Questions tagged [vyos]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
90 views

VyOS: nat source rule [eth0] is not valid set failed

I have been getting "nat source rule [eth0] is not valid set failed" error on my vyos cli. I have included my lab network diagram in this post as well. i wanted to have the vyos as a router, ...
Pasang's user avatar
  • 1
0 votes
0 answers
87 views

Linux IPVS in DR mode on vyos router/firewall not forwarding reply packets

I am setting up setup where: I use vyos as router/firewall on vyos i setup also IPVS in DR mode. It means that IPVS changes request packet MAC-address to realserver MAC-address and forwards packet ...
meelis's user avatar
  • 1
0 votes
1 answer
43 views

Routing to custom remote destinations from VPCs through dynamic BGP VPN

I have a dynamic BGP VPN between a VPC and an on-premise site (on-premise uses vyOS router/vpn concentrator). Servers in the VPC and on-premise subnets can communicate directly through he VPN. The on-...
Unpossible's user avatar
0 votes
1 answer
187 views

VyOS on AWS EC2, new IPSEC tunnel won't pass traffic- what am I missing

This is an existing environment that I just stepped into. Running VyOS as a AWS EC2 instance, which handles all of the site-to-site routing for our company. Everything is already up and working. We ...
boog's user avatar
  • 240
1 vote
1 answer
3k views

VyOS Configuration Issue

I am working on setting up a VMWare lab. I have a physical box with which I've installed ESXi 6.7 on. While I'll be adding many more, I currently have 3 vm's; a Windows 2016 Server with no server ...
sbagnato's user avatar
  • 113
1 vote
0 answers
704 views

TPROXY interferes DNAT port forwarding rules

I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer ...
GreenVine's user avatar
0 votes
0 answers
1k views

Unable to Ping IP Addresses on VIF interfaces on VyOS

I'm having issues with 2 VyOS routers, not being able to ping IP address on VIF interfaces. Below is the configuration on the router, which is also running BGP (which I've confirmed is working as ...
Christopher H's user avatar
0 votes
1 answer
103 views

Requesting help / assistance on NAT VyOS configuration

i would like to request help / assistance on NAT VyOS configuration. i'm new to it, so please bear with me :) please see link for the sample diagram. https://i.ibb.co/kx1N6pD/NAT.png from the ...
Ronald Repolona's user avatar
1 vote
1 answer
3k views

L2TP VPN connection not working - PAYLOAD_MALFORMED

I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one. We have another physical server that needs to ...
Crick3t's user avatar
  • 111
0 votes
0 answers
186 views

Vyos VPN from AWS to Cisco

I'm trying to configure Vyos VPN from AWS VPC to Cisco VPN. I'm using prepared AWS AIM images - tried vyos 1.1.7 and vyos 1.2. My Vyos instance is in a public segment of VPC: vyos@ip-10-0-2-238:~$ ...
Pavel Bernshtam's user avatar
1 vote
1 answer
364 views

Vyatta OpenVPN fails with push-route

we have a router running VyattaOS 5600 5.2R5 and want to set up openvpn to access our private subnets behind that router. Basic VPN setup was successful and connecting works as expected, but when ...
Dero's user avatar
  • 185
0 votes
1 answer
561 views

vyos: how does one use an address group in a rule?

I have a (modified) configuration looking like this: When I try to commit, however, I get an error message: "Configuration error: "OUR-SERVERS" is not a valid IP range. I really want to have ...
Kevin Buchs's user avatar
0 votes
1 answer
2k views

vyos - error message "respawning too fast"

Just pulled down the ISO for the latest stable vyos today, 1.1.8, and ran on my Mac under VirtualBox. It emits this message about every 5 minutes: INIT: Id "TO" respawning too fast: disabled for 5 ...
Kevin Buchs's user avatar
3 votes
0 answers
1k views

Route OpenVPN traffic through Site to Site IPSec connection for specific routes

We recently changed our firewall from a Sonicwall 3060 to a Meraki MX100. After changing we discovered that our work for one customer relied on a site to site vpn to their network with outbound nat ...
Ben Gourarie's user avatar
1 vote
1 answer
1k views

Vyos: How to enable prior disabled Nat rules

Vyos ver. 1.1.8 When in configuration mode, you can easily disable a NAT rule by using the "disabled" argument. E.g.: set destination nat rule 10 disabled But how to enable it again ?
may24x's user avatar
  • 21
1 vote
2 answers
161 views

Synchronize states of bridge interfaces

We have redundant 10G fiber links to our upstream internet provider in an active/failover configuration. Between our router and the upstream router, we have a pair of firewalls running Vyos in ...
yakatz's user avatar
  • 1,243
3 votes
0 answers
2k views

Use static IPv6 addresses on a router behind a Comcast Business IP Gateway

I recently got set up with Comcast Business Class internet. Previously, I was using DSL with another provider and had a single static IPv4 address (VyOS). Now I want to get Comcast set up. I ...
Nick Williams's user avatar
1 vote
2 answers
2k views

Use 5 static IP addresses without NAT on hosts behind router behind Comcast Business IP Gateway

I have a VyOS router. VyOS is an OSS fork of Vyatta pre-Brocade/pre-Ubiquiti EdgeRouter. It has a DMZ fronting several servers that face the public and a private zone fronting our private WiFi and ...
Nick Williams's user avatar
2 votes
1 answer
373 views

VyOS equivalent of "deny unknown-clients" from dhcpd

I'm attempting to use VyOS as a router and move my dhcp server functionality into it. In my current setup, I have a subnet that only allowed statically mapped clients. I can easily get the static maps ...
seanr8's user avatar
  • 131
0 votes
1 answer
6k views

Can't access LAN devices behind OpenVPN Server

I have OpenVPN running on Ubuntu Server 16.04 (10.122.224.2). On the same LAN as the OpenVPN server (10.122.224.0/24), I have a VoIP PBX (10.122.224.5). Local to me, I have an IP Phone (192.168.10....
Steve Stoveld's user avatar
3 votes
1 answer
10k views

Ping works but TCP doesn't in a bit of an unusual topology

I'll first say that I didn't design this network from the get go, so the topology came as a surprise even to me. There are two subnets (one is our companys and one is our clients) which reside in the ...
nyoatype's user avatar
1 vote
0 answers
1k views

VyOS configuration qos by ip

I have a simple question, VyOS is a bit new to me. I am trying to apply traffic shaper QOS. this configuration works but I would have to repeat it 80 times (class 20, 21, 22, 23....) set traffic-...
Mantykora 7's user avatar
1 vote
0 answers
319 views

Domain-based instead of IP addresses load balancing in Vyatta

Currently my company has 6 Internet lines (1 Lease line and 5 fiber lines). Only the lease line (eth1) has the static IP address. So, if I want to give users access to secured site (That check IP ...
Trinh Nguyen's user avatar
1 vote
1 answer
8k views

VyOS - routing in 2 networks

I do not know how to do routing between Lan#1 192.168.1.0 and Lan#2 192.168.10.0. I tried with static routing set protocols static route 0.0.0.0/0 next-hop 192.168.10.0 distance '1' but I do not ...
Mantykora 7's user avatar
0 votes
1 answer
2k views

VyOS NAT does not work

We are migrating our Internet Gateway from Cisco to a VyOS router. Our ISP gives us a /29 network on VLAN 2715 from their router (A.B.C.114/29 where A.B.C.113 is their router and the gateway for our ...
aastefanov's user avatar