Network#
Everything in the web UI that decides where a packet goes and what address a host has. That is the five entries in the left nav's Network group — Interfaces, Static routes, BGP / OSPF, High availability and QoS — plus DHCP and DNS, which sit under Services in the nav and are documented here because they are how a segment gets an address and a name.
Three facts hold on every page in this section.
Nothing on these pages applies itself. Every editor checks what is typed under each
field and adds its change to the pending changes, where it reads as a sentence; in
Advanced mode the editor also shows the exact set and delete commands it will add. The
Commit Bar is the only thing in the product that applies anything.
Nearly every change in this section is flagged dangerous. The Commit Bar marks a pending change that touches an interface's addresses or DHCP client options or turns an interface off, anything on an interface the router uses as an uplink, the router's own DNS servers, a default route or its distance, failover, load balancing, policy routing, routing tables, high availability, the firewall or NAT — the whole list is on the Commit Bar. When one is pending, the list says the changes could cut off your connection and Apply changes is styled as destructive; Apply with auto-revert is offered either way. These are the changes that can end your own session.
Configured and observed are two different columns. Interfaces, routes, uplinks and DHCP reservations are each shown as what the configuration declares joined with what the kernel or the daemon reports, and where the two disagree the page says so rather than picking one.
The pages#
| Page | The screen it documents |
|---|---|
| Interfaces | Every interface, VLANs included, joined with its link state, MTU and counters. |
| The interface panel | Every setting of an interface: addresses, MTU, MAC address, a bridge's or a bond's ports, spanning tree, bond mode, offload, delete. |
| Adding an interface | VLAN, bridge, bond, tunnel, VXLAN and dummy, and what a VLAN on a bridge brings with it. |
| Networks | Every VLAN as a network with its own subnet, DHCP, DNS and access policy, made, changed and deleted as one. |
| Addressing | What a valid address is, what DHCP on an interface does to the default route, and what MTU value is safe. |
| Neighbours | The ARP table as the Interfaces page shows it. |
| Traffic history | 24 hours of one-minute points and 31 days of one-hour points per interface, kept on the router. |
| Static routes | Static routes, IPv4 and IPv6, edited in place, beside both forwarding tables. |
| BGP / OSPF | BGP's neighbours and announcements, and OSPF's interfaces and areas, with their sessions. |
| VRF | Separate routing tables, with the interfaces bound to them and their own static routes. |
| IPv6 | Addressing, router advertisements and prefix delegation, beside the IPv6 state the router holds. |
| High availability | One page, four tabs: more than one way out, and more than one router. |
| Uplinks (multi-WAN) | Every uplink through all five VyOS mechanisms, ranked, health-checked and NATed. |
| VRRP | Virtual addresses that move between two routers, with keepalived's live verdict. |
| Conntrack sync | Keeping established flows alive when a virtual address moves. |
| DHCP | Subnets, pools, static reservations and the live lease table. |
| DHCP relay | Forwarding requests to a server on another segment. |
| DHCP and IPv6 | Router advertisements and the DHCPv6 server. |
| DNS | The forwarding resolver, its cache, and authoritative records for local names. |
| Dynamic DNS | Keeping a name pointed at a changing uplink address. |
| mDNS repeater | Re-announcing multicast discovery between segments. |
QoS is in the Network nav group and is documented with the rest of the monitoring and shaping screens, on QoS.
Which page owns which subtree#
In Advanced mode every page in the web UI names the configuration subtree it writes, beside its title. These are the ones in this section.
| Screen | Subtree |
|---|---|
| Interfaces | interfaces |
| Static routes | protocols static |
| BGP / OSPF | protocols bgp, protocols ospf |
| VRF | vrf, and each bound interface's vrf |
| IPv6 | service router-advert, and each interface's IPv6 addresses and dhcpv6-options |
| High availability → Uplinks | protocols failover, load-balancing wan, protocols static table, policy route, nat source |
| High availability → VRRP | high-availability vrrp |
| High availability → Conntrack sync | service conntrack-sync |
| DHCP | service dhcp-server, service dhcp-relay, service router-advert, service dhcpv6-server |
| DNS | service dns |
IPv6 in this section#
IPv6 is configured through these screens. Network → IPv6 edits interface addressing, router advertisements and prefix delegation, and shows the addresses, routes, neighbours and firewall counters the router holds; Static routes edits IPv6 routes and shows the IPv6 forwarding table; an interface takes IPv6 addresses like any other value.
The neighbour tab reads the IPv4 neighbour table, and the uplink model has no IPv6 concept. Each page this affects says so, and points at IPv6.
See also#
- Security and access — the firewall, NAT, the IDS, VPNs and who may change any of this.
- Services, monitoring and system — the Overview, the shaper, diagnostics and the journal.
- About Wheelhouse — what comes from VyOS and what Wheelhouse adds on top of it.