Page Menu
Home
VyOS Platform
Search
Configure Global Search
Log In
Files
F38742275
main.yaml
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Flag For Later
Award Token
Size
6 KB
Referenced Files
None
Subscribers
None
main.yaml
View Options
---
merged
:
before
:
[]
commands
:
-
set firewall group address-group MGMT-HOSTS address 192.0.1.1
-
set firewall group address-group MGMT-HOSTS address 192.0.1.3
-
set firewall group address-group MGMT-HOSTS address 192.0.1.5
-
set firewall group address-group MGMT-HOSTS description 'This group has the
Management hosts address list'
-
set firewall group address-group MGMT-HOSTS
-
set firewall group network-group MGMT network 192.0.1.0/24
-
set firewall group network-group MGMT description 'This group has the Management
network addresses'
-
set firewall group network-group MGMT
-
set firewall ip-src-route 'enable'
-
set firewall receive-redirects 'disable'
-
set firewall send-redirects 'enable'
-
set firewall config-trap 'enable'
-
set firewall state-policy established action 'accept'
-
set firewall state-policy established log 'enable'
-
set firewall state-policy invalid action 'reject'
-
set firewall broadcast-ping 'enable'
-
set firewall all-ping 'enable'
-
set firewall log-martians 'enable'
-
set firewall twa-hazards-protection 'enable'
-
set firewall syn-cookies 'enable'
-
set firewall source-validation 'strict'
after
:
config_trap
:
true
group
:
address_group
:
-
members
:
-
address
:
192.0.1.1
-
address
:
192.0.1.3
-
address
:
192.0.1.5
description
:
This group has the Management hosts address list
name
:
MGMT-HOSTS
network_group
:
-
members
:
-
address
:
192.0.1.0/24
description
:
This group has the Management network addresses
name
:
MGMT
log_martians
:
true
ping
:
all
:
true
broadcast
:
true
route_redirects
:
-
afi
:
ipv4
icmp_redirects
:
receive
:
false
send
:
true
ip_src_route
:
true
syn_cookies
:
true
state_policy
:
-
action
:
accept
connection_type
:
established
log
:
true
-
action
:
reject
connection_type
:
invalid
twa_hazards_protection
:
true
validation
:
strict
populate
:
validation
:
strict
config_trap
:
true
log_martians
:
true
syn_cookies
:
true
twa_hazards_protection
:
true
ping
:
all
:
true
broadcast
:
true
state_policy
:
-
connection_type
:
established
action
:
accept
log
:
true
-
connection_type
:
invalid
action
:
reject
route_redirects
:
-
afi
:
ipv4
ip_src_route
:
true
icmp_redirects
:
send
:
true
receive
:
false
group
:
address_group
:
-
name
:
MGMT-HOSTS
description
:
This group has the Management hosts address list
members
:
-
address
:
192.0.1.1
-
address
:
192.0.1.3
-
address
:
192.0.1.5
network_group
:
-
name
:
MGMT
description
:
This group has the Management network addresses
members
:
-
address
:
192.0.1.0/24
replaced
:
commands
:
-
delete firewall group address-group MGMT-HOSTS
-
set firewall group address-group SALES-HOSTS address 192.0.2.1
-
set firewall group address-group SALES-HOSTS address 192.0.2.2
-
set firewall group address-group SALES-HOSTS address 192.0.2.3
-
set firewall group address-group SALES-HOSTS description 'Sales office hosts
address list'
-
set firewall group address-group SALES-HOSTS
-
set firewall group address-group ENG-HOSTS address 192.0.3.1
-
set firewall group address-group ENG-HOSTS address 192.0.3.2
-
set firewall group address-group ENG-HOSTS description 'Sales office hosts address
list'
-
set firewall group address-group ENG-HOSTS
after
:
config_trap
:
true
group
:
address_group
:
-
members
:
-
address
:
192.0.3.1
-
address
:
192.0.3.2
description
:
Sales office hosts address list
name
:
ENG-HOSTS
-
members
:
-
address
:
192.0.2.1
-
address
:
192.0.2.2
-
address
:
192.0.2.3
description
:
Sales office hosts address list
name
:
SALES-HOSTS
network_group
:
-
members
:
-
address
:
192.0.1.0/24
description
:
This group has the Management network addresses
name
:
MGMT
log_martians
:
true
ping
:
all
:
true
broadcast
:
true
route_redirects
:
-
afi
:
ipv4
icmp_redirects
:
receive
:
false
send
:
true
ip_src_route
:
true
state_policy
:
-
action
:
accept
connection_type
:
established
log
:
true
-
action
:
reject
connection_type
:
invalid
syn_cookies
:
true
twa_hazards_protection
:
true
validation
:
strict
rendered
:
commands
:
-
set firewall group address-group SALES-HOSTS address 192.0.2.1
-
set firewall group address-group SALES-HOSTS address 192.0.2.2
-
set firewall group address-group SALES-HOSTS address 192.0.2.3
-
set firewall group address-group SALES-HOSTS description 'Sales office hosts
address list'
-
set firewall group address-group SALES-HOSTS
-
set firewall group address-group ENG-HOSTS address 192.0.3.1
-
set firewall group address-group ENG-HOSTS address 192.0.3.2
-
set firewall group address-group ENG-HOSTS description 'Sales office hosts address
list'
-
set firewall group address-group ENG-HOSTS
-
set firewall group network-group MGMT network 192.0.1.0/24
-
set firewall group network-group MGMT description 'This group has the Management
network addresses'
-
set firewall group network-group MGMT
-
set firewall ip-src-route 'enable'
-
set firewall receive-redirects 'disable'
-
set firewall send-redirects 'enable'
-
set firewall config-trap 'enable'
-
set firewall state-policy established action 'accept'
-
set firewall state-policy established log 'enable'
-
set firewall state-policy invalid action 'reject'
-
set firewall broadcast-ping 'enable'
-
set firewall all-ping 'enable'
-
set firewall log-martians 'enable'
-
set firewall twa-hazards-protection 'enable'
-
set firewall syn-cookies 'enable'
-
set firewall source-validation 'strict'
deleted
:
commands
:
-
'delete
firewall
'
after
:
[]
round_trip
:
after
:
validation
:
strict
config_trap
:
false
log_martians
:
false
syn_cookies
:
false
twa_hazards_protection
:
false
ping
:
all
:
false
broadcast
:
false
state_policy
:
-
connection_type
:
established
action
:
accept
log
:
true
-
connection_type
:
invalid
action
:
reject
route_redirects
:
-
afi
:
ipv4
ip_src_route
:
true
icmp_redirects
:
send
:
true
receive
:
false
group
:
address_group
:
-
name
:
MGMT-HOSTS
description
:
This group has the Management hosts address list
members
:
-
address
:
192.0.1.1
-
address
:
192.0.1.3
-
address
:
192.0.1.5
network_group
:
-
name
:
MGMT
description
:
This group has the Management network addresses
members
:
-
address
:
192.0.1.0/24
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Mon, Dec 15, 9:09 PM (1 d, 9 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3129792
Default Alt Text
main.yaml (6 KB)
Attached To
Mode
R52 VyOS Ansible Collection
Attached
Detach File
Event Timeline
Log In to Comment