1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
|
msgid ""
msgstr ""
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"X-Generator: Localazy (https://localazy.com)\n"
"Project-Id-Version: VyOS Documentation\n"
"Language: es\n"
"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n"
#: ../../quick-start.rst:189
msgid "A default action of ``return``, which returns the packet back to the original chain if no action is taken."
msgstr "A default action of ``return``, which returns the packet back to the original chain if no action is taken."
#: ../../quick-start.rst:125
msgid "A new firewall structure—which uses the ``nftables`` backend, rather than ``iptables``—is available on all installations starting from VyOS ``1.4-rolling-202308040557``. The firewall supports creation of distinct, interlinked chains for each `Netfilter hook <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_ and allows for more granular control over the packet filtering process."
msgstr "A new firewall structure—which uses the ``nftables`` backend, rather than ``iptables``—is available on all installations starting from VyOS ``1.4-rolling-202308040557``. The firewall supports creation of distinct, interlinked chains for each `Netfilter hook <https://wiki.nftables.org/wiki-nftables/index.php/Netfilter_hooks>`_ and allows for more granular control over the packet filtering process."
#: ../../quick-start.rst:191
msgid "A rule to ``accept`` packets from established and related connections."
msgstr "A rule to ``accept`` packets from established and related connections."
#: ../../quick-start.rst:192
msgid "A rule to ``drop`` packets from invalid connections."
msgstr "A rule to ``drop`` packets from invalid connections."
#: ../../quick-start.rst:125
msgid "Add a set of firewall policies for our outside/WAN interface."
msgstr "Agregue un conjunto de políticas de firewall para nuestra interfaz externa/WAN."
#: ../../quick-start.rst:29
msgid "After every configuration change, you need to apply the changes by using the following command:"
msgstr "Después de cada cambio de configuración, debe aplicar los cambios mediante el siguiente comando:"
#: ../../quick-start.rst:65
msgid "After switching to :ref:`quick-start-configuration-mode` issue the following commands, and your system will listen on every interface for incoming SSH connections. You might want to check the :ref:`ssh` chapter on how to listen on specific addresses only."
msgstr "Después de cambiar a :ref:`quick-start-configuration-mode`, ejecute los siguientes comandos y su sistema escuchará en cada interfaz las conexiones SSH entrantes. Es posible que desee consultar el capítulo :ref:`ssh` sobre cómo escuchar solo en direcciones específicas."
#: ../../quick-start.rst:51
msgid "After switching to :ref:`quick-start-configuration-mode` issue the following commands:"
msgstr "Después de cambiar a :ref:`quick-start-configuration-mode` emita los siguientes comandos:"
#: ../../quick-start.rst:311
msgid "Allow Access to Services"
msgstr "Allow Access to Services"
#: ../../quick-start.rst:267
msgid "Allow Management Access"
msgstr "Allow Management Access"
#: ../../quick-start.rst:202
msgid "Alternatively, instead of configuring the ``CONN_FILTER`` chain described above, you can take the more traditional stateful connection filtering approach by creating rules on each hook's chain:"
msgstr "Alternatively, instead of configuring the ``CONN_FILTER`` chain described above, you can take the more traditional stateful connection filtering approach by creating rules on each hook's chain:"
#: ../../quick-start.rst:219
msgid "Alternatively, you can take the more traditional stateful connection filtering approach by creating rules on each base hook's chain:"
msgstr "Alternatively, you can take the more traditional stateful connection filtering approach by creating rules on each base hook's chain:"
#: ../../quick-start.rst:167
msgid "Apply the firewall policies:"
msgstr "Aplicar las políticas de cortafuegos:"
#: ../../quick-start.rst:377
msgid "As above, commit your changes, save the configuration, and exit configuration mode:"
msgstr "Como arriba, confirme sus cambios, guarde la configuración y salga del modo de configuración:"
#: ../../quick-start.rst:237
msgid "Block Incoming Traffic"
msgstr "Block Incoming Traffic"
#: ../../quick-start.rst:17
msgid "By default, VyOS is in operational mode, and the command prompt displays a `$`. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a `#`, as demonstrated below:"
msgstr "De forma predeterminada, VyOS está en modo operativo y el símbolo del sistema muestra un `$`. Para configurar VyOS, deberá ingresar al modo de configuración, lo que dará como resultado que el símbolo del sistema muestre un `#`, como se muestra a continuación:"
#: ../../quick-start.rst:17
msgid "By default, VyOS is in operational mode, and the command prompt displays a ``$``. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a ``#``, as demonstrated below:"
msgstr "By default, VyOS is in operational mode, and the command prompt displays a ``$``. To configure VyOS, you will need to enter configuration mode, resulting in the command prompt displaying a ``#``, as demonstrated below:"
#: ../../quick-start.rst:27
msgid "Commit and Save"
msgstr "Comprométete y ahorra"
#: ../../quick-start.rst:337
msgid "Commit changes, save the configuration, and exit configuration mode:"
msgstr "Confirme los cambios, guarde la configuración y salga del modo de configuración:"
#: ../../quick-start.rst:15
msgid "Configuration Mode"
msgstr "Modo de configuración"
#: ../../quick-start.rst:138
msgid "Configure Firewall Groups"
msgstr "Configure Firewall Groups"
#: ../../quick-start.rst:157
msgid "Configure Stateful Packet Filtering"
msgstr "Configure Stateful Packet Filtering"
#: ../../quick-start.rst:281
msgid "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:"
msgstr "Configure a rule on the ``input`` hook filter to jump to the ``VyOS_MANAGEMENT`` chain when new connections are addressed to port 22 (SSH) on the router itself:"
#: ../../quick-start.rst:243
msgid "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network."
msgstr "Create a new chain (``OUTSIDE-IN``) which will drop all traffic that is not explicity allowed at some point in the chain. Then, we can jump to that chain from the ``forward`` hook when traffic is coming from the ``WAN`` interface group and is addressed to our local network."
#: ../../quick-start.rst:78
msgid "DHCP/DNS quick-start"
msgstr "Guía de inicio rápido de DHCP/DNS"
#: ../../quick-start.rst:87
msgid "DHCP clients will be assigned IP addresses within the range of `192.168.0.9 - 192.168.0.254` and have a domain name of `internal-network`"
msgstr "A los clientes DHCP se les asignarán direcciones IP dentro del rango de `192.168.0.9 - 192.168.0.254` y tendrán un nombre de dominio de `red-interna`"
#: ../../quick-start.rst:87
msgid "DHCP clients will be assigned IP addresses within the range of ``192.168.0.9 - 192.168.0.254`` and have a domain name of ``internal-network``"
msgstr "DHCP clients will be assigned IP addresses within the range of ``192.168.0.9 - 192.168.0.254`` and have a domain name of ``internal-network``"
#: ../../quick-start.rst:89
msgid "DHCP leases will hold for one day (86400 seconds)"
msgstr "Las concesiones de DHCP se mantendrán durante un día (86400 segundos)"
#: ../../quick-start.rst:131
msgid "Documentation for most of the new firewall CLI can be found in the :ref:`firewall` chapter.The legacy firewall is still available for versions before ``1.4-rolling-202308040557`` and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the new configuration."
msgstr "Documentation for most of the new firewall CLI can be found in the :ref:`firewall` chapter.The legacy firewall is still available for versions before ``1.4-rolling-202308040557`` and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the new configuration."
#: ../../quick-start.rst:351
msgid "Especially if you are allowing SSH remote access from the outside/WAN interface, there are a few additional configuration steps that should be taken."
msgstr "Especialmente si está permitiendo el acceso remoto SSH desde la interfaz exterior/WAN, hay algunos pasos de configuración adicionales que se deben tomar."
#: ../../quick-start.rst:291
msgid "Finally, configure the ``VyOS_MANAGEMENT`` chain to accept connection from the ``LAN`` interface group while limiting requests coming from the ``WAN`` interface group to 4 per minute:"
msgstr "Finally, configure the ``VyOS_MANAGEMENT`` chain to accept connection from the ``LAN`` interface group while limiting requests coming from the ``WAN`` interface group to 4 per minute:"
#: ../../quick-start.rst:367
msgid "Finally, try and SSH into the VyOS install as your new user. Once you have confirmed that your new user can access your router without a password, delete the original ``vyos`` user and completely disable password authentication for :ref:`ssh`:"
msgstr "Finalmente, intente y SSH en la instalación de VyOS como su nuevo usuario. Una vez que haya confirmado que su nuevo usuario puede acceder a su enrutador sin contraseña, elimine el usuario ``vyos`` original y deshabilite completamente la autenticación de contraseña para :ref:`ssh`:"
#: ../../quick-start.rst:329
msgid "Finally, we can now configure access to the services running on this router, allowing all connections coming from localhost:"
msgstr "Finally, we can now configure access to the services running on this router, allowing all connections coming from localhost:"
#: ../../quick-start.rst:123
msgid "Firewall"
msgstr "cortafuegos"
#: ../../quick-start.rst:273
msgid "First, create a new dedicated chain (``VyOS_MANAGEMENT``) for management access, which returns to the parent chain if no action is taken. Add a rule to accept traffic from the ``LAN`` interface group:"
msgstr "First, create a new dedicated chain (``VyOS_MANAGEMENT``) for management access, which returns to the parent chain if no action is taken. Add a rule to accept traffic from the ``LAN`` interface group:"
#: ../../quick-start.rst:349
msgid "Hardening"
msgstr "Endurecimiento"
#: ../../quick-start.rst:313
msgid "Here we're allowing the router to respond to pings. Then, we can allow access to the DNS recursor we configured earlier, accepting traffic bound for port 53 from all hosts on the ``NET-INSIDE-v4`` network:"
msgstr "Here we're allowing the router to respond to pings. Then, we can allow access to the DNS recursor we configured earlier, accepting traffic bound for port 53 from all hosts on the ``NET-INSIDE-v4`` network:"
#: ../../quick-start.rst:146
msgid "If you wanted to enable SSH access to your firewall from the outside/WAN interface, you could create some additional rules to allow that kind of traffic."
msgstr "Si quisiera habilitar el acceso SSH a su firewall desde la interfaz externa/WAN, podría crear algunas reglas adicionales para permitir ese tipo de tráfico."
#: ../../quick-start.rst:145
msgid "In this case, we will create two interface groups — a ``WAN`` group for our interfaces connected to the public internet and a ``LAN`` group for the interfaces connected to our internal network. Additionally, we will create a network group, ``NET-INSIDE-v4``, that contains our internal subnet."
msgstr "In this case, we will create two interface groups — a ``WAN`` group for our interfaces connected to the public internet and a ``LAN`` group for the interfaces connected to our internal network. Additionally, we will create a network group, ``NET-INSIDE-v4``, that contains our internal subnet."
#: ../../quick-start.rst:144
msgid "In this case, we will create two interface groups—a ``WAN`` group for our interfaces connected to the public internet and a ``LAN`` group for the interfaces connected to our internal network. Additionally, we will create a network group, ``NET-INSIDE-v4``, that contains our internal subnet."
msgstr "In this case, we will create two interface groups—a ``WAN`` group for our interfaces connected to the public internet and a ``LAN`` group for the interfaces connected to our internal network. Additionally, we will create a network group, ``NET-INSIDE-v4``, that contains our internal subnet."
#: ../../quick-start.rst:44
msgid "Interface Configuration"
msgstr "Configuración de la interfaz"
#: ../../quick-start.rst:170
msgid "Most installations would choose this option, and will contain:"
msgstr "Most installations would choose this option, and will contain:"
#: ../../quick-start.rst:110
msgid "NAT"
msgstr "NAT"
#: ../../quick-start.rst:239
msgid "Now that we have configured stateful connection filtering to allow traffic from established and related connections, we can block all other incoming traffic addressed to our local network."
msgstr "Now that we have configured stateful connection filtering to allow traffic from established and related connections, we can block all other incoming traffic addressed to our local network."
#: ../../quick-start.rst:36
msgid "Once your configuration works as expected, you can save it permanently by using the following command:"
msgstr "Una vez que su configuración funcione como se esperaba, puede guardarla permanentemente usando el siguiente comando:"
#: ../../quick-start.rst:92
msgid "Only hosts from your internal/LAN network can use the DNS recursor"
msgstr "Solo los hosts de su red LAN/interna pueden usar el recursor DNS"
#: ../../quick-start.rst:162
msgid "Option 1: Common Chain"
msgstr "Option 1: Common Chain"
#: ../../quick-start.rst:163
msgid "Option 1: Global State Policies"
msgstr "Option 1: Global State Policies"
#: ../../quick-start.rst:179
msgid "Option 2: Common/Custom Chain"
msgstr "Option 2: Common/Custom Chain"
#: ../../quick-start.rst:200
msgid "Option 2: Per-Hook Chain"
msgstr "Option 2: Per-Hook Chain"
#: ../../quick-start.rst:217
msgid "Option 3: Per-Hook Chain"
msgstr "Option 3: Per-Hook Chain"
#: ../../quick-start.rst:5
msgid "Quick Start"
msgstr "Inicio rápido"
#: ../../quick-start.rst:354
msgid "Replace the default ``vyos`` system user:"
msgstr "Replace the default ``vyos`` system user:"
#: ../../quick-start.rst:192
msgid "Replace the default `vyos` system user:"
msgstr "Reemplace el usuario del sistema `vyos` predeterminado:"
#: ../../quick-start.rst:63
msgid "SSH Management"
msgstr "Gestión SSH"
#: ../../quick-start.rst:360
msgid "Set up :ref:`ssh_key_based_authentication`:"
msgstr "Configurar :ref:`ssh_key_based_authentication`:"
#: ../../quick-start.rst:85
msgid "The address range `192.168.0.2/24 - 192.168.0.8/24` will be reserved for static assignments"
msgstr "El rango de direcciones `192.168.0.2/24 - 192.168.0.8/24` se reservará para asignaciones estáticas"
#: ../../quick-start.rst:85
msgid "The address range ``192.168.0.2/24 - 192.168.0.8/24`` will be reserved for static assignments"
msgstr "The address range ``192.168.0.2/24 - 192.168.0.8/24`` will be reserved for static assignments"
#: ../../quick-start.rst:187
msgid "The chain we will create is called ``CONN_FILTER`` and has three rules:"
msgstr "The chain we will create is called ``CONN_FILTER`` and has three rules:"
#: ../../quick-start.rst:84
msgid "The default gateway and DNS recursor address will be `192.168.0.1/24`"
msgstr "La puerta de enlace predeterminada y la dirección del recursor DNS serán `192.168.0.1/24`"
#: ../../quick-start.rst:84
msgid "The default gateway and DNS recursor address will be ``192.168.0.1/24``"
msgstr "The default gateway and DNS recursor address will be ``192.168.0.1/24``"
#: ../../quick-start.rst:132
msgid "The firewall begins with the base ``filter`` tables you define for each of the ``forward``, ``input``, and ``output`` Netfiter hooks. Each of these tables is populated with rules that are processed in order and can jump to other chains for more granular filtering."
msgstr "The firewall begins with the base ``filter`` tables you define for each of the ``forward``, ``input``, and ``output`` Netfiter hooks. Each of these tables is populated with rules that are processed in order and can jump to other chains for more granular filtering."
#: ../../quick-start.rst:80
msgid "The following settings will configure DHCP and DNS services on your internal/LAN network, where VyOS will act as the default gateway and DNS server."
msgstr "Los siguientes ajustes configurarán los servicios DHCP y DNS en su red interna/LAN, donde VyOS actuará como puerta de enlace predeterminada y servidor DNS."
#: ../../quick-start.rst:112
msgid "The following settings will configure :ref:`source-nat` rules for our internal/LAN network, allowing hosts to communicate through the outside/WAN network via IP masquerade."
msgstr "Los siguientes ajustes configurarán las reglas :ref:`source-nat` para nuestra red interna/LAN, lo que permitirá que los hosts se comuniquen a través de la red externa/WAN a través del enmascaramiento de IP."
#: ../../quick-start.rst:205
msgid "Then, we can jump to the common chain from both the ``forward`` and ``input`` hooks as the first filtering rule in the respective chains:"
msgstr "Then, we can jump to the common chain from both the ``forward`` and ``input`` hooks as the first filtering rule in the respective chains:"
#: ../../quick-start.rst:150
msgid "These rules allow SSH traffic and rate limit it to 4 requests per minute. This blocks brute-forcing attempts:"
msgstr "Estas reglas permiten el tráfico SSH y lo limitan a 4 solicitudes por minuto. Esto bloquea los intentos de fuerza bruta:"
#: ../../quick-start.rst:7
msgid "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (``eth0`` and ``eth1``)."
msgstr "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (``eth0`` and ``eth1``)."
#: ../../quick-start.rst:7
msgid "This chapter will guide you on how to get up to speed quickly using your new VyOS system. It will show you a very basic configuration example that will provide a :ref:`nat` gateway for a device with two network interfaces (`eth0` and `eth1`)."
msgstr "Este capítulo lo guiará sobre cómo ponerse al día rápidamente con su nuevo sistema VyOS. Le mostrará un ejemplo de configuración muy básico que proporcionará una puerta de enlace :ref:`nat` para un dispositivo con dos interfaces de red (`eth0` y `eth1`)."
#: ../../quick-start.rst:127
msgid "This configuration creates a proper stateful firewall that blocks all traffic which was not initiated from the internal/LAN side first."
msgstr "Esta configuración crea un firewall con estado adecuado que bloquea todo el tráfico que no se inició primero desde el lado interno/LAN."
#: ../../quick-start.rst:140
msgid "To make firewall configuration easier, we can create groups of interfaces, networks, addresses, ports, and domains that describe different parts of our network. We can then use them for filtering within our firewall rulesets, allowing for more concise and readable configuration."
msgstr "To make firewall configuration easier, we can create groups of interfaces, networks, addresses, ports, and domains that describe different parts of our network. We can then use them for filtering within our firewall rulesets, allowing for more concise and readable configuration."
#: ../../quick-start.rst:164
msgid "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall."
msgstr "Using options defined in ``set firewall global-options state-policy``, state policy rules that applies for both IPv4 and IPv6 are created. These global state policies also applies for all traffic that passes through the router (transit) and for traffic originated/destinated to/from the router itself, and will be avaluated before any other rule defined in the firewall."
#: ../../quick-start.rst:90
msgid "VyOS will serve as a full DNS recursor, replacing the need to utilize Google, Cloudflare, or other public DNS servers (which is good for privacy)"
msgstr "VyOS servirá como un recurso de DNS completo, reemplazando la necesidad de utilizar Google, Cloudflare u otros servidores DNS públicos (lo cual es bueno para la privacidad)"
#: ../../quick-start.rst:181
msgid "We can create a common chain for stateful connection filtering of multiple interfaces (or multiple netfilter hooks on one interface). Those individual chains can then jump to the common chain for stateful connection filtering, returning to the original chain for further rule processing if no action is taken on the packet."
msgstr "We can create a common chain for stateful connection filtering of multiple interfaces (or multiple netfilter hooks on one interface). Those individual chains can then jump to the common chain for stateful connection filtering, returning to the original chain for further rule processing if no action is taken on the packet."
#: ../../quick-start.rst:269
msgid "We can now configure access to the router itself, allowing SSH access from the inside/LAN network and rate limiting SSH access from the outside/WAN network."
msgstr "We can now configure access to the router itself, allowing SSH access from the inside/LAN network and rate limiting SSH access from the outside/WAN network."
#: ../../quick-start.rst:257
msgid "We should also block all traffic destinated to the router itself that isn't explicitly allowed at some point in the chain for the ``input`` hook. As we've already configured stateful packet filtering above, we only need to set the default action to ``drop``:"
msgstr "We should also block all traffic destinated to the router itself that isn't explicitly allowed at some point in the chain for the ``input`` hook. As we've already configured stateful packet filtering above, we only need to set the default action to ``drop``:"
#: ../../quick-start.rst:159
msgid "With the new firewall structure, we have have a lot of flexibility in how we group and order our rules, as shown by the three alternative approaches below."
msgstr "With the new firewall structure, we have have a lot of flexibility in how we group and order our rules, as shown by the three alternative approaches below."
#: ../../quick-start.rst:158
msgid "With the new firewall structure, we have have a lot of flexibility in how we group and order our rules, as shown by the two alternative approaches below."
msgstr "With the new firewall structure, we have have a lot of flexibility in how we group and order our rules, as shown by the two alternative approaches below."
#: ../../quick-start.rst:389
msgid "You now should have a simple yet secure and functioning router to experiment with further. Enjoy!"
msgstr "Ahora debería tener un enrutador simple pero seguro y funcional para experimentar más. ¡Disfrutar!"
#: ../../quick-start.rst:48
msgid "Your internal/LAN interface will be ``eth1``. It will use a static IP address of ``192.168.0.1/24``."
msgstr "Your internal/LAN interface will be ``eth1``. It will use a static IP address of ``192.168.0.1/24``."
#: ../../quick-start.rst:48
msgid "Your internal/LAN interface will be `eth1`. It will use a static IP address of `192.168.0.1/24`."
msgstr "Su interfaz interna/LAN será `eth1`. Utilizará una dirección IP estática de `192.168.0.1/24`."
#: ../../quick-start.rst:46
msgid "Your outside/WAN interface will be ``eth0``. It will receive its interface address via DHCP."
msgstr "Your outside/WAN interface will be ``eth0``. It will receive its interface address via DHCP."
#: ../../quick-start.rst:46
msgid "Your outside/WAN interface will be `eth0`. It will receive its interface address via DHCP."
msgstr "Su interfaz exterior/WAN será `eth0`. Recibirá su dirección de interfaz a través de DHCP."
|