inet6 2001:db8::3/125 scope global tentative

inet6 2001:db8::3/125 scope global

vyos@r1# set service webproxy 
Possible completions:
   append-domain
                Default domain name
 > authentication
                Proxy Authentication Settings
+> cache-peer   Specify other caches in a hierarchy
   cache-size   Disk cache size in MB (default: 100)
   default-port Default Proxy Port (default: 3128)
   disable-access-log
                Disable logging of HTTP accesses
+  domain-block Domain name to block
+  domain-noncache
                Domain name to access without caching
+> listen-address
                IPv4 listen-address for WebProxy [REQUIRED]
   maximum-object-size
                Maximum size of object to be stored in cache in kilobytes
   mem-cache-size
                Memory cache size in MB
   minimum-object-size
                Maximum size of object to be stored in cache in kilobytes
   outgoing-address
                Outgoing IP address for webproxy
+  reply-block-mime
                MIME type to block
   reply-body-max-size
                Maximum reply body size in KB
 > url-filtering
                URL filtering settings

set interfaces tunnel tun1 encapsulation 'gre'
set interfaces tunnel tun1 remote '203.0.113.254'
set interfaces tunnel tun1 source-address '203.0.113.1'

vyos@r1# set firewall group network-group NG network 198.51.100.0/24
[edit]
vyos@r1# commit
[edit]
vyos@r1# set firewall group network-group NG network 198.51.100.99/32
[edit]
vyos@r1# commit
[edit]
vyos@r1#

r1(config-router)# neighbor eth1 interface peer-group

vyos@r1# set protocols bgp 65001 neighbor eth1 interface peer-group 
Possible completions:
   <text>       peer group for this peer

vyos@r1:~$ sudo sysctl -a | grep send_redire
net.ipv4.conf.all.send_redirects = 1
net.ipv4.conf.default.send_redirects = 0
net.ipv4.conf.dum0.send_redirects = 0
net.ipv4.conf.eth0.send_redirects = 0
net.ipv4.conf.eth1.send_redirects = 0
net.ipv4.conf.eth2.send_redirects = 0
net.ipv4.conf.eth3.send_redirects = 0
net.ipv4.conf.eth4.send_redirects = 0
net.ipv4.conf.eth5.send_redirects = 0
net.ipv4.conf.eth6.send_redirects = 0
net.ipv4.conf.lo.send_redirects = 1
vyos@r1:~$ 
vyos@r1:~$ 
vyos@r1:~$ reboot now

vyos@r1# run generate wireguard client-config c1 interface wg0 server 203.0.113.1 address 10.0.0.2/32

vyos@r1# set policy local-route
Possible completions:
 > local-route  IPv4 policy route of local traffic
 > local-route6 IPv6 policy route of local traffic

vyos@r1:~$ generate vpn x509 key-pair testone
Can't open /etc/key-pair.template for reading, No such file or directory
140089191929024:error:02001002:system library:fopen:No such file or directory:../crypto/bio/bss_file.c:69:fopen('/etc/key-pair.template','r')
140089191929024:error:2006D080:BIO routines:BIO_new_file:no such file:../crypto/bio/bss_file.c:76:
vyos@r1:~$ cat /etc/key-pair.template
cat: /etc/key-pair.template: No such file or directory
vyos@r1:~$ 
vyos@r1:~$ sudo find / -name key-pair.template
/boot/rw/opt/vyatta/etc/key-pair.template
/opt/vyatta/etc/key-pair.template

vyos@r1#  set fire group address-group foo add 10.1.0.2-10.1.0.3
[edit]
vyos@r1#  set fire group address-group foo add 10.1.0.2-10.1.0.5
[edit]
vyos@r1# compare 
+firewall {
+    all-ping enable
+    broadcast-ping disable
+    config-trap disable
+    group {
+        address-group foo {
+            address 10.1.0.2-10.1.0.3
+            address 10.1.0.2-10.1.0.5
+        }
+    }
+    ipv6-receive-redirects disable
+    ipv6-src-route disable
+    ip-src-route disable
+    log-martians enable
+    receive-redirects disable
+    send-redirects enable
+    source-validation disable
+    syn-cookies enable
+    twa-hazards-protection disable
+}
[edit]
vyos@r1# commit
[ firewall group address-group foo ]
Address 10.1.0.2 exists in more than one configuration enrty