Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [vyos]

22 questions
3
votes
0 answers

Route OpenVPN traffic through Site to Site IPSec connection for specific routes

We recently changed our firewall from a Sonicwall 3060 to a Meraki MX100. After changing we discovered that our work for one customer relied on a site to site vpn to their network with outbound nat translation. Meraki devices do not support such a…
Ben Gourarie
  • 31
  • 1
3
votes
0 answers

Use static IPv6 addresses on a router behind a Comcast Business IP Gateway

I recently got set up with Comcast Business Class internet. Previously, I was using DSL with another provider and had a single static IPv4 address (VyOS). Now I want to get Comcast set up. I purchased a static IP address delegation from Comcast. I…
Nick Williams
  • 153
  • 1
  • 7
3
votes
1 answer

Ping works but TCP doesn't in a bit of an unusual topology

I'll first say that I didn't design this network from the get go, so the topology came as a surprise even to me. There are two subnets (one is our companys and one is our clients) which reside in the same physical location, and because of that the…
nyoatype
  • 65
  • 1
  • 8
2
votes
1 answer

VyOS equivalent of "deny unknown-clients" from dhcpd

I'm attempting to use VyOS as a router and move my dhcp server functionality into it. In my current setup, I have a subnet that only allowed statically mapped clients. I can easily get the static maps to work with VyOS, but I don't know how to…
seanr8
  • 131
  • 4
1
vote
1 answer

L2TP VPN connection not working - PAYLOAD_MALFORMED

I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one. We have another physical server that needs to be connected to the virtual servers. So I am…
Crick3t
  • 111
  • 1
  • 6
1
vote
1 answer

Vyatta OpenVPN fails with push-route

we have a router running VyattaOS 5600 5.2R5 and want to set up openvpn to access our private subnets behind that router. Basic VPN setup was successful and connecting works as expected, but when defining push routes the tunnel interfact cannot be…
Dero
  • 75
  • 1
  • 14
1
vote
2 answers

Synchronize states of bridge interfaces

We have redundant 10G fiber links to our upstream internet provider in an active/failover configuration. Between our router and the upstream router, we have a pair of firewalls running Vyos in transparent mode. We use BGP for route advertisement and…
yakatz
  • 1,213
  • 3
  • 12
  • 33
1
vote
2 answers

Use 5 static IP addresses without NAT on hosts behind router behind Comcast Business IP Gateway

I have a VyOS router. VyOS is an OSS fork of Vyatta pre-Brocade/pre-Ubiquiti EdgeRouter. It has a DMZ fronting several servers that face the public and a private zone fronting our private WiFi and ethernet networks. We have previously been working…
Nick Williams
  • 153
  • 1
  • 7
1
vote
0 answers

VyOS configuration qos by ip

I have a simple question, VyOS is a bit new to me. I am trying to apply traffic shaper QOS. this configuration works but I would have to repeat it 80 times (class 20, 21, 22, 23....) set traffic-policy shaper DOWNLOAD-POLICY class 20 bandwidth…
Mantykora 7
  • 59
  • 1
  • 12
1
vote
0 answers

Domain-based instead of IP addresses load balancing in Vyatta

Currently my company has 6 Internet lines (1 Lease line and 5 fiber lines). Only the lease line (eth1) has the static IP address. So, if I want to give users access to secured site (That check IP addresses e.g. Apple Distinguish Educators login), I…
Trinh Nguyen
  • 113
  • 6
1
vote
1 answer

VyOS - routing in 2 networks

I do not know how to do routing between Lan#1 192.168.1.0 and Lan#2 192.168.10.0. I tried with static routing set protocols static route 0.0.0.0/0 next-hop 192.168.10.0 distance '1' but I do not understand it. 1. Interfaces run show interfaces…
Mantykora 7
  • 59
  • 1
  • 12
1
vote
1 answer

VyOS Configuration Issue

I am working on setting up a VMWare lab. I have a physical box with which I've installed ESXi 6.7 on. While I'll be adding many more, I currently have 3 vm's; a Windows 2016 Server with no server roles installed, a DC (cloned from the base image of…
sbagnato
  • 113
  • 4
1
vote
0 answers

TPROXY interferes DNAT port forwarding rules

I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer working (connection timeout when connecting from…
GreenVine
  • 23
  • 3
0
votes
0 answers

Vyos VPN from AWS to Cisco

I'm trying to configure Vyos VPN from AWS VPC to Cisco VPN. I'm using prepared AWS AIM images - tried vyos 1.1.7 and vyos 1.2. My Vyos instance is in a public segment of VPC: vyos@ip-10-0-2-238:~$ show interfaces Codes: S - State, L - Link, u - Up,…
Pavel Bernshtam
  • 181
  • 1
  • 5
0
votes
1 answer

vyos: how does one use an address group in a rule?

I have a (modified) configuration looking like this: When I try to commit, however, I get an error message: "Configuration error: "OUR-SERVERS" is not a valid IP range. I really want to have individual (/32) addresses in the group that the rule…
Kevin Buchs
  • 313
  • 1
  • 3
  • 19
1
2