VYOS

This information is oritinally taken from Lab1.1 and has been separated for ease of use

FW01

Initial setup

Reset the user password with: set system login user [username] authentication plaintext-password [password

To begin with, I set the hostname of the firewall with set system host-name [name], as seen below

You can check the status of interfaces with show interfaces, and in the initial setup you want to make sure there are no dhcp assignments. If there are any, make sure to delete them:

• delete interfaces ethernet [interface name] address dhcp (then commit and save)

I didn't have any dhcp interfaces, so I moved on

Make sure to set interface descriptions with set interfaces ethernet [interface name] description [description]

Then set the interface ip addresses with set interfaces ethernet eth[x] address [address]/[mask]

Gateway and DNS

Set the default gateway and DNS server to the WAN gateway, 10.0.17.2

• set protocols static route 0.0.0.0/0 next-hop 10.0.17.2
• set system name-server 10.0.17.2

Commit + save

Configuring for NAT and DNS Forwarding

Configure a ruleset to set up ip masquerading from anything on the 172.16.50.0/29 network:

• set nat source rule 10 description "NAT FROM DMZ to WAN"
• set nat source rule 10 outbound-interface eth0 - sets it to the wan interface, so anything going out from that interface applies
• set nat source rule 10 source address 172.16.50.0/29 - defines it for this network
• set nat source rule 10 translation address masquerade - set the address scheme to masquerade

ALWAYS Commit and Save!

Port Forwarding

I then needed to create a firewall rule to allow port 22 and inbound NAT on the firewall, this is what that looked like:

And a rule in the WAN-to-DMZ firewall to allow ssh