Questions tagged [vyos]
The vyos tag has no usage guidance.
25
questions
3
votes
1
answer
10k
views
Ping works but TCP doesn't in a bit of an unusual topology
I'll first say that I didn't design this network from the get go, so the topology came as a surprise even to me.
There are two subnets (one is our companys and one is our clients) which reside in the ...
- 65
3
votes
0
answers
1k
views
Route OpenVPN traffic through Site to Site IPSec connection for specific routes
We recently changed our firewall from a Sonicwall 3060 to a Meraki MX100. After changing we discovered that our work for one customer relied on a site to site vpn to their network with outbound nat ...
- 31
3
votes
0
answers
2k
views
Use static IPv6 addresses on a router behind a Comcast Business IP Gateway
I recently got set up with Comcast Business Class internet. Previously, I was using DSL with another provider and had a single static IPv4 address (VyOS). Now I want to get Comcast set up.
I ...
- 153
2
votes
1
answer
377
views
VyOS equivalent of "deny unknown-clients" from dhcpd
I'm attempting to use VyOS as a router and move my dhcp server functionality into it. In my current setup, I have a subnet that only allowed statically mapped clients. I can easily get the static maps ...
- 131
1
vote
1
answer
8k
views
VyOS - routing in 2 networks
I do not know how to do routing between Lan#1 192.168.1.0 and Lan#2 192.168.10.0. I tried with static routing set protocols static route 0.0.0.0/0 next-hop 192.168.10.0 distance '1' but I do not ...
- 59
1
vote
2
answers
162
views
Synchronize states of bridge interfaces
We have redundant 10G fiber links to our upstream internet provider in an active/failover configuration. Between our router and the upstream router, we have a pair of firewalls running Vyos in ...
- 1,243
1
vote
1
answer
3k
views
VyOS Configuration Issue
I am working on setting up a VMWare lab. I have a physical box with which I've installed ESXi 6.7 on. While I'll be adding many more, I currently have 3 vm's; a Windows 2016 Server with no server ...
- 113
1
vote
1
answer
1k
views
Vyos: How to enable prior disabled Nat rules
Vyos ver. 1.1.8
When in configuration mode, you can easily disable a NAT rule by using the "disabled" argument. E.g.:
set destination nat rule 10 disabled
But how to enable it again ?
- 21
1
vote
2
answers
2k
views
Use 5 static IP addresses without NAT on hosts behind router behind Comcast Business IP Gateway
I have a VyOS router. VyOS is an OSS fork of Vyatta pre-Brocade/pre-Ubiquiti EdgeRouter. It has a DMZ fronting several servers that face the public and a private zone fronting our private WiFi and ...
- 153
1
vote
0
answers
747
views
TPROXY interferes DNAT port forwarding rules
I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer ...
- 23
1
vote
1
answer
3k
views
L2TP VPN connection not working - PAYLOAD_MALFORMED
I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one.
We have another physical server that needs to ...
- 111
1
vote
1
answer
366
views
Vyatta OpenVPN fails with push-route
we have a router running VyattaOS 5600 5.2R5 and want to set up openvpn to access our private subnets behind that router.
Basic VPN setup was successful and connecting works as expected, but when ...
- 185
1
vote
0
answers
1k
views
VyOS configuration qos by ip
I have a simple question, VyOS is a bit new to me.
I am trying to apply traffic shaper QOS.
this configuration works but I would have to repeat it 80 times (class 20, 21, 22, 23....)
set traffic-...
- 59
1
vote
0
answers
320
views
Domain-based instead of IP addresses load balancing in Vyatta
Currently my company has 6 Internet lines (1 Lease line and 5 fiber lines). Only the lease line (eth1) has the static IP address. So, if I want to give users access to secured site (That check IP ...
- 113
0
votes
1
answer
2k
views
vyos - error message "respawning too fast"
Just pulled down the ISO for the latest stable vyos today, 1.1.8, and ran on my Mac under VirtualBox. It emits this message about every 5 minutes:
INIT: Id "TO" respawning too fast: disabled for 5 ...
- 373
0
votes
1
answer
591
views
vyos: how does one use an address group in a rule?
I have a (modified) configuration looking like this:
When I try to commit, however, I get an error message: "Configuration error: "OUR-SERVERS" is not a valid IP range. I really want to have ...
- 373
0
votes
1
answer
6k
views
Can't access LAN devices behind OpenVPN Server
I have OpenVPN running on Ubuntu Server 16.04 (10.122.224.2). On the same LAN as the OpenVPN server (10.122.224.0/24), I have a VoIP PBX (10.122.224.5).
Local to me, I have an IP Phone (192.168.10....
- 140
0
votes
0
answers
133
views
VyOS: nat source rule [eth0] is not valid set failed
I have been getting "nat source rule [eth0] is not valid set failed" error on my vyos cli.
I have included my lab network diagram in this post as well.
i wanted to have the vyos as a router, ...
- 1
0
votes
0
answers
104
views
Linux IPVS in DR mode on vyos router/firewall not forwarding reply packets
I am setting up setup where:
I use vyos as router/firewall
on vyos i setup also IPVS in DR mode. It means that IPVS changes request packet MAC-address to realserver MAC-address and forwards packet ...
- 1
0
votes
1
answer
202
views
VyOS on AWS EC2, new IPSEC tunnel won't pass traffic- what am I missing
This is an existing environment that I just stepped into. Running VyOS as a AWS EC2 instance, which handles all of the site-to-site routing for our company. Everything is already up and working. We ...
- 240
0
votes
0
answers
1k
views
Unable to Ping IP Addresses on VIF interfaces on VyOS
I'm having issues with 2 VyOS routers, not being able to ping IP address on VIF interfaces. Below is the configuration on the router, which is also running BGP (which I've confirmed is working as ...
- 368
0
votes
1
answer
110
views
Requesting help / assistance on NAT VyOS configuration
i would like to request help / assistance on NAT VyOS configuration.
i'm new to it, so please bear with me :)
please see link for the sample diagram. https://i.ibb.co/kx1N6pD/NAT.png
from the ...
0
votes
0
answers
193
views
Vyos VPN from AWS to Cisco
I'm trying to configure Vyos VPN from AWS VPC to Cisco VPN.
I'm using prepared AWS AIM images - tried vyos 1.1.7 and vyos 1.2.
My Vyos instance is in a public segment of VPC:
vyos@ip-10-0-2-238:~$ ...
- 181
0
votes
1
answer
2k
views
VyOS NAT does not work
We are migrating our Internet Gateway from Cisco to a VyOS router.
Our ISP gives us a /29 network on VLAN 2715 from their router (A.B.C.114/29 where A.B.C.113 is their router and the gateway for our ...
- 101
0
votes
1
answer
47
views
Routing to custom remote destinations from VPCs through dynamic BGP VPN
I have a dynamic BGP VPN between a VPC and an on-premise site (on-premise uses vyOS router/vpn concentrator).
Servers in the VPC and on-premise subnets can communicate directly through he VPN.
The on-...
- 257