Lab 1.1 Routing and DMZ - FlameSpyro/Tech-Journal GitHub Wiki

VYOS

  • When it comes to the management of a system you must first enter configure mode
  • For example you need to set your hostname: configure set system host-name fw1-your name commit save exit
  • Changing ethernet information (replace x with desired port/ip) set interfaces ethernet ethX address IPADDRESS/MASK
  • Protocols for default gateway and DNS: set protocols static route 0.0.0.0/0 next-hop x.x.x.x set system name-server x.x.x.x then commit and save
  • Nat rules (configuring a firewall for NAT and DNS Forwarding)
configure
set nat source rule 10 description "NAT FROM DMZ to WAN"
set nat source rule 10 outbound-interface eth0
set nat source rule 10 source address 172.16.50.0/29
set nat source rule 10 translation address masquerade
commit
save

Syslog

  • To ensure everything is up and running do the normal 'yum install rsyslog'
  • Go into the etc/rsyslog.conf file and uncomment port 514
  • Also add the ports both udp and TCP to the firewall
  • tail -f /var/log/messages will allow you to listen in on web