VyOS

公開鍵でsshログイン + password authenticationを無効化

set system login user '''foo''' authentication public-keys '''bar@hoge''' type ssh-rsa
set system login user '''foo''' authentication public-keys '''bar@hoge''' key '''公開鍵(base64)の内容'''
set service ssh disable-password-authentication

さくらのVPSで動かす

Memo/Apps/VyOS/on_SakuraVPS

メモ

Pre shared secretの生成はVC6.5だと $ generate openvpn key

ブロードバンドルータ

UPnPどうしよう

vyatta で UPnP 接続 - Jedipunkz's Blog

ubuntu機で作業

# apt-get install build-essential debhelper dh-autoreconf
% mkdir tmp && cd tmp
% git clone https://github.com/kiall/vyatta-upnp.git
% mv vyatta-upnp vyatta-upnp-0.2
% cd vyatta-upnp-0.2
% vi debian/changelog
0.2 → 0.2-1
% dpkg-buildpackage -us -uc -d
% cd ..
% scp vyatta-upnp_0.2-1_all.deb vyos@vyos:

vyosで作業(1.1.5-amd64)

% wget http://ftp.jp.debian.org/debian/pool/main/l/linux-igd/linux-igd_1.0+cvs20070630-3_amd64.deb
% wget http://ftp.jp.debian.org/debian/pool/main/libu/libupnp4/libupnp4_1.8.0~svn20100507-1.2_amd64.deb
# dpkg -i linux-igd_1.0+cvs20070630-3_amd64.deb libupnp4_1.8.0~svn20100507-1.2_amd64.deb vyatta-upnp_0.2-1_all.deb

わぁい

vyos@vyos# set service
Possible completions:
> conntrack-sync
               Connection tracking synchronization (conntrack-sync) service
> dhcp-relay   Dynamic Host Configuration Protocol (DHCP) relay agent
> dhcp-server  Dynamic Host Configuration Protocol (DHCP) for DHCP server
> dhcpv6-relay DHCPv6 Relay Agent parameters
> dhcpv6-server
               DHCP for IPv6 (DHCPv6) server
> dns          Domain Name Server (DNS) parameters
> https        Enable/disable the Web server
> lldp         LLDP settings
> snmp         Simple Network Management Protocol (SNMP)
> ssh          Secure SHell (SSH) protocol
> telnet       Enable/disable Network Virtual Terminal Protocol (TELNET) protocol
> upnp         Configure UPNP Internet Gateway Device (IGD)
> webproxy     Webproxy service settings

ギャース

vyos@vyos# commit
[ service upnp listen-on br0 ]
Use of uninitialized value $outbound_interface in concatenation (.) or string at  /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 60.
Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 61.
Starting upnpd instance for br0 ()

[ service upnp listen-on br0 ]
Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 80.
Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 60.
Use of uninitialized value $outbound_interface in concatenation (.) or string at /opt/vyatta/share/perl5/Vyatta/Upnp.pm line 61.
Stopping upnpd instance for br0 ()
Starting upnpd instance for br0 ()

どうもうまいこと動いてない気がする
listen-on の後に outbound-interface を設定できるはず
vyatta-upnp/templates/service/upnp/listen-on/node.def 頭の multi: を tag: に修正
githubでforkされてる先のを使ったほうがいいかも
- Elbandi/vyatta-upnp · GitHub

参考

自宅ルータをVyattaにして快適になった - さよならインターネット
Using VirtIO NIC - KVM
Vyattaでフレッツ光ネクストにPPPoE接続する - Qiita
かんみろぐ＠技術ねた — VyOSでL2TPのoutside-addressを勝手に更新するようにした話
- /opt/vyatta/config/active以下のowner:groupがroot:rootになっちゃう(本来はvyos:vyattacfg)
- gist:85329e5d8f72a01236f2
タスクスケジューラ - VyOS jp