Vyatta - Revision history

Sstrutt: Added Google Ad

2016-10-04T15:22:11Z

Added Google Ad

← Older revision		Revision as of 15:22, 4 October 2016
Line 1:		Line 1:
			{{#widget:Widget:GoogleAdSenseSkyscraper}}
	Unix based Open Source firewall router that sees itself in competition with Cisco. The firewall module is not on by default, so once interfaces are defined it will pass traffic freely. All configuration is done via the CLI <ref>There was a web interface available with the free version (which was just a pretty version of the CLI anyway), but this now only available via the paid-for version due to its use of the [[Acronyms#R\|REST]] [[Acronyms#A\|API]] (which is a premium feature).</ref>.		Unix based Open Source firewall router that sees itself in competition with Cisco. The firewall module is not on by default, so once interfaces are defined it will pass traffic freely. All configuration is done via the CLI <ref>There was a web interface available with the free version (which was just a pretty version of the CLI anyway), but this now only available via the paid-for version due to its use of the [[Acronyms#R\|REST]] [[Acronyms#A\|API]] (which is a premium feature).</ref>.

Sstrutt: Added category

2016-09-29T15:22:32Z

Added category

← Older revision		Revision as of 15:22, 29 September 2016
Line 281:		Line 281:
	== Notes ==		== Notes ==
	<references />		<references />

			[[Category:Vyatta]]

Sstrutt: /* SNMP Server */ Corrected and added firewall example

2014-03-24T15:14:29Z

SNMP Server: Corrected and added firewall example

← Older revision		Revision as of 15:14, 24 March 2014
Line 56:		Line 56:
	# Go into configuration mode		# Go into configuration mode
	#* <code> configure </code>		#* <code> configure </code>
	# Create a SNMP community		# Create a SNMP community (don't use public!)
	#* <code> set service snmp community public </code>		#* <code> set service snmp community public </code>
	~~# Go into the created community~~
	~~#* <code> edit service snmp community mp-public </code>~~
	# Create a SNMP client that's allowed to make SNMP requests		# Create a SNMP client that's allowed to make SNMP requests
	#* <code> set client 192.168.1.25 </code>		#* <code> set service snmp community public client 192.168.1.25 </code>
	# Apply changes and move back up to top-level part of config		# Apply changes and move back up to top-level part of config
	#* <code> commit </code>		#* <code> commit </code>
	~~#* <code> top </code>~~

	To set up SNMP trapping (assumes you're already in config mode)		To set up SNMP trapping (assumes you're already in config mode)
Line 71:		Line 68:
	# Apply changes		# Apply changes
	#* <code> commit </code>		#* <code> commit </code>

			If you have the firewall enabled, you'll need to allow SNMP traffic in, eg
			<pre>
			set firewall name eth0-local rule 70 description 'VYATTA SNMP'
			set firewall name eth0-local rule 70 action 'accept'
			set firewall name eth0-local rule 70 destination port '161'
			set firewall name eth0-local rule 70 protocol 'udp'
			set firewall name eth0-local rule 70 source address '192.168.1.25'
			</pre>

	== Configuration ==		== Configuration ==

Sstrutt: /* Set-up */ Added SNMP settings

2012-08-28T14:10:48Z

Set-up: Added SNMP settings

@@ Line 51: / Line 51: @@
 #* <code> show system name-server </code>
 #* <code> show system domain-search </code>
 == Configuration ==

Sstrutt: /* Troubleshooting and General Commands */ Added "Unable to Commit Interface Change (RTNETLINK)"

2012-07-24T08:34:58Z

Troubleshooting and General Commands: Added "Unable to Commit Interface Change (RTNETLINK)"

@@ Line 217: / Line 217: @@
 |<code> show flow-accounting interface eth0 host 10.1.1.1 </code> || Show flow accounting for specific IP through <code> eth0 </code>
 |}
 === TCPdump ===

Sstrutt: /* Troubleshooting */ Renamed to " Troubleshooting and General Commands"

2012-06-29T12:24:11Z

Troubleshooting: Renamed to " Troubleshooting and General Commands"

← Older revision		Revision as of 12:24, 29 June 2012
Line 190:		Line 190:
	delete service nat rule 42		delete service nat rule 42

	== Troubleshooting ==		== Troubleshooting and General Commands ==
	{\|class="vwikitable"		{\|class="vwikitable"
	\|-		\|-
	! Command !! Comments		! Command !! Comments
			\|-
			\|<code> reboot </code> \|\|
			\|-
			\|<code> shutdown </code> \|\|
	\|-		\|-
	\|<code> show arp </code> \|\|		\|<code> show arp </code> \|\|

Sstrutt: /* TCPdump */ Corrections and addition of link to TCPdump manual

2012-05-30T11:17:18Z

TCPdump: Corrections and addition of link to TCPdump manual

← Older revision		Revision as of 11:17, 30 May 2012
Line 215:		Line 215:

	=== TCPdump ===		=== TCPdump ===
	TCPdump can only be run as root, therefore you ~~mat~~ need to set the root password first...		TCPdump can only be run as root, therefore you may need to set the root password first...
	sudo root ~~passwd~~		sudo passwd root
			...then you'll be elevate to be the super user, from where you can run TCPdump...
			su -

	TCPdump examples...		Some basic TCPdump examples...

	{\|class="vwikitable"		{\|class="vwikitable"
Line 230:		Line 232:
	\|<code> tcpdump -w capture.pcap -i eth0 port 80 </code> \|\| Write capture to capture.pcap		\|<code> tcpdump -w capture.pcap -i eth0 port 80 </code> \|\| Write capture to capture.pcap
	\|}		\|}

			For more info see the TCPdump man page - http://www.tcpdump.org/tcpdump_man.html

	== Notes ==		== Notes ==
	<references />		<references />

Sstrutt: Minor rewording and Meta

2012-05-24T22:13:00Z

Minor rewording and Meta

← Older revision		Revision as of 22:13, 24 May 2012
Line 1:		Line 1:
			Unix based Open Source firewall router that sees itself in competition with Cisco. The firewall module is not on by default, so once interfaces are defined it will pass traffic freely. All configuration is done via the CLI <ref>There was a web interface available with the free version (which was just a pretty version of the CLI anyway), but this now only available via the paid-for version due to its use of the [[Acronyms#R\|REST]] [[Acronyms#A\|API]] (which is a premium feature).</ref>.

			== Set-up ==
	[http://www.vyatta.com/downloads/index.php Vyatta Download]		[http://www.vyatta.com/downloads/index.php Vyatta Download]

	Unix based Open Source firewall router that see itself in competition with Cisco. The firewall module is not on by default, so once interfaces are defined it will pass traffic freely. All configuration is done via the CLI (there is a web interface, but its just a pretty version of the CLI.

	~~== Set-up ==~~
	=== Installation (ISO Install) ===		=== Installation (ISO Install) ===
	# Download the LiveOS ISO		# Download the LiveOS ISO
Line 85:		Line 85:
	=== Firewall ===		=== Firewall ===
	If an interface has no firewall config, then it passes all traffic. Once any firewall config is applied then that interface acts as a firewall.		If an interface has no firewall config, then it passes all traffic. Once any firewall config is applied then that interface acts as a firewall.
	* http://www.carbonwind.net/VyattaOFR/Firewall/Firewall.htm - ~~Useful~~ page to learn from		* http://www.carbonwind.net/VyattaOFR/Firewall/Firewall.htm - A bit old, but a useful page to learn from

	{\| class="vwikitable"		{\| class="vwikitable"
Line 230:		Line 230:
	\|<code> tcpdump -w capture.pcap -i eth0 port 80 </code> \|\| Write capture to capture.pcap		\|<code> tcpdump -w capture.pcap -i eth0 port 80 </code> \|\| Write capture to capture.pcap
	\|}		\|}

			== Notes ==
			<references />

Sstrutt: /* Troubleshooting */ Update table formating

2012-02-21T15:26:19Z

Troubleshooting: Update table formating

← Older revision		Revision as of 15:26, 21 February 2012
Line 191:		Line 191:

	== Troubleshooting ==		== Troubleshooting ==
	{\|~~cellpadding~~="~~1" cellspacing="0" border="1~~"		{\|class="vwikitable"
	\|- ~~style="background-color:#bbddff;"~~		\|-
	! Command !! Comments		! Command !! Comments
	\|-		\|-
Line 220:		Line 220:
	TCPdump examples...		TCPdump examples...

	{\|~~cellpadding~~="~~1" cellspacing="0" border="1~~"		{\|class="vwikitable"
	\|- ~~style="background-color:#bbddff;"~~		\|-
	! Command !! Comments		! Command !! Comments
	\|-		\|-

Sstrutt: /* Configuration */ Updated table formating

2012-02-21T15:24:14Z

Configuration: Updated table formating

← Older revision		Revision as of 15:24, 21 February 2012
Line 56:		Line 56:
	In similar fashion to Cisco IOS, configuration has to be entered in config mode, and the configuration can only be viewed in Operator mode.		In similar fashion to Cisco IOS, configuration has to be entered in config mode, and the configuration can only be viewed in Operator mode.

	{\| ~~cellpadding~~="~~4" cellspacing="0" border="1~~"		{\| class="vwikitable"
	\|-		\|-
	! Command !! Description		! Command !! Description
Line 70:		Line 70:

	=== User Accounts ===		=== User Accounts ===
	{\| ~~cellpadding~~="~~4" cellspacing="0" border="1~~"		{\| class="vwikitable"
	\|-		\|-
	! Command !! Description		! Command !! Description
Line 87:		Line 87:
	* http://www.carbonwind.net/VyattaOFR/Firewall/Firewall.htm - Useful page to learn from		* http://www.carbonwind.net/VyattaOFR/Firewall/Firewall.htm - Useful page to learn from

	{\| ~~cellpadding~~="~~4" cellspacing="0" border="1~~"		{\| class="vwikitable"
	\|-		\|-
	! Command !! Description		! Command !! Description