interfaces {
    ethernet eth0 {
        address "10.0.0.1/24"
        description "Initiator-Kernel"
    }
    ethernet eth1 {
        address "10.1.0.1/24"
        description "Initiator-VPP"
    }
    ethernet eth2 {
        address "10.2.0.1/24"
        description "Responder-Kernel"
    }
    ethernet eth3 {
        address "10.3.0.1/24"
        description "Responder-VPP"
    }
    ethernet eth4 {
    }
    ethernet eth5 {
    }
    ethernet eth6 {
    }
    ethernet eth7 {
    }
    loopback lo {
    }
}
service {
    ntp {
        allow-client {
            address "127.0.0.0/8"
            address "169.254.0.0/16"
            address "10.0.0.0/8"
            address "172.16.0.0/12"
            address "192.168.0.0/16"
            address "::1/128"
            address "fe80::/10"
            address "fc00::/7"
        }
        server time1.vyos.net {
        }
        server time2.vyos.net {
        }
        server time3.vyos.net {
        }
    }
}
system {
    config-management {
        commit-revisions "100"
    }
    console {
        device ttyS0 {
            speed "115200"
        }
    }
    host-name "wan-router"
    login {
        operator-group default {
            command-policy {
                allow "*"
            }
        }
        user vyos {
            authentication {
                encrypted-password "$6$rounds=656000$4HtxAJtjvdM9mKsx$kO8pfolaMYKqHB3ECh11xVXR67gvIbhOz2XlmBpwnwTQ.MDLeD.9fP2v2uZg7YZSrQNI2efb84kxIKMpx8sOc/"
                plaintext-password ""
            }
        }
    }
    option {
        reboot-on-upgrade-failure "5"
    }
    syslog {
        local {
            facility all {
                level "info"
            }
            facility local7 {
                level "debug"
            }
        }
    }
}

// Warning: Do not remove the following line.
// vyos-config-version: "bgp@6:broadcast-relay@1:cluster@2:config-management@1:conntrack@6:conntrack-sync@2:container@3:dhcp-relay@2:dhcp-server@11:dhcpv6-server@6:dns-dynamic@4:dns-forwarding@4:firewall@20:flow-accounting@3:https@7:ids@2:interfaces@34:ipoe-server@4:ipsec@14:isis@3:l2tp@9:lldp@3:mdns@1:monitoring@2:nat@8:nat66@3:nhrp@1:ntp@3:openconnect@3:openvpn@4:ospf@2:pim@1:policy@9:pppoe-server@11:pptp@5:qos@3:quagga@12:reverse-proxy@3:rip@1:rpki@2:salt@1:snmp@3:ssh@3:sstp@6:system@30:vpp@4:vrf@3:vrrp@4:vyos-accel-ppp@2:wanloadbalance@4:webproxy@2"
// Release version: 2026.01.05-0023-rolling