1.1 VYOS - CameronProvost/SEC-350 GitHub Wiki

VyOS configurations require changes made to the running config to be done in configure mode then applied with a commit. For example in lab 1.1 when I set the Hostname first I entered configure mode by typing "configure", set system host-name fw1-cameron. Then I commit by entering "commit", "save" and exit. Other commands used for the lab are as followed and entered in the same configure and commit process.

  • Interface description "set interfaces ethernet eth0 description SEC350-WAN"
  • Interface Addresses "set interfaces ethernet ethX address IPADDRESS/MASK"
  • Gateway and DNS "set protocols static route 0.0.0.0/0 next-hop 10.0.17.2
  • Gateway and DNS "set system name-server 10.0.17.2"
  • NAT and DNS Forwarding "set nat source rule 10 description "NAT FROM DMZ to WAN"
  • NAT and DNS Forwarding "set nat source rule 10 outbound-interface eth0"
  • NAT and DNS Forwarding "set nat source rule 10 source address 172.16.50.0/29"
  • NAT and DNS Forwarding "set nat source rule 10 translation address masquerade"