Tutorials Vyatta DHCP Case Study Vyatta Config

---

protocols {
     static {
          route 50.0.0.1/32 {
               next-hop: 100.0.0.2
          }
     }
}
policy {
}
interfaces {
     loopback lo {
          address 10.200.1.1 {
               prefix-length: 24
          }
     }
     ethernet eth0 {
          hw-id: 00:11:11:11:81:C1
          address 100.0.0.1 {
               prefix-length: 24
          }
     }
}
service {
     telnet {
     }
}
firewall {
}
system {
     host-name: "Vyatta"
     ntp-server "69.59.150.135"
     login {
          user root {
               authentication {
                    encrypted-password: "$1$$Ht7gBYnxI1xCdO/JOnodh."
               }
          }
          user vyatta {
               authentication {
                    encrypted-password: "$1$$Ht7gBYnxI1xCdO/JOnodh."
               }
          }
     }
     package {
          repository community {
               component: "main"
               url: "http://archive.vyatta.com/vyatta"
          }
     }
}
vpn {
     ipsec {
          ipsec-interfaces {
               interface eth0
          }
          ike-group IKE {
               proposal 1 {
                    encryption: "3des"
                    hash: "md5"
                    dh-group: 2
               }
               lifetime: 7200
          }
          esp-group ESP {
               proposal 1 {
                    encryption: "3des"
                    hash: "md5"
               }
               lifetime: 1800
          }
          site-to-site {
               peer 50.0.0.1 {
                    authentication {
                         pre-shared-secret: "eden"
                    }
                    ike-group: "IKE"
                    local-ip: 100.0.0.1
                    tunnel 1 {
                         local-subnet: 10.200.0.0/16
                         remote-subnet: 10.250.0.0/16
                         esp-group: "ESP"
                    }
               }
          }
     }
}
rtrmgr {
     config-directory: "/opt/vyatta/etc/config"
}