vyos@r14:~$ show nat destination rules 
Rule    Source     Destination    Proto    In-Int    Translation
------  ---------  -------------  -------  --------  -------------
100     0.0.0.0/0  0.0.0.0/0      TCP      eth0      192.0.2.40
        sport any  dport 3389                        port 80
380     0.0.0.0/0  203.0.113.5    TCP      any       192.0.2.5
        sport any  dport 443                         port 8443
vyos@r14:~$

vyos@r14:~$ show vrf foo
Name    State    MAC address        Flags                     Interfaces
------  -------  -----------------  ------------------------  ------------
foo     up       aa:de:40:58:2e:dd  noarp,master,up,lower_up  eth1.2
vyos@r14:~$ 
vyos@r14:~$ 
vyos@r14:~$ 
vyos@r14:~$ /usr/libexec/vyos/op_mode/vrf.py show --name bar --raw
[
    {
        "ifname": "bar",
        "operstate": "UP",
        "address": "ce:c1:4f:e8:dc:9a",
        "flags": [
            "NOARP",
            "MASTER",
            "UP",
            "LOWER_UP"
        ]
    }
]
vyos@r14:~$

>>> from vyos.util import rc_cmd
>>>
>>> rc_cmd('uname')
(0, 'Linux')
>>> 
>>> rc_cmd('ip link show dev fake')
(1, 'Device "fake" does not exist.')
>>>

>>> rc, command = rc_cmd('ip link show dev eth999')
>>> 
>>> 
>>> print(rc)
1
>>> print(command)
Device "eth999" does not exist.
>>>

vyos@r14:~$ show vpn ipsec sa
Connection                 State    Uptime    Bytes In/Out    Packets In/Out    Remote address    Remote ID    Proposal
-------------------------  -------  --------  --------------  ----------------  ----------------  -----------  --------------
peer-192.0.2.2-tunnel-0    up       9s        0B/0B           0/0               192.0.2.2         N/A          AES_GCM_16_256
peer-2001:db8::2-tunnel-0  up       9s        0B/0B           0/0               2001:db8::2       N/A          AES_GCM_16_256
vyos@r14:~$

vyos@r14:~$ sudo swanctl -l
peer-2001:db8::2-tunnel-0: #4, ESTABLISHED, IKEv2, bae267e189f183be_i 008bf75c872ced6a_r*
  local  '2001:db8::1' @ 2001:db8::1[500]
  remote '2001:db8::2' @ 2001:db8::2[500]
  AES_GCM_16-256/PRF_HMAC_SHA2_256/MODP_2048
  established 25s ago, rekeying in 85328s
  peer-2001:db8::2-tunnel-0: #3, reqid 1, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 25s ago, rekeying in 28178s, expires in 28775s
    in  c762627a,      0 bytes,     0 packets
    out c2278f63,      0 bytes,     0 packets
    local  2001:db8:1111::/64
    remote 2001:db8:2222::/64
peer-192.0.2.2-tunnel-0: #3, ESTABLISHED, IKEv2, c923210fb14e11d5_i 2450ab183218d566_r*
  local  '192.0.2.1' @ 192.0.2.1[500]
  remote '192.0.2.2' @ 192.0.2.2[500]
  AES_GCM_16-256/PRF_HMAC_SHA2_256/MODP_2048
  established 25s ago, rekeying in 85526s
  peer-192.0.2.2-tunnel-0: #4, reqid 2, INSTALLED, TUNNEL, ESP:AES_GCM_16-256
    installed 25s ago, rekeying in 27722s, expires in 28775s
    in  c1892b7b,      0 bytes,     0 packets
    out c8fbbb2f,      0 bytes,     0 packets
    local  100.64.0.0/24
    remote 100.64.55.0/24
vyos@r14:~$

sudo nano -c +1385 /usr/lib/python3/dist-packages/vyos/ifconfig/interface.py

vyos@r14:~$ show nat source statistics 
Rule    Packets    Bytes    Interface
------  ---------  -------  -----------
10      5          380      eth0
20      0          0        any
30      0          0        any
40      0          0        eth0
40      0          0        eth0
vyos@r14:~$

set nat source rule 10 destination address '192.0.2.0/24'
set nat source rule 10 exclude
set nat source rule 10 outbound-interface 'any'
set nat source rule 10 protocol 'all'
set nat source rule 10 source address '0.0.0.0/0'
set nat source rule 100 outbound-interface 'eth0'
set nat source rule 100 source address '203.0.113.0/24'
set nat source rule 100 translation address masquerade

vyos@r14# run show nat source rules 
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/nat.py", line 157, in <module>
    res = vyos.opmode.run(sys.modules[__name__])
  File "/usr/lib/python3/dist-packages/vyos/opmode.py", line 118, in run
    res = func(**args)
  File "/usr/libexec/vyos/op_mode/nat.py", line 152, in show_rules
    return _get_formatted_output_rules(nat_rules, direction)
  File "/usr/libexec/vyos/op_mode/nat.py", line 103, in _get_formatted_output_rules
    sport {sport}'''
UnboundLocalError: local variable 'sport' referenced before assignment
[edit]
vyos@r14#

vyos@r14# run show conf com | match bri
set interfaces bridge br0 enable-vlan
set interfaces bridge br0 member interface eth1 allowed-vlan '5-50'
set interfaces bridge br0 member interface eth1 native-vlan '5'
[edit]
vyos@r14# 
[edit]
vyos@r14# run show bridge vlan 
port              vlan-id  
br0               1 PVID Egress Untagged
[edit]
vyos@r14#

set interfaces vxlan vxlan0 group '239.0.0.241'
set interfaces vxlan vxlan0 mtu '1370'
set interfaces vxlan vxlan0 port '4789'
set interfaces vxlan vxlan0 source-interface 'wg0'
set interfaces vxlan vxlan0 vni '123'
set interfaces wireguard wg0 address '100.64.0.1/24'
set interfaces wireguard wg0 peer PEER01 allowed-ips '0.0.0.0/0'
set interfaces wireguard wg0 peer PEER01 public-key 'VVfR5S0yi+QPEJRLr25ZAfzFnwZM40G5WCZ/7ou7h3k='
set interfaces wireguard wg0 private-key 'yGOy08Kv8KUe8rsO6WHeo5jC7YdOAzQK0SJkDFQWlmA='

vyos@r14:~$ show bridge 
Bridge interface br0:
Member    State       MTU    Flags                            Prio
--------  ----------  -----  -------------------------------  ------
dum0      forwarding  1500   broadcast,noarp,up,lower_up      32
eth1.30   forwarding  1500   broadcast,multicast,up,lower_up  32
eth1.55   forwarding  1500   broadcast,multicast,up,lower_up  32

set policy prefix-list BARRA32 rule 5 action 'permit'
set policy prefix-list BARRA32 rule 5 ge '32'
set policy prefix-list BARRA32 rule 5 le '32'
set policy prefix-list BARRA32 rule 5 prefix '0.0.0.0/0'
set policy prefix-list UTRSv4s25 rule 5 action 'permit'
set policy prefix-list UTRSv4s25 rule 5 le '25'
set policy prefix-list UTRSv4s25 rule 5 prefix '0.0.0.0/0'
set policy prefix-list6 BARRA128 rule 5 action 'permit'
set policy prefix-list6 BARRA128 rule 5 ge '128'
set policy prefix-list6 BARRA128 rule 5 le '128'
set policy prefix-list6 BARRA128 rule 5 prefix '::/0'
set policy prefix-list6 UTRSv6s49 rule 5 action 'permit'
set policy prefix-list6 UTRSv6s49 rule 5 le '49'
set policy prefix-list6 UTRSv6s49 rule 5 prefix '::/0'