Lab 1.1 Routing and DMZ - FlameSpyro/Tech-Journal GitHub Wiki
VYOS
- When it comes to the management of a system you must first enter configure mode
- For example you need to set your hostname:
configure set system host-name fw1-your name commit save exit
- Changing ethernet information (replace x with desired port/ip)
set interfaces ethernet ethX address IPADDRESS/MASK
- Protocols for default gateway and DNS:
set protocols static route 0.0.0.0/0 next-hop x.x.x.x
set system name-server x.x.x.x
then commit and save
- Nat rules (configuring a firewall for NAT and DNS Forwarding)
configure
set nat source rule 10 description "NAT FROM DMZ to WAN"
set nat source rule 10 outbound-interface eth0
set nat source rule 10 source address 172.16.50.0/29
set nat source rule 10 translation address masquerade
commit
save
Syslog
- To ensure everything is up and running do the normal 'yum install rsyslog'
- Go into the etc/rsyslog.conf file and uncomment port 514
- Also add the ports both udp and TCP to the firewall
- tail -f /var/log/messages will allow you to listen in on web