diff options
Diffstat (limited to 'docs/_include/interface-ip.txt')
| -rw-r--r-- | docs/_include/interface-ip.txt | 72 |
1 files changed, 55 insertions, 17 deletions
diff --git a/docs/_include/interface-ip.txt b/docs/_include/interface-ip.txt index 6359aceb..2b8e9a00 100644 --- a/docs/_include/interface-ip.txt +++ b/docs/_include/interface-ip.txt @@ -1,4 +1,7 @@ -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip adjust-mss <mss | clamp-mss-to-pmtu> As Internet wide PMTU discovery rarely works, we sometimes need to clamp our @@ -6,16 +9,23 @@ a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'. - .. note:: This command was introduced in VyOS 1.4 - it was previously called: - ``set firewall options interface <name> adjust-mss <value>`` + :::{note} + This command was introduced in VyOS 1.4 - it was previously called: - .. hint:: MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in - 1452 bytes on a 1492 byte MTU. + ``set firewall options interface <name> adjust-mss <value>`` + ::: + :::{hint} + MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in + 1452 bytes on a 1492 byte MTU. + ::: Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to automatically set the proper value. -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip arp-cache-timeout Once a neighbor has been found, the entry is considered to be valid for at @@ -30,7 +40,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip arp-cache-timeout 180 -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip disable-arp-filter If set the kernel can respond to arp requests with addresses from other @@ -53,7 +66,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip disable-arp-filter -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip disable-forwarding Configure interface-specific Host/Router behaviour. If set, the interface will @@ -63,7 +79,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip disable-forwarding -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip enable-directed-broadcast Define different modes for IP directed broadcast forwarding as described in @@ -79,7 +98,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-directed-broadcast -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip enable-arp-accept Define behavior for gratuitous ARP frames who's IP is not already present in @@ -95,7 +117,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-arp-accept -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip enable-arp-announce Define different restriction levels for announcing the local source IP address @@ -115,7 +140,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-arp-announce -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip enable-arp-ignore Define different modes for sending replies in response to received ARP @@ -131,7 +159,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-arp-ignore -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip enable-proxy-arp Use this command to enable proxy Address Resolution Protocol (ARP) on this @@ -147,7 +178,10 @@ set interfaces {{ var0 }} {{ var1 }} {{ var2 }} {{ var4 }} {{ var5 }} {{ var7 }} ip enable-proxy-arp -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip proxy-arp-pvlan Private VLAN proxy arp. Basically allow proxy arp replies back to the same @@ -159,8 +193,9 @@ possible to allow these hosts to communicate through the upstream router by proxy_arp'ing. - .. note:: Does not need to be used together with proxy_arp. - + :::{note} + Does not need to be used together with proxy_arp. + ::: This technology is known by different names: - In :rfc:`3069` it is called VLAN Aggregation @@ -171,7 +206,10 @@ - Ericsson call it MAC-Forced Forwarding (RFC Draft) -.. cfgcmd:: set interfaces {{ var0 }} <interface> {{ var2 }} {{ var3 }} +::::{cfgcmd} set interfaces {{ var0 }} \<interface\> {{ var2 }} {{ var3 }} + +:::: + {{ var5 }} {{ var6 }} ip source-validation <strict | loose | disable> Enable policy for source validation by reversed path, as specified in |