mathieu/system-config
1
0
Fork 0
Code Issues Packages Activity Actions

Fix vyos config

Browse source
This commit is contained in:
Mathieu Strypsteen 2024-12-09 13:36:22 +01:00
parent 328946170d
commit 8ba0de2b30
Signed by: mathieu
GPG key ID: 782A42E461BC6824
1 changed files with 6 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
setup-vyos.sh
View file

@ -17,17 +17,17 @@ set system static-host-mapping host-name home.strypsteen.com alias photos.stryps
set system static-host-mapping host-name home.strypsteen.com alias remote-desktop.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias vault.strypsteen.com
set system static-host-mapping host-name home.strypsteen.com alias xmr.strypsteen.com
set system sysctl parameter net.ipv6.conf.eth0.use_tempaddr value 2
set system time-zone Europe/Brussels
set interfaces ethernet eth0 address dhcp
set interfaces ethernet eth0 ipv6 address autoconf
set interfaces ethernet eth0 dhcpv6-options pd 0 length 56
set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth1 sla-id 0
set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth2 sla-id 1
set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth3 sla-id 2
set interfaces ethernet eth1 address 192.168.255.1/24
set interfaces ethernet eth1 address fc00::1/64
set interfaces ethernet eth2 address 192.168.254.1/24
set interfaces ethernet eth2 address fc01::1/64
set interfaces ethernet eth3 address 192.168.253.1/24
set interfaces ethernet eth3 address fc02::1/64
set interfaces wireguard wg0 address 192.168.252.1/24
set interfaces wireguard wg0 port 51820
@ -73,15 +73,14 @@ set service lldp interface all
set nat source rule 1 outbound-interface name eth0
set nat source rule 1 translation address masquerade
set nat66 source rule 1 outbound-interface name eth0
set nat66 source rule 1 translation address masquerade
delete firewall
set firewall global-options source-validation strict
set firewall global-options ipv6-source-validation strict
set firewall ipv6 forward filter rule 6 action accept
set firewall ipv6 forward filter rule 6 protocol ipv6-icmp
firewall_types="ipv4 ipv6"
for i in ${firewall_types}; do