HON95-wiki/config/network/vyos.md

---

title: VyOS breadcrumbs:

• title: Configuration
• title: Network --- {% include header.md %}

Resources

• VyOS User Guide

Installation

See Installation (VyOS).

1. (Recommended) Disable Intel Hyper-Threading.
2. Download the latest rolling release (free) or LTS release (paid) ISO.
3. Burn and boot from it (it's a live image).
4. Log in using user vyos and password vyos.
5. Run install image to run the permanent installation wizard.
   • Copy the config.boot.default config file.
6. Remove the live image and reboot.

Initial Configuration

An example of a full configuration. Except intuitive stuff I forgot to mention.

1. Log in as user vyos and password as set in the installation (or vyos if using the live media).
   • It'll drop you directly into operational mode.
2. Fix the keyboard layout:
   • Run config TUI: set console keymap
   • FIXME: This doesn't seem to work. Relogging or restarting doesn't help either.
3. Enter configuration mode: configure
   • This changes the prompt from $ to #.
4. Set hostname:
   1. Note: <host-name>.<domain-name> should be an FQDN.
   2. Hostname: set system host-name <hostname>
   3. Domain name: set system domain-name <domain-name>
5. Set the DNS servers: set system name-server <ip-address> (for each server)
6. Set the time zone: set system time-zone Europe/Oslo (Norway)
7. Set NTP servers:
   1. Enter section system ntp.
   2. Remove default NTP servers.
   3. Add new NTP servers: set server ntp.justervesenet.no (example)
8. Enable Ctrl+Alt+Del reboot: set system options ctrl-alt-del-action reboot (or ignore)
9. Replace default user:
   1. Add new user with password: set system login user <username> authentication plaintext-password <password>
   2. Commit and log into the new user.
   3. Delete the default user: delete system login user vyos
10. Set up an Internet-facing interface with an IP address: Details not included.
11. Set default routes: set protocols static route[6] <0.0.0.0/0|::/0> next-hop <next-hop> (for IPv4 and IPv6)
12. (Optional) Set black hole route: set protocols static route[6] <prefix> blackhole (for IPv4 and IPv6)
13. Enable LLDP: set service lldp interface all
14. Enable SSHD:
    1. Enable: set service ssh
    2. TODO
15. Commit and save: commit and save.

General Configuration

CLI

• The system is in "operational mode" ($) after logging in. Enter "configuration mode" (#) using the configure command.
• Use ? to show alternatives and tab to auto-complete.
• Use run to run operational mode commands in configuration mode.

Basics

• System information:
  • Show log: show log [tail]
• Interface and routing information:
  • L2/L3 interfaces overview: show interfaces
  • Routes: show ip routes and show ipv6 routes
• Configuration changes:
  • Show configuration: show
  • Apply changes: commit
  • Apply changes with confirmation: commit-confirm [comment <comment>] [minutes], then confirm within X minutes when you've verified that the changes are working as intended.
  • Save changes: save

Tasks

Reset Admin Password

Reboot the device and wait for the boot screen. In the boot screen, select the "lost password change (KVM)" option. It will boot to into a prompt asking you to set a new password. After setting a new password, the device will automatically reboot.

{% include footer.md %}