Configuration Blueprints

This chapter contains various configuration examples:

• Zone-Policy example
  • Native IPv4 and IPv6
  • Zones Basics
  • IPv6 Tunnel
• BGP IPv6 unnumbered with extended nexthop
  • Configuration
  • Results
• OSPF unnumbered with ECMP
  • Configuration
  • Results
• Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)
  • Prerequisites
  • Example
  • Vyos configuration
• Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)
  • Prerequisites
  • Example
  • Vyos configuration
• High Availability Walkthrough
  • Design
  • Basic Setup (via console)
  • VRRP Configuration
  • NAT and conntrack-sync
  • OSPF Over WireGuard
  • Advertise connected routes
  • BGP
• WAN Load Balancer examples
  • Example 1: Distributing load evenly
  • Example 2: Failover based on interface weights
  • Example 3: Failover based on rule order
  • Example 4: Failover based on rule order - priority traffic
  • Example 5: Exclude traffic from load balancing
• Dual-Hub DMVPN with VyOS
  • Topology
  • Network Addressing and Protocol Parameters
  • Configuration

Configuration Blueprints (autotest)

The next pages contains automatic full tested configuration examples.

Each lab will build an test from an external script. The page content will generate, so changes will not take an effect.

A host vyos-oobm will use as a ssh proxy. This host is just necessary for the Lab test.

The process will do the following steps:

1. create the lab on a eve-ng server

2. configure each host in the lab

3. do some defined tests

4. optional do an upgrade to a higher version and do step 3 again.

5. generate the documentation and include files

6. shutdown and destroy the lab, if there is no error

• Tunnelbroker.net (IPv6)
• DHCP Relay trough GRE-Bridge
• Wireguard