Vyatta 初期設定 - Knowlege Database

ネットワーク設定
アカウント管理
- アカウントのパスワード変更
サービス管理

ネットワーク設定†

インターフェイスへのIPアドレス設定†

登録
set interfaces ethernet [Interface] address [IP Address]/[bit]
削除
delete interfaces ethernet [Interface] address [IP Address]/[bit]

参照
show interfaces ethernet [Interface]

◆eth0に192.168.1.200/24を設定

$ configure
[edit]
# set interfaces ethernet eth0 address 192.168.1.200/24
[edit]
# commit
[edit]
# save

◆eth1に192.168.10.254/24を設定

$ configure
[edit]
# set interfaces ethernet eth1 address 192.168.10.254/24
[edit]
# commit
[edit]
# save

↑

デフォルトゲートウェイの設定†

登録
set system gateway-address [Default Gateway Address]
削除
delete system gateway-address [Default Gateway Address]
参照
show system gateway-address

◆デフォルトゲートウェイ（192.168.1.254）を設定
```
# set system gateway-address 192.168.1.254
[edit]
# commit
[edit]
```

↑

DNSの設定†

登録
set system name-server [DNS Server Address]
削除
delete system name-server [DNS Server Address]
参照
show system name-server

◆DNSサーバ（192.168.1.250）を設定
```
# set system name-server 192.168.1.250
[edit]
# commit
```

↑

NAT設定†

書式
set service nat rule 1 source address [Network Address]/[bit]
set service nat rule 1 outbound-interface [Interface]
set service nat rule 1 type masquerade

◆eth1(192.168.10.0/24)からの通信は全てeth0(192.168.1.254)でNATする
```
# set nat source rule 1 source address 192.168.10.0/24
[edit]
# set nat source rule 1 outbound-interface eth0
[edit]
# set nat source rule 1 translation address 192.168.1.254
[edit]
# commit
[edit]
```

↑

アカウント管理†

↑

アカウントのパスワード変更†

書式
set system login user [USER] authentication plaintext-password [PASSWORD]

◆初期アカウント（vyatta）のパスワードを変更（hogehogeに変更）
```
# set system login user vyatta authentication plaintext-password hogehoge
[edit]
# commit
[edit]
```

↑

サービス管理†

↑

Web管理画面の有効化†

書式
set service https

◆管理画面サービスを有効化する（起動時に自動実行させる）

$ configure
[edit]
# set service https
[edit]
# commit

Webサーバが起動

Stopping web server: lighttpd.
Starting web server: lighttpd.
Stopping PAGER server
Starting PAGER server
[edit]

設定を保存

# save
Saving configuration to '/opt/vyatta/etc/config/config.boot'...
Done
[edit]

↑

SSHの有効化†

書式
set service ssh

◆SSHを有効化する（起動時に自動実行させる）
```
# set service ssh
[edit]
# commit
[edit]
# save
[edit]
```

↑

DHCPの有効化†

書式（有効化）
set service dhcp-server shared-network-name ETH1_POOL subnet [Network Address]/[bit] start [Start IP Address] stop [End IP Address]

set service dhcp-server shared-network-name ETH1_POOL subnet [Network Address]/[bit] default-router [Default Gateway Address]

set service dhcp-server shared-network-name ETH1_POOL subnet [Network Address]/[bit] dns-server [DNS Address]

書式（無効化）
del service dhcp-server shared-network-name ETH1_POOL subnet [Network Address]/[bit] start [Start IP Address] stop [End IP Address]

◆DHCPサーバの設定
IPアドレス割当：192.168.10.100～128
デフォルトゲートウェイ：192.168.10.254
DNSサーバ：192.168.1.250

# set service dhcp-server shared-network-name ETH1_POOL subnet 192.168.10.0/24 start 192.168.10.100 stop 192.168.10.128
[edit]
# set service dhcp-server shared-network-name ETH1_POOL subnet 192.168.10.0/24 default-router 192.168.10.254
[edit]
# set service dhcp-server shared-network-name ETH1_POOL subnet 192.168.10.0/24 dns-server 192.168.1.250
[edit]
# commit
[edit]

↑

SNMPの有効化†

書式
set service snmp community [COMMUNITY NAME]

◆コミュニティ名（public）を設定し、サービスを有効化
```
$ configure
[edit]
# set service snmp community public
[edit]
# commit
[edit]
# save
```

↑

NTPの有効化†

初期状態ではvyatta.pool.ntp.orgが設定されているため、任意のNTPサーバに変更する。

登録
set system ntp server [NTP Server]

削除
delete system ntp server [NTP Server]

◆ntp.nict.jpに変更する

$ configure
[edit]
delete system ntp server 0.vyatta.pool.ntp.org 
[edit]
delete system ntp server 1.vyatta.pool.ntp.org 
[edit]
delete system ntp server 2.vyatta.pool.ntp.org 
[edit]
set system ntp server ntp.nict.jp
[edit]
# commit
[edit]
# save