VyOS · Operational reference
Toolkit
Operational artefacts for VyOS: checklists for cadences, runbooks for incidents, hands-on labs for skills, and break/fix scenarios for troubleshooting reflexes. None of this replaces reading the corresponding lessons — these are the artefacts you keep open in a second tab during real work.
- Runbooks
- 39
- Checklists
- 18
- Labs
- 25
- Break/Fix
- 43
- Assessments
- 1
Operational checklists
Repetitive tasks performed on a schedule.
Before deployment
- BGP Production Readiness Checklist14 items→
- Interface and Layer-2 Readiness Checklist8 items→
- Multi-WAN Readiness Checklist10 items→
- Observability Readiness Checklist10 items→
- OSPF Production Readiness Checklist12 items→
- Pre-Change Checklist11 items→
- Pre-Upgrade Checklist10 items→
- VyOS Production Readiness Checklist18 items→
- VPN Production Readiness Checklist11 items→
- VRF Production Readiness Checklist9 items→
- VRRP / HA Readiness Checklist10 items→
Quarterly
Runbooks
Step-by-step procedures. Treat the rollback as part of the procedure — never skip it.
Critical risk
- criticalservice affectingRunbook: Recover a Failed Router~120 min · 16 steps · verified 2026-08-19→
- criticalservice affectingRunbook: Respond to a BGP Route Leak~60 min · 12 steps · verified 2026-08-18→
- criticalsecurity relevantRunbook: Respond to Compromised Router Credentials~90 min · 12 steps · verified 2026-08-19→
High risk
- highservice affectingRunbook: Configure a BGP Neighbour~45 min · 12 steps · verified 2026-08-18→
- highservice affectingRunbook: Configure a Firewall Policy~60 min · 12 steps · verified not-executed→
- highservice affectingRunbook: Configure IPsec~90 min · 12 steps · verified not-executed→
- highservice affectingRunbook: Configure NAT~45 min · 13 steps · verified not-executed→
- highservice affectingRunbook: Configure an OSPF Neighbour~45 min · 16 steps · verified pending→
- highservice affectingRunbook: Configure a VRF~45 min · 16 steps · verified pending→
- highservice affectingRunbook: Configure VRRP~60 min · 18 steps · verified pending→
- highservice affectingRunbook: Configure WAN Failover~90 min · 19 steps · verified →
- highservice affectingRunbook: Modify Route Policy Safely~60 min · 16 steps · verified 2026-08-19→
- highservice affectingRunbook: Perform a Production Router Upgrade~150 min · 20 steps · verified →
- highservice affectingRunbook: Perform Route Redistribution~90 min · 17 steps · verified →
- highservice affectingRunbook: Restore a VyOS Configuration~60 min · 12 steps · verified 2026-08-19→
- highservice affectingRunbook: Roll Back a Bad Configuration~45 min · 12 steps · verified 2026-08-19→
- highservice affectingRunbook: Safe Remote Change~45 min · 14 steps · verified 2026-08-19→
- highservice affectingRunbook: Troubleshoot a BGP Session~45 min · 13 steps · verified 2026-08-19→
- highservice affectingRunbook: Troubleshoot IPsec~60 min · 16 steps · verified not-executed→
- highservice affectingRunbook: Troubleshoot OSPF Adjacency~45 min · 13 steps · verified not-executed→
- highservice affectingRunbook: Troubleshoot VRRP~45 min · 16 steps · verified not-executed→
- highservice affectingRunbook: Troubleshoot WireGuard~45 min · 17 steps · verified not-executed→
Medium risk
- mediumservice affectingRunbook: Add an Interface~40 min · 12 steps · verified 2026-08-18→
- mediumservice affectingRunbook: Add a Static Route~35 min · 12 steps · verified 2026-08-18→
- mediumservice affectingRunbook: Add a VLAN~35 min · 12 steps · verified 2026-08-18→
- mediumservice affectingRunbook: Configuration Error Recovery~35 min · 12 steps · verified 2026-08-18→
- mediumservice affectingRunbook: Configure WireGuard~60 min · 19 steps · verified →
- mediumservice affectingRunbook: Deploy a New VyOS Router~120 min · 18 steps · verified →
- mediumservice affectingRunbook: Investigate an MTU Issue~40 min · 12 steps · verified not-executed→
- mediumservice affectingRunbook: Investigate Packet Loss~45 min · 12 steps · verified 2026-08-18→
- mediumservice affectingRunbook: Investigate a Policy Route~45 min · 14 steps · verified 2026-08-19→
- mediumservice affectingRunbook: Investigate Route Instability~45 min · 13 steps · verified 2026-08-18→
- mediumservice affectingRunbook: Troubleshoot Blocked Traffic~40 min · 13 steps · verified 2026-08-19→
- mediumservice affectingRunbook: Troubleshoot Multi-WAN~60 min · 13 steps · verified not-executed→
- mediumservice affectingRunbook: Troubleshoot NAT~45 min · 13 steps · verified not-executed→
- mediumservice affectingRunbook: Troubleshoot VRF Routing~45 min · 13 steps · verified not-executed→
Low risk
Hands-on labs
Time-boxed exercises.
B · Nested virtualisation
- Lab: Read an Ethernet Frame and an ARP Table~75 min · 5 objectives→
- Lab: Configure, Compare, Commit, Save~70 min · 6 objectives→
- Lab: commit-confirm and Rollback~80 min · 6 objectives→
- Lab: Static, Default, Recursive, and Blackhole Routes~90 min · 6 objectives→
- Lab: VLAN Trunking, Sub-interfaces, and Bonds~90 min · 6 objectives→
- Lab: VRF Isolation~100 min · 6 objectives→
- Lab: Route Leaking Between VRFs~96 min · 5 objectives→
- Lab: OSPF Adjacency~84 min · 6 objectives→
- Lab: Multi-area OSPF~96 min · 6 objectives→
- Lab: BGP Peering~84 min · 5 objectives→
- Lab: BGP Prefix Filtering and Traffic Engineering~96 min · 5 objectives→
- Lab: BGP Traffic Engineering~96 min · 6 objectives→
- Lab: Policy-Based Routing~110 min · 7 objectives→
- Lab: BFD for Fast Failure Detection~100 min · 6 objectives→
- Lab: VyOS Stateful Firewall~110 min · 7 objectives→
- Lab: NAT and Port Forwarding~120 min · 6 objectives→
- Lab: VRRP High Availability~120 min · 6 objectives→
- Lab: WireGuard Site-to-Site~100 min · 6 objectives→
- Lab: Multi-WAN Failover and Load Sharing~120 min · 7 objectives→
- Lab: QoS Classification and Shaping~100 min · 7 objectives→
- Lab: MTU and PMTUD~100 min · 8 objectives→
- Lab: Backup and Restore a VyOS Router~150 min · 8 objectives→
- Lab: Performance Troubleshooting~120 min · 8 objectives→
- Lab: Evidence-Based Routing Troubleshooting~135 min · 8 objectives→
- Lab: Ansible-Driven VyOS Configuration~120 min · 7 objectives→
Break/Fix scenarios
Troubleshooting drills. Each scenario gives symptoms and evidence, then hides the solution behind a reveal.
vyos-bgp-attribute
vyos-bgp-prefix
vyos-bgp-session
vyos-interface
vyos-config-error
vyos-default-route
vyos-firewall
vyos-tunnel
vyos-nat
vyos-ospf
vyos-policy-route
vyos-static
vyos-redistribution
vyos-vrf
vyos-vrrp
Assessments
Production-readiness examinations. Each combines auto-scored questions with scenario-based rubrics you can use to grade yourself.