Basic Configuration

General questions
1

Hi,

I would like to create the following seniro:
I have configured attached information, but not sure what other firewall rules, Dns, routes and bridging should I configure to allow any traffic between those 2 segments and let those connect online through eth2…
thanks alot!!

Windows Servers:
DC01 - TLV site - 192.168.0.10 - Hyper-v Private Switch TLV
DC02 - NYC Site - 10.0.0.10 - Hyper-v Private Switch NYC

vYos:
eth0 - address - 192.168.0.254/24 - TLV Default Gateway. Hyper-v Private Switch TLV.
eth1 - address - 10.0.0.254/24 - NYC Default Gateway. Hyper-v Private Switch NYC
eth2 - dhcp from - Hyper-v External Switch.

so now i got ping from vyos to 8.8.8.8 and to the dc’s,
and from the dc’s to the “default gateways”.

but not between the DC’s and from the dc’s to 8.8.8.8 for example…

thanks again!

2

Do you have these rules?

set nat source rule 1 outbound-interface ‘eth0’
set nat source rule 1 source address ‘172.20.0.0/24’
set nat source rule 1 translation address ‘masquerade’

set nat source rule 2 outbound-interface ‘eth1’
set nat source rule 2 source address ‘10.0.0.0/24’
set nat source rule 2 translation address ‘masquerade’