Vyos Commands - savannahc502/SavC-TechJournal-SEC350 GitHub Wiki

Task	Command(s)
Setting the Hostname	`configure` `set system host-name <hostname>` `commit` `save` `exit`
Changing Password	`configure` `set system login user <username> authentication plaintext-password <password>` `commit` `save` `exit`
Deleting DHCP Configuration	`delete interfaces ethernet <interface> address dhcp` `commit` `save`
Setting Interface Descriptions and IPs	`configure` `set interfaces ethernet <interface> description <description>` `set interfaces ethernet <interface> address <IP address>` `commit` `save`
Setting Default Gateway and DNS	`set protocols static route 0.0.0.0/0 next-hop <gateway IP>` `set system name-server <DNS IP>` `commit` `save`
NAT Forwarding	`configure` `set nat source rule <rule number> description "NAT FROM <source> to <destination>"` `set nat source rule <rule number> outbound-interface <interface>` `set nat source rule <rule number> source address <source IP>` `set nat source rule <rule number> translation address masquerade` `commit` `save`
DNS Forwarding	`set service dns forwarding listen-address <IP address>` `set service dns forwarding allow-from <IP range>` `set service dns forwarding system` `commit` `save`

Task	Command
Configure Firewall Zones	`configure` `set zone-policy zone <zone> interface <interface>`
Default Drop and Log Rules	`set firewall name <firewall name> default-action drop` `set firewall name <firewall name> enable-default-log`
Assign Firewalls to Zones	`set zone-policy zone <zone> from <zone> firewall name <firewall name>`
Create Firewall Rules	`set firewall name <firewall name> rule <rule number>` `set firewall name <firewall name > rule <rule number> action <action>` `set firewall name <firewall name> rule <rule number> description "<description>"` `set firewall name <firewall name > rule <rule number> destination address <address>` `set firewall name <firewall name> rule <rule number> destination port <port>` `set firewall name <firewall name> rule <rule number> protocol <protocol>`
Allow Established Connections	`set firewall name <firewall name> rule <rule numeber> state established enable`
Enable Logs	`tail -f /var/log/messages`