Skip to content

Instantly share code, notes, and snippets.

@jubalskaggs
Last active January 26, 2019 02:43
Show Gist options
  • Save jubalskaggs/1ae30caa63c8ed717b50e6c2abfa5cf6 to your computer and use it in GitHub Desktop.
Save jubalskaggs/1ae30caa63c8ed717b50e6c2abfa5cf6 to your computer and use it in GitHub Desktop.
# show config output
interfaces {
ethernet eth0 {
address 10.0.0.1/20
description LAN
duplex auto
hw-id 00:1a:8c:3d:86:60
smp_affinity auto
speed auto
}
ethernet eth1 {
address dhcp
description WAN
duplex auto
hw-id 00:1a:8c:3d:86:61
smp_affinity auto
speed auto
}
ethernet eth2 {
duplex auto
hw-id 00:1a:8c:3d:86:62
smp_affinity auto
speed auto
}
ethernet eth3 {
duplex auto
hw-id 00:1a:8c:3d:86:63
smp_affinity auto
speed auto
}
ethernet eth4 {
duplex auto
hw-id 00:1a:8c:3d:86:64
smp_affinity auto
speed auto
}
ethernet eth5 {
duplex auto
hw-id 00:1a:8c:3d:86:65
smp_affinity auto
speed auto
}
ethernet eth6 {
duplex auto
hw-id 00:1a:8c:3d:86:66
smp_affinity auto
speed auto
}
ethernet eth7 {
duplex auto
hw-id 00:1a:8c:3d:86:67
smp_affinity auto
speed auto
}
loopback lo {
}
}
protocols {
static {
}
}
service {
ssh {
listen-address 10.0.0.1
port 22
}
}
system {
config-management {
commit-revisions 20
}
console {
device ttyS0 {
speed 9600
}
}
host-name vyos
login {
user vyos {
authentication {
encrypted-password ****************
plaintext-password ****************
}
level admin
}
}
ntp {
server 0.pool.ntp.org {
}
server 1.pool.ntp.org {
}
server 2.pool.ntp.org {
}
}
package {
auto-sync 1
repository community {
components main
distribution helium
password ****************
url http://packages.vyos.net/vyos
username ""
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone UTC
}
vpn {
ipsec {
esp-group gcp-esp {
compression disable
lifetime 10800
mode tunnel
pfs enable
proposal 1 {
encryption aes256
hash sha1
}
}
ike-group gcp-ike {
ikev2-reauth no
key-exchange ikev2
lifetime 36000
proposal 1 {
dh-group 14
encryption aes256
hash sha1
}
}
ipsec-interfaces {
interface eth1
interface eth0
}
site-to-site {
peer 35.203.158.32 {
authentication {
id 24.237.4.122
mode pre-shared-secret
pre-shared-secret ****************
}
ike-group gcp-ike
local-address 24.237.4.122
tunnel 0 {
allow-nat-networks disable
allow-public-networks disable
esp-group gcp-esp
local {
prefix 10.0.0.0/20
}
remote {
prefix 10.138.0.0/20
}
}
}
}
}
}
# netstat -nr
vyos@vyos:~$ netstat -nr
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 24.237.0.1 0.0.0.0 UG 0 0 0 eth1
10.0.0.0 0.0.0.0 255.255.240.0 U 0 0 0 eth0
24.237.0.0 0.0.0.0 255.255.248.0 U 0 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment