VyOS

公開鍵でsshログイン + password authenticationを無効化

  • set system login user '''foo''' authentication public-keys '''bar@hoge''' type ssh-rsa
  • set system login user '''foo''' authentication public-keys '''bar@hoge''' key '''公開鍵(base64)の内容'''
  • set service ssh disable-password-authentication

さくらのVPSで動かす

メモ

  • Pre shared secretの生成はVC6.5だと $ generate openvpn key

ブロードバンドルータ

  • UPnPどうしよう
    • vyatta で UPnP 接続 - Jedipunkz's Blog
    • ubuntu機で作業
      # apt-get install build-essential debhelper dh-autoreconf
      % mkdir tmp && cd tmp
      % git clone https://github.com/kiall/vyatta-upnp.git
      % mv vyatta-upnp vyatta-upnp-0.2
      % cd vyatta-upnp-0.2
      % vi debian/changelog
      0.2 → 0.2-1
      % dpkg-buildpackage -us -uc -d
      % cd ..
      % scp vyatta-upnp_0.2-1_all.deb vyos@vyos:
  • vyosで作業(1.1.5-amd64)
    % wget http://ftp.jp.debian.org/debian/pool/main/l/linux-igd/linux-igd_1.0+cvs20070630-3_amd64.deb
    % wget http://ftp.jp.debian.org/debian/pool/main/libu/libupnp4/libupnp4_1.8.0~svn20100507-1.2_amd64.deb
    # dpkg -i linux-igd_1.0+cvs20070630-3_amd64.deb libupnp4_1.8.0~svn20100507-1.2_amd64.deb vyatta-upnp_0.2-1_all.deb
  • わぁい

    vyos@vyos# set service
    Possible completions:
    > conntrack-sync
                   Connection tracking synchronization (conntrack-sync) service
    > dhcp-relay   Dynamic Host Configuration Protocol (DHCP) relay agent
    > dhcp-server  Dynamic Host Configuration Protocol (DHCP) for DHCP server
    > dhcpv6-relay DHCPv6 Relay Agent parameters
    > dhcpv6-server
                   DHCP for IPv6 (DHCPv6) server
    > dns          Domain Name Server (DNS) parameters
    > https        Enable/disable the Web server
    > lldp         LLDP settings
    > snmp         Simple Network Management Protocol (SNMP)
    > ssh          Secure SHell (SSH) protocol
    > telnet       Enable/disable Network Virtual Terminal Protocol (TELNET) protocol
    > upnp         Configure UPNP Internet Gateway Device (IGD)
    > webproxy     Webproxy service settings
  • ギャース

    vyos@vyos# commit
    [ service upnp listen-on br0 ]
    Use of uninitialized value $outbound_interface in concatenation (.) or string at  /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 60.
    Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 61.
    Starting upnpd instance for br0 ()
    
    [ service upnp listen-on br0 ]
    Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 80.
    Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 60.
    Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 61.
    Stopping upnpd instance for br0 ()
    Starting upnpd instance for br0 ()
  • どうもうまいこと動いてない気がする
  • listen-on の後に outbound-interface を設定できるはず
  • vyatta-upnp/templates/service/upnp/listen-on/node.def 頭の multi: を tag: に修正
  • githubでforkされてる先のを使ったほうがいいかも

参考

参考

Last edited by Anonymous, 2016-11-30 02:10:10