Cli access from multiple IPs

General questions
1

How can I allow access to the VyOS CLI from multiple IPs? By default, access is only allowed from localhost, but I’d like to allow it from a specific management subnet.

Basically, instead of:

[cli]
tcp=127.0.0.1:2001

I’d like to have:

[cli]  
tcp=10.0.0.0/24:2001

thx.

2

Assuming you’re talking about accel-ppp and not the VyOS CLI, just remove the IP address and it’ll listen on all local interfaces. Then filter with the firewall.

3

I’m not very familiar with VyOS—however, how could I remove that parameter from accel-ppp and make sure the change persists after a reboot?

4

This option is not configurable and hardcoded in the template.

You can try adding DNAT/SNAT rules to redirect requests to a specific IP/port.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.