" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B Back" -msgstr "CSE-505-203B Back" +msgstr "CSE-505-203B Назад" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B Front" -msgstr "CSE-505-203B Front" +msgstr "CSE-505-203B Передня частина" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B Open 1" -msgstr "CSE-505-203B Open 1" +msgstr "CSE-505-203B Відкрити 1" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B Open 2" -msgstr "CSE-505-203B Open 2" +msgstr "CSE-505-203B Відкрити 2" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B Open 3" -msgstr "CSE-505-203B Open 3" +msgstr "CSE-505-203B Відкрити 3" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B w/ 10GE Open" -msgstr "CSE-505-203B w/ 10GE Open" +msgstr "CSE-505-203B з відкритим 10GE" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B w/ 10GE Open 1" -msgstr "CSE-505-203B w/ 10GE Open 1" +msgstr "CSE-505-203B з відкритим 10GE 1" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B w/ 10GE Open 2" -msgstr "CSE-505-203B w/ 10GE Open 2" +msgstr "CSE-505-203B з 10GE Open 2" #: ../../installation/vyos-on-baremetal.rst:-1 msgid "CSE-505-203B w/ 10GE Open 3" -msgstr "CSE-505-203B w/ 10GE Open 3" +msgstr "CSE-505-203B з відкритим 10GE 3" #: ../../installation/cloud/gcp.rst:37 msgid "Change Deployment name/Zone/Machine type and click ``Deploy``" -msgstr "Change Deployment name/Zone/Machine type and click ``Deploy``" +msgstr "Змініть назву розгортання/зону/тип комп’ютера та натисніть ``Deploy``" #: ../../installation/vyos-on-baremetal.rst:360 msgid "Chipset > South Bridge > USB Configuration: set XHCI to Disabled and USB 2.0 (EHCI) to Enabled. Without doing this, the USB drive won't boot." -msgstr "Chipset > South Bridge > USB Configuration: set XHCI to Disabled and USB 2.0 (EHCI) to Enabled. Without doing this, the USB drive won't boot." +msgstr "Набір мікросхем > Південний міст > Конфігурація USB: встановіть XHCI на Disabled і USB 2.0 (EHCI) на Enabled. Без цього USB-накопичувач не завантажиться." #: ../../installation/virtual/libvirt.rst:140 #: ../../installation/virtual/libvirt.rst:180 msgid "Choose Memory and CPU" -msgstr "Choose Memory and CPU" +msgstr "Виберіть Пам'ять і ЦП" #: ../../installation/virtual/libvirt.rst:171 msgid "Choose ``Import existing disk`` image" -msgstr "Choose ``Import existing disk`` image" +msgstr "Виберіть ``Імпортувати існуючий образ диска``" #: ../../installation/virtual/libvirt.rst:132 msgid "Choose ``Local install media`` (ISO)" -msgstr "Choose ``Local install media`` (ISO)" +msgstr "Виберіть ``Локальний інсталяційний носій`` (ISO)" #: ../../installation/virtual/libvirt.rst:136 msgid "Choose path to iso vyos.iso. Operating System can be any Debian based." -msgstr "Choose path to iso vyos.iso. Operating System can be any Debian based." +msgstr "Виберіть шлях до iso vyos.iso. Операційна система може бути будь-якою на основі Debian." #: ../../installation/cloud/aws.rst:18 msgid "Choose the instance type. Minimum recommendation start from ``m3.medium``" -msgstr "Choose the instance type. Minimum recommendation start from ``m3.medium``" +msgstr "Виберіть тип екземпляра. Мінімальна рекомендація починається з ``m3.medium``" #: ../../installation/virtual/libvirt.rst:175 msgid "Choose the path to the image ``vyos_kvm.qcow2`` that was previously downloaded . Operation System can be any Debian based." -msgstr "Choose the path to the image ``vyos_kvm.qcow2`` that was previously downloaded . Operation System can be any Debian based." +msgstr "Виберіть шлях до попередньо завантаженого образу ``vyos_kvm.qcow2``. Операційна система може бути будь-якою на основі Debian." #: ../../installation/cloud/azure.rst:12 msgid "Choose vm name, resource group, region and click **Browse all public and private images**" -msgstr "Choose vm name, resource group, region and click **Browse all public and private images**" +msgstr "Виберіть назву віртуальної машини, групу ресурсів, регіон і натисніть **Переглянути всі загальнодоступні та приватні зображення**" #: ../../installation/cloud/gcp.rst:30 msgid "Click **Add item** and paste your public ssh key. Click ``Save``." -msgstr "Click **Add item** and paste your public ssh key. Click ``Save``." +msgstr "Натисніть **Додати елемент** і вставте відкритий ключ ssh. Натисніть ``Зберегти``." #: ../../installation/virtual/gns3.rst:74 msgid "Click ``Finish`` to end the **New QEMU VM template** wizard." -msgstr "Click ``Finish`` to end the **New QEMU VM template** wizard." +msgstr "Натисніть ``Готово``, щоб завершити роботу майстра **Новий шаблон віртуальної машини QEMU**." #: ../../installation/cloud/azure.rst:29 msgid "Click ``Review + create``. After a few seconds your deployment will be complete" -msgstr "Click ``Review + create``. After a few seconds your deployment will be complete" +msgstr "Натисніть ``Переглянути + створити``. Через кілька секунд ваше розгортання буде завершено" #: ../../installation/virtual/gns3.rst:88 msgid "Click on the ``Browse...`` button to choose the **Symbol** you want to have representing your VM." -msgstr "Click on the ``Browse...`` button to choose the **Symbol** you want to have representing your VM." +msgstr "Натисніть кнопку ``Огляд...``, щоб вибрати **Символ**, який потрібно використовувати для вашої віртуальної машини." #: ../../installation/cloud/aws.rst:10 msgid "Click to ``Instances`` and ``Launch Instance``" -msgstr "Click to ``Instances`` and ``Launch Instance``" +msgstr "Натисніть ``Екземпляри`` та ``Запустити екземпляр``" #: ../../installation/cloud/azure.rst:33 msgid "Click to your new vm and find out your Public IP address." -msgstr "Click to your new vm and find out your Public IP address." +msgstr "Натисніть свою нову віртуальну машину та дізнайтеся свою загальнодоступну IP-адресу." #: ../../installation/install.rst:565 msgid "Client Boot" -msgstr "Client Boot" +msgstr "Завантаження клієнта" #: ../../installation/install.rst:434 msgid "Clients (where VyOS is to be installed) with a PXE-enabled NIC" -msgstr "Clients (where VyOS is to be installed) with a PXE-enabled NIC" +msgstr "Клієнти (де має бути встановлено VyOS) із мережевою карткою з підтримкою PXE" #: ../../installation/cloud/aws.rst:88 msgid "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." -msgstr "CloudWatchAgentServerRole is too permisive and should be used for single configuration creation and deployment. That's why after completion of step #3 higly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +msgstr "CloudWatchAgentServerRole є надто дозволеним, тому його слід використовувати для створення та розгортання однієї конфігурації. Ось чому після виконання кроку №3 настійно рекомендується замінити роль CloudWatchAgentAdminRole екземпляра на CloudWatchAgentServerRole." + +#: ../../installation/cloud/aws.rst:88 +msgid "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." +msgstr "CloudWatchAgentServerRole is too permissive and should be used for single configuration creation and deployment. That's why after completion of step #3 highly recommended to replace instance CloudWatchAgentAdminRole role with CloudWatchAgentServerRole." #: ../../installation/cloud/aws.rst:82 msgid "CloudWatch SSM Configuration creation" -msgstr "CloudWatch SSM Configuration creation" +msgstr "Створення конфігурації CloudWatch SSM" #: ../../installation/install.rst:12 msgid "Comparison of VyOS image releases" -msgstr "Comparison of VyOS image releases" +msgstr "Порівняння випусків образів VyOS" #: ../../installation/vyos-on-baremetal.rst:117 msgid "Compex WLE900VX mini-PCIe WiFi module, only supported in mPCIe slot 1." -msgstr "Compex WLE900VX mini-PCIe WiFi module, only supported in mPCIe slot 1." +msgstr "Модуль WiFi Compex WLE900VX mini-PCIe, підтримується лише в слоті 1 mPCIe." #: ../../installation/install.rst:443 msgid "Configuration" -msgstr "Configuration" +msgstr "Конфігурація" #: ../../installation/cloud/aws.rst:32 msgid "Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default)." -msgstr "Configure Security Group. It's recommended that you configure ssh access only from certain address sources. Or permit any (by default)." +msgstr "Налаштувати групу безпеки. Рекомендується налаштовувати ssh-доступ лише з певних джерел адрес. Або дозволити будь-який (за замовчуванням)." #: ../../installation/install.rst:448 msgid "Configure a DHCP server to provide the client with:" -msgstr "Configure a DHCP server to provide the client with:" +msgstr "Налаштуйте сервер DHCP, щоб надати клієнту:" #: ../../installation/install.rst:479 msgid "Configure a TFTP server so that it serves the following:" -msgstr "Configure a TFTP server so that it serves the following:" +msgstr "Налаштуйте сервер TFTP так, щоб він обслуговував наступне:" #: ../../installation/cloud/aws.rst:22 msgid "Configure instance for your requirements. Select number of instances / network / subnet" -msgstr "Configure instance for your requirements. Select number of instances / network / subnet" +msgstr "Налаштуйте екземпляр відповідно до ваших вимог. Виберіть кількість екземплярів / мережу / підмережу" #: ../../installation/vyos-on-baremetal.rst:142 msgid "Connect serial port to a PC through null modem cable (RXD / TXD crossed over). Set terminal emulator to 115200 8N1." -msgstr "Connect serial port to a PC through null modem cable (RXD / TXD crossed over). Set terminal emulator to 115200 8N1." +msgstr "Підключіть послідовний порт до ПК через нуль-модемний кабель (RXD / TXD перехресний). Встановіть емулятор терміналу на 115200 8N1." #: ../../installation/virtual/libvirt.rst:36 msgid "Connect to VM with command ``virsh console vyos_r1``" -msgstr "Connect to VM with command ``virsh console vyos_r1``" +msgstr "Підключіться до віртуальної машини за допомогою команди ``virsh console vyos_r1``" #: ../../installation/virtual/libvirt.rst:79 msgid "Connect to VM with command ``virsh console vyos_r2``" -msgstr "Connect to VM with command ``virsh console vyos_r2``" +msgstr "Підключіться до віртуальної машини за допомогою команди ``virsh console vyos_r2``" #: ../../installation/vyos-on-baremetal.rst:391 msgid "Connect to serial (115200bps). Power on the appliance and press Del in the console when requested to enter BIOS settings." -msgstr "Connect to serial (115200bps). Power on the appliance and press Del in the console when requested to enter BIOS settings." +msgstr "Підключіться до послідовного порту (115200 біт/с). Увімкніть пристрій і натисніть Del на консолі, коли буде запропоновано ввести налаштування BIOS." #: ../../installation/cloud/gcp.rst:49 msgid "Connect to the instance. SSH key was generated in the first step." -msgstr "Connect to the instance. SSH key was generated in the first step." +msgstr "Підключіться до примірника. Ключ SSH було згенеровано на першому кроці." #: ../../installation/cloud/aws.rst:45 #: ../../installation/cloud/azure.rst:37 msgid "Connect to the instance by SSH key." -msgstr "Connect to the instance by SSH key." +msgstr "Підключіться до примірника за допомогою ключа SSH." #: ../../installation/cloud/index.rst:7 #: ../../installation/index.rst:7 #: ../../installation/virtual/index.rst:5 msgid "Content" -msgstr "Content" +msgstr "Зміст" #: ../../installation/virtual/proxmox.rst:14 msgid "Copy the qcow2 image to a temporary directory on the Proxmox server." -msgstr "Copy the qcow2 image to a temporary directory on the Proxmox server." +msgstr "Скопіюйте зображення qcow2 у тимчасовий каталог на сервері Proxmox." #: ../../installation/virtual/libvirt.rst:18 msgid "Create VM name ``vyos_r1``. You must specify the path to the ``ISO`` image, the disk ``qcow2`` will be created automatically. The ``default`` network is the virtual network (type Virtio) created by the hypervisor with NAT." -msgstr "Create VM name ``vyos_r1``. You must specify the path to the ``ISO`` image, the disk ``qcow2`` will be created automatically. The ``default`` network is the virtual network (type Virtio) created by the hypervisor with NAT." +msgstr "Створіть назву віртуальної машини ``vyos_r1``. Необхідно вказати шлях до ISO-образу, диск qcow2 буде створено автоматично. Мережа ``за замовчуванням`` — це віртуальна мережа (типу Virtio), створена гіпервізором з NAT." #: ../../installation/virtual/libvirt.rst:63 msgid "Create VM with ``import`` qcow2 disk option." -msgstr "Create VM with ``import`` qcow2 disk option." +msgstr "Створіть віртуальну машину з опцією диска ``import`` qcow2." #: ../../installation/vyos-on-baremetal.rst:412 msgid "Create a VyOS bootable USB key. I used the 64-bit ISO (VyOS 1.1.7) and `LinuxLive USB Creator <http://www.linuxliveusb.com/>`_." -msgstr "Create a VyOS bootable USB key. I used the 64-bit ISO (VyOS 1.1.7) and `LinuxLive USB Creator <http://www.linuxliveusb.com/>`_." +msgstr "Створіть завантажувальний USB-ключ VyOS. Я використовував 64-бітний ISO (VyOS 1.1.7) і `LinuxLive USB Creator<http://www.linuxliveusb.com/> `_." #: ../../installation/vyos-on-baremetal.rst:140 msgid "Create a bootable USB pendrive using e.g. Rufus_ on a Windows machine." -msgstr "Create a bootable USB pendrive using e.g. Rufus_ on a Windows machine." +msgstr "Створіть завантажувальний флеш-накопичувач USB за допомогою, наприклад, Rufus_ на машині Windows." #: ../../installation/virtual/gns3.rst:130 msgid "Create a new project." -msgstr "Create a new project." +msgstr "Створіть новий проект." #: ../../installation/cloud/azure.rst:59 msgid "Create a route table and browse to **Configuration**" -msgstr "Create a route table and browse to **Configuration**" +msgstr "Створіть таблицю маршрутів і перейдіть до **Конфігурації**" #: ../../installation/cloud/aws.rst:57 msgid "Create an :abbr:`IAM (Identity and Access Management)` role for the :abbr:`EC2 (Elastic Compute Cloud)` instance to access CloudWatch service, and name it CloudWatchAgentServerRole. The role should contain two default policies: CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore." -msgstr "Create an :abbr:`IAM (Identity and Access Management)` role for the :abbr:`EC2 (Elastic Compute Cloud)` instance to access CloudWatch service, and name it CloudWatchAgentServerRole. The role should contain two default policies: CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore." +msgstr "Створіть роль :abbr:`IAM (Identity and Access Management)` для примірника :abbr:`EC2 (Elastic Compute Cloud)` для доступу до служби CloudWatch і назвіть її CloudWatchAgentServerRole. Роль має містити дві політики за замовчуванням: CloudWatchAgentServerPolicy і AmazonSSMManagedInstanceCore." #: ../../installation/cloud/aws.rst:86 msgid "Create an :abbr:`IAM (Identity and Access Management)` role for your :abbr:`EC2 (Elastic Compute Cloud)` instance to access the CloudWatch service. Name it CloudWatchAgentAdminRole. The role should contain at two default policies: CloudWatchAgentAdminPolicy and AmazonSSMManagedInstanceCore." -msgstr "Create an :abbr:`IAM (Identity and Access Management)` role for your :abbr:`EC2 (Elastic Compute Cloud)` instance to access the CloudWatch service. Name it CloudWatchAgentAdminRole. The role should contain at two default policies: CloudWatchAgentAdminPolicy and AmazonSSMManagedInstanceCore." +msgstr "Створіть роль :abbr:`IAM (Identity and Access Management)` для свого екземпляра :abbr:`EC2 (Elastic Compute Cloud)` для доступу до служби CloudWatch. Назвіть його CloudWatchAgentAdminRole. Роль має містити дві політики за замовчуванням: CloudWatchAgentAdminPolicy і AmazonSSMManagedInstanceCore." #: ../../installation/cloud/aws.rst:84 msgid "Creating the Amazon Cloudwatch Agent Configuration in Amazon :abbr:`SSM (Systems Manager)` Parameter Store." -msgstr "Creating the Amazon Cloudwatch Agent Configuration in Amazon :abbr:`SSM (Systems Manager)` Parameter Store." +msgstr "Створення конфігурації агента Amazon Cloudwatch у сховищі параметрів Amazon :abbr:`SSM (Systems Manager)`." #: ../../installation/install.rst:216 msgid "Currently we are using GPG for release signing (pretty much like everyone else)." -msgstr "Currently we are using GPG for release signing (pretty much like everyone else)." +msgstr "Наразі ми використовуємо GPG для підписання випуску (майже як і всі інші)." #: ../../installation/cloud/azure.rst:25 msgid "Define network, subnet, Public IP. Or it will be created by default." -msgstr "Define network, subnet, Public IP. Or it will be created by default." +msgstr "Визначте мережу, підмережу, загальнодоступну IP-адресу. Або він буде створений за замовчуванням." #: ../../installation/image.rst:47 msgid "Delete no longer needed images from the system. You can specify an optional image name to delete, the image name can be retrieved via a list of available images can be shown using the :opcmd:`show system image`." -msgstr "Delete no longer needed images from the system. You can specify an optional image name to delete, the image name can be retrieved via a list of available images can be shown using the :opcmd:`show system image`." +msgstr "Видаліть непотрібні зображення з системи. Ви можете вказати необов’язкову назву зображення для видалення, назву зображення можна отримати за допомогою списку доступних зображень, які можна показати за допомогою :opcmd:`показати системне зображення`." #: ../../installation/vyos-on-baremetal.rst:137 msgid "Depending on the VyOS versions you intend to install there is a difference in the serial port settings (:vytask:`T1327`)." -msgstr "Depending on the VyOS versions you intend to install there is a difference in the serial port settings (:vytask:`T1327`)." +msgstr "Залежно від версії VyOS, яку ви збираєтеся інсталювати, є різниця в налаштуваннях послідовного порту (:vytask:`T1327`)." #: ../../installation/cloud/aws.rst:6 #: ../../installation/cloud/azure.rst:6 @@ -592,81 +600,81 @@ msgstr "Deploy VM" #: ../../installation/virtual/proxmox.rst:12 msgid "Deploy VyOS from CLI with qcow2 image" -msgstr "Deploy VyOS from CLI with qcow2 image" +msgstr "Розгорніть VyOS з CLI за допомогою образу qcow2" #: ../../installation/virtual/proxmox.rst:35 msgid "Deploy VyOS from CLI with rolling release ISO" -msgstr "Deploy VyOS from CLI with rolling release ISO" +msgstr "Розгортайте VyOS з CLI за допомогою поточного випуску ISO" #: ../../installation/cloud/aws.rst:8 msgid "Deploy VyOS on Amazon :abbr:`AWS (Amazon Web Services)`" -msgstr "Deploy VyOS on Amazon :abbr:`AWS (Amazon Web Services)`" +msgstr "Розгорніть VyOS на Amazon :abbr:`AWS (Amazon Web Services)`" #: ../../installation/cloud/azure.rst:8 msgid "Deploy VyOS on Azure." -msgstr "Deploy VyOS on Azure." +msgstr "Розгорніть VyOS на Azure." #: ../../installation/virtual/docker.rst:49 msgid "Deploy container from ISO" -msgstr "Deploy container from ISO" +msgstr "Розгорнути контейнер із ISO" #: ../../installation/virtual/libvirt.rst:16 #: ../../installation/virtual/libvirt.rst:127 msgid "Deploy from ISO" -msgstr "Deploy from ISO" +msgstr "Розгорнути з ISO" #: ../../installation/virtual/libvirt.rst:54 #: ../../installation/virtual/libvirt.rst:159 msgid "Deploy from qcow2" -msgstr "Deploy from qcow2" +msgstr "Розгорнути з qcow2" #: ../../installation/install.rst:15 msgid "Description" -msgstr "Description" +msgstr "Опис" #: ../../installation/vyos-on-baremetal.rst:270 msgid "Desktop / Bench Top" -msgstr "Desktop / Bench Top" +msgstr "Настільний/настільний" #: ../../installation/install.rst:17 msgid "Developing VyOS, testing new features, experimenting." -msgstr "Developing VyOS, testing new features, experimenting." +msgstr "Розробка VyOS, тестування нових функцій, експерименти." #: ../../installation/install.rst:21 msgid "Developing and testing the latest major version under development." -msgstr "Developing and testing the latest major version under development." +msgstr "Розробка та тестування останньої основної версії, що розробляється." #: ../../installation/vyos-on-baremetal.rst:406 msgid "Disable XHCI" -msgstr "Disable XHCI" +msgstr "Вимкнути XHCI" #: ../../installation/virtual/libvirt.rst:144 msgid "Disk size" -msgstr "Disk size" +msgstr "Розмір диска" #: ../../installation/install.rst:550 msgid "Do not change the name of the *filesystem.squashfs* file. If you are working with different versions, you can create different directories instead." -msgstr "Do not change the name of the *filesystem.squashfs* file. If you are working with different versions, you can create different directories instead." +msgstr "Не змінюйте назву файлу *filesystem.squashfs*. Якщо ви працюєте з різними версіями, замість цього можна створити різні каталоги." #: ../../installation/virtual/docker.rst:7 msgid "Docker is an open-source project for deploying applications as standardized units called containers. Deploying VyOS in a container provides a simple and lightweight mechanism for both testing and packet routing for container workloads." -msgstr "Docker is an open-source project for deploying applications as standardized units called containers. Deploying VyOS in a container provides a simple and lightweight mechanism for both testing and packet routing for container workloads." +msgstr "Docker — це проект із відкритим вихідним кодом для розгортання програм як стандартизованих одиниць, які називаються контейнерами. Розгортання VyOS у контейнері забезпечує простий і легкий механізм як для тестування, так і для маршрутизації пакетів для робочих навантажень контейнера." #: ../../installation/install.rst:52 msgid "Download" -msgstr "Download" +msgstr "Завантажити" #: ../../installation/install.rst:90 msgid "Download Verification" -msgstr "Download Verification" +msgstr "Завантажте перевірку" #: ../../installation/virtual/libvirt.rst:161 msgid "Download predefined VyOS.qcow2 image for ``KVM``" -msgstr "Download predefined VyOS.qcow2 image for ``KVM``" +msgstr "Завантажте попередньо визначений образ VyOS.qcow2 для ``KVM``" #: ../../installation/virtual/docker.rst:51 msgid "Download the ISO on which you want to base the container. In this example, the name of the ISO is ``vyos-1.4-rolling-202111281249-amd64.iso``. If you created a custom IPv6-enabled network, the ``docker run`` command below will require that this network be included as the ``--net`` parameter to ``docker run``." -msgstr "Download the ISO on which you want to base the container. In this example, the name of the ISO is ``vyos-1.4-rolling-202111281249-amd64.iso``. If you created a custom IPv6-enabled network, the ``docker run`` command below will require that this network be included as the ``--net`` parameter to ``docker run``." +msgstr "Завантажте ISO, на основі якого ви хочете створити контейнер. У цьому прикладі назва ISO – ``vyos-1.4-rolling-202111281249-amd64.iso``. Якщо ви створили спеціальну мережу з підтримкою IPv6, команда ``docker run``, наведена нижче, вимагатиме, щоб ця мережа була включена як параметр ``--net`` до ``docker run``." #: ../../installation/virtual/docker.rst:51 msgid "Download the ISO on which you want to base the container. In this example, the name of the ISO is ``vyos-1.4-rolling-202308240020-amd64.iso``. If you created a custom IPv6-enabled network, the ``docker run`` command below will require that this network be included as the ``--net`` parameter to ``docker run``." @@ -674,52 +682,52 @@ msgstr "Download the ISO on which you want to base the container. In this exampl #: ../../installation/virtual/proxmox.rst:37 msgid "Download the rolling release iso from https://vyos.net/get/nightly-builds/. Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available https://github.com/vyos/vyos-build." -msgstr "Download the rolling release iso from https://vyos.net/get/nightly-builds/. Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available https://github.com/vyos/vyos-build." +msgstr "Завантажте поточний випуск iso з https://vyos.net/get/nightly-builds/. Користувачі, які не передплатили, завжди можуть отримати випуск LTS, зібравши його з джерела. Інструкції можна знайти в розділі :ref:`build` цього посібника. Репозиторій вихідного коду VyOS доступний https://github.com/vyos/vyos-build." #: ../../installation/virtual/gns3.rst:131 msgid "Drag the newly created VyOS VM into it." -msgstr "Drag the newly created VyOS VM into it." +msgstr "Перетягніть туди щойно створену віртуальну машину VyOS." #: ../../installation/install.rst:256 msgid "During an image upgrade VyOS performas the following command:" -msgstr "During an image upgrade VyOS performas the following command:" +msgstr "Під час оновлення образу VyOS виконує таку команду:" #: ../../installation/virtual/vmware.rst:7 msgid "ESXi 5.5 or later" -msgstr "ESXi 5.5 or later" +msgstr "ESXi 5.5 або новішої версії" #: ../../installation/virtual/eve-ng.rst:3 msgid "EVE-NG" -msgstr "EVE-NG" +msgstr "ВЕЧІР-НГ" #: ../../installation/virtual/docker.rst:31 msgid "Edit /etc/docker/daemon.json to set the ``ipv6`` key to ``true`` and to specify the ``fixed-cidr-v6`` to your desired IPv6 subnet." -msgstr "Edit /etc/docker/daemon.json to set the ``ipv6`` key to ``true`` and to specify the ``fixed-cidr-v6`` to your desired IPv6 subnet." +msgstr "Відредагуйте /etc/docker/daemon.json, щоб встановити для ключа ``ipv6`` значення ``true`` і вказати ``fixed-cidr-v6`` для вашої потрібної підмережі IPv6." #: ../../installation/vyos-on-baremetal.rst:407 msgid "Enable USB 2.0 (EHCI) Support" -msgstr "Enable USB 2.0 (EHCI) Support" +msgstr "Увімкніть підтримку USB 2.0 (EHCI)." #: ../../installation/cloud/aws.rst:61 msgid "Ensure that amazon-cloudwatch-agent package is installed." -msgstr "Ensure that amazon-cloudwatch-agent package is installed." +msgstr "Переконайтеся, що встановлено пакет amazon-cloudwatch-agent." #: ../../installation/install.rst:37 msgid "Every major version" -msgstr "Every major version" +msgstr "Кожна основна версія" #: ../../installation/install.rst:25 msgid "Every month until RC comes out" -msgstr "Every month until RC comes out" +msgstr "Щомісяця до виходу RC" #: ../../installation/install.rst:17 #: ../../installation/install.rst:21 msgid "Every night" -msgstr "Every night" +msgstr "Щоночі" #: ../../installation/install.rst:343 msgid "Every version is contained in its own squashfs image that is mounted in a union filesystem together with a directory for mutable data such as configurations, keys, or custom scripts." -msgstr "Every version is contained in its own squashfs image that is mounted in a union filesystem together with a directory for mutable data such as configurations, keys, or custom scripts." +msgstr "Кожна версія міститься у власному образі squashfs, який монтується у файловій системі об’єднання разом із каталогом для змінних даних, таких як конфігурації, ключі або власні сценарії." #: ../../installation/install.rst:17 #: ../../installation/install.rst:21 @@ -728,167 +736,167 @@ msgstr "Every version is contained in its own squashfs image that is mounted in #: ../../installation/install.rst:33 #: ../../installation/install.rst:37 msgid "Everyone" -msgstr "Everyone" +msgstr "Всі" #: ../../installation/install.rst:76 msgid "Everyone can download bleeding-edge VyOS rolling images from: https://downloads.vyos.io/" -msgstr "Everyone can download bleeding-edge VyOS rolling images from: https://downloads.vyos.io/" +msgstr "Кожен може завантажити найсучасніші рухливі образи VyOS з: https://downloads.vyos.io/" #: ../../installation/update.rst:50 msgid "Example" -msgstr "Example" +msgstr "приклад" #: ../../installation/cloud/gcp.rst:13 msgid "Example:" -msgstr "Example:" +msgstr "приклад:" #: ../../installation/install.rst:522 msgid "Example of simple (no menu) configuration file:" -msgstr "Example of simple (no menu) configuration file:" +msgstr "Приклад простого (без меню) файлу конфігурації:" #: ../../installation/install.rst:502 msgid "Example of the contents of the TFTP server:" -msgstr "Example of the contents of the TFTP server:" +msgstr "Приклад вмісту сервера TFTP:" #: ../../installation/vyos-on-baremetal.rst:109 msgid "Extension Modules" -msgstr "Extension Modules" +msgstr "Модулі розширення" #: ../../installation/install.rst:439 msgid "Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_" -msgstr "Files *pxelinux.0* and *ldlinux.c32* `from the Syslinux distribution <https://kernel.org/pub/linux/utils/boot/syslinux/>`_" +msgstr "Файли *pxelinux.0* і *ldlinux.c32* `з дистрибутива Syslinux<https://kernel.org/pub/linux/utils/boot/syslinux/> `_" #: ../../installation/install.rst:567 msgid "Finally, turn on your PXE-enabled client or clients. They will automatically get an IP address from the DHCP server and start booting into VyOS live from the files automatically taken from the TFTP and HTTP servers." -msgstr "Finally, turn on your PXE-enabled client or clients. They will automatically get an IP address from the DHCP server and start booting into VyOS live from the files automatically taken from the TFTP and HTTP servers." +msgstr "Нарешті, увімкніть клієнт або клієнти з підтримкою PXE. Вони автоматично отримають IP-адресу від сервера DHCP і почнуть завантажувати VyOS у режимі реального часу з файлів, автоматично отриманих із серверів TFTP і HTTP." #: ../../installation/install.rst:201 msgid "Finally, verify the authenticity of the downloaded image:" -msgstr "Finally, verify the authenticity of the downloaded image:" +msgstr "Нарешті перевірте автентичність завантаженого зображення:" #: ../../installation/install.rst:285 msgid "Find out the device name of your USB drive (you can use the ``lsblk`` command)" -msgstr "Find out the device name of your USB drive (you can use the ``lsblk`` command)" +msgstr "Дізнайтеся назву пристрою вашого USB-накопичувача (ви можете скористатися командою ``lsblk``)" #: ../../installation/cloud/gcp.rst:45 msgid "Find out your external IP address" -msgstr "Find out your external IP address" +msgstr "Дізнайтеся свою зовнішню IP-адресу" #: ../../installation/cloud/aws.rst:41 msgid "Find out your public IP address." -msgstr "Find out your public IP address." +msgstr "Дізнайтеся свою публічну IP-адресу." #: ../../installation/virtual/gns3.rst:30 msgid "First, a virtual machine (VM) for the VyOS installation must be created in GNS3." -msgstr "First, a virtual machine (VM) for the VyOS installation must be created in GNS3." +msgstr "По-перше, у GNS3 має бути створена віртуальна машина (VM) для встановлення VyOS." #: ../../installation/install.rst:102 msgid "First, install GPG or another OpenPGP implementation. On most GNU+Linux distributions it is installed by default as package managers use it to verify package signatures. If not pre-installed, it will need to be downloaded and installed." -msgstr "First, install GPG or another OpenPGP implementation. On most GNU+Linux distributions it is installed by default as package managers use it to verify package signatures. If not pre-installed, it will need to be downloaded and installed." +msgstr "Спочатку встановіть GPG або іншу реалізацію OpenPGP. У більшості дистрибутивів GNU+Linux він встановлений за замовчуванням, оскільки менеджери пакетів використовують його для перевірки підписів пакетів. Якщо попередньо не встановлено, його потрібно буде завантажити та встановити." #: ../../installation/vyos-on-baremetal.rst:384 msgid "First thing you want to do is getting a more user friendly console to configure BIOS. Default VT100 brings a lot of issues. Configure VT100+ instead." -msgstr "First thing you want to do is getting a more user friendly console to configure BIOS. Default VT100 brings a lot of issues. Configure VT100+ instead." +msgstr "Перше, що ви хочете зробити, це отримати більш зручну консоль для налаштування BIOS. Стандартний VT100 викликає багато проблем. Натомість налаштуйте VT100+." #: ../../installation/migrate-from-vyatta.rst:42 msgid "For completion the key below corresponds to the key listed in the URL above." -msgstr "For completion the key below corresponds to the key listed in the URL above." +msgstr "Для завершення наведений нижче ключ відповідає ключу, зазначеному в URL-адресі вище." #: ../../installation/vyos-on-baremetal.rst:387 msgid "For practical issues change speed from 115200 to 9600. 9600 is the default speed at which both linux kernel and VyOS will reconfigure the serial port when loading." -msgstr "For practical issues change speed from 115200 to 9600. 9600 is the default speed at which both linux kernel and VyOS will reconfigure the serial port when loading." +msgstr "З практичних питань змініть швидкість з 115200 на 9600. 9600 — це швидкість за замовчуванням, на якій ядро Linux і VyOS переконфігурують послідовний порт під час завантаження." #: ../../installation/migrate-from-vyatta.rst:161 msgid "Future releases of VyOS will break the direct upgrade path from Vyatta core. Please upgrade through an intermediate VyOS version e.g. VyOS 1.2. After this you can continue upgrading to newer releases once you bootet into VyOS 1.2 once." -msgstr "Future releases of VyOS will break the direct upgrade path from Vyatta core. Please upgrade through an intermediate VyOS version e.g. VyOS 1.2. After this you can continue upgrading to newer releases once you bootet into VyOS 1.2 once." +msgstr "Майбутні випуски VyOS порушать шлях прямого оновлення ядра Vyatta. Оновіть програму через проміжну версію VyOS, наприклад VyOS 1.2. Після цього ви можете продовжити оновлення до новіших версій, щойно завантажите VyOS 1.2." #: ../../installation/install.rst:192 msgid "GPG verification" -msgstr "GPG verification" +msgstr "Перевірка GPG" #: ../../installation/install.rst:585 msgid "GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts. This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a black screen after selecting the `Live system` option from the installation image." -msgstr "GRUB attempts to redirect all output to a serial port for ease of installation on headless hosts. This appears to cause an hard lockup on some hardware that lacks a serial port, with the result being a black screen after selecting the `Live system` option from the installation image." +msgstr "GRUB намагається перенаправити весь вихід на послідовний порт для полегшення встановлення на безголових хостах. Схоже, що це спричиняє жорстке блокування деякого обладнання, у якого відсутній послідовний порт, результатом чого є чорний екран після вибору опції «Live system» із інсталяційного образу." #: ../../installation/cloud/gcp.rst:10 msgid "Generate SSH key pair type **ssh-rsa** from the host that will connect to VyOS." -msgstr "Generate SSH key pair type **ssh-rsa** from the host that will connect to VyOS." +msgstr "Згенеруйте пару ключів SSH типу **ssh-rsa** з хосту, який підключатиметься до VyOS." #: ../../installation/cloud/azure.rst:21 msgid "Generate new SSH key pair or use existing." -msgstr "Generate new SSH key pair or use existing." +msgstr "Згенеруйте нову пару ключів SSH або використовуйте наявну." #: ../../installation/cloud/azure.rst:10 msgid "Go to the Azure services and Click to **Add new Virtual machine**" -msgstr "Go to the Azure services and Click to **Add new Virtual machine**" +msgstr "Перейдіть до служб Azure і натисніть **Додати нову віртуальну машину**" #: ../../installation/virtual/gns3.rst:33 msgid "Go to the GNS3 **File** menu, click **New template** and choose select **Manually create a new Template**." -msgstr "Go to the GNS3 **File** menu, click **New template** and choose select **Manually create a new Template**." +msgstr "Перейдіть до меню GNS3 **Файл**, натисніть **Новий шаблон** і виберіть **Створити новий шаблон вручну**." #: ../../installation/cloud/gcp.rst:3 msgid "Google Cloud Platform" -msgstr "Google Cloud Platform" +msgstr "Хмарна платформа Google" #: ../../installation/install.rst:37 msgid "Guaranteed to be stable and carefully maintained for several years after the release. No features are introduced but security updates are released in a timely manner." -msgstr "Guaranteed to be stable and carefully maintained for several years after the release. No features are introduced but security updates are released in a timely manner." +msgstr "Гарантована стабільність і дбайливе обслуговування протягом кількох років після випуску. Жодних функцій не представлено, але оновлення системи безпеки випускаються своєчасно." #: ../../installation/vyos-on-baremetal.rst:304 msgid "Hardware" -msgstr "Hardware" +msgstr "Обладнання" #: ../../installation/install.rst:45 msgid "Hardware requirements" -msgstr "Hardware requirements" +msgstr "Вимоги до обладнання" #: ../../installation/virtual/docker.rst:22 msgid "Here is a example using the macvlan driver." -msgstr "Here is a example using the macvlan driver." +msgstr "Ось приклад використання драйвера macvlan." #: ../../installation/install.rst:33 msgid "Highly stable with no known bugs. Needs to be tested repeatedly under different conditions before it can become the final release." -msgstr "Highly stable with no known bugs. Needs to be tested repeatedly under different conditions before it can become the final release." +msgstr "Дуже стабільний без відомих помилок. Потрібно багаторазово тестувати в різних умовах, перш ніж він стане остаточним випуском." #: ../../installation/install.rst:25 msgid "Home labs and simple networks that call for new features." -msgstr "Home labs and simple networks that call for new features." +msgstr "Домашні лабораторії та прості мережі, які вимагають нових функцій." #: ../../installation/vyos-on-baremetal.rst:132 msgid "Huawei ME909u-521 miniPCIe card (LTE)" -msgstr "Huawei ME909u-521 miniPCIe card (LTE)" +msgstr "Карта miniPCIe Huawei ME909u-521 (LTE)" #: ../../installation/vyos-on-baremetal.rst:415 msgid "I'm not sure if it helps the process but I changed default option to live-serial (line “default xxxx”) on the USB key under syslinux/syslinux.cfg." -msgstr "I'm not sure if it helps the process but I changed default option to live-serial (line “default xxxx”) on the USB key under syslinux/syslinux.cfg." +msgstr "Я не впевнений, чи це допомагає процесу, але я змінив опцію за замовчуванням на live-serial (рядок «default xxxx») на USB-ключі в syslinux/syslinux.cfg." #: ../../installation/virtual/docker.rst:13 msgid "IPv6 Support for docker" -msgstr "IPv6 Support for docker" +msgstr "Підтримка IPv6 для докерів" #: ../../installation/vyos-on-baremetal.rst:346 msgid "I believe this is actually the same hardware as the Protectli. I purchased it in June 2018. It came pre-loaded with pfSense." -msgstr "I believe this is actually the same hardware as the Protectli. I purchased it in June 2018. It came pre-loaded with pfSense." +msgstr "Я вважаю, що це фактично те саме обладнання, що й Protectli. Я придбав його в червні 2018 року. У нього було попередньо завантажено pfSense." #: ../../installation/vyos-on-baremetal.rst:418 msgid "I connected the key to one black USB port on the back and powered on. The first VyOS screen has some readability issues. Press :kbd:`Enter` to continue." -msgstr "I connected the key to one black USB port on the back and powered on. The first VyOS screen has some readability issues. Press :kbd:`Enter` to continue." +msgstr "Я підключив ключ до одного чорного порту USB на задній панелі та ввімкнув. Перший екран VyOS має деякі проблеми з читабельністю. Натисніть :kbd:`Enter`, щоб продовжити." #: ../../installation/vyos-on-baremetal.rst:10 msgid "I opted to get one of the new Intel Atom C3000 CPUs to spawn VyOS on it. Running VyOS on an UEFI only device is supported as of VyOS release 1.2." -msgstr "I opted to get one of the new Intel Atom C3000 CPUs to spawn VyOS on it. Running VyOS on an UEFI only device is supported as of VyOS release 1.2." +msgstr "Я вирішив придбати один із нових процесорів Intel Atom C3000, щоб створити на ньому VyOS. Запуск VyOS на пристрої лише з UEFI підтримується з випуску VyOS 1.2." #: ../../installation/cloud/azure.rst:47 msgid "If instance was deployed with one **eth0** ``WAN`` interface and want to add new one. To add new interface an example **eth1** ``LAN`` you need shutdown the instance. Attach the interface in the Azure portal and then start the instance." -msgstr "If instance was deployed with one **eth0** ``WAN`` interface and want to add new one. To add new interface an example **eth1** ``LAN`` you need shutdown the instance. Attach the interface in the Azure portal and then start the instance." +msgstr "Якщо екземпляр було розгорнуто з одним інтерфейсом **eth0** ``WAN`` і потрібно додати новий. Щоб додати новий інтерфейс, приклад **eth1** ``LAN``, вам потрібно вимкнути екземпляр. Приєднайте інтерфейс до порталу Azure, а потім запустіть екземпляр." #: ../../installation/update.rst:25 msgid "If there is not enough **free disk space available**, the installation will be canceled. To delete images use the :opcmd:`delete system image` command." -msgstr "If there is not enough **free disk space available**, the installation will be canceled. To delete images use the :opcmd:`delete system image` command." +msgstr "Якщо недостатньо **вільного місця на диску**, встановлення буде скасовано. Щоб видалити зображення, використовуйте команду :opcmd:`delete system image`." #: ../../installation/cloud/azure.rst:57 msgid "If using as a router, you will want your LAN interface to absorb some or all of the traffic from your VNET by using a route table applied to the subnet." -msgstr "If using as a router, you will want your LAN interface to absorb some or all of the traffic from your VNET by using a route table applied to the subnet." +msgstr "У разі використання як маршрутизатора вам потрібно, щоб інтерфейс локальної мережі поглинав частину або весь трафік із вашої VNET за допомогою таблиці маршрутів, застосованої до підмережі." #: ../../installation/virtual/libvirt.rst:93 msgid "If you can not go to this screen" @@ -896,262 +904,262 @@ msgstr "If you can not go to this screen" #: ../../installation/install.rst:319 msgid "If you find difficulties with this method, prefer to use a GUI program, or have a different operating system, there are other programs you can use to create a bootable USB drive, like balenaEtcher_ (for GNU/Linux, macOS and Windows), Rufus_ (for Windows) and `many others`_. You can follow their instructions to create a bootable USB drive from an .iso file." -msgstr "If you find difficulties with this method, prefer to use a GUI program, or have a different operating system, there are other programs you can use to create a bootable USB drive, like balenaEtcher_ (for GNU/Linux, macOS and Windows), Rufus_ (for Windows) and `many others`_. You can follow their instructions to create a bootable USB drive from an .iso file." +msgstr "Якщо у вас виникають труднощі з цим методом, ви віддаєте перевагу використанню програми з графічним інтерфейсом користувача або іншої операційної системи, є інші програми, якими ви можете скористатися для створення завантажувального USB-накопичувача, наприклад balenaEtcher_ (для GNU/Linux, macOS і Windows), Rufus_ (для Windows) та `багато інших`_. Ви можете виконати їхні вказівки, щоб створити завантажувальний USB-накопичувач із файлу .iso." #: ../../installation/install.rst:280 msgid "If you have a GNU+Linux system, you can create your VyOS bootable USB stick with with the ``dd`` command:" -msgstr "If you have a GNU+Linux system, you can create your VyOS bootable USB stick with with the ``dd`` command:" +msgstr "Якщо у вас система GNU+Linux, ви можете створити свій завантажувальний USB-накопичувач VyOS за допомогою команди ``dd``:" #: ../../installation/image.rst:114 msgid "If you have access to the console, there is a another way to select your booting image: reboot and use the GRUB menu at startup." -msgstr "If you have access to the console, there is a another way to select your booting image: reboot and use the GRUB menu at startup." +msgstr "Якщо у вас є доступ до консолі, є інший спосіб вибрати завантажувальний образ: перезавантажте комп’ютер і скористайтеся меню GRUB під час запуску." #: ../../installation/update.rst:33 msgid "If you have any personal files, like some scripts you created, and you don't want them to be lost during the upgrade, make sure those files are stored in ``/config`` as this directory is always copied to newer installed images." -msgstr "If you have any personal files, like some scripts you created, and you don't want them to be lost during the upgrade, make sure those files are stored in ``/config`` as this directory is always copied to newer installed images." +msgstr "Якщо у вас є будь-які особисті файли, як-от деякі сценарії, які ви створили, і ви не хочете, щоб вони були втрачені під час оновлення, переконайтеся, що ці файли зберігаються в ``/config``, оскільки цей каталог завжди копіюється до нових встановлених образів ." #: ../../installation/image.rst:99 msgid "If you need to rollback to a previous image, you can easily do so. First check the available images through the :opcmd:`show system image` command and then select your image with the following command:" -msgstr "If you need to rollback to a previous image, you can easily do so. First check the available images through the :opcmd:`show system image` command and then select your image with the following command:" +msgstr "Якщо вам потрібно повернутися до попереднього зображення, ви можете легко це зробити. Спочатку перевірте доступні зображення за допомогою команди :opcmd:`show system image`, а потім виберіть зображення за допомогою такої команди:" #: ../../installation/cloud/azure.rst:63 msgid "If you want to create a new default route for VMs on the subnet, use **Address Prefix** ``0.0.0.0/0`` Also note that if you want to use this as a typical edge device, you'll want masquerade NAT for the ``WAN`` interface." -msgstr "If you want to create a new default route for VMs on the subnet, use **Address Prefix** ``0.0.0.0/0`` Also note that if you want to use this as a typical edge device, you'll want masquerade NAT for the ``WAN`` interface." +msgstr "Якщо ви хочете створити новий маршрут за замовчуванням для віртуальних машин у підмережі, використовуйте **Префікс адреси** ``0.0.0.0/0`` Також зауважте, що якщо ви хочете використовувати це як типовий крайовий пристрій, ви захочете маскарад NAT для інтерфейсу ``WAN``." #: ../../installation/vyos-on-baremetal.rst:26 msgid "If you want to get additional ethernet ports or even 10GE connectivity the following optional parts will be required:" -msgstr "If you want to get additional ethernet ports or even 10GE connectivity the following optional parts will be required:" +msgstr "Якщо ви хочете отримати додаткові порти Ethernet або навіть підключення 10GE, знадобляться такі додаткові частини:" #: ../../installation/image.rst:5 msgid "Image Management" -msgstr "Image Management" +msgstr "Управління зображеннями" #: ../../installation/virtual/gns3.rst:90 msgid "In **Category** select in which group you want to find your VM." -msgstr "In **Category** select in which group you want to find your VM." +msgstr "У **Категорії** виберіть, у якій групі ви хочете знайти свою віртуальну машину." #: ../../installation/install.rst:231 msgid "In 2015, OpenBSD introduced signify. An alternative implementation of the same protocol is minisign, which is also available for Windows and macOS, and in most GNU/Linux distros it's in the repositories now." -msgstr "In 2015, OpenBSD introduced signify. An alternative implementation of the same protocol is minisign, which is also available for Windows and macOS, and in most GNU/Linux distros it's in the repositories now." +msgstr "У 2015 році OpenBSD представила signify. Альтернативною реалізацією того самого протоколу є minisign, який також доступний для Windows і macOS, і в більшості дистрибутивів GNU/Linux він зараз є в репозиторіях." #: ../../installation/cloud/gcp.rst:20 msgid "In name \"vyos@mypc\" The first value must be \"**vyos**\". Because default user is vyos and google api uses this option." -msgstr "In name \"vyos@mypc\" The first value must be \"**vyos**\". Because default user is vyos and google api uses this option." +msgstr "В імені "vyos@mypc" Перше значення має бути "**vyos**". Оскільки користувач за умовчанням — vyos, а google api використовує цей параметр." #: ../../installation/install.rst:354 msgid "In order to proceed with a permanent installation:" -msgstr "In order to proceed with a permanent installation:" +msgstr "Щоб продовжити постійне встановлення:" #: ../../installation/virtual/gns3.rst:114 msgid "In the **Advanced** tab, unmark the checkbox **Use as a linked base VM** and click ``OK``, which will save and close the **QEMU VM template configuration** window." -msgstr "In the **Advanced** tab, unmark the checkbox **Use as a linked base VM** and click ``OK``, which will save and close the **QEMU VM template configuration** window." +msgstr "На вкладці **Додатково** зніміть прапорець **Використовувати як зв’язану базову віртуальну машину** та натисніть ``ОК``, що збереже та закриє вікно **Конфігурація шаблону віртуальної машини QEMU**." #: ../../installation/virtual/gns3.rst:85 msgid "In the **General settings** tab of your **QEMU VM template configuration**, do the following:" -msgstr "In the **General settings** tab of your **QEMU VM template configuration**, do the following:" +msgstr "На вкладці **Загальні налаштування** вашої **Конфігурації шаблону QEMU VM** виконайте такі дії:" #: ../../installation/virtual/gns3.rst:108 msgid "In the **Network** tab, set **0** as the number of adapters, set the **Name format** to **eth{0}** and the **Type** to **Paravirtualized Network I/O (virtio-net-pci)**." -msgstr "In the **Network** tab, set **0** as the number of adapters, set the **Name format** to **eth{0}** and the **Type** to **Paravirtualized Network I/O (virtio-net-pci)**." +msgstr "На вкладці **Мережа** встановіть **0** як кількість адаптерів, встановіть **Формат імені** на **eth{0}** і **Тип** на **Паравіртуалізована мережа I/O (virtio-net-pci)**." #: ../../installation/install.rst:494 msgid "In the example we configured our existent VyOS as the TFTP server too:" -msgstr "In the example we configured our existent VyOS as the TFTP server too:" +msgstr "У прикладі ми також налаштували нашу існуючу VyOS як сервер TFTP:" #: ../../installation/install.rst:454 msgid "In this example we configured an existent VyOS as the DHCP server:" -msgstr "In this example we configured an existent VyOS as the DHCP server:" +msgstr "У цьому прикладі ми налаштували існуючу VyOS як сервер DHCP:" #: ../../installation/vyos-on-baremetal.rst:410 msgid "Install VyOS:" -msgstr "Install VyOS:" +msgstr "Встановити VyOS:" #: ../../installation/install.rst:5 #: ../../installation/vyos-on-baremetal.rst:352 msgid "Installation" -msgstr "Installation" +msgstr "монтаж" #: ../../installation/index.rst:3 msgid "Installation and Image Management" -msgstr "Installation and Image Management" +msgstr "Встановлення та керування зображеннями" #: ../../installation/install.rst:597 msgid "Installation can then continue as outlined above." -msgstr "Installation can then continue as outlined above." +msgstr "Після цього встановлення можна продовжити, як зазначено вище." #: ../../installation/vyos-on-baremetal.rst:224 msgid "Installing the rolling release on an APU2 board does not require any change on the serial console from your host side as :vytask:`T1327` was successfully implemented." -msgstr "Installing the rolling release on an APU2 board does not require any change on the serial console from your host side as :vytask:`T1327` was successfully implemented." +msgstr "Встановлення поточного випуску на платі APU2 не потребує жодних змін на послідовній консолі з боку вашого хоста, оскільки :vytask:`T1327` було успішно реалізовано." #: ../../installation/vyos-on-baremetal.rst:118 msgid "Intel Corporation AX200 mini-PCIe WiFi module, only supported in mPCIe slot 1. (see :ref:`wireless-interface-intel-ax200`)" -msgstr "Intel Corporation AX200 mini-PCIe WiFi module, only supported in mPCIe slot 1. (see :ref:`wireless-interface-intel-ax200`)" +msgstr "Модуль WiFi mini-PCIe Intel Corporation AX200, підтримується лише в гнізді 1 mPCIe. (див. :ref:`wireless-interface-intel-ax200`)" #: ../../installation/install.rst:15 msgid "Intended Use" -msgstr "Intended Use" +msgstr "Передбачуване використання" #: ../../installation/install.rst:29 msgid "Irregularly until EPA comes out" -msgstr "Irregularly until EPA comes out" +msgstr "Нерегулярно, поки не вийде EPA" #: ../../installation/install.rst:33 msgid "Irregularly until LTS comes out" -msgstr "Irregularly until LTS comes out" +msgstr "Нерегулярно, поки не вийде LTS" #: ../../installation/install.rst:110 msgid "It can be retrieved directly from a key server:" -msgstr "It can be retrieved directly from a key server:" +msgstr "Його можна отримати безпосередньо з сервера ключів:" #: ../../installation/virtual/vmware.rst:31 msgid "It is advised that VyOS routers are configured in a resource group with adequate memory reservations so that ballooning is not inflicted on virtual VyOS guests." -msgstr "It is advised that VyOS routers are configured in a resource group with adequate memory reservations so that ballooning is not inflicted on virtual VyOS guests." +msgstr "Рекомендується, щоб маршрутизатори VyOS були налаштовані в групі ресурсів з достатнім резервуванням пам’яті, щоб віртуальні гостьові системи VyOS не зазнавали посилення." #: ../../installation/install.rst:235 msgid "Its installed size (complete with libsodium) is less than that of GPG binary alone (not including libgcrypt and some other libs, which I think we only use for GPG). Since it uses elliptic curves, it gets away with much smaller keys, and it doesn't include as much metadata to begin with." -msgstr "Its installed size (complete with libsodium) is less than that of GPG binary alone (not including libgcrypt and some other libs, which I think we only use for GPG). Since it uses elliptic curves, it gets away with much smaller keys, and it doesn't include as much metadata to begin with." +msgstr "Його встановлений розмір (разом із libsodium) менший, ніж розмір двійкового файлу GPG (не враховуючи libgcrypt та деякі інші бібліотеки, які, я думаю, ми використовуємо лише для GPG). Оскільки він використовує еліптичні криві, він обходиться набагато меншими ключами, і він не містить так багато метаданих." #: ../../installation/install.rst:578 msgid "Known Issues" -msgstr "Known Issues" +msgstr "відомі проблеми" #: ../../installation/install.rst:92 msgid "LTS images are signed by the VyOS lead package-maintainer private key. With the official public key, the authenticity of the package can be verified. :abbr:`GPG (GNU Privacy Guard)` is used for verification." -msgstr "LTS images are signed by the VyOS lead package-maintainer private key. With the official public key, the authenticity of the package can be verified. :abbr:`GPG (GNU Privacy Guard)` is used for verification." +msgstr "Зображення LTS підписуються приватним ключем головного пакета супроводжувача VyOS. За допомогою офіційного відкритого ключа можна перевірити справжність пакета. :abbr:`GPG (GNU Privacy Guard)` використовується для перевірки." #: ../../installation/install.rst:29 msgid "Labs, small offices and non-critical production systems backed by a high-availability setup." -msgstr "Labs, small offices and non-critical production systems backed by a high-availability setup." +msgstr "Лабораторії, невеликі офіси та некритичні виробничі системи з високою надійністю." #: ../../installation/install.rst:37 msgid "Large-scale enterprise networks, internet service providers, critical production environments that call for minimum downtime." -msgstr "Large-scale enterprise networks, internet service providers, critical production environments that call for minimum downtime." +msgstr "Великі корпоративні мережі, постачальники послуг Інтернету, критичні виробничі середовища, які вимагають мінімального простою." #: ../../installation/vyos-on-baremetal.rst:32 msgid "Latest VyOS rolling releases boot without any problem on this board. You also receive a nice IPMI interface realized with an ASPEED AST2400 BMC (no information about `OpenBMC <https://www.openbmc.org/>`_ so far on this motherboard)." -msgstr "Latest VyOS rolling releases boot without any problem on this board. You also receive a nice IPMI interface realized with an ASPEED AST2400 BMC (no information about `OpenBMC <https://www.openbmc.org/>`_ so far on this motherboard)." +msgstr "Останні випуски VyOS без проблем завантажуються на цій платі. Ви також отримуєте гарний інтерфейс IPMI, реалізований за допомогою ASPEED AST2400 BMC (немає інформації про OpenBMC<https://www.openbmc.org/> `_ поки що на цій материнській платі)." #: ../../installation/virtual/libvirt.rst:7 msgid "Libvirt is an open-source API, daemon and management tool for managing platform virtualization. There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI. In an example we will be use use 4 gigabytes of memory, 2 cores CPU and default network virbr0." -msgstr "Libvirt is an open-source API, daemon and management tool for managing platform virtualization. There are several ways to deploy VyOS on libvirt kvm. Use Virt-manager and native CLI. In an example we will be use use 4 gigabytes of memory, 2 cores CPU and default network virbr0." +msgstr "Libvirt — це API з відкритим кодом, демон і інструмент керування для керування віртуалізацією платформи. Є кілька способів розгорнути VyOS на libvirt kvm. Використовуйте Virt-manager і нативний CLI. У прикладі ми будемо використовувати 4 гігабайти пам’яті, 2 ядра ЦП і мережу за замовчуванням virbr0." #: ../../installation/image.rst:33 msgid "List all available system images which can be booted on the current system." -msgstr "List all available system images which can be booted on the current system." +msgstr "Список усіх доступних системних образів, які можна завантажити в поточній системі." #: ../../installation/install.rst:267 msgid "Live installation" -msgstr "Live installation" +msgstr "Жива установка" #: ../../installation/install.rst:356 msgid "Log into the VyOS live system (use the default credentials: vyos, vyos)" -msgstr "Log into the VyOS live system (use the default credentials: vyos, vyos)" +msgstr "Увійдіть у живу систему VyOS (використовуйте облікові дані за замовчуванням: vyos, vyos)" #: ../../installation/install.rst:558 msgid "Make sure the available directories and files in both TFTP and HTTP server have the right permissions to be accessed from the booting clients." -msgstr "Make sure the available directories and files in both TFTP and HTTP server have the right permissions to be accessed from the booting clients." +msgstr "Переконайтеся, що доступні каталоги та файли як на сервері TFTP, так і на HTTP-сервері мають відповідні дозволи для доступу із завантажувальних клієнтів." #: ../../installation/virtual/vmware.rst:18 msgid "Memory Contention Considerations" -msgstr "Memory Contention Considerations" +msgstr "Розгляд пам’яті" #: ../../installation/virtual/docker.rst:20 msgid "Method 1: Create a docker network with IPv6 support" -msgstr "Method 1: Create a docker network with IPv6 support" +msgstr "Спосіб 1. Створіть мережу докерів із підтримкою IPv6" #: ../../installation/virtual/docker.rst:29 msgid "Method 2: Add IPv6 support to the docker daemon" -msgstr "Method 2: Add IPv6 support to the docker daemon" +msgstr "Спосіб 2. Додайте підтримку IPv6 до демона докерів" #: ../../installation/migrate-from-vyatta.rst:4 msgid "Migrate from Vyatta Core" -msgstr "Migrate from Vyatta Core" +msgstr "Перехід із Vyatta Core" #: ../../installation/install.rst:214 msgid "Minisign verification" -msgstr "Minisign verification" +msgstr "Перевірка мінізнаку" #: ../../installation/virtual/libvirt.rst:148 #: ../../installation/virtual/libvirt.rst:184 msgid "Name of VM and network selection" -msgstr "Name of VM and network selection" +msgstr "Назва віртуальної машини та вибір мережі" #: ../../installation/update.rst:6 msgid "New system images can be added using the :opcmd:`add system image` command. The command will extract the chosen image and will prompt you to use the current system configuration and SSH security keys, allowing for the new image to boot using the current configuration." -msgstr "New system images can be added using the :opcmd:`add system image` command. The command will extract the chosen image and will prompt you to use the current system configuration and SSH security keys, allowing for the new image to boot using the current configuration." +msgstr "Нові образи системи можна додати за допомогою команди :opcmd:`add system image`. Ця команда витягне вибраний образ і запропонує використати поточну конфігурацію системи та ключі безпеки SSH, що дозволить завантажувати новий образ із використанням поточної конфігурації." #: ../../installation/migrate-from-vyatta.rst:99 msgid "Next add the VyOS image." -msgstr "Next add the VyOS image." +msgstr "Далі додайте образ VyOS." #: ../../installation/install.rst:33 msgid "Non-critical production environments, preparing for the LTS release." -msgstr "Non-critical production environments, preparing for the LTS release." +msgstr "Некритичні робочі середовища, підготовка до випуску LTS." #: ../../installation/install.rst:68 msgid "Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available for everyone at https://github.com/vyos/vyos-build." -msgstr "Non-subscribers can always get the LTS release by building it from source. Instructions can be found in the :ref:`build` section of this manual. VyOS source code repository is available for everyone at https://github.com/vyos/vyos-build." +msgstr "Користувачі, які не передплатили, завжди можуть отримати випуск LTS, зібравши його з джерела. Інструкції можна знайти в розділі :ref:`build` цього посібника. Репозиторій вихідного коду VyOS доступний для всіх за адресою https://github.com/vyos/vyos-build." #: ../../installation/vyos-on-baremetal.rst:166 msgid "Now boot from the ``USB MSC Drive Generic Flash Disk 8.07`` media by pressing ``2``, the VyOS boot menu will appear, just wait 10 seconds or press ``Enter`` to continue." -msgstr "Now boot from the ``USB MSC Drive Generic Flash Disk 8.07`` media by pressing ``2``, the VyOS boot menu will appear, just wait 10 seconds or press ``Enter`` to continue." +msgstr "Тепер завантажтеся з носія ``USB MSC Drive Generic Flash Disk 8.07``, натиснувши ``2``, з’явиться меню завантаження VyOS, просто зачекайте 10 секунд або натисніть ``Enter``, щоб продовжити." #: ../../installation/virtual/gns3.rst:78 msgid "Now the VM settings have to be edited." -msgstr "Now the VM settings have to be edited." +msgstr "Тепер потрібно відредагувати налаштування віртуальної машини." #: ../../installation/install.rst:347 msgid "Older versions (prior to VyOS 1.1) used to support non-image installation (``install system`` command). Support for this has been removed from VyOS 1.2 and newer releases. Older releases can still be upgraded via the general ``add system image <image_path>`` upgrade command (consult :ref:`image-mgmt` for further information)." -msgstr "Older versions (prior to VyOS 1.1) used to support non-image installation (``install system`` command). Support for this has been removed from VyOS 1.2 and newer releases. Older releases can still be upgraded via the general ``add system image <image_path>`` upgrade command (consult :ref:`image-mgmt` for further information)." +msgstr "Старіші версії (до VyOS 1.1) використовувалися для підтримки інсталяції без образу (команда ``install system``). Підтримку цього було видалено з VyOS 1.2 і новіших випусків. Старіші випуски все ще можна оновити за допомогою загального ``додавання системного образу<image_path> `` команда оновлення (зверніться до :ref:`image-mgmt` для отримання додаткової інформації)." #: ../../installation/cloud/gcp.rst:35 msgid "On marketplace search \"VyOS\"" -msgstr "On marketplace search \"VyOS\"" +msgstr "На торговому майданчику шукайте "VyOS"" #: ../../installation/cloud/aws.rst:14 msgid "On the marketplace search \"VyOS\"" -msgstr "On the marketplace search \"VyOS\"" +msgstr "На маркетплейсі шукайте "VyOS"" #: ../../installation/cloud/azure.rst:17 msgid "On the marketplace search ``VyOS`` and choose the appropriate subscription" -msgstr "On the marketplace search ``VyOS`` and choose the appropriate subscription" +msgstr "На ринку знайдіть ``VyOS`` і виберіть відповідну підписку" #: ../../installation/install.rst:315 msgid "Once VyOS is completely loaded, enter the default credentials (login: vyos, password: vyos)." -msgstr "Once VyOS is completely loaded, enter the default credentials (login: vyos, password: vyos)." +msgstr "Після повного завантаження VyOS введіть облікові дані за замовчуванням (логін: vyos, пароль: vyos)." #: ../../installation/install.rst:309 msgid "Once ``dd`` has finished, pull the USB drive out and plug it into the powered-off computer where you want to install (or test) VyOS." -msgstr "Once ``dd`` has finished, pull the USB drive out and plug it into the powered-off computer where you want to install (or test) VyOS." +msgstr "Після завершення ``dd`` витягніть USB-накопичувач і підключіть його до вимкненого комп’ютера, на якому ви хочете встановити (або протестувати) VyOS." #: ../../installation/virtual/proxmox.rst:46 msgid "Once booted into the live system, type ``install image`` into the command line and follow the prompts to install VyOS to the virtual drive." -msgstr "Once booted into the live system, type ``install image`` into the command line and follow the prompts to install VyOS to the virtual drive." +msgstr "Після завантаження живої системи введіть ``install image`` у командному рядку та дотримуйтесь підказок, щоб установити VyOS на віртуальний диск." #: ../../installation/install.rst:572 msgid "Once finished you will be able to proceed with the ``install image`` command as in a regular VyOS installation." -msgstr "Once finished you will be able to proceed with the ``install image`` command as in a regular VyOS installation." +msgstr "Після завершення ви зможете продовжити команду ``install image``, як у звичайній установці VyOS." #: ../../installation/vyos-on-baremetal.rst:211 msgid "Once you ``commit`` the above changes access to the serial interface is lost until you set your terminal emulator to 115200 8N1 again." -msgstr "Once you ``commit`` the above changes access to the serial interface is lost until you set your terminal emulator to 115200 8N1 again." +msgstr "Після ``здійснення`` вищезазначених змін доступ до послідовного інтерфейсу буде втрачено, доки ви знову не встановите емулятор терміналу на 115200 8N1." #: ../../installation/update.rst:11 msgid "Only LTS releases are PGP-signed." -msgstr "Only LTS releases are PGP-signed." +msgstr "Лише випуски LTS мають підпис PGP." #: ../../installation/cloud/gcp.rst:24 msgid "Open GCP console and navigate to the menu **Metadata**. Choose **SSH Keys** and click ``edit``." -msgstr "Open GCP console and navigate to the menu **Metadata**. Choose **SSH Keys** and click ``edit``." +msgstr "Відкрийте консоль GCP і перейдіть до меню **Метадані**. Виберіть **Ключі SSH** і натисніть ``редагувати``." #: ../../installation/virtual/libvirt.rst:129 #: ../../installation/virtual/libvirt.rst:168 msgid "Open :abbr:`VMM (Virtual Machine Manager)` and Create a new :abbr:`VM (Virtual Machine)`" -msgstr "Open :abbr:`VMM (Virtual Machine Manager)` and Create a new :abbr:`VM (Virtual Machine)`" +msgstr "Відкрийте :abbr:`VMM (Virtual Machine Manager)` і створіть нову :abbr:`VM (Virtual Machine)`" #: ../../installation/virtual/gns3.rst:133 msgid "Open a console. The console should show the system booting. It will ask for the login credentials, you are at the VyOS live system." -msgstr "Open a console. The console should show the system booting. It will ask for the login credentials, you are at the VyOS live system." +msgstr "Відкрийте консоль. На консолі повинно відображатися завантаження системи. Він запитає облікові дані для входу, ви перебуваєте в живій системі VyOS." #: ../../installation/virtual/libvirt.rst:107 msgid "Open a secondary/parallel session and use this command to reboot the VM:" @@ -1159,80 +1167,80 @@ msgstr "Open a secondary/parallel session and use this command to reboot the VM: #: ../../installation/install.rst:283 msgid "Open your terminal emulator." -msgstr "Open your terminal emulator." +msgstr "Відкрийте емулятор терміналу." #: ../../installation/vyos-on-baremetal.rst:25 msgid "Optional (10GE)" -msgstr "Optional (10GE)" +msgstr "Додатково (10GE)" #: ../../installation/virtual/proxmox.rst:24 msgid "Optionally, the user can attach a CDROM with an ISO as a cloud-init data source. The below command assumes the ISO has been uploaded to the `local` storage pool with the name `seed.iso`." -msgstr "Optionally, the user can attach a CDROM with an ISO as a cloud-init data source. The below command assumes the ISO has been uploaded to the `local` storage pool with the name `seed.iso`." +msgstr "За бажанням користувач може приєднати компакт-диск із ISO як джерело даних хмарної ініціалізації. Команда нижче припускає, що ISO було завантажено в `локальний` пул зберігання з назвою `seed.iso`." #: ../../installation/install.rst:118 msgid "Or from the following block:" -msgstr "Or from the following block:" +msgstr "Або з наступного блоку:" #: ../../installation/install.rst:114 msgid "Or it can be accessed via a web browser:" -msgstr "Or it can be accessed via a web browser:" +msgstr "Або доступ до нього можна отримати через веб-браузер:" #: ../../installation/cloud/oracel.rst:3 msgid "Oracle" -msgstr "Oracle" +msgstr "Оракул" #: ../../installation/vyos-on-baremetal.rst:80 msgid "PC Engines APU4" -msgstr "PC Engines APU4" +msgstr "Двигуни ПК APU4" #: ../../installation/install.rst:427 msgid "PXE Boot" -msgstr "PXE Boot" +msgstr "Завантаження PXE" #: ../../installation/vyos-on-baremetal.rst:342 msgid "Partaker i5" -msgstr "Partaker i5" +msgstr "Партнер i5" #: ../../installation/install.rst:332 msgid "Permanent installation" -msgstr "Permanent installation" +msgstr "Стаціонарна установка" #: ../../installation/vyos-on-baremetal.rst:38 #: ../../installation/vyos-on-baremetal.rst:234 msgid "Pictures" -msgstr "Pictures" +msgstr "Картинки" #: ../../installation/vyos-on-baremetal.rst:355 msgid "Plug in VGA, power, USB keyboard, and USB drive" -msgstr "Plug in VGA, power, USB keyboard, and USB drive" +msgstr "Підключіть VGA, живлення, USB-клавіатуру та USB-накопичувач" #: ../../installation/install.rst:218 msgid "Popularity of GPG for release signing comes from the fact that many people already had it installed for email encryption/signing. Inside a VyOS image, signature checking is the only reason to have it installed. However, it still comes with all the features no one needs, such as support for multiple outdated cipher suits and ability to embed a photo in the key file. More importantly, web of trust, the basic premise of PGP, is never used in release signing context. Once you have a knowingly authentic image, authenticity of upgrades is checked using a key that comes in the image, and to get their first image people never rely on keyservers either." -msgstr "Popularity of GPG for release signing comes from the fact that many people already had it installed for email encryption/signing. Inside a VyOS image, signature checking is the only reason to have it installed. However, it still comes with all the features no one needs, such as support for multiple outdated cipher suits and ability to embed a photo in the key file. More importantly, web of trust, the basic premise of PGP, is never used in release signing context. Once you have a knowingly authentic image, authenticity of upgrades is checked using a key that comes in the image, and to get their first image people never rely on keyservers either." +msgstr "Популярність GPG для підписання випусків пояснюється тим, що багато людей уже встановили його для шифрування/підпису електронної пошти. Усередині образу VyOS перевірка підпису є єдиною причиною його встановлення. Однак він все ще має всі функції, які нікому не потрібні, наприклад підтримку кількох застарілих шифрів і можливість вставляти фотографію у файл ключа. Що ще важливіше, мережа довіри, основна передумова PGP, ніколи не використовується в контексті підписання випуску. Якщо у вас є завідомо автентичне зображення, автентичність оновлень перевіряється за допомогою ключа, який міститься в образі, і щоб отримати своє перше зображення, люди також ніколи не покладаються на сервери ключів." #: ../../installation/vyos-on-baremetal.rst:324 msgid "Power supply is a 12VDC barrel jack, and included switching power supply, which is why SATA power regulation is on-board. Internally it has a NUC-board-style on-board 12V input header as well, the molex locking style." -msgstr "Power supply is a 12VDC barrel jack, and included switching power supply, which is why SATA power regulation is on-board. Internally it has a NUC-board-style on-board 12V input header as well, the molex locking style." +msgstr "Джерело живлення — це гніздо 12 В постійного струму, а також включений імпульсний блок живлення, тому регулювання живлення SATA є вбудованим. Внутрішньо він також має вбудований вхідний роз’єм 12 В у стилі плати NUC, стиль блокування molex." #: ../../installation/install.rst:312 msgid "Power the computer on, making sure it boots from the USB drive (you might need to select booting device or change booting settings)." -msgstr "Power the computer on, making sure it boots from the USB drive (you might need to select booting device or change booting settings)." +msgstr "Увімкніть комп’ютер, переконавшись, що він завантажується з USB-накопичувача (може знадобитися вибрати завантажувальний пристрій або змінити параметри завантаження)." #: ../../installation/virtual/proxmox.rst:38 msgid "Prepare VM for installation from ISO media. The commands below assume that your iso is available in a storage pool 'local', that you want it to have a VM ID '200' and want to create a new disk on storage pool 'local-lvm' of size 15GB." -msgstr "Prepare VM for installation from ISO media. The commands below assume that your iso is available in a storage pool 'local', that you want it to have a VM ID '200' and want to create a new disk on storage pool 'local-lvm' of size 15GB." +msgstr "Підготуйте віртуальну машину до встановлення з носія ISO. Наведені нижче команди припускають, що ваш iso доступний у пулі сховищ «local», що ви хочете, щоб він мав ідентифікатор віртуальної машини «200» і хочете створити новий диск у пулі сховищ «local-lvm» розміром 15 ГБ." #: ../../installation/install.rst:100 msgid "Preparing for the verification" -msgstr "Preparing for the verification" +msgstr "Підготовка до перевірки" #: ../../installation/vyos-on-baremetal.rst:356 msgid "Press \"SW\" button on the front (this is the power button; I don't know what \"SW\" is supposed to mean)." -msgstr "Press \"SW\" button on the front (this is the power button; I don't know what \"SW\" is supposed to mean)." +msgstr "Натисніть кнопку «SW» на передній панелі (це кнопка живлення; я не знаю, що означає «SW»)." #: ../../installation/virtual/proxmox.rst:7 msgid "Proxmox is an open-source platform for virtualization. Please visit https://vyos.io to see how to get a qcow2 image that can be imported into Proxmox." -msgstr "Proxmox is an open-source platform for virtualization. Please visit https://vyos.io to see how to get a qcow2 image that can be imported into Proxmox." +msgstr "Proxmox — це платформа віртуалізації з відкритим кодом. Відвідайте https://vyos.io, щоб дізнатися, як отримати зображення qcow2, яке можна імпортувати в Proxmox." #: ../../installation/vyos-on-baremetal.rst:291 msgid "Qotom Q355G4" @@ -1240,31 +1248,31 @@ msgstr "Qotom Q355G4" #: ../../installation/vyos-on-baremetal.rst:240 msgid "Rack Mount" -msgstr "Rack Mount" +msgstr "Монтаж в стійку" #: ../../installation/install.rst:29 msgid "Rather stable. All development focuses on testing and hunting down remaining bugs following the feature freeze." -msgstr "Rather stable. All development focuses on testing and hunting down remaining bugs following the feature freeze." +msgstr "Досить стабільний. Уся розробка зосереджена на тестуванні та пошуку помилок, що залишилися після заморожування функції." #: ../../installation/vyos-on-baremetal.rst:404 msgid "Reboot into BIOS, Chipset > South Bridge > USB Configuration:" -msgstr "Reboot into BIOS, Chipset > South Bridge > USB Configuration:" +msgstr "Перезавантажте BIOS, Chipset > South Bridge > USB Configuration:" #: ../../installation/install.rst:416 msgid "Reboot the system." -msgstr "Reboot the system." +msgstr "Перезавантажте систему." #: ../../installation/virtual/proxmox.rst:48 msgid "Reboot the virtual machine using the GUI or ``qm reboot 200``." -msgstr "Reboot the virtual machine using the GUI or ``qm reboot 200``." +msgstr "Перезавантажте віртуальну машину за допомогою GUI або ``qm reboot 200``." #: ../../installation/vyos-on-baremetal.rst:114 msgid "Refer to :ref:`wireless-interface` for additional information, below listed modules have been tested successfully on this Hardware platform:" -msgstr "Refer to :ref:`wireless-interface` for additional information, below listed modules have been tested successfully on this Hardware platform:" +msgstr "Зверніться до :ref:`wireless-interface` для отримання додаткової інформації, наведені нижче модулі були успішно протестовані на цій апаратній платформі:" #: ../../installation/vyos-on-baremetal.rst:124 msgid "Refer to :ref:`wwan-interface` for additional information, below listed modules have been tested successfully on this Hardware platform using VyOS 1.3 (equuleus):" -msgstr "Refer to :ref:`wwan-interface` for additional information, below listed modules have been tested successfully on this Hardware platform using VyOS 1.3 (equuleus):" +msgstr "Зверніться до :ref:`wwan-interface` для отримання додаткової інформації, наведені нижче модулі були успішно протестовані на цій апаратній платформі за допомогою VyOS 1.3 (equuleus):" #: ../../installation/cloud/aws.rst:99 #: ../../installation/cloud/azure.rst:71 @@ -1273,35 +1281,39 @@ msgstr "Refer to :ref:`wwan-interface` for additional information, below listed #: ../../installation/virtual/eve-ng.rst:6 #: ../../installation/virtual/vmware.rst:40 msgid "References" -msgstr "References" +msgstr "Список літератури" #: ../../installation/install.rst:55 msgid "Registered Subscribers" -msgstr "Registered Subscribers" +msgstr "Зареєстровані передплатники" #: ../../installation/install.rst:57 msgid "Registered subscribers can log into https://support.vyos.io/ to access a variety of different downloads via the \"Downloads\" link. These downloads include LTS (Long-Term Support), the associated hot-fix releases, early public access releases, pre-built VM images, as well as device specific installation ISOs." -msgstr "Registered subscribers can log into https://support.vyos.io/ to access a variety of different downloads via the \"Downloads\" link. These downloads include LTS (Long-Term Support), the associated hot-fix releases, early public access releases, pre-built VM images, as well as device specific installation ISOs." +msgstr "Зареєстровані передплатники можуть увійти на сторінку https://support.vyos.io/, щоб отримати доступ до різноманітних завантажень за посиланням «Завантаження». Ці завантаження включають LTS (довгострокову підтримку), пов’язані випуски гарячих виправлень, ранні випуски для загального доступу, попередньо зібрані образи віртуальних машин, а також ISO для встановлення для окремих пристроїв." #: ../../installation/install.rst:15 msgid "Release Cycle" -msgstr "Release Cycle" +msgstr "Цикл випуску" #: ../../installation/install.rst:15 msgid "Release Type" -msgstr "Release Type" +msgstr "Тип випуску" #: ../../installation/virtual/docker.rst:41 msgid "Reload the docker configuration." -msgstr "Reload the docker configuration." +msgstr "Перезавантажте конфігурацію докера." #: ../../installation/virtual/gns3.rst:15 msgid "Requirements" -msgstr "Requirements" +msgstr "вимоги" #: ../../installation/cloud/aws.rst:69 msgid "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." -msgstr "Retreive an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +msgstr "Отримайте наявну конфігурацію CloudWatch Agent із сховища параметрів :abbr:`SSM (Systems Manager)`." + +#: ../../installation/cloud/aws.rst:69 +msgid "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." +msgstr "Retrieve an existing CloudWatch Agent configuration from the :abbr:`SSM (Systems Manager)` Parameter Store." #: ../../installation/install.rst:74 msgid "Rolling Release" @@ -1309,140 +1321,140 @@ msgstr "Rolling Release" #: ../../installation/install.rst:79 msgid "Rolling releases contain all the latest enhancements and fixes. This means that there will be new bugs of course. If you think you hit a bug please follow the guide at :ref:`bug_report`. We depend on your feedback to improve VyOS!" -msgstr "Rolling releases contain all the latest enhancements and fixes. This means that there will be new bugs of course. If you think you hit a bug please follow the guide at :ref:`bug_report`. We depend on your feedback to improve VyOS!" +msgstr "Поточні випуски містять усі останні вдосконалення та виправлення. Це означає, що, звичайно, будуть нові помилки. Якщо ви вважаєте, що у вас виникла помилка, будь ласка, дотримуйтеся посібника за адресою :ref:`bug_report`. Ми покладаємося на ваш відгук, щоб покращити VyOS!" #: ../../installation/cloud/aws.rst:90 msgid "Run Cloudwatch configuration wizard." -msgstr "Run Cloudwatch configuration wizard." +msgstr "Запустіть майстер налаштування Cloudwatch." #: ../../installation/install.rst:359 msgid "Run the ``install image`` command and follow the wizard:" -msgstr "Run the ``install image`` command and follow the wizard:" +msgstr "Виконайте команду ``install image`` і дотримуйтеся вказівок майстра:" #: ../../installation/cloud/index.rst:3 msgid "Running VyOS in Cloud Environments" -msgstr "Running VyOS in Cloud Environments" +msgstr "Запуск VyOS у хмарних середовищах" #: ../../installation/virtual/index.rst:3 msgid "Running VyOS in Virtual Environments" -msgstr "Running VyOS in Virtual Environments" +msgstr "Запуск VyOS у віртуальних середовищах" #: ../../installation/virtual/docker.rst:5 msgid "Running in Docker Container" -msgstr "Running in Docker Container" +msgstr "Запуск у контейнері Docker" #: ../../installation/vyos-on-baremetal.rst:5 msgid "Running on Bare Metal" -msgstr "Running on Bare Metal" +msgstr "Працює на Bare Metal" #: ../../installation/virtual/gns3.rst:5 msgid "Running on GNS3" -msgstr "Running on GNS3" +msgstr "Працює на GNS3" #: ../../installation/virtual/libvirt.rst:5 msgid "Running on Libvirt Qemu/KVM" -msgstr "Running on Libvirt Qemu/KVM" +msgstr "Працює на Libvirt Qemu/KVM" #: ../../installation/virtual/proxmox.rst:5 msgid "Running on Proxmox" -msgstr "Running on Proxmox" +msgstr "Працює на Proxmox" #: ../../installation/virtual/vmware.rst:4 msgid "Running on VMware ESXi" -msgstr "Running on VMware ESXi" +msgstr "Працює на VMware ESXi" #: ../../installation/vyos-on-baremetal.rst:399 msgid "Save, reboot and change serial speed to 9600 on your client." -msgstr "Save, reboot and change serial speed to 9600 on your client." +msgstr "Збережіть, перезавантажте та змініть послідовну швидкість на 9600 на вашому клієнті." #: ../../installation/virtual/gns3.rst:55 msgid "Select **New image** for the base disk image of your VM and click ``Create``." -msgstr "Select **New image** for the base disk image of your VM and click ``Create``." +msgstr "Виберіть **Новий образ** для базового образу диска вашої віртуальної машини та натисніть ``Створити``." #: ../../installation/virtual/gns3.rst:38 msgid "Select **Quemu VMs** and then click on the ``New`` button." -msgstr "Select **Quemu VMs** and then click on the ``New`` button." +msgstr "Виберіть **Quemu VMs**, а потім натисніть кнопку ``Новий``." #: ../../installation/virtual/gns3.rst:46 msgid "Select **qemu-system-x86_64** as Quemu binary, then **512MB** of RAM and click ``Next``." -msgstr "Select **qemu-system-x86_64** as Quemu binary, then **512MB** of RAM and click ``Next``." +msgstr "Виберіть **qemu-system-x86_64** як двійковий файл Quemu, потім **512 МБ** оперативної пам’яті та натисніть ``Далі``." #: ../../installation/virtual/gns3.rst:51 msgid "Select **telnet** as your console type and click ``Next``." -msgstr "Select **telnet** as your console type and click ``Next``." +msgstr "Виберіть **telnet** як тип консолі та натисніть ``Далі``." #: ../../installation/cloud/aws.rst:37 msgid "Select SSH key pair and click ``Launch Instances``" -msgstr "Select SSH key pair and click ``Launch Instances``" +msgstr "Виберіть пару ключів SSH і натисніть ``Запустити екземпляри``" #: ../../installation/image.rst:105 msgid "Select the default boot image which will be started on the next boot of the system." -msgstr "Select the default boot image which will be started on the next boot of the system." +msgstr "Виберіть стандартний завантажувальний образ, який буде запущено під час наступного завантаження системи." #: ../../installation/cloud/azure.rst:66 msgid "Serial Console" -msgstr "Serial Console" +msgstr "Послідовна консоль" #: ../../installation/virtual/gns3.rst:91 msgid "Set the **Boot priority** to **CD/DVD-ROM**." -msgstr "Set the **Boot priority** to **CD/DVD-ROM**." +msgstr "Установіть **Пріоритет завантаження** на **CD/DVD-ROM**." #: ../../installation/virtual/gns3.rst:69 msgid "Set the disk size to 2000 MiB, and click ``Finish`` to end the **Quemu image creator**." -msgstr "Set the disk size to 2000 MiB, and click ``Finish`` to end the **Quemu image creator**." +msgstr "Встановіть розмір диска на 2000 МБ і натисніть ``Готово``, щоб завершити роботу **Quemu image creator**." #: ../../installation/virtual/gns3.rst:165 msgid "Set the number of required network adapters, for example **4**." -msgstr "Set the number of required network adapters, for example **4**." +msgstr "Встановіть кількість необхідних мережевих адаптерів, наприклад **4**." #: ../../installation/vyos-on-baremetal.rst:14 #: ../../installation/vyos-on-baremetal.rst:99 msgid "Shopping Cart" -msgstr "Shopping Cart" +msgstr "Магазинний візок" #: ../../installation/image.rst:70 msgid "Show current system image version." -msgstr "Show current system image version." +msgstr "Показати поточну версію образу системи." #: ../../installation/vyos-on-baremetal.rst:128 msgid "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7304 miniPCIe (LTE)" #: ../../installation/vyos-on-baremetal.rst:129 msgid "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7430 miniPCIe (LTE)" #: ../../installation/vyos-on-baremetal.rst:130 msgid "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7455 miniPCIe (LTE)" #: ../../installation/vyos-on-baremetal.rst:131 msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" -msgstr "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)" +msgstr "Карта Sierra Wireless AirPrime MC7710 miniPCIe (LTE)" #: ../../installation/vyos-on-baremetal.rst:228 msgid "Simply proceed with a regular image installation as described in :ref:`installation`." -msgstr "Simply proceed with a regular image installation as described in :ref:`installation`." +msgstr "Просто виконайте звичайне встановлення образу, як описано в :ref:`installation`." #: ../../installation/vyos-on-baremetal.rst:401 msgid "Some options have to be changed for VyOS to boot correctly. With XHCI enabled the installer can’t access the USB key. Enable EHCI instead." -msgstr "Some options have to be changed for VyOS to boot correctly. With XHCI enabled the installer can’t access the USB key. Enable EHCI instead." +msgstr "Для правильного завантаження VyOS потрібно змінити деякі параметри. Якщо XHCI увімкнено, програма встановлення не може отримати доступ до USB-ключа. Натомість увімкніть EHCI." #: ../../installation/virtual/gns3.rst:7 msgid "Sometimes you may want to test VyOS in a lab environment. `GNS3 <http://www.gns3.com>`__ is a network emulation software you might use for it." -msgstr "Sometimes you may want to test VyOS in a lab environment. `GNS3 <http://www.gns3.com>`__ is a network emulation software you might use for it." +msgstr "Іноді ви можете протестувати VyOS у лабораторному середовищі. `GNS3<http://www.gns3.com> `__ — це програмне забезпечення для емуляції мережі, яке можна використовувати для цього." #: ../../installation/virtual/gns3.rst:132 msgid "Start the VM." -msgstr "Start the VM." +msgstr "Запустіть віртуальну машину." #: ../../installation/virtual/proxmox.rst:44 msgid "Start the VM using the command ``qm start 200`` or using the start button located in the proxmox GUI." -msgstr "Start the VM using the command ``qm start 200`` or using the start button located in the proxmox GUI." +msgstr "Запустіть віртуальну машину за допомогою команди ``qm start 200`` або за допомогою кнопки запуску, розташованої в графічному інтерфейсі proxmox." #: ../../installation/virtual/proxmox.rst:30 msgid "Start the virtual machine in the proxmox GUI or CLI using ``qm start 200``." -msgstr "Start the virtual machine in the proxmox GUI or CLI using ``qm start 200``." +msgstr "Запустіть віртуальну машину в графічному інтерфейсі proxmox або CLI за допомогою ``qm start 200``." #: ../../installation/virtual/libvirt.rst:100 msgid "Stayed in this stage. This is because the KVM console is chosen as the default boot option." @@ -1450,23 +1462,23 @@ msgstr "Stayed in this stage. This is because the KVM console is chosen as the d #: ../../installation/install.rst:446 msgid "Step 1: DHCP" -msgstr "Step 1: DHCP" +msgstr "Крок 1: DHCP" #: ../../installation/install.rst:477 msgid "Step 2: TFTP" -msgstr "Step 2: TFTP" +msgstr "Крок 2: TFTP" #: ../../installation/install.rst:534 msgid "Step 3: HTTP" -msgstr "Step 3: HTTP" +msgstr "Крок 3: HTTP" #: ../../installation/install.rst:175 msgid "Store the key in a new text file and import it into GPG via: ``gpg --import file_with_the_public_key``" -msgstr "Store the key in a new text file and import it into GPG via: ``gpg --import file_with_the_public_key``" +msgstr "Збережіть ключ у новому текстовому файлі та імпортуйте його до GPG за допомогою: ``gpg --import file_with_the_public_key``" #: ../../installation/install.rst:37 msgid "Subscribers, contributors, non-profits, emergency services, academic institutions" -msgstr "Subscribers, contributors, non-profits, emergency services, academic institutions" +msgstr "Передплатники, дописувачі, некомерційні організації, екстрені служби, наукові установи" #: ../../installation/vyos-on-baremetal.rst:8 msgid "Supermicro A2SDi (Atom C3000)" @@ -1474,147 +1486,147 @@ msgstr "Supermicro A2SDi (Atom C3000)" #: ../../installation/image.rst:97 msgid "System rollback" -msgstr "System rollback" +msgstr "Відкат системи" #: ../../installation/vyos-on-baremetal.rst:396 msgid "Terminal Type : VT100+" -msgstr "Terminal Type : VT100+" +msgstr "Тип клеми: VT100+" #: ../../installation/virtual/gns3.rst:144 msgid "The *VyOS-hda.qcow2* file now contains a working VyOS image and can be used as a template. But it still needs some fixes before we can deploy VyOS in our labs." -msgstr "The *VyOS-hda.qcow2* file now contains a working VyOS image and can be used as a template. But it still needs some fixes before we can deploy VyOS in our labs." +msgstr "Файл *VyOS-hda.qcow2* тепер містить робочий образ VyOS і може використовуватися як шаблон. Але все ще потребує деяких виправлень, перш ніж ми зможемо розгорнути VyOS у наших лабораторіях." #: ../../installation/install.rst:452 msgid "The *bootfile name* (DHCP option 67), which is *pxelinux.0*" -msgstr "The *bootfile name* (DHCP option 67), which is *pxelinux.0*" +msgstr "*Назва завантажувального файлу* (параметр DHCP 67), тобто *pxelinux.0*" #: ../../installation/install.rst:482 msgid "The *ldlinux.c32* file from the Syslinux distribution" -msgstr "The *ldlinux.c32* file from the Syslinux distribution" +msgstr "Файл *ldlinux.c32* із дистрибутива Syslinux" #: ../../installation/install.rst:481 msgid "The *pxelinux.0* file from the Syslinux distribution" -msgstr "The *pxelinux.0* file from the Syslinux distribution" +msgstr "Файл *pxelinux.0* із дистрибутива Syslinux" #: ../../installation/vyos-on-baremetal.rst:105 msgid "The 19\" enclosure can accommodate up to two APU4 boards - there is a single and dual front cover." -msgstr "The 19\" enclosure can accommodate up to two APU4 boards - there is a single and dual front cover." +msgstr "19-дюймовий корпус може вмістити до двох плат APU4 - є одинарна та подвійна передня кришка." #: ../../installation/vyos-on-baremetal.rst:187 msgid "The Kernel will now spin up using a different console setting. Set terminal emulator to 9600 8N1 and after a while your console will show:" -msgstr "The Kernel will now spin up using a different console setting. Set terminal emulator to 9600 8N1 and after a while your console will show:" +msgstr "Тепер ядро розгорнеться, використовуючи інші налаштування консолі. Встановіть емулятор терміналу на 9600 8N1, і через деякий час ваша консоль покаже:" #: ../../installation/install.rst:451 msgid "The TFTP server address (DHCP option 66). Sometimes referred as *boot server*" -msgstr "The TFTP server address (DHCP option 66). Sometimes referred as *boot server*" +msgstr "Адреса сервера TFTP (параметр 66 DHCP). Іноді називають *сервером завантаження*" #: ../../installation/virtual/gns3.rst:174 msgid "The VyOS VM is now ready to be deployed." -msgstr "The VyOS VM is now ready to be deployed." +msgstr "Віртуальна машина VyOS тепер готова до розгортання." #: ../../installation/image.rst:7 msgid "The VyOS image-based installation is implemented by creating a directory for each image on the storage device selected during the install process." -msgstr "The VyOS image-based installation is implemented by creating a directory for each image on the storage device selected during the install process." +msgstr "Встановлення VyOS на основі образу реалізується шляхом створення каталогу для кожного образу на пристрої зберігання, вибраному під час процесу встановлення." #: ../../installation/cloud/aws.rst:77 msgid "The VyOS platform-specific scripts feature is under development. Thus, this step should be repeated manually after changing system image (:doc:`/installation/update`)" -msgstr "The VyOS platform-specific scripts feature is under development. Thus, this step should be repeated manually after changing system image (:doc:`/installation/update`)" +msgstr "Функція сценаріїв для платформи VyOS знаходиться на стадії розробки. Таким чином, цей крок слід повторити вручну після зміни образу системи (:doc:`/installation/update`)" #: ../../installation/update.rst:20 msgid "The `add system image` command also supports installing new versions of VyOS through an optional given VRF. Also if URL in question requires authentication, you can specify an optional username and password via the commandline which will be passed as \"Basic-Auth\" to the server." -msgstr "The `add system image` command also supports installing new versions of VyOS through an optional given VRF. Also if URL in question requires authentication, you can specify an optional username and password via the commandline which will be passed as \"Basic-Auth\" to the server." +msgstr "Команда `add system image` також підтримує інсталяцію нових версій VyOS через додатковий заданий VRF. Крім того, якщо відповідна URL-адреса потребує автентифікації, ви можете вказати необов’язкове ім’я користувача та пароль за допомогою командного рядка, який буде передано на сервер як «Basic-Auth»." #: ../../installation/cloud/aws.rst:67 msgid "The amazon-cloudwatch-agent package is normally included in VyOS 1.3.3+ and 1.4+" -msgstr "The amazon-cloudwatch-agent package is normally included in VyOS 1.3.3+ and 1.4+" +msgstr "Пакет amazon-cloudwatch-agent зазвичай входить у VyOS 1.3.3+ і 1.4+" #: ../../installation/vyos-on-baremetal.rst:94 msgid "The board can be powered via 12V from the front or via a 5V onboard connector." -msgstr "The board can be powered via 12V from the front or via a 5V onboard connector." +msgstr "Живлення плати може здійснюватися через 12 В спереду або через вбудований роз’єм 5 В." #: ../../installation/vyos-on-baremetal.rst:314 msgid "The chassis is a U-shaped alu extrusion with removable I/O plates and removable bottom plate. Cooling is completely passive with a heatsink on the SoC with internal and external fins, a flat interface surface, thermal pad on top of that, which then directly attaches to the chassis, which has fins as well. It comes with mounting hardware and rubber feet, so you could place it like a desktop model or mount it on a VESA mount, or even wall mount it with the provided mounting plate. The closing plate doubles as internal 2.5\" mounting place for an HDD or SSD, and comes supplied with a small SATA cable and SATA power cable." -msgstr "The chassis is a U-shaped alu extrusion with removable I/O plates and removable bottom plate. Cooling is completely passive with a heatsink on the SoC with internal and external fins, a flat interface surface, thermal pad on top of that, which then directly attaches to the chassis, which has fins as well. It comes with mounting hardware and rubber feet, so you could place it like a desktop model or mount it on a VESA mount, or even wall mount it with the provided mounting plate. The closing plate doubles as internal 2.5\" mounting place for an HDD or SSD, and comes supplied with a small SATA cable and SATA power cable." +msgstr "Корпус являє собою U-подібний алюмінієвий корпус зі знімними пластинами вводу/виводу та знімною нижньою пластиною. Охолодження повністю пасивне з радіатором на SoC із внутрішніми та зовнішніми ребрами, плоскою поверхнею інтерфейсу, термопрокладкою поверх неї, яка потім безпосередньо кріпиться до шасі, яке також має ребра. Він постачається з монтажними пристроями та гумовими ніжками, тож ви можете розмістити його як настільну модель або встановити на кріплення VESA, або навіть закріпити на стіні за допомогою монтажної пластини, що входить у комплект. Закриваюча пластина служить внутрішнім 2,5-дюймовим місцем для встановлення жорсткого диска або твердотільного накопичувача та постачається з невеликим кабелем SATA та кабелем живлення SATA." #: ../../installation/virtual/proxmox.rst:15 msgid "The commands below assume that virtual machine ID 200 is unused and that the user wants the disk stored in a storage pool called `local-lvm`." -msgstr "The commands below assume that virtual machine ID 200 is unused and that the user wants the disk stored in a storage pool called `local-lvm`." +msgstr "Наведені нижче команди припускають, що ідентифікатор віртуальної машини 200 не використовується і що користувач хоче зберігати диск у пулі зберігання під назвою `local-lvm`." #: ../../installation/virtual/libvirt.rst:55 msgid "The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)` images is that they don't need to be installed. Download predefined VyOS.qcow2 image for ``KVM``" -msgstr "The convenience of using :abbr:`KVM (Kernel-based Virtual Machine)` images is that they don't need to be installed. Download predefined VyOS.qcow2 image for ``KVM``" +msgstr "Зручність використання образів :abbr:`KVM (віртуальна машина на основі ядра)` полягає в тому, що їх не потрібно інсталювати. Завантажте попередньо визначений образ VyOS.qcow2 для ``KVM``" #: ../../installation/install.rst:326 msgid "The default username and password for the live system is *vyos*." -msgstr "The default username and password for the live system is *vyos*." +msgstr "Ім’я користувача та пароль за умовчанням для живої системи — *vyos*." #: ../../installation/image.rst:10 msgid "The directory structure of the boot device:" -msgstr "The directory structure of the boot device:" +msgstr "Структура каталогів завантажувального пристрою:" #: ../../installation/virtual/gns3.rst:17 msgid "The following items are required:" -msgstr "The following items are required:" +msgstr "Необхідні такі елементи:" #: ../../installation/install.rst:84 msgid "The following link will always fetch the most recent VyOS build for AMD64 systems from the current branch: https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso" -msgstr "The following link will always fetch the most recent VyOS build for AMD64 systems from the current branch: https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso" +msgstr "Наступне посилання завжди буде отримувати найновішу збірку VyOS для систем AMD64 із поточної гілки: https://downloads.vyos.io/rolling/current/amd64/vyos-rolling-latest.iso" #: ../../installation/image.rst:19 msgid "The image directory contains the system kernel, a compressed image of the root filesystem for the OS, and a directory for persistent storage, such as configuration. On boot, the system will extract the OS image into memory and mount the appropriate live-rw sub-directories to provide persistent storage system configuration." -msgstr "The image directory contains the system kernel, a compressed image of the root filesystem for the OS, and a directory for persistent storage, such as configuration. On boot, the system will extract the OS image into memory and mount the appropriate live-rw sub-directories to provide persistent storage system configuration." +msgstr "Каталог образів містить ядро системи, стислий образ кореневої файлової системи для ОС і каталог для постійного зберігання, наприклад конфігурації. Під час завантаження система витягне образ ОС у пам’ять і змонтує відповідні підкаталоги live-rw, щоб забезпечити постійну конфігурацію системи зберігання." #: ../../installation/vyos-on-baremetal.rst:180 msgid "The image will be loaded and the last lines you will get will be:" -msgstr "The image will be loaded and the last lines you will get will be:" +msgstr "Зображення буде завантажено, а останні рядки, які ви отримаєте, будуть:" #: ../../installation/install.rst:178 msgid "The import can be verified with:" -msgstr "The import can be verified with:" +msgstr "Імпорт можна перевірити за допомогою:" #: ../../installation/install.rst:486 msgid "The initial ramdisk of the VyOS ISO you want to deploy. That is the *initrd.img* file inside the */live* directory of the extracted contents from the ISO file. Do not use an empty (0 bytes) initrd.img file you might find, the correct file may have a longer name." -msgstr "The initial ramdisk of the VyOS ISO you want to deploy. That is the *initrd.img* file inside the */live* directory of the extracted contents from the ISO file. Do not use an empty (0 bytes) initrd.img file you might find, the correct file may have a longer name." +msgstr "Початковий RAM-диск VyOS ISO, який ви хочете розгорнути. Це файл *initrd.img* у каталозі */live* із витягнутим вмістом із файлу ISO. Не використовуйте порожній (0 байт) файл initrd.img, який ви можете знайти, правильний файл може мати довшу назву." #: ../../installation/vyos-on-baremetal.rst:293 msgid "The install on this Q355G4 box is pretty much plug and play. The port numbering the OS does might differ from the labels on the outside, but the UEFI firmware has a port blink test built in with MAC addresses so you can very quickly identify which is which. MAC labels are on the inside as well, and this test can be done from VyOS or plain Linux too. Default settings in the UEFI will make it boot, but depending on your installation wishes (i.e. storage type, boot type, console type) you might want to adjust them. This Qotom company seems to be the real OEM/ODM for many other relabelling companies like Protectli." -msgstr "The install on this Q355G4 box is pretty much plug and play. The port numbering the OS does might differ from the labels on the outside, but the UEFI firmware has a port blink test built in with MAC addresses so you can very quickly identify which is which. MAC labels are on the inside as well, and this test can be done from VyOS or plain Linux too. Default settings in the UEFI will make it boot, but depending on your installation wishes (i.e. storage type, boot type, console type) you might want to adjust them. This Qotom company seems to be the real OEM/ODM for many other relabelling companies like Protectli." +msgstr "Встановлення на цю коробку Q355G4 відбувається практично підключи та працюй. Нумерація портів ОС може відрізнятися від міток назовні, але мікропрограма UEFI має вбудований тест блимання портів із MAC-адресами, тож ви можете дуже швидко визначити, що є що. Мітки MAC також є всередині, і цей тест також можна виконати з VyOS або простого Linux. Параметри за замовчуванням в UEFI дозволять завантажуватись, але залежно від ваших побажань щодо встановлення (тобто типу сховища, типу завантаження, типу консолі) ви можете змінити їх. Ця компанія Qotom, здається, є справжнім OEM/ODM для багатьох інших компаній з перемаркування, таких як Protectli." #: ../../installation/install.rst:483 msgid "The kernel of the VyOS software you want to deploy. That is the *vmlinuz* file inside the */live* directory of the extracted contents from the ISO file." -msgstr "The kernel of the VyOS software you want to deploy. That is the *vmlinuz* file inside the */live* directory of the extracted contents from the ISO file." +msgstr "Ядро програмного забезпечення VyOS, яке ви хочете розгорнути. Це файл *vmlinuz* у каталозі */live* із витягнутим вмістом із файлу ISO." #: ../../installation/install.rst:47 msgid "The minimum system requirements are 1024 MiB RAM and 2 GiB storage. Depending on your use, you might need additional RAM and CPU resources e.g. when having multiple BGP full tables in your system." -msgstr "The minimum system requirements are 1024 MiB RAM and 2 GiB storage. Depending on your use, you might need additional RAM and CPU resources e.g. when having multiple BGP full tables in your system." +msgstr "Мінімальні системні вимоги — 1024 МБ оперативної пам’яті та 2 ГБ пам’яті. Залежно від використання, вам можуть знадобитися додаткові ресурси оперативної пам’яті та ЦП, наприклад, якщо у вашій системі є кілька повних таблиць BGP." #: ../../installation/update.rst:83 msgid "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:" -msgstr "The most up-do-date Rolling Release for AMD64 can be accessed using the following URL:" +msgstr "Найновішу поточну версію для AMD64 можна отримати за такою URL-адресою:" #: ../../installation/install.rst:107 msgid "The official VyOS public key can be retrieved in a number of ways. Skip to :ref:`gpg-verification` if the key is already present." -msgstr "The official VyOS public key can be retrieved in a number of ways. Skip to :ref:`gpg-verification` if the key is already present." +msgstr "Офіційний відкритий ключ VyOS можна отримати кількома способами. Перейдіть до :ref:`gpg-verification`, якщо ключ уже присутній." #: ../../installation/install.rst:197 msgid "The signature can be downloaded by appending `.asc` to the URL of the downloaded VyOS image. That small *.asc* file is the signature for the associated image." -msgstr "The signature can be downloaded by appending `.asc` to the URL of the downloaded VyOS image. That small *.asc* file is the signature for the associated image." +msgstr "Підпис можна завантажити, додавши `.asc` до URL-адреси завантаженого образу VyOS. Цей маленький файл *.asc* є підписом пов’язаного зображення." #: ../../installation/virtual/libvirt.rst:116 msgid "The system is fully operational." -msgstr "The system is fully operational." +msgstr "Система повністю працездатна." #: ../../installation/virtual/libvirt.rst:120 msgid "The virt-manager application is a desktop user interface for managing virtual machines through libvirt. On the linux open :abbr:`VMM (Virtual Machine Manager)`." -msgstr "The virt-manager application is a desktop user interface for managing virtual machines through libvirt. On the linux open :abbr:`VMM (Virtual Machine Manager)`." +msgstr "Програма virt-manager — це настільний інтерфейс користувача для керування віртуальними машинами через libvirt. У Linux відкрийте :abbr:`VMM (Virtual Machine Manager)`." #: ../../installation/install.rst:590 msgid "The workaround is to type `e` when the boot menu appears and edit the GRUB boot options. Specifically, remove the:" -msgstr "The workaround is to type `e` when the boot menu appears and edit the GRUB boot options. Specifically, remove the:" +msgstr "Обхідним шляхом є введення `e`, коли з’явиться меню завантаження, і редагування параметрів завантаження GRUB. Зокрема, видаліть:" #: ../../installation/vyos-on-baremetal.rst:421 msgid "Then VyOS should boot and you can perform the ``install image``" -msgstr "Then VyOS should boot and you can perform the ``install image``" +msgstr "Потім VyOS має завантажитися, і ви зможете виконати ``інсталяційний образ``" #: ../../installation/virtual/libvirt.rst:113 msgid "Then go to the first session where you opened the console. Select ``VyOS 1.4.x for QEMU (Serial console)`` and press ``Enter``" @@ -1622,68 +1634,68 @@ msgstr "Then go to the first session where you opened the console. Select ``VyOS #: ../../installation/image.rst:108 msgid "Then reboot the system." -msgstr "Then reboot the system." +msgstr "Потім перезавантажте систему." #: ../../installation/virtual/libvirt.rst:152 #: ../../installation/virtual/libvirt.rst:188 msgid "Then you will be taken to the console." -msgstr "Then you will be taken to the console." +msgstr "Потім ви перейдете до консолі." #: ../../installation/vyos-on-baremetal.rst:328 msgid "There are WDT options and auto-boot on power enable, which is great for remote setups. Firmware is reasonably secure (no backdoors found, BootGuard is enabled in enforcement mode, which is good but also means no coreboot option), yet has most options available to configure (so it's not locked out like most firmwares are)." -msgstr "There are WDT options and auto-boot on power enable, which is great for remote setups. Firmware is reasonably secure (no backdoors found, BootGuard is enabled in enforcement mode, which is good but also means no coreboot option), yet has most options available to configure (so it's not locked out like most firmwares are)." +msgstr "Є параметри WDT і автоматичне завантаження при включенні живлення, що чудово підходить для віддаленого налаштування. Мікропрограмне забезпечення достатньо безпечне (не знайдено бекдорів, BootGuard увімкнено в режимі примусового виконання, що добре, але також означає відсутність опції основного завантаження), але має більшість параметрів, доступних для налаштування (тому воно не заблоковано, як більшість мікропрограм)." #: ../../installation/vyos-on-baremetal.rst:306 msgid "There are a number of other options, but they all seem to be close to Intel reference designs, with added features like more serial ports, more network interfaces and the likes. Because they don't deviate too much from standard designs all the hardware is well-supported by mainline. It accepts one LPDDR3 SO-DIMM, but chances are that if you need more than that, you'll also want something even beefier than an i5. There are options for antenna holes, and SIM slots, so you could in theory add an LTE/Cell modem (not tested so far)." -msgstr "There are a number of other options, but they all seem to be close to Intel reference designs, with added features like more serial ports, more network interfaces and the likes. Because they don't deviate too much from standard designs all the hardware is well-supported by mainline. It accepts one LPDDR3 SO-DIMM, but chances are that if you need more than that, you'll also want something even beefier than an i5. There are options for antenna holes, and SIM slots, so you could in theory add an LTE/Cell modem (not tested so far)." +msgstr "Існує ряд інших варіантів, але всі вони, здається, близькі до еталонних проектів Intel, з додатковими функціями, такими як більше послідовних портів, більше мережевих інтерфейсів тощо. Оскільки вони не надто відрізняються від стандартних конструкцій, усе обладнання добре підтримується основною лінією. Він приймає один LPDDR3 SO-DIMM, але є ймовірність, що якщо вам потрібно більше, ви також захочете щось ще потужніше, ніж i5. Є варіанти для отворів для антени та слотів для SIM-карт, тож теоретично ви можете додати модем LTE/Cell (ще не перевірено)." #: ../../installation/virtual/vmware.rst:13 msgid "There have been previous documented issues with GRE/IPSEC tunneling using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been advised." -msgstr "There have been previous documented issues with GRE/IPSEC tunneling using the E1000 adapter on the VyOS guest, and use of the VMXNET3 has been advised." +msgstr "Раніше були задокументовані проблеми з тунелюванням GRE/IPSEC за допомогою адаптера E1000 на гостьовій системі VyOS, тому було рекомендовано використовувати VMXNET3." #: ../../installation/migrate-from-vyatta.rst:101 msgid "This example uses VyOS 1.0.0, however, it's better to install the latest release." -msgstr "This example uses VyOS 1.0.0, however, it's better to install the latest release." +msgstr "У цьому прикладі використовується VyOS 1.0.0, однак краще інсталювати останню версію." #: ../../installation/vyos-on-baremetal.rst:85 msgid "This guide was developed using an APU4C4 board with the following specs:" -msgstr "This guide was developed using an APU4C4 board with the following specs:" +msgstr "Цей посібник розроблено з використанням плати APU4C4 із такими характеристиками:" #: ../../installation/virtual/gns3.rst:11 msgid "This guide will provide the necessary steps for installing and setting up VyOS on GNS3." -msgstr "This guide will provide the necessary steps for installing and setting up VyOS on GNS3." +msgstr "Цей посібник містить необхідні кроки для встановлення та налаштування VyOS на GNS3." #: ../../installation/install.rst:580 msgid "This is a list of known issues that can arise during installation." -msgstr "This is a list of known issues that can arise during installation." +msgstr "Це список відомих проблем, які можуть виникнути під час встановлення." #: ../../installation/vyos-on-baremetal.rst:374 msgid "This microbox network appliance was build to create OpenVPN bridges. It can saturate a 100Mbps link. It is a small (serial console only) PC with 6 Gb LAN" -msgstr "This microbox network appliance was build to create OpenVPN bridges. It can saturate a 100Mbps link. It is a small (serial console only) PC with 6 Gb LAN" +msgstr "Цей мережевий пристрій microbox створено для створення мостів OpenVPN. Він може наситити посилання 100 Мбіт/с. Це невеликий (лише послідовна консоль) ПК з 6 Гб локальної мережі" #: ../../installation/image.rst:25 msgid "This process allows for a system to always boot to a known working state, as the OS image is fixed and non-persistent. It also allows for multiple releases of VyOS to be installed on the same storage device. The image can be selected manually at boot if needed, but the system will otherwise boot the image configured to be the default." -msgstr "This process allows for a system to always boot to a known working state, as the OS image is fixed and non-persistent. It also allows for multiple releases of VyOS to be installed on the same storage device. The image can be selected manually at boot if needed, but the system will otherwise boot the image configured to be the default." +msgstr "Цей процес дозволяє системі завжди завантажуватися до відомого робочого стану, оскільки образ ОС є фіксованим і непостійним. Це також дозволяє встановлювати кілька версій VyOS на один пристрій зберігання даних. Образ можна вибрати вручну під час завантаження, якщо це необхідно, але інакше система завантажить образ, налаштований як стандартний." #: ../../installation/cloud/aws.rst:75 msgid "This step also enables systemd service and runs it." -msgstr "This step also enables systemd service and runs it." +msgstr "Цей крок також включає службу systemd і запускає її." #: ../../installation/install.rst:96 msgid "This subsection only applies to LTS images, for Rolling images please jump to :ref:`live_installation`." -msgstr "This subsection only applies to LTS images, for Rolling images please jump to :ref:`live_installation`." +msgstr "Цей підрозділ стосується лише зображень LTS, для рухомих зображень перейдіть до :ref:`live_installation`." #: ../../installation/cloud/gcp.rst:8 msgid "To deploy VyOS on GCP (Google Cloud Platform)" -msgstr "To deploy VyOS on GCP (Google Cloud Platform)" +msgstr "Щоб розгорнути VyOS на GCP (Google Cloud Platform)" #: ../../installation/virtual/gns3.rst:153 msgid "To turn the template into a working VyOS machine, further steps are necessary as outlined below:" -msgstr "To turn the template into a working VyOS machine, further steps are necessary as outlined below:" +msgstr "Щоб перетворити шаблон на робочу машину VyOS, необхідні подальші кроки, як описано нижче:" #: ../../installation/cloud/aws.rst:55 msgid "To use Amazon CloudWatch Agent, configure it within the Amazon SSM Parameter Store. If you don't have a configuration yet, do :ref:`configuration_creation`." -msgstr "To use Amazon CloudWatch Agent, configure it within the Amazon SSM Parameter Store. If you don't have a configuration yet, do :ref:`configuration_creation`." +msgstr "Щоб використовувати Amazon CloudWatch Agent, налаштуйте його в Amazon SSM Parameter Store. Якщо у вас ще немає конфігурації, виконайте :ref:`configuration_creation`." #: ../../installation/update.rst:81 msgid "To use the `latest` option the \"system update-check url\" must be configured." @@ -1691,123 +1703,123 @@ msgstr "To use the `latest` option the \"system update-check url\" must be confi #: ../../installation/install.rst:248 msgid "To verify a VyOS image starting off with VyOS 1.3.0-rc6 you can run:" -msgstr "To verify a VyOS image starting off with VyOS 1.3.0-rc6 you can run:" +msgstr "Щоб перевірити образ VyOS, починаючи з VyOS 1.3.0-rc6, ви можете виконати:" #: ../../installation/install.rst:337 msgid "Unlike general purpose Linux distributions, VyOS uses \"image installation\" that mimics the user experience of traditional hardware routers and allows keeping multiple VyOS versions installed simultaneously. This makes it possible to switch to a previous version if something breaks or miss-behaves after an image upgrade." -msgstr "Unlike general purpose Linux distributions, VyOS uses \"image installation\" that mimics the user experience of traditional hardware routers and allows keeping multiple VyOS versions installed simultaneously. This makes it possible to switch to a previous version if something breaks or miss-behaves after an image upgrade." +msgstr "На відміну від дистрибутивів Linux загального призначення, VyOS використовує «встановлення образу», що імітує роботу з традиційними апаратними маршрутизаторами та дозволяє підтримувати інсталяцію кількох версій VyOS одночасно. Це дає змогу перейти до попередньої версії, якщо щось зламається або не працює після оновлення образу." #: ../../installation/install.rst:288 msgid "Unmount the USB drive. Replace X in the example below with the letter of your device and keep the asterisk (wildcard) to unmount all partitions." -msgstr "Unmount the USB drive. Replace X in the example below with the letter of your device and keep the asterisk (wildcard) to unmount all partitions." +msgstr "Відключіть USB-накопичувач. Замініть X у наведеному нижче прикладі літерою свого пристрою та збережіть зірочку (знак підстановки), щоб відключити всі розділи." #: ../../installation/update.rst:4 msgid "Update VyOS" -msgstr "Update VyOS" +msgstr "Оновіть VyOS" #: ../../installation/migrate-from-vyatta.rst:26 msgid "Upgrade procedure" -msgstr "Upgrade procedure" +msgstr "Процедура оновлення" #: ../../installation/migrate-from-vyatta.rst:156 msgid "Upon reboot, you should have a working installation of VyOS." -msgstr "Upon reboot, you should have a working installation of VyOS." +msgstr "Після перезавантаження у вас повинна бути робоча інсталяція VyOS." #: ../../installation/virtual/gns3.rst:60 msgid "Use the defaults in the **Binary and format** window and click ``Next``." -msgstr "Use the defaults in the **Binary and format** window and click ``Next``." +msgstr "Використовуйте значення за замовчуванням у вікні **Двійковий файл і формат** і натисніть ``Далі``." #: ../../installation/virtual/gns3.rst:65 msgid "Use the defaults in the **Qcow2 options** window and click ``Next``." -msgstr "Use the defaults in the **Qcow2 options** window and click ``Next``." +msgstr "Використовуйте значення за замовчуванням у вікні **параметрів Qcow2** і натисніть ``Далі``." #: ../../installation/vyos-on-baremetal.rst:205 msgid "Use the following command to adjust the :ref:`serial-console` settings:" -msgstr "Use the following command to adjust the :ref:`serial-console` settings:" +msgstr "Використовуйте таку команду, щоб налаштувати параметри :ref:`serial-console`:" #: ../../installation/update.rst:16 msgid "Use this command to install a new system image. You can reach the image from the web (``http://``, ``https://``) or from your local system, e.g. /tmp/vyos-1.2.3-amd64.iso." -msgstr "Use this command to install a new system image. You can reach the image from the web (``http://``, ``https://``) or from your local system, e.g. /tmp/vyos-1.2.3-amd64.iso." +msgstr "Використовуйте цю команду, щоб інсталювати новий образ системи. Ви можете отримати доступ до зображення з Інтернету (``http://``, ``https://``) або з локальної системи, наприклад, /tmp/vyos-1.2.3-amd64.iso." #: ../../installation/virtual/proxmox.rst:45 msgid "Using the proxmox webGUI, open the virtual console for your newly created vm. Login username/password is ``vyos/vyos``." -msgstr "Using the proxmox webGUI, open the virtual console for your newly created vm. Login username/password is ``vyos/vyos``." +msgstr "Використовуючи proxmox webGUI, відкрийте віртуальну консоль для новоствореної віртуальної машини. Ім’я користувача/пароль для входу: ``vyos/vyos``." #: ../../installation/virtual/gns3.rst:28 msgid "VM setup" -msgstr "VM setup" +msgstr "Налаштування віртуальної машини" #: ../../installation/virtual/libvirt.rst:119 msgid "Virt-manager" -msgstr "Virt-manager" +msgstr "Вірт-менеджер" #: ../../installation/virtual/proxmox.rst:54 msgid "Visit https://www.proxmox.com/en/ for more information about the download and installation of this hypervisor." -msgstr "Visit https://www.proxmox.com/en/ for more information about the download and installation of this hypervisor." +msgstr "Відвідайте https://www.proxmox.com/en/, щоб дізнатися більше про завантаження та встановлення цього гіпервізора." #: ../../installation/install.rst:272 msgid "VyOS, as other GNU+Linux distributions, can be tested without installing it in your hard drive. **With your downloaded VyOS .iso file you can create a bootable USB drive that will let you boot into a fully functional VyOS system**. Once you have tested it, you can either decide to begin a :ref:`permanent_installation` in your hard drive or power your system off, remove the USB drive, and leave everything as it was." -msgstr "VyOS, as other GNU+Linux distributions, can be tested without installing it in your hard drive. **With your downloaded VyOS .iso file you can create a bootable USB drive that will let you boot into a fully functional VyOS system**. Once you have tested it, you can either decide to begin a :ref:`permanent_installation` in your hard drive or power your system off, remove the USB drive, and leave everything as it was." +msgstr "VyOS, як і інші дистрибутиви GNU+Linux, можна перевірити, не встановлюючи його на жорсткий диск. **За допомогою завантаженого файлу VyOS .iso ви можете створити завантажувальний USB-накопичувач, який дозволить вам завантажитися в повнофункціональну систему VyOS**. Після перевірки ви можете або почати :ref:`permanent_installation` на жорсткому диску, або вимкнути систему, вийняти USB-накопичувач і залишити все як було." #: ../../installation/vyos-on-baremetal.rst:135 msgid "VyOS 1.2 (crux)" -msgstr "VyOS 1.2 (crux)" +msgstr "VyOS 1.2 (суть)" #: ../../installation/vyos-on-baremetal.rst:222 msgid "VyOS 1.2 (rolling)" -msgstr "VyOS 1.2 (rolling)" +msgstr "VyOS 1.2 (пробіг)" #: ../../installation/migrate-from-vyatta.rst:6 msgid "VyOS 1.x line aims to preserve backward compatibility and provide a safe upgrade path for existing Vyatta Core users. You may think of VyOS 1.0.0 as VC7.0." -msgstr "VyOS 1.x line aims to preserve backward compatibility and provide a safe upgrade path for existing Vyatta Core users. You may think of VyOS 1.0.0 as VC7.0." +msgstr "Лінія VyOS 1.x спрямована на збереження зворотної сумісності та забезпечення безпечного шляху оновлення для існуючих користувачів Vyatta Core. Ви можете вважати VyOS 1.0.0 VC7.0." #: ../../installation/install.rst:438 msgid "VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)" -msgstr "VyOS ISO image to be installed (do not use images prior to VyOS 1.2.3)" +msgstr "ISO-образ VyOS для встановлення (не використовуйте образи до VyOS 1.2.3)" #: ../../installation/virtual/gns3.rst:151 msgid "VyOS VM configuration" -msgstr "VyOS VM configuration" +msgstr "Конфігурація віртуальної машини VyOS" #: ../../installation/image.rst:110 msgid "VyOS automatically associates the configuration to the image, so you don't need to worry about that. Each image has a unique copy of its configuration." -msgstr "VyOS automatically associates the configuration to the image, so you don't need to worry about that. Each image has a unique copy of its configuration." +msgstr "VyOS автоматично пов’язує конфігурацію з образом, тому вам не потрібно про це турбуватися. Кожне зображення має унікальну копію своєї конфігурації." #: ../../installation/install.rst:429 msgid "VyOS can also be installed through PXE. This is a more complex installation method that allows deploying VyOS through the network." -msgstr "VyOS can also be installed through PXE. This is a more complex installation method that allows deploying VyOS through the network." +msgstr "VyOS також можна встановити через PXE. Це більш складний метод встановлення, який дозволяє розгортати VyOS через мережу." #: ../../installation/update.rst:29 msgid "VyOS configuration is associated to each image, and **each image has a unique copy of its configuration**. This is different than a traditional network router where the configuration is shared across all images." -msgstr "VyOS configuration is associated to each image, and **each image has a unique copy of its configuration**. This is different than a traditional network router where the configuration is shared across all images." +msgstr "Конфігурація VyOS пов’язана з кожним образом, і **кожен образ має унікальну копію конфігурації**. Це відрізняється від традиційного мережевого маршрутизатора, де конфігурація спільна для всіх зображень." #: ../../installation/vyos-on-baremetal.rst:263 msgid "VyOS custom print" -msgstr "VyOS custom print" +msgstr "Спеціальний друк VyOS" #: ../../installation/virtual/gns3.rst:128 msgid "VyOS installation" -msgstr "VyOS installation" +msgstr "Встановлення VyOS" #: ../../installation/install.rst:7 msgid "VyOS installation requires a downloaded VyOS .iso file. That file is a live install image that lets you boot a live VyOS. From the live system, you can proceed to a permanent installation on a hard drive or any other type of storage." -msgstr "VyOS installation requires a downloaded VyOS .iso file. That file is a live install image that lets you boot a live VyOS. From the live system, you can proceed to a permanent installation on a hard drive or any other type of storage." +msgstr "Для встановлення VyOS потрібен завантажений файл .iso VyOS. Цей файл є живим інсталяційним образом, який дозволяє завантажувати живу VyOS. З живої системи ви можете перейти до постійної інсталяції на жорсткий диск або будь-який інший тип сховища." #: ../../installation/virtual/docker.rst:15 msgid "VyOS requires an IPv6-enabled docker network. Currently linux distributions do not enable docker IPv6 support by default. You can enable IPv6 support in two ways." -msgstr "VyOS requires an IPv6-enabled docker network. Currently linux distributions do not enable docker IPv6 support by default. You can enable IPv6 support in two ways." +msgstr "Для VyOS потрібна докерна мережа з підтримкою IPv6. Наразі дистрибутиви Linux не вмикають підтримку докерів IPv6 за замовчуванням. Увімкнути підтримку IPv6 можна двома способами." #: ../../installation/migrate-from-vyatta.rst:15 msgid "Vyatta Core 6.4 and earlier may have incompatibilities. In Vyatta 6.5 the \"modify\" firewall was removed and replaced with the ``set policy route`` command family, old configs can not be automatically converted. You will have to adapt it to post-6.5 Vyatta syntax manually." -msgstr "Vyatta Core 6.4 and earlier may have incompatibilities. In Vyatta 6.5 the \"modify\" firewall was removed and replaced with the ``set policy route`` command family, old configs can not be automatically converted. You will have to adapt it to post-6.5 Vyatta syntax manually." +msgstr "Vyatta Core 6.4 і попередні версії можуть мати несумісність. У Vyatta 6.5 брандмауер «змінити» було видалено та замінено командою ``set policy route``, старі конфігурації не можна автоматично конвертувати. Вам доведеться адаптувати його до синтаксису Vyatta після 6.5 вручну." #: ../../installation/migrate-from-vyatta.rst:13 msgid "Vyatta Core releases from 6.5 to 6.6 should be 100% compatible." -msgstr "Vyatta Core releases from 6.5 to 6.6 should be 100% compatible." +msgstr "Версії Vyatta Core від 6.5 до 6.6 мають бути на 100% сумісними." #: ../../installation/migrate-from-vyatta.rst:11 msgid "Vyatta release compatibility" -msgstr "Vyatta release compatibility" +msgstr "Сумісність з випуском Vyatta" #: ../../installation/vyos-on-baremetal.rst:122 msgid "WWAN" @@ -1815,27 +1827,27 @@ msgstr "WWAN" #: ../../installation/install.rst:306 msgid "Wait until you get the outcome (bytes copied). Be patient, in some computers it might take more than one minute." -msgstr "Wait until you get the outcome (bytes copied). Be patient, in some computers it might take more than one minute." +msgstr "Зачекайте, поки ви отримаєте результат (байти скопійовано). Наберіться терпіння, на деяких комп’ютерах це може зайняти більше однієї хвилини." #: ../../installation/vyos-on-baremetal.rst:364 msgid "Warning the interface labels on my device are backwards; the left-most \"LAN4\" port is eth0 and the right-most \"LAN1\" port is eth3." -msgstr "Warning the interface labels on my device are backwards; the left-most \"LAN4\" port is eth0 and the right-most \"LAN1\" port is eth3." +msgstr "Попередження: мітки інтерфейсу на моєму пристрої перевернуті; крайній лівий порт «LAN4» — це eth0, а крайній правий порт «LAN1» — це eth3." #: ../../installation/install.rst:536 msgid "We also need to provide the *filesystem.squashfs* file. That is a heavy file and TFTP is slow, so you could send it through HTTP to speed up the transfer. That is how it is done in our example, you can find that in the configuration file above." -msgstr "We also need to provide the *filesystem.squashfs* file. That is a heavy file and TFTP is slow, so you could send it through HTTP to speed up the transfer. That is how it is done in our example, you can find that in the configuration file above." +msgstr "Нам також потрібно надати файл *filesystem.squashfs*. Це важкий файл, а TFTP працює повільно, тому ви можете надіслати його через HTTP, щоб пришвидшити передачу. Саме так це зроблено в нашому прикладі, ви можете знайти це у файлі конфігурації вище." #: ../../installation/install.rst:437 msgid "Webserver (HTTP) - optional, but we will use it to speed up installation" -msgstr "Webserver (HTTP) - optional, but we will use it to speed up installation" +msgstr "Веб-сервер (HTTP) - необов'язковий, але ми будемо використовувати його для прискорення встановлення" #: ../../installation/cloud/aws.rst:96 msgid "When prompted, answer \"yes\" to the question \"Do you want to store the config in the SSM parameter store?\"." -msgstr "When prompted, answer \"yes\" to the question \"Do you want to store the config in the SSM parameter store?\"." +msgstr "Коли буде запропоновано, дайте відповідь «так» на запитання «Чи хочете ви зберегти конфігурацію в сховищі параметрів SSM?»." #: ../../installation/virtual/vmware.rst:19 msgid "When the underlying ESXi host is approaching ~92% memory utilisation it will start the balloon process in a 'soft' state to start reclaiming memory from guest operating systems. This causes an artificial pressure using the vmmemctl driver on memory usage on the virtual guest. As VyOS by default does not have a swap file, this vmmemctl pressure is unable to force processes to move in memory data to the paging file, and blindly consumes memory forcing the virtual guest into a low memory state with no way to escape. The balloon can expand to 65% of guest allocated memory, so a VyOS guest running >35% of memory usage, can encounter an out of memory situation, and trigger the kernel oom_kill process. At this point a weighted lottery favouring memory hungry processes will be run with the unlucky winner being terminated by the kernel." -msgstr "When the underlying ESXi host is approaching ~92% memory utilisation it will start the balloon process in a 'soft' state to start reclaiming memory from guest operating systems. This causes an artificial pressure using the vmmemctl driver on memory usage on the virtual guest. As VyOS by default does not have a swap file, this vmmemctl pressure is unable to force processes to move in memory data to the paging file, and blindly consumes memory forcing the virtual guest into a low memory state with no way to escape. The balloon can expand to 65% of guest allocated memory, so a VyOS guest running >35% of memory usage, can encounter an out of memory situation, and trigger the kernel oom_kill process. At this point a weighted lottery favouring memory hungry processes will be run with the unlucky winner being terminated by the kernel." +msgstr "Коли основний хост ESXi наближається до приблизно 92% використання пам’яті, він запускає процес підказки в «м’якому» стані, щоб почати вивільняти пам’ять у гостьових операційних систем. Це спричиняє штучний тиск за допомогою драйвера vmmemctl на використання пам’яті віртуальним гостем. Оскільки VyOS за замовчуванням не має файлу підкачки, цей тиск vmmemctl не в змозі змусити процеси перемістити дані пам’яті до файлу підкачки, і сліпо споживає пам’ять, змушуючи віртуального гостя перейти в стан малої пам’яті без можливості вийти. Повідомлення може розширюватися до 65% виділеної гостьової пам’яті, тому гостьова система VyOS, яка використовує більше 35% пам’яті, може зіткнутися із ситуацією нестачі пам’яті та запустити процес oom_kill ядра. У цей момент буде запущено зважену лотерею на користь процесів, які потребують пам’яті, а невдачливий переможець буде припинено ядром." #: ../../installation/vyos-on-baremetal.rst:112 msgid "WiFi" @@ -1843,35 +1855,35 @@ msgstr "WiFi" #: ../../installation/install.rst:194 msgid "With the public key imported, the signature for the desired image needs to be downloaded." -msgstr "With the public key imported, the signature for the desired image needs to be downloaded." +msgstr "Після імпорту відкритого ключа потрібно завантажити підпис для потрібного зображення." #: ../../installation/vyos-on-baremetal.rst:354 msgid "Write VyOS ISO to USB drive of some sort" -msgstr "Write VyOS ISO to USB drive of some sort" +msgstr "Запишіть VyOS ISO на якийсь USB-накопичувач" #: ../../installation/virtual/gns3.rst:42 msgid "Write a name for your VM, for instance \"VyOS\", and click ``Next``." -msgstr "Write a name for your VM, for instance \"VyOS\", and click ``Next``." +msgstr "Напишіть назву своєї віртуальної машини, наприклад «VyOS», і натисніть ``Далі``." #: ../../installation/install.rst:296 msgid "Write the image (your VyOS .iso file) to the USB drive. Note that here you want to use the device name (e.g. /dev/sdb), not the partition name (e.g. /dev/sdb1)." -msgstr "Write the image (your VyOS .iso file) to the USB drive. Note that here you want to use the device name (e.g. /dev/sdb), not the partition name (e.g. /dev/sdb1)." +msgstr "Запишіть образ (ваш файл .iso VyOS) на USB-накопичувач. Зауважте, що тут потрібно використовувати назву пристрою (наприклад, /dev/sdb), а не назву розділу (наприклад, /dev/sdb1)." #: ../../installation/update.rst:38 msgid "You can access files from a previous installation and copy them to your current image if they were located in the ``/config`` directory. This can be done using the :opcmd:`copy` command. So, for instance, in order to copy ``/config/config.boot`` from VyOS 1.2.1 image, you would use the following command:" -msgstr "You can access files from a previous installation and copy them to your current image if they were located in the ``/config`` directory. This can be done using the :opcmd:`copy` command. So, for instance, in order to copy ``/config/config.boot`` from VyOS 1.2.1 image, you would use the following command:" +msgstr "Ви можете отримати доступ до файлів із попередньої інсталяції та скопіювати їх у поточний образ, якщо вони були розташовані в каталозі ``/config``. Це можна зробити за допомогою команди :opcmd:`copy`. Отже, наприклад, щоб скопіювати ``/config/config.boot`` з образу VyOS 1.2.1, ви повинні використати таку команду:" #: ../../installation/virtual/docker.rst:74 msgid "You can execute ``docker stop vyos`` when you are finished with the container." -msgstr "You can execute ``docker stop vyos`` when you are finished with the container." +msgstr "Ви можете виконати ``docker stop vyos``, коли закінчите роботу з контейнером." #: ../../installation/migrate-from-vyatta.rst:158 msgid "You can go back to your Vyatta install using the ``set system image default-boot`` command and selecting the your previous Vyatta Core image." -msgstr "You can go back to your Vyatta install using the ``set system image default-boot`` command and selecting the your previous Vyatta Core image." +msgstr "Ви можете повернутися до встановлення Vyatta за допомогою команди ``set system image default-boot`` і вибравши попередній образ Vyatta Core." #: ../../installation/vyos-on-baremetal.rst:198 msgid "You can now proceed with a regular image installation as described in :ref:`installation`." -msgstr "You can now proceed with a regular image installation as described in :ref:`installation`." +msgstr "Тепер ви можете продовжити звичайне встановлення образу, як описано в :ref:`installation`." #: ../../installation/update.rst:75 msgid "You can use ``latest`` option. It loads the latest available Rolling release." @@ -1879,43 +1891,43 @@ msgstr "You can use ``latest`` option. It loads the latest available Rolling rel #: ../../installation/migrate-from-vyatta.rst:28 msgid "You just use ``add system image``, as if it was a new VC release (see :ref:`update_vyos` for additional information). The only thing you want to do is to verify the new images digital signature. You will have to add the public key manually once as it is not shipped the first time." -msgstr "You just use ``add system image``, as if it was a new VC release (see :ref:`update_vyos` for additional information). The only thing you want to do is to verify the new images digital signature. You will have to add the public key manually once as it is not shipped the first time." +msgstr "Ви просто використовуєте ``add system image``, як якщо б це був новий випуск VC (перегляньте :ref:`update_vyos` для додаткової інформації). Єдине, що вам потрібно зробити, це перевірити цифровий підпис нових зображень. Вам доведеться додати відкритий ключ вручну один раз, оскільки він не надсилається вперше." #: ../../installation/vyos-on-baremetal.rst:377 msgid "You may have to add your own RAM and HDD/SSD. There is no VGA connector. But Acrosser provides a DB25 adapter for the VGA header on the motherboard (not used)." -msgstr "You may have to add your own RAM and HDD/SSD. There is no VGA connector. But Acrosser provides a DB25 adapter for the VGA header on the motherboard (not used)." +msgstr "Можливо, вам доведеться додати власну оперативну пам’ять і HDD/SSD. Роз'єм VGA відсутній. Але Acrosser надає адаптер DB25 для роз’єму VGA на материнській платі (не використовується)." #: ../../installation/virtual/gns3.rst:105 msgid "You probably will want to accept to copy the .iso file to your default image directory when you are asked." -msgstr "You probably will want to accept to copy the .iso file to your default image directory when you are asked." +msgstr "Ймовірно, ви захочете скопіювати файл .iso до каталогу зображень за замовчуванням, коли вас запитають." #: ../../installation/install.rst:423 msgid "You will boot now into a permanent VyOS system." -msgstr "You will boot now into a permanent VyOS system." +msgstr "Тепер ви завантажите постійну систему VyOS." #: ../../installation/virtual/vmware.rst:9 msgid ".ova files are available for supporting users, and a VyOS can also be stood up using a generic Linux instance, and attaching the bootable ISO file and installing from the ISO using the normal process around `install image`." -msgstr ".ova files are available for supporting users, and a VyOS can also be stood up using a generic Linux instance, and attaching the bootable ISO file and installing from the ISO using the normal process around `install image`." +msgstr "Файли .ova доступні для допоміжних користувачів, а VyOS також можна встановити за допомогою загального екземпляра Linux, долучивши завантажувальний файл ISO та інсталюючи з ISO за допомогою звичайного процесу навколо «образу встановлення»." #: ../../installation/virtual/gns3.rst:136 msgid ":ref:`Install VyOS <installation>` as normal (that is, using the ``install image`` command)." -msgstr ":ref:`Install VyOS <installation>` as normal (that is, using the ``install image`` command)." +msgstr ":ref:`Встановіть VyOS<installation> ` як зазвичай (тобто за допомогою команди ``install image``)." #: ../../installation/install.rst:435 msgid ":ref:`dhcp-server`" -msgstr ":ref:`dhcp-server`" +msgstr ":ref:`dhcp-сервер`" #: ../../installation/install.rst:436 msgid ":ref:`tftp-server`" -msgstr ":ref:`tftp-server`" +msgstr ":ref:`tftp-сервер`" #: ../../installation/install.rst:246 msgid ":vytask:`T2108` switched the validation system to prefer minisign over GPG keys." -msgstr ":vytask:`T2108` switched the validation system to prefer minisign over GPG keys." +msgstr ":vytask:`T2108` перемкнув систему перевірки, щоб віддати перевагу minisign над ключами GPG." #: ../../installation/vyos-on-baremetal.rst:349 msgid "`Manufacturer product page <http://www.inctel.com.cn/product/detail/338.html>`_." -msgstr "`Manufacturer product page <http://www.inctel.com.cn/product/detail/338.html>`_." +msgstr "`Сторінка продукту виробника<http://www.inctel.com.cn/product/detail/338.html> `_." #: ../../installation/install.rst:112 msgid "``gpg --recv-keys FD220285A0FE6D7E``" @@ -1951,7 +1963,7 @@ msgstr "https://muralidba.blogspot.com/2018/03/how-does-linux-out-of-memory-oom- #: ../../installation/install.rst:116 msgid "https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E" -msgstr "https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E" +msgstr "https://pgp.mit.edu/pks/lookup?op=get&search=0xFD220285A0FE6D7E" #: ../../installation/update.rst:86 msgid "https://vyos.net/get/nightly-builds/" @@ -1971,4 +1983,4 @@ msgstr "ly-builds/releases/download/1.4-rolling-202308240020/vyos-1.4-rolling-20 #: ../../installation/install.rst:595 msgid "option, and type CTRL-X to boot." -msgstr "option, and type CTRL-X to boot." +msgstr "і натисніть CTRL-X для завантаження." diff --git a/docs/_locale/uk/introducing.pot b/docs/_locale/uk/introducing.pot index 419366f9..966f6e5d 100644 --- a/docs/_locale/uk/introducing.pot +++ b/docs/_locale/uk/introducing.pot @@ -10,31 +10,31 @@ msgstr "" #: ../../introducing/history.rst:134 msgid "A business model comparable to that of Redis, rather than that of VyOS today." -msgstr "A business model comparable to that of Redis, rather than that of VyOS today." +msgstr "Бізнес-модель, яку можна порівняти з Redis, а не з VyOS сьогодні." #: ../../introducing/history.rst:119 msgid "A note on copyright" -msgstr "A note on copyright" +msgstr "Пам'ятка про авторське право" #: ../../introducing/about.rst:5 msgid "About" -msgstr "About" +msgstr "Про" #: ../../introducing/history.rst:74 msgid "Although Crux came with too many new features to mention here, some noteworthy ones are: an mDNS repeater, a broadcast relay, a high-performance PPPoE server, an HFSC scheduler, as well as support for Wireguard, unicast VRRP, RPKI for BGP and fully 802.1ad-compliant QinQ ethertype. The telnet server and support for P2P filtering were removed." -msgstr "Although Crux came with too many new features to mention here, some noteworthy ones are: an mDNS repeater, a broadcast relay, a high-performance PPPoE server, an HFSC scheduler, as well as support for Wireguard, unicast VRRP, RPKI for BGP and fully 802.1ad-compliant QinQ ethertype. The telnet server and support for P2P filtering were removed." +msgstr "Незважаючи на те, що Crux має надто багато нових функцій, щоб згадати тут, деякі з них заслуговують на увагу: повторювач mDNS, широкомовна ретрансляція, високопродуктивний сервер PPPoE, планувальник HFSC, а також підтримка Wireguard, unicast VRRP, RPKI для BGP і повністю сумісний з 802.1ad QinQ ethertype. Сервер telnet і підтримку фільтрації P2P видалено." #: ../../introducing/history.rst:88 msgid "As of 2022, Crux is still supported and maintained." -msgstr "As of 2022, Crux is still supported and maintained." +msgstr "Станом на 2022 рік Crux все ще підтримується." #: ../../introducing/history.rst:104 msgid "As of 2022, Equuleus is in the stable." -msgstr "As of 2022, Equuleus is in the stable." +msgstr "Станом на 2022 рік Equuleus знаходиться в стайні." #: ../../introducing/history.rst:35 msgid "Brocade was acquired by Broadcom in 2016 and sold what remains of erstwhile Vyatta to AT&T in 2017, who in turn sold it to Ciena in 2021." -msgstr "Brocade was acquired by Broadcom in 2016 and sold what remains of erstwhile Vyatta to AT&T in 2017, who in turn sold it to Ciena in 2021." +msgstr "Brocade була придбана Broadcom у 2016 році та продала те, що залишилося від колишньої Vyatta компанії AT&T у 2017 році, яка, у свою чергу, продала її Ciena у 2021 році." #: ../../introducing/history.rst:113 msgid "Circinus (1.5)" @@ -46,103 +46,103 @@ msgstr "Circinus (the Compass) is the codename of the upcoming development branc #: ../../introducing/history.rst:68 msgid "Crux (1.2)" -msgstr "Crux (1.2)" +msgstr "Суть (1.2)" #: ../../introducing/history.rst:70 msgid "Crux (the Southern Cross) came out on 28 January 2019 and was the first major release of VyOS as we know it today. The underlying Debian base was upgraded from Squeeze (6) to Jessie (8)." -msgstr "Crux (the Southern Cross) came out on 28 January 2019 and was the first major release of VyOS as we know it today. The underlying Debian base was upgraded from Squeeze (6) to Jessie (8)." +msgstr "Crux (Південний Хрест) вийшов 28 січня 2019 року і став першим великим випуском VyOS, яким ми його знаємо сьогодні. Основну базу Debian було оновлено з Squeeze (6) до Jessie (8)." #: ../../introducing/history.rst:81 msgid "Crux is the first version to feature the modular image build system. CLI definitions began to be written in the modern, verifiable XML templates. Python APIs were introduced for command scripting and configuration migration. Introduction of new Perl and shell code was proscribed and the rewriting of legacy Perl code in pure Python began with Crux." -msgstr "Crux is the first version to feature the modular image build system. CLI definitions began to be written in the modern, verifiable XML templates. Python APIs were introduced for command scripting and configuration migration. Introduction of new Perl and shell code was proscribed and the rewriting of legacy Perl code in pure Python began with Crux." +msgstr "Crux є першою версією з модульною системою створення зображень. Визначення CLI почали записувати в сучасних шаблонах XML, які можна перевірити. API Python були представлені для командного сценарію та міграції конфігурації. Впровадження нового Perl і коду оболонки було заборонено, а переписування застарілого коду Perl на чистому Python почалося з Crux." #: ../../introducing/history.rst:91 msgid "Equuleus (1.3)" -msgstr "Equuleus (1.3)" +msgstr "Вершник (1.3)" #: ../../introducing/history.rst:97 msgid "Equuleus brought many long-desired features with it, most notably an SSTP VPN server, an IPoE server, an OpenConnect VPN server and a serial console server, in addition to reworked support for WWAN interfaces, support for GENEVE and MACSec interfaces, VRF, IS-IS routing, preliminary support for MPLS and LDP, and many other initialisms." -msgstr "Equuleus brought many long-desired features with it, most notably an SSTP VPN server, an IPoE server, an OpenConnect VPN server and a serial console server, in addition to reworked support for WWAN interfaces, support for GENEVE and MACSec interfaces, VRF, IS-IS routing, preliminary support for MPLS and LDP, and many other initialisms." +msgstr "Equuleus приніс із собою багато довгоочікуваних функцій, зокрема сервер SSTP VPN, сервер IPoE, сервер VPN OpenConnect і сервер послідовної консолі, а також перероблену підтримку інтерфейсів WWAN, підтримку інтерфейсів GENEVE та MACSec, VRF, IS -Маршрутизація IS, попередня підтримка MPLS і LDP і багато інших ініціалізацій." #: ../../introducing/history.rst:133 msgid "From the Sanskrit adjective \"Vyātta\" (व्यात्त), meaning opened." -msgstr "From the Sanskrit adjective \"Vyātta\" (व्यात्त), meaning opened." +msgstr "Від санскритського прикметника «Vyātta» (व्यात्त), що означає відкритий." #: ../../introducing/history.rst:58 msgid "Helium (1.1)" -msgstr "Helium (1.1)" +msgstr "Гелій (1.1)" #: ../../introducing/history.rst:60 msgid "Helium was released on 9 October 2014, exactly on the day VyOS Project first came into being in the previous year. Helium came with a lot of new features, including an event handler and support for L2TPv3, 802.1ad QinQ and IGMP proxy, as well as experimental support for VXLAN and DMVPN (the latter of which was also broken in Vyatta Core due to its reliance on a proprietary NHRP implementation)." -msgstr "Helium was released on 9 October 2014, exactly on the day VyOS Project first came into being in the previous year. Helium came with a lot of new features, including an event handler and support for L2TPv3, 802.1ad QinQ and IGMP proxy, as well as experimental support for VXLAN and DMVPN (the latter of which was also broken in Vyatta Core due to its reliance on a proprietary NHRP implementation)." +msgstr "Helium був випущений 9 жовтня 2014 року, точно в день, коли VyOS Project вперше з’явився в минулому році. Helium отримав багато нових функцій, зокрема обробник подій і підтримку L2TPv3, 802.1ad QinQ і проксі-сервер IGMP, а також експериментальну підтримку VXLAN і DMVPN (останній також не працює у Vyatta Core через його залежність від запатентована реалізація NHRP)." #: ../../introducing/history.rst:5 msgid "History" -msgstr "History" +msgstr "Історія" #: ../../introducing/history.rst:49 msgid "Hydrogen (1.0)" -msgstr "Hydrogen (1.0)" +msgstr "водень (1,0)" #: ../../introducing/history.rst:28 msgid "In 2013, soon after Vyatta Core was abandoned, the community forked the last Vyatta Core version (6.6R1) and VyOS Project came into being. `Sentrium SL <https://blog.vyos.io/sentrium-what-sentrium>`_ was established by VyOS maintainers in 2014 to fund VyOS development by selling support, consulting services and prebuilt long-term support images." -msgstr "In 2013, soon after Vyatta Core was abandoned, the community forked the last Vyatta Core version (6.6R1) and VyOS Project came into being. `Sentrium SL <https://blog.vyos.io/sentrium-what-sentrium>`_ was established by VyOS maintainers in 2014 to fund VyOS development by selling support, consulting services and prebuilt long-term support images." +msgstr "У 2013 році, незабаром після того, як Vyatta Core було залишено, спільнота розгалужила останню версію Vyatta Core (6.6R1), і виник проект VyOS. `Sentrium SL<https://blog.vyos.io/sentrium-what-sentrium> `_ було створено супроводжувачами VyOS у 2014 році для фінансування розробки VyOS шляхом продажу підтримки, консультаційних послуг і готових образів довгострокової підтримки." #: ../../introducing/history.rst:8 msgid "In the beginning..." -msgstr "In the beginning..." +msgstr "На початку..." #: ../../introducing/history.rst:22 msgid "It's worth noting that by the time Brocade acquired Vyatta, development of Vyatta Core was already stagnated. Vyatta Subscription Edition (and thus, Vyatta development as a whole) had been replacing core components with proprietary software, meaning few features made it to Vyatta Core, and those that did were bug-ridden and hamstrung." -msgstr "It's worth noting that by the time Brocade acquired Vyatta, development of Vyatta Core was already stagnated. Vyatta Subscription Edition (and thus, Vyatta development as a whole) had been replacing core components with proprietary software, meaning few features made it to Vyatta Core, and those that did were bug-ridden and hamstrung." +msgstr "Варто зазначити, що на той момент, коли Brocade придбала Vyatta, розвиток Vyatta Core вже був у стагнації. Vyatta Subscription Edition (і, отже, розробка Vyatta в цілому) замінювала основні компоненти власним програмним забезпеченням, тобто лише деякі функції потрапили до Vyatta Core, а ті, які були, мали помилки та були утруднені." #: ../../introducing/history.rst:40 msgid "Major releases" -msgstr "Major releases" +msgstr "Основні випуски" #: ../../introducing/history.rst:51 msgid "Released just in time for holidays on 22 December 2013, Hydrogen was the first major VyOS release. It fixed features that were broken in Vyatta Core 6.6 (such as IPv4 BGP peer groups and DHCPv6 relay) and introduced command scripting, a task scheduler and web proxy LDAP authentication." -msgstr "Released just in time for holidays on 22 December 2013, Hydrogen was the first major VyOS release. It fixed features that were broken in Vyatta Core 6.6 (such as IPv4 BGP peer groups and DHCPv6 relay) and introduced command scripting, a task scheduler and web proxy LDAP authentication." +msgstr "Випущений якраз перед святами 22 грудня 2013 року, Hydrogen став першим великим випуском VyOS. У ньому виправлено функції, які були зламані у Vyatta Core 6.6 (такі як однорангові групи IPv4 BGP і ретрансляція DHCPv6), а також представлено командний сценарій, планувальник завдань і автентифікацію веб-проксі LDAP." #: ../../introducing/history.rst:107 msgid "Sagitta (1.4)" -msgstr "Sagitta (1.4)" +msgstr "Стрілка (1.4)" #: ../../introducing/history.rst:109 msgid "Sagitta (the Arrow) is the codename of the current development branch, so there's no VyOS 1.4 yet." -msgstr "Sagitta (the Arrow) is the codename of the current development branch, so there's no VyOS 1.4 yet." +msgstr "Sagitta (Стріла) — кодова назва поточної гілки розробки, тому VyOS 1.4 ще немає." #: ../../introducing/history.rst:93 msgid "The current long-term support version of VyOS, Equuleus (the Pony) came out on 21 December 2021, once again in time for the winter holidays." -msgstr "The current long-term support version of VyOS, Equuleus (the Pony) came out on 21 December 2021, once again in time for the winter holidays." +msgstr "Поточна довгострокова версія VyOS, Equuleus (the Pony), вийшла 21 грудня 2021 року, знову вчасно до зимових свят." #: ../../introducing/about.rst:19 msgid "The manual version is selected/specified by it's Git branch name. You can switch between versions of the documentation by selecting the appropriate branch on the bottom left corner." -msgstr "The manual version is selected/specified by it's Git branch name. You can switch between versions of the documentation by selecting the appropriate branch on the bottom left corner." +msgstr "Версія вручну вибирається/визначається за назвою гілки Git. Ви можете перемикатися між версіями документації, вибираючи відповідну гілку в нижньому лівому куті." #: ../../introducing/history.rst:10 msgid "There once was a network operating system based on Debian GNU/Linux, called Vyatta. [*]_ 2006 onwards, it was a great free software alternative to Cisco IOS and Jupiter JUNOS. It came in two editions: Vyatta Core (previously Vyatta Community Edition) that was completely free software, and Vyatta Subscription Edition that had proprietary features and was only available to paying customers. [*]_" -msgstr "There once was a network operating system based on Debian GNU/Linux, called Vyatta. [*]_ 2006 onwards, it was a great free software alternative to Cisco IOS and Jupiter JUNOS. It came in two editions: Vyatta Core (previously Vyatta Community Edition) that was completely free software, and Vyatta Subscription Edition that had proprietary features and was only available to paying customers. [*]_" +msgstr "Колись існувала мережева операційна система на основі Debian GNU/Linux під назвою Vyatta. [*]_ Починаючи з 2006 року, це була чудова безкоштовна альтернатива Cisco IOS і Jupiter JUNOS. Він випускався у двох версіях: Vyatta Core (раніше Vyatta Community Edition), яка була повністю безкоштовним програмним забезпеченням, і Vyatta Subscription Edition, яка мала власні функції та була доступна лише платним клієнтам. [*]_" #: ../../introducing/history.rst:136 msgid "This is not unlike how Linus Torvalds owns the trademark \"Linux\"." -msgstr "This is not unlike how Linus Torvalds owns the trademark \"Linux\"." +msgstr "Це мало чим відрізняється від того, як Лінус Торвальдс володіє торговою маркою "Linux"." #: ../../introducing/history.rst:121 msgid "Unlike Vyatta, VyOS never had (nor will ever have) proprietary code. The only proprietary material in VyOS is non-code assets, such as graphics and the trademark \"VyOS\". [*]_ This means you can build your own long-term support images (as the entire toolchain we use is free software) and even distribute them, given you rename it and remove such assets before building. Although note that we do not provide support for images distributed by a third-party. See the `artwork license <https://github.com/vyos/vyos-build/blob/current/LICENSE.artwork>`_ and the end-user license agreement at ``/usr/share/vyos/EULA`` in any pre-built image for more precise information." -msgstr "Unlike Vyatta, VyOS never had (nor will ever have) proprietary code. The only proprietary material in VyOS is non-code assets, such as graphics and the trademark \"VyOS\". [*]_ This means you can build your own long-term support images (as the entire toolchain we use is free software) and even distribute them, given you rename it and remove such assets before building. Although note that we do not provide support for images distributed by a third-party. See the `artwork license <https://github.com/vyos/vyos-build/blob/current/LICENSE.artwork>`_ and the end-user license agreement at ``/usr/share/vyos/EULA`` in any pre-built image for more precise information." +msgstr "На відміну від Vyatta, у VyOS ніколи не було (і ніколи не буде) власного коду. Єдиним запатентованим матеріалом у VyOS є активи без коду, такі як графіка та торгова марка "VyOS". [*]_ Це означає, що ви можете створювати власні довгострокові образи підтримки (оскільки весь ланцюжок інструментів, який ми використовуємо, є безкоштовним програмним забезпеченням) і навіть поширювати їх, перейменовуючи їх і видаляючи такі ресурси перед створенням. Хоча зауважте, що ми не надаємо підтримку для зображень, які розповсюджуються третіми особами. Див. ліцензію на художній твір<https://github.com/vyos/vyos-build/blob/current/LICENSE.artwork> `_ та ліцензійну угоду кінцевого користувача за адресою ``/usr/share/vyos/EULA`` у будь-якому попередньо створеному образі для більш точної інформації." #: ../../introducing/about.rst:23 msgid "VyOS CLI syntax may change between major (and sometimes minor) versions. Please always refer to the documentation matching your current, running installation. If a change in the CLI is required, VyOS will ship a so called migration script which will take care of adjusting the syntax. No action needs to be taken by you." -msgstr "VyOS CLI syntax may change between major (and sometimes minor) versions. Please always refer to the documentation matching your current, running installation. If a change in the CLI is required, VyOS will ship a so called migration script which will take care of adjusting the syntax. No action needs to be taken by you." +msgstr "Синтаксис командного рядка VyOS може змінюватися між основними (а іноді й другорядними) версіями. Завжди дивіться документацію, що відповідає вашій поточній інсталяції. Якщо потрібні зміни в CLI, VyOS надішле так званий сценарій міграції, який подбає про налаштування синтаксису. Вам не потрібно виконувати жодних дій." #: ../../introducing/about.rst:7 msgid "VyOS is an open source network operating system based on Debian GNU/Linux." -msgstr "VyOS is an open source network operating system based on Debian GNU/Linux." +msgstr "VyOS — мережева операційна система з відкритим вихідним кодом, заснована на Debian GNU/Linux." #: ../../introducing/history.rst:42 msgid "VyOS major versions used to be named after elements in order of atomic numbers. With 1.2, this naming scheme was replaced with the much cooler scheme of Latin names of IAU designated constellations by solid angle area, starting from the smallest." -msgstr "VyOS major versions used to be named after elements in order of atomic numbers. With 1.2, this naming scheme was replaced with the much cooler scheme of Latin names of IAU designated constellations by solid angle area, starting from the smallest." +msgstr "Основні версії VyOS раніше називалися за елементами в порядку атомних номерів. У версії 1.2 цю схему іменування було замінено на набагато прохолоднішу схему латинських назв IAU, позначених сузір’ями площею тілесного кута, починаючи з найменшого." #: ../../introducing/history.rst:42 msgid "VyOS major versions used to be named after elements in order of atomic numbers. With 1.2, this naming scheme was replaced with the much cooler scheme of Latin names of `IAU <https://en.wikipedia.org/wiki/IAU_designated_constellations_by_area>`_ designated constellations by solid angle area, starting from the smallest." @@ -150,12 +150,12 @@ msgstr "VyOS major versions used to be named after elements in order of atomic n #: ../../introducing/about.rst:9 msgid "VyOS provides a free routing platform that competes directly with other commercially available solutions from well known network providers. Because VyOS runs on standard amd64, i586 and ARM systems, it is able to be used as a router and firewall platform for cloud deployments." -msgstr "VyOS provides a free routing platform that competes directly with other commercially available solutions from well known network providers. Because VyOS runs on standard amd64, i586 and ARM systems, it is able to be used as a router and firewall platform for cloud deployments." +msgstr "VyOS надає безкоштовну платформу маршрутизації, яка безпосередньо конкурує з іншими комерційно доступними рішеннями від відомих постачальників мереж. Оскільки VyOS працює на стандартних системах amd64, i586 і ARM, її можна використовувати як маршрутизатор і платформу брандмауера для хмарних розгортань." #: ../../introducing/history.rst:17 msgid "Vyatta was acquired by Brocade Communication Systems in 2012. Shortly after, Brocade renamed Vyatta Subscription Edition to Brocade vRouter, discontinued Vyatta Core and shut down the community forum without a notice. The bug tracker and Git repositories followed next year." -msgstr "Vyatta was acquired by Brocade Communication Systems in 2012. Shortly after, Brocade renamed Vyatta Subscription Edition to Brocade vRouter, discontinued Vyatta Core and shut down the community forum without a notice. The bug tracker and Git repositories followed next year." +msgstr "Vyatta була придбана Brocade Communication Systems у 2012 році. Незабаром після цього Brocade перейменувала Vyatta Subscription Edition на Brocade vRouter, припинила роботу Vyatta Core і закрила форум спільноти без попередження. Відстеження помилок і репозиторії Git з’явилися наступного року." #: ../../introducing/about.rst:14 msgid "We use multiple live versions of our manual, hosted thankfully by https://readthedocs.org. We will provide one version of the manual for every VyOS major version starting with VyOS 1.2 which will receive Long-term support (LTS)." -msgstr "We use multiple live versions of our manual, hosted thankfully by https://readthedocs.org. We will provide one version of the manual for every VyOS major version starting with VyOS 1.2 which will receive Long-term support (LTS)." +msgstr "Ми використовуємо кілька оперативних версій нашого посібника, які, на щастя, розміщені на https://readthedocs.org. Ми надамо одну версію посібника для кожної основної версії VyOS, починаючи з VyOS 1.2, яка отримає довгострокову підтримку (LTS)." diff --git a/docs/_locale/uk/operation.pot b/docs/_locale/uk/operation.pot index 4b3501d7..b835b3ee 100644 --- a/docs/_locale/uk/operation.pot +++ b/docs/_locale/uk/operation.pot @@ -10,152 +10,152 @@ msgstr "" #: ../../operation/raid.rst:154 msgid "1 - Remove the failed disk from the RAID 1 set by issuing the following command:" -msgstr "1 - Remove the failed disk from the RAID 1 set by issuing the following command:" +msgstr "1. Видаліть несправний диск із набору RAID 1, виконавши таку команду:" #: ../../operation/raid.rst:113 msgid "1 - To break apart the current RAID 1 set, enter “No” at the prompt. The" -msgstr "1 - To break apart the current RAID 1 set, enter “No” at the prompt. The" +msgstr "1. Щоб розбити поточний набір RAID 1, у запиті введіть «Ні». The" #: ../../operation/raid.rst:71 msgid "1 - To create a new RAID 1 array, enter “Yes” at the prompt. If the system detects a filesystem on the partitions being used for RAID 1 it will prompt you to indicate whether you want to continue creating the RAID 1 array." -msgstr "1 - To create a new RAID 1 array, enter “Yes” at the prompt. If the system detects a filesystem on the partitions being used for RAID 1 it will prompt you to indicate whether you want to continue creating the RAID 1 array." +msgstr "1. Щоб створити новий масив RAID 1, у запиті введіть «Так». Якщо система виявить файлову систему на розділах, що використовуються для RAID 1, вона запропонує вам вказати, чи бажаєте ви продовжити створення масиву RAID 1." #: ../../operation/raid.rst:162 msgid "2- Physically remove the failed disk from the system. If the drives are not hot-swappable, then you must shut down the system before removing the disk." -msgstr "2- Physically remove the failed disk from the system. If the drives are not hot-swappable, then you must shut down the system before removing the disk." +msgstr "2- Фізично видаліть несправний диск із системи. Якщо диски не підтримують гарячу заміну, перед видаленням диска необхідно вимкнути систему." #: ../../operation/raid.rst:123 msgid "2 - To decline to set up a new RAID 1 configuration on the disks, enter “No” at the prompt. The system prompts you to indicate which partition you would like the system installed on." -msgstr "2 - To decline to set up a new RAID 1 configuration on the disks, enter “No” at the prompt. The system prompts you to indicate which partition you would like the system installed on." +msgstr "2. Щоб відмовитися від налаштування нової конфігурації RAID 1 на дисках, у запиті введіть «Ні». Система запропонує вам вказати, на який розділ ви хочете встановити систему." #: ../../operation/raid.rst:79 msgid "2 - To overwrite the old filesystem, enter “Yes”." -msgstr "2 - To overwrite the old filesystem, enter “Yes”." +msgstr "2 - Щоб перезаписати стару файлову систему, введіть «Так»." #: ../../operation/raid.rst:131 msgid "3 - Enter the partition where you would like the system installed. The system then prompts you to indicate whether you want to save the old configuration data. This represents the current VyOS configuration." -msgstr "3 - Enter the partition where you would like the system installed. The system then prompts you to indicate whether you want to save the old configuration data. This represents the current VyOS configuration." +msgstr "3 - Введіть розділ, у який ви хочете встановити систему. Після цього система запропонує вам вказати, чи хочете ви зберегти старі дані конфігурації. Це поточна конфігурація VyOS." #: ../../operation/raid.rst:165 msgid "3 - Replace the failed drive with a drive of the same size or larger." -msgstr "3 - Replace the failed drive with a drive of the same size or larger." +msgstr "3 - Замініть несправний диск диском того самого розміру або більшого." #: ../../operation/raid.rst:81 msgid "3 - The system informs you that all data on both drives will be erased. You are prompted to confirm that you want to continue" -msgstr "3 - The system informs you that all data on both drives will be erased. You are prompted to confirm that you want to continue" +msgstr "3 - Система повідомляє, що всі дані на обох дисках буде видалено. Вам буде запропоновано підтвердити, що ви хочете продовжити" #: ../../operation/raid.rst:88 #: ../../operation/raid.rst:139 msgid "4 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration." -msgstr "4 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration." +msgstr "4 - Введіть «Так» у запиті, щоб зберегти поточну конфігурацію VyOS після завершення встановлення. Введіть «Ні», щоб видалити поточну конфігурацію VyOS." #: ../../operation/raid.rst:167 msgid "4 - Format the new disk for RAID 1 by issuing the following command:" -msgstr "4 - Format the new disk for RAID 1 by issuing the following command:" +msgstr "4. Відформатуйте новий диск для RAID 1, виконавши таку команду:" #: ../../operation/raid.rst:174 msgid "5-Add the replacement disk to the RAID 1 set by issuing the following command:" -msgstr "5-Add the replacement disk to the RAID 1 set by issuing the following command:" +msgstr "5-Додайте диск для заміни до набору RAID 1, виконавши таку команду:" #: ../../operation/raid.rst:142 msgid "5 - Continue with installation in the normal way." -msgstr "5 - Continue with installation in the normal way." +msgstr "5 - Продовжте встановлення звичайним способом." #: ../../operation/raid.rst:96 msgid "5 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration." -msgstr "5 - Enter “Yes” at the prompt to retain the current VyOS configuration once installation is complete. Enter “No” to delete the current VyOS configuration." +msgstr "5 - Введіть «Так» у запиті, щоб зберегти поточну конфігурацію VyOS після завершення встановлення. Введіть «Ні», щоб видалити поточну конфігурацію VyOS." #: ../../operation/raid.rst:99 msgid "6 - Continue with installation in the normal way." -msgstr "6 - Continue with installation in the normal way." +msgstr "6 - Продовжте встановлення звичайним способом." #: ../../operation/raid.rst:7 msgid "A Redundant Array of Independent Disks (RAID) uses two or more hard disk drives to improve disk speed, store more data, and/or provide fault tolerance. There are several storage schemes possible in a RAID array, each offering a different combination of storage, reliability, and/or performance. The VyOS system supports a “RAID 1” deployment. RAID 1 allows two or more disks to mirror one another to provide system fault tolerance. In a RAID 1 solution, every sector of one disk is duplicated onto every sector of all disks in the array. Provided even one disk in the RAID 1 set is operational, the system continues to run, even through disk replacement (provided that the hardware supports in-service replacement of drives). RAID 1 can be implemented using special hardware or it can be implemented in software. The VyOS system supports software RAID 1 on two disks. The VyOS implementation of RAID 1 allows the following:" -msgstr "A Redundant Array of Independent Disks (RAID) uses two or more hard disk drives to improve disk speed, store more data, and/or provide fault tolerance. There are several storage schemes possible in a RAID array, each offering a different combination of storage, reliability, and/or performance. The VyOS system supports a “RAID 1” deployment. RAID 1 allows two or more disks to mirror one another to provide system fault tolerance. In a RAID 1 solution, every sector of one disk is duplicated onto every sector of all disks in the array. Provided even one disk in the RAID 1 set is operational, the system continues to run, even through disk replacement (provided that the hardware supports in-service replacement of drives). RAID 1 can be implemented using special hardware or it can be implemented in software. The VyOS system supports software RAID 1 on two disks. The VyOS implementation of RAID 1 allows the following:" +msgstr "Надлишковий масив незалежних дисків (RAID) використовує два або більше жорстких дисків для підвищення швидкості диска, зберігання більшої кількості даних і/або забезпечення відмовостійкості. У масиві RAID існує кілька схем зберігання, кожна з яких пропонує різну комбінацію пам’яті, надійності та/або продуктивності. Система VyOS підтримує розгортання «RAID 1». RAID 1 дозволяє двом або більше дискам дублювати один одного, щоб забезпечити відмовостійкість системи. У рішенні RAID 1 кожен сектор одного диска дублюється на кожен сектор усіх дисків у масиві. За умови, що навіть один диск у наборі RAID 1 працює, система продовжує працювати навіть після заміни диска (за умови, що апаратне забезпечення підтримує заміну дисків під час експлуатації). RAID 1 може бути реалізований за допомогою спеціального апаратного забезпечення або програмно. Система VyOS підтримує програмний RAID 1 на двох дисках. Реалізація RAID 1 у VyOS дозволяє:" #: ../../operation/raid.rst:40 msgid "Before a permanent installation, VyOS runs a live installation" -msgstr "Before a permanent installation, VyOS runs a live installation" +msgstr "Перед постійним встановленням VyOS запускає живе встановлення" #: ../../operation/boot-options.rst:6 msgid "Boot Options" -msgstr "Boot Options" +msgstr "Параметри завантаження" #: ../../operation/raid.rst:43 msgid "Configuration" -msgstr "Configuration" +msgstr "Конфігурація" #: ../../operation/raid.rst:146 msgid "Detecting and Replacing a Failed RAID 1 Disk" -msgstr "Detecting and Replacing a Failed RAID 1 Disk" +msgstr "Виявлення та заміна несправного диска RAID 1" #: ../../operation/raid.rst:21 msgid "Detection and reporting of disk failure" -msgstr "Detection and reporting of disk failure" +msgstr "Виявлення та повідомлення про збій диска" #: ../../operation/boot-options.rst:45 msgid "Disable specific boot process steps" -msgstr "Disable specific boot process steps" +msgstr "Вимкніть певні кроки процесу завантаження" #: ../../operation/boot-options.rst:56 msgid "Do not initialize default firewall chains, renders any firewall configuration unusable." -msgstr "Do not initialize default firewall chains, renders any firewall configuration unusable." +msgstr "Не ініціалізуйте ланцюжки брандмауера за замовчуванням, будь-яка конфігурація брандмауера стає непридатною для використання." #: ../../operation/boot-options.rst:53 msgid "Do not perform config migration." -msgstr "Do not perform config migration." +msgstr "Не виконувати міграцію конфігурації." #: ../../operation/raid.rst:61 msgid "Empty 2+ Disk" -msgstr "Empty 2+ Disk" +msgstr "Порожній диск 2+" #: ../../operation/information.rst:34 msgid "For additional details you can refer to https://vyos.dev/T2490." -msgstr "For additional details you can refer to https://vyos.dev/T2490." +msgstr "Для отримання додаткової інформації ви можете звернутися до https://vyos.dev/T2490." #: ../../operation/information.rst:14 msgid "Hardware" -msgstr "Hardware" +msgstr "Обладнання" #: ../../operation/raid.rst:63 msgid "If VyOS system detect two identical disks that are not currently part of a RAID-1 set, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt." -msgstr "If VyOS system detect two identical disks that are not currently part of a RAID-1 set, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt." +msgstr "Якщо система VyOS виявить два ідентичні диски, які на даний момент не є частиною набору RAID-1, утиліта встановлення VyOS автоматично запропонує вам можливість налаштувати дзеркальне відображення RAID 1 для дисків із наступним запитом." #: ../../operation/information.rst:40 msgid "If a device is unplugged and re-plugged it will receive a new Port, Dev, If identification." -msgstr "If a device is unplugged and re-plugged it will receive a new Port, Dev, If identification." +msgstr "Якщо пристрій відключити та знову підключити, він отримає новий ідентифікатор Port, Dev, If." #: ../../operation/raid.rst:57 msgid "If you do not want to configure RAID 1 mirroring, enter “No” at the prompt and continue with installation in the normal way." -msgstr "If you do not want to configure RAID 1 mirroring, enter “No” at the prompt and continue with installation in the normal way." +msgstr "Якщо ви не хочете налаштовувати дзеркальне відображення RAID 1, у запиті введіть «Ні» та продовжте інсталяцію звичайним способом." #: ../../operation/information.rst:21 msgid "In the past serial interface have been defined as ttySx and ttyUSBx where x was an instance number of the serial interface. It was discovered that from system boot to system boot the mapping of USB based serial interfaces will differ, depending which driver was loaded first by the operating system. This will become rather painful if you not only have serial interfaces for a console server connected but in addition also a serial backed :ref:`wwan-interface`." -msgstr "In the past serial interface have been defined as ttySx and ttyUSBx where x was an instance number of the serial interface. It was discovered that from system boot to system boot the mapping of USB based serial interfaces will differ, depending which driver was loaded first by the operating system. This will become rather painful if you not only have serial interfaces for a console server connected but in addition also a serial backed :ref:`wwan-interface`." +msgstr "У минулому послідовний інтерфейс визначався як ttySx і ttyUSBx, де x був номером екземпляра послідовного інтерфейсу. Було виявлено, що від завантаження системи до завантаження системи відображення послідовних інтерфейсів на основі USB буде відрізнятися залежно від того, який драйвер операційна система завантажила першим. Це стане досить болісним, якщо у вас є не лише послідовні інтерфейси для підключеного консольного сервера, але й додатково послідовний :ref:`wwan-interface`." #: ../../operation/information.rst:7 msgid "Information" -msgstr "Information" +msgstr "ІНФОРМАЦІЯ" #: ../../operation/raid.rst:30 msgid "Installation Implications" -msgstr "Installation Implications" +msgstr "Наслідки встановлення" #: ../../operation/raid.rst:183 msgid "Operation" -msgstr "Operation" +msgstr "Операція" #: ../../operation/index.rst:3 msgid "Operation Mode" -msgstr "Operation Mode" +msgstr "Режим роботи" #: ../../operation/password-recovery.rst:5 msgid "Password Recovery" -msgstr "Password Recovery" +msgstr "Відновлення паролю" #: ../../operation/raid.rst:103 msgid "Present RAID-1" -msgstr "Present RAID-1" +msgstr "Присутній RAID-1" #: ../../operation/raid.rst:5 msgid "RAID-1" @@ -163,91 +163,91 @@ msgstr "RAID-1" #: ../../operation/information.rst:74 msgid "Retrieve a list and description of all connected USB serial devices. The device name displayed, e.g. `usb0b2.4p1.0` can be directly used when accessing the serial console as console-server device." -msgstr "Retrieve a list and description of all connected USB serial devices. The device name displayed, e.g. `usb0b2.4p1.0` can be directly used when accessing the serial console as console-server device." +msgstr "Отримайте список і опис усіх підключених послідовних пристроїв USB. Відображуване ім’я пристрою, наприклад `usb0b2.4p1.0`, можна безпосередньо використовувати під час доступу до послідовної консолі як пристрою консолі-сервера." #: ../../operation/information.rst:38 msgid "Retrieve a tree like representation of all connected USB devices." -msgstr "Retrieve a tree like representation of all connected USB devices." +msgstr "Отримайте деревоподібне представлення всіх підключених USB-пристроїв." #: ../../operation/information.rst:108 msgid "Return the current running VyOS version and build information. This includes also the name of the release train which is ``crux`` on VyOS 1.2, ``equuleus`` on VyOS 1.3 and ``sagitta`` on VyOS 1.4." -msgstr "Return the current running VyOS version and build information. This includes also the name of the release train which is ``crux`` on VyOS 1.2, ``equuleus`` on VyOS 1.3 and ``sagitta`` on VyOS 1.4." +msgstr "Повернути поточну запущену версію VyOS і інформацію про збірку. Це включає назву ``crux`` у VyOS 1.2, ``equuleus`` у VyOS 1.3 та ``sagitta`` у VyOS" #: ../../operation/information.rst:146 msgid "Return version number of FRR (Free Range Routing - https://frrouting.org/) used in this release. This is the routing control plane and a successor to GNU Zebra and Quagga." -msgstr "Return version number of FRR (Free Range Routing - https://frrouting.org/) used in this release. This is the routing control plane and a successor to GNU Zebra and Quagga." +msgstr "Повернути номер версії FRR (Free Range Routing - https://frrouting.org/), який використовується в цьому випуску. Це площина керування маршрутизацією та наступник GNU Zebra та Quagga." #: ../../operation/information.rst:137 msgid "Return version number of the Linux Kernel used in this release." -msgstr "Return version number of the Linux Kernel used in this release." +msgstr "Повернути номер версії ядра Linux, що використовується в цьому випуску." #: ../../operation/raid.rst:46 msgid "Single disk, install as normal" -msgstr "Single disk, install as normal" +msgstr "Один диск, установіть як зазвичай" #: ../../operation/boot-options.rst:26 msgid "Specify custom config file" -msgstr "Specify custom config file" +msgstr "Укажіть спеціальний файл конфігурації" #: ../../operation/boot-options.rst:28 msgid "Tells the system to use specified file instead of ``/config/config.boot``. If specified file does not exist or is not readable, fall back to default config. No additional verification is performed, so make sure you specify a valid config file." -msgstr "Tells the system to use specified file instead of ``/config/config.boot``. If specified file does not exist or is not readable, fall back to default config. No additional verification is performed, so make sure you specify a valid config file." +msgstr "Вказує системі використовувати вказаний файл замість ``/config/config.boot``. Якщо вказаний файл не існує або не читається, поверніться до конфігурації за замовчуванням. Додаткова перевірка не виконується, тому переконайтеся, що ви вказали дійсний файл конфігурації." #: ../../operation/raid.rst:148 msgid "The VyOS system automatically detects a disk failure within a RAID 1 set and reports it to the system console. You can verify the failure by issuing the show raid command." -msgstr "The VyOS system automatically detects a disk failure within a RAID 1 set and reports it to the system console. You can verify the failure by issuing the show raid command." +msgstr "Система VyOS автоматично виявляє збій диска в наборі RAID 1 і повідомляє про це на системну консоль. Ви можете перевірити помилку, виконавши команду show raid." #: ../../operation/raid.rst:32 msgid "The VyOS systems installation utility provides several options for installing to a RAID 1 set. You can:" -msgstr "The VyOS systems installation utility provides several options for installing to a RAID 1 set. You can:" +msgstr "Утиліта встановлення системи VyOS надає кілька варіантів встановлення до набору RAID 1. Ти можеш:" #: ../../operation/raid.rst:23 msgid "The ability to boot the system with one failed disk" -msgstr "The ability to boot the system with one failed disk" +msgstr "Можливість завантаження системи з одного несправного диска" #: ../../operation/raid.rst:22 msgid "The ability to maintain system operation with one failed disk" -msgstr "The ability to maintain system operation with one failed disk" +msgstr "Можливість підтримувати роботу системи з одним вийшов з ладу диском" #: ../../operation/raid.rst:25 msgid "The ability to monitor the status of remirroring" -msgstr "The ability to monitor the status of remirroring" +msgstr "Можливість моніторингу статусу повторного віддзеркалення" #: ../../operation/raid.rst:24 msgid "The ability to replace a failed disk and initiate re-mirroring" -msgstr "The ability to replace a failed disk and initiate re-mirroring" +msgstr "Можливість заміни несправного диска та ініціювання повторного віддзеркалення" #: ../../operation/password-recovery.rst:14 msgid "The stand-alone user-password recovery tool starts running and prompts you to reset the local system user password." -msgstr "The stand-alone user-password recovery tool starts running and prompts you to reset the local system user password." +msgstr "Автономний інструмент відновлення пароля користувача починає працювати та пропонує вам скинути пароль користувача локальної системи." #: ../../operation/boot-options.rst:47 msgid "These options disable some boot steps. Make sure you understand the :ref:`boot process <boot-steps>` well before using them!" -msgstr "These options disable some boot steps. Make sure you understand the :ref:`boot process <boot-steps>` well before using them!" +msgstr "Ці параметри вимикають деякі етапи завантаження. Переконайтеся, що ви розумієте процес завантаження :ref:`<boot-steps> ` задовго до їх використання!" #: ../../operation/raid.rst:196 msgid "This command is typically used to prepare a disk to be added to a preexisting RAID 1 set (of which disk-device2 is already a member)." -msgstr "This command is typically used to prepare a disk to be added to a preexisting RAID 1 set (of which disk-device2 is already a member)." +msgstr "Ця команда зазвичай використовується для підготовки диска до додавання до існуючого набору RAID 1 (до якого вже входить disk-device2)." #: ../../operation/boot-options.rst:8 msgid "This function may be highly disruptive. It may cause major service interruption, so make sure you really need it and verify your input carefully." -msgstr "This function may be highly disruptive. It may cause major service interruption, so make sure you really need it and verify your input carefully." +msgstr "Ця функція може бути дуже руйнівною. Це може призвести до серйозних перебоїв у роботі служби, тому переконайтеся, що вам це дійсно потрібно, і ретельно перевіряйте введені дані." #: ../../operation/raid.rst:185 msgid "This part introduces how to add a disk partition to a RAID-1 set initiates mirror synchronization, check and display information." -msgstr "This part introduces how to add a disk partition to a RAID-1 set initiates mirror synchronization, check and display information." +msgstr "У цій частині описано, як додати розділ диска до набору RAID-1, ініціювати дзеркальну синхронізацію, перевірити та відобразити інформацію." #: ../../operation/boot-options.rst:37 msgid "To load the *factory default* config, use:" -msgstr "To load the *factory default* config, use:" +msgstr "Щоб завантажити *заводську* конфігурацію за замовчуванням, використовуйте:" #: ../../operation/information.rst:28 msgid "To overcome this issue and the fact that in almost 50% of all cheap USB to serial converters there is no serial number programmed, the USB to serial interface is now directly identified by the USB root bridge and bus it connects to. This somehow mimics the new network interface definitions we see in recent Linux distributions." -msgstr "To overcome this issue and the fact that in almost 50% of all cheap USB to serial converters there is no serial number programmed, the USB to serial interface is now directly identified by the USB root bridge and bus it connects to. This somehow mimics the new network interface definitions we see in recent Linux distributions." +msgstr "Щоб подолати цю проблему та той факт, що майже в 50% усіх дешевих перетворювачів USB на послідовний порт не запрограмовано серійний номер, інтерфейс USB на послідовний порт тепер безпосередньо ідентифікується кореневим мостом USB і шиною, до якої він підключається. Це якось імітує нові визначення мережевого інтерфейсу, які ми бачимо в останніх дистрибутивах Linux." #: ../../operation/raid.rst:152 msgid "To replace a bad disk within a RAID 1 set, perform the following steps:" -msgstr "To replace a bad disk within a RAID 1 set, perform the following steps:" +msgstr "Щоб замінити несправний диск у наборі RAID 1, виконайте такі дії:" #: ../../operation/information.rst:19 msgid "USB" @@ -255,51 +255,51 @@ msgstr "USB" #: ../../operation/raid.rst:38 msgid "Use a previously-created RAID 1 set." -msgstr "Use a previously-created RAID 1 set." +msgstr "Використовуйте раніше створений набір RAID 1." #: ../../operation/raid.rst:35 msgid "Use the install system to create the RAID 1 set" -msgstr "Use the install system to create the RAID 1 set" +msgstr "Використовуйте систему встановлення, щоб створити набір RAID 1" #: ../../operation/raid.rst:36 msgid "Use the underlying Linux commands to create a RAID 1 set before running the install system command." -msgstr "Use the underlying Linux commands to create a RAID 1 set before running the install system command." +msgstr "Використовуйте основні команди Linux, щоб створити набір RAID 1 перед виконанням команди install system." #: ../../operation/raid.rst:190 msgid "Use this command to add a member disk partition to the RAID 1 set. Adding a disk partition to a RAID 1 set initiates mirror synchronization, where all data on the existing member partition is copied to the new partition." -msgstr "Use this command to add a member disk partition to the RAID 1 set. Adding a disk partition to a RAID 1 set initiates mirror synchronization, where all data on the existing member partition is copied to the new partition." +msgstr "Використовуйте цю команду, щоб додати членський розділ диска до набору RAID 1. Додавання розділу диска до набору RAID 1 ініціює дзеркальну синхронізацію, коли всі дані з існуючого розділу-учасника копіюються в новий розділ." #: ../../operation/raid.rst:232 msgid "Use this command to display the formatting of a hard disk." -msgstr "Use this command to display the formatting of a hard disk." +msgstr "Використовуйте цю команду, щоб відобразити форматування жорсткого диска." #: ../../operation/password-recovery.rst:7 msgid "Using the console, restart the VyOS router. The GRUB menu appears. Select the relevant option from the GRUB menu and press Enter. The option must start with “Lost password change.”" -msgstr "Using the console, restart the VyOS router. The GRUB menu appears. Select the relevant option from the GRUB menu and press Enter. The option must start with “Lost password change.”" +msgstr "За допомогою консолі перезапустіть маршрутизатор VyOS. З’явиться меню GRUB. Виберіть відповідний параметр у меню GRUB і натисніть Enter. Опція має починатися з «Зміна втраченого пароля»." #: ../../operation/information.rst:104 msgid "Version" -msgstr "Version" +msgstr "Версія" #: ../../operation/information.rst:9 msgid "VyOS features a rich set of operational level commands to retrieve arbitrary information about your running system." -msgstr "VyOS features a rich set of operational level commands to retrieve arbitrary information about your running system." +msgstr "VyOS має багатий набір команд робочого рівня для отримання довільної інформації про вашу запущену систему." #: ../../operation/boot-options.rst:14 msgid "VyOS has several kernel command line options to modify the normal boot process. To add an option, select the desired image in GRUB menu at load time, press **e**, edit the first line, and press **Ctrl-x** to boot when ready." -msgstr "VyOS has several kernel command line options to modify the normal boot process. To add an option, select the desired image in GRUB menu at load time, press **e**, edit the first line, and press **Ctrl-x** to boot when ready." +msgstr "VyOS має кілька параметрів командного рядка ядра для зміни нормального процесу завантаження. Щоб додати параметр, виберіть потрібне зображення в меню GRUB під час завантаження, натисніть **e**, відредагуйте перший рядок і натисніть **Ctrl-x** для завантаження, коли все буде готове." #: ../../operation/raid.rst:105 msgid "When the VyOS software on a system with a RAID 1 set already configured, the installation utility will detect the array and will display the following prompt:" -msgstr "When the VyOS software on a system with a RAID 1 set already configured, the installation utility will detect the array and will display the following prompt:" +msgstr "Коли програмне забезпечення VyOS у системі з уже налаштованим RAID 1, утиліта встановлення виявить масив і відобразить таке повідомлення:" #: ../../operation/raid.rst:48 msgid "When the VyOS system is installed, it automatically detects the presence of two disks not currently part of a RAID array. In these cases, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt." -msgstr "When the VyOS system is installed, it automatically detects the presence of two disks not currently part of a RAID array. In these cases, the VyOS installation utility automatically offers you the option of configuring RAID 1 mirroring for the drives, with the following prompt." +msgstr "Коли встановлено систему VyOS, вона автоматично визначає наявність двох дисків, які наразі не є частиною масиву RAID. У цих випадках утиліта встановлення VyOS автоматично пропонує вам налаштувати віддзеркалення RAID 1 для дисків із наступною підказкою." #: ../../operation/raid.rst:115 msgid "installation utility detects that there are two identical disks and offers you the option of configuring RAID 1 mirroring on them, displaying the following prompt:" -msgstr "installation utility detects that there are two identical disks and offers you the option of configuring RAID 1 mirroring on them, displaying the following prompt:" +msgstr "утиліта інсталяції виявляє наявність двох ідентичних дисків і пропонує вам налаштувати віддзеркалення RAID 1 на них, відображаючи таке повідомлення:" #: ../../operation/boot-options.rst:54 msgid "no-vyos-firewall" @@ -311,16 +311,16 @@ msgstr "no-vyos-migrate" #: ../../operation/raid.rst:201 msgid "shows output for show raid md0 as sdb1 is being added to the RAID 1 set and is in the process of being resynchronized." -msgstr "shows output for show raid md0 as sdb1 is being added to the RAID 1 set and is in the process of being resynchronized." +msgstr "показує вихід для show raid md0, оскільки sdb1 додається до набору RAID 1 і знаходиться в процесі повторної синхронізації." #: ../../operation/raid.rst:159 msgid "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the failed disk partition (for example, sdb2)." -msgstr "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the failed disk partition (for example, sdb2)." +msgstr "де RAID-1-device — це ім’я пристрою RAID 1 (наприклад, md0), а disk-partition — ім’я несправного розділу диска (наприклад, sdb2)." #: ../../operation/raid.rst:178 msgid "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the replacement disk partition (for example, sdb2)." -msgstr "where RAID-1-device is the name of the RAID 1 device (for example, md0) and disk-partition is the name of the replacement disk partition (for example, sdb2)." +msgstr "де RAID-1-device — це ім’я пристрою RAID 1 (наприклад, md0), а disk-partition — це ім’я розділу диска для заміни (наприклад, sdb2)." #: ../../operation/raid.rst:171 msgid "where disk-device1 is the replacement disk (for example, sdb) and disk-device2 is the existing healthy disk (for example, sda)." -msgstr "where disk-device1 is the replacement disk (for example, sdb) and disk-device2 is the existing healthy disk (for example, sda)." +msgstr "де disk-device1 — диск для заміни (наприклад, sdb), а disk-device2 — існуючий справний диск (наприклад, sda)." diff --git a/docs/_locale/uk/quick-start.pot b/docs/_locale/uk/quick-start.pot index dd040c21..3b158416 100644 --- a/docs/_locale/uk/quick-start.pot +++ b/docs/_locale/uk/quick-start.pot @@ -26,19 +26,19 @@ msgstr "A rule to ``drop`` packets from invalid connections." #: ../../quick-start.rst:125 msgid "Add a set of firewall policies for our outside/WAN interface." -msgstr "Add a set of firewall policies for our outside/WAN interface." +msgstr "Додайте набір політик брандмауера для зовнішнього/WAN-інтерфейсу." #: ../../quick-start.rst:29 msgid "After every configuration change, you need to apply the changes by using the following command:" -msgstr "After every configuration change, you need to apply the changes by using the following command:" +msgstr "Після кожної зміни конфігурації вам потрібно застосувати зміни за допомогою такої команди:" #: ../../quick-start.rst:65 msgid "After switching to :ref:`quick-start-configuration-mode` issue the following commands, and your system will listen on every interface for incoming SSH connections. You might want to check the :ref:`ssh` chapter on how to listen on specific addresses only." -msgstr "After switching to :ref:`quick-start-configuration-mode` issue the following commands, and your system will listen on every interface for incoming SSH connections. You might want to check the :ref:`ssh` chapter on how to listen on specific addresses only." +msgstr "Після переходу в режим :ref:`quick-start-configuration-mode` виконайте наступні команди, і ваша система прослуховуватиме вхідні з’єднання SSH на кожному інтерфейсі. Ви можете переглянути розділ :ref:`ssh` про те, як прослуховувати лише певні адреси." #: ../../quick-start.rst:51 msgid "After switching to :ref:`quick-start-configuration-mode` issue the following commands:" -msgstr "After switching to :ref:`quick-start-configuration-mode` issue the following commands:" +msgstr "Після переходу в режим :ref:`quick-start-configuration-mode` виконайте такі команди:" #: ../../quick-start.rst:311 msgid "Allow Access to Services" @@ -58,11 +58,11 @@ msgstr "Alternatively, you can take the more traditional stateful connection fil #: ../../quick-start.rst:167 msgid "Apply the firewall policies:" -msgstr "Apply the firewall policies:" +msgstr "Застосуйте правила брандмауера:" #: ../../quick-start.rst:377 msgid "As above, commit your changes, save the configuration, and exit configuration mode:" -msgstr "As above, commit your changes, save the configuration, and exit configuration mode:" +msgstr "Як і вище, закріпіть свої зміни, збережіть конфігурацію та вийдіть з режиму конфігурації:" #: ../../quick-start.rst:237 msgid "Block Incoming Traffic" @@ -70,7 +70,7 @@ msgstr "Block Incoming Traffic" #: ../../quick-start.rst:17 msgid "By default, VyOS is in operational mode, and the command prompt displays a `$`. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a `#`, as demonstrated below:" -msgstr "By default, VyOS is in operational mode, and the command prompt displays a `$`. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a `#`, as demonstrated below:" +msgstr "За замовчуванням VyOS знаходиться в робочому режимі, і в командному рядку відображається `$`. Щоб налаштувати VyOS, вам потрібно буде увійти в режим конфігурації, у результаті чого в командному рядку відображатиметься `#`, як показано нижче:" #: ../../quick-start.rst:17 msgid "By default, VyOS is in operational mode, and the command prompt displays a ``$``. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a ``#``, as demonstrated below:" @@ -78,15 +78,15 @@ msgstr "By default, VyOS is in operational mode, and the command prompt displays #: ../../quick-start.rst:27 msgid "Commit and Save" -msgstr "Commit and Save" +msgstr "Здійснити та зберегти" #: ../../quick-start.rst:337 msgid "Commit changes, save the configuration, and exit configuration mode:" -msgstr "Commit changes, save the configuration, and exit configuration mode:" +msgstr "Зафіксувати зміни, зберегти конфігурацію та вийти з режиму конфігурації:" #: ../../quick-start.rst:15 msgid "Configuration Mode" -msgstr "Configuration Mode" +msgstr "Режим конфігурації" #: ../../quick-start.rst:138 msgid "Configure Firewall Groups" @@ -101,16 +101,20 @@ msgid "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAG msgstr "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:" #: ../../quick-start.rst:243 +msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." +msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicitly allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." + +#: ../../quick-start.rst:243 msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network." #: ../../quick-start.rst:78 msgid "DHCP/DNS quick-start" -msgstr "DHCP/DNS quick-start" +msgstr "Швидкий старт DHCP/DNS" #: ../../quick-start.rst:87 msgid "DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254` and have a domain name of `internal-network`" -msgstr "DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254` and have a domain name of `internal-network`" +msgstr "Клієнтам DHCP буде призначено IP-адреси в діапазоні `192.168.0.9 - 192.168.0.254` і матиме доменне ім'я `internal-network`" #: ../../quick-start.rst:87 msgid "DHCP clients will be assigned IP addresses within the range of ``192.168.0.9 - 192.168.0.254`` and have a domain name of ``internal-network``" @@ -118,7 +122,7 @@ msgstr "DHCP clients will be assigned IP addresses within the range of ``192.168 #: ../../quick-start.rst:89 msgid "DHCP leases will hold for one day (86400 seconds)" -msgstr "DHCP leases will hold for one day (86400 seconds)" +msgstr "Оренда DHCP триватиме один день (86400 секунд)" #: ../../quick-start.rst:131 msgid "Documentation for most of the new firewall CLI can be found in the :ref:`firewall` chapter.The legacy firewall is still available for versions before ``1.4-rolling-202308040557`` and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the new configuration." @@ -126,7 +130,7 @@ msgstr "Documentation for most of the new firewall CLI can be found in the :ref: #: ../../quick-start.rst:351 msgid "Especially if you are allowing SSH remote access from the outside/WAN interface, there are a few additional configuration steps that should be taken." -msgstr "Especially if you are allowing SSH remote access from the outside/WAN interface, there are a few additional configuration steps that should be taken." +msgstr "Особливо якщо ви дозволяєте віддалений доступ через SSH із зовнішнього/WAN-інтерфейсу, необхідно виконати кілька додаткових кроків налаштування." #: ../../quick-start.rst:291 msgid "Finally, configure the ``VyOS_MANAGEMENT`` chain to accept connection from the ``LAN`` interface group while limiting requests coming from the ``WAN`` interface group to 4 per minute:" @@ -134,7 +138,7 @@ msgstr "Finally, configure the ``VyOS_MANAGEMENT`` chain to accept connection fr #: ../../quick-start.rst:367 msgid "Finally, try and SSH into the VyOS install as your new user. Once you have confirmed that your new user can access your router without a password, delete the original ``vyos`` user and completely disable password authentication for :ref:`ssh`:" -msgstr "Finally, try and SSH into the VyOS install as your new user. Once you have confirmed that your new user can access your router without a password, delete the original ``vyos`` user and completely disable password authentication for :ref:`ssh`:" +msgstr "Нарешті, спробуйте встановити SSH у VyOS як новий користувач. Після того, як ви підтвердите, що ваш новий користувач може отримати доступ до вашого маршрутизатора без пароля, видаліть початкового користувача ``vyos`` і повністю вимкніть автентифікацію пароля для :ref:`ssh`:" #: ../../quick-start.rst:329 msgid "Finally, we can now configure access to the services running on this router, allowing all connections coming from localhost:" @@ -142,7 +146,7 @@ msgstr "Finally, we can now configure access to the services running on this rou #: ../../quick-start.rst:123 msgid "Firewall" -msgstr "Firewall" +msgstr "Брандмауер" #: ../../quick-start.rst:273 msgid "First, create a new dedicated chain (``VyOS_MANAGEMENT``) for management access, which returns to the parent chain if no action is taken. Add a rule to accept traffic from the ``LAN`` interface group:" @@ -150,7 +154,7 @@ msgstr "First, create a new dedicated chain (``VyOS_MANAGEMENT``) for management #: ../../quick-start.rst:349 msgid "Hardening" -msgstr "Hardening" +msgstr "Загартовування" #: ../../quick-start.rst:313 msgid "Here we're allowing the router to respond to pings. Then, we can allow access to the DNS recursor we configured earlier, accepting traffic bound for port 53 from all hosts on the ``NET-INSIDE-v4`` network:" @@ -158,7 +162,7 @@ msgstr "Here we're allowing the router to respond to pings. Then, we can allow a #: ../../quick-start.rst:146 msgid "If you wanted to enable SSH access to your firewall from the outside/WAN interface, you could create some additional rules to allow that kind of traffic." -msgstr "If you wanted to enable SSH access to your firewall from the outside/WAN interface, you could create some additional rules to allow that kind of traffic." +msgstr "Якщо ви хочете ввімкнути SSH-доступ до брандмауера із зовнішнього/WAN-інтерфейсу, ви можете створити деякі додаткові правила, щоб дозволити такий тип трафіку." #: ../../quick-start.rst:145 msgid "In this case, we will create two interface groups — a ``WAN`` group for our interfaces connected to the public internet and a ``LAN`` group for the interfaces connected to our internal network. Additionally, we will create a network group, ``NET-INSIDE-v4``, that contains our internal subnet." @@ -170,7 +174,7 @@ msgstr "In this case, we will create two interface groups—a ``WAN`` group for #: ../../quick-start.rst:44 msgid "Interface Configuration" -msgstr "Interface Configuration" +msgstr "Конфігурація інтерфейсу" #: ../../quick-start.rst:170 msgid "Most installations would choose this option, and will contain:" @@ -186,11 +190,11 @@ msgstr "Now that we have configured stateful connection filtering to allow traff #: ../../quick-start.rst:36 msgid "Once your configuration works as expected, you can save it permanently by using the following command:" -msgstr "Once your configuration works as expected, you can save it permanently by using the following command:" +msgstr "Коли ваша конфігурація запрацює належним чином, ви можете зберегти її назавжди за допомогою такої команди:" #: ../../quick-start.rst:92 msgid "Only hosts from your internal/LAN network can use the DNS recursor" -msgstr "Only hosts from your internal/LAN network can use the DNS recursor" +msgstr "Тільки хости з вашої внутрішньої/LAN мережі можуть використовувати рекурсор DNS" #: ../../quick-start.rst:162 msgid "Option 1: Common Chain" @@ -214,7 +218,7 @@ msgstr "Option 3: Per-Hook Chain" #: ../../quick-start.rst:5 msgid "Quick Start" -msgstr "Quick Start" +msgstr "Швидкий початок" #: ../../quick-start.rst:354 msgid "Replace the default ``vyos`` system user:" @@ -222,19 +226,19 @@ msgstr "Replace the default ``vyos`` system user:" #: ../../quick-start.rst:192 msgid "Replace the default `vyos` system user:" -msgstr "Replace the default `vyos` system user:" +msgstr "Замініть системного користувача за замовчуванням `vyos`:" #: ../../quick-start.rst:63 msgid "SSH Management" -msgstr "SSH Management" +msgstr "Управління SSH" #: ../../quick-start.rst:360 msgid "Set up :ref:`ssh_key_based_authentication`:" -msgstr "Set up :ref:`ssh_key_based_authentication`:" +msgstr "Налаштувати :ref:`ssh_key_based_authentication`:" #: ../../quick-start.rst:85 msgid "The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for static assignments" -msgstr "The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for static assignments" +msgstr "Діапазон адрес `192.168.0.2/24 - 192.168.0.8/24` буде зарезервовано для статичних призначень" #: ../../quick-start.rst:85 msgid "The address range ``192.168.0.2/24 - 192.168.0.8/24`` will be reserved for static assignments" @@ -246,7 +250,7 @@ msgstr "The chain we will create is called ``CONN_FILTER`` and has three rules:" #: ../../quick-start.rst:84 msgid "The default gateway and DNS recursor address will be `192.168.0.1/24`" -msgstr "The default gateway and DNS recursor address will be `192.168.0.1/24`" +msgstr "Шлюз за замовчуванням і адреса рекурсора DNS будуть `192.168.0.1/24`." #: ../../quick-start.rst:84 msgid "The default gateway and DNS recursor address will be ``192.168.0.1/24``" @@ -258,11 +262,11 @@ msgstr "The firewall begins with the base ``filter`` tables you define for each #: ../../quick-start.rst:80 msgid "The following settings will configure DHCP and DNS services on your internal/LAN network, where VyOS will act as the default gateway and DNS server." -msgstr "The following settings will configure DHCP and DNS services on your internal/LAN network, where VyOS will act as the default gateway and DNS server." +msgstr "Наступні параметри налаштують служби DHCP і DNS у вашій внутрішній мережі/мережі LAN, де VyOS діятиме як шлюз за замовчуванням і сервер DNS." #: ../../quick-start.rst:112 msgid "The following settings will configure :ref:`source-nat` rules for our internal/LAN network, allowing hosts to communicate through the outside/WAN network via IP masquerade." -msgstr "The following settings will configure :ref:`source-nat` rules for our internal/LAN network, allowing hosts to communicate through the outside/WAN network via IP masquerade." +msgstr "Наступні параметри налаштують правила :ref:`source-nat` для нашої внутрішньої/LAN мережі, дозволяючи хостам спілкуватися через зовнішню/WAN мережу через IP-маскарад." #: ../../quick-start.rst:205 msgid "Then, we can jump to the common chain from both the ``forward`` and ``input`` hooks as the first filtering rule in the respective chains:" @@ -270,7 +274,7 @@ msgstr "Then, we can jump to the common chain from both the ``forward`` and ``in #: ../../quick-start.rst:150 msgid "These rules allow SSH traffic and rate limit it to 4 requests per minute. This blocks brute-forcing attempts:" -msgstr "These rules allow SSH traffic and rate limit it to 4 requests per minute. This blocks brute-forcing attempts:" +msgstr "Ці правила дозволяють трафік SSH і обмежують його швидкість до 4 запитів на хвилину. Це блокує спроби грубого форсування:" #: ../../quick-start.rst:7 msgid "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (``eth0`` and ``eth1``)." @@ -278,11 +282,11 @@ msgstr "This chapter will guide you on how to get up to speed quickly using your #: ../../quick-start.rst:7 msgid "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (`eth0` and `eth1`)." -msgstr "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (`eth0` and `eth1`)." +msgstr "У цій главі ви дізнаєтесь, як швидко освоїти нову систему VyOS. Він покаже вам дуже простий приклад конфігурації, який забезпечить :ref:`nat` шлюз для пристрою з двома мережевими інтерфейсами (`eth0` і `eth1`)." #: ../../quick-start.rst:127 msgid "This configuration creates a proper stateful firewall that blocks all traffic which was not initiated from the internal/LAN side first." -msgstr "This configuration creates a proper stateful firewall that blocks all traffic which was not initiated from the internal/LAN side first." +msgstr "Ця конфігурація створює правильний брандмауер із збереженням стану, який блокує весь трафік, який спочатку не було ініційовано з боку внутрішньої мережі/LAN." #: ../../quick-start.rst:140 msgid "To make firewall configuration easier, we can create groups of interfaces, networks, addresses, ports, and domains that describe different parts of our network. We can then use them for filtering within our firewall rulesets, allowing for more concise and readable configuration." @@ -292,9 +296,13 @@ msgstr "To make firewall configuration easier, we can create groups of interface msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall." +#: ../../quick-start.rst:164 +msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." +msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be evaluated before any other rule defined in the firewall." + #: ../../quick-start.rst:90 msgid "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" -msgstr "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)" +msgstr "VyOS слугуватиме повним DNS-рекурсором, замінюючи потребу у використанні Google, Cloudflare або інших загальнодоступних DNS-серверів (що добре для конфіденційності)" #: ../../quick-start.rst:181 msgid "We can create a common chain for stateful connection filtering of multiple interfaces (or multiple netfilter hooks on one interface). Those individual chains can then jump to the common chain for stateful connection filtering, returning to the original chain for further rule processing if no action is taken on the packet." @@ -318,7 +326,7 @@ msgstr "With the new firewall structure, we have have a lot of flexibility in ho #: ../../quick-start.rst:389 msgid "You now should have a simple yet secure and functioning router to experiment with further. Enjoy!" -msgstr "You now should have a simple yet secure and functioning router to experiment with further. Enjoy!" +msgstr "Тепер у вас повинен бути простий, але безпечний і функціональний маршрутизатор, з яким можна експериментувати далі. Насолоджуйтесь!" #: ../../quick-start.rst:48 msgid "Your internal/LAN interface will be ``eth1``. It will use a static IP address of ``192.168.0.1/24``." @@ -326,7 +334,7 @@ msgstr "Your internal/LAN interface will be ``eth1``. It will use a static IP ad #: ../../quick-start.rst:48 msgid "Your internal/LAN interface will be `eth1`. It will use a static IP address of `192.168.0.1/24`." -msgstr "Your internal/LAN interface will be `eth1`. It will use a static IP address of `192.168.0.1/24`." +msgstr "Ваш внутрішній/LAN інтерфейс буде `eth1`. Він використовуватиме статичну IP-адресу `192.168.0.1/24`." #: ../../quick-start.rst:46 msgid "Your outside/WAN interface will be ``eth0``. It will receive its interface address via DHCP." @@ -334,4 +342,4 @@ msgstr "Your outside/WAN interface will be ``eth0``. It will receive its interfa #: ../../quick-start.rst:46 msgid "Your outside/WAN interface will be `eth0`. It will receive its interface address via DHCP." -msgstr "Your outside/WAN interface will be `eth0`. It will receive its interface address via DHCP." +msgstr "Ваш зовнішній/WAN інтерфейс буде `eth0`. Він отримає свою адресу інтерфейсу через DHCP." diff --git a/docs/_locale/uk/troubleshooting.pot b/docs/_locale/uk/troubleshooting.pot index 9f54dee7..650704f6 100644 --- a/docs/_locale/uk/troubleshooting.pot +++ b/docs/_locale/uk/troubleshooting.pot @@ -10,281 +10,281 @@ msgstr "" #: ../../troubleshooting/index.rst:73 msgid "Advanced Connectivity Tests" -msgstr "Advanced Connectivity Tests" +msgstr "Розширені тести підключення" #: ../../troubleshooting/index.rst:196 msgid "And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically." -msgstr "And **a more generic way to fix it** is just deleting every MAC address at the configuration file of the cloned machine. They will be correctly regenerated automatically." +msgstr "І **більш загальний спосіб це виправити** — просто видалити кожну MAC-адресу у файлі конфігурації клонованої машини. Вони будуть правильно відновлені автоматично." #: ../../troubleshooting/index.rst:193 msgid "Another example could be when cloning VyOS VMs in GNS3 and you get into the same issue: interface names have changed." -msgstr "Another example could be when cloning VyOS VMs in GNS3 and you get into the same issue: interface names have changed." +msgstr "Іншим прикладом може бути клонування віртуальних машин VyOS у GNS3, і ви потрапите в ту саму проблему: назви інтерфейсів змінилися." #: ../../troubleshooting/index.rst:16 msgid "Basic Connectivity Tests" -msgstr "Basic Connectivity Tests" +msgstr "Базові тести підключення" #: ../../troubleshooting/index.rst:411 msgid "Boot Steps" -msgstr "Boot Steps" +msgstr "Етапи завантаження" #: ../../troubleshooting/index.rst:13 msgid "Connectivity Tests" -msgstr "Connectivity Tests" +msgstr "Тести підключення" #: ../../troubleshooting/index.rst:111 msgid "Discover routers via eth0." -msgstr "Discover routers via eth0." +msgstr "Знайдіть маршрутизатори через eth0." #: ../../troubleshooting/index.rst:113 #: ../../troubleshooting/index.rst:150 msgid "Example:" -msgstr "Example:" +msgstr "приклад:" #: ../../troubleshooting/index.rst:446 msgid "Finally it runs the post-config script ``/config/scripts/vyos-postconfig-bootup.script``" -msgstr "Finally it runs the post-config script ``/config/scripts/vyos-postconfig-bootup.script``" +msgstr "Нарешті, він запускає сценарій постконфігурації ``/config/scripts/vyos-postconfig-bootup.script``" #: ../../troubleshooting/index.rst:167 msgid "For example, you have a VyOS VM with 4 Ethernet interfaces named eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different host and find your interfaces now are eth4, eth5, eth6 and eth7." -msgstr "For example, you have a VyOS VM with 4 Ethernet interfaces named eth0, eth1, eth2 and eth3. Then, you migrate your VyOS VM to a different host and find your interfaces now are eth4, eth5, eth6 and eth7." +msgstr "Наприклад, у вас є віртуальна машина VyOS із 4 інтерфейсами Ethernet під назвами eth0, eth1, eth2 і eth3. Потім ви переносите віртуальну машину VyOS на інший хост і бачите, що ваші інтерфейси тепер eth4, eth5, eth6 і eth7." #: ../../troubleshooting/index.rst:419 msgid "Grub then starts the Linux boot and loads the Linux Kernel ``/boot/vmlinuz``" -msgstr "Grub then starts the Linux boot and loads the Linux Kernel ``/boot/vmlinuz``" +msgstr "Після цього Grub починає завантаження Linux і завантажує ядро Linux ``/boot/vmlinuz``" #: ../../troubleshooting/index.rst:77 msgid "However, another helper is available which combines ping and traceroute into a single tool. An example of its output is shown:" -msgstr "However, another helper is available which combines ping and traceroute into a single tool. An example of its output is shown:" +msgstr "Однак доступний інший помічник, який поєднує ping і traceroute в один інструмент. Показано приклад його виходу:" #: ../../troubleshooting/index.rst:102 msgid "IPv6 Topology Discovery" -msgstr "IPv6 Topology Discovery" +msgstr "Виявлення топології IPv6" #: ../../troubleshooting/index.rst:104 msgid "IPv6 uses different techniques to discover its Neighbors/topology." -msgstr "IPv6 uses different techniques to discover its Neighbors/topology." +msgstr "IPv6 використовує різні методи для виявлення своїх сусідів/топології." #: ../../troubleshooting/index.rst:188 msgid "If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so." -msgstr "If it is a VM, go into the settings of the host and set the MAC address to the settings found in the config.boot file. You can also set the MAC to static if the host allows so." +msgstr "Якщо це віртуальна машина, перейдіть до налаштувань хоста та встановіть для MAC-адреси параметри, знайдені у файлі config.boot. Ви також можете встановити статичний MAC, якщо це дозволяє хост." #: ../../troubleshooting/index.rst:435 msgid "If the config file was upgraded, runs any post upgrade scripts ``/config/scripts/post-upgrade.d``" -msgstr "If the config file was upgraded, runs any post upgrade scripts ``/config/scripts/post-upgrade.d``" +msgstr "Якщо файл конфігурації було оновлено, запускає будь-які сценарії після оновлення ``/config/scripts/post-upgrade.d``" #: ../../troubleshooting/index.rst:164 msgid "If you find the names of your interfaces have changed, this could be because your MAC addresses have changed." -msgstr "If you find the names of your interfaces have changed, this could be because your MAC addresses have changed." +msgstr "Якщо ви виявите, що назви ваших інтерфейсів змінилися, це може бути тому, що ваші MAC-адреси змінилися." #: ../../troubleshooting/index.rst:429 msgid "Initialises the boot configuration file - copies over ``config.boot.default`` if there is no configuration" -msgstr "Initialises the boot configuration file - copies over ``config.boot.default`` if there is no configuration" +msgstr "Ініціалізує файл конфігурації завантаження - копіює поверх ``config.boot.default``, якщо конфігурації немає" #: ../../troubleshooting/index.rst:275 msgid "Interface Bandwidth Usage" -msgstr "Interface Bandwidth Usage" +msgstr "Використання пропускної здатності інтерфейсу" #: ../../troubleshooting/index.rst:307 msgid "Interface Performance" -msgstr "Interface Performance" +msgstr "Продуктивність інтерфейсу" #: ../../troubleshooting/index.rst:162 msgid "Interface names" -msgstr "Interface names" +msgstr "Назви інтерфейсів" #: ../../troubleshooting/index.rst:420 msgid "Kernel Launches Systemd ``/lib/systemd/systemd``" -msgstr "Kernel Launches Systemd ``/lib/systemd/systemd``" +msgstr "Ядро запускає Systemd ``/lib/systemd/systemd``" #: ../../troubleshooting/index.rst:173 msgid "Log into VyOS and run this command to display your interface settings." -msgstr "Log into VyOS and run this command to display your interface settings." +msgstr "Увійдіть у VyOS і запустіть цю команду, щоб відобразити налаштування інтерфейсу." #: ../../troubleshooting/index.rst:332 msgid "Monitor command" -msgstr "Monitor command" +msgstr "Команда моніторингу" #: ../../troubleshooting/index.rst:203 msgid "Monitoring" -msgstr "Monitoring" +msgstr "Моніторинг" #: ../../troubleshooting/index.rst:438 msgid "Mounts the ``/boot`` partition" -msgstr "Mounts the ``/boot`` partition" +msgstr "Монтує розділ ``/boot``" #: ../../troubleshooting/index.rst:145 msgid "Neighbor Discovery" -msgstr "Neighbor Discovery" +msgstr "Відкриття сусіда" #: ../../troubleshooting/index.rst:181 msgid "Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want." -msgstr "Now, in order to update a MAC address in the configuration, run this command specifying the interface name and MAC address you want." +msgstr "Тепер, щоб оновити MAC-адресу в конфігурації, виконайте цю команду, вказавши ім’я інтерфейсу та MAC-адресу, які ви хочете." #: ../../troubleshooting/index.rst:171 msgid "One way to fix this issue **taking control of the MAC addresses** is:" -msgstr "One way to fix this issue **taking control of the MAC addresses** is:" +msgstr "Один зі способів вирішення цієї проблеми **взявши під контроль MAC-адреси**:" #: ../../troubleshooting/index.rst:107 msgid "Router Discovery" -msgstr "Router Discovery" +msgstr "Виявлення маршрутизатора" #: ../../troubleshooting/index.rst:433 msgid "Runs The pre-config script, if there is one ``/config/scripts/vyos-preconfig-bootup.script``" -msgstr "Runs The pre-config script, if there is one ``/config/scripts/vyos-preconfig-bootup.script``" +msgstr "Запускає сценарій попередньої конфігурації, якщо є такий ``/config/scripts/vyos-preconfig-bootup.script``" #: ../../troubleshooting/index.rst:445 msgid "Runs ``telinit q`` to tell the init system to reload ``/etc/inittab``" -msgstr "Runs ``telinit q`` to tell the init system to reload ``/etc/inittab``" +msgstr "Запускає ``telinit q``, щоб сказати системі ініціалізації перезавантажити ``/etc/inittab``" #: ../../troubleshooting/index.rst:431 msgid "Runs the configuration migration, if the configuration is for an older version of VyOS" -msgstr "Runs the configuration migration, if the configuration is for an older version of VyOS" +msgstr "Запускає міграцію конфігурації, якщо конфігурація призначена для старішої версії VyOS" #: ../../troubleshooting/index.rst:25 msgid "Send ICMP echo requests to destination host. There are multiple options to ping, inkl. VRF support." -msgstr "Send ICMP echo requests to destination host. There are multiple options to ping, inkl. VRF support." +msgstr "Надсилайте ехо-запити ICMP на цільовий хост. Є кілька варіантів пінгування, зокрема. Підтримка VRF." #: ../../troubleshooting/index.rst:97 msgid "Several options are available for changing the display output. Press `h` to invoke the built in help system. To quit, just press `q` and you'll be returned to the VyOS command prompt." -msgstr "Several options are available for changing the display output. Press `h` to invoke the built in help system. To quit, just press `q` and you'll be returned to the VyOS command prompt." +msgstr "Доступно кілька варіантів зміни вихідного сигналу дисплея. Натисніть `h`, щоб викликати вбудовану довідкову систему. Щоб вийти, просто натисніть `q`, і ви повернетеся до командного рядка VyOS." #: ../../troubleshooting/index.rst:7 msgid "Sometimes things break or don't work as expected. This section describes several troubleshooting tools provided by VyOS that can help when something goes wrong." -msgstr "Sometimes things break or don't work as expected. This section describes several troubleshooting tools provided by VyOS that can help when something goes wrong." +msgstr "Іноді щось ламається або працює не так, як очікувалося. У цьому розділі описано кілька інструментів усунення несправностей, наданих VyOS, які можуть допомогти, коли щось піде не так." #: ../../troubleshooting/index.rst:364 msgid "Sometimes you need to clear counters or statistics to troubleshoot better." -msgstr "Sometimes you need to clear counters or statistics to troubleshoot better." +msgstr "Іноді вам потрібно очистити лічильники або статистику, щоб краще усунути несправності." #: ../../troubleshooting/index.rst:427 msgid "Starts FRR_ - successor to `GNU Zebra`_ and Quagga_" -msgstr "Starts FRR_ - successor to `GNU Zebra`_ and Quagga_" +msgstr "Запускає FRR_ - наступника `GNU Zebra`_ і Quagga_" #: ../../troubleshooting/index.rst:437 msgid "Starts ``rl-system`` and ``firewall``" -msgstr "Starts ``rl-system`` and ``firewall``" +msgstr "Запускає ``rl-system`` і ``firewall``" #: ../../troubleshooting/index.rst:406 msgid "System Information" -msgstr "System Information" +msgstr "Інформація про систему" #: ../../troubleshooting/index.rst:421 msgid "Systemd loads the VyOS service file ``/lib/systemd/system/vyos-router.service``" -msgstr "Systemd loads the VyOS service file ``/lib/systemd/system/vyos-router.service``" +msgstr "Systemd завантажує службовий файл VyOS ``/lib/systemd/system/vyos-router.service``" #: ../../troubleshooting/index.rst:179 msgid "Take note of MAC addresses." -msgstr "Take note of MAC addresses." +msgstr "Зверніть увагу на MAC-адреси." #: ../../troubleshooting/index.rst:362 msgid "Terminal/Console" -msgstr "Terminal/Console" +msgstr "Термінал/Консоль" #: ../../troubleshooting/index.rst:418 msgid "The BIOS loads Grub (or isolinux for the Live CD)" -msgstr "The BIOS loads Grub (or isolinux for the Live CD)" +msgstr "BIOS завантажує Grub (або isolinux для Live CD)" #: ../../troubleshooting/index.rst:319 msgid "The ``accept`` command opens a listening iperf server on TCP Port 5001" -msgstr "The ``accept`` command opens a listening iperf server on TCP Port 5001" +msgstr "Команда ``accept`` відкриває слухаючий сервер iperf на порту TCP 5001" #: ../../troubleshooting/index.rst:320 msgid "The ``initiate`` command connects to that server to perform the test." -msgstr "The ``initiate`` command connects to that server to perform the test." +msgstr "Команда ``initiate`` підключається до цього сервера для виконання тесту." #: ../../troubleshooting/index.rst:334 msgid "The ``monitor command`` command allows you to repeatedly run a command to view a continuously refreshed output. The command is run and output every 2 seconds, allowing you to monitor the output continuously without having to re-run the command. This can be useful to follow routing adjacency formation." -msgstr "The ``monitor command`` command allows you to repeatedly run a command to view a continuously refreshed output. The command is run and output every 2 seconds, allowing you to monitor the output continuously without having to re-run the command. This can be useful to follow routing adjacency formation." +msgstr "Команда ``monitor command`` дозволяє вам багаторазово запускати команду для перегляду безперервно оновленого виводу. Команда виконується та виводиться кожні 2 секунди, що дозволяє постійно контролювати вихідні дані без повторного запуску команди. Це може бути корисним для відстеження формування суміжності маршрутизації." #: ../../troubleshooting/index.rst:439 msgid "The boot configuration file is then applied by ``/opt/vyatta/sbin/ vyatta-boot-config-loader/opt/vyatta/etc/config/config.boot``" -msgstr "The boot configuration file is then applied by ``/opt/vyatta/sbin/ vyatta-boot-config-loader/opt/vyatta/etc/config/config.boot``" +msgstr "Потім файл конфігурації завантаження застосовано за допомогою ``/opt/vyatta/sbin/ vyatta-boot-config-loader/opt/vyatta/etc/config/config.boot``" #: ../../troubleshooting/index.rst:383 msgid "The command follow the same logic as the ``set`` command in configuration mode." -msgstr "The command follow the same logic as the ``set`` command in configuration mode." +msgstr "Команда дотримується тієї ж логіки, що й команда ``set`` у режимі налаштування." #: ../../troubleshooting/index.rst:442 msgid "The config loader script writes log entries to ``/var/log/vyatta-config-loader.log``" -msgstr "The config loader script writes log entries to ``/var/log/vyatta-config-loader.log``" +msgstr "Сценарій завантажувача конфігурації записує записи журналу в ``/var/log/vyatta-config-loader.log``" #: ../../troubleshooting/index.rst:94 msgid "The output consumes the screen and will replace your command prompt." -msgstr "The output consumes the screen and will replace your command prompt." +msgstr "Результат займає весь екран і замінює ваш командний рядок." #: ../../troubleshooting/index.rst:423 msgid "The service file launches the VyOS router init script ``/usr/libexec/vyos/init/vyos-router`` - this is part of the vyatta-cfg_ Debian package" -msgstr "The service file launches the VyOS router init script ``/usr/libexec/vyos/init/vyos-router`` - this is part of the vyatta-cfg_ Debian package" +msgstr "Сервісний файл запускає сценарій ініціалізації маршрутизатора VyOS ``/usr/libexec/vyos/init/vyos-router`` - це частина пакета vyatta-cfg_ Debian" #: ../../troubleshooting/index.rst:416 msgid "These are the boot steps for VyOS 1.2" -msgstr "These are the boot steps for VyOS 1.2" +msgstr "Це кроки завантаження для VyOS 1.2" #: ../../troubleshooting/index.rst:366 msgid "To do this use the ``clear`` command in Operational mode." -msgstr "To do this use the ``clear`` command in Operational mode." +msgstr "Для цього використовуйте команду ``clear`` в робочому режимі." #: ../../troubleshooting/index.rst:242 msgid "To monitor interface traffic, issue the :code:`monitor traffic interface <name>` command, replacing `<name>` with your chosen interface." -msgstr "To monitor interface traffic, issue the :code:`monitor traffic interface <name>` command, replacing `<name>` with your chosen interface." +msgstr "Щоб контролювати трафік інтерфейсу, запустіть інтерфейс трафіку :code:`monitor<name> ` команда, що замінює `<name> ` з вибраним інтерфейсом." #: ../../troubleshooting/index.rst:260 msgid "To quit monitoring, press `Ctrl-c` and you'll be returned to the VyOS command prompt." -msgstr "To quit monitoring, press `Ctrl-c` and you'll be returned to the VyOS command prompt." +msgstr "Щоб вийти з моніторингу, натисніть `Ctrl-c`, і ви повернетеся до командного рядка VyOS." #: ../../troubleshooting/index.rst:309 msgid "To take a look on the network bandwidth between two nodes, the ``monitor bandwidth-test`` command is used to run iperf." -msgstr "To take a look on the network bandwidth between two nodes, the ``monitor bandwidth-test`` command is used to run iperf." +msgstr "Щоб переглянути пропускну здатність мережі між двома вузлами, для запуску iperf використовується команда ``monitor bandwidth-test``." #: ../../troubleshooting/index.rst:59 msgid "Trace path to target." -msgstr "Trace path to target." +msgstr "Простежте шлях до мети." #: ../../troubleshooting/index.rst:240 msgid "Traffic Dumps" -msgstr "Traffic Dumps" +msgstr "Дампи трафіку" #: ../../troubleshooting/index.rst:263 msgid "Traffic can be filtered and saved." -msgstr "Traffic can be filtered and saved." +msgstr "Трафік можна фільтрувати та зберігати." #: ../../troubleshooting/index.rst:5 msgid "Troubleshooting" -msgstr "Troubleshooting" +msgstr "Вирішення проблем" #: ../../troubleshooting/index.rst:18 msgid "Verifying connectivity can be done with the familiar `ping` and `traceroute` commands. The options for each are shown (the options for each command were displayed using the built-in help as described in the :ref:`cli` section and are omitted from the output here):" -msgstr "Verifying connectivity can be done with the familiar `ping` and `traceroute` commands. The options for each are shown (the options for each command were displayed using the built-in help as described in the :ref:`cli` section and are omitted from the output here):" +msgstr "Перевірити підключення можна за допомогою знайомих команд `ping` і `traceroute`. Відображаються параметри для кожної команди (параметри для кожної команди відображаються за допомогою вбудованої довідки, як описано в розділі :ref:`cli`, і тут не наводяться у вихідних даних):" #: ../../troubleshooting/index.rst:413 msgid "VyOS 1.2 uses `Debian Jessie`_ as the base Linux operating system. Jessie was the first version of Debian that uses systemd_ as the default init system." -msgstr "VyOS 1.2 uses `Debian Jessie`_ as the base Linux operating system. Jessie was the first version of Debian that uses systemd_ as the default init system." +msgstr "VyOS 1.2 використовує `Debian Jessie`_ як базову операційну систему Linux. Jessie була першою версією Debian, яка використовує systemd_ як систему ініціалізації за замовчуванням." #: ../../troubleshooting/index.rst:205 msgid "VyOS features several monitoring tools." -msgstr "VyOS features several monitoring tools." +msgstr "VyOS має кілька інструментів моніторингу." #: ../../troubleshooting/index.rst:343 msgid "Will clear the screen and show you the output of ``show interfaces`` every 2 seconds." -msgstr "Will clear the screen and show you the output of ``show interfaces`` every 2 seconds." +msgstr "Очищає екран і кожні 2 секунди показує результат ``показати інтерфейси``." #: ../../troubleshooting/index.rst:284 msgid "show the following:" -msgstr "show the following:" +msgstr "показати наступне:" #: ../../troubleshooting/index.rst:393 msgid "to clear counters on firewall rulesets or single rules" -msgstr "to clear counters on firewall rulesets or single rules" +msgstr "щоб очистити лічильники наборів правил брандмауера або окремих правил" #: ../../troubleshooting/index.rst:374 msgid "to clear interface counters" -msgstr "to clear interface counters" +msgstr "щоб очистити лічильники інтерфейсу" #: ../../troubleshooting/index.rst:368 msgid "to clear the console output" -msgstr "to clear the console output" +msgstr "щоб очистити вихід консолі" #: ../../troubleshooting/index.rst:277 msgid "to take a quick view on the used bandwidth of an interface use the ``monitor bandwidth`` command" -msgstr "to take a quick view on the used bandwidth of an interface use the ``monitor bandwidth`` command" +msgstr "щоб швидко переглянути використану пропускну здатність інтерфейсу, скористайтеся командою ``monitor bandwidth``" diff --git a/docs/_static/images/json.png b/docs/_static/images/json.png Binary files differnew file mode 100644 index 00000000..6c884e8e --- /dev/null +++ b/docs/_static/images/json.png diff --git a/docs/_static/images/key.png b/docs/_static/images/key.png Binary files differnew file mode 100644 index 00000000..7d9366f4 --- /dev/null +++ b/docs/_static/images/key.png diff --git a/docs/_static/images/project.png b/docs/_static/images/project.png Binary files differnew file mode 100644 index 00000000..6f844c23 --- /dev/null +++ b/docs/_static/images/project.png diff --git a/docs/_static/images/service.png b/docs/_static/images/service.png Binary files differnew file mode 100644 index 00000000..e2a9bbbc --- /dev/null +++ b/docs/_static/images/service.png diff --git a/docs/automation/cloud-init.rst b/docs/automation/cloud-init.rst index bbc8967c..0b9ee207 100644 --- a/docs/automation/cloud-init.rst +++ b/docs/automation/cloud-init.rst @@ -8,8 +8,8 @@ VyOS cloud-init Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as -injecting SSH keys and configuring the network. In addition, the user can supply -a custom configuration at the time of instance launch. +injecting SSH keys and configuring the network. In addition, the user can +supply a custom configuration at the time of instance launch. ************** Config Sources @@ -25,9 +25,9 @@ VyOS support three types of config sources. network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms. -* User-data - User-data is specified by the user. This config source offers the - ability to insert any CLI configuration commands into the configuration before - the first boot. +* User-data - User-data is specified by the user. This config source offers + the ability to insert any CLI configuration commands into the configuration + before the first boot. ********* User-data @@ -39,8 +39,8 @@ depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data. -The easiest way to configure the system via user-data is the Cloud-config syntax -described below. +The easiest way to configure the system via user-data is the Cloud-config +syntax described below. ******************** Cloud-config modules @@ -50,11 +50,12 @@ In VyOS, by default, enables only two modules: * ``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, - certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_. + certificates, or even a whole ``config.boot`` file. The format is described + in the cloudinit documentation `Cloud-init-write_files`_. -* ``vyos_userdata`` - the module accepts a list of CLI configuration commands in - a ``vyos_config_commands`` section, which gives an easy way to configure the - system during deployment. +* ``vyos_userdata`` - the module accepts a list of CLI configuration commands + in a ``vyos_config_commands`` section, which gives an easy way to configure + the system during deployment. ************************ cloud-config file format @@ -62,8 +63,8 @@ cloud-config file format A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are -``vyos_config_commands`` and ``write_files``. The use of these keys is described -in the following two sections. +``vyos_config_commands`` and ``write_files``. The use of these keys is +described in the following two sections. ************************ @@ -81,13 +82,16 @@ Commands requirements: * If command ends in a value, it must be inside single quotes. * A single-quote symbol is not allowed inside command or value. -The commands list produced by the ``show configuration commands`` command on a -VyOS router should comply with all the requirements, so it is easy to get a -proper commands list by copying it from another router. +The commands list produced by the ``show configuration commands`` command +on a VyOS router should comply with all the requirements, so it is easy +to get a proper commands list by copying it from another router. The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata. +After the ``vyos_config_commands`` are executed, cloud-init will +automatically perform a ``commit`` and ``save`` operation. + Here is an example cloud-config that appends configuration at the time of first boot. @@ -214,9 +218,8 @@ the method with KVM to attach the ISO as a CD drive follows. --noautoconsole -For more information on the NoCloud data source, visit its `page -<https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html>`_ -in the cloud-init documentation. +For more information on the NoCloud data source, visit its +page `nocloud`_ in the cloud-init documentation. *************** Troubleshooting @@ -227,8 +230,8 @@ valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML. cloud-init logs to /var/log/cloud-init.log. This file can be helpful in -determining why the configuration varies from what you expect. You can fetch the -most important data filtering output for ``vyos`` keyword: +determining why the configuration varies from what you expect. You can fetch +the most important data filtering output for ``vyos`` keyword: .. code-block:: none @@ -428,5 +431,5 @@ References .. _cloud-init-docs: https://docs.vyos.io/en/equuleus/automation/cloud-init.html?highlight=cloud-init#vyos-cloud-init .. _Cloud-init-Support: https://pve.proxmox.com/pve-docs/pve-admin-guide.html#qm_cloud_init .. _Cloud-init-write_files: https://cloudinit.readthedocs.io/en/latest/topics/examples.html#writing-out-arbitrary-files - +.. _nocloud: https://cloudinit.readthedocs.io/en/latest/reference/datasources/nocloud.html .. start_vyoslinter diff --git a/docs/automation/index.rst b/docs/automation/index.rst index 48e83a96..fe70acce 100644 --- a/docs/automation/index.rst +++ b/docs/automation/index.rst @@ -2,11 +2,6 @@ VyOS Automation ############### - - * Nornir - * startup scripts - - .. toctree:: :maxdepth: 2 diff --git a/docs/automation/terraform/index.rst b/docs/automation/terraform/index.rst index 9a51df91..42af58bd 100644 --- a/docs/automation/terraform/index.rst +++ b/docs/automation/terraform/index.rst @@ -2,17 +2,13 @@ VyOS Terraform ############## - - * Nornir - * startup scripts - - .. toctree:: :maxdepth: 1 :caption: Content + terraformvyos terraformAWS -# terraformAZ -# terraformvSphere -# terraformGoogle + terraformAZ + terraformvSphere + terraformGoogle diff --git a/docs/automation/terraform/terraformAWS.rst b/docs/automation/terraform/terraformAWS.rst index c81fe906..c705d55e 100644 --- a/docs/automation/terraform/terraformAWS.rst +++ b/docs/automation/terraform/terraformAWS.rst @@ -1,43 +1,11 @@ :lastproofread: 2024-01-11 -.. _vyos-terraform: +.. _terraformAWS: -Terraform for VyOS -================== +Deploying VyOS in the AWS cloud +=============================== -VyOS supports development infrastructure via Terraform and provisioning via Ansible. -Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. -In this article, we will look at using terraforms to deploy vyos on platforms - AWS, AZURE, and vSphere. -More detailed about what is Terraform you can write using the link_. - -Need to install_ Terraform - -Structure of files in the standard Terraform project: - -.. code-block:: none - - . - ├── main.tf # The main script - ├── version.tf # File for the changing version of Terraform. - ├── variables.tf # The file of all variables in "main.tf" - └── terraform.tfvars # The value of all variables (passwords, login, ip adresses and so on) - - -General commands that we will use for running Terraform scripts - - -.. code-block:: none - - #cd /<your folder> # go to the Terrafom project - #terraform init # install all addons and provider (aws az and so on) - #terraform plan # show wtah is changing - #terraform apply # run script - #yes # apply running - - -Deploying vyos in the AWS cloud -------------------------------- -With the help of terraforms, you can quickly deploy Vyos-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. +With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the AWS cloud. If necessary, the infrastructure can be removed using terraform. Also we will make provisioning using Ansible. @@ -58,16 +26,16 @@ Step by step: AWS -1.1 Create an account with AWS and get your "access_key", "secret key" + 1 Create an account with AWS and get your "access_key", "secret key" -1.2 Create a key pair_ and download your .pem key + 2 Create a key pair_ and download your .pem key .. image:: /_static/images/keypairs.png :width: 50% :align: center :alt: Network Topology Diagram -1.3 Create a security group_ for the new VyOS instance and open all traffic + 3 Create a security group_ for the new VyOS instance and open all traffic .. image:: /_static/images/sg.png :width: 50% @@ -83,36 +51,36 @@ AWS Terraform -2.1 Create a0 UNIX or Windows instance + 1 Create an UNIX or Windows instance -2.2 Download and install Terraform + 2 Download and install Terraform -2.3 Create the folder for example /root/awsterraform + 3 Create the folder for example /root/awsterraform .. code-block:: none mkdir /root/awsterraform -2.4 Copy all files into your Terraform project "/root/awsterraform" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_ + 4 Copy all files into your Terraform project "/root/awsterraform" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for AWS`_ -2.5 Type the commands : + 5 Type the commands : .. code-block:: none - #cd /<your folder> - #terraform init + cd /<your folder> + terraform init Ansible -3.1 Create a UNIX instance whenever you want (local, cloud, and so on) + 1 Create an UNIX instance whenever you want (local, cloud, and so on) -3.2 Download and install Ansible + 2 Download and install Ansible -3.3 Create the folder for example /root/aws/ + 3 Create the folder for example /root/aws/ -3.4 Copy all files into your Ansible project "/root/aws/" (ansible.cfg, instance.yml, mykey.pem and "all"), more detailed see `Structure of files Ansible for AWS`_ + 4 Copy all files into your Ansible project "/root/aws/" (ansible.cfg, instance.yml, mykey.pem and "all"), more detailed see `Structure of files Ansible for AWS`_ mykey.pem you have to get using step 1.2 @@ -120,14 +88,14 @@ mykey.pem you have to get using step 1.2 Start -4.1 Type the commands on your Terrafom instance: +Type the commands on your Terrafom instance: .. code-block:: none - #cd /<your folder> - #terraform plan - #terraform apply - #yes + cd /<your folder> + terraform plan + terraform apply + yes Start creating an AWS instance and check the result @@ -265,14 +233,14 @@ Start creating an AWS instance and check the result null_resource.SSHconnection2: Still creating... [40s elapsed] null_resource.SSHconnection2: Still creating... [50s elapsed] null_resource.SSHconnection2: Still creating... [1m0s elapsed] - null_resource.SSHconnection2 (remote-exec): ok: [54.144.84.120] + null_resource.SSHconnection2 (remote-exec): ok: [54.xxx.xxx.xxx] null_resource.SSHconnection2 (remote-exec): TASK [Configure general settings for the vyos hosts group] ********************* null_resource.SSHconnection2: Still creating... [1m10s elapsed] - null_resource.SSHconnection2 (remote-exec): changed: [54.144.84.120] + null_resource.SSHconnection2 (remote-exec): changed: [54.xxx.xxx.xxx] null_resource.SSHconnection2 (remote-exec): PLAY RECAP ********************************************************************* - null_resource.SSHconnection2 (remote-exec): 54.144.84.120 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 + null_resource.SSHconnection2 (remote-exec): 54.xxx.xxx.xxx : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 null_resource.SSHconnection2: Creation complete after 1m16s [id=4902256962410024771] @@ -280,7 +248,7 @@ Start creating an AWS instance and check the result Outputs: - my_IP = "54.144.84.120" + my_IP = "54.xxx.xxx.xxx" @@ -289,17 +257,17 @@ If you need to delete the instance please type the command: .. code-block:: none - #terraform destroy + terraform destroy Troubleshooting --------------- -1. Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. + 1 Ansible doesn't connect via SSH to your AWS instance: you have to check that your SSH key has copied into the path /root/aws/. Also, increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). Make sure that you have opened access to the instance in the security group. -2. Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file vyos. tf + 2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS. tf .. code-block:: none @@ -320,8 +288,8 @@ Structure of files Terrafom for AWS . ├── vyos.tf # The main script - ├── var.tf # File for the changing version of Terraform. - ├── versions.tf # The file of all variables in "vyos.tf" + ├── var.tf # The file of all variables in "vyos.tf" + ├── versions.tf # File for the changing version of Terraform. └── terraform.tfvars # The value of all variables (passwords, login, ip adresses and so on) @@ -533,7 +501,7 @@ instance.yml ############################################################################## # About tasks: # "Wait 300 seconds, but only start checking after 60 seconds" - try to make ssh connection every 60 seconds until 300 seconds - # "Configure general settings for the vyos hosts group" - make provisioning into AWS VyOS node + # "Configure general settings for the VyOS hosts group" - make provisioning into AWS VyOS node # You have to add all necessary cammans of VyOS under the block "lines:" ############################################################################## @@ -549,15 +517,15 @@ instance.yml delay: 60 timeout: 300 - - name: "Configure general settings for the vyos hosts group" + - name: "Configure general settings for the VyOS hosts group" vyos_config: lines: - - set system name-server 8.8.8.8 + - set system name-server xxx.xxx.xxx.xxx save: true -all +group_vars/all .. code-block:: none diff --git a/docs/automation/terraform/terraformAZ.rst b/docs/automation/terraform/terraformAZ.rst new file mode 100644 index 00000000..a0fea023 --- /dev/null +++ b/docs/automation/terraform/terraformAZ.rst @@ -0,0 +1,488 @@ +:lastproofread: 2024-03-03 + +.. _terraformAZ: + +Deploying VyOS in the Azure cloud +================================= + +With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the Azure cloud. If necessary, the infrastructure can be removed using terraform. +Also we will make provisioning using Ansible. + +In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the Azure cloud and make provisioning using Ansible. + +Preparation steps for deploying VyOS on Azure +--------------------------------------------- + +How to create a single instance and install your configuration using Terraform+Ansible+Azure +Step by step: + +Azure + + 1 Create an account with Azure + +Terraform + + + 1 Create an UNIX or Windows instance + + 2 Download and install Terraform + + 3 Create the folder for example /root/azvyos/ + +.. code-block:: none + + mkdir /root/azvyos + + 4 Copy all files into your Terraform project "/root/azvyos" (vyos.tf, var.tf, terraform.tfvars), more detailed see `Structure of files Terrafom for Azure`_ + + 5 Login with Azure using the command + +.. code-block:: none + + az login + +2.6 Type the commands : + +.. code-block:: none + + cd /<your folder> + terraform init + +Ansible + + + 1 Create an UNIX instance whenever you want (local, cloud, and so on) + + 2 Download and install Ansible + + 3 Create the folder for example /root/az/ + + 4 Copy all files into your Ansible project "/root/az/" (ansible.cfg, instance.yml,"all"), more detailed see `Structure of files Ansible for Azure`_ + + +Start + + +Type the commands on your Terrafom instance: + +.. code-block:: none + + cd /<your folder> + terraform plan + terraform apply + yes + +After executing all the commands you will have your VyOS instance on the Azure cloud with your configuration, it's a very convenient desition. +If you need to delete the instance please type the command: + +.. code-block:: none + + terraform destroy + +Structure of files Terrafom for Azure +------------------------------------- + +.. code-block:: none + + . + ├── vyos.tf # The main script + ├── var.tf # File for the changing version of Terraform. + └── terraform.tfvars # The value of all variables (passwords, login, ip adresses and so on) + +File contents of Terrafom for Azure +----------------------------------- + +vyos.tf + +.. code-block:: none + + + ############################################################################## + # HashiCorp Guide to Using Terraform on Azure + # This Terraform configuration will create the following: + # Resource group with a virtual network and subnet + # An VyOS server without ssh key (only login+password) + ############################################################################## + + # Chouse a provider + + provider "azurerm" { + features {} + } + + # Create a resource group. In Azure every resource belongs to a + # resource group. + + resource "azurerm_resource_group" "azure_vyos" { + name = "${var.resource_group}" + location = "${var.location}" + } + + # The next resource is a Virtual Network. + + resource "azurerm_virtual_network" "vnet" { + name = "${var.virtual_network_name}" + location = "${var.location}" + address_space = ["${var.address_space}"] + resource_group_name = "${var.resource_group}" + } + + # Build a subnet to run our VMs in. + + resource "azurerm_subnet" "subnet" { + name = "${var.prefix}subnet" + virtual_network_name = "${azurerm_virtual_network.vnet.name}" + resource_group_name = "${var.resource_group}" + address_prefixes = ["${var.subnet_prefix}"] + } + + ############################################################################## + # Build an VyOS VM from the Marketplace + # To finde nessesery image use the command: + # + # az vm image list --offer vyos --all + # + # Now that we have a network, we'll deploy an VyOS server. + # An Azure Virtual Machine has several components. In this example we'll build + # a security group, a network interface, a public ip address, a storage + # account and finally the VM itself. Terraform handles all the dependencies + # automatically, and each resource is named with user-defined variables. + ############################################################################## + + + # Security group to allow inbound access on port 22 (ssh) + + resource "azurerm_network_security_group" "vyos-sg" { + name = "${var.prefix}-sg" + location = "${var.location}" + resource_group_name = "${var.resource_group}" + + security_rule { + name = "SSH" + priority = 100 + direction = "Inbound" + access = "Allow" + protocol = "Tcp" + source_port_range = "*" + destination_port_range = "22" + source_address_prefix = "${var.source_network}" + destination_address_prefix = "*" + } + } + + # A network interface. + + resource "azurerm_network_interface" "vyos-nic" { + name = "${var.prefix}vyos-nic" + location = "${var.location}" + resource_group_name = "${var.resource_group}" + + ip_configuration { + name = "${var.prefix}ipconfig" + subnet_id = "${azurerm_subnet.subnet.id}" + private_ip_address_allocation = "Dynamic" + public_ip_address_id = "${azurerm_public_ip.vyos-pip.id}" + } + } + + # Add a public IP address. + + resource "azurerm_public_ip" "vyos-pip" { + name = "${var.prefix}-ip" + location = "${var.location}" + resource_group_name = "${var.resource_group}" + allocation_method = "Dynamic" + } + + # Build a virtual machine. This is a standard VyOS instance from Marketplace. + + resource "azurerm_virtual_machine" "vyos" { + name = "${var.hostname}-vyos" + location = "${var.location}" + resource_group_name = "${var.resource_group}" + vm_size = "${var.vm_size}" + + network_interface_ids = ["${azurerm_network_interface.vyos-nic.id}"] + delete_os_disk_on_termination = "true" + + # To finde an information about the plan use the command: + # az vm image list --offer vyos --all + + plan { + publisher = "sentriumsl" + name = "vyos-1-3" + product = "vyos-1-2-lts-on-azure" + } + + storage_image_reference { + publisher = "${var.image_publisher}" + offer = "${var.image_offer}" + sku = "${var.image_sku}" + version = "${var.image_version}" + } + + storage_os_disk { + name = "${var.hostname}-osdisk" + managed_disk_type = "Standard_LRS" + caching = "ReadWrite" + create_option = "FromImage" + } + + os_profile { + computer_name = "${var.hostname}" + admin_username = "${var.admin_username}" + admin_password = "${var.admin_password}" + } + + os_profile_linux_config { + disable_password_authentication = false + } + } + + data "azurerm_public_ip" "example" { + depends_on = ["azurerm_virtual_machine.vyos"] + name = "vyos-ip" + resource_group_name = "${var.resource_group}" + } + output "public_ip_address" { + value = data.azurerm_public_ip.example.ip_address + } + + # IP of AZ instance copied to a file ip.txt in local system + + resource "local_file" "ip" { + content = data.azurerm_public_ip.example.ip_address + filename = "ip.txt" + } + + #Connecting to the Ansible control node using SSH connection + + resource "null_resource" "nullremote1" { + depends_on = ["azurerm_virtual_machine.vyos"] + connection { + type = "ssh" + user = "root" + password = var.password + host = var.host + } + + # Copying the ip.txt file to the Ansible control node from local system + + provisioner "file" { + source = "ip.txt" + destination = "/root/az/ip.txt" + } + } + + resource "null_resource" "nullremote2" { + depends_on = ["azurerm_virtual_machine.vyos"] + connection { + type = "ssh" + user = "root" + password = var.password + host = var.host + } + + # Command to run ansible playbook on remote Linux OS + + provisioner "remote-exec" { + + inline = [ + "cd /root/az/", + "ansible-playbook instance.yml" + ] + } + } + + +var.tf + +.. code-block:: none + + ############################################################################## + # Variables File + # + # Here is where we store the default values for all the variables used in our + # Terraform code. + ############################################################################## + + variable "resource_group" { + description = "The name of your Azure Resource Group." + default = "my_resource_group" + } + + variable "prefix" { + description = "This prefix will be included in the name of some resources." + default = "vyos" + } + + variable "hostname" { + description = "Virtual machine hostname. Used for local hostname, DNS, and storage-related names." + default = "vyos_terraform" + } + + variable "location" { + description = "The region where the virtual network is created." + default = "centralus" + } + + variable "virtual_network_name" { + description = "The name for your virtual network." + default = "vnet" + } + + variable "address_space" { + description = "The address space that is used by the virtual network. You can supply more than one address space. Changing this forces a new resource to be created." + default = "10.0.0.0/16" + } + + variable "subnet_prefix" { + description = "The address prefix to use for the subnet." + default = "10.0.10.0/24" + } + + variable "storage_account_tier" { + description = "Defines the storage tier. Valid options are Standard and Premium." + default = "Standard" + } + + variable "storage_replication_type" { + description = "Defines the replication type to use for this storage account. Valid options include LRS, GRS etc." + default = "LRS" + } + + # The most chippers size + + variable "vm_size" { + description = "Specifies the size of the virtual machine." + default = "Standard_B1s" + } + + variable "image_publisher" { + description = "Name of the publisher of the image (az vm image list)" + default = "sentriumsl" + } + + variable "image_offer" { + description = "Name of the offer (az vm image list)" + default = "vyos-1-2-lts-on-azure" + } + + variable "image_sku" { + description = "Image SKU to apply (az vm image list)" + default = "vyos-1-3" + } + + variable "image_version" { + description = "Version of the image to apply (az vm image list)" + default = "1.3.3" + } + + variable "admin_username" { + description = "Administrator user name" + default = "vyos" + } + + variable "admin_password" { + description = "Administrator password" + default = "Vyos0!" + } + + variable "source_network" { + description = "Allow access from this network prefix. Defaults to '*'." + default = "*" + } + + variable "password" { + description = "pass for Ansible" + type = string + sensitive = true + } + variable "host"{ + description = "IP of my Ansible" + } + +terraform.tfvars + +.. code-block:: none + + password = "" # password for Ansible SSH + host = "" # IP of my Ansible + + +Structure of files Ansible for Azure +------------------------------------ + +.. code-block:: none + + . + ├── group_vars + └── all + ├── ansible.cfg + └── instance.yml + + +File contents of Ansible for Azure +---------------------------------- + +ansible.cfg + +.. code-block:: none + + [defaults] + inventory = /root/az/ip.txt + host_key_checking= False + remote_user=vyos + + +instance.yml + + +.. code-block:: none + + ############################################################################## + # About tasks: + # "Wait 300 seconds, but only start checking after 60 seconds" - try to make ssh connection every 60 seconds until 300 seconds + # "Configure general settings for the VyOS hosts group" - make provisioning into Azure VyOS node + # You have to add all necessary cammans of VyOS under the block "lines:" + ############################################################################## + + + - name: integration of terraform and ansible + hosts: all + gather_facts: 'no' + + tasks: + + - name: "Wait 300 seconds, but only start checking after 60 seconds" + wait_for_connection: + delay: 60 + timeout: 300 + + - name: "Configure general settings for the VyOS hosts group" + vyos_config: + lines: + - set system name-server xxx.xxx.xxx.xxx + save: + true + + +group_vars/all + +.. code-block:: none + + ansible_connection: ansible.netcommon.network_cli + ansible_network_os: vyos.vyos.vyos + + # user and password gets from terraform variables "admin_username" and "admin_password" in the file /root/azvyos/var.tf + ansible_user: vyos + ansible_ssh_pass: Vyos0! + +Sourse files for Azure from GIT +------------------------------- + +All files about the article can be found here_ + +.. _here: https://github.com/vyos/vyos-automation/tree/main/TerraformCloud/Azure_terraform_ansible_single_vyos_instance-main + + diff --git a/docs/automation/terraform/terraformGoogle.rst b/docs/automation/terraform/terraformGoogle.rst new file mode 100644 index 00000000..7cdd1211 --- /dev/null +++ b/docs/automation/terraform/terraformGoogle.rst @@ -0,0 +1,708 @@ +:lastproofread: 2024-03-25 + +.. _terraformgoogle: + +Deploying VyOS in the google cloud +================================== + +With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the google cloud. If necessary, the infrastructure can be removed using terraform. +Also we will make provisioning using Ansible. + +In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the google cloud and make provisioning using Ansible. + +Preparation steps for deploying VyOS on google +---------------------------------------------- + +How to create a single instance and install your configuration using Terraform+Ansible+google +Step by step: + +google cloud + + + 1 Create an account with google cloud and a new project + +.. image:: /_static/images/project.png + :width: 50% + :align: center + :alt: Network Topology Diagram + + 2 Create a service aacount and download your key (.JSON) + +.. image:: /_static/images/service.png + :width: 50% + :align: center + :alt: Network Topology Diagram + +.. image:: /_static/images/key.png + :width: 50% + :align: center + :alt: Network Topology Diagram + +The .JSON file download automaticly after creating and will look like: + +.. image:: /_static/images/json.png + :width: 50% + :align: center + :alt: Network Topology Diagram + + +Terraform + + + 1 Create an UNIX or Windows instance + + 2 Download and install Terraform + + 3 Create the folder for example /root/google + +.. code-block:: none + + mkdir /root/google + + 4 Copy all files into your Terraform project "/root/google" (vyos.tf, var.tf, terraform.tfvars, .JSON), more detailed see `Structure of files Terrafom for google cloud`_ + + 5 Type the commands : + + +.. code-block:: none + + cd /<your folder> + terraform init + + +Ansible + + + 1 Create an UNIX instance whenever you want (local, cloud, and so on) + + 2 Download and install Ansible + + 3 Create the folder for example /root/google/ + + 4 Copy all files into your Ansible project "/root/google/" (ansible.cfg, instance.yml, mykey.json and "all"), more detailed see `Structure of files Ansible for google cloud`_ + +mykey.json you have to get using step 2 of the google cloud + + +Start + + +Type the commands on your Terrafom instance: + +.. code-block:: none + + cd /<your folder> + terraform plan + terraform apply + yes + + +Start creating a google cloud instance and check the result +----------------------------------------------------------- + +.. code-block:: none + + # terraform apply + + Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + + create + + Terraform will perform the following actions: + + # google_compute_firewall.tcp_22[0] will be created + + resource "google_compute_firewall" "tcp_22" { + + creation_timestamp = (known after apply) + + destination_ranges = (known after apply) + + direction = (known after apply) + + enable_logging = (known after apply) + + id = (known after apply) + + name = "vyos-tcp-22" + + network = "default" + + priority = 1000 + + project = "vyosproject" + + self_link = (known after apply) + + source_ranges = [ + + "0.0.0.0/0", + ] + + target_tags = [ + + "vyos-deployment", + ] + + + allow { + + ports = [ + + "22", + ] + + protocol = "tcp" + } + } + + # google_compute_firewall.udp_500_4500[0] will be created + + resource "google_compute_firewall" "udp_500_4500" { + + creation_timestamp = (known after apply) + + destination_ranges = (known after apply) + + direction = (known after apply) + + enable_logging = (known after apply) + + id = (known after apply) + + name = "vyos-udp-500-4500" + + network = "default" + + priority = 1000 + + project = "vyosproject" + + self_link = (known after apply) + + source_ranges = [ + + "0.0.0.0/0", + ] + + target_tags = [ + + "vyos-deployment", + ] + + + allow { + + ports = [ + + "500", + + "4500", + ] + + protocol = "udp" + } + } + + # google_compute_instance.default will be created + + resource "google_compute_instance" "default" { + + can_ip_forward = true + + cpu_platform = (known after apply) + + current_status = (known after apply) + + deletion_protection = false + + effective_labels = (known after apply) + + guest_accelerator = (known after apply) + + id = (known after apply) + + instance_id = (known after apply) + + label_fingerprint = (known after apply) + + machine_type = "n2-highcpu-4" + + metadata = { + + "enable-oslogin" = "FALSE" + + "serial-port-enable" = "TRUE" + + "user-data" = "" + } + + metadata_fingerprint = (known after apply) + + min_cpu_platform = (known after apply) + + name = "vyos" + + project = "vyosproject" + + self_link = (known after apply) + + tags_fingerprint = (known after apply) + + terraform_labels = (known after apply) + + zone = "us-west1-a" + + + boot_disk { + + auto_delete = true + + device_name = (known after apply) + + disk_encryption_key_sha256 = (known after apply) + + kms_key_self_link = (known after apply) + + mode = "READ_WRITE" + + source = (known after apply) + + + initialize_params { + + image = "projects/sentrium-public/global/images/vyos-1-3-5-20231222143039" + + labels = (known after apply) + + provisioned_iops = (known after apply) + + provisioned_throughput = (known after apply) + + size = (known after apply) + + type = (known after apply) + } + } + + + network_interface { + + internal_ipv6_prefix_length = (known after apply) + + ipv6_access_type = (known after apply) + + ipv6_address = (known after apply) + + name = (known after apply) + + network = "default" + + network_ip = (known after apply) + + nic_type = "GVNIC" + + stack_type = (known after apply) + + subnetwork = "default" + + subnetwork_project = (known after apply) + + + access_config { + + nat_ip = (known after apply) + + network_tier = (known after apply) + } + } + } + + # local_file.ip will be created + + resource "local_file" "ip" { + + content = (known after apply) + + content_base64sha256 = (known after apply) + + content_base64sha512 = (known after apply) + + content_md5 = (known after apply) + + content_sha1 = (known after apply) + + content_sha256 = (known after apply) + + content_sha512 = (known after apply) + + directory_permission = "0777" + + file_permission = "0777" + + filename = "ip.txt" + + id = (known after apply) + } + + # null_resource.SSHconnection1 will be created + + resource "null_resource" "SSHconnection1" { + + id = (known after apply) + } + + # null_resource.SSHconnection2 will be created + + resource "null_resource" "SSHconnection2" { + + id = (known after apply) + } + + Plan: 6 to add, 0 to change, 0 to destroy. + + Changes to Outputs: + + public_ip_address = (known after apply) + ╷ + │ Warning: Quoted references are deprecated + │ + │ on vyos.tf line 126, in resource "null_resource" "SSHconnection1": + │ 126: depends_on = ["google_compute_instance.default"] + │ + │ In this context, references are expected literally rather than in quotes. Terraform 0.11 and earlier required quotes, but quoted references are now deprecated and will be removed in a + │ future version of Terraform. Remove the quotes surrounding this reference to silence this warning. + │ + │ (and one more similar warning elsewhere) + ╵ + + Do you want to perform these actions? + Terraform will perform the actions described above. + Only 'yes' will be accepted to approve. + + Enter a value: yes + + google_compute_firewall.udp_500_4500[0]: Creating... + google_compute_firewall.tcp_22[0]: Creating... + google_compute_instance.default: Creating... + google_compute_firewall.udp_500_4500[0]: Still creating... [10s elapsed] + google_compute_firewall.tcp_22[0]: Still creating... [10s elapsed] + google_compute_instance.default: Still creating... [10s elapsed] + google_compute_firewall.tcp_22[0]: Creation complete after 16s [id=projects/vyosproject/global/firewalls/vyos-tcp-22] + google_compute_firewall.udp_500_4500[0]: Creation complete after 16s [id=projects/vyosproject/global/firewalls/vyos-udp-500-4500] + google_compute_instance.default: Creation complete after 20s [id=projects/vyosproject/zones/us-west1-a/instances/vyos] + null_resource.SSHconnection1: Creating... + null_resource.SSHconnection2: Creating... + null_resource.SSHconnection1: Provisioning with 'file'... + null_resource.SSHconnection2: Provisioning with 'remote-exec'... + null_resource.SSHconnection2 (remote-exec): Connecting to remote host via SSH... + null_resource.SSHconnection2 (remote-exec): Host: 10.***.***.104 + null_resource.SSHconnection2 (remote-exec): User: root + null_resource.SSHconnection2 (remote-exec): Password: true + null_resource.SSHconnection2 (remote-exec): Private key: false + null_resource.SSHconnection2 (remote-exec): Certificate: false + null_resource.SSHconnection2 (remote-exec): SSH Agent: false + null_resource.SSHconnection2 (remote-exec): Checking Host Key: false + null_resource.SSHconnection2 (remote-exec): Target Platform: unix + local_file.ip: Creating... + local_file.ip: Creation complete after 0s [id=7d568c3b994a018c942a3cdb952ccbf3c729d0ca] + null_resource.SSHconnection2 (remote-exec): Connected! + null_resource.SSHconnection1: Creation complete after 4s [id=5175298735911137161] + + null_resource.SSHconnection2 (remote-exec): PLAY [integration of terraform and ansible] ************************************ + + null_resource.SSHconnection2 (remote-exec): TASK [Wait 300 seconds, but only start checking after 60 seconds] ************** + null_resource.SSHconnection2: Still creating... [10s elapsed] + null_resource.SSHconnection2: Still creating... [20s elapsed] + null_resource.SSHconnection2: Still creating... [30s elapsed] + null_resource.SSHconnection2: Still creating... [40s elapsed] + null_resource.SSHconnection2: Still creating... [50s elapsed] + null_resource.SSHconnection2: Still creating... [1m0s elapsed] + null_resource.SSHconnection2: Still creating... [1m10s elapsed] + null_resource.SSHconnection2 (remote-exec): ok: [104.***.***.158] + + null_resource.SSHconnection2 (remote-exec): TASK [Configure general settings for the vyos hosts group] ********************* + null_resource.SSHconnection2: Still creating... [1m20s elapsed] + null_resource.SSHconnection2 (remote-exec): changed: [104.***.***.158] + + null_resource.SSHconnection2 (remote-exec): PLAY RECAP ********************************************************************* + null_resource.SSHconnection2 (remote-exec): 104.***.***.158 : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 + + null_resource.SSHconnection2: Creation complete after 1m22s [id=3355727070503709742] + + Apply complete! Resources: 6 added, 0 changed, 0 destroyed. + + Outputs: + + public_ip_address = "104.***.***.158" + + + +After executing all the commands you will have your VyOS instance on the google cloud with your configuration, it's a very convenient desition. +If you need to delete the instance please type the command: + +.. code-block:: none + + terraform destroy + + +Troubleshooting +--------------- + + 1 Increase the time in the file instance.yml from 300 sec to 500 sec or more. (It depends on your location). +Make sure that you have opened access to the instance in the security group. + + 2 Terraform doesn't connect via SSH to your Ansible instance: you have to check the correct login and password in the part of the file VyOS.tf + +.. code-block:: none + + connection { + type = "ssh" + user = "root" # open root access using login and password on your Ansible + password = var.password # check password in the file terraform.tfvars isn't empty + host = var.host # check the correct IP address of your Ansible host + } + + +Make sure that Ansible is pinging from Terrafom. + +Structure of files Terrafom for google cloud +-------------------------------------------- + +.. code-block:: none + + . + ├── vyos.tf # The main script + ├── ***.JSON # The credential file from google cloud + ├── var.tf # The file of all variables in "vyos.tf" + └── terraform.tfvars # The value of all variables (passwords, login, ip adresses and so on) + + + +File contents of Terrafom for google cloud +------------------------------------------ + +vyos.tf + +.. code-block:: none + + + ############################################################################## + # Build an VyOS VM from the Marketplace + # + # After deploying the GCP instance and getting an IP address, the IP address is copied into the file + #"ip.txt" and copied to the Ansible node for provisioning. + ############################################################################## + + terraform { + required_providers { + google = { + source = "hashicorp/google" + } + } + } + + provider "google" { + project = var.project_id + request_timeout = "60s" + credentials = file(var.gcp_auth_file) + } + + locals { + network_interfaces = [for i, n in var.networks : { + network = n, + subnetwork = length(var.sub_networks) > i ? element(var.sub_networks, i) : null + external_ip = length(var.external_ips) > i ? element(var.external_ips, i) : "NONE" + } + ] + } + + resource "google_compute_instance" "default" { + name = var.goog_cm_deployment_name + machine_type = var.machine_type + zone = var.zone + + metadata = { + enable-oslogin = "FALSE" + serial-port-enable = "TRUE" + user-data = var.vyos_user_data + } + boot_disk { + initialize_params { + image = var.image + } + } + + can_ip_forward = true + + dynamic "network_interface" { + for_each = local.network_interfaces + content { + network = network_interface.value.network + subnetwork = network_interface.value.subnetwork + nic_type = "GVNIC" + dynamic "access_config" { + for_each = network_interface.value.external_ip == "NONE" ? [] : [1] + content { + nat_ip = network_interface.value.external_ip == "EPHEMERAL" ? null : network_interface.value.external_ip + } + } + } + } + } + + resource "google_compute_firewall" "tcp_22" { + count = var.enable_tcp_22 ? 1 : 0 + + name = "${var.goog_cm_deployment_name}-tcp-22" + network = element(var.networks, 0) + + allow { + ports = ["22"] + protocol = "tcp" + } + + source_ranges = ["0.0.0.0/0"] + + target_tags = ["${var.goog_cm_deployment_name}-deployment"] + } + + resource "google_compute_firewall" "udp_500_4500" { + count = var.enable_udp_500_4500 ? 1 : 0 + + name = "${var.goog_cm_deployment_name}-udp-500-4500" + network = element(var.networks, 0) + + allow { + ports = ["500", "4500"] + protocol = "udp" + } + + source_ranges = ["0.0.0.0/0"] + + target_tags = ["${var.goog_cm_deployment_name}-deployment"] + } + + output "public_ip_address" { + value = google_compute_instance.default.network_interface[0].access_config[0].nat_ip + } + + ############################################################################## + # + # IP of google instance copied to a file ip.txt in local system Terraform + # ip.txt looks like: + # cat ./ip.txt + # ххх.ххх.ххх.ххх + ############################################################################## + + resource "local_file" "ip" { + content = google_compute_instance.default.network_interface[0].access_config[0].nat_ip + filename = "ip.txt" + } + + #connecting to the Ansible control node using SSH connection + + ############################################################################## + # Steps "SSHconnection1" and "SSHconnection2" need to get file ip.txt from the terraform node and start remotely the playbook of Ansible. + ############################################################################## + + resource "null_resource" "SSHconnection1" { + depends_on = ["google_compute_instance.default"] + connection { + type = "ssh" + user = "root" + password = var.password + host = var.host + } + + #copying the ip.txt file to the Ansible control node from local system + + provisioner "file" { + source = "ip.txt" + destination = "/root/google/ip.txt" # The folder of your Ansible project + } + } + + resource "null_resource" "SSHconnection2" { + depends_on = ["google_compute_instance.default"] + connection { + type = "ssh" + user = "root" + password = var.password + host = var.host + } + + #command to run Ansible playbook on remote Linux OS + + provisioner "remote-exec" { + inline = [ + "cd /root/google/", + "ansible-playbook instance.yml" # more detailed in "File contents of Ansible for google cloud" + ] + } + } + + +var.tf + +.. code-block:: none + + variable "image" { + type = string + default = "projects/sentrium-public/global/images/vyos-1-3-5-20231222143039" + } + + variable "project_id" { + type = string + } + + variable "zone" { + type = string + } + + ############################################################################## + # You can choose more chipper type than n2-highcpu-4 + ############################################################################## + + variable "machine_type" { + type = string + default = "n2-highcpu-4" + } + + variable "networks" { + description = "The network name to attach the VM instance." + type = list(string) + default = ["default"] + } + + variable "sub_networks" { + description = "The sub network name to attach the VM instance." + type = list(string) + default = ["default"] + } + + variable "external_ips" { + description = "The external IPs assigned to the VM for public access." + type = list(string) + default = ["EPHEMERAL"] + } + + variable "enable_tcp_22" { + description = "Allow SSH traffic from the Internet" + type = bool + default = true + } + + variable "enable_udp_500_4500" { + description = "Allow IKE/IPSec traffic from the Internet" + type = bool + default = true + } + + variable "vyos_user_data" { + type = string + default = "" + } + + // Marketplace requires this variable name to be declared + variable "goog_cm_deployment_name" { + description = "VyOS Universal Router Deployment" + type = string + default = "vyos" + } + + # GCP authentication file + variable "gcp_auth_file" { + type = string + description = "GCP authentication file" + } + + variable "password" { + description = "pass for Ansible" + type = string + sensitive = true + } + variable "host"{ + description = "The IP of my Ansible" + type = string + } + + +terraform.tfvars + +.. code-block:: none + + ############################################################################## + # Must be filled in + ############################################################################## + + zone = "us-west1-a" + gcp_auth_file = "/root/***/***.json" # path of your .json file + project_id = "" # the google project + password = "" # password for Ansible SSH + host = "" # IP of my Ansible + + +Structure of files Ansible for google cloud +------------------------------------------- + +.. code-block:: none + + . + ├── group_vars + └── all + ├── ansible.cfg + └── instance.yml + + +File contents of Ansible for google cloud +----------------------------------------- + +ansible.cfg + +.. code-block:: none + + [defaults] + inventory = /root/google/ip.txt + host_key_checking= False + remote_user=vyos + +instance.yml + +.. code-block:: none + + ############################################################################## + # About tasks: + # "Wait 300 seconds, but only start checking after 60 seconds" - try to make ssh connection every 60 seconds until 300 seconds + # "Configure general settings for the VyOS hosts group" - make provisioning into google cloud VyOS node + # You have to add all necessary cammans of VyOS under the block "lines:" + ############################################################################## + + + - name: integration of terraform and ansible + hosts: all + gather_facts: 'no' + + tasks: + + - name: "Wait 300 seconds, but only start checking after 60 seconds" + wait_for_connection: + delay: 60 + timeout: 300 + + - name: "Configure general settings for the VyOS hosts group" + vyos_config: + lines: + - set system name-server xxx.xxx.xxx.xxx + save: + true + + +group_vars/all + +.. code-block:: none + + ansible_connection: ansible.netcommon.network_cli + ansible_network_os: vyos.vyos.vyos + ansible_user: vyos + ansible_ssh_pass: vyos + +Sourse files for google cloud from GIT +-------------------------------------- + +All files about the article can be found here_ + + +.. _here: https://github.com/vyos/vyos-automation/tree/main/TerraformCloud/Google_terraform_ansible_single_vyos_instance-main
\ No newline at end of file diff --git a/docs/automation/terraform/terraformvSphere.rst b/docs/automation/terraform/terraformvSphere.rst new file mode 100644 index 00000000..5d39261b --- /dev/null +++ b/docs/automation/terraform/terraformvSphere.rst @@ -0,0 +1,400 @@ +:lastproofread: 2024-03-03 + +.. _terraformvSphere: + +Deploying VyOS in the vSphere infrastructure +============================================ + +With the help of Terraform, you can quickly deploy VyOS-based infrastructure in the vSphere. +Also we will make provisioning using Ansible. + +In this case, we'll create the necessary files for Terraform and Ansible next using Terraform we'll create a single instance on the vSphere cloud and make provisioning using Ansible. + +Preparation steps for deploying VyOS on vSphere +----------------------------------------------- + +How to create a single instance and install your configuration using Terraform+Ansible+vSphere +Step by step: + + +vSphere + + + 1 Collect all data in to file "terraform.tfvars" and create resources for example "terraform" + + +Terraform + + + 1 Create an UNIX or Windows instance + + 2 Download and install Terraform + + 3 Create the folder for example /root/vsphereterraform + +.. code-block:: none + + mkdir /root/vsphereterraform + + + 4 Copy all files into your Terraform project "/root/vsphereterraform" (vyos.tf, var.tf, terraform.tfvars,version.tf), more detailed see `Structure of files Terrafom for vSphere`_ + + 5 Type the commands : + +.. code-block:: none + + cd /<your folder> + terraform init + + +Ansible + + + 1 Create an UNIX instance whenever you want (local, cloud, and so on) + + 2 Download and install Ansible + + 3 Create the folder for example /root/vsphereterraform/ + + 4 Copy all files into your Ansible project "/root/vsphereterraform/" (ansible.cfg, instance.yml,"all"), more detailed see `Structure of files Ansible for vSphere`_ + + +Start + + +Type the commands on your Terrafom instance: + +.. code-block:: none + + cd /<your folder> + terraform plan + terraform apply + yes + + +After executing all the commands you will have your VyOS instance on the vSphere with your configuration, it's a very convenient desition. +If you need to delete the instance please type the command: + +.. code-block:: none + + terraform destroy + + +Structure of files Terrafom for vSphere +--------------------------------------- + +.. code-block:: none + + . + ├── vyos.tf # The main script + ├── versions.tf # File for the changing version of Terraform. + ├── var.tf # File for the changing version of Terraform. + └── terraform.tfvars # The value of all variables (passwords, login, ip adresses and so on) + + +File contents of Terrafom for vSphere +------------------------------------- + +vyos.tf + +.. code-block:: none + + provider "vsphere" { + user = var.vsphere_user + password = var.vsphere_password + vsphere_server = var.vsphere_server + allow_unverified_ssl = true + } + + data "vsphere_datacenter" "datacenter" { + name = var.datacenter + } + + data "vsphere_datastore" "datastore" { + name = var.datastore + datacenter_id = data.vsphere_datacenter.datacenter.id + } + + data "vsphere_compute_cluster" "cluster" { + name = var.cluster + datacenter_id = data.vsphere_datacenter.datacenter.id + } + + data "vsphere_resource_pool" "default" { + name = format("%s%s", data.vsphere_compute_cluster.cluster.name, "/Resources/terraform") # set as you need + datacenter_id = data.vsphere_datacenter.datacenter.id + } + + data "vsphere_host" "host" { + name = var.host + datacenter_id = data.vsphere_datacenter.datacenter.id + } + + data "vsphere_network" "network" { + name = var.network_name + datacenter_id = data.vsphere_datacenter.datacenter.id + } + + # Deployment of VM from Remote OVF + resource "vsphere_virtual_machine" "vmFromRemoteOvf" { + name = var.remotename + datacenter_id = data.vsphere_datacenter.datacenter.id + datastore_id = data.vsphere_datastore.datastore.id + host_system_id = data.vsphere_host.host.id + resource_pool_id = data.vsphere_resource_pool.default.id + network_interface { + network_id = data.vsphere_network.network.id + } + wait_for_guest_net_timeout = 2 + wait_for_guest_ip_timeout = 2 + + ovf_deploy { + allow_unverified_ssl_cert = true + remote_ovf_url = var.url_ova + disk_provisioning = "thin" + ip_protocol = "IPv4" + ip_allocation_policy = "dhcpPolicy" + ovf_network_map = { + "Network 1" = data.vsphere_network.network.id + "Network 2" = data.vsphere_network.network.id + } + } + vapp { + properties = { + "password" = "12345678", + "local-hostname" = "terraform_vyos" + } + } + } + + output "ip" { + description = "default ip address of the deployed VM" + value = vsphere_virtual_machine.vmFromRemoteOvf.default_ip_address + } + + # IP of vSphere instance copied to a file ip.txt in local system + + resource "local_file" "ip" { + content = vsphere_virtual_machine.vmFromRemoteOvf.default_ip_address + filename = "ip.txt" + } + + #Connecting to the Ansible control node using SSH connection + + resource "null_resource" "nullremote1" { + depends_on = ["vsphere_virtual_machine.vmFromRemoteOvf"] + connection { + type = "ssh" + user = "root" + password = var.ansiblepassword + host = var.ansiblehost + + } + + # Copying the ip.txt file to the Ansible control node from local system + + provisioner "file" { + source = "ip.txt" + destination = "/root/vsphere/ip.txt" + } + } + + resource "null_resource" "nullremote2" { + depends_on = ["vsphere_virtual_machine.vmFromRemoteOvf"] + connection { + type = "ssh" + user = "root" + password = var.ansiblepassword + host = var.ansiblehost + } + + # Command to run ansible playbook on remote Linux OS + + provisioner "remote-exec" { + + inline = [ + "cd /root/vsphere/", + "ansible-playbook instance.yml" + ] + } + } + + +versions.tf + +.. code-block:: none + + # Copyright (c) HashiCorp, Inc. + # SPDX-License-Identifier: MPL-2.0 + + terraform { + required_providers { + vsphere = { + source = "hashicorp/vsphere" + version = "2.4.0" + } + } + } + +var.tf + +.. code-block:: none + + # Copyright (c) HashiCorp, Inc. + # SPDX-License-Identifier: MPL-2.0 + + variable "vsphere_server" { + description = "vSphere server" + type = string + } + + variable "vsphere_user" { + description = "vSphere username" + type = string + } + + variable "vsphere_password" { + description = "vSphere password" + type = string + sensitive = true + } + + variable "datacenter" { + description = "vSphere data center" + type = string + } + + variable "cluster" { + description = "vSphere cluster" + type = string + } + + variable "datastore" { + description = "vSphere datastore" + type = string + } + + variable "network_name" { + description = "vSphere network name" + type = string + } + + variable "host" { + description = "name if yor host" + type = string + } + + variable "remotename" { + description = "the name of you VM" + type = string + } + + variable "url_ova" { + description = "the URL to .OVA file or cloude store" + type = string + } + + variable "ansiblepassword" { + description = "Ansible password" + type = string + } + + variable "ansiblehost" { + description = "Ansible host name or IP" + type = string + } + +terraform.tfvars + +.. code-block:: none + + vsphere_user = "" + vsphere_password = "" + vsphere_server = "" + datacenter = "" + datastore = "" + cluster = "" + network_name = "" + host = "" + url_ova = "" + ansiblepassword = "" + ansiblehost = "" + remotename = "" + + +Structure of files Ansible for vSphere +-------------------------------------- + +.. code-block:: none + + . + ├── group_vars + └── all + ├── ansible.cfg + └── instance.yml + + +File contents of Ansible for vSphere +------------------------------------ + +ansible.cfg + +.. code-block:: none + + [defaults] + inventory = /root/vsphere/ip.txt + host_key_checking= False + remote_user=vyos + + +instance.yml + +.. code-block:: none + + ############################################################################## + # About tasks: + # "Wait 300 seconds, but only start checking after 60 seconds" - try to make ssh connection every 60 seconds until 300 seconds + # "Configure general settings for the VyOS hosts group" - make provisioning into vSphere VyOS node + # You have to add all necessary cammans of VyOS under the block "lines:" + ############################################################################## + + + - name: integration of terraform and ansible + hosts: all + gather_facts: 'no' + + tasks: + + - name: "Wait 300 seconds, but only start checking after 60 seconds" + wait_for_connection: + delay: 60 + timeout: 300 + + - name: "Configure general settings for the VyOS hosts group" + vyos_config: + lines: + - set system name-server 8.8.8.8 + save: + true + + +group_vars/all + +.. code-block:: none + + ansible_connection: ansible.netcommon.network_cli + ansible_network_os: vyos.vyos.vyos + + # user and password gets from terraform variables "admin_username" and "admin_password" + ansible_user: vyos + # get from vyos.tf "vapp" + ansible_ssh_pass: 12345678 + + +Sourse files for vSphere from GIT +--------------------------------- + +All files about the article can be found here_ + +.. _here: https://github.com/vyos/vyos-automation/tree/main/TerraformCloud/Vsphere_terraform_ansible_single_vyos_instance-main + diff --git a/docs/automation/terraform/terraformvyos.rst b/docs/automation/terraform/terraformvyos.rst new file mode 100644 index 00000000..42dc7492 --- /dev/null +++ b/docs/automation/terraform/terraformvyos.rst @@ -0,0 +1,39 @@ +:lastproofread: 2024-03-03 + +.. _terraformvyos: + +Terraform for VyOS +================== + +VyOS supports development infrastructure via Terraform and provisioning via Ansible. +Terraform allows you to automate the process of deploying instances on many cloud and virtual platforms. +In this article, we will look at using terraforms to deploy VyOS on platforms - AWS, Azure, and vSphere. +For more details about Terraform please have a look here link_. + +Need to install_ Terraform + +Structure of files in the standard Terraform project: + +.. code-block:: none + + . + ├── main.tf # The main script + ├── version.tf # File for the changing version of Terraform. + ├── variables.tf # The file of all variables in "main.tf" + └── terraform.tfvars # The value of all variables (passwords, login, ip adresses and so on) + + +General commands that we will use for running Terraform scripts + + +.. code-block:: none + + cd /<your folder> # go to the Terrafom project + terraform init # install all addons and provider (aws az and so on) + terraform plan # show what is changing + terraform apply # run script + yes # apply running + + +.. _link: https://developer.hashicorp.com/terraform/intro +.. _install: https://developer.hashicorp.com/terraform/tutorials/aws-get-started/install-cli
\ No newline at end of file diff --git a/docs/automation/vyos-api.rst b/docs/automation/vyos-api.rst index 8fad05ca..60247fae 100644 --- a/docs/automation/vyos-api.rst +++ b/docs/automation/vyos-api.rst @@ -125,6 +125,38 @@ For example, get the addresses of a ``dum0`` interface. "error": null } +To check existence of a configuration path, use the ``exists`` operation. + +For example, check an existing path: + +.. code-block:: none + + curl -k --location --request POST 'https://vyos/retrieve' \ + --form data='{"op": "exists", "path": ["service","https","api"]}' \ + --form key='MY-HTTPS-API-PLAINTEXT-KEY' + + response: + { + "success": true, + "data": true, + "error": null + } + +versus a non-existent path: + +.. code-block:: none + + curl -k --location --request POST 'https://vyos/retrieve' \ + --form data='{"op": "exists", "path": ["service","non","existent","path"]}' \ + --form key='MY-HTTPS-API-PLAINTEXT-KEY' + + response: + { + "success": true, + "data": false, + "error": null + } + /reset ====== diff --git a/docs/changelog/1.3.rst b/docs/changelog/1.3.rst index 6ae5a5fb..dc1b4620 100644 --- a/docs/changelog/1.3.rst +++ b/docs/changelog/1.3.rst @@ -8,6 +8,179 @@ _ext/releasenotes.py +2024-04-25 +========== + +* :vytask:`T6249` ``(default): ISO builder fails because of changed buster-backport repository`` + + +2024-04-23 +========== + +* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running`` + + +2024-04-17 +========== + +* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory`` + + +2024-04-12 +========== + +* :vytask:`T3437` ``(bug): BGP Confederation Addition Causes Error`` + + +2024-04-10 +========== + +* :vytask:`T6124` ``(bug): Docker equuleus build image doesn't build due to fpm`` + + +2024-04-08 +========== + +* :vytask:`T6196` ``(bug): Route-map and summary-only do not work in BGP aggregation at the same time`` + + +2024-04-07 +========== + +* :vytask:`T1244` ``(default): Support for StartupResync in conntrackd`` + + +2024-04-05 +========== + +* :vytask:`T2590` ``(bug): DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c`` + + +2024-04-04 +========== + +* :vytask:`T4146` ``(bug): Nginx should not listen on port 80`` +* :vytask:`T1976` ``(default): deleting address-family under neighbor will disable neighbor`` +* :vytask:`T5625` ``(default): "restart vpn" does not work if ipsec-interfaces is not set`` +* :vytask:`T3020` ``(bug): The "scp" example is wrong in the bash-completion for "set system config-management commit-archive location"`` +* :vytask:`T2250` ``(default): vyos-build "make iso" error if configure was ran outside of the docker container`` +* :vytask:`T2139` ``(default): openvpn: allow "dh-file none" to disable DH for ECDH keys`` +* :vytask:`T2014` ``(default): Use vendor specific NTP Pool hostname`` +* :vytask:`T1118` ``(bug): Obsolete "utc" option in time selector in firewall`` +* :vytask:`T948` ``(feature): integrate aws cloud watch scripts into AMI`` + + +2024-04-02 +========== + +* :vytask:`T6150` ``(bug): Impossible to set a static IP address via Radius in IPoE`` + + +2024-04-01 +========== + +* :vytask:`T6193` ``(bug): dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces`` + + +2024-03-22 +========== + +* :vytask:`T6110` ``(bug): dhcp server - If failover is defined, range is required`` +* :vytask:`T5624` ``(default): Remove /etc/debian_version from the image`` + + +2024-03-11 +========== + +* :vytask:`T2998` ``(bug): SNMP v3 oid "exclude" option doesn't work`` +* :vytask:`T6096` ``(bug): Config commits are not synced properly because 00vyos-sync is deleted by vyos-router`` +* :vytask:`T6057` ``(feature): Add ability to disable syslog for conntrackd`` +* :vytask:`T5504` ``(feature): Keepalived VRRP ability to set more than one peer-address`` + + +2024-03-07 +========== + +* :vytask:`T3992` ``(bug): Traceback on adding interface to bridge with configured ip address`` + + +2024-03-06 +========== + +* :vytask:`T6088` ``(bug): Configuration corrupted after saving and powercut or force reboot`` + + +2024-02-16 +========== + +* :vytask:`T2113` ``(bug): OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping`` +* :vytask:`T5418` ``(bug): PPPoE-Server Client IP pool Subnet`` + + +2024-02-15 +========== + +* :vytask:`T2612` ``(bug): HTTPS API, changing API key fails but goes through`` +* :vytask:`T656` ``(enhancment): Rewrite wirelessmodem in new style XML interface definition`` + + +2024-02-14 +========== + +* :vytask:`T2044` ``(bug): RPKI doesn't boot properly`` + + +2024-02-08 +========== + +* :vytask:`T6014` ``(feature): Bump keepalived version`` + + +2024-02-07 +========== + +* :vytask:`T6017` ``(bug): Update vyos-http-api-tools for security advisory`` + + +2024-02-02 +========== + +* :vytask:`T5914` ``(bug): CVE-2023-48795 - Terrapin vulnerability`` +* :vytask:`T5739` ``(bug): Password recovery does not work if public keys are configured`` + + +2024-02-01 +========== + +* :vytask:`T5967` ``(bug): Multi-hop BFD connections can't be established; please add minimum-ttl option.`` + + +2024-01-22 +========== + +* :vytask:`T4721` ``(feature): Static IPv6 Route Tags Missing`` + + +2024-01-20 +========== + +* :vytask:`T5187` ``(bug): Update Realtek r8152 driver`` +* :vytask:`T5182` ``(bug): Update Intel ice driver`` +* :vytask:`T5180` ``(bug): initramfs-tools ignores firmware from updates directory`` +* :vytask:`T4990` ``(bug): Commit results may not be properly saved if power is cut immediately after a successful commit`` +* :vytask:`T4039` ``(feature): Rsyslog to use 'protocol23format' for protocol UDP`` +* :vytask:`T3813` ``(bug): Some custom sysctl parameters can't be applied bug`` +* :vytask:`T2579` ``(feature): The root task for VRF features`` +* :vytask:`T2546` ``(feature): The root task for rewriting [op-mode] to XML`` +* :vytask:`T2452` ``(default): Serial console related issues`` + + +2024-01-19 +========== + +* :vytask:`T5543` ``(bug): Fix source address handling in static joins`` + + 2024-01-14 ========== diff --git a/docs/changelog/1.4.rst b/docs/changelog/1.4.rst index 1b9b09a0..0ad129e1 100644 --- a/docs/changelog/1.4.rst +++ b/docs/changelog/1.4.rst @@ -8,6 +8,775 @@ _ext/releasenotes.py +2024-04-25 +========== + +* :vytask:`T6263` ``(bug): Multicast: Could not commit multicast config with multicast join group using source-address`` +* :vytask:`T5833` ``(bug): Not all AFIs compatible with VRF`` + + +2024-04-24 +========== + +* :vytask:`T6255` ``(bug): Static table description should not contain white-space`` +* :vytask:`T6226` ``(feature): add HAPROXY `tcp-request content accept` related block to load-balancing reverse proxy config`` +* :vytask:`T6109` ``(bug): remote syslog do not get all the logs`` +* :vytask:`T6217` ``(feature): VRRP contrack-sync script change name of the logger`` +* :vytask:`T6244` ``(feature): Spacing of "Show System Uptime" hard to parse`` + + +2024-04-23 +========== + +* :vytask:`T6260` ``(bug): image-tools: remove failed image directory if 'No space left on device' error`` +* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running`` +* :vytask:`T6237` ``(feature): IPSec remote access VPN: ability to set EAP ID of clients`` + + +2024-04-22 +========== + +* :vytask:`T5996` ``(bug): unescape backslashes for config save, compare commands`` +* :vytask:`T6103` ``(bug): DHCP-server bootfile-name double slash syntax weird behaviour`` +* :vytask:`T6080` ``(default): Default NTP server settings`` +* :vytask:`T5986` ``(bug): Container: Error on commit when environment variable value contains \n line break`` + + +2024-04-21 +========== + +* :vytask:`T6191` ``(bug): Policy Route TCP-MSS Behavior Different from 1.3.x`` +* :vytask:`T5535` ``(feature): disable-directed-broadcast should be moved to firewall global-options`` + + +2024-04-20 +========== + +* :vytask:`T6252` ``(bug): gre tunnel - doesn't allow configure jumbo frame more than 8024`` + + +2024-04-19 +========== + +* :vytask:`T6221` ``(bug): Enabling VRF breaks connectivity`` +* :vytask:`T6035` ``(bug): QoS policy shaper queue-type random-detect requires limit avpkt`` +* :vytask:`T6246` ``(feature): Enable basic haproxy http-check configuration options`` +* :vytask:`T6242` ``(feature): Loadbalancer reverse-proxy: SSL backend skip CA certificate verification`` + + +2024-04-17 +========== + +* :vytask:`T6168` ``(bug): add system image does not set default boot to current console type in compatibility mode`` +* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory`` +* :vytask:`T6154` ``(enhancment): Installer should ask for password twice`` +* :vytask:`T5966` ``(default): Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments`` +* :vytask:`T5723` ``(default): mdns repeater: Always reload systemd daemon before applying changes`` +* :vytask:`T5722` ``(bug): Failing to add route in failover if gateway not in the same interface network`` +* :vytask:`T5612` ``(default): Miscellaneous improvements and fixes for dynamic DNS configuration`` +* :vytask:`T5574` ``(default): Support per-service cache management for dynamic dns providers`` +* :vytask:`T5360` ``(bug): ddclient generating abuse`` + + +2024-04-15 +========== + +* :vytask:`T6100` ``(bug): NAT config migration error in 1.4.0-epa1 if invalid address/network defined in 1.3.6 version`` +* :vytask:`T5734` ``(bug): OpenVPN server dh-params that are not in PKI error`` + + +2024-04-14 +========== + +* :vytask:`T6210` ``(feature): Add container ability to configure capability sys-nice`` + + +2024-04-13 +========== + +* :vytask:`T6173` ``(bug): Build Causes Errors When "--version" Contains Slashes ("/")`` +* :vytask:`T2518` ``(feature): Support NAT for ipv6(NPT)`` +* :vytask:`T6238` ``(default): vyos-build Check pull request title requires the python script`` +* :vytask:`T6235` ``(default): Git check PR status: conflicts and resolution`` + + +2024-04-12 +========== + +* :vytask:`T5872` ``(default): ipsec remote access VPN: support dhcp-interface`` +* :vytask:`T6216` ``(bug): Upgrade error from 1.3 to 1.4 - Firewall using character '+'`` +* :vytask:`T6214` ``(bug): Error when using some constraints`` +* :vytask:`T6213` ``(bug): Firewall group constraints`` +* :vytask:`T6148` ``(bug): Reset vpn ipsec command breaks tunnel and does not reset SAs that are down`` +* :vytask:`T1487` ``(default): DNS (pdns_recursor) stats logs not saved to disk`` +* :vytask:`T6222` ``(bug): VRRP rfc3768-compatibility not working correctly when resulting interface name is over 15 characters`` +* :vytask:`T6218` ``(bug): Container network interface in VRF fails to generate IPv6 link-local address`` +* :vytask:`T5959` ``(default): Streamline dns forwarding service`` +* :vytask:`T5846` ``(default): Refactor and simplify DUID definition in conf-mode`` +* :vytask:`T5631` ``(feature): Ability to export the current configuration in JSON format`` +* :vytask:`T5615` ``(default): Narrow down spurious name conflict with mdns`` +* :vytask:`T5530` ``(default): Add LFA to IS-IS`` +* :vytask:`T5195` ``(default): Break up the vyos.util module`` +* :vytask:`T5124` ``(bug): Python3 deprecation distutils.version import LooseVersion`` +* :vytask:`T1871` ``(feature): add MTU option when configure limiter traffic-policy`` +* :vytask:`T874` ``(feature): Support for Two Factor Authentication for CLI access via Google Authenticator/OTP`` +* :vytask:`T6204` ``(default): Remove shebang lines from Python modules`` +* :vytask:`T6166` ``(bug): Tech support generation error for custom output location`` +* :vytask:`T6062` ``(feature): container: add support for image manipulation based on tag name`` +* :vytask:`T5877` ``(default): Reduce unnecessary nesting in system domain-search path and improve smoketest`` +* :vytask:`T5871` ``(default): ipsec remote access VPN: specify "cacerts" to disambiguate mulitple remote access configurations`` +* :vytask:`T5870` ``(default): ipsec remote access VPN: add x509 ("pubkey") authentication`` +* :vytask:`T5772` ``(default): Require HTTPS API server configurations to include at least one key if key-based auth is used`` +* :vytask:`T5447` ``(feature): Allow static MACsec keys with peers`` +* :vytask:`T4221` ``(default): Add a template filter for converting scalars to single-item lists`` +* :vytask:`T3766` ``(feature): containers: Expanding options for networking and building containers`` + + +2024-04-11 +========== + +* :vytask:`T4516` ``(feature): Rewrite system image manipulation tools in Python`` +* :vytask:`T4548` ``(feature): GRUB loader configuration rework`` +* :vytask:`T3774` ``(bug): atop logs are not limited in size`` +* :vytask:`T3574` ``(default): Add constraintGroup for combining validators with logical AND`` +* :vytask:`T3474` ``(default): Revisit storing syntax version of interface definitions in XML file`` +* :vytask:`T160` ``(feature): Support NAT64`` +* :vytask:`T6228` ``(bug): Cleanup of not existing units`` + + +2024-04-10 +========== + +* :vytask:`T6207` ``(bug): image-tools: restore ability to copy config.boot.default on image install`` +* :vytask:`T5750` ``(bug): Upgrade from 1.3.4 to 1.4 Rolling fails QoS`` +* :vytask:`T5858` ``(bug): Show conntrack statistics formatting is all over the place`` +* :vytask:`T4734` ``(feature): Feature Request: openvpn: add OTP 2FA support`` + + +2024-04-09 +========== + +* :vytask:`T3409` ``(feature): Add back TCP-MSS Clamp to PMTU`` +* :vytask:`T6121` ``(feature): Extend service config-sync for sections vpn, policy, vrf`` + + +2024-04-08 +========== + +* :vytask:`T6197` ``(bug): IPoE-server interface client-subnet looks broken or works with the wrong logic`` +* :vytask:`T6196` ``(bug): Route-map and summary-only do not work in BGP aggregation at the same time`` +* :vytask:`T6068` ``(feature): dhcp server: allow switching between load-balanced and hotspare mode`` + + +2024-04-07 +========== + +* :vytask:`T6205` ``(bug): ipoe: error in migration script logic while renaming mac-address to mac node`` +* :vytask:`T6039` ``(bug): cloud-init DNS search-domain causes configuration migration/validation error`` +* :vytask:`T5862` ``(bug): Default MTU is not acceptable in some environments`` +* :vytask:`T6208` ``(feature): container: rename "cap-add" CLI node to "capability"`` +* :vytask:`T6188` ``(feature): Add Firewall Rule Description to "show firewall" commands`` +* :vytask:`T1244` ``(default): Support for StartupResync in conntrackd`` + + +2024-04-06 +========== + +* :vytask:`T6203` ``(enhancment): Remove obsoleted xml lib`` +* :vytask:`T6202` ``(bug): Multi-Protocol BGP is broken by 6PE patch in upstream FRR 9.1`` + + +2024-04-05 +========== + +* :vytask:`T6089` ``(bug): [1.3.6->1.4.0-epa1 Migration] "ospf passive-interface default" incorrectly added`` +* :vytask:`T2590` ``(bug): DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c`` +* :vytask:`T6199` ``(feature): spring cleaning - drop unused Python imports`` + + +2024-04-04 +========== + +* :vytask:`T6119` ``(default): Use a compliant TOML parser`` +* :vytask:`T6171` ``(feature): dhcp server fail-over - Rename fail-over node`` +* :vytask:`T6115` ``(bug): Build from Git tags fail`` +* :vytask:`T5122` ``(feature): Move "archive-areas" to defaults.toml to support "non-free-firmware" repository`` +* :vytask:`T5121` ``(bug): Incorrect "architecture" config loaded`` +* :vytask:`T4951` ``(default): Add an op mode exception for cases when operations fail due to insufficient system resources`` +* :vytask:`T4883` ``(default): Add a description field for routing tables`` +* :vytask:`T4796` ``(bug): build-vyos-image ignores multiple options`` +* :vytask:`T4795` ``(feature): Cleanup custom python validators`` +* :vytask:`T4761` ``(default): Add a generic URL validator`` +* :vytask:`T3843` ``(bug): l2tp configuration not cleared after delete`` +* :vytask:`T3681` ``(default): The VMware Tools resume script did not run successfully in this virtual machine.`` +* :vytask:`T1991` ``(feature): Rework time services`` +* :vytask:`T5711` ``(default): Put the version data file inside the ISO image`` +* :vytask:`T5672` ``(default): Remove the old-style command definition importer`` +* :vytask:`T5639` ``(default): Group vyos-1x dependencies by their VyOS components and specify their purpose`` +* :vytask:`T5638` ``(default): Add support for requiring numeric values to be ranges rather than single numbers`` +* :vytask:`T5634` ``(default): Remove support for Blowfish and DES from OpenVPN`` +* :vytask:`T5605` ``(default): Do not generate keysize option in OpenVPN configs`` +* :vytask:`T5582` ``(default): Add a command to force NTP sync`` +* :vytask:`T5449` ``(default): Add options for TCP MSS probing`` +* :vytask:`T4440` ``(default): Add OCI compliant image labels to vyos-build and vyos containers`` +* :vytask:`T671` ``(enhancment): Identify and remove dead code`` +* :vytask:`T5109` ``(feature): Improve OCaml XML validator`` +* :vytask:`T1449` ``(feature): Add opportunity to include custom default configs (few) at building`` + + +2024-04-03 +========== + +* :vytask:`T6198` ``(feature): configverify: add common helper for PKI certificate validation`` +* :vytask:`T6192` ``(feature): Multi VRF support for SSH`` + + +2024-04-02 +========== + +* :vytask:`T6167` ``(bug): VNI not set on VRF after reboot`` +* :vytask:`T6151` ``(default): BGP VRF - Route-leaking not work when the next-hop is a recursive route.`` +* :vytask:`T6033` ``(bug): hsflowd fails to start when using a tunnel interface`` + + +2024-04-01 +========== + +* :vytask:`T6195` ``(feature): dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1`` +* :vytask:`T6193` ``(bug): dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces`` +* :vytask:`T6178` ``(bug): Reverse-proxy should check that certificate exists during commit`` + + +2024-03-31 +========== + +* :vytask:`T6186` ``(bug): Fix regression in 'set system image default-boot'`` +* :vytask:`T5832` ``(feature): Keepalived: Allow using the 'dev' statement on excluded-addresses`` + + +2024-03-28 +========== + +* :vytask:`T6147` ``(bug): Conntrack not working as expected with global state-policy`` +* :vytask:`T6175` ``(bug): op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface`` + + +2024-03-26 +========== + +* :vytask:`T6066` ``(bug): Setting same network in different ospf area will raise exception`` + + +2024-03-25 +========== + +* :vytask:`T6145` ``(bug): Service config-sync does not rely on priorities but must`` + + +2024-03-24 +========== + +* :vytask:`T6161` ``(feature): Output container images as JSON`` +* :vytask:`T6165` ``(bug): grub: vyos-grub-update failed to start on "slow" systems`` +* :vytask:`T6085` ``(bug): VTI interfaces are in UP state by default`` +* :vytask:`T6152` ``(bug): Kernel panic for ZimaBoard 232`` + + +2024-03-23 +========== + +* :vytask:`T6160` ``(bug): isis: NameError: name 'process' is not defined`` +* :vytask:`T6131` ``(bug): Disabling openvpn interface(s) causes OSPF to fail to load on reboot`` +* :vytask:`T4022` ``(feature): Add package nat-rtsp-dkms`` + + +2024-03-22 +========== + +* :vytask:`T6136` ``(bug): Configuring a dynamic address group, config script did not check whether the group was created`` +* :vytask:`T6130` ``(bug): [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing`` +* :vytask:`T6090` ``(bug): [1.3.6->1.4.0-epa1 Migration] policy route fails due tcp flag case sensitivity`` +* :vytask:`T6155` ``(default): ixgbe: failed to initialize because an unsupported SFP+ module type was detected.`` +* :vytask:`T6125` ``(feature): Support 802.1ad (0x88a8) vlan filtering for bridge`` +* :vytask:`T5624` ``(default): Remove /etc/debian_version from the image`` + + +2024-03-21 +========== + +* :vytask:`T6143` ``(feature): Increase configuration timeout range for service config-sync`` + + +2024-03-20 +========== + +* :vytask:`T6133` ``(feature): Add domain-name to commit-archive`` +* :vytask:`T6129` ``(feature): bgp: add route-map option "as-path exclude all"`` + + +2024-03-19 +========== + +* :vytask:`T6127` ``(bug): Ability to view logs for rules with Offload not functional`` +* :vytask:`T6138` ``(bug): Conntrack table op-mode fails with flowtable offload entries`` + + +2024-03-15 +========== + +* :vytask:`T6118` ``(feature): radvd: RFC8781: add nat64prefix support`` + + +2024-03-12 +========== + +* :vytask:`T6020` ``(bug): VRRP health-check script is not applied correctly in keepalived.conf`` +* :vytask:`T5646` ``(bug): QoS policy limiter broken if class without match`` +* :vytask:`T2433` ``(feature): Improve CLI value validator performance`` +* :vytask:`T1436` ``(bug): Config entries with default values do not correctly show as changed`` + + +2024-03-11 +========== + +* :vytask:`T6098` ``(bug): Description doesnt seem to allow for non international characters`` +* :vytask:`T6070` ``(bug): bnx2x NIC causes a commit error due to incorrect implementation of EEE status reading`` +* :vytask:`T2998` ``(bug): SNMP v3 oid "exclude" option doesn't work`` +* :vytask:`T6107` ``(bug): Nginx does not allow big config queries for configure endpoint API`` +* :vytask:`T6096` ``(bug): Config commits are not synced properly because 00vyos-sync is deleted by vyos-router`` +* :vytask:`T6093` ``(bug): Incorrect dhcp-options vendor-class-id regex`` +* :vytask:`T6083` ``(feature): ethtool: move string parsing to JSON parsing`` +* :vytask:`T6069` ``(bug): HTTP API segfault during concurrent configuration requests`` +* :vytask:`T6057` ``(feature): Add ability to disable syslog for conntrackd`` +* :vytask:`T5504` ``(feature): Keepalived VRRP ability to set more than one peer-address`` +* :vytask:`T5717` ``(feature): ospfv3 - add allow to set metric-type to ospf redistribution while frr docs says its possible.`` +* :vytask:`T6071` ``(bug): firewall: CLI description limit of 256 characters cause config upgrade issues`` + + +2024-03-08 +========== + +* :vytask:`T6086` ``(bug): NAT does not work with network-groups`` +* :vytask:`T6094` ``(bug): Destination Nat not Making Firewall Rules`` +* :vytask:`T6061` ``(bug): connection-status nat destination firewall filter not working in 1.4.0-epa1`` +* :vytask:`T6075` ``(bug): Applying firewall rules with a non-existent interface group`` + + +2024-03-07 +========== + +* :vytask:`T6104` ``(bug): Regression in commit-archive for non-interactive configuration`` +* :vytask:`T6084` ``(bug): OpenNHRP DMVPN configuration file clean after reboot if we have any IPSec configuration`` +* :vytask:`T5348` ``(bug): Service config-sync can freeze the secondary router if it has commit-archive location`` +* :vytask:`T6073` ``(bug): Conntrack/NAT not being disabled when VRFs are defined`` +* :vytask:`T6095` ``(default): Tab completion for "set interfaces wireless wlan0 country-code" incorrect country "uk"`` + + +2024-03-06 +========== + +* :vytask:`T6079` ``(bug): dhcp: migration fails for duplicate static-mapping`` + + +2024-03-05 +========== + +* :vytask:`T5903` ``(bug): NHRP don´t start on reboot from version 1.5-rolling-202401010026`` +* :vytask:`T2447` ``(feature): Additional Boot Argument Configuration to limit CPU C-States`` + + +2024-03-04 +========== + +* :vytask:`T6054` ``(bug): load-balancing wan - doesn't configure a list of ports`` +* :vytask:`T6087` ``(feature): ospfv3: add support to redistribute IS-IS routes`` + + +2024-03-02 +========== + +* :vytask:`T6081` ``(bug): QoS policy shaper target and interval wrong calcuations`` + + +2024-02-29 +========== + +* :vytask:`T6078` ``(feature): Update ethtool to 6.6`` +* :vytask:`T6077` ``(feature): banner: implement ASCII contest winner default logo`` +* :vytask:`T6074` ``(feature): container: do not allow deleting images which have a container running`` + + +2024-02-28 +========== + +* :vytask:`T6055` ``(bug): PKI error: "failed to install x value" when executed the command from conf mode`` +* :vytask:`T4270` ``(bug): dns forwarding - When "ignore-hosts-file" is unset, local hostname of router resolves to 127.0.1.1`` + + +2024-02-27 +========== + +* :vytask:`T6065` ``(bug): Duplicate lines in build-vyos-image script cause sagitta build to fail`` +* :vytask:`T5080` ``(bug): Conntrack enabled by default`` + + +2024-02-26 +========== + +* :vytask:`T6064` ``(bug): Can not build VyOS if repository it not cloned to a branch`` +* :vytask:`T5754` ``(default): Update to StrongSwan 5.9.11`` + + +2024-02-25 +========== + +* :vytask:`T6060` ``(feature): op-mode: container: support removing all container images at once`` + + +2024-02-24 +========== + +* :vytask:`T5909` ``(bug): Container registry with authentication prevents config load (section container) after reboot`` + + +2024-02-23 +========== + +* :vytask:`T5376` ``(bug): Conntrack FTP helper does not work properly`` +* :vytask:`T970` ``(feature): Hostname Support in NAT and Firewall Rules`` +* :vytask:`T4940` ``(feature): Interface debugging`` + + +2024-02-22 +========== + +* :vytask:`T6048` ``(bug): Exception in event handler script`` +* :vytask:`T3902` ``(bug): Firewall does not load on boot, address-group not found, even though it exists`` + + +2024-02-21 +========== + +* :vytask:`T6050` ``(bug): Wrong scripting commands descriptions in accel-ppp services`` + + +2024-02-19 +========== + +* :vytask:`T5971` ``(default): Create the same view of ppp section for all accel-ppp services`` +* :vytask:`T6029` ``(default): Rewrite Accel-PPP services to an identical feature set`` +* :vytask:`T3722` ``(bug): op-mode IPSec show vpn ike sa always shows L-TIME 0`` + + +2024-02-18 +========== + +* :vytask:`T6043` ``(bug): VxLAN and bridge error bug`` +* :vytask:`T6041` ``(bug): image-tools: install fails from PXE boot into live iso due to restrictive logic`` + + +2024-02-17 +========== + +* :vytask:`T5972` ``(feature): login: add possibility to disable individual local user accounts`` + + +2024-02-16 +========== + +* :vytask:`T6009` ``(bug): Firewall - Time not working properly when not using UTC`` +* :vytask:`T6005` ``(bug): Error on adding a wireguard interface to OSPFv3`` +* :vytask:`T2113` ``(bug): OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping`` +* :vytask:`T6019` ``(feature): Bump nftables and libnftnl version`` +* :vytask:`T3471` ``(bug): DHCP hook is not able to detect all running DHCP instances`` +* :vytask:`T6015` ``(default): "journalctl_charon" file does not contain data in the generated "ipsec debug-archive" file`` +* :vytask:`T6001` ``(default): Add option to enable resolve-via-default`` +* :vytask:`T5965` ``(bug): WWAN modems using raw-ip do not work with dhclient/dhcp6c`` +* :vytask:`T5418` ``(bug): PPPoE-Server Client IP pool Subnet`` +* :vytask:`T5245` ``(bug): Wireless interfaces do not get IPv6 link-local address assigned`` + + +2024-02-15 +========== + +* :vytask:`T5977` ``(bug): nftables: Operation not supported when using match-ipsec in outbound firewall`` +* :vytask:`T2612` ``(bug): HTTPS API, changing API key fails but goes through`` +* :vytask:`T5989` ``(bug): IP subnets not usable in UPnP ACLs`` +* :vytask:`T5890` ``(default): OTP key generation is broken`` +* :vytask:`T5719` ``(default): mdns repeater: Add op-mode commands`` +* :vytask:`T4839` ``(feature): Dynamic Firewall groups`` +* :vytask:`T4801` ``(feature): Support for building AWS-ready ISO`` +* :vytask:`T3993` ``(enhancment): Extend HTTP API GraphQL support`` +* :vytask:`T3991` ``(bug): PKI operational command return traceback`` +* :vytask:`T3780` ``(bug): VTI not being brought down when tunnel is down`` +* :vytask:`T3001` ``(feature): Disable spectre mitigation patches from CLI`` +* :vytask:`T562` ``(feature): PDNS: Add support for authoritative dns server`` +* :vytask:`T71` ``(feature): Add virtual IP and route installation policy options for IPsec`` +* :vytask:`T5496` ``(default): `show firewall` error`` +* :vytask:`T4038` ``(default): Rewrite `vyatta-image-tools.pl` in Python`` +* :vytask:`T4997` ``(default): Add DHCP client user hooks dir`` +* :vytask:`T775` ``(feature): Config Sync between two VyOS routers`` +* :vytask:`T381` ``(feature): config nodes for EasyRSA CAs`` +* :vytask:`T118` ``(feature): Native Zabbix Support`` + + +2024-02-14 +========== + +* :vytask:`T6034` ``(feature): rpki: move file based SSH keys for authentication to PKI subsystem`` +* :vytask:`T5981` ``(bug): IPsec site-to-site migrated PKI ca certificates are created with an '@'`` +* :vytask:`T5930` ``(bug): vrf - route-leak not work using route-target both command.`` +* :vytask:`T5709` ``(bug): IPoE-server fails if next pool mentioned but not defined`` +* :vytask:`T4119` ``(bug): Issue with l2tp remote-access ipv6 configuration`` +* :vytask:`T2044` ``(bug): RPKI doesn't boot properly`` +* :vytask:`T6032` ``(feature): bgp: add EVPN MAC-VRF Site-of-Origin support`` +* :vytask:`T5960` ``(default): Rewriting authentication section in accel-ppp services`` + + +2024-02-13 +========== + +* :vytask:`T5928` ``(bug): Configuration fails to load on boot if offloading has VLAN interfaces defined`` +* :vytask:`T5482` ``(bug): Chrony NTP Server Fails To Sync Time`` +* :vytask:`T5064` ``(bug): Value validation for domain-groups seems to be broken`` + + +2024-02-12 +========== + +* :vytask:`T6010` ``(bug): Support setting multiple values in BGP path-attribute`` +* :vytask:`T6004` ``(bug): RPKI is not configured`` +* :vytask:`T5952` ``(default): DHCP allow same MAC Address on same subnet`` +* :vytask:`T5849` ``(feature): Add SRv6 route commands`` + + +2024-02-10 +========== + +* :vytask:`T6023` ``(bug): rpki: add support for CLI knobs expire-interval and retry-interval`` +* :vytask:`T1090` ``(default): Webproxy overhaul`` + + +2024-02-09 +========== + +* :vytask:`T6028` ``(bug): QoS policy shaper wrong class_id_max and default_minor_id`` +* :vytask:`T6026` ``(bug): QoS hide attempts to delete qdisc from devices`` +* :vytask:`T5788` ``(feature): frr: update to 9.1 release`` +* :vytask:`T5703` ``(bug): QoS config on pppoe interface resets back to fq_codel after tunnel reboots`` +* :vytask:`T5685` ``(feature): Keepalived VRRP prefix is not necessary for the virtual address`` + + +2024-02-08 +========== + +* :vytask:`T6014` ``(feature): Bump keepalived version`` +* :vytask:`T5910` ``(bug): Grub problem(?) Serial Console no longer working`` +* :vytask:`T6021` ``(bug): QoS r2q wrong calculation`` + + +2024-02-07 +========== + +* :vytask:`T6017` ``(bug): Update vyos-http-api-tools for security advisory`` +* :vytask:`T6016` ``(bug): Resolve intermittent failures in cleanup function after failed image install`` +* :vytask:`T6024` ``(feature): bgp: add additional missing FRR features`` +* :vytask:`T6011` ``(feature): rpki: known-hosts-file is no longer supported by FRR CLI - remove VyOS CLI node`` +* :vytask:`T5998` ``(feature): replay_window setting under vpn in config`` + + +2024-02-06 +========== + +* :vytask:`T6018` ``(default): smoketest: updating http-api framework requires a pause before test`` +* :vytask:`T5921` ``(bug): Trying to commit an OpenConnect configuration without any local users results in an exception`` +* :vytask:`T5687` ``(feature): Implement ECS settings for PowerDNS recursor`` + + +2024-02-05 +========== + +* :vytask:`T5974` ``(bug): QoS policy shaper is currently miscalculating bandwidth and ceil values for the default class`` +* :vytask:`T5865` ``(feature): Rewrite ipv6 pool section to ipv6 named pools in Accel-ppp services`` + + +2024-02-02 +========== + +* :vytask:`T5739` ``(bug): Password recovery does not work if public keys are configured`` +* :vytask:`T5955` ``(feature): Rootless containers/set uid/gid for container`` +* :vytask:`T5941` ``(bug): [1.3.5 -> 1.4.0-RC1 Migration] Orphaned Configuration Nodes Cause Issues`` +* :vytask:`T6003` ``(feature): Add 'show rpki as-number' and 'show rpki prefix'`` +* :vytask:`T5848` ``(feature): Add triple-isolate flow isolation option to CAKE QoS policy`` + + +2024-02-01 +========== + +* :vytask:`T5995` ``(bug): Kernel NIC-drivers for Huawei NICs are not properly enabled`` +* :vytask:`T5978` ``(bug): ethernet: hw-tc-offload does not actually get enabled on the NIC`` +* :vytask:`T5979` ``(enhancment): Add configurable kernel boot parameters`` +* :vytask:`T5973` ``(bug): vrf: RTNETLINK answers: File exists`` +* :vytask:`T5967` ``(bug): Multi-hop BFD connections can't be established; please add minimum-ttl option.`` +* :vytask:`T5619` ``(default): Update the Intel ixgbe driver due to issues with Intel X533`` + + +2024-01-31 +========== + +* :vytask:`T6000` ``(bug): [1.3.x -> 1.5.x] migrating threw exception in /opt/vyatta/etc/config-migrate/migrate/https/5-to-6, performed workaround`` +* :vytask:`T5999` ``(bug): load-balancing reverse-proxy can't configure root as a redirect`` + + +2024-01-30 +========== + +* :vytask:`T5980` ``(feature): Add image-tools support for configurable kernel boot options`` + + +2024-01-29 +========== + +* :vytask:`T5988` ``(bug): image-tools: a check of valid image name is missing from 'add image'`` +* :vytask:`T5994` ``(bug): Fix typo in 'remote' module preventing 'add system image' via ftp`` + + +2024-01-26 +========== + +* :vytask:`T5957` ``(bug): Firewall fails to delete inbound-interface name`` +* :vytask:`T5779` ``(bug): custom conntrack timeout rule not applicable`` +* :vytask:`T5984` ``(feature): Add user util numactl`` + + +2024-01-25 +========== + +* :vytask:`T5983` ``(bug): image-tools: minor regression in pruning version files in compatibility mode`` +* :vytask:`T5927` ``(bug): QoS policy shaper-hfsc class does not have a `bandwidth` node but requires one in the check`` +* :vytask:`T5834` ``(bug): Rename 'enable-default-log' to 'default-log'`` + + +2024-01-22 +========== + +* :vytask:`T5968` ``(feature): hsflowd: add VRF support`` +* :vytask:`T5975` ``(bug): GraphQL expects script otp.py that does not exists in 1.4`` +* :vytask:`T5961` ``(bug): QoS policy shaper vif with ceiling fails on commit`` +* :vytask:`T5958` ``(bug): QoS policy shaper-hfsc is not implemented`` +* :vytask:`T5160` ``(feature): Firewall refactor`` +* :vytask:`T5969` ``(feature): op-mode: list multicast group membership`` + + +2024-01-21 +========== + +* :vytask:`T5799` ``(bug): vyos unbootable after 1.4-rolling-202308240020 to 1.5-rolling-202312010026 upgrade`` +* :vytask:`T5787` ``(bug): dhcp-server allows duplicate static-mapping for the same IP address`` +* :vytask:`T5692` ``(enhancment): NTP leap smear`` +* :vytask:`T5954` ``(feature): Enable nvme_hwmon and drivetemp in KERNEL`` + + +2024-01-20 +========== + +* :vytask:`T5915` ``(bug): Firewall zone - Re add op-mode commands`` +* :vytask:`T5805` ``(bug): Missed per-interface statistic in telegraf`` +* :vytask:`T5724` ``(feature): About dhcp client hooks`` +* :vytask:`T5577` ``(bug): Optimize PAM configs for RADIUS/TACACS+`` +* :vytask:`T5550` ``(bug): Source validation on interface does not work properly`` +* :vytask:`T5267` ``(bug): Another corruption on upgrade`` +* :vytask:`T5239` ``(bug): frr 'hostname' missing or incorrect, and domain-name missing totally`` +* :vytask:`T5219` ``(bug): ddclient: Cloudflare doesn't require login`` +* :vytask:`T5217` ``(feature): Add firewall SYNPROXY`` +* :vytask:`T5203` ``(feature): load-balancing wan add systemd unit instead of old vyatta-wanloadbalance.init`` +* :vytask:`T5199` ``(bug): Salt-minion cannot connect to server in python 3.10 and up`` +* :vytask:`T5138` ``(feature): Add patch to accel-ppp build L2TP LNS use Calling-Number as RADIUS Calling-Station-ID`` +* :vytask:`T5054` ``(bug): ipsec: "show vpn ipsec remote-access" does not list active connections`` +* :vytask:`T5053` ``(bug): Vyatta-cfg Post-Removal Hook Tries to Disable Deleted Service`` +* :vytask:`T5035` ``(feature): Add more actions to policy route rule`` +* :vytask:`T4990` ``(bug): Commit results may not be properly saved if power is cut immediately after a successful commit`` +* :vytask:`T4988` ``(default): Expose time and size conversion functions as Jinja2 filters`` +* :vytask:`T4986` ``(feature): Ability to filter traffic originating from the router itself via firewall`` +* :vytask:`T4963` ``(default): vyos.ethtool: improve/fix driver name detection`` +* :vytask:`T4935` ``(bug): ospfv3: "not-advertise" and "advertise" conflict`` +* :vytask:`T4897` ``(bug): Setting 'source-address' or `source-interface` on existing vxlan interface doesn't work`` +* :vytask:`T4888` ``(default): Rewrite the conntrack sync script using vyos.opmode`` +* :vytask:`T4863` ``(feature): need an option for route policy to apply to dynamic interfaces l2tp*/ipoe*/pppoe* (for TCP MSS setting)`` +* :vytask:`T4817` ``(feature): Please add support for RFC 9234`` +* :vytask:`T4765` ``(default): Normalize field names in op mode JSON outputs`` +* :vytask:`T4751` ``(enhancment): Feature Request: system login: 2FA OTP key generator in VyOS CLI`` +* :vytask:`T4726` ``(default): Add completion and validation for the accel-ppp RADIUS vendor option`` +* :vytask:`T4722` ``(default): Improve abbreviation/acronym consistency`` +* :vytask:`T4172` ``(feature): Patch ndppd to not read route table if there are no auto prefixes`` +* :vytask:`T4085` ``(feature): Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict`` +* :vytask:`T4031` ``(feature): Ability to configure DMVPN in vrf`` +* :vytask:`T4030` ``(bug): SR-IOV and interface renaming bug`` +* :vytask:`T4014` ``(feature): Add “command” and “arg” configuration options for containers`` +* :vytask:`T3965` ``(default): arm: Extend configure scripts to allow for arm builds`` +* :vytask:`T3813` ``(bug): Some custom sysctl parameters can't be applied bug`` +* :vytask:`T3778` ``(bug): Abnormal network communication and settings`` +* :vytask:`T3591` ``(bug): OpenVPN with/without VRF not working (NordVPN)`` +* :vytask:`T3372` ``(feature): Support public HTTPS repos in live-build`` +* :vytask:`T5963` ``(bug): QoS policy shaper rate calculations could be wrong for some ethernet devices`` +* :vytask:`T5962` ``(feature): QoS policy set default speed to 100mbit or 1gbit instead of 10mbit`` +* :vytask:`T5697` ``(bug): event-handler keep failing`` +* :vytask:`T4779` ``(default): Make raw op mode command outputs use bytes for data amount values`` + + +2024-01-19 +========== + +* :vytask:`T5897` ``(bug): VyOS with Cloud-init and VRF stucks at reboot/shutdown process`` +* :vytask:`T5554` ``(bug): Disable sudo for PAM RADIUS`` +* :vytask:`T4754` ``(default): Improvement: system login: show configured 2FA OTP key`` +* :vytask:`T5857` ``(bug): show interfaces wireless info`` +* :vytask:`T5841` ``(default): Remove old ssh-session-cleanup.service`` +* :vytask:`T5543` ``(bug): Fix source address handling in static joins`` +* :vytask:`T5884` ``(default): Minor description fix (op-mode: generate wireguard)`` +* :vytask:`T5781` ``(default): Add ability to add additional minisign keys`` + + +2024-01-18 +========== + +* :vytask:`T5863` ``(bug): Failure to Load Config on Recent 1.5 Versions`` +* :vytask:`T4638` ``(bug): Deleting a parent interface does not delete its underlying VLAN interfaces`` +* :vytask:`T5953` ``(default): Rename 'close_action' value from `hold` to `trap` in IPSEC IKE`` +* :vytask:`T905` ``(bug): The command show remote-config does not work for remote-platform openvpn`` + + +2024-01-17 +========== + +* :vytask:`T5923` ``(bug): Config mode system_console.py is not aware of revised GRUB file structure`` +* :vytask:`T4658` ``(feature): Rename DPD action `hold` to `trap``` +* :vytask:`T5932` ``(bug): 1.4-rolling-202304120317 to 1.4.0-rc1: dynamic dns migration fail`` + + +2024-01-16 +========== + +* :vytask:`T5951` ``(bug): [1.4.0-RC2] show hardware dmi Operational Mode Command Broken`` +* :vytask:`T5937` ``(bug): [1.3.5 -> 1.4.0-RC1 Migration] IPv6 BGP Neighbor Peer Groups Missing / Not Migrated`` +* :vytask:`T5889` ``(bug): Migration NAT 5-to-6 bug`` +* :vytask:`T5859` ``(bug): Invalid format of pool range in accel-ppp services`` +* :vytask:`T5842` ``(feature): Rewrite PPTP service to get_config_dict`` +* :vytask:`T5801` ``(feature): Rewrite L2TP service to get_config_dict`` +* :vytask:`T5688` ``(default): Create the same view of pool configuration for all accel-ppp services`` + + +2024-01-15 +========== + +* :vytask:`T5944` ``(bug): "reboot in 1" not working`` +* :vytask:`T5936` ``(bug): [1.3.5 -> 1.4.0-RC1 Migration] OSPF Passive Interface Configuration Not Working Correctly`` +* :vytask:`T5247` ``(bug): the bug of the command "show interfaces system"`` +* :vytask:`T5901` ``(bug): Cloud-init and DHCP exit hook errors`` +* :vytask:`T4856` ``(bug): DHCP-client exit hook for IPsec is incorrect`` +* :vytask:`T2556` ``(bug): "show interfaces vrrp" does not return any interface`` + + 2024-01-14 ========== @@ -74,7 +843,6 @@ * :vytask:`T5012` ``(feature): Control network configuration from Cloud-Init config`` * :vytask:`T3116` ``(feature): Support back-end L4 level load balancing`` * :vytask:`T5614` ``(default): Add conntrack helper matching on firewall`` -* :vytask:`T5080` ``(bug): Conntrack enabled by default`` * :vytask:`T4782` ``(enhancment): Allow multiple CA certificates (on e.g. EAPoL)`` * :vytask:`T2199` ``(default): Rewrite firewall in new XML/Python style`` @@ -195,7 +963,6 @@ * :vytask:`T5866` ``(feature): Add op-mode command to restart IPv6 RA daemon`` * :vytask:`T5861` ``(bug): Flavor build system fails with third-party packages`` * :vytask:`T5854` ``(feature): Extend override-default script to allow embedded defaultValue settings`` -* :vytask:`T5566` ``(feature): Be able to disable 802.3az/EEE (energy efficient ethernet) for a particular interface`` * :vytask:`T5792` ``(default): Upgrade ddclient 3.11.2 release`` @@ -216,7 +983,6 @@ 2023-12-22 ========== -* :vytask:`T5811` ``(bug): static dhcp-interface routes not installed`` * :vytask:`T5804` ``(bug): SNAT "any" interface error`` * :vytask:`T4760` ``(bug): VyOS does not support running multiple instances of DHCPv6 clients`` diff --git a/docs/changelog/1.5.rst b/docs/changelog/1.5.rst index 3f88f950..94d7b9ab 100644 --- a/docs/changelog/1.5.rst +++ b/docs/changelog/1.5.rst @@ -8,6 +8,678 @@ _ext/releasenotes.py +2024-04-26 +========== + +* :vytask:`T6259` ``(feature): PKI: Support RFC822 (email) names in SAN`` + + +2024-04-25 +========== + +* :vytask:`T6263` ``(bug): Multicast: Could not commit multicast config with multicast join group using source-address`` +* :vytask:`T5833` ``(bug): Not all AFIs compatible with VRF`` + + +2024-04-24 +========== + +* :vytask:`T6255` ``(bug): Static table description should not contain white-space`` +* :vytask:`T6226` ``(feature): add HAPROXY `tcp-request content accept` related block to load-balancing reverse proxy config`` +* :vytask:`T6109` ``(bug): remote syslog do not get all the logs`` +* :vytask:`T6262` ``(default): Update the boot splash for VyOS 1.5 ISO`` +* :vytask:`T6217` ``(feature): VRRP contrack-sync script change name of the logger`` +* :vytask:`T6244` ``(feature): Spacing of "Show System Uptime" hard to parse`` + + +2024-04-23 +========== + +* :vytask:`T6260` ``(bug): image-tools: remove failed image directory if 'No space left on device' error`` +* :vytask:`T6261` ``(default): Typo in op_mode connect_disconnect print statement for check_ppp_running`` +* :vytask:`T6237` ``(feature): IPSec remote access VPN: ability to set EAP ID of clients`` + + +2024-04-22 +========== + +* :vytask:`T5996` ``(bug): unescape backslashes for config save, compare commands`` + + +2024-04-21 +========== + +* :vytask:`T6191` ``(bug): Policy Route TCP-MSS Behavior Different from 1.3.x`` +* :vytask:`T5535` ``(feature): disable-directed-broadcast should be moved to firewall global-options`` + + +2024-04-20 +========== + +* :vytask:`T6252` ``(bug): gre tunnel - doesn't allow configure jumbo frame more than 8024`` + + +2024-04-19 +========== + +* :vytask:`T6221` ``(bug): Enabling VRF breaks connectivity`` +* :vytask:`T6035` ``(bug): QoS policy shaper queue-type random-detect requires limit avpkt`` +* :vytask:`T6246` ``(feature): Enable basic haproxy http-check configuration options`` +* :vytask:`T6242` ``(feature): Loadbalancer reverse-proxy: SSL backend skip CA certificate verification`` + + +2024-04-17 +========== + +* :vytask:`T6168` ``(bug): add system image does not set default boot to current console type in compatibility mode`` +* :vytask:`T6243` ``(bug): Update vyos-http-api-tools for package idna security advisory`` +* :vytask:`T6154` ``(enhancment): Installer should ask for password twice`` +* :vytask:`T5966` ``(default): Adjust dynamic dns configuration address subpath to be more intuitive and other op-mode adjustments`` +* :vytask:`T5723` ``(default): mdns repeater: Always reload systemd daemon before applying changes`` +* :vytask:`T5722` ``(bug): Failing to add route in failover if gateway not in the same interface network`` +* :vytask:`T5612` ``(default): Miscellaneous improvements and fixes for dynamic DNS configuration`` +* :vytask:`T5574` ``(default): Support per-service cache management for dynamic dns providers`` + + +2024-04-16 +========== + +* :vytask:`T6099` ``(bug): Suppress unsupported interfaces from appearing in messages log by Telegraf`` + + +2024-04-15 +========== + +* :vytask:`T6163` ``(bug): kea-dhcp4-server crashes due to incorrect lease file permissions after 1.5-rolling-202403120022 -> 1.5-rolling-202403230018 upgrade`` +* :vytask:`T6100` ``(bug): NAT config migration error in 1.4.0-epa1 if invalid address/network defined in 1.3.6 version`` +* :vytask:`T6174` ``(bug): can't view dhcp server leases if logged in as a tacacs account`` +* :vytask:`T5734` ``(bug): OpenVPN server dh-params that are not in PKI error`` + + +2024-04-14 +========== + +* :vytask:`T6210` ``(feature): Add container ability to configure capability sys-nice`` + + +2024-04-13 +========== + +* :vytask:`T6173` ``(bug): Build Causes Errors When "--version" Contains Slashes ("/")`` +* :vytask:`T2518` ``(feature): Support NAT for ipv6(NPT)`` + + +2024-04-12 +========== + +* :vytask:`T6214` ``(bug): Error when using some constraints`` +* :vytask:`T6213` ``(bug): Firewall group constraints`` +* :vytask:`T6222` ``(bug): VRRP rfc3768-compatibility not working correctly when resulting interface name is over 15 characters`` +* :vytask:`T6218` ``(bug): Container network interface in VRF fails to generate IPv6 link-local address`` +* :vytask:`T5044` ``(feature): High Availability in DHCPv6 -ISC DHCP Failover/Kea`` +* :vytask:`T6166` ``(bug): Tech support generation error for custom output location`` +* :vytask:`T344` ``(feature): Software basesd FastPath`` + + +2024-04-11 +========== + +* :vytask:`T4516` ``(feature): Rewrite system image manipulation tools in Python`` +* :vytask:`T4548` ``(feature): GRUB loader configuration rework`` +* :vytask:`T6228` ``(bug): Cleanup of not existing units`` + + +2024-04-10 +========== + +* :vytask:`T6207` ``(bug): image-tools: restore ability to copy config.boot.default on image install`` +* :vytask:`T6106` ``(bug): Valid commit error for route-reflector-client option defined in peer-group`` +* :vytask:`T5750` ``(bug): Upgrade from 1.3.4 to 1.4 Rolling fails QoS`` +* :vytask:`T5740` ``(bug): Generate wiregurad keys via HTTP-API fails`` +* :vytask:`T5858` ``(bug): Show conntrack statistics formatting is all over the place`` + + +2024-04-09 +========== + +* :vytask:`T6121` ``(feature): Extend service config-sync for sections vpn, policy, vrf`` + + +2024-04-08 +========== + +* :vytask:`T6197` ``(bug): IPoE-server interface client-subnet looks broken or works with the wrong logic`` +* :vytask:`T6196` ``(bug): Route-map and summary-only do not work in BGP aggregation at the same time`` +* :vytask:`T6068` ``(feature): dhcp server: allow switching between load-balanced and hotspare mode`` + + +2024-04-07 +========== + +* :vytask:`T6205` ``(bug): ipoe: error in migration script logic while renaming mac-address to mac node`` +* :vytask:`T5862` ``(bug): Default MTU is not acceptable in some environments`` +* :vytask:`T6208` ``(feature): container: rename "cap-add" CLI node to "capability"`` +* :vytask:`T6188` ``(feature): Add Firewall Rule Description to "show firewall" commands`` +* :vytask:`T1244` ``(default): Support for StartupResync in conntrackd`` + + +2024-04-06 +========== + +* :vytask:`T6203` ``(enhancment): Remove obsoleted xml lib`` +* :vytask:`T6202` ``(bug): Multi-Protocol BGP is broken by 6PE patch in upstream FRR 9.1`` + + +2024-04-05 +========== + +* :vytask:`T6089` ``(bug): [1.3.6->1.4.0-epa1 Migration] "ospf passive-interface default" incorrectly added`` +* :vytask:`T2590` ``(bug): DHCPv6 not updating nameservers and search domains since replacing isc-dhcp-client with WIDE dhcp6c`` +* :vytask:`T6199` ``(feature): spring cleaning - drop unused Python imports`` + + +2024-04-04 +========== + +* :vytask:`T6119` ``(default): Use a compliant TOML parser`` +* :vytask:`T6171` ``(feature): dhcp server fail-over - Rename fail-over node`` +* :vytask:`T6128` ``(bug): minisign.pub is wrong on https://vyos.net/get/nightly-builds/`` +* :vytask:`T5882` ``(feature): vyos-utils: move to Dune as build system`` +* :vytask:`T5864` ``(default): 'show ntp' Commands Not Working`` +* :vytask:`T3843` ``(bug): l2tp configuration not cleared after delete`` +* :vytask:`T2187` ``(feature): Python Unit testing`` +* :vytask:`T788` ``(bug): Nightly builds are not signed`` + + +2024-04-03 +========== + +* :vytask:`T6198` ``(feature): configverify: add common helper for PKI certificate validation`` +* :vytask:`T6192` ``(feature): Multi VRF support for SSH`` + + +2024-04-02 +========== + +* :vytask:`T6167` ``(bug): VNI not set on VRF after reboot`` +* :vytask:`T6151` ``(default): BGP VRF - Route-leaking not work when the next-hop is a recursive route.`` +* :vytask:`T6033` ``(bug): hsflowd fails to start when using a tunnel interface`` + + +2024-04-01 +========== + +* :vytask:`T6195` ``(feature): dropbear: package upgrade 2022.83-1 -> 2022.83-1+deb12u1`` +* :vytask:`T6193` ``(bug): dhcp-client: invalid warning "is not a DHCP interface but uses DHCP name-server option" for VLAN interfaces`` +* :vytask:`T6178` ``(bug): Reverse-proxy should check that certificate exists during commit`` + + +2024-03-31 +========== + +* :vytask:`T6186` ``(bug): Fix regression in 'set system image default-boot'`` +* :vytask:`T5832` ``(feature): Keepalived: Allow using the 'dev' statement on excluded-addresses`` + + +2024-03-29 +========== + +* :vytask:`T6159` ``(bug): Openvpn Server Op-cmd adds heading "OpenVPN status on vtunx" for every client connection`` + + +2024-03-28 +========== + +* :vytask:`T6147` ``(bug): Conntrack not working as expected with global state-policy`` +* :vytask:`T6175` ``(bug): op-mode: "renew dhcp interface <name>" does not check if it's an actual DHCP interface`` +* :vytask:`T6102` ``(bug): Clear dhcp-server lease throws python exception on 1.5-rolling`` + + +2024-03-26 +========== + +* :vytask:`T6066` ``(bug): Setting same network in different ospf area will raise exception`` + + +2024-03-25 +========== + +* :vytask:`T6145` ``(bug): Service config-sync does not rely on priorities but must`` + + +2024-03-24 +========== + +* :vytask:`T6161` ``(feature): Output container images as JSON`` +* :vytask:`T6165` ``(bug): grub: vyos-grub-update failed to start on "slow" systems`` +* :vytask:`T6085` ``(bug): VTI interfaces are in UP state by default`` +* :vytask:`T6152` ``(bug): Kernel panic for ZimaBoard 232`` + + +2024-03-23 +========== + +* :vytask:`T6160` ``(bug): isis: NameError: name 'process' is not defined`` +* :vytask:`T6131` ``(bug): Disabling openvpn interface(s) causes OSPF to fail to load on reboot`` +* :vytask:`T4022` ``(feature): Add package nat-rtsp-dkms`` + + +2024-03-22 +========== + +* :vytask:`T6136` ``(bug): Configuring a dynamic address group, config script did not check whether the group was created`` +* :vytask:`T6130` ``(bug): [1.3.6->1.4.0-epa2 Migration] BGP "set community" missing`` +* :vytask:`T6090` ``(bug): [1.3.6->1.4.0-epa1 Migration] policy route fails due tcp flag case sensitivity`` +* :vytask:`T6155` ``(default): ixgbe: failed to initialize because an unsupported SFP+ module type was detected.`` +* :vytask:`T6125` ``(feature): Support 802.1ad (0x88a8) vlan filtering for bridge`` + + +2024-03-21 +========== + +* :vytask:`T6143` ``(feature): Increase configuration timeout range for service config-sync`` + + +2024-03-20 +========== + +* :vytask:`T6133` ``(feature): Add domain-name to commit-archive`` +* :vytask:`T6129` ``(feature): bgp: add route-map option "as-path exclude all"`` + + +2024-03-19 +========== + +* :vytask:`T6127` ``(bug): Ability to view logs for rules with Offload not functional`` +* :vytask:`T6138` ``(bug): Conntrack table op-mode fails with flowtable offload entries`` + + +2024-03-15 +========== + +* :vytask:`T6118` ``(feature): radvd: RFC8781: add nat64prefix support`` + + +2024-03-12 +========== + +* :vytask:`T6020` ``(bug): VRRP health-check script is not applied correctly in keepalived.conf`` +* :vytask:`T5646` ``(bug): QoS policy limiter broken if class without match`` + + +2024-03-11 +========== + +* :vytask:`T6098` ``(bug): Description doesnt seem to allow for non international characters`` +* :vytask:`T2998` ``(bug): SNMP v3 oid "exclude" option doesn't work`` +* :vytask:`T6107` ``(bug): Nginx does not allow big config queries for configure endpoint API`` +* :vytask:`T6096` ``(bug): Config commits are not synced properly because 00vyos-sync is deleted by vyos-router`` +* :vytask:`T6093` ``(bug): Incorrect dhcp-options vendor-class-id regex`` +* :vytask:`T6083` ``(feature): ethtool: move string parsing to JSON parsing`` +* :vytask:`T6069` ``(bug): HTTP API segfault during concurrent configuration requests`` +* :vytask:`T6057` ``(feature): Add ability to disable syslog for conntrackd`` +* :vytask:`T5504` ``(feature): Keepalived VRRP ability to set more than one peer-address`` +* :vytask:`T5717` ``(feature): ospfv3 - add allow to set metric-type to ospf redistribution while frr docs says its possible.`` +* :vytask:`T6071` ``(bug): firewall: CLI description limit of 256 characters cause config upgrade issues`` + + +2024-03-08 +========== + +* :vytask:`T6086` ``(bug): NAT does not work with network-groups`` +* :vytask:`T6094` ``(bug): Destination Nat not Making Firewall Rules`` +* :vytask:`T6061` ``(bug): connection-status nat destination firewall filter not working in 1.4.0-epa1`` +* :vytask:`T6075` ``(bug): Applying firewall rules with a non-existent interface group`` + + +2024-03-07 +========== + +* :vytask:`T6104` ``(bug): Regression in commit-archive for non-interactive configuration`` +* :vytask:`T6084` ``(bug): OpenNHRP DMVPN configuration file clean after reboot if we have any IPSec configuration`` +* :vytask:`T5348` ``(bug): Service config-sync can freeze the secondary router if it has commit-archive location`` +* :vytask:`T6073` ``(bug): Conntrack/NAT not being disabled when VRFs are defined`` +* :vytask:`T6095` ``(default): Tab completion for "set interfaces wireless wlan0 country-code" incorrect country "uk"`` + + +2024-03-06 +========== + +* :vytask:`T6079` ``(bug): dhcp: migration fails for duplicate static-mapping`` +* :vytask:`T6063` ``(default): Kea DHCP: Expose match-client-id setting`` +* :vytask:`T5992` ``(default): DHCP: show dhcp server leases not showing all leases`` + + +2024-03-05 +========== + +* :vytask:`T5903` ``(bug): NHRP don´t start on reboot from version 1.5-rolling-202401010026`` +* :vytask:`T2447` ``(feature): Additional Boot Argument Configuration to limit CPU C-States`` + + +2024-03-04 +========== + +* :vytask:`T6087` ``(feature): ospfv3: add support to redistribute IS-IS routes`` + + +2024-03-02 +========== + +* :vytask:`T6081` ``(bug): QoS policy shaper target and interval wrong calcuations`` + + +2024-02-29 +========== + +* :vytask:`T6078` ``(feature): Update ethtool to 6.6`` +* :vytask:`T6077` ``(feature): banner: implement ASCII contest winner default logo`` +* :vytask:`T6074` ``(feature): container: do not allow deleting images which have a container running`` + + +2024-02-28 +========== + +* :vytask:`T4270` ``(bug): dns forwarding - When "ignore-hosts-file" is unset, local hostname of router resolves to 127.0.1.1`` + + +2024-02-26 +========== + +* :vytask:`T6064` ``(bug): Can not build VyOS if repository it not cloned to a branch`` +* :vytask:`T5754` ``(default): Update to StrongSwan 5.9.11`` + + +2024-02-25 +========== + +* :vytask:`T6060` ``(feature): op-mode: container: support removing all container images at once`` + + +2024-02-24 +========== + +* :vytask:`T5909` ``(bug): Container registry with authentication prevents config load (section container) after reboot`` + + +2024-02-23 +========== + +* :vytask:`T5376` ``(bug): Conntrack FTP helper does not work properly`` + + +2024-02-22 +========== + +* :vytask:`T6048` ``(bug): Exception in event handler script`` + + +2024-02-21 +========== + +* :vytask:`T6050` ``(bug): Wrong scripting commands descriptions in accel-ppp services`` +* :vytask:`T3771` ``(feature): DHCPv6 server prefix delegation - dynamically add route to delegated prefix via requesting router`` + + +2024-02-19 +========== + +* :vytask:`T5971` ``(default): Create the same view of ppp section for all accel-ppp services`` +* :vytask:`T6029` ``(default): Rewrite Accel-PPP services to an identical feature set`` +* :vytask:`T3722` ``(bug): op-mode IPSec show vpn ike sa always shows L-TIME 0`` + + +2024-02-18 +========== + +* :vytask:`T6043` ``(bug): VxLAN and bridge error bug`` +* :vytask:`T6041` ``(bug): image-tools: install fails from PXE boot into live iso due to restrictive logic`` + + +2024-02-17 +========== + +* :vytask:`T5972` ``(feature): login: add possibility to disable individual local user accounts`` + + +2024-02-16 +========== + +* :vytask:`T6009` ``(bug): Firewall - Time not working properly when not using UTC`` +* :vytask:`T6005` ``(bug): Error on adding a wireguard interface to OSPFv3`` +* :vytask:`T6019` ``(feature): Bump nftables and libnftnl version`` +* :vytask:`T6001` ``(default): Add option to enable resolve-via-default`` +* :vytask:`T5965` ``(bug): WWAN modems using raw-ip do not work with dhclient/dhcp6c`` +* :vytask:`T5245` ``(bug): Wireless interfaces do not get IPv6 link-local address assigned`` + + +2024-02-15 +========== + +* :vytask:`T5977` ``(bug): nftables: Operation not supported when using match-ipsec in outbound firewall`` +* :vytask:`T2612` ``(bug): HTTPS API, changing API key fails but goes through`` +* :vytask:`T5989` ``(bug): IP subnets not usable in UPnP ACLs`` +* :vytask:`T5719` ``(default): mdns repeater: Add op-mode commands`` +* :vytask:`T4839` ``(feature): Dynamic Firewall groups`` + + +2024-02-14 +========== + +* :vytask:`T6034` ``(feature): rpki: move file based SSH keys for authentication to PKI subsystem`` +* :vytask:`T5981` ``(bug): IPsec site-to-site migrated PKI ca certificates are created with an '@'`` +* :vytask:`T5930` ``(bug): vrf - route-leak not work using route-target both command.`` +* :vytask:`T5709` ``(bug): IPoE-server fails if next pool mentioned but not defined`` +* :vytask:`T2044` ``(bug): RPKI doesn't boot properly`` +* :vytask:`T6032` ``(feature): bgp: add EVPN MAC-VRF Site-of-Origin support`` +* :vytask:`T5960` ``(default): Rewriting authentication section in accel-ppp services`` + + +2024-02-13 +========== + +* :vytask:`T5928` ``(bug): Configuration fails to load on boot if offloading has VLAN interfaces defined`` +* :vytask:`T5064` ``(bug): Value validation for domain-groups seems to be broken`` + + +2024-02-12 +========== + +* :vytask:`T6010` ``(bug): Support setting multiple values in BGP path-attribute`` +* :vytask:`T6004` ``(bug): RPKI is not configured`` +* :vytask:`T5952` ``(default): DHCP allow same MAC Address on same subnet`` +* :vytask:`T5849` ``(feature): Add SRv6 route commands`` + + +2024-02-10 +========== + +* :vytask:`T6023` ``(bug): rpki: add support for CLI knobs expire-interval and retry-interval`` + + +2024-02-09 +========== + +* :vytask:`T6028` ``(bug): QoS policy shaper wrong class_id_max and default_minor_id`` +* :vytask:`T6026` ``(bug): QoS hide attempts to delete qdisc from devices`` +* :vytask:`T5788` ``(feature): frr: update to 9.1 release`` +* :vytask:`T5703` ``(bug): QoS config on pppoe interface resets back to fq_codel after tunnel reboots`` +* :vytask:`T5685` ``(feature): Keepalived VRRP prefix is not necessary for the virtual address`` + + +2024-02-08 +========== + +* :vytask:`T6014` ``(feature): Bump keepalived version`` +* :vytask:`T5910` ``(bug): Grub problem(?) Serial Console no longer working`` +* :vytask:`T6021` ``(bug): QoS r2q wrong calculation`` + + +2024-02-07 +========== + +* :vytask:`T6017` ``(bug): Update vyos-http-api-tools for security advisory`` +* :vytask:`T6016` ``(bug): Resolve intermittent failures in cleanup function after failed image install`` +* :vytask:`T6024` ``(feature): bgp: add additional missing FRR features`` +* :vytask:`T6011` ``(feature): rpki: known-hosts-file is no longer supported by FRR CLI - remove VyOS CLI node`` +* :vytask:`T5998` ``(feature): replay_window setting under vpn in config`` + + +2024-02-06 +========== + +* :vytask:`T6018` ``(default): smoketest: updating http-api framework requires a pause before test`` +* :vytask:`T5921` ``(bug): Trying to commit an OpenConnect configuration without any local users results in an exception`` +* :vytask:`T5687` ``(feature): Implement ECS settings for PowerDNS recursor`` + + +2024-02-05 +========== + +* :vytask:`T5974` ``(bug): QoS policy shaper is currently miscalculating bandwidth and ceil values for the default class`` +* :vytask:`T5865` ``(feature): Rewrite ipv6 pool section to ipv6 named pools in Accel-ppp services`` + + +2024-02-02 +========== + +* :vytask:`T5739` ``(bug): Password recovery does not work if public keys are configured`` +* :vytask:`T5955` ``(feature): Rootless containers/set uid/gid for container`` +* :vytask:`T6003` ``(feature): Add 'show rpki as-number' and 'show rpki prefix'`` +* :vytask:`T5848` ``(feature): Add triple-isolate flow isolation option to CAKE QoS policy`` + + +2024-02-01 +========== + +* :vytask:`T5995` ``(bug): Kernel NIC-drivers for Huawei NICs are not properly enabled`` +* :vytask:`T5978` ``(bug): ethernet: hw-tc-offload does not actually get enabled on the NIC`` +* :vytask:`T5979` ``(enhancment): Add configurable kernel boot parameters`` +* :vytask:`T5973` ``(bug): vrf: RTNETLINK answers: File exists`` +* :vytask:`T5967` ``(bug): Multi-hop BFD connections can't be established; please add minimum-ttl option.`` +* :vytask:`T5619` ``(default): Update the Intel ixgbe driver due to issues with Intel X533`` + + +2024-01-31 +========== + +* :vytask:`T6000` ``(bug): [1.3.x -> 1.5.x] migrating threw exception in /opt/vyatta/etc/config-migrate/migrate/https/5-to-6, performed workaround`` +* :vytask:`T5999` ``(bug): load-balancing reverse-proxy can't configure root as a redirect`` + + +2024-01-30 +========== + +* :vytask:`T5980` ``(feature): Add image-tools support for configurable kernel boot options`` + + +2024-01-29 +========== + +* :vytask:`T5988` ``(bug): image-tools: a check of valid image name is missing from 'add image'`` +* :vytask:`T5994` ``(bug): Fix typo in 'remote' module preventing 'add system image' via ftp`` + + +2024-01-26 +========== + +* :vytask:`T5957` ``(bug): Firewall fails to delete inbound-interface name`` +* :vytask:`T5779` ``(bug): custom conntrack timeout rule not applicable`` +* :vytask:`T5984` ``(feature): Add user util numactl`` + + +2024-01-25 +========== + +* :vytask:`T5983` ``(bug): image-tools: minor regression in pruning version files in compatibility mode`` +* :vytask:`T5927` ``(bug): QoS policy shaper-hfsc class does not have a `bandwidth` node but requires one in the check`` +* :vytask:`T5834` ``(bug): Rename 'enable-default-log' to 'default-log'`` + + +2024-01-22 +========== + +* :vytask:`T5968` ``(feature): hsflowd: add VRF support`` +* :vytask:`T5961` ``(bug): QoS policy shaper vif with ceiling fails on commit`` +* :vytask:`T5958` ``(bug): QoS policy shaper-hfsc is not implemented`` +* :vytask:`T5969` ``(feature): op-mode: list multicast group membership`` + + +2024-01-21 +========== + +* :vytask:`T5799` ``(bug): vyos unbootable after 1.4-rolling-202308240020 to 1.5-rolling-202312010026 upgrade`` +* :vytask:`T5787` ``(bug): dhcp-server allows duplicate static-mapping for the same IP address`` +* :vytask:`T5912` ``(bug): DHCP Static mapping don't work on every first lease`` +* :vytask:`T5692` ``(enhancment): NTP leap smear`` +* :vytask:`T5954` ``(feature): Enable nvme_hwmon and drivetemp in KERNEL`` + + +2024-01-20 +========== + +* :vytask:`T5964` ``(bug): disconnect interface wwan0 throws exception`` +* :vytask:`T5948` ``(bug): pdns-recursor crashes on restart if hostfile-update is enabled and dhcp client sends hostname with trailing dot`` +* :vytask:`T5945` ``(bug): Missing minisign public key for rolling release`` +* :vytask:`T5922` ``(bug): Firewall - bug in zone config`` +* :vytask:`T5915` ``(bug): Firewall zone - Re add op-mode commands`` +* :vytask:`T5724` ``(feature): About dhcp client hooks`` +* :vytask:`T5721` ``(bug): Error in migrating configuration from VyOS 1.4`` +* :vytask:`T5550` ``(bug): Source validation on interface does not work properly`` +* :vytask:`T5239` ``(bug): frr 'hostname' missing or incorrect, and domain-name missing totally`` +* :vytask:`T4726` ``(default): Add completion and validation for the accel-ppp RADIUS vendor option`` +* :vytask:`T4085` ``(feature): Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict`` +* :vytask:`T5963` ``(bug): QoS policy shaper rate calculations could be wrong for some ethernet devices`` +* :vytask:`T5876` ``(bug): Dhcp bug in latest 1.5 rolling releases`` +* :vytask:`T5962` ``(feature): QoS policy set default speed to 100mbit or 1gbit instead of 10mbit`` + + +2024-01-19 +========== + +* :vytask:`T5897` ``(bug): VyOS with Cloud-init and VRF stucks at reboot/shutdown process`` +* :vytask:`T5554` ``(bug): Disable sudo for PAM RADIUS`` +* :vytask:`T4754` ``(default): Improvement: system login: show configured 2FA OTP key`` +* :vytask:`T5857` ``(bug): show interfaces wireless info`` +* :vytask:`T5841` ``(default): Remove old ssh-session-cleanup.service`` +* :vytask:`T5884` ``(default): Minor description fix (op-mode: generate wireguard)`` +* :vytask:`T5781` ``(default): Add ability to add additional minisign keys`` + + +2024-01-18 +========== + +* :vytask:`T5863` ``(bug): Failure to Load Config on Recent 1.5 Versions`` +* :vytask:`T4638` ``(bug): Deleting a parent interface does not delete its underlying VLAN interfaces`` +* :vytask:`T5953` ``(default): Rename 'close_action' value from `hold` to `trap` in IPSEC IKE`` + + +2024-01-17 +========== + +* :vytask:`T5923` ``(bug): Config mode system_console.py is not aware of revised GRUB file structure`` +* :vytask:`T4658` ``(feature): Rename DPD action `hold` to `trap``` + + +2024-01-16 +========== + +* :vytask:`T5859` ``(bug): Invalid format of pool range in accel-ppp services`` +* :vytask:`T5842` ``(feature): Rewrite PPTP service to get_config_dict`` +* :vytask:`T5801` ``(feature): Rewrite L2TP service to get_config_dict`` +* :vytask:`T5688` ``(default): Create the same view of pool configuration for all accel-ppp services`` + + +2024-01-15 +========== + +* :vytask:`T5944` ``(bug): "reboot in 1" not working`` +* :vytask:`T5936` ``(bug): [1.3.5 -> 1.4.0-RC1 Migration] OSPF Passive Interface Configuration Not Working Correctly`` +* :vytask:`T5247` ``(bug): the bug of the command "show interfaces system"`` +* :vytask:`T5901` ``(bug): Cloud-init and DHCP exit hook errors`` +* :vytask:`T2556` ``(bug): "show interfaces vrrp" does not return any interface`` + + 2024-01-12 ========== @@ -49,7 +721,6 @@ ========== * :vytask:`T5898` ``(bug): Replace partprobe with partx due to unable to install VyOS`` -* :vytask:`T5862` ``(bug): Default MTU is not acceptable in some environments`` * :vytask:`T5840` ``(feature): Upgrade Kea to 2.4.x`` * :vytask:`T5838` ``(feature): Add Infiniband kernel modules`` * :vytask:`T5785` ``(bug): API output of show container image broken`` @@ -129,7 +800,6 @@ * :vytask:`T5866` ``(feature): Add op-mode command to restart IPv6 RA daemon`` * :vytask:`T5861` ``(bug): Flavor build system fails with third-party packages`` * :vytask:`T5854` ``(feature): Extend override-default script to allow embedded defaultValue settings`` -* :vytask:`T5566` ``(feature): Be able to disable 802.3az/EEE (energy efficient ethernet) for a particular interface`` * :vytask:`T5792` ``(default): Upgrade ddclient 3.11.2 release`` diff --git a/docs/cli.rst b/docs/cli.rst index 41b4b9e0..79501c66 100644 --- a/docs/cli.rst +++ b/docs/cli.rst @@ -501,6 +501,9 @@ different levels in the hierarchy. Warning: configuration changes have not been saved. vyos@vyos:~$ +.. hint:: You can specify a commit message with + :cfgcmd:`commit comment <message>`. + .. _save: .. cfgcmd:: save @@ -869,6 +872,9 @@ be ``config.boot-hostname.YYYYMMDD_HHMMSS``. * ``tftp://<host>/<dir>`` * ``git+https://<user>:<passwd>@<host>/<path>`` + Since username and password are part of the URI, they need to be + properly url encoded if containing special characters. + .. note:: The number of revisions don't affect the commit-archive. .. note:: You may find VyOS not allowing the secure connection because diff --git a/docs/configexamples/ansible.rst b/docs/configexamples/ansible.rst index fc243c44..0f4dbbda 100644 --- a/docs/configexamples/ansible.rst +++ b/docs/configexamples/ansible.rst @@ -1,4 +1,4 @@ -:lastproofread: 2023-10-18 +:lastproofread: 2024-04-09 .. _examples-ansible: @@ -33,14 +33,14 @@ We have four pre-configured routers with this configuration: * vyos9 - 192.0.2.107 * vyos10 - 192.0.2.108 -Install the Ansible: +Install Ansible: ==================== .. code-block:: none # apt-get install ansible Do you want to continue? [Y/n] y -Install the paramiko: +Install Paramiko: ===================== .. code-block:: none @@ -60,7 +60,7 @@ Check the version: executable location = /usr/bin/ansible python version = 3.9.2 (default, Feb 28 2021, 17:03:44) [GCC 10.2.1 20210110] -Basik configuration of the ansible.cfg: +Basic configuration of ansible.cfg: ======================================= .. code-block:: none @@ -69,8 +69,8 @@ Basik configuration of the ansible.cfg: [defaults] host_key_checking = no -Add all the hosts of VyOS: -========================== +Add all the VyOS hosts: +======================= .. code-block:: none @@ -95,8 +95,8 @@ Add general variables: ansible_ssh_pass: vyos -Add the simple playbook with the tasks for each router: -======================================================= +Add a simple playbook with the tasks for each router: +===================================================== .. code-block:: none @@ -213,4 +213,4 @@ The simple way without configuration of the hostname (one task for all routers): vyos9 : ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 -In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables. +In the next chapter of the example, we'll use Ansible with jinja2 templates and variables. diff --git a/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst b/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst index e42d3567..6666399d 100644 --- a/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst +++ b/docs/configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst @@ -7,9 +7,9 @@ OpenVPN with LDAP | Testdate: 2023-05-11 | Version: 1.4-rolling-202305100734 -This LAB show how to uwe OpenVPN with a Active Directory authentication backend. +This LAB shows how to use OpenVPN with a Active Directory authentication method. -The Topology are consists of: +Topology consists of: * Windows Server 2019 with a running Active Directory * VyOS as a OpenVPN Server * VyOS as Client @@ -20,7 +20,7 @@ The Topology are consists of: Active Directory on Windows server ================================== -The Lab asume a full running Active Directory on the Windows Server. +The lab assumes a full running Active Directory on the Windows Server. Here are some PowerShell commands to quickly add a Test Active Directory. .. code-block:: powershell @@ -36,7 +36,7 @@ Here are some PowerShell commands to quickly add a Test Active Directory. New-ADUser user01 -AccountPassword(Read-Host -AsSecureString "Input Password") -Enabled $true -Configuration VyOS as OpenVPN Server +Configure VyOS as OpenVPN Server ==================================== In this example OpenVPN will be setup with a client certificate and username / password authentication. @@ -53,7 +53,7 @@ Please look :ref:`here <configuration/pki/index:pki>` for more information. Now generate all required certificates on the ovpn-server: -first the PCA +First the CA .. code-block:: none @@ -249,11 +249,27 @@ save the output to a file and import it in nearly all openvpn clients. </key> +Configure VyOS as client +------------------------ + +.. code-block:: none + + set interfaces openvpn vtun10 authentication username 'user01' + set interfaces openvpn vtun10 authentication password '$ecret' + set interfaces openvpn vtun10 encryption cipher 'aes256' + set interfaces openvpn vtun10 hash 'sha512' + set interfaces openvpn vtun10 mode 'client' + set interfaces openvpn vtun10 persistent-tunnel + set interfaces openvpn vtun10 protocol 'udp' + set interfaces openvpn vtun10 remote-host '198.51.100.254' + set interfaces openvpn vtun10 remote-port '1194' + set interfaces openvpn vtun10 tls ca-certificate 'OVPN-CA' + set interfaces openvpn vtun10 tls certificate 'CLIENT' Monitoring ========== -If the client is connect successfully you can check the output with +If the client is connected successfully you can check the status .. code-block:: none diff --git a/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf b/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf index 03889ffd..ab70ccc5 100644 --- a/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf +++ b/docs/configexamples/autotest/tunnelbroker/_include/vyos-wan_tun0.conf @@ -1,8 +1,8 @@ -set interfaces tunnel tun0 address '2001:470:6c:779::2/64' #Tunnelbroker Client IPv6 Address +set interfaces tunnel tun0 address '2001:470:6c:779::2/64' #Tunnelbroker Client IPv6 address set interfaces tunnel tun0 description 'HE.NET IPv6 Tunnel' set interfaces tunnel tun0 encapsulation 'sit' -set interfaces tunnel tun0 remote '216.66.86.114' #Tunnelbroker Server IPv4 Address -set interfaces tunnel tun0 source-address '172.29.129.60' # Tunnelbroker Client IPv4 Address or if there is NAT the current WAN interface address +set interfaces tunnel tun0 remote '216.66.86.114' #Tunnelbroker Server IPv4 address +set interfaces tunnel tun0 source-address '172.29.129.60' # Tunnelbroker Client IPv4 address. See note below set protocols static route6 ::/0 interface tun0 @@ -10,4 +10,4 @@ set interface ethernet eth2 address '2001:470:6d:778::1/64' # Tunnelbroker Route set service router-advert interface eth2 name-server '2001:470:20::2' set service router-advert interface eth2 prefix 2001:470:6d:778::/64 # Tunnelbroker Routed /64 prefix -set system name-server 2001:470:20::2 #Tunnelbroker DNS Server
\ No newline at end of file +set system name-server 2001:470:20::2 #Tunnelbroker DNS Server diff --git a/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst b/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst index 96c2e1af..5bfcb642 100644 --- a/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst +++ b/docs/configexamples/autotest/tunnelbroker/tunnelbroker.rst @@ -48,7 +48,15 @@ Now we are able to setup the tunnel interface. :language: none :lines: 1-5 -Setup the ipv6 default route to the tunnel interface +.. note:: The `source-address` is the Tunnelbroker client IPv4 + address or if there is NAT the current WAN interface address. + + If `source-address` is dynamic, the tunnel will cease working once + the address changes. To avoid having to manually update + `source-address` each time the dynamic IP changes, an address of + '0.0.0.0' can be specified. + +Setup the IPv6 default route to the tunnel interface .. literalinclude:: _include/vyos-wan_tun0.conf :language: none @@ -204,4 +212,5 @@ instead of `set firewall name NAME`, you would use `set firewall ipv6-name NAME`. Similarly, to attach the firewall, you would use `set interfaces ethernet eth0 -firewall in ipv6-name` or `et firewall zone LOCAL from WAN firewall ipv6-name`.
\ No newline at end of file +firewall in ipv6-name` or `set firewall zone LOCAL from WAN firewall +ipv6-name`. diff --git a/docs/configexamples/policy-based-ipsec-and-firewall.rst b/docs/configexamples/policy-based-ipsec-and-firewall.rst index 9b7ba73a..8dc07de6 100644 --- a/docs/configexamples/policy-based-ipsec-and-firewall.rst +++ b/docs/configexamples/policy-based-ipsec-and-firewall.rst @@ -5,39 +5,39 @@ Policy-Based Site-to-Site VPN and Firewall Configuration -------------------------------------------------------- This guide shows an example policy-based IKEv2 site-to-site VPN between two -VyOS routers, and firewall configiuration. +VyOS routers, and firewall configuration. -For simplicity, configuration and tests are done only using ipv4, and firewall -configuration in done only on one router. +For simplicity, configuration and tests are done only using IPv4, and firewall +configuration is done only on one router. Network Topology and requirements ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -This configuration example and the requirments consists on: +This configuration example and the requirements consists of: - Two VyOS routers with public IP address. - 2 private subnets on each site. -- Local subnets should be able to reach internet using source nat. +- Local subnets should be able to reach internet using source NAT. -- Communication between private subnets should be done through ipsec tunnel - without nat. +- Communication between private subnets should be done through IPSec tunnel + without NAT. - Configuration of basic firewall in one site, in order to: - - Protect the router on 'WAN' interface, allowing only ipsec connections - and ssh access from trusted ips. + - Protect the router on 'WAN' interface, allowing only IPSec connections + and SSH access from trusted IPs. - Allow access to the router only from trusted networks. - - Allow dns requests only only for local networks. + - Allow DNS requests only only for local networks. - - Allow icmp on all interfaces. + - Allow ICMP on all interfaces. - Allow all new connections from local subnets. - - Allow connections from LANs to LANs throught the tunnel. + - Allow connections from LANs to LANs through the tunnel. .. image:: /_static/images/policy-based-ipsec-and-firewall.png @@ -203,7 +203,7 @@ And NAT Configuration: Checking through op-mode commands ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -After some testing, we can check ipsec status, and counter on every tunnel: +After some testing, we can check IPSec status, and counter on every tunnel: .. code-block:: none diff --git a/docs/configexamples/wan-load-balancing.rst b/docs/configexamples/wan-load-balancing.rst index ace9a981..0952cfe5 100644 --- a/docs/configexamples/wan-load-balancing.rst +++ b/docs/configexamples/wan-load-balancing.rst @@ -69,7 +69,7 @@ Example 2: Failover based on interface weights This example uses the failover mode. -.. _wan:example2_overwiew: +.. _wan:example2_overview: Overview ^^^^^^^^ @@ -98,7 +98,7 @@ The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order. -.. _wan:example3_overwiew: +.. _wan:example3_overview: Overview ^^^^^^^^ @@ -129,7 +129,7 @@ traffic. It is assumed for this example that eth1 is connected to a slower connection than eth0 and should prioritize VoIP traffic. -.. _wan:example4_overwiew: +.. _wan:example4_overview: Overview ^^^^^^^^ diff --git a/docs/configexamples/zone-policy.rst b/docs/configexamples/zone-policy.rst index 08db13b9..95648e7a 100644 --- a/docs/configexamples/zone-policy.rst +++ b/docs/configexamples/zone-policy.rst @@ -6,7 +6,7 @@ Zone-Policy example ------------------- .. note:: Starting from VyOS 1.4-rolling-202308040557, a new firewall - structure can be found on all vyos instalations, and zone based firewall is + structure can be found on all vyos installations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall <https://docs.vyos.io/en/latest/configuration/firewall/general.html>`_ @@ -145,7 +145,7 @@ To add logging to the default rule, do: .. code-block:: none - set firewall name <ruleSet> enable-default-log + set firewall name <ruleSet> default-log By default, iptables does not allow traffic for established sessions to @@ -251,7 +251,7 @@ Since we have 4 zones, we need to setup the following rulesets. Dmz-local Even if the two zones will never communicate, it is a good idea to -create the zone-pair-direction rulesets and set enable-default-log. This +create the zone-pair-direction rulesets and set default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts. @@ -261,7 +261,7 @@ This is an example of the three base rules. name wan-lan { default-action drop - enable-default-log + default-log rule 1 { action accept state { @@ -285,7 +285,7 @@ Here is an example of an IPv6 DMZ-WAN ruleset. ipv6-name dmz-wan-6 { default-action drop - enable-default-log + default-log rule 1 { action accept state { diff --git a/docs/configuration/container/index.rst b/docs/configuration/container/index.rst index e63ac2c9..e5a470bc 100644 --- a/docs/configuration/container/index.rst +++ b/docs/configuration/container/index.rst @@ -117,7 +117,7 @@ Configuration Add a host device to the container. -.. cfgcmd:: set container name <name> cap-add <text> +.. cfgcmd:: set container name <name> capability <text> Set container capabilities or permissions. @@ -125,7 +125,7 @@ Configuration - **net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024) - **net-raw**: Permission to create raw network sockets - **setpcap**: Capability sets (from bounded or inherited set) - - **sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame) + - **sys-admin**: Administration operations (quotactl, mount, sethostname, setdomainame) - **sys-time**: Permission to set system clock .. cfgcmd:: set container name <name> disable diff --git a/docs/configuration/firewall/bridge.rst b/docs/configuration/firewall/bridge.rst index 9fb019c5..f84fd456 100644 --- a/docs/configuration/firewall/bridge.rst +++ b/docs/configuration/firewall/bridge.rst @@ -13,7 +13,7 @@ Overview ******** In this section there's useful information of all firewall configuration that -can be done regarding bridge, and appropiate op-mode commands. +can be done regarding bridge, and appropriate op-mode commands. Configuration commands covered in this section: .. cfgcmd:: set firewall bridge ... @@ -37,13 +37,13 @@ for this layer is shown next: .. figure:: /_static/images/firewall-bridge-packet-flow.png -For traffic that needs to be forwared internally by the bridge, base chain is +For traffic that needs to be forwarded internally by the bridge, base chain is is **forward**, and it's base command for filtering is ``set firewall bridge -forward filter ...``, which happens in stage 4, highlightened with red color. +forward filter ...``, which happens in stage 4, highlighted with red color. Custom bridge firewall chains can be create with command ``set firewall bridge name <name> ...``. In order to use such custom chain, a rule with action jump, -and the appropiate target should be defined in a base chain. +and the appropriate target should be defined in a base chain. .. note:: **Layer 3 bridge**: When an IP address is assigned to the bridge interface, and if traffic @@ -137,7 +137,7 @@ not match any rule in it's chain. For base chains, possible options for .. cfgcmd:: set firewall bridge name <name> default-jump-target <text> - To be used only when ``defult-action`` is set to ``jump``. Use this + To be used only when ``default-action`` is set to ``jump``. Use this command to specify jump target for default rule. .. note:: **Important note about default-actions:** @@ -157,8 +157,8 @@ log options can be defined. Enable logging for the matched packet. If this configuration command is not present, then log is not enabled. -.. cfgcmd:: set firewall bridge forward filter enable-default-log -.. cfgcmd:: set firewall bridge name <name> enable-default-log +.. cfgcmd:: set firewall bridge forward filter default-log +.. cfgcmd:: set firewall bridge name <name> default-log Use this command to enable the logging of the default action on the specified chain. @@ -236,9 +236,9 @@ There are a lot of matching criteria against which the packet can be tested. .. cfgcmd:: set firewall bridge name <name> rule <1-999999> inbound-interface name <iface> - Match based on inbound interface. Wilcard ``*`` can be used. + Match based on inbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> inbound-interface group <iface_group> @@ -246,16 +246,16 @@ There are a lot of matching criteria against which the packet can be tested. inbound-interface group <iface_group> Match based on inbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> outbound-interface name <iface> .. cfgcmd:: set firewall bridge name <name> rule <1-999999> outbound-interface name <iface> - Match based on outbound interface. Wilcard ``*`` can be used. + Match based on outbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> outbound-interface group <iface_group> @@ -263,7 +263,7 @@ There are a lot of matching criteria against which the packet can be tested. outbound-interface group <iface_group> Match based on outbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall bridge forward filter rule <1-999999> vlan id <0-4096> @@ -288,7 +288,7 @@ Rule-set overview In this section you can find all useful firewall op-mode commands. -General commands for firewall configuration, counter and statiscits: +General commands for firewall configuration, counter and statistics: .. opcmd:: show firewall .. opcmd:: show firewall summary @@ -325,7 +325,7 @@ Configuration example: .. code-block:: none set firewall bridge forward filter default-action 'drop' - set firewall bridge forward filter enable-default-log + set firewall bridge forward filter default-log set firewall bridge forward filter rule 10 action 'continue' set firewall bridge forward filter rule 10 inbound-interface name 'eth2' set firewall bridge forward filter rule 10 vlan id '22' @@ -341,7 +341,7 @@ Configuration example: set firewall bridge forward filter rule 40 destination mac-address '66:55:44:33:22:11' set firewall bridge forward filter rule 40 source mac-address '11:22:33:44:55:66' set firewall bridge name TEST default-action 'accept' - set firewall bridge name TEST enable-default-log + set firewall bridge name TEST default-log set firewall bridge name TEST rule 10 action 'continue' set firewall bridge name TEST rule 10 log set firewall bridge name TEST rule 10 vlan priority '0' diff --git a/docs/configuration/firewall/flowtables.rst b/docs/configuration/firewall/flowtables.rst index bc7b9212..adecb26a 100644 --- a/docs/configuration/firewall/flowtables.rst +++ b/docs/configuration/firewall/flowtables.rst @@ -99,20 +99,20 @@ Creating rules for using flow tables: Configuration Example ********************* -Things to be considred in this setup: +Things to be considered in this setup: * Two interfaces are going to be used in the flowtables: eth0 and eth1 - * Minumum firewall ruleset is provided, which includes some filtering rules, - and appropiate rules for using flowtable offload capabilities. + * Minimum firewall ruleset is provided, which includes some filtering rules, + and appropriate rules for using flowtable offload capabilities. As described, first packet will be evaluated by all the firewall path, so -desired connection should be explicitely accepted. Same thing should be taken +desired connection should be explicitly accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch. -We will only accept traffic comming from interface eth0, protocol tcp and -destination port 1122. All other traffic traspassing the router should be +We will only accept traffic coming from interface eth0, protocol tcp and +destination port 1122. All other traffic trespassing the router should be blocked. Commands @@ -152,7 +152,7 @@ Analysis on what happens for desired connection: 4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is - accepted in rule 10. + accepted in rule 20. 5. Second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry diff --git a/docs/configuration/firewall/index.rst b/docs/configuration/firewall/index.rst index 5d9190d6..1d904901 100644 --- a/docs/configuration/firewall/index.rst +++ b/docs/configuration/firewall/index.rst @@ -24,7 +24,7 @@ firewall are covered below: where the packet was received is part of a bridge, or not. If the interface where the packet was received isn't part of a bridge, then -packetis processed at the **IP Layer**: +packet is processed at the **IP Layer**: * **Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in VyOS configuration. Order @@ -65,7 +65,7 @@ packetis processed at the **IP Layer**: * **Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, - such as NTP, or a response to traffic received externaly through + such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in: @@ -84,7 +84,7 @@ If the interface where the packet was received is part of a bridge, then the packet is processed at the **Bridge Layer**, which contains a basic setup for bridge filtering: - * **Forward (Bridge)**: stage where traffic that is trespasing through the + * **Forward (Bridge)**: stage where traffic that is trespassing through the bridge is filtered and controlled: * ``set firewall bridge forward filter ...``. @@ -163,7 +163,7 @@ Zone-based firewall zone -With zone-based firewalls a new concept was implemented, in addtion to the +With zone-based firewalls a new concept was implemented, in addition to the standard in and out traffic flows, a local flow was added. This local was for traffic originating and destined to the router itself. Which means additional rules were required to secure the firewall itself from the network, in diff --git a/docs/configuration/firewall/ipv4.rst b/docs/configuration/firewall/ipv4.rst index ff739418..a9459f00 100644 --- a/docs/configuration/firewall/ipv4.rst +++ b/docs/configuration/firewall/ipv4.rst @@ -11,7 +11,7 @@ Overview ******** In this section there's useful information of all firewall configuration that -can be done regarding IPv4, and appropiate op-mode commands. +can be done regarding IPv4, and appropriate op-mode commands. Configuration commands covered in this section: .. cfgcmd:: set firewall ipv4 ... @@ -41,12 +41,12 @@ next: Where firewall base chain to configure firewall filtering rules for transit traffic is ``set firewall ipv4 forward filter ...``, which happens in stage 5, -highlightened with red color. +highlighted with red color. For traffic towards the router itself, base chain is **input**, while traffic originated by the router, base chain is **output**. A new simplified packet flow diagram is shown next, which shows the path -for traffic destinated to the router itself, and traffic generated by the +for traffic destined to the router itself, and traffic generated by the router (starting from circle number 6): .. figure:: /_static/images/firewall-input-packet-flow.png @@ -64,7 +64,7 @@ output filter ...`` Custom firewall chains can be created, with commands ``set firewall ipv4 name <name> ...``. In order to use -such custom chain, a rule with **action jump**, and the appropiate **target** +such custom chain, a rule with **action jump**, and the appropriate **target** should be defined in a base chain. ********************* @@ -184,7 +184,7 @@ not match any rule in it's chain. For base chains, possible options for .. cfgcmd:: set firewall ipv4 name <name> default-jump-target <text> - To be used only when ``defult-action`` is set to ``jump``. Use this + To be used only when ``default-action`` is set to ``jump``. Use this command to specify jump target for default rule. .. note:: **Important note about default-actions:** @@ -206,10 +206,10 @@ log options can be defined. Enable logging for the matched packet. If this configuration command is not present, then log is not enabled. -.. cfgcmd:: set firewall ipv4 forward filter enable-default-log -.. cfgcmd:: set firewall ipv4 input filter enable-default-log -.. cfgcmd:: set firewall ipv4 output filter enable-default-log -.. cfgcmd:: set firewall ipv4 name <name> enable-default-log +.. cfgcmd:: set firewall ipv4 forward filter default-log +.. cfgcmd:: set firewall ipv4 input filter default-log +.. cfgcmd:: set firewall ipv4 output filter default-log +.. cfgcmd:: set firewall ipv4 name <name> default-log Use this command to enable the logging of the default action on the specified chain. @@ -683,9 +683,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv4 name <name> rule <1-999999> inbound-interface name <iface> - Match based on inbound interface. Wilcard ``*`` can be used. + Match based on inbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> inbound-interface group <iface_group> @@ -695,7 +695,7 @@ geoip) to keep database and rules updated. inbound-interface group <iface_group> Match based on inbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> outbound-interface name <iface> @@ -704,9 +704,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv4 name <name> rule <1-999999> outbound-interface name <iface> - Match based on outbound interface. Wilcard ``*`` can be used. + Match based on outbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> outbound-interface group <iface_group> @@ -716,7 +716,7 @@ geoip) to keep database and rules updated. outbound-interface group <iface_group> Match based on outbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv4 forward filter rule <1-999999> ipsec [match-ipsec | match-none] diff --git a/docs/configuration/firewall/ipv6.rst b/docs/configuration/firewall/ipv6.rst index 0aa8a137..4b695f74 100644 --- a/docs/configuration/firewall/ipv6.rst +++ b/docs/configuration/firewall/ipv6.rst @@ -11,7 +11,7 @@ Overview ******** In this section there's useful information of all firewall configuration that -can be done regarding IPv6, and appropiate op-mode commands. +can be done regarding IPv6, and appropriate op-mode commands. Configuration commands covered in this section: .. cfgcmd:: set firewall ipv6 ... @@ -41,12 +41,12 @@ next: Where firewall base chain to configure firewall filtering rules for transit traffic is ``set firewall ipv6 forward filter ...``, which happens in stage 5, -highlightened with red color. +highlighted with red color. For traffic towards the router itself, base chain is **input**, while traffic originated by the router, base chain is **output**. A new simplified packet flow diagram is shown next, which shows the path -for traffic destinated to the router itself, and traffic generated by the +for traffic destined to the router itself, and traffic generated by the router (starting from circle number 6): .. figure:: /_static/images/firewall-input-packet-flow.png @@ -64,7 +64,7 @@ output filter ...`` Custom firewall chains can be created, with commands ``set firewall ipv6 name <name> ...``. In order to use -such custom chain, a rule with **action jump**, and the appropiate **target** +such custom chain, a rule with **action jump**, and the appropriate **target** should be defined in a base chain. ****************************** @@ -184,7 +184,7 @@ not match any rule in it's chain. For base chains, possible options for .. cfgcmd:: set firewall ipv6 name <name> default-jump-target <text> - To be used only when ``defult-action`` is set to ``jump``. Use this + To be used only when ``default-action`` is set to ``jump``. Use this command to specify jump target for default rule. .. note:: **Important note about default-actions:** @@ -206,10 +206,10 @@ log options can be defined. Enable logging for the matched packet. If this configuration command is not present, then log is not enabled. -.. cfgcmd:: set firewall ipv6 forward filter enable-default-log -.. cfgcmd:: set firewall ipv6 input filter enable-default-log -.. cfgcmd:: set firewall ipv6 output filter enable-default-log -.. cfgcmd:: set firewall ipv6 name <name> enable-default-log +.. cfgcmd:: set firewall ipv6 forward filter default-log +.. cfgcmd:: set firewall ipv6 input filter default-log +.. cfgcmd:: set firewall ipv6 output filter default-log +.. cfgcmd:: set firewall ipv6 name <name> default-log Use this command to enable the logging of the default action on the specified chain. @@ -670,9 +670,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv6 name <name> rule <1-999999> inbound-interface name <iface> - Match based on inbound interface. Wilcard ``*`` can be used. + Match based on inbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> inbound-interface group <iface_group> @@ -682,7 +682,7 @@ geoip) to keep database and rules updated. inbound-interface group <iface_group> Match based on inbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> outbound-interface name <iface> @@ -691,9 +691,9 @@ geoip) to keep database and rules updated. .. cfgcmd:: set firewall ipv6 name <name> rule <1-999999> outbound-interface name <iface> - Match based on outbound interface. Wilcard ``*`` can be used. + Match based on outbound interface. Wildcard ``*`` can be used. For example: ``eth2*``. Prepending character ``!`` for inverted matching - criteria is also supportd. For example ``!eth2`` + criteria is also supported. For example ``!eth2`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> outbound-interface group <iface_group> @@ -703,7 +703,7 @@ geoip) to keep database and rules updated. outbound-interface group <iface_group> Match based on outbound interface group. Prepending character ``!`` for - inverted matching criteria is also supportd. For example ``!IFACE_GROUP`` + inverted matching criteria is also supported. For example ``!IFACE_GROUP`` .. cfgcmd:: set firewall ipv6 forward filter rule <1-999999> ipsec [match-ipsec | match-none] @@ -1177,7 +1177,7 @@ Example Partial Config } name INP-ETH1 { default-action drop - enable-default-log + default-log rule 10 { action accept protocol tcp_udp diff --git a/docs/configuration/firewall/zone.rst b/docs/configuration/firewall/zone.rst index 059b029d..f71ad8c1 100644 --- a/docs/configuration/firewall/zone.rst +++ b/docs/configuration/firewall/zone.rst @@ -11,7 +11,7 @@ Overview ******** .. note:: Starting from VyOS 1.4-rolling-202308040557, a new firewall - structure can be found on all vyos instalations. Zone based firewall was + structure can be found on all VyOS installations. Zone based firewall was removed in that version, but re introduced in VyOS 1.4 and 1.5. All versions built after 2023-10-22 has this feature. Documentation for most of the new firewall CLI can be diff --git a/docs/configuration/interfaces/bridge.rst b/docs/configuration/interfaces/bridge.rst index ddc293cc..e69a6e26 100644 --- a/docs/configuration/interfaces/bridge.rst +++ b/docs/configuration/interfaces/bridge.rst @@ -127,15 +127,24 @@ Enable VLAN-Aware Bridge .. cfgcmd:: set interfaces bridge <interface> enable-vlan - To activate the VLAN aware bridge, you must activate this setting to use VLAN + To activate the VLAN aware bridge, you must activate this setting to use VLAN settings for the bridge +.. cfgcmd:: set interfaces bridge <interface> protocol <802.1ad|802.1q> + + Define used ethertype of bridge interface. + + Ethertype ``0x8100`` is used for ``802.1q`` and ethertype ``0x88a8`` is used + for ``802.1ad``. + + The default is ``802.1q``. + VLAN Options ------------ .. note:: It is not valid to use the `vif 1` option for VLAN aware bridges - because VLAN aware bridges assume that all unlabeled packets belong to - the default VLAN 1 member and that the VLAN ID of the bridge's parent + because VLAN aware bridges assume that all unlabeled packets belong to + the default VLAN 1 member and that the VLAN ID of the bridge's parent interface is always 1 .. cmdinclude:: /_include/interface-vlan-8021q.txt @@ -149,9 +158,9 @@ VLAN Options VLAN tag enters the port, the data packet will be forced to add a tag of a specific vlan id. When the vlan id flag flows out, the tag of the vlan id will be stripped - + Example: Set `eth0` member port to be native VLAN 2 - + .. code-block:: none set interfaces bridge br1 member interface eth0 native-vlan 2 @@ -162,17 +171,17 @@ VLAN Options Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen. - + Example: Set `eth0` member port to be allowed VLAN 4 - + .. code-block:: none - + set interfaces bridge br1 member interface eth0 allowed-vlan 4 - + Example: Set `eth0` member port to be allowed VLAN 6-8 - + .. code-block:: none - + set interfaces bridge br1 member interface eth0 allowed-vlan 6-8 Port Mirror (SPAN) @@ -265,17 +274,17 @@ This results in the active configuration: Using the operation mode command to view Bridge Information =========================================================== -.. opcmd:: show bridge +.. opcmd:: show bridge The `show bridge` operational command can be used to display configured bridges: .. code-block:: none - vyos@vyos:~$ show bridge - 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br0 state forwarding - priority 32 cost 100 - 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br0 state forwarding + vyos@vyos:~$ show bridge + 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br0 state forwarding + priority 32 cost 100 + 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 master br0 state forwarding priority 32 cost 100 .. opcmd:: show bridge <name> fdb @@ -304,11 +313,11 @@ Using the operation mode command to view Bridge Information 33:33:00:00:00:6a dev br0 self permanent 01:00:5e:00:00:01 dev br0 self permanent 33:33:ff:00:00:00 dev br0 self permanent - + .. opcmd:: show bridge <name> mdb - Show bridge `<name>` mdb displays the current multicast group membership - table.The table is populated by IGMP and MLD snooping in the bridge driver + Show bridge `<name>` mdb displays the current multicast group membership + table.The table is populated by IGMP and MLD snooping in the bridge driver automatically. .. code-block:: none diff --git a/docs/configuration/interfaces/ethernet.rst b/docs/configuration/interfaces/ethernet.rst index bbf52112..a1151fd4 100644 --- a/docs/configuration/interfaces/ethernet.rst +++ b/docs/configuration/interfaces/ethernet.rst @@ -61,6 +61,22 @@ Offloading Enable different types of hardware offloading on the given NIC. + :abbr:`LRO (Large Receive Offload)` is a technique designed to boost the + efficiency of how your computer's network interface card (NIC) processes + incoming network traffic. Typically, network data arrives in smaller chunks + called packets. Processing each packet individually consumes CPU (central + processing unit) resources. Lots of small packets can lead to a performance + bottleneck. Instead of handing the CPU each packet as it comes in, LRO + instructs the NIC to combine multiple incoming packets into a single, larger + packet. This larger packet is then passed to the CPU for processing. + + .. note:: Under some circumstances, LRO is known to modify the packet headers + of forwarded traffic, which breaks the end-to-end principle of computer + networking. LRO is also only able to offload TCP segments encapsulated in + IPv4 packets. Due to these limitations, it is recommended to use GRO + (Generic Receive Offload) where possible. More information on the + limitations of LRO can be found here: https://lwn.net/Articles/358910/ + :abbr:`GSO (Generic Segmentation Offload)` is a pure software offload that is meant to deal with cases where device drivers cannot perform the offloads described above. What occurs in GSO is that a given skbuff will have its data @@ -87,13 +103,13 @@ Offloading placing the packet on the desired CPU's backlog queue and waking up the CPU for processing. RPS has some advantages over RSS: - - it can be used with any NIC, - - software filters can easily be added to hash over new protocols, - - it does not increase hardware device interrupt rate (although it does - introduce inter-processor interrupts (IPIs)). + - it can be used with any NIC + - software filters can easily be added to hash over new protocols + - it does not increase hardware device interrupt rate, although it does + introduce inter-processor interrupts (IPIs) - .. note:: In order to use TSO/LRO with VMXNET3 adaters one must also enable - the SG offloading option. + .. note:: In order to use TSO/LRO with VMXNET3 adapters, the SG offloading + option must also be enabled. Authentication (EAPoL) ---------------------- diff --git a/docs/configuration/interfaces/loopback.rst b/docs/configuration/interfaces/loopback.rst index 8e983abb..b5fbdf83 100644 --- a/docs/configuration/interfaces/loopback.rst +++ b/docs/configuration/interfaces/loopback.rst @@ -14,7 +14,7 @@ services on your local machine. you need multiple interfaces, please use the :ref:`dummy-interface` interface type. -.. hint:: A lookback interface is always up, thus it could be used for +.. hint:: A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the diff --git a/docs/configuration/interfaces/openvpn.rst b/docs/configuration/interfaces/openvpn.rst index d92ac080..8cf579de 100644 --- a/docs/configuration/interfaces/openvpn.rst +++ b/docs/configuration/interfaces/openvpn.rst @@ -547,7 +547,7 @@ example: openvpn-option "--plugin /usr/lib/openvpn/openvpn-auth-ldap.so /config/auth/ldap-auth.config" openvpn-option "--push redirect-gateway" openvpn-option --duplicate-cn - openvpn-option --client-cert-not-required + openvpn-option "--verify-client-cert none" openvpn-option --comp-lzo openvpn-option --persist-key openvpn-option --persist-tun diff --git a/docs/configuration/loadbalancing/reverse-proxy.rst b/docs/configuration/loadbalancing/reverse-proxy.rst index 19ef3773..970e084e 100644 --- a/docs/configuration/loadbalancing/reverse-proxy.rst +++ b/docs/configuration/loadbalancing/reverse-proxy.rst @@ -43,7 +43,7 @@ Service .. cfgcmd:: set load-balancing reverse-proxy service <name> ssl certificate <name> - Set SSL certeficate <name> for service <name> + Set SSL certificate <name> for service <name> Rules @@ -97,8 +97,8 @@ Backend .. cfgcmd:: set load-balancing reverse-proxy backend <name> balance <balance> - Load-balancing algorithms to be used for distributind requests among the - vailable servers + Load-balancing algorithms to be used for distributed requests among the + available servers Balance algorithms: * ``source-address`` Distributes requests based on the source IP address @@ -144,9 +144,49 @@ Backend Send a Proxy Protocol version 2 header (binary format) +.. cfgcmd:: set load-balancing reverse-proxy backend <name> ssl + ca-certificate <ca-certificate> + Configure requests to the backend server to use SSL encryption and + authenticate backend against <ca-certificate> -Gloabal +.. cfgcmd:: set load-balancing reverse-proxy backend <name> ssl no-verify + + Configure requests to the backend server to use SSL encryption without + validating server certificate + + +HTTP health check +^^^^^^^^^^^^^^^^^ +For web application providing information about their state HTTP health +checks can be used to determine their availability. + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + + Enables HTTP health checks using OPTION HTTP requests against '/' and + expecting a successful response code in the 200-399 range. + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + method <method> + + Sets the HTTP method to be used, can be either: option, get, post, put + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + uri <path> + + Sets the endpoint to be used for health checks + +.. cfgcmd:: set load-balancing reverse-proxy backend <name> http-check + expect <condition> + + Sets the expected result condition for considering a server healthy. + Some possible examples are: + * ``status 200`` Expecting a 200 response code + * ``status 200-399`` Expecting a non-failure response code + * ``string success`` Expecting the string `success` in the response body + + +Global ------- Global parameters @@ -207,6 +247,7 @@ servers (srv01 and srv02) using the round-robin load-balancing algorithm. set load-balancing reverse-proxy backend bk-01 server srv02 address '192.0.2.12' set load-balancing reverse-proxy backend bk-01 server srv02 port '8882' + Balancing based on domain name ------------------------------ The following configuration demonstrates how to use VyOS @@ -243,12 +284,12 @@ to the backend ``bk-api-02`` Terminate SSL ------------- -The following configuration reverse-proxy terminate SSL. +The following configuration terminates SSL on the router. -The ``http`` service is lestens on port 80 and force redirects from HTTP to +The ``http`` service is listens on port 80 and force redirects from HTTP to HTTPS. -The ``https`` service listens on port 443 with backend `bk-default` to +The ``https`` service listens on port 443 with backend ``bk-default`` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination. Rule 10 matches requests with the exact URL path ``/.well-known/xxx`` @@ -287,3 +328,61 @@ connection limit of 4000 and a minimum TLS version of 1.3. set load-balancing reverse-proxy global-parameters max-connections '4000' set load-balancing reverse-proxy global-parameters tls-version-min '1.3' + +SSL Bridging +------------- +The following configuration terminates incoming HTTPS traffic on the router, +then re-encrypts the traffic and sends to the backend server via HTTPS. +This is useful if encryption is required for both legs, but you do not want to +install publicly trusted certificates on each backend server. + +Backend service certificates are checked against the certificate authority +specified in the configuration, which could be an internal CA. + +The ``https`` service listens on port 443 with backend ``bk-bridge-ssl`` to +handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination. + +The ``bk-bridge-ssl`` backend connects to sr01 server on port 443 via HTTPS +and checks backend server has a valid certificate trusted by CA ``cacert`` + + +.. code-block:: none + + set load-balancing reverse-proxy service https backend 'bk-bridge-ssl' + set load-balancing reverse-proxy service https description 'listen on 443 port' + set load-balancing reverse-proxy service https mode 'http' + set load-balancing reverse-proxy service https port '443' + set load-balancing reverse-proxy service https ssl certificate 'cert' + + set load-balancing reverse-proxy backend bk-bridge-ssl description 'SSL backend' + set load-balancing reverse-proxy backend bk-bridge-ssl mode 'http' + set load-balancing reverse-proxy backend bk-bridge-ssl ssl ca-certificate 'cacert' + set load-balancing reverse-proxy backend bk-bridge-ssl server sr01 address '192.0.2.23' + set load-balancing reverse-proxy backend bk-bridge-ssl server sr01 port '443' + + +Balancing with HTTP health checks +--------------------------------- + +This configuration enables HTTP health checks on backend servers. + +.. code-block:: none + + set load-balancing reverse-proxy service my-tcp-api backend 'bk-01' + set load-balancing reverse-proxy service my-tcp-api mode 'tcp' + set load-balancing reverse-proxy service my-tcp-api port '8888' + + set load-balancing reverse-proxy backend bk-01 balance 'round-robin' + set load-balancing reverse-proxy backend bk-01 mode 'tcp' + + set load-balancing reverse-proxy backend bk-01 http-check method 'get' + set load-balancing reverse-proxy backend bk-01 http-check uri '/health' + set load-balancing reverse-proxy backend bk-01 http-check expect 'status 200' + + set load-balancing reverse-proxy backend bk-01 server srv01 address '192.0.2.11' + set load-balancing reverse-proxy backend bk-01 server srv01 port '8881' + set load-balancing reverse-proxy backend bk-01 server srv01 check + set load-balancing reverse-proxy backend bk-01 server srv02 address '192.0.2.12' + set load-balancing reverse-proxy backend bk-01 server srv02 port '8882' + set load-balancing reverse-proxy backend bk-01 server srv02 check + diff --git a/docs/configuration/pki/index.rst b/docs/configuration/pki/index.rst index 8fd6fbe8..0ead198f 100644 --- a/docs/configuration/pki/index.rst +++ b/docs/configuration/pki/index.rst @@ -8,7 +8,7 @@ PKI ### -VyOS 1.4 changed the way in how encrytion keys or certificates are stored on the +VyOS 1.4 changed the way in how encryption keys or certificates are stored on the system. In the pre VyOS 1.4 era, certificates got stored under /config and every service referenced a file. That made copying a running configuration from system A to system B a bit harder, as you had to copy the files and their permissions @@ -120,12 +120,12 @@ OpenVPN .. opcmd:: generate pki openvpn shared-secret - Genearate a new OpenVPN shared secret. The generated secret is the output to + Generate a new OpenVPN shared secret. The generated secret is the output to the console. .. opcmd:: generate pki openvpn shared-secret install <name> - Genearate a new OpenVPN shared secret. The generated secret is the output to + Generate a new OpenVPN shared secret. The generated secret is the output to the console. .. include:: pki_cli_import_help.txt @@ -163,7 +163,7 @@ WireGuard the output from op-mode into configuration mode. ``peer`` is used for the VyOS CLI command to identify the WireGuard peer where - this secred is to be used. + this secret is to be used. Key usage (CLI) =============== @@ -365,3 +365,124 @@ also to display them. .. opcmd:: renew certbot Manually trigger certificate renewal. This will be done twice a day. + +Examples +======== + +Create a CA chain and leaf certificates +------------------------------------- + +This configuration generates & installs into the VyOS PKI system a root +certificate authority, alongside two intermediary certificate authorities for +client & server certificates. These CAs are then used to generate a server +certificate for the router, and a client certificate for a user. + + +* ``vyos_root_ca`` is the root certificate authority. + +* ``vyos_client_ca`` and ``vyos_server_ca`` are intermediary certificate authorities, + which are signed by the root CA. + +* ``vyos_cert`` is a leaf server certificate used to identify the VyOS router, + signed by the server intermediary CA. + +* ``vyos_example_user`` is a leaf client certificate used to identify a user, + signed by client intermediary CA. + + +First, we create the root certificate authority. + +.. code-block:: none + + [edit] + vyos@vyos# run generate pki ca install vyos_root_ca + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) VyOS Root CA + Enter how many days certificate will be valid: (Default: 1825) 1825 + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + +Secondly, we create the intermediary certificate authorities, which are used to +sign the leaf certificates. + +.. code-block:: none + + [edit] + vyos@vyos# run generate pki ca sign vyos_root_ca install vyos_server_ca + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) VyOS Intermediary Server CA + Enter how many days certificate will be valid: (Default: 1825) 1095 + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + + + [edit] + vyos@vyos# run generate pki ca sign vyos_root_ca install vyos_client_ca + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) VyOS Intermediary Client CA + Enter how many days certificate will be valid: (Default: 1825) 1095 + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + +Lastly, we can create the leaf certificates that devices and users will utilise. + +.. code-block:: none + + [edit] + vyos@vyos# run generate pki certificate sign vyos_server_ca install vyos_cert + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) vyos.net + Do you want to configure Subject Alternative Names? [y/N] y + Enter alternative names in a comma separate list, example: ipv4:1.1.1.1,ipv6:fe80::1,dns:vyos.net + Enter Subject Alternative Names: dns:vyos.net,dns:www.vyos.net + Enter how many days certificate will be valid: (Default: 365) 365 + Enter certificate type: (client, server) (Default: server) server + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. + + + [edit] + vyos@vyos# run generate pki certificate sign vyos_client_ca install vyos_example_user + Do you already have a certificate request? [y/N] n + Enter private key type: [rsa, dsa, ec] (Default: rsa) rsa + Enter private key bits: (Default: 2048) 2048 + Enter country code: (Default: GB) GB + Enter state: (Default: Some-State) Some-State + Enter locality: (Default: Some-City) Some-City + Enter organization name: (Default: VyOS) VyOS + Enter common name: (Default: vyos.io) Example User + Do you want to configure Subject Alternative Names? [y/N] y + Enter alternative names in a comma separate list, example: ipv4:1.1.1.1,ipv6:fe80::1,dns:vyos.net,rfc822:user@vyos.net + Enter Subject Alternative Names: rfc822:example.user@vyos.net + Enter how many days certificate will be valid: (Default: 365) 365 + Enter certificate type: (client, server) (Default: server) client + Note: If you plan to use the generated key on this router, do not encrypt the private key. + Do you want to encrypt the private key with a passphrase? [y/N] n + 2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply. diff --git a/docs/configuration/policy/route-map.rst b/docs/configuration/policy/route-map.rst index 07cfcf02..ccc4cef0 100644 --- a/docs/configuration/policy/route-map.rst +++ b/docs/configuration/policy/route-map.rst @@ -197,12 +197,15 @@ Route Map BGP aggregator attribute: AS number or IP address of an aggregation. .. cfgcmd:: set policy route-map <text> rule <1-65535> set as-path exclude - <text> + <1-4294967295 | all> Drop AS-NUMBER from the BGP AS path. + If ``all`` is specified, remove all AS numbers from the AS_PATH of the BGP + path's NLRI. + .. cfgcmd:: set policy route-map <text> rule <1-65535> set as-path prepend - <text> + <1-4294967295> Prepend the given string of AS numbers to the AS_PATH of the BGP path's NLRI. @@ -233,11 +236,11 @@ Route Map .. cfgcmd:: set policy route-map <text> rule <1-65535> set large-community <add|replace> <GA:LDP1:LDP2> - Add or replace BGP large-community attribute in format + Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>`` .. cfgcmd:: set policy route-map <text> rule <1-65535> set large-community none - + Delete all BGP large-communities .. cfgcmd:: set policy route-map <text> rule <1-65535> set large-community delete @@ -375,11 +378,3 @@ List of well-known communities * ``accept-own-nexthop`` - Well-known communities value accept-own-nexthop 0xFFFF0008 * ``blackhole`` - Well-known communities value BLACKHOLE 0xFFFF029A * ``no-peer`` - Well-known communities value NOPEER 0xFFFFFF04 - - - - - - - - diff --git a/docs/configuration/policy/route.rst b/docs/configuration/policy/route.rst index 1a85ffc6..45975774 100644 --- a/docs/configuration/policy/route.rst +++ b/docs/configuration/policy/route.rst @@ -19,8 +19,8 @@ from 1 - 999999, at the first match the action of the rule will be executed. Provide a rule-set description. -.. cfgcmd:: set policy route <name> enable-default-log -.. cfgcmd:: set policy route6 <name> enable-default-log +.. cfgcmd:: set policy route <name> default-log +.. cfgcmd:: set policy route6 <name> default-log Option to log packets hitting default-action. @@ -271,4 +271,4 @@ setting a different routing table. .. cfgcmd:: set policy route <name> rule <n> set tcp-mss <500-1460> .. cfgcmd:: set policy route6 <name> rule <n> set tcp-mss <500-1460> - Set packet modifications: Explicitly set TCP Maximum segment size value.
\ No newline at end of file + Set packet modifications: Explicitly set TCP Maximum segment size value. diff --git a/docs/configuration/protocols/failover.rst b/docs/configuration/protocols/failover.rst index daeb65f4..8088e104 100644 --- a/docs/configuration/protocols/failover.rst +++ b/docs/configuration/protocols/failover.rst @@ -2,10 +2,10 @@ Failover ######## -Failover routes are manually configured routes, but they install +Failover routes are manually configured routes, but they only install to the routing table if the health-check target is alive. If the target is not alive the route is removed from the routing table -until the target will be available. +until the target becomes available. *************** Failover Routes diff --git a/docs/configuration/protocols/isis.rst b/docs/configuration/protocols/isis.rst index 1f779d0a..9b954965 100644 --- a/docs/configuration/protocols/isis.rst +++ b/docs/configuration/protocols/isis.rst @@ -12,7 +12,7 @@ interior gateway protocol (IGP) which is described in ISO10589, algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology -information with their directly conencted neighbors. IS-IS runs directly on +information with their directly connected neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is @@ -39,7 +39,7 @@ occur within IS-IS when it comes to said duplication. .. cfgcmd:: set protocols isis net <network-entity-title> - This commad sets network entity title (NET) provided in ISO format. + This command sets network entity title (NET) provided in ISO format. Here is an example :abbr:`NET (Network Entity Title)` value: @@ -52,9 +52,9 @@ occur within IS-IS when it comes to said duplication. * :abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 is what IS-IS uses for private addressing. - * Area identifier: ``0001`` IS-IS area number (numberical area ``1``) + * Area identifier: ``0001`` IS-IS area number (numerical area ``1``) - * System identifier: ``1921.6800.1002`` - for system idetifiers we recommend + * System identifier: ``1921.6800.1002`` - for system identifiers we recommend to use IP address or MAC address of the router itself. The way to construct this is to keep all of the zeroes of the router IP address, and then change the periods from being every three numbers to every four numbers. The diff --git a/docs/configuration/protocols/rpki.rst b/docs/configuration/protocols/rpki.rst index aeb2941b..17557884 100644 --- a/docs/configuration/protocols/rpki.rst +++ b/docs/configuration/protocols/rpki.rst @@ -11,20 +11,19 @@ RPKI -- `tweet by EvilMog`_, 2020-02-21 -:abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI -(Public Key Infrastructure)` designed to secure the Internet routing -infrastructure. It associates BGP route announcements with the correct -originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then -use to check each route against the corresponding :abbr:`ROA (Route Origin -Authorisation)` for validity. RPKI is described in :rfc:`6480`. +:abbr:`RPKI (Resource Public Key Infrastructure)` is a framework designed to +secure the Internet routing infrastructure. It associates BGP route +announcements with the correct originating :abbr:`ASN (Autonomus System +Number)` which BGP routers can then use to check each route against the +corresponding :abbr:`ROA (Route Origin Authorisation)` for validity. RPKI is +described in :rfc:`6480`. A BGP-speaking router like VyOS can retrieve ROA information from RPKI "Relying Party software" (often just called an "RPKI server" or "RPKI validator") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ -(written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and -RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described -in :rfc:`8210`. +(written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written +in Go). The RTR protocol is described in :rfc:`8210`. .. tip:: If you are new to these routing security technologies then there is an @@ -38,10 +37,9 @@ in :rfc:`8210`. Getting started *************** -First you will need to deploy an RPKI validator for your routers to use. The -RIPE NCC helpfully provide `some instructions`_ to get you started with -several different options. Once your server is running you can start -validating announcements. +First you will need to deploy an RPKI validator for your routers to use. NLnet +Labs provides a collection of software_ you can compare and settle on one. +Once your server is running you can start validating announcements. Imported prefixes during the validation may have values: @@ -56,16 +54,16 @@ Imported prefixes during the validation may have values: untrustworthy route announcements. notfound - No ROA exists which covers that prefix. Unfortunately this is the case - for about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ - (default-free zone)` at the start of 2020 + No ROA exists which covers that prefix. Unfortunately this is the case for + about 40%-50% of the prefixes which were announced to the :abbr:`DFZ + (default-free zone)` at the start of 2024. .. note:: If you are responsible for the global addresses assigned to your network, please make sure that your prefixes have ROAs associated with them to avoid being `notfound` by RPKI. For most ASNs this will involve publishing ROAs via your :abbr:`RIR (Regional Internet Registry)` (RIPE - NCC, APNIC, ARIN, LACNIC or AFRINIC), and is something you are encouraged + NCC, APNIC, ARIN, LACNIC, or AFRINIC), and is something you are encouraged to do whenever you plan to announce addresses into the DFZ. Particularly large networks may wish to run their own RPKI certificate @@ -140,11 +138,13 @@ Configuration SSH === -Connections to the RPKI caching server can not only be established by HTTP/TLS -but you can also rely on a secure SSH session to the server. To enable SSH, -first you need to create an SSH client keypair using ``generate ssh -client-key /config/auth/id_rsa_rpki``. Once your key is created you can setup -the connection. +Connections to the RPKI caching server can not only be established by TCP using +the RTR protocol but you can also rely on a secure SSH session to the server. +This provides transport integrity and confidentiality and it is a good idea if +your validation software supports it. To enable SSH, first you need to create +an SSH client keypair using ``generate ssh client-key +/config/auth/id_rsa_rpki``. Once your key is created you can setup the +connection. .. cfgcmd:: set protocols rpki cache <address> ssh username <user> @@ -191,20 +191,21 @@ filter we reject prefixes with the state `invalid`, and set a higher set policy route-map ROUTES-IN rule 30 match rpki 'invalid' Once your routers are configured to reject RPKI-invalid prefixes, you can -test whether the configuration is working correctly using the `RIPE Labs RPKI -Test`_ experimental tool. +test whether the configuration is working correctly using Cloudflare's test_ +website. Keep in mind that in order for this to work, you need to have no +default routes or anything else that would still send traffic to RPKI-invalid +destinations. .. stop_vyoslinter .. _tweet by EvilMog: https://twitter.com/Evil_Mog/status/1230924170508169216 .. _Routinator: https://www.nlnetlabs.nl/projects/rpki/routinator/ -.. _GoRTR: https://github.com/cloudflare/gortr -.. _OctoRPKI: https://github.com/cloudflare/cfrpki#octorpki -.. _Validator: https://www.ripe.net/manage-ips-and-asns/resource-management/rpki/tools-and-resources -.. _some instructions: https://labs.ripe.net/Members/tashi_phuntsho_3/how-to-install-an-rpki-validator .. _Krill: https://www.nlnetlabs.nl/projects/rpki/krill/ -.. _RIPE Labs RPKI Test: https://sg-pub.ripe.net/jasper/rpki-web-test/ .. _excellent guide to RPKI: https://rpki.readthedocs.io/ .. _help and operational guidance: https://rpki.readthedocs.io/en/latest/about/help.html +.. _rpki-client: https://www.rpki-client.org/ +.. _StayRTR: https://github.com/bgp/stayrtr/ +.. _software: https://rpki.readthedocs.io/en/latest/ops/tools.html#relying-party-software +.. _test: https://isbgpsafeyet.com/ .. start_vyoslinter diff --git a/docs/configuration/service/broadcast-relay.rst b/docs/configuration/service/broadcast-relay.rst index b6e2bed7..f64bb208 100644 --- a/docs/configuration/service/broadcast-relay.rst +++ b/docs/configuration/service/broadcast-relay.rst @@ -20,7 +20,7 @@ Configuration .. cfgcmd:: set service broadcast-relay id <n> description <description> A description can be added for each and every unique relay ID. This is - useful to distinguish between multiple different ports/appliactions. + useful to distinguish between multiple different ports/applications. .. cfgcmd:: set service broadcast-relay id <n> interface <interface> @@ -35,7 +35,7 @@ Configuration .. cfgcmd:: set service broadcast-relay id <n> port <port> - The UDP port number used by your apllication. It is mandatory for this kind + The UDP port number used by your application. It is mandatory for this kind of operation. .. cfgcmd:: set service broadcast-relay id <n> disable diff --git a/docs/configuration/service/conntrack-sync.rst b/docs/configuration/service/conntrack-sync.rst index d43f2385..232db1a8 100644 --- a/docs/configuration/service/conntrack-sync.rst +++ b/docs/configuration/service/conntrack-sync.rst @@ -29,7 +29,7 @@ will be mandatorily defragmented. It is possible to use either Multicast or Unicast to sync conntrack traffic. Most examples below show Multicast, but unicast can be specified by using the -"peer" keywork after the specificed interface, as in the following example: +"peer" keywork after the specified interface, as in the following example: :cfgcmd:`set service conntrack-sync interface eth0 peer 192.168.0.250` @@ -102,6 +102,11 @@ Configuration Disable connection logging via Syslog. +.. cfgcmd:: set service conntrack-sync startup-resync + + Order conntrackd to request a complete conntrack table resync against + the other node at startup. + ********* Operation ********* @@ -199,7 +204,7 @@ Now configure conntrack-sync service on ``router1`` **and** ``router2`` .. code-block:: none - set high-availablilty vrrp group internal virtual-address ... etc ... + set high-availability vrrp group internal virtual-address ... etc ... set high-availability vrrp sync-group syncgrp member 'internal' set service conntrack-sync accept-protocol 'tcp' set service conntrack-sync accept-protocol 'udp' diff --git a/docs/configuration/service/dhcp-server.rst b/docs/configuration/service/dhcp-server.rst index 6813d2c0..50e9ee7e 100644 --- a/docs/configuration/service/dhcp-server.rst +++ b/docs/configuration/service/dhcp-server.rst @@ -49,10 +49,26 @@ Configuration Inform client that the DNS server can be found at `<address>`. This is the configuration parameter for the entire shared network definition. - All subnets will inherit this configuration item if not specified locally. - + All subnets will inherit this configuration item if not specified locally. Multiple DNS servers can be defined. +.. cfgcmd:: set service dhcp-server shared-network-name <name> option + vendor-option <option-name> + + This configuration parameter lets you specify a vendor-option for the + entire shared network definition. All subnets will inherit this + configuration item if not specified locally. An example for Ubiquiti is + shown below: + +**Example:** + +Pass address of Unifi controller at ``172.16.100.1`` to all clients of ``NET1`` + +.. code-block:: none + + set service dhcp-server shared-network-name 'NET1' option vendor-option + ubiquiti '172.16.100.1' + .. cfgcmd:: set service dhcp-server listen-address <address> This configuration parameter lets the DHCP server to listen for DHCP @@ -132,28 +148,62 @@ Individual Client Subnet request where no full FQDN is passed. This option can be given multiple times if you need multiple search domains (DHCP Option 119). -Failover --------- +.. cfgcmd:: set service dhcp-server shared-network-name <name> subnet <subnet> + option vendor-option <option-name> + + This configuration parameter lets you specify a vendor-option for the + subnet specified within the shared network definition. An example for + Ubiquiti is shown below: + +**Example:** + +Create ``172.18.201.0/24`` as a subnet within ``NET1`` and pass address of +Unifi controller at ``172.16.100.1`` to clients of that subnet. + +.. code-block:: none + + set service dhcp-server shared-network-name 'NET1' subnet + '172.18.201.0/24' option vendor-option ubiquiti '172.16.100.1' + + +High Availability +----------------- -VyOS provides support for DHCP failover. DHCP failover must be configured -explicitly by the following statements. +VyOS provides High Availability support for DHCP server. DHCP High +Availability can act in two different modes: -.. cfgcmd:: set service dhcp-server failover source-address <address> +* **Active-active**: both DHCP servers will respond to DHCP requests. If + ``mode`` is not defined, this is the default behavior. - Local IP `<address>` used when communicating to the failover peer. +* **Active-passive**: only ``primary`` server will respond to DHCP requests. + If this server goes offline, then ``secondary`` server will take place. -.. cfgcmd:: set service dhcp-server failover remote <address> +DHCP High Availability must be configured explicitly by the following +statements on both servers: - Remote peer IP `<address>` of the second DHCP server in this failover +.. cfgcmd:: set service dhcp-server high-availability mode [active-active + | active-passive] + + Define operation mode of High Availability feature. Default value if command + is not specified is `active-active` + +.. cfgcmd:: set service dhcp-server high-availability source-address <address> + + Local IP `<address>` used when communicating to the HA peer. + +.. cfgcmd:: set service dhcp-server high-availability remote <address> + + Remote peer IP `<address>` of the second DHCP server in this HA cluster. -.. cfgcmd:: set service dhcp-server failover name <name> +.. cfgcmd:: set service dhcp-server high-availability name <name> A generic `<name>` referencing this sync service. .. note:: `<name>` must be identical on both sides! -.. cfgcmd:: set service dhcp-server failover status <primary | secondary> +.. cfgcmd:: set service dhcp-server high-availability status <primary + | secondary> The primary and secondary statements determines whether the server is primary or secondary. @@ -162,12 +212,12 @@ explicitly by the following statements. their lease tables in sync, they must be able to reach each other on TCP port 647. If you have firewall rules in effect, adjust them accordingly. - .. hint:: The dialogue between failover partners is neither encrypted nor + .. hint:: The dialogue between HA partners is neither encrypted nor authenticated. Since most DHCP servers exist within an organisation's own secure Intranet, this would be an unnecessary overhead. However, if you - have DHCP failover peers whose communications traverse insecure networks, + have DHCP HA peers whose communications traverse insecure networks, then we recommend that you consider the use of VPN tunneling between them - to ensure that the failover partnership is immune to disruption + to ensure that the HA partnership is immune to disruption (accidental or otherwise) via third parties. Static mappings @@ -371,12 +421,13 @@ Please see the :ref:`dhcp-dns-quick-start` configuration. .. _dhcp-server:v4_example_failover: -Failover --------- +High Availability +----------------- -Configuration of a DHCP failover pair +Configuration of a DHCP HA pair: -* Setup DHCP failover for network 192.0.2.0/24 +* Setup DHCP HA for network 192.0.2.0/24 +* Use active-active HA mode. * Default gateway and DNS server is at `192.0.2.254` * The primary DHCP server uses address `192.168.189.252` * The secondary DHCP server uses address `192.168.189.253` @@ -398,19 +449,21 @@ Common configuration, valid for both primary and secondary node. .. code-block:: none - set service dhcp-server failover source-address '192.168.189.252' - set service dhcp-server failover name 'NET-VYOS' - set service dhcp-server failover remote '192.168.189.253' - set service dhcp-server failover status 'primary' + set service dhcp-server high-availability mode 'active-active' + set service dhcp-server high-availability source-address '192.168.189.252' + set service dhcp-server high-availability name 'NET-VYOS' + set service dhcp-server high-availability remote '192.168.189.253' + set service dhcp-server high-availability status 'primary' **Secondary** .. code-block:: none - set service dhcp-server failover source-address '192.168.189.253' - set service dhcp-server failover name 'NET-VYOS' - set service dhcp-server failover remote '192.168.189.252' - set service dhcp-server failover status 'secondary' + set service dhcp-server high-availability mode 'active-active' + set service dhcp-server high-availability source-address '192.168.189.253' + set service dhcp-server high-availability name 'NET-VYOS' + set service dhcp-server high-availability remote '192.168.189.252' + set service dhcp-server high-availability status 'secondary' .. _dhcp-server:v4_example_raw: diff --git a/docs/configuration/service/dns.rst b/docs/configuration/service/dns.rst index c6deb179..365e7885 100644 --- a/docs/configuration/service/dns.rst +++ b/docs/configuration/service/dns.rst @@ -143,6 +143,100 @@ avoid being tracked by the provider of your upstream DNS server. 168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream DNS server(s) to be used for reverse lookups of these zones. +Authoritative zones +------------------- + +The VyOS DNS forwarder can also be configured to host authoritative records for a domain. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> disable + + Disable hosting authoritative zone for `<domain-name>` without deleting from + configuration. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records <type> + <name> disable + + Disable specific record without deleting it from configuration. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records <type> + <name> ttl <seconds> + + Set the :abbr:`TTL (Time-to-live)` for the record in seconds. Default is 300 seconds. + +Record types +^^^^^^^^^^^^ + +Below are a list of record types available to be configured within VyOS. Some records +support special `<name>` keywords: + +* ``@`` Use @ as record name to set the record for the root domain. + +* ``any`` Use any as record name to configure the record as a wildcard. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + a <name> address <x.x.x.x> + + Set an :abbr:`A (Address)` record. Supports ``@`` and ``any`` keywords. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + aaaa <name> address <h:h:h:h:h:h:h:h> + + Set an :abbr:`AAAA (IPv6 Address)` record. Supports ``@`` and ``any`` keywords. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + cname <name> target <target-domain-name> + + Set an :abbr:`CNAME (Canonical name)` record. Supports ``@`` keyword. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + naptr <name> rule <rule-number> <option> <value> + + Set an :abbr:`NAPTR (Naming authority pointer)` record. Supports ``@`` keyword. + NAPTR records support the following options: + + * **lookup-a** A Flag. + + * **lookup-srv** S flag. + + * **order** Rule order. Requires `<value>`. + + * **preference** Rule preference. Requires `<value>`. Defaults to 0 if not set. + + * **protocol-specific** P flag. + + * **regexp** Regular expression. Requires `<value>`. + + * **replacement** Replacement DNS name. + + * **resolve-uri** U flag. + + * **service** Service type. Requires `<value>`. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + ns <name> target <target-name> + + Set an :abbr:`NS (Nameserver)` record. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + ptr <name> target <target-name> + + Set an :abbr:`PTR (Pointer record)` record. Supports ``@`` keyword. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + spf <name> value <value> + + Set an :abbr:`SPF (Sender policy framework)` record. Supports ``@`` keyword. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + srv <name> entry <entry-number> [hostname | port | priority | weight] <value> + + Set an :abbr:`SRV (Service)` record. Supports ``@`` keyword. + +.. cfgcmd:: set service dns forwarding authoritative-domain <domain-name> records + txt <name> value <value> + + Set an :abbr:`TXT (Text)` record. Supports ``@`` keyword. + Example ======= @@ -208,7 +302,7 @@ one involves a third party service, like DynDNS.com or any other such service provider. This method uses HTTP requests to transmit the new IP address. You can configure both in VyOS. -.. _dns:dynmaic_config: +.. _dns:dynamic_config: Configuration ============= @@ -254,7 +348,7 @@ Configuration Specify interval in seconds to wait between Dynamic DNS updates. The default is 300 seconds. -.. _dns:dynmaic_example: +.. _dns:dynamic_example: Example ^^^^^^^ diff --git a/docs/configuration/service/https.rst b/docs/configuration/service/https.rst index 973c5355..af397456 100644 --- a/docs/configuration/service/https.rst +++ b/docs/configuration/service/https.rst @@ -53,7 +53,11 @@ Configuration .. cfgcmd:: set service https vrf <name> - Start Webserver in given VRF. + Start Webserver in given VRF. + +.. cfgcmd:: set service https request-body-size-limit <size> + + Set the maximum request body size in megabytes. Default is 1MB. API === @@ -70,7 +74,36 @@ API .. cfgcmd:: set service https api strict - Enforce strict path checking + Enforce strict path checking. + +.. cfgcmd:: set service https api cors allow-origin <origin> + + Allow cross-origin requests from `<origin>`. + +GraphQL +======= + +.. cfgcmd:: set service https api graphql introspection + + Enable GraphQL Schema introspection. + +.. note:: Do not leave introspection enabled in production, it is a security risk. + +.. cfgcmd:: set service https api graphql authentication type <key | token> + + Set the authentication type for GraphQL, default option is key. Available options are: + + * ``key`` use API keys configured in ``service https api keys`` + + * ``token`` use JWT tokens. + +.. cfgcmd:: set service https api graphql authentication expiration + + Set the lifetime for JWT tokens in seconds. Default is 3600 seconds. + +.. cfgcmd:: set service https api graphql authentication secret-length + + Set the byte length of the JWT secret. Default is 32. ********************* Example Configuration diff --git a/docs/configuration/service/ids.rst b/docs/configuration/service/ids.rst index 3e508d50..8a64467f 100644 --- a/docs/configuration/service/ids.rst +++ b/docs/configuration/service/ids.rst @@ -33,7 +33,7 @@ Configuration Configure direction for processing traffic. .. cfgcmd:: set service ids ddos-protection exclude-network <x.x.x.x/x> -.. cfgcmd:: set service ids ddos-protection exlude-network <h:h:h:h:h:h:h:h/x> +.. cfgcmd:: set service ids ddos-protection exclude-network <h:h:h:h:h:h:h:h/x> Specify IPv4 and/or IPv6 networks which are going to be excluded. @@ -56,7 +56,7 @@ Configuration .. cfgcmd:: set service ids ddos-protection sflow port <1-65535> - Configure port number to be used for sflow conection. Default port is 6343. + Configure port number to be used for sflow connection. Default port is 6343. .. cfgcmd:: set service ids ddos-protection threshold general [fps | mbps | pps] <0-4294967294> @@ -96,7 +96,7 @@ In this simplified scenario, main things to be considered are: * Interface **eth0** used to connect to upstream. Since we are analyzing attacks to and from our internal network, two types -of attacks can be identified, and differents actions are needed: +of attacks can be identified, and different actions are needed: * External attack: an attack from the internet towards an internal IP is identify. In this case, all connections towards such IP will be diff --git a/docs/configuration/service/ipoe-server.rst b/docs/configuration/service/ipoe-server.rst index 64048552..ef06bcd5 100644 --- a/docs/configuration/service/ipoe-server.rst +++ b/docs/configuration/service/ipoe-server.rst @@ -26,13 +26,13 @@ functionality as PPPoE, but in a less robust manner. Configuring IPoE Server *********************** -IPoE can be configure on different interfaces, it will depend on each specific -situation which interface will provide IPoE to clients. The clients mac address +IPoE can be configured on different interfaces, it will depend on each specific +situation which interface will provide IPoE to clients. The client's mac address and the incoming interface is being used as control parameter, to authenticate a client. The example configuration below will assign an IP to the client on the incoming -interface eth2 with the client mac address 08:00:27:2f:d8:06. Other DHCP +interface eth1 with the client mac address 00:50:79:66:68:00. Other DHCP discovery requests will be ignored, unless the client mac has been enabled in the configuration. @@ -85,12 +85,11 @@ the configuration. .. cfgcmd:: set service ipoe-server interface <interface> mode <l2 | l3> - Set authentication backend. The configured authentication backend is used - for all queries. + Specifies the client connectivity mode. * **l2**: It means that clients are on same network where interface is.**(default)** - * **local**: It means that client are behind some router. + * **l3**: It means that client are behind some router. .. cfgcmd:: set service ipoe-server interface <interface> network <shared | vlan> @@ -279,7 +278,7 @@ IPv6 .. code-block:: none set service ipoe-server client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set service ipoe-server client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set service ipoe-server client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set service ipoe-server default-ipv6-pool IPv6-POOL ********* @@ -434,7 +433,7 @@ Toubleshooting .. code-block:: none - vyos@vyos:~$sudo journalctl -u accel-ppp@ipoe -b 0 + vyos@vyos:~$ show log ipoe-server Feb 27 14:29:27 vyos accel-ipoe[2262]: eth1.100:: recv [DHCPv4 Discover xid=55df9228 chaddr=0c:98:bd:b8:00:01 <Message-Type Discover> <Request-IP 192.168.0.3> <Host-Name vyos> <Request-List Subnet,Broadcast,Router,DNS,Classless-Route,Domain-Name,MTU>] Feb 27 14:29:27 vyos accel-ipoe[2262]: eth1.100:eth1.100: eth1.100: authentication succeeded @@ -447,4 +446,4 @@ Toubleshooting .. include:: /_include/common-references.txt .. _dictionary: https://github.com/accel-ppp/accel-ppp/blob/master/accel-pppd/radius/dict/dictionary.rfc6911 -.. _`ACCEL-PPP attribute`: https://github.com/accel-ppp/accel-ppp/blob/master/accel-pppd/radius/dict/dictionary.accel
\ No newline at end of file +.. _`ACCEL-PPP attribute`: https://github.com/accel-ppp/accel-ppp/blob/master/accel-pppd/radius/dict/dictionary.accel diff --git a/docs/configuration/service/ntp.rst b/docs/configuration/service/ntp.rst index e7ee392b..266376cf 100644 --- a/docs/configuration/service/ntp.rst +++ b/docs/configuration/service/ntp.rst @@ -46,9 +46,9 @@ Configuration There are 3 default NTP server set. You are able to change them. - * ``0.pool.ntp.org`` - * ``1.pool.ntp.org`` - * ``2.pool.ntp.org`` + * ``time1.vyos.net`` + * ``time2.vyos.net`` + * ``time3.vyos.net`` .. cfgcmd:: set service ntp server <address> <noselect | nts | pool | prefer> @@ -85,7 +85,7 @@ Configuration .. cfgcmd:: set service ntp leap-second [ignore|smear|system|timezone] - Define how to handle leaf-seonds. + Define how to handle leap-seconds. * `ignore`: No correction is applied to the clock for the leap second. The clock will be corrected later in normal operation when new measurements are diff --git a/docs/configuration/service/pppoe-server.rst b/docs/configuration/service/pppoe-server.rst index 99b3fbb5..d9a16036 100644 --- a/docs/configuration/service/pppoe-server.rst +++ b/docs/configuration/service/pppoe-server.rst @@ -24,7 +24,6 @@ Configuring PPPoE Server set service pppoe-server authentication local-users username test password 'test' set service pppoe-server client-ip-pool PPPOE-POOL range 192.168.255.2-192.168.255.254 set service pppoe-server default-pool 'PPPOE-POOL' - set service pppoe-server outside-address 192.0.2.2 set service pppoe-server gateway-address 192.168.255.1 set service pppoe-server interface eth0 @@ -374,7 +373,7 @@ IPv6 set service pppoe-server ppp-options ipv6 allow set service pppoe-server client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set service pppoe-server client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set service pppoe-server client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set service pppoe-server default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/service/router-advert.rst b/docs/configuration/service/router-advert.rst index f179153a..8f984b10 100644 --- a/docs/configuration/service/router-advert.rst +++ b/docs/configuration/service/router-advert.rst @@ -13,6 +13,7 @@ Supported interface types: * bonding * bridge * ethernet + * geneve * l2tpv3 * openvpn * pseudo-ethernet @@ -22,9 +23,9 @@ Supported interface types: * wireless * wwan - -Enabling Advertisments -~~~~~~~~~~~~~~~~~~~~~~~ +************* +Configuration +************* .. cfgcmd:: set service router-advert interface <interface> ... @@ -37,7 +38,7 @@ Enabling Advertisments "Cur Hop Limit", "hop-limit", "Hop count field of the outgoing RA packets" """Managed address configuration"" flag", "managed-flag", "Tell hosts to use the administered stateful protocol (i.e. DHCP) for autoconfiguration" """Other configuration"" flag", "other-config-flag", "Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for autoconfiguration of other (non-address) information" - "MTU","link-mtu","Link MTU value placed in RAs, exluded in RAs if unset" + "MTU","link-mtu","Link MTU value placed in RAs, excluded in RAs if unset" "Router Lifetime","default-lifetime","Lifetime associated with the default router in units of seconds" "Reachable Time","reachable-time","Time, in milliseconds, that a node assumes a neighbor is reachable after having received a reachability confirmation" "Retransmit Timer","retrans-timer","Time in milliseconds between retransmitted Neighbor Solicitation messages" @@ -50,7 +51,7 @@ Enabling Advertisments Advertising a Prefix -'''''''''''''''''''' +-------------------- .. cfgcmd:: set service router-advert interface <interface> prefix <prefix/mask> @@ -73,30 +74,48 @@ Advertising a Prefix .. start_vyoslinter +Advertising a NAT64 Prefix +-------------------------- + +.. cfgcmd:: set service router-advert interface <interface> nat64prefix <prefix/mask> + + Enable PREF64 option as outlined in :rfc:`8781`. + + NAT64 prefix mask must be one of: /32, /40, /48, /56, /64 or 96. + + .. note:: The well known NAT64 prefix is ``64:ff9b::/96`` + +.. stop_vyoslinter + +.. csv-table:: + :header: "VyOS Field", "Description" + :widths: 10,30 + + "valid-lifetime","Time in seconds that the prefix will remain valid (default: 65528 seconds)" + +.. start_vyoslinter + Disabling Advertisements -~~~~~~~~~~~~~~~~~~~~~~~~ +------------------------ To disable advertisements without deleting the configuration: .. cfgcmd:: set service router-advert interface <interface> no-send-advert -Example Configuration -~~~~~~~~~~~~~~~~~~~~~ + +******* +Example +******* + +Your LAN connected on eth0 uses prefix ``2001:db8:beef:2::/64`` with the router +beeing ``2001:db8:beef:2::1`` .. code-block:: none - interface eth0.2 { - default-preference high - hop-limit 64 - interval { - max 600 - } - name-server 2001:db8::1 - name-server 2001:db8::2 - other-config-flag - prefix 2001:db8:beef:2::/64 { - valid-lifetime 2592000 - } - reachable-time 0 - retrans-timer 0 - } + set interfaces ethernet eth0 address 2001:db8:beef:2::1/64 + + set service router-advert interface eth0 default-preference 'high' + set service router-advert interface eth0 name-server '2001:db8::1' + set service router-advert interface eth0 name-server '2001:db8::2' + set service router-advert interface eth0 other-config-flag + set service router-advert interface eth0 prefix 2001:db8:beef:2::/64 diff --git a/docs/configuration/service/salt-minion.rst b/docs/configuration/service/salt-minion.rst index aa747c36..8638246b 100644 --- a/docs/configuration/service/salt-minion.rst +++ b/docs/configuration/service/salt-minion.rst @@ -17,7 +17,7 @@ Requirements ************ To use the Salt-Minion, a running Salt-Master is required. You can find more -in the `Salt Poject Documentaion +in the `Salt Project Documentation <https://docs.saltproject.io/en/latest/contents.html>`_ ************* diff --git a/docs/configuration/system/conntrack.rst b/docs/configuration/system/conntrack.rst index 6ed5fef7..1401e02e 100644 --- a/docs/configuration/system/conntrack.rst +++ b/docs/configuration/system/conntrack.rst @@ -94,7 +94,7 @@ states. .. cfgcmd:: set system conntrack timeout udp stream <1-21474836> :defaultvalue: - Set the timeout in secounds for a protocol or state. + Set the timeout in seconds for a protocol or state. You can also define custom timeout values to apply to a specific subset of connections, based on a packet and flow selector. To do this, you need to @@ -172,7 +172,7 @@ create a rule defining the packet and flow selector. .. cfgcmd:: set system conntrack timeout custom [ipv4 | ipv6] rule <1-999999> protocol udp unreplied <1-21474836> - Set the timeout in secounds for a protocol or state in a custom rule. + Set the timeout in seconds for a protocol or state in a custom rule. Conntrack ignore rules ====================== diff --git a/docs/configuration/system/flow-accounting.rst b/docs/configuration/system/flow-accounting.rst index 8d46b178..30d6fc4d 100644 --- a/docs/configuration/system/flow-accounting.rst +++ b/docs/configuration/system/flow-accounting.rst @@ -50,7 +50,7 @@ interface, the interface must be configured for flow accounting. Configure and enable collection of flow information for the interface identified by `<interface>`. - You can configure multiple interfaces which whould participate in flow + You can configure multiple interfaces which would participate in flow accounting. .. note:: Will be recorded only packets/flows on **incoming** direction in diff --git a/docs/configuration/system/host-name.rst b/docs/configuration/system/host-name.rst index d062fc62..4d1567bf 100644 --- a/docs/configuration/system/host-name.rst +++ b/docs/configuration/system/host-name.rst @@ -65,4 +65,4 @@ This section shows how to statically map an IP address to a hostname for local Thus the address configured as :cfgcmd:`set system static-host-mapping host-name <hostname> inet <address>` can be reached via multiple names. - Multiple aliases can pe specified per host-name. + Multiple aliases can be specified per host-name. diff --git a/docs/configuration/system/ip.rst b/docs/configuration/system/ip.rst index 279630e2..a422388f 100644 --- a/docs/configuration/system/ip.rst +++ b/docs/configuration/system/ip.rst @@ -30,7 +30,7 @@ System configuration commands Zebra/Kernel route filtering ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -Zebra supports prefix-lists and Route Mapss to match routes received from +Zebra supports prefix-lists and Route Maps to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel. @@ -48,7 +48,7 @@ Nexthop Tracking Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if -you do not wan't to e.g. allow BGP to peer across the default route. +you do not want to e.g. allow BGP to peer across the default route. .. cfgcmd:: set system ip nht no-resolve-via-default diff --git a/docs/configuration/system/ipv6.rst b/docs/configuration/system/ipv6.rst index d8d3c4c9..cde7a2aa 100644 --- a/docs/configuration/system/ipv6.rst +++ b/docs/configuration/system/ipv6.rst @@ -26,7 +26,7 @@ System configuration commands Zebra/Kernel route filtering ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -Zebra supports prefix-lists and Route Mapss to match routes received from +Zebra supports prefix-lists and Route Maps to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel. @@ -44,7 +44,7 @@ Nexthop Tracking Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if -you do not wan't to e.g. allow BGP to peer across the default route. +you do not want to e.g. allow BGP to peer across the default route. .. cfgcmd:: set system ipv6 nht no-resolve-via-default diff --git a/docs/configuration/system/option.rst b/docs/configuration/system/option.rst index 02c889dd..44c66186 100644 --- a/docs/configuration/system/option.rst +++ b/docs/configuration/system/option.rst @@ -88,7 +88,7 @@ Keyboard Layout *************** When starting a VyOS live system (the installation CD) the configured keyboard -layout defaults to US. As this might not suite everyones use case you can adjust +layout defaults to US. As this might not suite everyone's use case you can adjust the used keyboard layout on the system console. .. cfgcmd:: set system option keyboard-layout <us | fr | de | fi | no | dk> diff --git a/docs/configuration/system/sflow.rst b/docs/configuration/system/sflow.rst index c2cf5a80..0c8bf03b 100644 --- a/docs/configuration/system/sflow.rst +++ b/docs/configuration/system/sflow.rst @@ -29,7 +29,7 @@ Configuration Configure and enable collection of flow information for the interface identified by <interface>. - You can configure multiple interfaces which whould participate in sflow accounting. + You can configure multiple interfaces which would participate in sflow accounting. .. cfgcmd:: set system sflow polling <sec> diff --git a/docs/configuration/system/syslog.rst b/docs/configuration/system/syslog.rst index 8755d905..cc7ac676 100644 --- a/docs/configuration/system/syslog.rst +++ b/docs/configuration/system/syslog.rst @@ -45,7 +45,7 @@ Custom File .. cfgcmd:: set system syslog file <filename> archive file <number> - Syslog uses logrotate to rotate logiles after a number of gives bytes. + Syslog uses logrotate to rotate logfiles after a number of gives bytes. We keep as many as `<number>` rotated file before they are deleted on the system. @@ -200,7 +200,7 @@ Display Logs .. opcmd:: show log [all | authorization | cluster | conntrack-sync | ...] Display log files of given category on the console. Use tab completion to get - a list of available categories. Thos categories could be: all, authorization, + a list of available categories. Those categories could be: all, authorization, cluster, conntrack-sync, dhcp, directory, dns, file, firewall, https, image lldp, nat, openvpn, snmp, tail, vpn, vrrp diff --git a/docs/configuration/system/task-scheduler.rst b/docs/configuration/system/task-scheduler.rst index 382da39f..4a754ba3 100644 --- a/docs/configuration/system/task-scheduler.rst +++ b/docs/configuration/system/task-scheduler.rst @@ -7,7 +7,7 @@ Task Scheduler The task scheduler allows you to execute tasks on a given schedule. It makes use of UNIX cron_. -.. note:: All scripts excecuted this way are executed as root user - this may +.. note:: All scripts executed this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration. diff --git a/docs/configuration/trafficpolicy/index.rst b/docs/configuration/trafficpolicy/index.rst index 3463592f..f99c2a66 100644 --- a/docs/configuration/trafficpolicy/index.rst +++ b/docs/configuration/trafficpolicy/index.rst @@ -368,7 +368,7 @@ are to be sent, they could get dropped when trying to get enqueued at the tail. This can happen if the queue has still not been able to release enough packets from its head. -This is the policy that requieres the lowest resources for the same +This is the policy that requires the lowest resources for the same amount of traffic. But **very likely you do not need it as you cannot get much from it. Sometimes it is used just to enable logging.** @@ -504,7 +504,7 @@ and increase `interval` to something around 150 ms. the number of sub-queues (default: 1024) into which packets are classified. -.. cfgcmd:: set qos policy fq-codel <policy name> interval <miliseconds> +.. cfgcmd:: set qos policy fq-codel <policy name> interval <milliseconds> Use this command to configure an fq-codel policy, set its name and the time period used by the control loop of CoDel to detect when a @@ -518,7 +518,7 @@ and increase `interval` to something around 150 ms. define a hard limit on the real queue size. When this limit is reached, new packets are dropped (default: 10240 packets). -.. cfgcmd:: set qos policy fq-codel <policy-name> target <miliseconds> +.. cfgcmd:: set qos policy fq-codel <policy-name> target <milliseconds> Use this command to configure an fq-codel policy, set its name, and define the acceptable minimum standing/persistent queue delay. This @@ -710,7 +710,7 @@ continuously, packets from lower priority classes will only be transmitted after traffic volume from higher priority classes decreases. -.. note:: In Priority Queue we do not define clases with a meaningless +.. note:: In Priority Queue we do not define classes with a meaningless class ID number but with a class priority number (1-7). The lower the number, the higher the priority. @@ -912,7 +912,7 @@ In principle, values must be Rate Control ------------ -| **Queueing discipline:** Tocken Bucket Filter. +| **Queueing discipline:** Token Bucket Filter. | **Applies to:** Outbound traffic. Rate-Control is a classless policy that limits the packet flow to a set @@ -1145,6 +1145,74 @@ A simple example of Shaper using priorities. set qos policy shaper MY-HTB default priority '7' set qos policy shaper MY-HTB default queue-type 'fair-queue' +.. _CAKE: + +CAKE +------ + +| **Queueing discipline:** Deficit mode. +| **Applies to:** Outbound traffic. + +`Common Applications Kept Enhanced`_ (CAKE) is a comprehensive queue management +system, implemented as a queue discipline (qdisc) for the Linux kernel. It is +designed to replace and improve upon the complex hierarchy of simple qdiscs +presently required to effectively tackle the bufferbloat problem at the network +edge. + +.. cfgcmd:: set qos policy cake <text> bandwidth <value> + + Set the shaper bandwidth, either as an explicit bitrate or a percentage + of the interface bandwidth. + +.. cfgcmd:: set qos policy cake <text> description + + Set a description for the shaper. + +.. cfgcmd:: set qos policy cake <text> flow-isolation blind + + Disables flow isolation, all traffic passes through a single queue. + +.. cfgcmd:: set qos policy cake <text> flow-isolation dst-host + + Flows are defined only by destination address. + +.. cfgcmd:: set qos policy cake <text> flow-isolation dual-dst-host + + Flows are defined by the 5-tuple. Fairness is applied first over destination + addresses, then over individual flows. + +.. cfgcmd:: set qos policy cake <text> flow-isolation dual-src-host + + Flows are defined by the 5-tuple. Fairness is applied first over source + addresses, then over individual flows. + +.. cfgcmd:: set qos policy cake <text> flow-isolation flow + + Flows are defined by the entire 5-tuple (source IP address, source port, + destination IP address, destination port, transport protocol). + +.. cfgcmd:: set qos policy cake <text> flow-isolation host + + Flows are defined by source-destination host pairs. + +.. cfgcmd:: set qos policy cake <text> flow-isolation nat + + Perform NAT lookup before applying flow-isolation rules. + +.. cfgcmd:: set qos policy cake <text> flow-isolation src-host + + Flows are defined only by source address. + +.. cfgcmd:: set qos policy cake <text> flow-isolation triple-isolate + + **(Default)** Flows are defined by the 5-tuple, fairness is applied over source and + destination addresses and also over individual flows. + +.. cfgcmd:: set qos policy cake <text> rtt + + Defines the round-trip time used for active queue management (AQM) in + milliseconds. The default value is 100. + Applying a traffic policy ========================= @@ -1220,5 +1288,6 @@ That is how it is possible to do the so-called "ingress shaping". .. _tocken bucket: https://en.wikipedia.org/wiki/Token_bucket .. _HFSC: https://en.wikipedia.org/wiki/Hierarchical_fair-service_curve .. _Intermediate Functional Block: https://www.linuxfoundation.org/collaborate/workgroups/networking/ifb +.. _Common Applications Kept Enhanced: https://www.bufferbloat.net/projects/codel/wiki/Cake/ .. start_vyoslinter diff --git a/docs/configuration/vpn/l2tp.rst b/docs/configuration/vpn/l2tp.rst index f0c60ec1..b64c91a9 100644 --- a/docs/configuration/vpn/l2tp.rst +++ b/docs/configuration/vpn/l2tp.rst @@ -318,7 +318,7 @@ IPv6 set vpn l2tp remote-access ppp-options ipv6 allow set vpn l2tp remote-access client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set vpn l2tp remote-access client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set vpn l2tp remote-access client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set vpn l2tp remote-access default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/vpn/pptp.rst b/docs/configuration/vpn/pptp.rst index 2a5e7731..5220929f 100644 --- a/docs/configuration/vpn/pptp.rst +++ b/docs/configuration/vpn/pptp.rst @@ -242,7 +242,7 @@ IPv6 set vpn pptp remote-access ppp-options ipv6 allow set vpn pptp remote-access client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set vpn pptp remote-access client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set vpn pptp remote-access client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set vpn pptp remote-access default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/vpn/sstp.rst b/docs/configuration/vpn/sstp.rst index 3749eb7b..cc942ee5 100644 --- a/docs/configuration/vpn/sstp.rst +++ b/docs/configuration/vpn/sstp.rst @@ -276,7 +276,7 @@ IPv6 set vpn sstp ppp-options ipv6 allow set vpn sstp client-ipv6-pool IPv6-POOL delegate '2001:db8:8003::/48' delegation-prefix '56' - set vpn sstp client-ipv6-pool IPV6-POOL prefix '2001:db8:8002::/48' mask '64' + set vpn sstp client-ipv6-pool IPv6-POOL prefix '2001:db8:8002::/48' mask '64' set vpn sstp default-ipv6-pool IPv6-POOL IPv6 Advanced Options diff --git a/docs/configuration/vrf/index.rst b/docs/configuration/vrf/index.rst index 67eba886..0d6b895f 100644 --- a/docs/configuration/vrf/index.rst +++ b/docs/configuration/vrf/index.rst @@ -43,7 +43,7 @@ then enslaved to a VRF device. Zebra/Kernel route filtering ---------------------------- -Zebra supports prefix-lists and Route Mapss to match routes received from +Zebra supports prefix-lists and Route Maps to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel. @@ -72,7 +72,7 @@ Nexthop Tracking Nexthop tracking resolve nexthops via the default route by default. This is enabled by default for a traditional profile of FRR which we use. It and can be disabled if -you do not wan't to e.g. allow BGP to peer across the default route. +you do not want to e.g. allow BGP to peer across the default route. .. cfgcmd:: set vrf name <name> ip nht no-resolve-via-default diff --git a/docs/contributing/issues-features.rst b/docs/contributing/issues-features.rst index 9b6602f9..e57766fc 100644 --- a/docs/contributing/issues-features.rst +++ b/docs/contributing/issues-features.rst @@ -28,27 +28,31 @@ issue prior to opening a bug request. Ensure the problem is reproducible ---------------------------------- -When you are able to verify that it is actually a bug, spend some time to -document how to reproduce the issue. This documentation can be invaluable. - -When you wish to have a developer fix a bug that you found, helping them -reproduce the issue is beneficial to everyone. Be sure to include information -about the hardware you are using, commands that you were running, any other -activities that you may have been doing at the time. This additional -information can be very useful. - -* What were you attempting to achieve? -* What was the configuration prior to the change? -* What commands did you use? Use e.g. ``run show configuration commands`` - -Include output --------------- - -The output you get when you find a bug can provide lots of information. If you -get an error message on the screen, copy it exactly. Having the exact message -can provide detail that the developers can use. Like wise if you have any log -messages that also are from the time of the issue, include those. They may -also contain information that is helpful for the development team. +You should include the following information: + +* A sequence of configuration commands or a complete configuration file + required to recreate a setup where the bug occurs. + Please avoid partial configs: a sequence of commands is easy to paste into the console, + a complete config is easy to load in a VM, but a partial config is neither! + At least not until we implement a "merge from the CLI" + feature that allows pasting config file chunks into a session. +* The behavior you expect and how it's different from the behavior you observe. + Don't just include command outputs or traffic dumps — + try to explain at least briefly why they are wrong and what they should be. +* A sequence of actions that triggers the bug. + We understand that it's not always possible, but it makes developer's job a lot easier + and also allows any community member to independently confirm + that the bug still exists or if it's already fixed. +* If it's a regression, tell us a VyOS version where the feature still worked correctly. + It's perfect if you can tell exactly which version broke it, + but we understand that it's not always easy or feasible — any working version is acceptable. + +If you aren't certain what the correct behavior is and if what you see is really a bug, +or if you don't have a reproducing procedure that reliably triggers it, +please create a post on the forum or ask in the chat first — +or, if you have a subscription, create a support ticket. +Our team and community members can help you identify the bug and work around it, +then create an actionable and testable bug report. Report a Bug ------------ @@ -64,15 +68,66 @@ request. .. _feature_request: -Feature Request -=============== +Feature Requests +================ You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request -please search Phabricator_ if there is already a request pending. You can +please search Phabricator_ to check if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project. +You must create a task before you start working on a feature. +Yes, even if it's a tiny feature — we use the task tracker to generate release notes, +so it's essential that everything is reflected there. + +You must include at least the following: + +* A reasonably detailed description of the feature: what it is, how it's supposed to work, + and how you'd use it. + The maintainers aren't familiar with every feature of every protocol and tool, + and community contributors who are looking for tasks to work on will also + appreciate more information that helps them implement and test a feature. +* Proposed CLI syntax, if the feature requires new commands. + Please include both configuration and operational mode commands, if both are required. + +You should include the following information: + +* Is the feature supported by the underlying component + (FreeRangeRouting, nftables, Kea...) already? +* How you'd configure it by hand there? +* Are there any limitations (hardware support, resource usage)? +* Are there any adverse or non-obvious interactions with other features? + Should it be mutually exclusive with anything? + +It's fine if you cannot provide some of that information, but if you can, +it makes the work of developers considerably simpler, +so try to do the research to answer those questions. + +Task auto-closing +================= + +There is a special status for tasks +where all work on the side of maintainers and contributors is complete: +"Needs reporter action". + +We assign that status to: + +* Feature requests that do not include required information and need clarification. +* Bug reports that lack reproducing procedures. +* Tasks that are implemented and tested by the implementation author, + but require testing in the real-world environment that only the reporter can replicate + (e.g., hardware we do not have, specific network conditions...). + +This is what will happen when a task is set to "Needs reporter action": + +* If there is no response from the reporter within two weeks, + the task bot will add a comment ("Any news?") to remind the reporter to reply. +* If there is no response after further two weeks, the task will be automatically closed. + +We will not auto-close tasks with any other status +and will not close tasks for the lack of maintainer activity! + .. _documentation: https://docs.vyos.io .. _Slack: https://slack.vyos.io .. _Forum: https://forum.vyos.io diff --git a/docs/contributing/testing.rst b/docs/contributing/testing.rst index 78860c06..f5d3db52 100644 --- a/docs/contributing/testing.rst +++ b/docs/contributing/testing.rst @@ -57,6 +57,9 @@ The script only searches for executable "test-cases" under .. note:: As Smoketests will alter the system configuration and you are logged in remote you may loose your connection to the system. +.. note:: To enable smoketest debugging (print of the CLI set commands used) + you can run: ``touch /tmp/vyos.smoketest.debug``. + Manual Smoketest Run -------------------- diff --git a/docs/documentation.rst b/docs/documentation.rst index 61487f57..79365c0d 100644 --- a/docs/documentation.rst +++ b/docs/documentation.rst @@ -442,19 +442,19 @@ access to the official codebase. .. code-block:: none $ git fetch upstream - $ git checkout master - $ git merge upstream/master + $ git checkout current + $ git merge upstream/current * If you also want to update your fork on GitHub, use the following: ``$ git - push origin master`` + push origin current`` .. stop_vyoslinter .. _Sphinx-doc: https://www.sphinx-doc.org .. _reStructuredText: http://www.sphinx-doc.org/en/master/usage/restructuredtext/index.html .. _reStructuredTextDirectives: https://docutils.sourceforge.io/docs/ref/rst/directives.html -.. _README.md: https://github.com/vyos/vyos-documentation/blob/master/README.md -.. _Dockerfile: https://github.com/vyos/vyos-documentation/blob/master/docker/Dockerfile +.. _README.md: https://github.com/vyos/vyos-documentation/blob/current/README.md +.. _Dockerfile: https://github.com/vyos/vyos-documentation/blob/current/docker/Dockerfile .. _Grammarly: https://www.grammarly.com/ .. include:: /_include/common-references.txt diff --git a/docs/operation/raid.rst b/docs/operation/raid.rst index 30407718..642a7332 100644 --- a/docs/operation/raid.rst +++ b/docs/operation/raid.rst @@ -24,7 +24,7 @@ The VyOS implementation of RAID 1 allows the following: * The ability to replace a failed disk and initiate re-mirroring * The ability to monitor the status of remirroring -.. _raid_instalation: +.. _raid_installation: Installation Implications ========================= |
