VyOS

This guide covers routers and firewalls running VyOS.

Create a backup account

Create a dedicated local user:

configure
set system login user netwatch-backup authentication plaintext-password 'strong-password'
commit
save
exit

Current VyOS releases have no read-only user level — the legacy operator level was deprecated and removed, so every local user is an administrator. QUARK only runs show commands and never enters configure mode. The password is stored as a hash after commit.

Enable SSH access

Enable the SSH service if it is not already running:

configure
set service ssh
commit
save
exit

Optionally bind SSH to a specific management address with set service ssh listen-address 192.0.2.1 (substitute your management IP). To restrict clients, add a firewall rule that permits TCP port 22 only from the Netwatch collector's IP.

Platform notes

• No enable password exists on VyOS; the login account is all QUARK needs.
• Retrieved configurations diff cleanly between versions, so config history stays readable across VyOS upgrades.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.