Virtual Access GW2020 Bedienungsanleitung

GW2020 Ser ies User Man ual Issue: 2.3 Date: 08 May 2015[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 1 Intro ductio n ............................................................................................... 10 1.1 Docum ent sc ope ............................................. .............................[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 4 GW2024P S eries LED behaviour .................................................................. 22 5 GW2028 Ser ies LED b ehaviour .................................................................... 23 5.1 Ma[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 11.5 Interf aces configuration ........................................................................... 59 11.5.1 Interfac es ................................................................................. .[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 18.1 Moni torin g SMS ....................... .............................................. ............... 109 18.2 Outgoing mess ages ...........................................................................[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 22.10.9 Transp aren t pro xy ru le ( same h ost) ............................................... 1 46 22.10.10 Tra nspa rent p roxy rul e (exte rnal ) ......................................... ......... 146 22.10[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 28.3. 1.1 Main settings ....................................................................................................... 1 85 28.3. 1.2 Port setti ngs ......................................................[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 32.2.1 Configuring a content template ..................................................... .... 223 32.3 Adding an SLA rep ort ................................................. ........................... 226 32[...]

Table of Conten ts ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 34.14 PAD diagnostics ............................................. .................................... 260 34.14.1 Showi ng Log .......................................................... ..................... 2[...]

1 : Introduction ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 1 Introduct ion This user manual des cribes the features an d how to configure a Virtua l Access GW2020 Ser ies route r. The Virtu al Access GW 202 0 Series route r is a versati le 3G/ 4G LTE/ CDMA450 wireless rout[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2 GW2020 Series h ardw are 2.1 Hardwa re s pecifi cation 2.1.1 GW2020 seri es rout er mode l varian ts GW2021: Single Eth ernet an d 3G, 4G/LTE GW2022: Dual Et hernet and 3G , 4G/ LTE GW2023: Dual Eth er[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2.3.1 Serial port s on th e GW2 020 serie s Figure 1 : Serial port s on the G W2020 2.3 .1.1 RS232 pino ut for the GW 202 0 Pin Name Direction 1 RTS Out 2 DTR Out 3 TX Data Out 4 GND - 5 GND - 6 RX Data [...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2.3 .2.1 RS232 pino ut for the GW 202 4P Pin Name Direction 1 RTS Out 2 DTR Out 3 TX Data Out 4 GND - 5 GND - 6 RX Data In 7 DSR In 8 CTS In 2.3 .2.2 RS485 pino ut for the GW 202 4P Half Duplex M ode Pin[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2.3 .3.2 RS485 pin - out for the GW20 28 Half Duplex M ode Full Duplex Mode Pin Name Direction (From GW2020 S eries) Name Direction (From GW2020 S eries) 1 - - Rx+ In 2 - - Rx - In 3 Tx/Rx+ In/Out Tx+ Ou[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2.6 Router dimensio ns GW2020 Series u nit size: 100W 138D 34H mm GW2020 Series u nit weigh t: 500g GW2024P Ser ies unit siz e: 160W 75D 120H GW2024P Ser ies unit w eight: 1200g GW2028 Series u nit size:[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2.9 Antenna The GW2020 Series ro uter has two SMA connecto rs for connection of two antennas for antenna divers ity. Antenna diversity helps improve the quality of a wireless link by m itigating problems[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2.10.2 GW2024P compon ents 1 x GW2024P Series route r 1 x Ether net cable. R J45 connector a t both en ds 1 x AC t ransform er 1 x SmartDisc antenna Table 3 : GW 2024P Series router c omponents 2.10.3 GW[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 4. If using SI M 2 then hold the SI M with the cut c orner front right 5. Gently push the SI M card into SIM slot 2 until it clicks in. 2.12 Connecti ng t he SIM loc k Connect the SIM lock using the Alle[...]

2 : GW2020 Series h ardware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 2.17 Reset bu tton The reset button is us ed to request a s ystem reset. When you press the reset button all LEDs turn on simultaneously. The length of time you hold the res et button will determ ine its[...]

3 : GW2020 Series LE D behaviour ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 3 GW2020 Series LED behav iour 3.1 Main LED beha vio ur The GW20 20 Ser ies router has si ngle col our LEDs f or Power , Conf ig, SIM1 , SIM2 and signal strength. W hen the router is powere d on, th[...]

3 : GW2020 Series LE D behaviour ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Note : When PPP is not conne cted, none of the signal LEDs wil l light regardless of signal strength. 3.2 Etherne t po rt LE D beha vio ur The Ethernet po rt ha s two LEDs: a LINK LED (green) and an[...]

4 : GW2024P Series LED behaviour ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 4 GW2024P Series LED behaviour The GW2024P Series ro uter has a single colour LED. Whe n the route r is powered on, the LED is green. Figure 6 : LED acti vity The poss ibl e LED state s are: • Off[...]

5 : GW2028 Series LED behaviour ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ 5 GW2028 Serie s LED beha viour 5.1 Main LED beha vio ur The GW20 28 Ser ies router has si ngle col our LEDs f or Power , Conf ig, SIM1 , SIM2 and signal strength. W hen the router is powere d on, th[...]

5 : GW2028 Series LED behaviour ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ Power LED On Power Off No power /boot l oader d oes not ex ist Config LED On Unit ru nn ing a va lid conf igura tion file . Flash ing slow ly Un it run ning in recov ery mode (5 Hz) . Flashing quickl[...]

6 : Factory configuration ex traction from SIM card ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 6 Factory config uration extr action from SIM c ard Virtual Acces s routers have a feature to update the factory configuration from a SIM card. T his allows you to change the fact[...]

7 : Accessing the router ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ 7 Accessing t he router Access the route r using either Ethernet or the 3G/ 4G interface. 7.1 Over E thernet The CLI can also be accessed over Etherne t, by default using Secure S hell (SSH) and optionally [...]

8 : Upgrading router firm ware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 8 Upgrading r outer fir mware 8.1 Upgra din g firmw are usin g the w eb i nterfa ce Copy the new firmware issued by Virtual Acc ess to a PC connec ted to the router. In the top menu, select System tab[...]

8 : Upgrading router firm ware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Note : the button will vary depend ing on the browser yo u are using. Select the appropr iate image and then c lick Flash Image . The Flash Firmware – Verify page appears. Figure 12 : The f lash fir[...]

8 : Upgrading router firm ware ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 8.2 Upgra din g firmw are usin g CLI To upgrade firmware using CLI, you will need a T FTP server o n a connected PC. Open up an SSH or Telnet s ession t o the router. Enter in the relevant user name a[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 9 File system 9.1 Config urations Configurations are sto red in folders at: /etc/conf/factconf, /etc/con f/config1 and /etc/con f/config2 Multiple configuration files exist in each folder. Each f ile contains configu[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# vacmd set next config [factconf|config1|config2] Image files The system allows for two firmware image files name d image1 and image2. One is the current image that is running and the othe r is the a[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option example “value” option “example” 'value' option 'example' “value” In contrast, the fo llowing examples are not valid syntax: option ‘ example ’ value Missing quotes aro und [...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Options: - c <path> set the search path for config files (default: /etc/config) - d <str> set the delimiter for list values in uci show - f <file> use <file> as input instead of stdin - L do n[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# uci commit 9.1 .3.1 Comma nd line ut ility exa mples To export an e ntire configuration, enter: root@VA_router:~# uci export To export the configuration for a single pac kage, enter: uci export <[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ To display just the va lue of an option, ente r: root@VA_router:~# uci get system.main.hostname VA_router 9.1.4 Configur ation copying and deleting Manage configurations using d irectory manipulat ion. To remove t he[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# cat /etc/config/dropbear config dropbear option PasswordAuth 'on' option BannerFile '/etc/banner' o ption RootPasswordAuth 'yes' option IdleTimeout '1800' opt[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# cp /etc/config2/* /etc/config1/* 9.1.8 Editing files The config can be edit ed using uci commands or via the web GUI . 9.1.9 Proce sses and jobs To view schedul ed jobs, enter: root@VA_router:~# cro[...]

9: File system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA__router:~# vacmd show vars VA_SERIAL: 00E0C8 121215 VA_MODEL: GW6610 - ALL VA_ACTIVEIMAGE: image2 VA_ACTIVECONFIG: config1 VA_IMAGE1VER: VIE - 16.00.44 VA_IMAGE2VER: VIE - 16.00.44 VA_BLDREV: 91a7f87ed61ca919[...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 10 Command Lin e Interfa ce 10.1 Basics The system has an SSH server typically running on po rt 22. The system pro vides a Unix command line. Common Unix comm ands are available such as ls, cd, cat, top,[...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:/# cat /etc/ppp/options logfile /dev/null nocrtscts lock debug refuse - chap kdebug 7 record /tmp/ppp.log To view files in the current folder, ente r: root@VA_router:/# ls -1 drwxrwxr - x [...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ To view current ly running processes: root@VA_router:/# ps PID Uid VmSize Stat Command 1 root 356 S init 2 root DW [keventd] 3 root RWN [ksoftirqd_CPU0] 4 root SW [kswapd] 5 root SW [bdflush] 6 root SW [[...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:/# uci show network network.loopback=interface network.loopback.ifname=lo network.loopback.proto=static network.loopback.ipaddr=127.0.0.1 network.loopback.netmask=255.0.0.0 network.lan=int[...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ tim eserver. @tim eserver[0 ] for th e fir st or timeserver .@ti mes erver[7] for the last one. You can also use negative indexes, such as timeserver.@timeserver[ - 1] . " - 1" means "the [...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ - S disable strict mode - X do not use extended syntax on 'show' Command Target Description commit [<confi g>] Writes changes of the gi ven conf igura tion file, or if n one is given , al[...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 10.3 Config uration files File Description Managem ent /etc/config/autolo ad Boot up A ctiva tion beh avio ur ( typically us ed in f actconf ) /etc/c onfig/ httpc lien t Activator add resses and urls /et[...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ will be comb ined into a single list o f values with the same o rder as in the configuration file. The indentation o f the option and list statements is a convent ion to improve the readability of the co[...]

10 : Command Line Interface ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 10.5.1 Expo rt an ent ire con figurat ion root@VA_router:~# uci export httpd package 'httpd' config 'httpd' option 'port' '80' option 'home' '/www&a[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 11 Management c onfigurati on settings This section detai ls the configuration sect ions and parameters which are required to manage and monito r the device using Activator and M onitor. Acti[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Name Type Required De fault Description Config ured boolean ye s no Set to yes to make the au toload sequenc e process this entry. SegmentNa me string yes (no ne) Where th e downloaded fil e [...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:/# uci export autoload package 'autoload' config 'core' 'main' option 'Enabled' "yes" option 'StartTimer' "10&q[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ list SecureF ileServ er integer no no Specifies th e IP addr ess of Secure Activator t hat uses port 443. Activ atorD ownloa dPath string yes (no ne) Specif ies the u rl on Activ ator to w hi[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ package httpclient config core 'default' option Enabled 'yes' list FileServer '10.1.83.36:80' list FileServer '10.1.83.37:80' li st SecureFileServer &a[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# uci show monitor monitor.main=keepalive monitor.main.enable=yes monitor.main.interval_min=1 monitor.main.dev_reference=mikesamazondev monitor.main.monitor_ip=10.1.83.36 root[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 15 : The syst em page In the Hostname field, type a relevant host name. In the Ti mezone d ropdow n menu, select the relev ant ti me zone. Click Save . Name Type Requi red D efaul t De[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ conlog level a nd will override it. log_f ile s tring no /var/log/messages Define s wh ich file to w rite log messag es to (type fil e). log_ip IP address no (none) Specifies IP address o f a[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ system.main.log_port=514 system.main.password=admin system.main.time_save_interval_min=10system.ntp=timeserver system.ntp.interval_hours=2 system.ntp.server=0.openwrt.pool.ntp.org package &ap[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ for t he user. linuxus er Boolean No Yes Specifies i f access permissions for the use r. Note : • webuser will only wo rk if linuxuser is se t to ' yes ' • chapuser will only wo[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 11.4.2 UCI export and UCI show commands Run UCI export or s how commands to see management user UCI configuration settings. root@VA_router:~# uci export management_users package management_us[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ management_users.@user[1].smsuser=0 management_users.@user[1].linuxuser=no management_users.@user[1].srphash=0:2de6Dk6D4tFo8oVfb2iuY6aRj2cAoPeo2DAdCRc ReBUc.9Px56rNmamtaBx7BiQIzNisYFJFVdhH6H0[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ DHCP specifies the interface protoc ol, DHCP in this example eth0.1 is the physical interface as sociated with this se ction The interface proto col may be one of the following shown in the t[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 11.5.3 Protocol "s tatic" Name Type Re quired Def ault Descriptio n ipaddr ip address yes, if no ip6addr is set (none) Defines the I P address. netmask n etmask yes, if no ip6addr i[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ cdma/evdo, umts, gprs. apn string yes (none ) Sets the AP N to us e. pincode num ber no (none ) Sets the PI N cod e to unloc k SIM card . maxwait numb er no 20 Specif ies the n um ber of s ec[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ keeping normal intern et connectivity. Each i nterface can have multip le aliases attached to it. A minimal alias dec laration consists of the f ollowing lines: network.@alias[0]=alias networ[...]

11 : Management configuration set tings ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ addresses layer integer no 3 Selects the inter fac e to att ach to for stacked prot ocols ( tun over bridge over eth, pp p over eth or simila r) . 3: attach to lay er 3 interf ace (tun *, ppp[...]

12 : DHCP server and DNS configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 12 DHCP server and DNS co nfigura tion Dynamic Host Configuration Protocol (DHCP) se rver is responsible for g iving out IP addresses to hosts. IPs can be given o ut on different interfaces an[...]

12 : DHCP server and DNS configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ dhcp.@dnsmasq[0].leasefile=/tmp/dhcp.leases dhcp.@dnsmasq[0].resolvfile=/tmp/resolv.conf.auto dhcp.@dnsmasq[0].interface=lan config 'dnsmasq' option domainneeded 1 option boguspriv 1[...]

12 : DHCP server and DNS configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ /etc/hosts. Cachelocal boolean no 1 When s et to 0, uses ea ch network interface's dns address in the l ocal /etc/resolv.conf. Normall y, only th e loopba ck a ddress is used, a nd all qu[...]

12 : DHCP server and DNS configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ not inter fac e. leasefile file path no (none) Stor es DHC P leas es in th is file. Local string no (none) Looks u p DNS entries for th is domain from /et c/hosts. This follows the sam e synta[...]

12 : DHCP server and DNS configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ responses, required f or DNS based blackl ist services, only takes e ffec t if rebin d prote ction is enabled. rebind_doma in list of doma in names no (none) Specif ies a list of dom ains to a[...]

12 : DHCP server and DNS configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Name Type Requi red Defa ult Description dhcp_option list of strin gs no (no ne) Ena bles additi ona l options to be add ed for th is netw ork - id. For exa mple with '26,1470' or &a[...]

12 : DHCP server and DNS configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ address of th e underly ing interf ace to calculate the minimum address that may be leased to clients . It m ay be greater 255 to spa n subnet s. 12.3 Stati c lea ses You can ass ign fixed IP [...]

13 : VLAN configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 13 VLAN configur ation 13.1 VLAN web interface You can configure VLANs through three sections: • Native VLAN • VL AN Defin it ion • Port Description • Native VLAN Figure 16 : The n ative VL AN sectio[...]

13 : VLAN configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Name Type Requi red Defa ult De scription 802.1Q VLA N ID Numeric value No Blank Define s VLAN numbe r. The VL AN will be ref erre d to us ing this number . VLAN Priority Numeric value No Blank Specifies 80 [...]

13 : VLAN configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 13.4 VLANs UCI interface You can configure VLANs through CLI. The VLAN configuratio n file is stored at: /etc/con fig/por tvlan ~# uci export portvlan package portvlan config vlan option vlanid '1'[...]

13 : VLAN configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router :~# uci show portvlan portvlan.@vlan[0]=vlan portvlan.@vlan[0].vlanid=1 portvlan.@vlan[0].name=vlan1 portvlan.@vlan[0].ipaddr=192.168.1.1 portvlan.@vlan[0].netmask=255.255.255.0 portvlan.@vlan[...]

13 : VLAN configuration ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 13.4.1 config por t Name Type Requi red Defaul t Description port Text Yes Bl ank Specif ies wh ich p hys ical port on the fr ont pan el of th e router will be assigned to which VLAN trunk Boolean No Bl ank [...]

14 : Static routes configura tion ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 14 Static routes configura tion Static routes can be a dded to the routing ta ble to forward traffic to spec ific subnets when dynamic routing pro tocols are no t used or they are not c onfigured f[...]

14 : Static routes configura tion ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ route. metric numb er no 0 Spec ifies th e route metric to u se. mtu num ber no interface MTU Defin es a spec ific M TU f or this rou te. 14.2 IPv 6 routes IPv6 routes can be s pecified as well by [...]

14 : Static routes configura tion ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Dropbear is the softw are module that imple ments ssh on the s ystem. The dropbear section co ntains these settings: Name Type Requi red Defaul t Description enable boolean no 1 Enables dr opbear.S[...]

15 : BGP (Border Gatew ay Protocol) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 15 BGP (B order Gatew ay Protocol ) 15.1 Configurin g the B GP web interfa ce In the top menu, select Networ k - > BGP . BGP configuration page appears. Figure 19 : BGP page To configure g lob[...]

15 : BGP (Border Gatew ay Protocol) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ byte format 0. 0.0.0. Auton omous System Num ber Integer Yes No ne Defines ASN for loc al router . Network Integer Yes N one Sets n etwork that w ill be adver tised to n eighb our s in pr efix fo[...]

15 : BGP (Border Gatew ay Protocol) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ case of IP address and B GP Community values is parse d as list of items to m atc h. Set Opti on Dropdow n Menu No None Available op tion s ar e: None, IP Nex t Hop, L ocal Preferen ce, ME D, Rou[...]

15 : BGP (Border Gatew ay Protocol) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 24 : The routing tabl e 15.5 BGP UC I in terfa ce You can also co nfigure BGP UCI through CLI using the UCI command suite. The configuration f ile is stored at: /etc/con fig/bgpd To view t[...]

15 : BGP (Border Gatew ay Protocol) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ package bgpd config routing 'bgpd' option enabled 'yes' option router_id '3.3.3.3' option asn '1' list network '11.11.11.0/29' list network &apos[...]

15 : BGP (Border Gatew ay Protocol) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ bgpd.ROUTEMAP.permit=yes bgpd.ROUTEMAP.match_type=ip address bgpd.ROUTEMAP.match=192.168.101.1/32 bgpd.ROUTEMAP.set_type=ip next - hop bgpd.ROUTEMAP.set=150 To change a ny of t he above v al ues [...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 16 Configuring WiFi This section explains how to configure WiFi on a V irtual Access ro uter using the web interface or via U CI. 16.1 Configurin g WiFi thro ugh the we b inte rface WiFi can act as an Ac cess [...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 26 : The common configura tion physical settings page Select Brid ge Interfaces . In the Interfac e fields, you will see the interface that you are wo rking on is al ready selected. Name Type Requi red [...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 27 : The w ireless o verview page To create a new WiFi interface, click Add . T he W ire le ss Network page appe ars. Figure 28 : The w ireless net work pag e In the Devi ce Con fig urati on section , e[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 29 : The interfa ce configuration pa ge Ensure y ou hav e select ed the General Setup tab. In the ESSID fie ld, type [name of the wireless local area network] . In the Mod e drop d own menu , sel ect Ac[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 30 : The interfa ce configuration pa ge In the Encryption dro p down menu, select the en cryption key . In the Cipher drop do wn menu, select the c ipher typ e . Create an encryption ke y. Click Save &a[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 32 : The w ireless n etwo rk page In the Devi ce Con fig urati on section , ensur e the General Setu p tab is selected. In the Channel drop do wn menu, select the channel you require. In the Transmit Po[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 33 : The genera l set up tab In the ESSID fie ld, type [name of the wireless local area network] . In the Mod e drop d own menu , sel ect Access Point . In the unspecified – or - create: field, type t[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 34 : The w ireless securit y tab In the Encryption dro p down menu, select the en cryption key . When you have entered the e ncryption type, the Cipher and Ke y fields appear. In the Cipher drop do wn m[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 36 : The new interf ace page showing pro tocol button Click Switch Protocol . The ne w interface configuration page appears. Figure 37 : The n ew int erface page Name Type R equired D efault Description[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ IPv 4 gateway Numeric Value No N/A IPv4 broadcast Numeric Value No N/A Use custom DNS servers Strin g No N/A DNS server IP addr ess Accept rou ter advertisem ents Check box No N/A Send rou ter solicita tion s [...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 39 : The w ireless n etwo rk page In the Devi ce Con fig urati on section , ensur e you hav e select ed the General Setup tab. In the Channel drop do wn menu, select the channel you require. In the Tran[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ In the ESSID fie ld, type [name of the wireless local area network] . In the Mod e drop d own menu , sel ect Client . In the unspecified – or - create: fi el d, typ e the name of t he new WiF i inte rface . [...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 40 : The w ireless p age interfa ce conf iguratio n section In the Encryption dro p down menu, select the en cryption key . When you have entered the e ncryption type, the Cipher and Key fie lds appear.[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 42 : The WClient inte rfaces pa ge In the Pr otocol drop down m enu, sel ect DHCP clien t . A ‘S witch Protocol’ button appears. Click Switch Protocol . Click Save & App ly . Note : The router w[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ package network config interface 'lan' option ifname 'eth0' option proto 'static' option ipaddr '192.168.100.1' option netmask '255.255.255.0' option type &apo[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ To view UCI commands, ente r: uci show network network.lan=interface network.lan.ifname=eth0 network.lan.proto=static network.lan.ipaddr=192.168.6.1 network.lan.netmask=255.255.255.0 network.lan.type=bridge uc[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ uci export wireless package wireless config wifi - device 'radio0' option type 'mac80211' option channel '11' option phy 'phy0' option hwmode '11ng' option htm[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ wireless.radio0.channel=11 wireless.radio0.phy=phy0 wireless.radio0.hwmode=11ng wireless.radio0.htmode=HT20 wireless.radio0.ht_capab=SHORT - GI - 40 TX - STBC RX - STBC1 DSSS_CCK - 40 wireless.radio0.txpower=1[...]

16 : Configuring WiFi ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option txpower '17' option country 'US' config wifi - iface option device 'radio0' option ssid 'Remote - AP' option mode 'sta' option network 'WCLIENT&apo[...]

17 : Configuring a 3G/4G connec tion ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 17 Configuring a 3G/4 G connect ion In the top menu, select Networ k - > Interfaces . Figure 43 : The interfa ces menu on a VA router The Interfaces Ove rview page appears. Figure 44 : The in[...]

17 : Configuring a 3G/4G connec tion ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 45 : The common connectivity page Ensure the Gene ral Setup tab is selected. Fo r s ing le S IM imp lem en tat ion, in the SIM drop down menu, se lect SIM 1 . Enter the APN information an[...]

17 : Configuring a 3G/4G connec tion ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 46 : The in terfaces overv iew pag e To view 3G/4G connecti vity info rmation, browse to Sta tus - > 3G Sta ts . Figure 47 : The 3G informa tion page ______ _____ _______ ________ ____[...]

18 : Configuring SMS ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 18 Configuring SMS Browse to the router’s IP address and login. Select Service tab > M obile Manage r . The Mobile Manager pa ge appears. Figure 48 : The mobile manage r page In the Basic Settings section,[...]

18 : Configuring SMS ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Parameter Description Name Name assigned t o caller. Number Numbe r of ca ller allow ed t o SMS the rou ter. Enable Enables or disab les caller. Respond If ch ecked, the r outer w ill retur n an SMS. Table 11 :[...]

19 : Configuring Multi - WAN ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 19 Configuring Multi - WA N Mu lti - W AN is used for managing WAN inte rfaces o n the router, for example, 3G interfaces to ensure high - availability. You c an customise Multi - WAN to various needs, [...]

19 : Configuring Multi - WAN ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 53 : Example interface showing failover tr affic de stination as the added multi - W AN interface Name T ype Require d Defa ult Description Load Balancer Distri buti on Dropd own lis t No 10 Conf[...]

19 : Configuring Multi - WAN ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Attemp ts Bef ore WAN Failover Dropd own lis t No 3 Sets th e amou nt of r etries before interf ace is c onside red a failure. Attemp ts Bef ore WAN Recovery Dropd own lis t Yes 5 Sets the n umber of h [...]

19 : Configuring Multi - WAN ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 54 : The multi - WAN traffi c rules pag e 19.2 Multi - WAN UCI interface Mu lti - W AN UCI configuration settings are s tored in the fo llowing file: /etc/con fig/mu ltiwan Run UCI export or s ho[...]

19 : Configuring Multi - WAN ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option ecio_threshold ' - 15' option ifup_timeout_sec '120' ~# uci show multiwan multiwan.config=multiwan multiwan.config.preempt=yes multiwan.config.alt_mode=no multiwan.config.enab[...]

19 : Configuring Multi - WAN ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Icmp hosts No 3 secs Sets Ping tim eout. timeou t No 3 secs Sets Ping timeou t. Health fail r etries Yes 3 Specifies th e amoun t of retries befor e the interf ace is c onside red a failure. Healt h rec[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 20 Automatic op erator sele ction 20.1 Introd ucti on to a uto matic o pera to r se lecti on This section describe s how to configure and o perate the Automatic Ope rator Selection feature of a Vi[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ int erface was di scon nect ed be caus e ifu p_retr y_sec of P rim ary in terfac e ti med ou t then go back to s tep 1 and repeat the proces s. The primary predef ined interface is defined in the [...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ and <short - operato r - name> is first four alphanumeric character s of operator name (as reporte d by 'AT+COPS=?' comman d). Type the short o perator name in lower case, for exam[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Click Save & App ly . 20.3. 1.2 Setting multi - WAN options for pr imary pr edefined interface On the web interface go to Network - >Mul ti - Wan . The Multi - WAN page appears. Figure 58 :[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Click Add . The Multi - WAN page appears. Figure 60 : The multi - WAN page From the Health Monito r Interval dropdown menu, choo se the interval that w ill be used to monitor s ignal strength valu[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ In the Exclusive Grou p field type in 3g . From the dropdown menu, s elect the Choo se Mi nimum if up Int erv a l opt io n. From dropdown menu, se lect the Inter face Start Timeout option. From dr[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 61 : The mobile manage r page Under Basic Sett ings, click Add . The Basic s ettings for Mobile M anager page appears. Figure 62 : Basic settin gs field in the mobi le manager page ______ _[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Name Type Requi red Defa ult Descriptio n SMS Enabl e Boolean No 1 Enables SM S Roamin g SI M Dropd own list Yes none In which s lot roamin g sim - card is inse rted Collec t IC CIDs Boolean No 0 [...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Check the Inte rface Signal Sort checkbox, so auto created interface s are sorted in priority, based o n signal strength value. From the Roaming SIM dropdown menu, select the slot that the roaming[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ to APN. Health Monitor Inter val Drop down menu Yes 10 sec Sets interval u sed to monit or sign al stre ngth. Health Monitor ICMP Host (s) Drop down menu No none Specifies target IP address for IC[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Check the Reboot n ow check box and then click Reboot . 20.3.2 PMP + roam ing: pre - empt d isabled As in th e previous sect ion, mul ti - WAN connects the primary pred efined interface and uses a[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 20.3.3 Roaming: no PMP def ined There is no pr imary interface that can be used fo r a connection. The route r uses the network that offers the best signal thresho ld. Multi - W AN operat ion 1. C[...]

20 : Automatic operator sel ection ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 20.3.4 Disable roaming There may be oc casion where it is desirable to disable roam ing. Use UCI on the command line to set t he operator option value. cd/etc/config uci set network.Wan2.operator=[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 21 Configuring IPSec IPSec tunnels are handled b y strongSwan. You must con fi gure three sect ions : • Common settings • Connection settings • Secret settings Common settings control the overa ll behav[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ An example of a typical set o f common settings for strongSwan is sho wn below. root@VA_router:~# uci show Strongswan.general Strongswan.general=general Strongswan.general.strictcrlpolicy=no Strongswan.genera[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ sha1 - modp1536 DHGrou p: modp1024, modp1536, mod p2048, modp3072, mod p4096, modp6144, mod p8192 For example: ae s128 - sha - modp1536. esp string Yes aes128 - sha1, 3des - sha1 Specif ies the e sp alg orith[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ yes 9m negotiate a r eplacemen t begin. Releva nt only locally , othe r en d need not agree on it Syn tax: timespec: 1d, 2h, 25m , 10s. keyingtr ies integer yes 3 Specifies how many atte mpts (a positive inte[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Strongswan.@connection[0].locallan=10.1.1.0 Strongswan.@connection[0].locallanmask=255.255.255.0 Strongswan.@connection[0].remoteid=10.2.2.2 Strongswan.@connection[0].remoteaddress=10.2.2.2 Strongswan.@connec[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ opt ion 'dpddelay' "30s" option 'dpdtimeout' "120s" 21.3 Shunt conne ction If the remote LA N network is 0.0.0.0/0 then all traf fic generated on the loca l LAN will be[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Name Ty pe Requi red Defaul t Description enabled strin g Yes No Defin es wh ether th is set of credentia ls is to be used or not. Idtype Strin g No ipaddress Defines w hether I P address or userf qdn is us e[...]

21 : Configuring IPSec ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ If xauth is defined as the authentication method then you must include an additional conf ig secret section, as shown in the example below. strongswan.@secret[1].enabled=yes strongswan.@secret[1].idtype=userf[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ 22 Configuring firewall The firewall itse lf is not required. It is a set of sc ripts which configure netfil ter. If preferred, you can use netfilter directly to achieve the desired f irewall behaviour. No[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ zone, if omitted, the v alue of na me is used by default. masq bo olean no 0 Specif ies wh ether outgo ing zon e traf fic should be ma squeraded ( NATT ED) - this is typically en abled on th e wan zone. ma[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ The iptables rules ge nerated for this sect ion rely on the state matc h which needs connection tracking t o work. At least one of the sr c or dest z ones needs t o have connection tracking enabled th roug[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ limit string no (none) Sets maximum average m atching rate; specif ied as a n umb er, w ith an option al /second, /minute, /hour o r /day suffix. Example 3/hour . limit_bu rst integer no 5 Sets ma ximu m i[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ limit string no (none) Maximum average matchi ng rate; specifie d as a number, with a n optional /second, /minute, /hour or /day su ffix. Exampl e3/ho ur. limit_bu rst integer no 5 Maxim um in itial nu mbe[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ config rule option src wan option dest_ip 88.77.66.55 option target REJECT Rules without IP addre sses are auto maticall y added to iptables and ip6tables, unless overridden by the family option. Redirect [...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ 22.9 Note o n conne cti on tra cki ng By default, the firewa ll will disable co nnection trac king for a zone if no masquerading is enabled. Th is is achieved by generating NOTRACK firewall ru les matching[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ config redirect option src wan option src_dport 80 option proto t cp option dest_ip 192.168.1.10 The next example for wards one arbitrary port that yo u define to a bo x running ssh behind the firewal l in[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ hides the loca l network from the Internet, SNAT hides the Internet from the local network. Source NAT and de stination NAT are combined and use d dynamically in IP masquerading to make c omputers with pri[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ config rule option src lan option dest wan option src_ip 192.168.1.27 option extra ' - m t ime -- weekdays Mon,Tue,Wed,Thu,Fri -- timestart 21:00 -- timestop 09:00' option target REJECT 22.10.8 R[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ con fig redirect option src lan option proto tcp option src_ip !192.168.1.100 option src_dport 80 option dest_ip 192.168.1.100 option dest_port 3128 option target DNAT config redirect option dest lan optio[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ # ESP protocol config rule option src wan option dest lan option proto esp option target ACCEPT For some configurations you also have to ope n port 500/UDP. # ISAKMP p rotocol config rule option src wan op[...]

22 : Configuring firewall ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ root@VA_router:/# /etc/init.d/firewall start The firewall can be pe rmanently disabled by e nter: root@VA_router:/# /etc/init.d/firewall disable Note: disable does no t flush the rules, so y ou might be re[...]

23 : Configuring SNMP ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 23 Configuring SNMP The SNMP daemon has se veral configuration sec tions that configure the age nt itself (agent and syst em sections), assignment o f community names and which SNMP protocols are in us e to gr[...]

23 : Configuring SNMP ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config 'agent' option agentaddress 'UDP:161,tcp:161,9161@localhost' 23.2 system The options defined fo r this section are shown in the ta ble below. Name Type Required De scription agentadd[...]

23 : Configuring SNMP ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ any request from the localhost itself us ing “private” as the comm unity string will be dealt with us ing the security name “rw”. Note : the security names of “ro” and “rw” here are simply name[...]

23 : Configuring SNMP ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config 'group' 'public_usm' option group 'public' option version 'usm' option secname 'ro' config 'group' 'private_v1' option group 'p[...]

23 : Configuring SNMP ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config 'view' 'all' option viewname 'all' option type 'included' option oid '.1' config 'view' 'mib2' option viewname 'mib2' opti[...]

23 : Configuring SNMP ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option prefix 'exact' option read 'all' option write 'none' option notify 'none' config 'access' 'private_access' option group 'private' op[...]

24 : Configuring HTTP server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ 24 Configuring HTTP server The uhttpd configuration is used by the uhttpd we b server package . This file defines the behaviour of the server and default va lues for certific ates generated for SSL oper[...]

24 : Configuring HTTP server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ docume nt roo t. Lu a sup port is disabl ed if th is option is mi ssin g. lua_ha ndler file path yes if lua_ prefi x is given, else no (none) Specifies Lu a han dler script u sed to initia liz e the Lu [...]

24 : Configuring HTTP server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ root@VA_router:~# uci show uhttpd.main uhttpd.main=uhttpd uhttpd.main.listen_http=0.0.0.0:80 uhttpd.main.listen_https=0.0.0.0:443 uhttpd.main.home=/www uhttpd.main.rfc1918_filter=1 uhttpd.main.cert=/etc[...]

24 : Configuring HTTP server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ Locati on string no Berlin Loc ation /city of the c ertific ate is suer . commonname string no (no ne) Common n ame cover ed by the certif icate. For the purpos es of s ecure Activ ation th is MUST be s[...]

24 : Configuring HTTP server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _____ ________ _____ _______ ______ If the $p$… format is used, uhttpd will c ompare the client provid ed password against the one s tored in the shadow or pas swd database. 24.4 Securi ng uH TTP d By default, uHTTPd b inds to 0.0.0.0 w[...]

25 : Virtual Router Redunda ncy Protocol (VRRP) ______ _____ _______ ________ _____ ________ _______ _____ ________ _____ _____ ________ ________ _____ _______ ______ 25 Virtual Router Redund ancy Protoc ol (VRR P) The Virtual Router R edundancy Protocol (VRRP) is a networking protoco l designed to eliminate the single point of fa ilure inherent in[...]

25 : Virtual Router Redunda ncy Protocol (VRRP) ______ _____ _______ ________ _____ ________ _______ _____ ________ _____ _____ ________ ________ _____ _______ ______ When yo u are logged in v ia an SSH session, run the command, vacmd show vars Figure 69 : Output from the c ommand vacmd show vars Alternatively, when y ou are connected via the web i[...]

25 : Virtual Router Redunda ncy Protocol (VRRP) ______ _____ _______ ________ _____ ________ _______ _____ ________ _____ _____ ________ ________ _____ _______ ______ In the VRRP page , you can enable or disable VRRP and add, edit or de lete VRRP groups. Under the Global Se ttings title, click Ad d . Figure 72 : The VRRP g lobal settings section Ch[...]

25 : Virtual Router Redunda ncy Protocol (VRRP) ______ _____ _______ ________ _____ ________ _______ _____ ________ _____ _____ ________ ________ _____ _______ ______ In the Interfac e field, type the name of the interface whe re VRRP should run. Note : take the interface name fro m the interface sec tion. In the Track interfaces field, optionally [...]

25 : Virtual Router Redunda ncy Protocol (VRRP) ______ _____ _______ ________ _____ ________ _______ _____ ________ _____ _____ ________ ________ _____ _______ ______ routers ser ving the sa me L AN must b e configured with the same v irtual IP address. GAR P d ela y Integer Yes Blank Sets t he gratuitous ARP messa ge sending delay i n seconds. Fig[...]

25 : Virtual Router Redunda ncy Protocol (VRRP) ______ _____ _______ ________ _____ ________ _______ _____ ________ _____ _____ ________ ________ _____ _______ ______ ~# uci show vrrp vrrp.main=vrrp vrrp.main.enabled=yes vrrp.g1=vrrp_group vrrp.g1.enabled=yes vrrp.g1.interface=lan1 vrrp.g1.track_iface=lan vrrp.g1.init_state=BACKUP vrrp.g1.router_id[...]

26 : Multicasting using PIM and IGMP interfaces ______ _____ _______ ________ _____ ________ _______ _____ ______ _______ ________ _____ ________ _______ _____ ______ 26 Multicasting using PIM and I GMP interface s IP multicast is a band width - conserving technology that re duces traffic by simultaneously delive ring a single stream o f informatio[...]

26 : Multicasting using PIM and IGMP interfaces ______ _____ _______ ________ _____ ________ _______ _____ ______ _______ ________ _____ ________ _______ _____ ______ In the PIM page , click Add . The G lobal Settings section appears. Figure 76 : The global se ttings inte rface Enable PIM by check ing PIM Enable d . Name Type Requi red Defaul t Des[...]

26 : Multicasting using PIM and IGMP interfaces ______ _____ _______ ________ _____ ________ _______ _____ ______ _______ ________ _____ ________ _______ _____ ______ To save your c onfiguration updates, c lick Save & Apply . 26.2 PIM and IGMP UCI in terfac e You can co nfigure PIM and IGMP through CLI using UCI. The configuration f ile is stor[...]

26 : Multicasting using PIM and IGMP interfaces ______ _____ _______ ________ _____ ________ _______ _____ ______ _______ ________ _____ ________ _______ _____ ______ pimd.@interface[1].enabled=yes pimd.@interface[1].interface=wan pimd.@interface[1].ssm=yes pimd.@interface[1].igmp=no Name Type Requi red Defa ult De scription enabled Boolean Yes No [...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 27 Dynamic Multip oint Virtual Priva te Network (DMVPN ) Dynamic Multipoint V irtual Private Network ( DMVPN) is a scalable method o f creati ng VP N IPSec Networ ks. DMVP N[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 78 : Network dia gram for DMVPN spok e to spoke • Spoke1 and Spoke2 co nnect on their WAN interfac e: ADSL, 3G and in itiate main mode IPSec in trans port mode to t[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 79 : Network dia gram for DMVPN spok e behind NA T • Spoke 1 se nds an NHRP registration reque st to the Hub. • Hub receives th is request and compares the s ourc[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 27.3.1 Configur ing IPS ec for DMVPN This secti on expl ains how to confi gure VP N IPSec speci fically for DMVPN. For more information on ge neral VPN IPSec configuration, [...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 81 : strongS wan IPSec enable d Na me Type Require d Default Description Enable Strongswan IPsec Boolean Yes Blank Enable Strong swan IPs ec Strict C RL Polic y Dropd[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 82 : The strongSwan IP Sec VPN page ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ © Virtual [...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Name Type R equired Default Description Enable d Che ckbox yes Unche cked Globally en ables IP Sec on the router. Aggressiv e mode Chec kbox yes Unchec ked Globally en ables[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ encAlgo - authAlgo - PFSGroup encAlgo: 3des , aes, s erpen t, twofis h, blow fish authAlgo: md5, sha, sha2 DHGrou p: modp1024, modp1536, mod p2048, modp3072, mod p4096, modp[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ when tr affic bring s the tunnel up. Hold Clears d own th e tunn el and brin g up as soon as the peer is av ailable. Restart Restar ts DPD when no activity is det ecte d. DP[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 83 : The secr ets se ction Select Enabled . From the dropdown menu unde r Secret Type, select ps k . In the field beneath S ecret, type the psk passwo rd . Click Save[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 85 : The DM VPN gen eral section Check En able DMVPN . From the IPSe c template connection drop down menu, prov ide the name of the IPsec connection . In the DMVPN Hu[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ /etc/con fig/str ongswan To view the configura tion file, use uci show strongswan or uci export strongswan comman ds. root@GWxxxx:~# uci show strongswan strongswan.general=g[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ uci export strongswan package strongswan config general 'general' option enabled 'yes' option strictcrlpolicy 'no' option uniqueids 'yes&a[...]

27 : Dynamic Multipoint Virtual Priv ate Network (DM VPN) ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Configuration files are stored at: /etc/con fig/dmvp n To view the configura tion file, use uci s how dmvpn or uci export dmvpn commands . uci export dmvpn package dmvpn con[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 28 Terminal Serv er 28.1 Intr oductio n Terminal Server is a b ackground application (a daemon) whose mai n task is to forward data between T CP connections or UDP stre ams and asynchronous serial ports. Termin[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Name Ty pe R equired Def ault Descriptio n Enable Checkbox Ye s Disabled Enable s the Termin al Server applica tion . Debug En able Checkbo x No Disabled Enables deta iled debu g logging. Sys log sever ity Drop[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 88 : The genera l tab fields part 2 Name Type Requi red Defaul t Description Enable Che ckbox Yes Disab led Enabled port. Netwo rk Fowrar ding Buf fer Size Numeric value Yes 256 Forwa rding b uff er siz [...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Serial receiv e debug log size Numeric value No Disabled Configu res serial r eceive log siz e in bytes and en ables receiv e data logging. 0= disabled. Serial tran smit debug log size Numeric value No Disabled[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 90 : The serial ta b fields part 2 Name Type Requi red Defaul t Description Devic e S tring Yes '/dev/ ttySC0' '/dev/ ttySC1' Serial device n ame. Portmod e Dropd own list Yes rs232 r[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ mode. RTS tim eout Numeric value No 30 In RS232 half du plex mode, time in milliseconds between raisi ng RTS and ena bling the tran smitter. POST RTS ti meout Numeric value No 20 In RS232 h alf duplex mode, tim[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 92 1: The Network tab fi elds part 2 Name Type Requi red Defaul t Description Tran sport mod e Dropd own list Yes TCP Select be tween TC P/UDP. Local IP IP address Yes 0 .0.0.0 Local IP address t o liste[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 0=nor mal opera tion . TCP alwa ys on Checkbo x No Disabled Kee p TCP session always connecte d. Close T CP on DSR Checkbox No Di sabled Close T CP se ssion on detection of DSR s ignal low . Recon nect time (ms[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config tservd main # set to 1 to enable terminal server option enable 0 # enables detailed debug logging (state transisions, data transfer etc) option debug_ev_enable 0 # sets syslog level (0 to 7), default is [...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ # Forwarding timer mode (serial to network), 'idle'=timer re - started on each received data, 'aging'=timer started on first rx option fwd_timer_mode 'idle' # Forwarding buffer siz[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ # TCP server mode option server_mode 1 # Proxy mode (off by default) option proxy_mode 0 # Local IP address to listen on (0.0.0.0=listen on any interface) option local_ip '0.0.0.0' # TCP listen port f[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ # Number of TCP keep alive probes to send before connection closed option tcp_keepalive_count 1 # Maximum time in milliseconds for TCP to wait for transmitted data to be acked # before closing connection in est[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option is_usb_serial 0 # Used for USB serial card. 'hdlc' = synchronous HDLC framed mode; 'transp' = transparent mode option sync_mode 'hdlc' # Used for USB serial card. 1= in HDLC[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ # Used for USB serial card. Value of idle character (decimal) to t ransmit in case of TX underrun (0 to 255) # in HDLC mode configures inter - frame fill: set to 0 to transmit 0s, 255 to transmit 1s, 126 to tra[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ # when used with V.23 modem driver, (set portmode 'v23') LIM operation: 0=2wire; 1=4wire option v23_is_four_wire '0' # when used with V.23 modem driver, (set portmode 'v23'), sets [...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ # bit reverse: 0=normal; 1=reverse option bit_reverse 0 # v24 dte tt clock invert: 0=normal; 1=invert option dte_tt_inv 0 # v24 dce tx clock invert: 0=normal; 1=invert option dce_tclk_inv 0 # v24 dce rx clock i[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option speed 115200 # serial device word size (5,6,7,8) option wsize 8 # serial device parity (0=none, 1=even, 2=odd) option parity 0 # serial device number of stop bits (1 or 2) option stops 1 # serial from co[...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config tservd port1 # enables this port option enable 1 # serial device name option devName '/dev/ttySC1' ….. other options follow …. 28.5 Term inal Serv er oper ation 28.5.1 General The Terminal [...]

28 : Terminal Server ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 28.5.4 Stop ping Termina l Serv er Sometimes it may be ne cessary to stop Terminal Server, for e xample if the configuration is change d and it is not des irable to reboot the route r. To stop Ter mi nal Server[...]

29 : GRE interfaces ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ 29 GRE interfa ces General Routing Enca psulation (GRE) is a t unnelling protocol used fo r encapsul ati on of oth er commu ni cation p rotocols i nsid e point to poi nt links ov er IP. 29.1 GRE web interfac e T[...]

29 : GRE interfaces ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ Name Type R equired Def ault Description Name of th e new interface Text yes Blank Assigns a logi cal name to the GRE tunnel . Protoc ol of th e new int erface Dropd own list yes Static Specif ies wh at protoc o[...]

29 : GRE interfaces ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ value interface. Tunnel key Numeric value Yes Bl ank Set s GRE tu nnel ke y. MTU Numeric value Yes 1472 Configures MTU (maximum trans mission un it) size of PDUs usin g this in terfa ce. Table 24 : Interfac es ?[...]

29 : GRE interfaces ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ______ _____ _______ ______ Name Type Requi red Defa ult De scription pro to Interface Yes Bla nk Conf igure s a logica l name to the GRE tu nnel. ipaddr IP address Yes Bl ank Conf igure s local I P addr ess of the GRE interface. mask_len [...]

30 : Configuring a COSEM HDLC Bridge ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ __ ________ ________ _____ _______ ______ 30 Configu ring a COSEM HDLC Bridge COSEM is the COmpanion Spec ification for Ene rgy Metering as defined in IEC publication 62056. T he protocol is used for the electronic contro l and monitori[...]

30 : Configuring a COSEM HDLC Bridge ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ __ ________ ________ _____ _______ ______ Name Ty pe R equired Def ault Descriptio n Enable Check box Yes Disabled Enables C OSEM H DLC bridge applica tion . Log Level Numeric value Yes 3 Sets the logg ing even t level. Valu e 0- 7. 0 =[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 31 Event system Virtual Acces s routers feature an event system. The event sy stem a ll ows you to con fig ure the rout er’s i nform ation f or effici ent control and management o f devices. This section explain[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ SNMP Event sent via SNMP t rap Exec Command exec uted when event occu rs Table 27 : Ev ent s ystem - supported targets The attributes of a tar get vary significant ly depending on its type. 31.4 Suppo rted co nne [...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ The table below des cribes main event syste m parameters: Name Type Re quired De fault Description enabled Boolean Yes Yes Enable the even t system event_qu eue_fil e Filename Yes /tmp/event_bu ffer File where th [...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 31.6. 3.1 Ping connectio n tester A ping connection tes ter tests that a conne ction can be establish ed by sending pings. If successful, the e vent system assumed the c onnection is valid for a configurable amoun[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ The table below des cribes link connec tion tester parameters . Name Type Requi red De fault Description name Strin g Ye s None Name of th e target to be us ed in the targ et sec tion enabled Boolean Yes Yes Enabl[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 31.6. 4.2 Email ta rget When an email target rec eives an event, it sends it to the configured e mail address. config target option name email option enabled yes option type email option conn_tester pinger option [...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ subject_t emplate Strin g No None Templat e to us e for th e email subject body_templa te Strin g No None Template to use f or the email body conn_tester Strin g No No ne Name of the con nec tion tester to use f o[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config target option name logit option enabled yes option type exec option cmd_template "logger - t eventer %{eventName}" The table below des cribes exec target para meters. Name Type Requi red De fault [...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config forwarding option enabled 'yes' option className 'l2tp' option eventName 'CannotFindTunnel' option severity 'debug - critical' option target 'syslog' config[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config target option name 'syslog' option enabled 'yes' option type 'syslog' option target_addr '192.168.100.254:514' option conn_tester 'mon_server' config target[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option type 'exec' option cmd_template 'logger - t eventer %{eventName}' To view UCI commands, ente r: uci sho w va _ev ent d root@test:~# uci show va_eventd va_eventd.main=va_eventd va_eventd.[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ va_eventd.@conn_tester[0].ping_success_duration_sec=10 va_eventd.@conn_tester[1]=conn_tester va_eventd.@conn_tester[1].name=smtp_server va_eventd.@conn_tester[1].enabled=1 va_eventd.@conn_tester[1].type=link va_ev[...]

31 : Event system ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ va_eventd.@target[3]=target va_eventd.@target[3].name=logit va_eventd.@target[3].enabled=yes va_eventd.@target[3].type=exec va_eventd.@target[3].cmd_template=logger - t eventer %{eventName} ______ _____ _______ __[...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 32 Configuring SLA repor ting on M onitor 32.1 Intr oductio n This section describe s how to configure and v iew SLA reporting on M onitor, the Virtual Acces s monitoring system. It also e[...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 99 : The add/edit conte nt template Enter a relevant nam e and description and then add va lues from the drop - do wn menu or enter values for the parameters shown in the ta ble bel[...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Is this data to be graphical? To display elem ents as graphs Tick or no tic k Upper data valu e limit Inf inity Integer Lower data value limit - Infini ty Integer Present data per site? Ti[...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ The template will buil d as shown in the f igure below. The examp le graphs average latency, conne ction strength, and pac ket loss, with a ro ll up period set per hour and a range scope s[...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 102 : The add SLA repor t page Enter the relevant par ameters. Parameter Description Options Report Name Name of report Frequen cy of repor t How often a report is g ene rated once [...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 103 : An example SLA report showing two device s Note : for this report two ro uters have been added. When you have c onfigured the SLA Repo rt, Monitor will period ically access th[...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Report: SLA_Tes t_Report1 (Date 18 /7/20 12 Hou rs of oper ati on: 08:00 - 19:00) Figure 105 : Example of SLA report output 32.5 View ing auto ma te d SLA re ports An automated version of [...]

32 : Configuring SLA reporting on M onitor ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 106 : Example of an automa ted report To view a report, c lick Download in the report’s row. A PDF version of the report appears. 32.6 Configu rin g rou te r uploa d pro toc ol Th[...]

33 : Configuring SLA for a router ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 33 Configuring SLA for a r outer SLA reporting works in two parts: • The Virtual Acces s Monitor system server co nnects via SSH into the route r and schedules the task of up loading statistics t[...]

33 : Configuring SLA for a router ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 109 : The SLA daemon page In the Basic Settings section, click Add . The basic setting s section for SL A Daemon appears. Figure 110 : The SLA daemon page Check En able . In the Timeout for [...]

33 : Configuring SLA for a router ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ expires it is considered as lost. Interface Radio button menu Yes No ne Specif ies the in terf ace on whic h traff ic shou ld be monitor ed. Destina tion Host IP Addr ess IPv4 address Yes No ne Spe[...]

33 : Configuring SLA for a router ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ slad.main.enable=yes slad.main.roundtrip_timeout_msec=5000 slad.main.interface=lan slad.main.destination_host_ip_address=10.1.1.2 slad.main.destination_udp_port=53 slad.main.bin_restart_period_msec[...]

33 : Configuring SLA for a router ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 113 : Output from the c ommand line sla ne west ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ © Virtual Access 2015 [...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 34 Diagnostics 34.1 ADSL dia gnos tics 34.1.1 ADSL PPPoA connecti ons To check the s tatus of an ADSL li ne, in th e top menu, select S tatus - > ADSL Status . The ADSL Status page appears. Figure 114 : The ADSL[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 116 : The ADSL status page To chec k an IP address, transmit and receive d counter on an ADSL interface , in the to p menu, sel ect Network - > Interfa ces . The Interface Overview page appears. Figure 11[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ To chec k an IP address, transmit and receive d counter on an ADSL interface , in the top m enu, sel ect Network - > Interfa ces . The Interface Overview page appears. Figure 119 : The in terfaces ov erview page[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ You can se t the statistical information us ing ‘va5420_stats_reset /dev/ttyLC0’ . The example below sho ws the command ‘va5420_status /dev/ttyLC0’ ; it displays status information about the dev ice. root@V[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Figure 121 : The status page: mul ti - WAN status s ection page 34.4 Auto mati c opera to r sel ectio n diag nosti cs via UC I To chec k interfaces created in the mult i - WAN package, enter: cat /var/const_state/m[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ To chec k the status of the interface you are c urrently using, enter: cat /var/const_state_/mobile Figure 123 : Output from the c ommand cat /vat/c onst_state_/mobi le ______ _____ _______ ________ _____ ________ [...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 34.5 CESoPSN diagnostics C ESoPSN us es one pa cka ge - cesopd. To view the CESo PSN configuration: root@VA_router:~# # uci export cesopd package cesopd config cesopd 'main' option log_severity '5&ap[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ schedule_priority : 10 Port 1 config -------------------- cardType : Single AAL card enable : 1 clock_recovery_enabled : 1 clock_recovery_debug : 0 remote_loopback : 0 udp_local_ipaddr : 0.0.0.0 udp_local_port : 51[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ all_tx_analogue_loss_enabled : 0 all_rx_digital_gain : 0 all_tx_digital_loss : 0 tdm_intvl_ms : 2 34.5.2 cesop show statu s To show the current operating configuration , enter: root@VA_router:~# cesop show status C[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# cesop show stats Port 1 serial statistics ------------------------ reads 476840 readEmpties 0 readFails 0 writes 476889 writeFails 0 writeShorts 0 txBytes 19075560 rxBytes 19075560 Port 1 UDP stat[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# cesop clear stats cesopd stats cleared . 34.6 DMVPN di agnos ti cs In the top menu, click Status - > I PSec . The IP Sec Conn ecti ons pag e appears. Figure 124 : The IPSec connection s page In[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@GW202x:~# ipsec status Security Associations (1 up, 0 connecting): dmvpn_89_101_154_151[1]: ESTABLISHED 2 hours ago, 10.68.234.133[10.68.234.133]...89.101.154.151[89.101.154.151] dmvpn_89_101_154_151{1}: REKEY[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ NBMA - Address: 89.101.154.151 Flags: up The above command output is expla ined in the table below. Interface Interf ace name taken fr om packa ge netw ork Type incomple te Resolution requ est sen t. negative Negat[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 34.8 Firewall dia gnostics The routers OS relies on netfilter for pac ket filtering, NAT and mangl ing. The UCI Firewall provides a configuration interface t hat abstracts from th e iptables system to provide a s i[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config forwarding option src 'lan' option dest 'wan_interface' option family 'any' config rule option name 'Allow - DHCP - Renew' option src 'wan_interface' option [...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ config rule option name 'Allow - DHCPv6' option src 'wan_interface' option src_ip 'fe80::/10' option src_port '547' option proto 'udp' option dest_ip 'fe80::/1[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ list icmp_type 'echo - reply' list icmp_type 'desti nation - unreachable' list icmp_type 'packet - too - big' list icmp_type 'time - exceeded' list icmp_type 'bad - head[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# FW_TRACE=1 fw reload 2>/ tmp/iptables.log 34.9 GPS d iagnostic command s You can use the utility GPS to run d iagnostic commands against the GPSD application. When you run GPS at the co mmand p[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ collisions:0 txqueuelen:1000 RX bytes:569453 (556.1 KiB) TX bytes:77306 (75.4 KiB) lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# cat /var/state/mobile mobile.3g_1_1_1=status mobile.3g_1_1_1.auto_info=/etc/3g_1 - 1.1.auto mobile.3g_1_1_2=status mobile.3g_1_1_2.auto_info=/etc/3g_1 - 1.2.auto mobile.3g_1_1_1.sim_slot=1 mobile.[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Available commands: start Start the service stop Stop the se rvice restart Restart the service reload Reload configuration files (or restart if that fails) enable Enable service autostart disable Disable service au[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ To view configurat ion of the asterisk packag e, enter: root@VA_router:~# uci export asterisk package asterisk config provider option host '10.1.183.20' option hostport '5060' option username &a[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ root@VA_router:~# sip show channels stats Peer Call ID Dura tion Recv: Pack Lost ( %) Jitter Send: Pack Lost ( %) Jitter 10.1.23.15 4abaa449705 00:00:08 0000000426 0000000000 ( 0.00%) 0.0000 0000000391 0000000000 ([...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ 34.13 Multi - WAN diagn osti cs The multi - WAN package is an agent s cript that makes multi - WAN c onfiguration simple, easy to use and manageable. It comes c omplete with load balanc ing, failover and an easy t [...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ option priority '2' option manage_state 'yes' option exclusive_group '0' option ifup_retry_sec '300' option ifup_timeout_sec '40' The following output shows the mul[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ The log contains the e vents of many module s. To filter a spec ific module, type logread | grep modu le_name , f or example, if you want to see the vald e vents enter: logread - f | grep vald Note : t he vald modu[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ Is the T erminal S erver connec ted to padd? To ch eck if the Termin al Serv er is con nec ted to pad d, look at the log and ch eck th e Terminal Serv er status . For more deta ils refer t o the ‘ Terminal Server[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ tserv show userial stats - show USB serial card statistics tserv clear userial stats - clear USB serial card statistics tserv start userial rxlog <Port> - start USB serial card rx log tserv show userial rxlog[...]

34 : Diagnostics ______ _____ _______ ________ _____ ________ _______ _____ ________ ________ _____ _______ ________ _____ ________ ___ cat /var/state/vrrp command vrrp.g1.state=BACKUP vrrp.g1.masterip=10.1.10.83 vrrp.g1.timestamp=1425489022 34.17 Diagn ostics for WiFi A P mode To chec k for any hosts associated with WiFi AP, in the top menu, se le[...]