From a11428c495ebd75eb7351f2e3becaad915c9d3cc Mon Sep 17 00:00:00 2001 From: rebortg Date: Mon, 15 Jan 2024 06:02:35 +0000 Subject: Github: update translations --- docs/_locale/de/404.pot | 8 + docs/_locale/de/LC_MESSAGES/404.mo | Bin 984 -> 1252 bytes docs/_locale/de/LC_MESSAGES/automation.mo | Bin 35418 -> 37840 bytes docs/_locale/de/LC_MESSAGES/cli.mo | Bin 29208 -> 30414 bytes docs/_locale/de/LC_MESSAGES/configexamples.mo | Bin 123543 -> 127575 bytes docs/_locale/de/LC_MESSAGES/configuration.mo | Bin 1067443 -> 1148357 bytes docs/_locale/de/LC_MESSAGES/contributing.mo | Bin 109457 -> 111651 bytes docs/_locale/de/LC_MESSAGES/installation.mo | Bin 102022 -> 102388 bytes docs/_locale/de/LC_MESSAGES/quick-start.mo | Bin 19890 -> 22278 bytes docs/_locale/de/automation.pot | 130 +- docs/_locale/de/cli.pot | 48 +- docs/_locale/de/configexamples.pot | 194 +- docs/_locale/de/configuration.pot | 5713 +++++++++++-------------- docs/_locale/de/contributing.pot | 288 +- docs/_locale/de/index.pot | 30 +- docs/_locale/de/installation.pot | 114 +- docs/_locale/de/quick-start.pot | 110 +- 17 files changed, 3037 insertions(+), 3598 deletions(-) (limited to 'docs/_locale/de') diff --git a/docs/_locale/de/404.pot b/docs/_locale/de/404.pot index 7ef03f50..57b3b68d 100644 --- a/docs/_locale/de/404.pot +++ b/docs/_locale/de/404.pot @@ -24,6 +24,14 @@ msgstr "`1.2.x (crux) `_" msgid "`1.3.x (equuleus) `_" msgstr "`1.3.x (equuleus) `_" +#: ../../404.rst:11 +msgid "`1.4.x (sagitta) `_" +msgstr "`1.4.x (sagitta) `_" + +#: ../../404.rst:12 +msgid "`rolling release (circinus) `_" +msgstr "`rolling release (circinus) `_" + #: ../../404.rst:11 msgid "`rolling release (sagitta) `_" msgstr "`Rolling Release (Sagitta) `_" diff --git a/docs/_locale/de/LC_MESSAGES/404.mo b/docs/_locale/de/LC_MESSAGES/404.mo index 5cfb6e0c..e992b14f 100644 Binary files a/docs/_locale/de/LC_MESSAGES/404.mo and b/docs/_locale/de/LC_MESSAGES/404.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/automation.mo b/docs/_locale/de/LC_MESSAGES/automation.mo index 0c571a2e..cb431fe9 100644 Binary files a/docs/_locale/de/LC_MESSAGES/automation.mo and b/docs/_locale/de/LC_MESSAGES/automation.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/cli.mo b/docs/_locale/de/LC_MESSAGES/cli.mo index efb26dae..1722898e 100644 Binary files a/docs/_locale/de/LC_MESSAGES/cli.mo and b/docs/_locale/de/LC_MESSAGES/cli.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/configexamples.mo b/docs/_locale/de/LC_MESSAGES/configexamples.mo index 44d8467f..4c237a80 100644 Binary files a/docs/_locale/de/LC_MESSAGES/configexamples.mo and b/docs/_locale/de/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/configuration.mo b/docs/_locale/de/LC_MESSAGES/configuration.mo index 0bbe8f6c..5d09f4b5 100644 Binary files a/docs/_locale/de/LC_MESSAGES/configuration.mo and b/docs/_locale/de/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/contributing.mo b/docs/_locale/de/LC_MESSAGES/contributing.mo index 98e048cc..affcbb27 100644 Binary files a/docs/_locale/de/LC_MESSAGES/contributing.mo and b/docs/_locale/de/LC_MESSAGES/contributing.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/installation.mo b/docs/_locale/de/LC_MESSAGES/installation.mo index e3d86879..d04f2532 100644 Binary files a/docs/_locale/de/LC_MESSAGES/installation.mo and b/docs/_locale/de/LC_MESSAGES/installation.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/quick-start.mo b/docs/_locale/de/LC_MESSAGES/quick-start.mo index 6988da10..c14e354d 100644 Binary files a/docs/_locale/de/LC_MESSAGES/quick-start.mo and b/docs/_locale/de/LC_MESSAGES/quick-start.mo differ diff --git a/docs/_locale/de/automation.pot b/docs/_locale/de/automation.pot index 6d0be2c4..efd67b47 100644 --- a/docs/_locale/de/automation.pot +++ b/docs/_locale/de/automation.pot @@ -32,22 +32,30 @@ msgstr "**user-data**: includes vyos-commands." msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" msgstr "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" -#: ../../automation/vyos-api.rst:285 +#: ../../automation/vyos-api.rst:322 msgid "/config-file" msgstr "/config-file" -#: ../../automation/vyos-api.rst:228 +#: ../../automation/vyos-api.rst:265 msgid "/configure" msgstr "/configure" -#: ../../automation/vyos-api.rst:209 +#: ../../automation/vyos-api.rst:246 msgid "/generate" msgstr "/generate" -#: ../../automation/vyos-api.rst:147 +#: ../../automation/vyos-api.rst:184 msgid "/image" msgstr "/image" +#: ../../automation/vyos-api.rst:165 +msgid "/poweroff" +msgstr "/poweroff" + +#: ../../automation/vyos-api.rst:147 +msgid "/reboot" +msgstr "/reboot" + #: ../../automation/vyos-api.rst:129 msgid "/reset" msgstr "/reset" @@ -56,7 +64,7 @@ msgstr "/reset" msgid "/retrieve" msgstr "/retrieve" -#: ../../automation/vyos-api.rst:185 +#: ../../automation/vyos-api.rst:222 msgid "/show" msgstr "/show" @@ -178,6 +186,34 @@ msgstr "Configuration" msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" msgstr "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" +#: ../../automation/vyos-pyvyos.rst:94 +msgid "Configure, then Delete Object" +msgstr "Configure, then Delete Object" + +#: ../../automation/vyos-pyvyos.rst:141 +msgid "Configure, then Load File" +msgstr "Configure, then Load File" + +#: ../../automation/vyos-pyvyos.rst:101 +msgid "Configure, then Save" +msgstr "Configure, then Save" + +#: ../../automation/vyos-pyvyos.rst:108 +msgid "Configure, then Save File" +msgstr "Configure, then Save File" + +#: ../../automation/vyos-pyvyos.rst:68 +msgid "Configure, then Set" +msgstr "Configure, then Set" + +#: ../../automation/vyos-pyvyos.rst:85 +msgid "Configure, then Show Object" +msgstr "Configure, then Show Object" + +#: ../../automation/vyos-pyvyos.rst:77 +msgid "Configure, then Show a Single Object Value" +msgstr "Configure, then Show a Single Object Value" + #: ../../automation/vyos-napalm.rst:89 msgid "Content of commands.conf" msgstr "Content of commands.conf" @@ -258,7 +294,7 @@ msgstr "For configuration and enabling the API see :ref:`http-api`" msgid "For example, get the addresses of a ``dum0`` interface." msgstr "For example, get the addresses of a ``dum0`` interface." -#: ../../automation/vyos-api.rst:189 +#: ../../automation/vyos-api.rst:226 msgid "For example, show which images are installed." msgstr "For example, show which images are installed." @@ -270,10 +306,18 @@ msgstr "For more information on the NoCloud data source, visit its `page :@/``" msgstr "``ftp://:@/``" +#: ../../cli.rst:870 +msgid "``git+https://:@/``" +msgstr "``git+https://:@/``" + +#: ../../cli.rst:864 +msgid "``http://:@:/``" +msgstr "``http://:@:/``" + +#: ../../cli.rst:865 +msgid "``https://:@:/``" +msgstr "``https://:@:/``" + #: ../../cli.rst:71 msgid "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size." msgstr "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size." @@ -416,11 +436,11 @@ msgstr "``q`` key can be used to cancel output" msgid "``return`` will scroll down one line" msgstr "``return`` will scroll down one line" -#: ../../cli.rst:864 +#: ../../cli.rst:868 msgid "``scp://:@:/``" msgstr "``scp://:@:/``" -#: ../../cli.rst:865 +#: ../../cli.rst:867 msgid "``sftp://:@/``" msgstr "``sftp://:@/``" @@ -428,7 +448,7 @@ msgstr "``sftp://:@/``" msgid "``space`` will scroll down one page" msgstr "``space`` will scroll down one page" -#: ../../cli.rst:867 +#: ../../cli.rst:869 msgid "``tftp:///``" msgstr "``tftp:///``" diff --git a/docs/_locale/de/configexamples.pot b/docs/_locale/de/configexamples.pot index 22c08587..d7dd346f 100644 --- a/docs/_locale/de/configexamples.pot +++ b/docs/_locale/de/configexamples.pot @@ -210,22 +210,18 @@ msgstr "4 x Provider routers (VyOS-Px)" msgid "50: Upstream, using the 192.0.2.0/24 network allocated by them." msgstr "50: Upstream, using the 192.0.2.0/24 network allocated by them." -#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 msgid "64496:1" msgstr "64496:1" -#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108 msgid "64496:100" msgstr "64496:100" -#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104 msgid "64496:2" msgstr "64496:2" -#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106 msgid "64496:50" msgstr "64496:50" @@ -276,7 +272,7 @@ msgstr "A brief excursion into VRFs: This has been one of the longest-standing f msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." msgstr "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." -#: ../../configexamples/index.rst:35 +#: ../../configexamples/index.rst:37 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." msgstr "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." @@ -322,10 +318,22 @@ msgstr "Active Directory on Windows server" msgid "Add (temporary) default route" msgstr "Add (temporary) default route" +#: ../../configexamples/ansible.rst:73 +msgid "Add all the hosts of VyOS:" +msgstr "Add all the hosts of VyOS:" + +#: ../../configexamples/ansible.rst:85 +msgid "Add general variables:" +msgstr "Add general variables:" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:47 msgid "Add the LDAP plugin configuration file `/config/auth/ldap-auth.config`" msgstr "Add the LDAP plugin configuration file `/config/auth/ldap-auth.config`" +#: ../../configexamples/ansible.rst:99 +msgid "Add the simple playbook with the tasks for each router:" +msgstr "Add the simple playbook with the tasks for each router:" + #: ../../configexamples/wan-load-balancing.rst:167 msgid "Adding a rule for the second interface" msgstr "Adding a rule for the second interface" @@ -426,11 +434,15 @@ msgstr "And show all DHCP Leases" msgid "And the ``client`` to receive an IPv6 address with stateless autoconfig." msgstr "And the ``client`` to receive an IPv6 address with stateless autoconfig." -#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:None -#: ../../configexamples/autotest/Wireguard/Wireguard.rst:None +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:-1 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:-1 msgid "Ansible Example topology image" msgstr "Ansible Example topology image" +#: ../../configexamples/ansible.rst:7 +msgid "Ansible example" +msgstr "Ansible example" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:10 msgid "Any information related to a VRF is not exchanged between devices -or in the same device- by default, this is a technique called **VRF-Lite**." msgstr "Any information related to a VRF is not exchanged between devices -or in the same device- by default, this is a technique called **VRF-Lite**." @@ -559,6 +571,10 @@ msgstr "Basic Firewall" msgid "Basic Setup (via console)" msgstr "Basic Setup (via console)" +#: ../../configexamples/ansible.rst:64 +msgid "Basik configuration of the ansible.cfg:" +msgstr "Basik configuration of the ansible.cfg:" + #: ../../configexamples/qos.rst:74 msgid "Before the interface eth0 on router VyOS3" msgstr "Before the interface eth0 on router VyOS3" @@ -611,6 +627,14 @@ msgstr "Check the result" msgid "Check the result." msgstr "Check the result." +#: ../../configexamples/ansible.rst:142 +msgid "Check the result on the vyos10 router:" +msgstr "Check the result on the vyos10 router:" + +#: ../../configexamples/ansible.rst:51 +msgid "Check the version:" +msgstr "Check the version:" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:164 msgid "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." msgstr "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." @@ -619,6 +643,10 @@ msgstr "Checking the routing table of the VRF should reveal both static and conn msgid "Checking through op-mode commands" msgstr "Checking through op-mode commands" +#: ../../configexamples/site-2-site-cisco.rst:71 +msgid "Cisco" +msgstr "Cisco" + #: ../../configexamples/ha.rst:90 msgid "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" msgstr "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" @@ -652,6 +680,7 @@ msgstr "Conclusions" #: ../../configexamples/ospf-unnumbered.rst:12 #: ../../configexamples/policy-based-ipsec-and-firewall.rst:47 #: ../../configexamples/segment-routing-isis.rst:24 +#: ../../configexamples/site-2-site-cisco.rst:18 msgid "Configuration" msgstr "Configuration" @@ -675,7 +704,7 @@ msgstr "Configuration 'dcsp' and shaper using QoS" msgid "Configuration Blueprints" msgstr "Configuration Blueprints" -#: ../../configexamples/index.rst:28 +#: ../../configexamples/index.rst:30 msgid "Configuration Blueprints (autotest)" msgstr "Configuration Blueprints (autotest)" @@ -856,7 +885,7 @@ msgstr "Dynamic routing used between CE and PE nodes and eBGP peering establishe msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." msgstr "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." -#: ../../configexamples/index.rst:32 +#: ../../configexamples/index.rst:34 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." msgstr "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." @@ -962,6 +991,10 @@ msgstr "First a CA, a signed server and client ceftificate and a Diffie-Hellman msgid "First prepare our VyOS router for connection to NMP. We have to set up the SNMP protocol and connectivity between the router and NMP." msgstr "First prepare our VyOS router for connection to NMP. We have to set up the SNMP protocol and connectivity between the router and NMP." +#: ../../configexamples/site-2-site-cisco.rst:9 +msgid "FlexVPN is a newer \"solution\" for deployment of VPNs and it utilizes IKEv2 as the key exchange protocol. The result is a flexible and scalable VPN solution that can be easily adapted to fit various network needs. It can also support a variety of encryption methods, including AES and 3DES." +msgstr "FlexVPN is a newer \"solution\" for deployment of VPNs and it utilizes IKEv2 as the key exchange protocol. The result is a flexible and scalable VPN solution that can be easily adapted to fit various network needs. It can also support a variety of encryption methods, including AES and 3DES." + #: ../../configexamples/ha.rst:60 msgid "For connection between sites, we are running a WireGuard link to two REMOTE routers and using OSPF over those links to distribute routes. That remote site is expected to send traffic from anything in 10.201.0.0/16" msgstr "For connection between sites, we are running a WireGuard link to two REMOTE routers and using OSPF over those links to distribute routes. That remote site is expected to send traffic from anything in 10.201.0.0/16" @@ -998,6 +1031,10 @@ msgstr "From Management to Outside (fails as intended)" msgid "Full configuration from all devices" msgstr "Full configuration from all devices" +#: ../../configexamples/site-2-site-cisco.rst:23 +msgid "GRE:" +msgstr "GRE:" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:19 msgid "General information about L3VPNs can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." msgstr "General information about L3VPNs can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." @@ -1062,6 +1099,10 @@ msgstr "IPSec configuration:" msgid "IP Schema" msgstr "IP Schema" +#: ../../configexamples/site-2-site-cisco.rst:34 +msgid "IPsec:" +msgstr "IPsec:" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 msgid "IPv4 Network" msgstr "IPv4 Network" @@ -1171,6 +1212,10 @@ msgstr "In the end, you'll get a powerful instrument for monitoring the VyOS sys msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." +#: ../../configexamples/ansible.rst:216 +msgid "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." +msgstr "In the next chapter of the example, we'll use the Ansible with jinja2 templates and variables." + #: ../../configexamples/ha.rst:154 msgid "In this case, the hardware router has a different IP, so it would be" msgstr "In this case, the hardware router has a different IP, so it would be" @@ -1191,6 +1236,10 @@ msgstr "In this document, we have been allocated 203.0.113.0/24 by our upstream msgid "In this example, eth0 is the primary interface and eth1 is the secondary interface. To provide simple failover functionality. If eth0 fails, eth1 takes over." msgstr "In this example, eth0 is the primary interface and eth1 is the secondary interface. To provide simple failover functionality. If eth0 fails, eth1 takes over." +#: ../../configexamples/ansible.rst:12 +msgid "In this example, we will set up a simple use of Ansible to configure multiple VyoS routers. We have four pre-configured routers with this configuration:" +msgstr "In this example, we will set up a simple use of Ansible to configure multiple VyoS routers. We have four pre-configured routers with this configuration:" + #: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:42 msgid "In this example OpenVPN will be setup with a client certificate and username / password authentication." msgstr "In this example OpenVPN will be setup with a client certificate and username / password authentication." @@ -1215,6 +1264,14 @@ msgstr "Information about Ethernet Virtual Private Networks" msgid "Information about prefix-sid and label-operation from VyOS" msgstr "Information about prefix-sid and label-operation from VyOS" +#: ../../configexamples/ansible.rst:37 +msgid "Install the Ansible:" +msgstr "Install the Ansible:" + +#: ../../configexamples/ansible.rst:44 +msgid "Install the paramiko:" +msgstr "Install the paramiko:" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:3 msgid "Inter-VRF Routing over VRF Lite" msgstr "Inter-VRF Routing over VRF Lite" @@ -1276,7 +1333,7 @@ msgstr "Keep networks isolated is -in general- a good principle, but there are c msgid "L3VPN EVPN with VyOS" msgstr "L3VPN EVPN with VyOS" -#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:None +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:-1 msgid "L3VPN EVPN with VyOS topology image" msgstr "L3VPN EVPN with VyOS topology image" @@ -1403,29 +1460,14 @@ msgstr "Network Cabling" msgid "Network Topology" msgstr "Network Topology" -#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:None -#: ../../configexamples/l3vpn-hub-and-spoke.rst:None -#: ../../configexamples/nmp.rst:None -#: ../../configexamples/nmp.rst:None -#: ../../configexamples/nmp.rst:None -#: ../../configexamples/nmp.rst:None -#: ../../configexamples/nmp.rst:None -#: ../../configexamples/nmp.rst:None -#: ../../configexamples/nmp.rst:None -#: ../../configexamples/pppoe-ipv6-basic.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/qos.rst:None -#: ../../configexamples/wan-load-balancing.rst:None -#: ../../configexamples/wan-load-balancing.rst:None -#: ../../configexamples/zone-policy.rst:None +#: ../../configexamples/ansible.rst:-1 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:-1 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:-1 +#: ../../configexamples/nmp.rst:-1 +#: ../../configexamples/pppoe-ipv6-basic.rst:-1 +#: ../../configexamples/qos.rst:-1 +#: ../../configexamples/wan-load-balancing.rst:-1 +#: ../../configexamples/zone-policy.rst:-1 msgid "Network Topology Diagram" msgstr "Network Topology Diagram" @@ -1457,7 +1499,7 @@ msgstr "Node" msgid "Note that router1 is a VM that runs on one of the compute nodes." msgstr "Note that router1 is a VM that runs on one of the compute nodes." -#: ../../configexamples/pppoe-ipv6-basic.rst:111 +#: ../../configexamples/pppoe-ipv6-basic.rst:115 msgid "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." msgstr "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." @@ -1554,7 +1596,7 @@ msgstr "One cable/logical connection between LAN2 and Management" msgid "OpenVPN with LDAP" msgstr "OpenVPN with LDAP" -#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:None +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:-1 msgid "OpenVPN with LDAP topology image" msgstr "OpenVPN with LDAP topology image" @@ -1793,6 +1835,10 @@ msgstr "Sets your LAN interface's IP address" msgid "Setting BGP global local-as as well inside the VRF. Redistribute static routes to inject configured networks into the BGP process but still inside the VRF." msgstr "Setting BGP global local-as as well inside the VRF. Redistribute static routes to inject configured networks into the BGP process but still inside the VRF." +#: ../../configexamples/ansible.rst:10 +msgid "Setting up Ansible on a server running the Debian operating system." +msgstr "Setting up Ansible on a server running the Debian operating system." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:51 msgid "Setup the ipv6 default route to the tunnel interface" msgstr "Setup the ipv6 default route to the tunnel interface" @@ -1809,6 +1855,10 @@ msgstr "Similarly, to attach the firewall, you would use `set interfaces etherne msgid "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." msgstr "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." +#: ../../configexamples/site-2-site-cisco.rst:128 +msgid "Since the tunnel is a point-to-point GRE tunnel, it behaves like any other point-to-point interface (for example: serial, dialer), and it is possible to run any Interior Gateway Protocol (IGP)/Exterior Gateway Protocol (EGP) over the link in order to exchange routing information" +msgstr "Since the tunnel is a point-to-point GRE tunnel, it behaves like any other point-to-point interface (for example: serial, dialer), and it is possible to run any Interior Gateway Protocol (IGP)/Exterior Gateway Protocol (EGP) over the link in order to exchange routing information" + #: ../../configexamples/zone-policy.rst:236 msgid "Since we have 4 zones, we need to setup the following rulesets." msgstr "Since we have 4 zones, we need to setup the following rulesets." @@ -1821,6 +1871,10 @@ msgstr "Single LAN Setup" msgid "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker Routed /64 prefix:" msgstr "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker Routed /64 prefix:" +#: ../../configexamples/site-2-site-cisco.rst:4 +msgid "Site-to-Site IPSec VPN to Cisco using FlexVPN" +msgstr "Site-to-Site IPSec VPN to Cisco using FlexVPN" + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:179 msgid "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" msgstr "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" @@ -1838,6 +1892,10 @@ msgstr "Spoke" msgid "Start by setting the interface and default action for each zone." msgstr "Start by setting the interface and default action for each zone." +#: ../../configexamples/ansible.rst:122 +msgid "Start the playbook:" +msgstr "Start the playbook:" + #: ../../configexamples/zone-policy.rst:8 msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." @@ -1909,6 +1967,11 @@ msgstr "Testdate: 2023-05-11" msgid "Testdate: 2023-08-31" msgstr "Testdate: 2023-08-31" +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:6 +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:7 +msgid "Testdate: 2024-01-13" +msgstr "Testdate: 2024-01-13" + #: ../../configexamples/ha.rst:276 #: ../../configexamples/ha.rst:337 msgid "Testing" @@ -1979,7 +2042,11 @@ msgstr "The format of these addresses:" msgid "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." msgstr "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." -#: ../../configexamples/index.rst:30 +#: ../../configexamples/site-2-site-cisco.rst:14 +msgid "The lab was built using EVE-NG." +msgstr "The lab was built using EVE-NG." + +#: ../../configexamples/index.rst:32 msgid "The next pages contains automatic full tested configuration examples." msgstr "The next pages contains automatic full tested configuration examples." @@ -1987,7 +2054,7 @@ msgstr "The next pages contains automatic full tested configuration examples." msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." msgstr "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." -#: ../../configexamples/index.rst:38 +#: ../../configexamples/index.rst:40 msgid "The process will do the following steps:" msgstr "The process will do the following steps:" @@ -1999,6 +2066,10 @@ msgstr "The scope of this document is to cover such cases in a dynamic way witho msgid "The setup used in this example is shown in the following diagram:" msgstr "The setup used in this example is shown in the following diagram:" +#: ../../configexamples/ansible.rst:161 +msgid "The simple way without configuration of the hostname (one task for all routers):" +msgstr "The simple way without configuration of the hostname (one task for all routers):" + #: ../../configexamples/ha.rst:339 msgid "The simplest way to test is to look at the connection tracking stats on the standby hardware router with the command ``show conntrack-sync statistics``. The numbers should be very close to the numbers on the primary router." msgstr "The simplest way to test is to look at the connection tracking stats on the standby hardware router with the command ``show conntrack-sync statistics``. The numbers should be very close to the numbers on the primary router." @@ -2079,6 +2150,10 @@ msgstr "This example uses the failover mode." msgid "This gives us MPLS segment routing enabled and labels forwarding :" msgstr "This gives us MPLS segment routing enabled and labels forwarding :" +#: ../../configexamples/site-2-site-cisco.rst:6 +msgid "This guide shows a sample configuration for FlexVPN site-to-site Internet Protocol Security (IPsec)/Generic Routing Encapsulation (GRE) tunnel." +msgstr "This guide shows a sample configuration for FlexVPN site-to-site Internet Protocol Security (IPsec)/Generic Routing Encapsulation (GRE) tunnel." + #: ../../configexamples/azure-vpn-dual-bgp.rst:8 msgid "This guide shows an example of a redundant (active-active) route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." msgstr "This guide shows an example of a redundant (active-active) route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." @@ -2196,7 +2271,7 @@ msgstr "Transport:" msgid "Tunnelbroker.net (IPv6)" msgstr "Tunnelbroker.net (IPv6)" -#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:None +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:-1 msgid "Tunnelbroker topology image" msgstr "Tunnelbroker topology image" @@ -2212,6 +2287,7 @@ msgstr "Two rules will be created, the first rule directs traffic coming in from msgid "Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to ignore the assigned /64, and request the /48 and use that." msgstr "Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to ignore the assigned /64, and request the /48 and use that." +#: ../../configexamples/ansible.rst:15 #: ../../configexamples/qos.rst:16 msgid "Using the general schema for example:" msgstr "Using the general schema for example:" @@ -2245,6 +2321,7 @@ msgstr "VRRP Configuration" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:248 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:320 #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:829 +#: ../../configexamples/site-2-site-cisco.rst:134 msgid "Verification" msgstr "Verification" @@ -2263,10 +2340,19 @@ msgstr "Version: 1.4-rolling-202305100734" msgid "Version: 1.4-rolling-202308240020" msgstr "Version: 1.4-rolling-202308240020" +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:8 +msgid "Version: 1.5-rolling-202401121239" +msgstr "Version: 1.5-rolling-202401121239" + #: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 msgid "Version: vyos-1.4-rolling-202302150317" msgstr "Version: vyos-1.4-rolling-202302150317" +#: ../../configexamples/site-2-site-cisco.rst:21 +msgid "VyOS" +msgstr "VyOS" + #: ../../configexamples/l3vpn-hub-and-spoke.rst:1025 msgid "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" msgstr "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" @@ -2434,6 +2520,10 @@ msgstr "We explicitly exclude the primary upstream network so that BGP or OSPF t msgid "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." msgstr "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." +#: ../../configexamples/ansible.rst:22 +msgid "We have four pre-configured routers with this configuration:" +msgstr "We have four pre-configured routers with this configuration:" + #: ../../configexamples/zone-policy.rst:25 msgid "We have three networks." msgstr "We have three networks." @@ -2623,15 +2713,15 @@ msgstr "compute3 - Port 11 of each switch" msgid "compute3 (VMware ESXi 6.5)" msgstr "compute3 (VMware ESXi 6.5)" -#: ../../configexamples/index.rst:41 +#: ../../configexamples/index.rst:43 msgid "configure each host in the lab" msgstr "configure each host in the lab" -#: ../../configexamples/index.rst:40 +#: ../../configexamples/index.rst:42 msgid "create the lab on a eve-ng server" msgstr "create the lab on a eve-ng server" -#: ../../configexamples/index.rst:42 +#: ../../configexamples/index.rst:44 msgid "do some defined tests" msgstr "do some defined tests" @@ -2652,7 +2742,7 @@ msgstr "extended community and remote label of specific destination" msgid "first the PCA" msgstr "first the PCA" -#: ../../configexamples/index.rst:44 +#: ../../configexamples/index.rst:46 msgid "generate the documentation and include files" msgstr "generate the documentation and include files" @@ -2664,7 +2754,7 @@ msgstr "green uses local routing table id and VNI 4000" msgid "information between PE and CE:" msgstr "information between PE and CE:" -#: ../../configexamples/index.rst:43 +#: ../../configexamples/index.rst:45 msgid "optional do an upgrade to a higher version and do step 3 again." msgstr "optional do an upgrade to a higher version and do step 3 again." @@ -2680,7 +2770,7 @@ msgstr "router2 (Random 1RU machine with 4 NICs)" msgid "save the output to a file and import it in nearly all openvpn clients." msgstr "save the output to a file and import it in nearly all openvpn clients." -#: ../../configexamples/index.rst:45 +#: ../../configexamples/index.rst:47 msgid "shutdown and destroy the lab, if there is no error" msgstr "shutdown and destroy the lab, if there is no error" @@ -2700,6 +2790,22 @@ msgstr "switch2 (Nexus 10gb Switch)" msgid "v6 pairs would be:" msgstr "v6 pairs would be:" +#: ../../configexamples/ansible.rst:34 +msgid "vyos10 - 192.0.2.108" +msgstr "vyos10 - 192.0.2.108" + +#: ../../configexamples/ansible.rst:31 +msgid "vyos7 - 192.0.2.105" +msgstr "vyos7 - 192.0.2.105" + +#: ../../configexamples/ansible.rst:32 +msgid "vyos8 - 192.0.2.106" +msgstr "vyos8 - 192.0.2.106" + +#: ../../configexamples/ansible.rst:33 +msgid "vyos9 - 192.0.2.107" +msgstr "vyos9 - 192.0.2.107" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:571 msgid "we are using \"source-address\" option cause we are not redistributing connected interfaces into BGP on the Core router hence there is no comeback route and ping will fail." msgstr "we are using \"source-address\" option cause we are not redistributing connected interfaces into BGP on the Core router hence there is no comeback route and ping will fail." diff --git a/docs/_locale/de/configuration.pot b/docs/_locale/de/configuration.pot index df607936..cc30affb 100644 --- a/docs/_locale/de/configuration.pot +++ b/docs/_locale/de/configuration.pot @@ -40,6 +40,10 @@ msgstr "\"Managed address configuration\" flag" msgid "\"Other configuration\" flag" msgstr "\"Other configuration\" flag" +#: ../../configuration/firewall/flowtables.rst:5 +msgid "###################ä############# Flowtables Firewall Configuration #################################" +msgstr "###################ä############# Flowtables Firewall Configuration #################################" + #: ../../configuration/protocols/babel.rst:146 msgid "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." msgstr "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." @@ -100,11 +104,19 @@ msgstr "**Applies to:** Outbound traffic." msgid "**Apply the traffic policy to an interface ingress or egress**." msgstr "**Apply the traffic policy to an interface ingress or egress**." +#: ../../configuration/firewall/index.rst:22 +msgid "**Bridge Port?**: choose appropiate path based on if interface were the packet was received is part of a bridge, or not." +msgstr "**Bridge Port?**: choose appropiate path based on if interface were the packet was received is part of a bridge, or not." + +#: ../../configuration/firewall/index.rst:23 +msgid "**Bridge Port?**: choose appropriate path based on whether interface where the packet was received is part of a bridge, or not." +msgstr "**Bridge Port?**: choose appropriate path based on whether interface where the packet was received is part of a bridge, or not." + #: ../../configuration/interfaces/tunnel.rst:137 msgid "**Cisco IOS Router:**" msgstr "**Cisco IOS Router:**" -#: ../../configuration/service/pppoe-server.rst:69 +#: ../../configuration/service/pppoe-server.rst:66 msgid "**Client IP address via IP range definition**" msgstr "**Client IP address via IP range definition**" @@ -116,56 +128,49 @@ msgstr "**Client IP subnets via CIDR notation**" msgid "**Cluster-List length check**" msgstr "**Cluster-List length check**" +#: ../../configuration/firewall/index.rst:35 +msgid "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``." +msgstr "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``." + #: ../../configuration/trafficpolicy/index.rst:30 msgid "**Create a traffic policy**." msgstr "**Create a traffic policy**." +#: ../../configuration/interfaces/wwan.rst:53 #: ../../_include/interface-common-with-dhcp.txt:9 -#: ../../_include/interface-vlan-8021q.txt:97 -#: ../../_include/interface-common-with-dhcp.txt:9 -#: ../../_include/interface-vlan-8021q.txt:97 -#: ../../_include/interface-common-with-dhcp.txt:9 -#: ../../_include/interface-vlan-8021q.txt:97 -#: ../../_include/interface-vlan-8021ad.txt:121 -#: ../../_include/interface-common-with-dhcp.txt:9 -#: ../../_include/interface-common-with-dhcp.txt:9 -#: ../../_include/interface-vlan-8021q.txt:97 -#: ../../_include/interface-vlan-8021q.txt:97 #: ../../_include/interface-vlan-8021ad.txt:121 -#: ../../_include/interface-common-with-dhcp.txt:9 #: ../../_include/interface-vlan-8021q.txt:97 -#: ../../_include/interface-vlan-8021ad.txt:121 -#: ../../configuration/interfaces/wwan.rst:53 msgid "**DHCP(v6)**" msgstr "**DHCP(v6)**" -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 -#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 #: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 msgid "**DHCPv6 Prefix Delegation (PD)**" msgstr "**DHCPv6 Prefix Delegation (PD)**" +#: ../../configuration/firewall/index.rst:41 +msgid "**Destination NAT**: rules defined under ``set [nat | nat66] destination...``." +msgstr "**Destination NAT**: rules defined under ``set [nat | nat66] destination...``." + +#: ../../configuration/firewall/index.rst:43 +msgid "**Destination is the router?**: choose appropiate path based on destination IP address. Transit forward continunes to **forward**, while traffic that destination IP address is configured on the router continues to **input**." +msgstr "**Destination is the router?**: choose appropiate path based on destination IP address. Transit forward continunes to **forward**, while traffic that destination IP address is configured on the router continues to **input**." + +#: ../../configuration/firewall/index.rst:44 +msgid "**Destination is the router?**: choose appropriate path based on destination IP address. Transit forward continues to **forward**, while traffic that destination IP address is configured on the router continues to **input**." +msgstr "**Destination is the router?**: choose appropriate path based on destination IP address. Transit forward continues to **forward**, while traffic that destination IP address is configured on the router continues to **input**." + +#: ../../configuration/firewall/bridge.rst:9 +#: ../../configuration/firewall/flowtables.rst:9 +msgid "**Documentation under development**" +msgstr "**Documentation under development**" + #: ../../configuration/trafficpolicy/index.rst:169 msgid "**Ethernet (protocol, destination address or source address)**" msgstr "**Ethernet (protocol, destination address or source address)**" -#: ../../configuration/service/dhcp-server.rst:235 -#: ../../configuration/service/dhcp-server.rst:657 -#: ../../configuration/service/dhcp-server.rst:694 +#: ../../configuration/service/dhcp-server.rst:200 +#: ../../configuration/service/dhcp-server.rst:587 +#: ../../configuration/service/dhcp-server.rst:626 msgid "**Example:**" msgstr "**Example:**" @@ -177,10 +182,30 @@ msgstr "**External check**" msgid "**Firewall mark**" msgstr "**Firewall mark**" -#: ../../configuration/firewall/index.rst:41 +#: ../../configuration/firewall/flowtables.rst:51 +msgid "**Flowtable Reference:** https://docs.kernel.org/networking/nf_flowtable.html" +msgstr "**Flowtable Reference:** https://docs.kernel.org/networking/nf_flowtable.html" + +#: ../../configuration/firewall/index.rst:152 msgid "**For more information** of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" msgstr "**For more information** of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" +#: ../../configuration/firewall/index.rst:58 +msgid "**Forward**: stage where transit traffic can be filtered and controlled. This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Forward**: stage where transit traffic can be filtered and controlled. This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:86 +msgid "**Forward (Bridge)**: stage where traffic that is trasspasing through the bridge is filtered and controlled:" +msgstr "**Forward (Bridge)**: stage where traffic that is trasspasing through the bridge is filtered and controlled:" + +#: ../../configuration/firewall/index.rst:87 +msgid "**Forward (Bridge)**: stage where traffic that is trespasing through the bridge is filtered and controlled:" +msgstr "**Forward (Bridge)**: stage where traffic that is trespasing through the bridge is filtered and controlled:" + +#: ../../configuration/firewall/flowtables.rst:83 +msgid "**Hardware offload:** should be supported by the NICs used." +msgstr "**Hardware offload:** should be supported by the NICs used." + #: ../../configuration/protocols/bgp.rst:94 msgid "**IGP cost check**" msgstr "**IGP cost check**" @@ -205,6 +230,17 @@ msgstr "**Important note:** This documentation is valid only for VyOS Sagitta pr msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-YYYYMMDDHHmm" msgstr "**Wichtiger Hinweis: ** Diese Dokumentation ist nur für VyOS Sagitta vor 1.4-Rolling-YYYYMMDDHHMM gültig" +#: ../../configuration/firewall/ipv4.rst:60 +#: ../../configuration/firewall/ipv6.rst:60 +msgid "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**" +msgstr "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**" + +#: ../../configuration/firewall/bridge.rst:143 +#: ../../configuration/firewall/ipv4.rst:190 +#: ../../configuration/firewall/ipv6.rst:190 +msgid "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**." +msgstr "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**." + #: ../../configuration/firewall/general.rst:72 msgid "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **accept** for that chain. Only for custom chains, the default action is set to **drop**." msgstr "**Wichtiger Hinweis zu Standardaktionen: ** Wenn die Standardaktion für eine Kette nicht definiert ist, ist die Standardaktion für diese Kette auf ** accept** gesetzt. Nur für benutzerdefinierte Ketten ist die Standardaktion auf **drop** gesetzt." @@ -221,23 +257,35 @@ msgstr "**Important note on usage of terms:** The firewall makes use of the term msgid "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." msgstr "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." +#: ../../configuration/firewall/index.rst:48 +msgid "**Input**: stage where traffic destinated to the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Input**: stage where traffic destinated to the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:49 +msgid "**Input**: stage where traffic destined for the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Input**: stage where traffic destined for the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" + #: ../../configuration/trafficpolicy/index.rst:170 msgid "**Interface name**" msgstr "**Interface name**" -#: ../../configuration/vpn/site2site_ipsec.rst:299 +#: ../../configuration/vpn/site2site_ipsec.rst:303 msgid "**LEFT**" msgstr "**LEFT**" -#: ../../configuration/vpn/site2site_ipsec.rst:283 +#: ../../configuration/vpn/site2site_ipsec.rst:287 msgid "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" msgstr "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" -#: ../../configuration/interfaces/vxlan.rst:214 +#: ../../configuration/firewall/bridge.rst:48 +msgid "**Layer 3 bridge**: When an IP address is assigned to the bridge interface, and if traffic is sent to the router to this IP (for example using such IP as default gateway), then rules defined for **bridge firewall** won't match, and firewall analysis continues at **IP layer**." +msgstr "**Layer 3 bridge**: When an IP address is assigned to the bridge interface, and if traffic is sent to the router to this IP (for example using such IP as default gateway), then rules defined for **bridge firewall** won't match, and firewall analysis continues at **IP layer**." + +#: ../../configuration/interfaces/vxlan.rst:235 msgid "**Leaf2 configuration:**" msgstr "**Leaf2 configuration:**" -#: ../../configuration/interfaces/vxlan.rst:239 +#: ../../configuration/interfaces/vxlan.rst:260 msgid "**Leaf3 configuration:**" msgstr "**Leaf3 configuration:**" @@ -261,33 +309,33 @@ msgstr "**MED check**" msgid "**Multi-path check**" msgstr "**Multi-path check**" -#: ../../configuration/protocols/bgp.rst:1192 +#: ../../configuration/protocols/bgp.rst:1193 msgid "**Node1:**" msgstr "**Node1:**" -#: ../../configuration/protocols/bgp.rst:1220 +#: ../../configuration/protocols/bgp.rst:1221 msgid "**Node2:**" msgstr "**Node2:**" #: ../../configuration/protocols/ospf.rst:840 #: ../../configuration/protocols/ospf.rst:913 #: ../../configuration/protocols/ospf.rst:985 -#: ../../configuration/protocols/ospf.rst:1348 +#: ../../configuration/protocols/ospf.rst:1350 #: ../../configuration/protocols/segment-routing.rst:281 msgid "**Node 1**" msgstr "**Node 1**" #: ../../configuration/protocols/babel.rst:192 -#: ../../configuration/protocols/bgp.rst:1102 -#: ../../configuration/protocols/bgp.rst:1129 -#: ../../configuration/protocols/bgp.rst:1147 -#: ../../configuration/protocols/bgp.rst:1175 -#: ../../configuration/protocols/isis.rst:313 -#: ../../configuration/protocols/isis.rst:388 -#: ../../configuration/protocols/isis.rst:429 -#: ../../configuration/protocols/isis.rst:467 +#: ../../configuration/protocols/bgp.rst:1103 +#: ../../configuration/protocols/bgp.rst:1130 +#: ../../configuration/protocols/bgp.rst:1148 +#: ../../configuration/protocols/bgp.rst:1176 +#: ../../configuration/protocols/isis.rst:341 +#: ../../configuration/protocols/isis.rst:416 +#: ../../configuration/protocols/isis.rst:457 +#: ../../configuration/protocols/isis.rst:495 #: ../../configuration/protocols/ospf.rst:948 -#: ../../configuration/protocols/ospf.rst:1318 +#: ../../configuration/protocols/ospf.rst:1320 #: ../../configuration/protocols/rip.rst:243 #: ../../configuration/protocols/segment-routing.rst:195 msgid "**Node 1:**" @@ -296,20 +344,20 @@ msgstr "**Node 1:**" #: ../../configuration/protocols/ospf.rst:850 #: ../../configuration/protocols/ospf.rst:930 #: ../../configuration/protocols/ospf.rst:1001 -#: ../../configuration/protocols/ospf.rst:1363 +#: ../../configuration/protocols/ospf.rst:1365 #: ../../configuration/protocols/segment-routing.rst:296 msgid "**Node 2**" msgstr "**Node 2**" #: ../../configuration/protocols/babel.rst:202 -#: ../../configuration/protocols/bgp.rst:1113 -#: ../../configuration/protocols/bgp.rst:1135 -#: ../../configuration/protocols/bgp.rst:1159 -#: ../../configuration/protocols/bgp.rst:1181 -#: ../../configuration/protocols/isis.rst:324 -#: ../../configuration/protocols/isis.rst:404 -#: ../../configuration/protocols/isis.rst:483 -#: ../../configuration/protocols/ospf.rst:1327 +#: ../../configuration/protocols/bgp.rst:1114 +#: ../../configuration/protocols/bgp.rst:1136 +#: ../../configuration/protocols/bgp.rst:1160 +#: ../../configuration/protocols/bgp.rst:1182 +#: ../../configuration/protocols/isis.rst:352 +#: ../../configuration/protocols/isis.rst:432 +#: ../../configuration/protocols/isis.rst:511 +#: ../../configuration/protocols/ospf.rst:1329 #: ../../configuration/protocols/rip.rst:251 #: ../../configuration/protocols/segment-routing.rst:211 msgid "**Node 2:**" @@ -331,15 +379,39 @@ msgstr "**One gateway:**" msgid "**Origin check**" msgstr "**Origin check**" +#: ../../configuration/firewall/index.rst:64 +msgid "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" + +#: ../../configuration/firewall/index.rst:65 +msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" +msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" + #: ../../configuration/protocols/bgp.rst:125 msgid "**Peer address**" msgstr "**Peer address**" +#: ../../configuration/firewall/index.rst:38 +msgid "**Policy Route**: rules defined under ``set policy [route | route6] ...``." +msgstr "**Policy Route**: rules defined under ``set policy [route | route6] ...``." + #: ../../configuration/policy/examples.rst:5 msgid "**Policy definition:**" msgstr "**Policy definition:**" -#: ../../configuration/service/dhcp-server.rst:450 +#: ../../configuration/firewall/index.rst:76 +msgid "**Postrouting**: as in **Prerouting**, several actions defined in different parts of VyOS configuration are performed in this stage. This includes:" +msgstr "**Postrouting**: as in **Prerouting**, several actions defined in different parts of VyOS configuration are performed in this stage. This includes:" + +#: ../../configuration/firewall/index.rst:29 +msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in VyOS configuration. Order is important, and all these actions are performed before any actions defined under ``firewall`` section. Relevant configuration that acts in this stage are:" +msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in VyOS configuration. Order is important, and all these actions are performed before any actions defined under ``firewall`` section. Relevant configuration that acts in this stage are:" + +#: ../../configuration/firewall/index.rst:28 +msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" +msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" + +#: ../../configuration/service/dhcp-server.rst:391 msgid "**Primary**" msgstr "**Primary**" @@ -401,19 +473,19 @@ msgstr "**R2**" msgid "**R2 Static Key**" msgstr "**R2 Static Key**" -#: ../../configuration/service/pppoe-server.rst:104 +#: ../../configuration/service/pppoe-server.rst:91 msgid "**RADIUS based IP pools (Framed-IP-Address)**" msgstr "**RADIUS based IP pools (Framed-IP-Address)**" -#: ../../configuration/service/pppoe-server.rst:128 +#: ../../configuration/service/pppoe-server.rst:115 msgid "**RADIUS sessions management DM/CoA**" msgstr "**RADIUS sessions management DM/CoA**" -#: ../../configuration/vpn/site2site_ipsec.rst:335 +#: ../../configuration/vpn/site2site_ipsec.rst:343 msgid "**RIGHT**" msgstr "**RIGHT**" -#: ../../configuration/vpn/site2site_ipsec.rst:289 +#: ../../configuration/vpn/site2site_ipsec.rst:293 msgid "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" @@ -421,15 +493,15 @@ msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172 msgid "**Router-ID check**" msgstr "**Router-ID check**" -#: ../../configuration/protocols/igmp.rst:46 +#: ../../configuration/protocols/pim.rst:228 msgid "**Router 1**" msgstr "**Router 1**" -#: ../../configuration/protocols/igmp.rst:74 +#: ../../configuration/protocols/pim.rst:256 msgid "**Router 2**" msgstr "**Router 2**" -#: ../../configuration/protocols/igmp.rst:59 +#: ../../configuration/protocols/pim.rst:241 msgid "**Router 3**" msgstr "**Router 3**" @@ -449,7 +521,7 @@ msgstr "**SW1**" msgid "**SW2**" msgstr "**SW2**" -#: ../../configuration/service/dhcp-server.rst:459 +#: ../../configuration/service/dhcp-server.rst:400 msgid "**Secondary**" msgstr "**Secondary**" @@ -461,15 +533,19 @@ msgstr "**Setting up IPSec**" msgid "**Setting up the GRE tunnel**" msgstr "**Setting up the GRE tunnel**" -#: ../../configuration/interfaces/vxlan.rst:191 +#: ../../configuration/firewall/index.rst:80 +msgid "**Source NAT**: rules defined under ``set [nat | nat66] destination...``." +msgstr "**Source NAT**: rules defined under ``set [nat | nat66] destination...``." + +#: ../../configuration/interfaces/vxlan.rst:212 msgid "**Spine1 Configuration:**" msgstr "**Spine1 Configuration:**" -#: ../../configuration/protocols/ospf.rst:1378 +#: ../../configuration/protocols/ospf.rst:1380 msgid "**Status**" msgstr "**Status**" -#: ../../configuration/protocols/ospf.rst:1336 +#: ../../configuration/protocols/ospf.rst:1338 msgid "**To see the redistributed routes:**" msgstr "**To see the redistributed routes:**" @@ -490,48 +566,12 @@ msgstr "**VyOS Router:**" msgid "**Weight check**" msgstr "**Weight check**" -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 -#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address.txt:6 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address.txt:6 -#: ../../_include/interface-address.txt:6 -#: ../../_include/interface-address.txt:6 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 #: ../../_include/interface-address-with-dhcp.txt:7 #: ../../_include/interface-address.txt:6 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address.txt:6 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 -#: ../../_include/interface-address-with-dhcp.txt:7 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" msgstr "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" @@ -579,50 +619,18 @@ msgstr "**default** – this area will be used for shortcutting only if ABR doe msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." msgstr "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." -#: ../../configuration/vpn/sstp.rst:188 +#: ../../configuration/vpn/sstp.rst:199 msgid "**deny** - deny mppe" msgstr "**deny** - deny mppe" -#: ../../configuration/nat/nat44.rst:201 +#: ../../configuration/nat/nat44.rst:213 msgid "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." msgstr "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 -#: ../../_include/interface-address-with-dhcp.txt:9 #: ../../_include/interface-address-with-dhcp.txt:9 msgid "**dhcp** interface address is received by DHCP from a DHCP server on this segment." msgstr "**dhcp** interface address is received by DHCP from a DHCP server on this segment." -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 -#: ../../_include/interface-address-with-dhcp.txt:11 #: ../../_include/interface-address-with-dhcp.txt:11 msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." @@ -631,7 +639,7 @@ msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server msgid "**discard:** Received packets which already contain relay information will be discarded." msgstr "**discard:** Received packets which already contain relay information will be discarded." -#: ../../configuration/protocols/igmp.rst:195 +#: ../../configuration/protocols/igmp-proxy.rst:23 msgid "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." msgstr "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." @@ -643,7 +651,7 @@ msgstr "**exporter**: aggregates packets into flows and exports flow records tow msgid "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" msgstr "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" -#: ../../configuration/firewall/general.rst:99 +#: ../../configuration/firewall/global-options.rst:36 msgid "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" msgstr "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" @@ -655,6 +663,10 @@ msgstr "**forward:** All packets are forwarded, relay information already presen msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." +#: ../../configuration/nat/nat44.rst:165 +msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." +msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." + #: ../../configuration/interfaces/bonding.rst:161 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" msgstr "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" @@ -739,7 +751,11 @@ msgstr "**on-failure**: Restart containers when they exit with a non-zero exit c msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." -#: ../../configuration/vpn/sstp.rst:187 +#: ../../configuration/nat/nat44.rst:149 +msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." +msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." + +#: ../../configuration/vpn/sstp.rst:198 msgid "**prefer** - ask client for mppe, if it rejects don't fail" msgstr "**prefer** - ask client for mppe, if it rejects don't fail" @@ -751,7 +767,7 @@ msgstr "**process** When dnssec is set to process the behavior is similar to pro msgid "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." msgstr "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." -#: ../../configuration/nat/nat44.rst:169 +#: ../../configuration/nat/nat44.rst:181 msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." @@ -767,7 +783,7 @@ msgstr "**remote side - commands**" msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." -#: ../../configuration/vpn/sstp.rst:186 +#: ../../configuration/vpn/sstp.rst:197 msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" @@ -779,7 +795,7 @@ msgstr "**right**" msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" -#: ../../configuration/nat/nat44.rst:183 +#: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." msgstr "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." @@ -795,7 +811,7 @@ msgstr "**sys-time**: Permission to set system clock" msgid "**transition** - Send and accept both styles of TLVs during transition." msgstr "**transition** - Send and accept both styles of TLVs during transition." -#: ../../configuration/protocols/igmp.rst:191 +#: ../../configuration/protocols/igmp-proxy.rst:19 msgid "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." msgstr "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." @@ -859,25 +875,6 @@ msgstr "011100" msgid "011110" msgstr "011110" -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 -#: ../../_include/interface-ipv6.txt:79 #: ../../_include/interface-ipv6.txt:79 msgid "0: Disable DAD" msgstr "0: Disable DAD" @@ -890,7 +887,7 @@ msgstr "0 if not defined, which means no refreshing." msgid "0 if not defined." msgstr "0 if not defined." -#: ../../configuration/service/dhcp-server.rst:270 +#: ../../configuration/service/dhcp-server.rst:237 #: ../../configuration/system/syslog.rst:114 #: ../../configuration/system/syslog.rst:173 #: ../../configuration/trafficpolicy/index.rst:801 @@ -898,7 +895,7 @@ msgstr "0 if not defined." msgid "1" msgstr "1" -#: ../../configuration/nat/nat44.rst:588 +#: ../../configuration/nat/nat44.rst:612 msgid "1-to-1 NAT" msgstr "1-to-1 NAT" @@ -953,7 +950,7 @@ msgstr "10 - 10 MBit/s" msgid "11" msgstr "11" -#: ../../configuration/service/dhcp-server.rst:352 +#: ../../configuration/service/dhcp-server.rst:319 msgid "119" msgstr "119" @@ -963,11 +960,11 @@ msgstr "119" msgid "12" msgstr "12" -#: ../../configuration/service/dhcp-server.rst:357 +#: ../../configuration/service/dhcp-server.rst:324 msgid "121, 249" msgstr "121, 249" -#: ../../configuration/service/dhcp-server.rst:337 +#: ../../configuration/service/dhcp-server.rst:304 #: ../../configuration/system/syslog.rst:138 #: ../../configuration/trafficpolicy/index.rst:870 msgid "13" @@ -979,7 +976,7 @@ msgstr "13" msgid "14" msgstr "14" -#: ../../configuration/service/dhcp-server.rst:297 +#: ../../configuration/service/dhcp-server.rst:264 #: ../../configuration/system/syslog.rst:142 #: ../../configuration/trafficpolicy/index.rst:866 msgid "15" @@ -1003,7 +1000,7 @@ msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" msgid "18" msgstr "18" -#: ../../configuration/service/dhcp-server.rst:302 +#: ../../configuration/service/dhcp-server.rst:269 #: ../../configuration/system/syslog.rst:150 msgid "19" msgstr "19" @@ -1016,25 +1013,10 @@ msgstr "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" msgid "1. Create an event handler" msgstr "1. Create an event handler" -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 -#: ../../_include/interface-ipv6.txt:80 +#: ../../configuration/firewall/flowtables.rst:144 +msgid "1. First packet is received on eht0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." +msgstr "1. First packet is received on eht0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." + #: ../../_include/interface-ipv6.txt:80 msgid "1: Enable DAD (default)" msgstr "1: Enable DAD (default)" @@ -1043,7 +1025,7 @@ msgstr "1: Enable DAD (default)" msgid "1 if not defined." msgstr "1 if not defined." -#: ../../configuration/service/dhcp-server.rst:276 +#: ../../configuration/service/dhcp-server.rst:243 #: ../../configuration/system/syslog.rst:116 #: ../../configuration/system/syslog.rst:178 #: ../../configuration/trafficpolicy/index.rst:799 @@ -1077,7 +1059,7 @@ msgstr "25000 - 25 GBit/s" msgid "2500 - 2.5 GBit/s" msgstr "2500 - 2.5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:362 +#: ../../configuration/service/dhcp-server.rst:329 msgid "252" msgstr "252" @@ -1097,30 +1079,15 @@ msgstr "2FA OTP support" msgid "2. Add regex to the script" msgstr "2. Add regex to the script" -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 -#: ../../_include/interface-ipv6.txt:81 +#: ../../configuration/firewall/flowtables.rst:148 +msgid "2. Since this is the first packet, connection status of this connection, so far is **new**. So neither rule 10 nor 20 are valid." +msgstr "2. Since this is the first packet, connection status of this connection, so far is **new**. So neither rule 10 nor 20 are valid." + #: ../../_include/interface-ipv6.txt:81 msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." -#: ../../configuration/service/dhcp-server.rst:282 +#: ../../configuration/service/dhcp-server.rst:249 #: ../../configuration/system/syslog.rst:118 #: ../../configuration/system/syslog.rst:181 #: ../../configuration/trafficpolicy/index.rst:797 @@ -1148,7 +1115,7 @@ msgstr "38" msgid "3. Add a full path to the script" msgstr "3. Add a full path to the script" -#: ../../configuration/service/dhcp-server.rst:287 +#: ../../configuration/service/dhcp-server.rst:254 #: ../../configuration/system/syslog.rst:120 #: ../../configuration/system/syslog.rst:183 #: ../../configuration/trafficpolicy/index.rst:795 @@ -1164,11 +1131,11 @@ msgstr "40000 - 40 GBit/s" msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." -#: ../../configuration/service/dhcp-server.rst:307 +#: ../../configuration/service/dhcp-server.rst:274 msgid "42" msgstr "42" -#: ../../configuration/service/dhcp-server.rst:312 +#: ../../configuration/service/dhcp-server.rst:279 msgid "44" msgstr "44" @@ -1180,6 +1147,10 @@ msgstr "46" msgid "4. Add optional parameters" msgstr "4. Add optional parameters" +#: ../../configuration/firewall/flowtables.rst:153 +msgid "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 10." +msgstr "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 10." + #: ../../configuration/system/syslog.rst:122 #: ../../configuration/system/syslog.rst:185 #: ../../configuration/trafficpolicy/index.rst:793 @@ -1195,16 +1166,20 @@ msgstr "50000 - 50 GBit/s" msgid "5000 - 5 GBit/s" msgstr "5000 - 5 GBit/s" -#: ../../configuration/service/dhcp-server.rst:317 +#: ../../configuration/service/dhcp-server.rst:284 msgid "54" msgstr "54" +#: ../../configuration/firewall/flowtables.rst:157 +msgid "5. Second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry in the flowtable FT01 is added for this connection." +msgstr "5. Second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry in the flowtable FT01 is added for this connection." + #: ../../configuration/highavailability/index.rst:257 #: ../../configuration/highavailability/index.rst:288 msgid "5 if not defined." msgstr "5 if not defined." -#: ../../configuration/service/dhcp-server.rst:292 +#: ../../configuration/service/dhcp-server.rst:259 #: ../../configuration/system/syslog.rst:124 #: ../../configuration/system/syslog.rst:189 #: ../../configuration/trafficpolicy/index.rst:791 @@ -1212,7 +1187,7 @@ msgstr "5 if not defined." msgid "6" msgstr "6" -#: ../../configuration/service/dhcp-server.rst:327 +#: ../../configuration/service/dhcp-server.rst:294 msgid "66" msgstr "66" @@ -1220,14 +1195,18 @@ msgstr "66" msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic." -#: ../../configuration/service/dhcp-server.rst:332 +#: ../../configuration/service/dhcp-server.rst:299 msgid "67" msgstr "67" -#: ../../configuration/service/dhcp-server.rst:342 +#: ../../configuration/service/dhcp-server.rst:309 msgid "69" msgstr "69" +#: ../../configuration/firewall/flowtables.rst:161 +msgid "6. All subsecuent packets will skip traditional path, and will be offloaded and will use the **Fast Path**." +msgstr "6. All subsecuent packets will skip traditional path, and will be offloaded and will use the **Fast Path**." + #: ../../configuration/interfaces/tunnel.rst:81 msgid "6in4 (SIT)" msgstr "6in4 (SIT)" @@ -1243,7 +1222,7 @@ msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defin msgid "7" msgstr "7" -#: ../../configuration/service/dhcp-server.rst:347 +#: ../../configuration/service/dhcp-server.rst:314 msgid "70" msgstr "70" @@ -1251,11 +1230,6 @@ msgstr "70" msgid "8" msgstr "8" -#: ../../_include/interface-vlan-8021q.txt:21 -#: ../../_include/interface-vlan-8021q.txt:21 -#: ../../_include/interface-vlan-8021q.txt:21 -#: ../../_include/interface-vlan-8021q.txt:21 -#: ../../_include/interface-vlan-8021q.txt:21 #: ../../_include/interface-vlan-8021q.txt:21 msgid "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." msgstr "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." @@ -1325,22 +1299,31 @@ msgstr "-: IP range to match." msgid ": IP address to match." msgstr ": IP address to match." +#: ../../configuration/pki/index.rst:252 +msgid "ACME" +msgstr "ACME" + +#: ../../configuration/pki/index.rst:281 +msgid "ACME Directory Resource URI." +msgstr "ACME Directory Resource URI." + +#: ../../configuration/service/https.rst:59 +msgid "API" +msgstr "API" + #: ../../configuration/protocols/static.rst:150 msgid "ARP" msgstr "ARP" -#: ../../configuration/firewall/general.rst:302 -#: ../../configuration/firewall/general-legacy.rst:257 +#: ../../configuration/firewall/groups.rst:129 msgid "A **domain group** represents a collection of domains." msgstr "A **domain group** represents a collection of domains." -#: ../../configuration/firewall/general.rst:284 -#: ../../configuration/firewall/general-legacy.rst:242 +#: ../../configuration/firewall/groups.rst:111 msgid "A **mac group** represents a collection of mac addresses." msgstr "A **mac group** represents a collection of mac addresses." -#: ../../configuration/firewall/general.rst:259 -#: ../../configuration/firewall/general-legacy.rst:217 +#: ../../configuration/firewall/groups.rst:86 msgid "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." msgstr "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." @@ -1368,7 +1351,7 @@ msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by msgid "A Rule-Set can be applied to every interface:" msgstr "A Rule-Set can be applied to every interface:" -#: ../../configuration/service/dhcp-server.rst:631 +#: ../../configuration/service/dhcp-server.rst:561 msgid "A SNTP server address can be specified for DHCPv6 clients." msgstr "A SNTP server address can be specified for DHCPv6 clients." @@ -1380,11 +1363,11 @@ msgstr "A VRF device is created with an associated route table. Network interfac msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." -#: ../../configuration/service/dns.rst:149 +#: ../../configuration/service/dns.rst:162 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." -#: ../../configuration/service/dhcp-server.rst:603 +#: ../../configuration/service/dhcp-server.rst:533 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." @@ -1392,7 +1375,7 @@ msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used msgid "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." msgstr "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." -#: ../../configuration/firewall/zone.rst:54 +#: ../../configuration/firewall/zone.rst:73 msgid "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." @@ -1413,7 +1396,7 @@ msgstr "A common example is the case of some policies which, in order to be effe msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" msgstr "A complete LDAP auth OpenVPN configuration could look like the following example:" -#: ../../configuration/vpn/sstp.rst:323 +#: ../../configuration/vpn/sstp.rst:335 msgid "A connection attempt will be shown as:" msgstr "A connection attempt will be shown as:" @@ -1433,7 +1416,7 @@ msgstr "A disabled group will be removed from the VRRP process and your router w msgid "A domain name is the label (name) assigned to a computer network and is thus unique. VyOS appends the domain name as a suffix to any unqualified name. For example, if you set the domain name `example.com`, and you would ping the unqualified name of `crux`, then VyOS qualifies the name to `crux.example.com`." msgstr "A domain name is the label (name) assigned to a computer network and is thus unique. VyOS appends the domain name as a suffix to any unqualified name. For example, if you set the domain name `example.com`, and you would ping the unqualified name of `crux`, then VyOS qualifies the name to `crux.example.com`." -#: ../../configuration/nat/nat44.rst:685 +#: ../../configuration/nat/nat44.rst:709 msgid "A dummy interface for the provider-assigned IP;" msgstr "A dummy interface for the provider-assigned IP;" @@ -1445,7 +1428,7 @@ msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availabi msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here `." msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here `." -#: ../../configuration/service/dhcp-server.rst:187 +#: ../../configuration/service/dhcp-server.rst:152 msgid "A generic `` referencing this sync service." msgstr "A generic `` referencing this sync service." @@ -1489,6 +1472,10 @@ msgstr "A new interface becomes present ``Port-channel1``, all configuration lik msgid "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" msgstr "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" +#: ../../configuration/firewall/flowtables.rst:44 +msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." +msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." + #: ../../configuration/protocols/bgp.rst:698 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." msgstr "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." @@ -1497,12 +1484,12 @@ msgstr "A penalty of 1000 is assessed each time the route fails. When the penalt msgid "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." msgstr "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." -#: ../../configuration/nat/nat44.rst:360 +#: ../../configuration/nat/nat44.rst:374 msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" -#: ../../configuration/firewall/general.rst:761 -#: ../../configuration/firewall/general-legacy.rst:506 +#: ../../configuration/firewall/ipv4.rst:485 +#: ../../configuration/firewall/ipv6.rst:491 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." @@ -1535,24 +1522,15 @@ msgstr "A script can be run when an interface state change occurs. Scripts are r msgid "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" msgstr "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 -#: ../../_include/interface-disable-flow-control.txt:11 #: ../../_include/interface-disable-flow-control.txt:11 msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." -#: ../../configuration/service/dhcp-server.rst:659 +#: ../../configuration/service/dhcp-server.rst:589 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" -#: ../../configuration/protocols/bgp.rst:1145 +#: ../../configuration/protocols/bgp.rst:1146 msgid "A simple BGP configuration via IPv6." msgstr "A simple BGP configuration via IPv6." @@ -1560,7 +1538,7 @@ msgstr "A simple BGP configuration via IPv6." msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." msgstr "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." -#: ../../configuration/protocols/bgp.rst:1100 +#: ../../configuration/protocols/bgp.rst:1101 msgid "A simple eBGP configuration:" msgstr "A simple eBGP configuration:" @@ -1572,6 +1550,14 @@ msgstr "A simple example of Shaper using priorities." msgid "A simple example of an FQ-CoDel policy working inside a Shaper one." msgstr "A simple example of an FQ-CoDel policy working inside a Shaper one." +#: ../../configuration/firewall/index.rst:14 +msgid "A simplified traffic flow, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths can take." +msgstr "A simplified traffic flow, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths can take." + +#: ../../configuration/firewall/index.rst:14 +msgid "A simplified traffic flow diagram, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths traffic can take." +msgstr "A simplified traffic flow diagram, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths traffic can take." + #: ../../configuration/nat/nat66.rst:28 msgid "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." msgstr "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." @@ -1584,11 +1570,11 @@ msgstr "A station acts as a Wi-Fi client accessing the network through an availa msgid "A sync group allows VRRP groups to transition together." msgstr "A sync group allows VRRP groups to transition together." -#: ../../configuration/protocols/ospf.rst:1316 +#: ../../configuration/protocols/ospf.rst:1318 msgid "A typical configuration using 2 nodes." msgstr "A typical configuration using 2 nodes." -#: ../../configuration/nat/nat44.rst:400 +#: ../../configuration/nat/nat44.rst:414 msgid "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." msgstr "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." @@ -1612,11 +1598,11 @@ msgstr "A value of 296 works well on very slow links (40 bytes for TCP/IP header msgid "A very small buffer will soon start dropping packets." msgstr "A very small buffer will soon start dropping packets." -#: ../../configuration/firewall/zone.rst:33 +#: ../../configuration/firewall/zone.rst:52 msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." -#: ../../configuration/service/dns.rst:384 +#: ../../configuration/service/dns.rst:397 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." msgstr "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." @@ -1652,12 +1638,14 @@ msgstr "Action must be taken immediately - A condition that should be corrected msgid "Action which will be run once the ctrl-alt-del keystroke is received." msgstr "Action which will be run once the ctrl-alt-del keystroke is received." -#: ../../configuration/firewall/general.rst:327 +#: ../../configuration/firewall/bridge.rst:65 +#: ../../configuration/firewall/ipv4.rst:81 +#: ../../configuration/firewall/ipv6.rst:81 #: ../../configuration/policy/route.rst:238 msgid "Actions" msgstr "Actions" -#: ../../configuration/interfaces/openvpn.rst:431 +#: ../../configuration/interfaces/openvpn.rst:483 msgid "Active Directory" msgstr "Active Directory" @@ -1737,7 +1725,7 @@ msgstr "Add the private key portion of this certificate to the CLI. This should msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." -#: ../../configuration/vpn/openconnect.rst:169 +#: ../../configuration/vpn/openconnect.rst:176 msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" @@ -1753,7 +1741,7 @@ msgstr "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing msgid "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." msgstr "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." -#: ../../configuration/nat/nat44.rst:738 +#: ../../configuration/nat/nat44.rst:760 msgid "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" msgstr "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" @@ -1765,7 +1753,7 @@ msgstr "Additionally you should keep in mind that this feature fundamentally dis msgid "Address" msgstr "Address" -#: ../../configuration/nat/nat44.rst:219 +#: ../../configuration/nat/nat44.rst:231 msgid "Address Conversion" msgstr "Address Conversion" @@ -1773,20 +1761,19 @@ msgstr "Address Conversion" msgid "Address Families" msgstr "Address Families" -#: ../../configuration/firewall/general.rst:192 -#: ../../configuration/firewall/general-legacy.rst:168 +#: ../../configuration/firewall/groups.rst:19 msgid "Address Groups" msgstr "Address Groups" -#: ../../configuration/service/dhcp-server.rst:662 +#: ../../configuration/service/dhcp-server.rst:592 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." -#: ../../configuration/service/dhcp-server.rst:652 +#: ../../configuration/service/dhcp-server.rst:582 msgid "Address pools" msgstr "Address pools" -#: ../../configuration/service/https.rst:42 +#: ../../configuration/service/https.rst:33 msgid "Address to listen for HTTPS requests" msgstr "Address to listen for HTTPS requests" @@ -1798,7 +1785,7 @@ msgstr "Adds registry to list of unqualified-search-registries. By default, for msgid "Administrative Distance" msgstr "Administrative Distance" -#: ../../configuration/nat/nat44.rst:289 +#: ../../configuration/nat/nat44.rst:301 msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." msgstr "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." @@ -1818,7 +1805,7 @@ msgstr "Advertising a Prefix" msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" -#: ../../configuration/vrf/index.rst:323 +#: ../../configuration/vrf/index.rst:325 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." @@ -1846,7 +1833,7 @@ msgstr "Algorithm" msgid "Aliases" msgstr "Aliases" -#: ../../configuration/service/dns.rst:154 +#: ../../configuration/service/dns.rst:167 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" @@ -1874,7 +1861,7 @@ msgstr "All interfaces used for the DHCP relay must be configured. This includes msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." -#: ../../configuration/service/dns.rst:156 +#: ../../configuration/service/dns.rst:169 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" @@ -1882,6 +1869,10 @@ msgstr "All other DNS requests will be forwarded to a different set of DNS serve msgid "All reply sizes are accepted by default." msgstr "All reply sizes are accepted by default." +#: ../../configuration/protocols/pim.rst:91 +msgid "All routers in the PIM network must agree on these values." +msgstr "All routers in the PIM network must agree on these values." + #: ../../configuration/system/task-scheduler.rst:10 msgid "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." msgstr "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." @@ -1894,11 +1885,11 @@ msgstr "All these rules with OTC will help to detect and mitigate route leaks an msgid "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." msgstr "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." -#: ../../configuration/firewall/zone.rst:36 +#: ../../configuration/firewall/zone.rst:55 msgid "All traffic between zones is affected by existing policies" msgstr "All traffic between zones is affected by existing policies" -#: ../../configuration/firewall/zone.rst:35 +#: ../../configuration/firewall/zone.rst:54 msgid "All traffic to and from an interface within a zone is permitted." msgstr "All traffic to and from an interface within a zone is permitted." @@ -1922,7 +1913,7 @@ msgstr "Allow access to sites in a domain without retrieving them from the Proxy msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." -#: ../../configuration/service/dns.rst:346 +#: ../../configuration/service/dns.rst:359 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." @@ -1930,15 +1921,24 @@ msgstr "Allow explicit IPv6 address for the interface." msgid "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." msgstr "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." +#: ../../configuration/service/mdns.rst:43 +msgid "Allow listing additional custom domains to be browsed (in addition to the default ``local``) so that they can be reflected." +msgstr "Allow listing additional custom domains to be browsed (in addition to the default ``local``) so that they can be reflected." + #: ../../configuration/protocols/bfd.rst:34 msgid "Allow this BFD peer to not be directly connected" msgstr "Allow this BFD peer to not be directly connected" -#: ../../configuration/firewall/general.rst:1137 #: ../../configuration/firewall/general-legacy.rst:694 msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." +#: ../../configuration/firewall/ipv4.rst:812 +#: ../../configuration/firewall/ipv6.rst:821 +#: ../../configuration/system/conntrack.rst:199 +msgid "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." +msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." + #: ../../configuration/interfaces/bridge.rst:162 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." msgstr "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." @@ -1959,7 +1959,9 @@ msgstr "Allows you to configure the next-hop interface for an interface-based IP msgid "Already learned known_hosts files of clients need an update as the public key will change." msgstr "Already learned known_hosts files of clients need an update as the public key will change." -#: ../../configuration/firewall/general.rst:377 +#: ../../configuration/firewall/bridge.rst:123 +#: ../../configuration/firewall/ipv4.rst:166 +#: ../../configuration/firewall/ipv6.rst:166 msgid "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**." msgstr "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**." @@ -1971,7 +1973,7 @@ msgstr "Also, for backwards compatibility this configuration, which uses generic msgid "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" msgstr "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" -#: ../../configuration/nat/nat44.rst:276 +#: ../../configuration/nat/nat44.rst:288 msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." msgstr "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." @@ -1983,15 +1985,15 @@ msgstr "Alternate Routing Tables" msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." msgstr "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." -#: ../../configuration/interfaces/vxlan.rst:321 +#: ../../configuration/interfaces/vxlan.rst:342 msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" -#: ../../configuration/service/dhcp-server.rst:130 +#: ../../configuration/service/dhcp-server.rst:116 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." -#: ../../configuration/firewall/general.rst:241 +#: ../../configuration/firewall/groups.rst:68 msgid "An **interface group** represents a collection of interfaces." msgstr "An **interface group** represents a collection of interfaces." @@ -2035,6 +2037,10 @@ msgstr "An agent is a network-management software module that resides on a manag msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" +#: ../../configuration/firewall/ipv4.rst:373 +msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." +msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." + #: ../../configuration/firewall/general-legacy.rst:424 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" @@ -2043,7 +2049,7 @@ msgstr "An arbitrary netmask can be applied to mask addresses to only match agai msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." -#: ../../configuration/firewall/general.rst:619 +#: ../../configuration/firewall/ipv6.rst:371 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" @@ -2072,7 +2078,7 @@ msgstr "An example of creating a VLAN-aware bridge is as follows:" msgid "An example of key generation:" msgstr "An example of key generation:" -#: ../../configuration/vpn/openconnect.rst:291 +#: ../../configuration/vpn/openconnect.rst:298 msgid "An example of the data captured by a FREERADIUS server with sql accounting:" msgstr "An example of the data captured by a FREERADIUS server with sql accounting:" @@ -2080,10 +2086,34 @@ msgstr "An example of the data captured by a FREERADIUS server with sql accounti msgid "An option that takes a quoted string is set by replacing all quote characters with the string ``"`` inside the static-mapping-parameters value. The resulting line in dhcpd.conf will be ``option pxelinux.configfile \"pxelinux.cfg/01-00-15-17-44-2d-aa\";``." msgstr "An option that takes a quoted string is set by replacing all quote characters with the string ``"`` inside the static-mapping-parameters value. The resulting line in dhcpd.conf will be ``option pxelinux.configfile \"pxelinux.cfg/01-00-15-17-44-2d-aa\";``." +#: ../../configuration/firewall/flowtables.rst:142 +msgid "Analysis on what happens for desired connection:" +msgstr "Analysis on what happens for desired connection:" + +#: ../../configuration/firewall/bridge.rst:297 +msgid "And, to print only bridge firewall information:" +msgstr "And, to print only bridge firewall information:" + +#: ../../configuration/firewall/ipv4.rst:57 +msgid "And base chain for traffic generated by the router is ``set firewall ipv4 output filter ...``" +msgstr "And base chain for traffic generated by the router is ``set firewall ipv4 output filter ...``" + +#: ../../configuration/firewall/ipv6.rst:57 +msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" +msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" + #: ../../configuration/policy/route.rst:76 msgid "And for ipv6:" msgstr "And for ipv6:" +#: ../../configuration/firewall/groups.rst:165 +msgid "And next, some configuration example where groups are used:" +msgstr "And next, some configuration example where groups are used:" + +#: ../../configuration/firewall/bridge.rst:349 +msgid "And op-mode commands:" +msgstr "And op-mode commands:" + #: ../../configuration/system/ip.rst:84 msgid "And the different IPv4 **reset** commands available:" msgstr "And the different IPv4 **reset** commands available:" @@ -2093,7 +2123,7 @@ msgstr "And the different IPv4 **reset** commands available:" msgid "And then hash is reduced modulo slave count." msgstr "And then hash is reduced modulo slave count." -#: ../../configuration/nat/nat44.rst:590 +#: ../../configuration/nat/nat44.rst:614 msgid "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT configuration, both DNAT and SNAT are used to NAT all traffic from an external IP address to an internal IP address and vice-versa." msgstr "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT configuration, both DNAT and SNAT are used to NAT all traffic from an external IP address to an internal IP address and vice-versa." @@ -2118,7 +2148,7 @@ msgstr "Apply a route-map filter to routes for the specified protocol. The follo msgid "Apply routing policy to **inbound** direction of out VLAN interfaces" msgstr "Apply routing policy to **inbound** direction of out VLAN interfaces" -#: ../../configuration/firewall/zone.rst:82 +#: ../../configuration/firewall/zone.rst:101 msgid "Applying a Rule-Set to a Zone" msgstr "Applying a Rule-Set to a Zone" @@ -2151,49 +2181,11 @@ msgstr "Arista EOS" msgid "Aruba/HP" msgstr "Aruba/HP" -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 #: ../../configuration/interfaces/pppoe.rst:207 #: ../../configuration/interfaces/pppoe.rst:253 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 #: ../../configuration/interfaces/sstp-client.rst:79 #: ../../_include/interface-ip.txt:4 #: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 -#: ../../_include/interface-ip.txt:4 -#: ../../_include/interface-ipv6.txt:60 msgid "As Internet wide PMTU discovery rarely works, we sometimes need to clamp our TCP MSS value to a specific value. This is a field in the TCP options part of a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'." msgstr "As Internet wide PMTU discovery rarely works, we sometimes need to clamp our TCP MSS value to a specific value. This is a field in the TCP options part of a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'." @@ -2209,6 +2201,10 @@ msgstr "As VyOS is Linux based the default port used is not using 4789 as the de msgid "As VyOS is based on Linux and there was no official IANA port assigned for VXLAN, VyOS uses a default port of 8472. You can change the port on a per VXLAN interface basis to get it working across multiple vendors." msgstr "As VyOS is based on Linux and there was no official IANA port assigned for VXLAN, VyOS uses a default port of 8472. You can change the port on a per VXLAN interface basis to get it working across multiple vendors." +#: ../../configuration/firewall/index.rst:7 +msgid "As VyOS is based on Linux it leverages its firewall. The Netfilter project created iptables and its successor nftables for the Linux kernel to work directly on packet data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g., a web server OR another device)." +msgstr "As VyOS is based on Linux it leverages its firewall. The Netfilter project created iptables and its successor nftables for the Linux kernel to work directly on packet data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g., a web server OR another device)." + #: ../../configuration/interfaces/wwan.rst:326 msgid "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, also the firmware can be reprogrammed." msgstr "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, also the firmware can be reprogrammed." @@ -2221,10 +2217,14 @@ msgstr "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte b msgid "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." msgstr "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." -#: ../../configuration/firewall/zone.rst:49 +#: ../../configuration/firewall/zone.rst:68 msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." msgstr "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." +#: ../../configuration/firewall/flowtables.rst:109 +msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." +msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." + #: ../../configuration/system/option.rst:80 msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." msgstr "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." @@ -2241,6 +2241,10 @@ msgstr "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys msgid "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." msgstr "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." +#: ../../configuration/firewall/groups.rst:147 +msgid "As said before, once firewall groups are created, they can be referenced either in firewall, nat, nat66 and/or policy-route rules." +msgstr "As said before, once firewall groups are created, they can be referenced either in firewall, nat, nat66 and/or policy-route rules." + #: ../../configuration/trafficpolicy/index.rst:196 msgid "As shown in the example above, one of the possibilities to match packets is based on marks done by the firewall, `that can give you a great deal of flexibility`_." msgstr "As shown in the example above, one of the possibilities to match packets is based on marks done by the firewall, `that can give you a great deal of flexibility`_." @@ -2249,11 +2253,11 @@ msgstr "As shown in the example above, one of the possibilities to match packets msgid "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies." msgstr "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies." -#: ../../configuration/firewall/index.rst:81 +#: ../../configuration/firewall/index.rst:176 msgid "As the example image below shows, the device now needs rules to allow/block traffic to or from the services running on the device that have open connections on that interface." msgstr "As the example image below shows, the device now needs rules to allow/block traffic to or from the services running on the device that have open connections on that interface." -#: ../../configuration/firewall/index.rst:60 +#: ../../configuration/firewall/index.rst:182 msgid "As the example image below shows, the device was configured with rules blocking inbound or outbound traffic on each interface." msgstr "As the example image below shows, the device was configured with rules blocking inbound or outbound traffic on each interface." @@ -2281,7 +2285,7 @@ msgstr "As with other policies, you can define different type of matching rules msgid "As with other policies, you can embed_ other policies into the classes (and default) of your Priority Queue policy through the ``queue-type`` setting:" msgstr "As with other policies, you can embed_ other policies into the classes (and default) of your Priority Queue policy through the ``queue-type`` setting:" -#: ../../configuration/interfaces/vxlan.rst:264 +#: ../../configuration/interfaces/vxlan.rst:285 msgid "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" msgstr "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" @@ -2309,7 +2313,7 @@ msgstr "Assign member interfaces to PortChannel" msgid "Assign static IP address to `` account." msgstr "Assign static IP address to `` account." -#: ../../configuration/service/dhcp-server.rst:111 +#: ../../configuration/service/dhcp-server.rst:97 msgid "Assign the IP address to this machine for `