=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2018.02.12 21:15:41 =~=~=~=~=~=~=~=~=~=~=~= vyos@vyos:~$ vyos@vyos:~$ sho configuration interfaces { ethernet eth0 { address 10.10.1.2/24 duplex auto hw-id 00:50:56:9b:46:f3 smp_affinity auto speed auto } ethernet eth1 { address dhcp duplex auto hw-id 00:50:56:9b:6c:09 smp_affinity auto speed auto } loopback lo { address 192.168.100.100/32 } } protocols { static { route 0.0.0.0/0 { next-hop 10.1.1.1 { : } next-hop 10.10.1.1 { } } route 10.217.32.0/24 { next-hop 10.217.40.254 { } } } } service { ssh { port 22 } } system { config-management { commit-revisions 100 } console { } host-name vyos login { : user vyos { authentication { encrypted-password **************** plaintext-password **************** } level admin } } ntp { server 0.pool.ntp.org { } server 1.pool.ntp.org { } server 2.pool.ntp.org { } } package { auto-sync 1 repository community { components main distribution helium password **************** url http://packages.vyos.net/vyos : username "" } } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone UTC } vpn { ipsec { esp-group 1 { compression enable lifetime 43200 mode tunnel pfs disable proposal 1 { : encryption aes256 hash sha1 } } ike-group 1 { dead-peer-detection { action clear interval 15 timeout 30 } key-exchange ikev1 lifetime 86400 proposal 1 { dh-group 2 encryption aes256 hash sha1 } } ipsec-interfaces { interface eth1 interface eth0 } logging { : log-modes all } profile 1 { authentication { mode pre-shared-secret pre-shared-secret **************** } esp-group 1 ike-group 1 } site-to-site { peer 10.10.1.1 { authentication { mode pre-shared-secret pre-shared-secret **************** } connection-type respond default-esp-group 1 ike-group 1 local-address 10.10.1.2 tunnel 1 { esp-group 1 local { : prefix 192.168.100.100/32 } protocol all remote { prefix 10.217.40.144/32 } } } } } } vyos@vyos:~$ vyos@vyos:~$ vyos@vyos:~$ vyos@vyos:~$