RuggedCom RuggedRouter RX1000 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284

Go to page of

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of RuggedCom RuggedRouter RX1000, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of RuggedCom RuggedRouter RX1000 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of RuggedCom RuggedRouter RX1000. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of RuggedCom RuggedRouter RX1000 should contain:
- informations concerning technical data of RuggedCom RuggedRouter RX1000
- name of the manufacturer and a year of construction of the RuggedCom RuggedRouter RX1000 item
- rules of operation, control and maintenance of the RuggedCom RuggedRouter RX1000 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of RuggedCom RuggedRouter RX1000 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of RuggedCom RuggedRouter RX1000, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the RuggedCom service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of RuggedCom RuggedRouter RX1000.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the RuggedCom RuggedRouter RX1000 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    RuggedRouter  RX1000/RX1100 User Guide RuggedCom Inc. 30 Whitmore Road, Woodbridge, Ontario, C ana da L4L 7Z4 Web: www.rugge dcom.com Tel: (905) 856-5288 Fax: (905) 856-1995 Toll Free: (888) 264-0006[...]

  • Page 2

    R U G G E D R O U T E R  U S E R G U I D E F O R U S E W I T H R X1 0 0 0 / R X1 10 0 P R O D U C T S V e r s i o n 1. 12 . 6 – Ma y 14 t h , 2 0 0 8 R u g g e d C o m 30 W hi tm or e R o ad W o o d br i d g e , On ta r i o C a n a d a L 4 L 7 Z 4 T e l : (9 0 5 ) 8 5 6- 5 28 8 F a x : ( 90 5 ) 8 5 6- 19 9 5 T o l l F r e e : ( 8 88 ) 2 64 - 0[...]

  • Page 3

    About this User Guide A b ou t t h i s U s e r G u id e This guide is concerned with aiding the u ser in the configuration a nd operation of the RuggedRouter  u sing the RuggedCom comm and line, setup menu an d web man agement interfaces. Sp ecifically, this guide details asp ects of: • A c c es s i n g t h e U s e r In t e r f a c e s • S e[...]

  • Page 4

    RuggedRouter  User G uide D o c u me n t C o n v e nt i o n s This publication uses the following conventions: N o t e : M e a n s r e a d er t a k e n o t e . N o t e s c o n ta in h e l pf ul s u gg es t i o n s o r r e f e r en ce s t o ma te r i a l s n o t c o n t a i n e d i n t h i s g u id e . Helpful Hint This type of note often indicat[...]

  • Page 5

    About this User Guide 10. A ll further configura tion is accomp lished through the web mana gement interface. Attach th e configuring host to one of the Eth ernet ports configured above. Point your w eb browser at the address for that port, u se https a nd specify a port number of 10000, e.g. https://192.168.1.1 :10000 (or otherwise if configured i[...]

  • Page 6

    RuggedRouter  User G uide 22. If your router is e quip ped with an embedded modem, the Networking menu , Modem sub-menu will allow you to configure it with PPP or incoming console connections. See the chapt er “Configuring PPP And Modem” for more details. 23. If your rou ter is equip ped with Serial Int erfaces, the Servers menu, Se rial Pro[...]

  • Page 7

    About this User Guide 35. When your routers configuration is s table, it is r ecommended that the configuration should be upload ed from the router and s tored a s a backup. The Maintenance m enu Backu p And Restore su b-menu will be u seful. 36. Should you need to transfer files to or from the rou ter, th e Maintenance menu Upload/Down load F iles[...]

  • Page 8

    RuggedRouter  User G uide T a b l e Of C o n t e n t s About this User Gu ide................................................................................................ ... ... ... ... ... ... ... .. ... .1 Applica ble Firmw are R evision........................................................................................... .. ... ... .[...]

  • Page 9

    Table Of Contents Bootup And Shutdown .............................................................................................................. ... ... 45 Change Password Com ma nd ................................................................................... ... ... ... ... ... ... .. .46 Scheduled Comma nds .............................[...]

  • Page 10

    RuggedRouter  User G uide Strategy For Creatin g Interfaces............................................................................ ... ... ... ... ... .. .69 Naming Of Logical Interfaces.................................................................................................. 70 Editing A T1/E1 Interface ............................[...]

  • Page 11

    Table Of Contents Introduction............................................................................................................................. ... ... ... 91 ADSL Fundamenta ls................................................................................................................. ... 91 PPPoE/Bridged Mode Fundamenta ls........[...]

  • Page 12

    RuggedRouter  User G uide Virtual Priva te Networkin g To A DMZ.................................................................................114 Firewal l Main Menu.............................................................................................. ... ... .. ... ... ... ... ... .114 Network Zones....................................[...]

  • Page 13

    Table Of Contents Router- ID ............................................................................................................ ... .. ... ... ... ... .. 143 Hello Interval a nd Dead Inte rval........................................................................................ ... .143 Active/Passiv e Interface Defau lt................[...]

  • Page 14

    RuggedRouter  User G uide VRRP Main Menu.................................................................................................. ... ... ... .. ... ... ... ... 168 VRRP Configura tion............................................................................................................... ... 168 Editing A VRRP Instance...........[...]

  • Page 15

    Table Of Contents Message Pac ketiza tion................................................................................................ .. ... ... ... 191 Use of Turnaround Delays..................................................................................... .. ... ... ... ... .. 192 Serial Protocols Ma in Menu..............................[...]

  • Page 16

    RuggedRouter  User G uide Viewing The GPS Status............................................................................. ... ... ... ... ... ... ... .. ... ... .222 Viewing The GPS Log ..................................................................................................... ... .. ... .222 Chapt er 23 – Configuring SSH .......[...]

  • Page 17

    Table Of Contents Alert Menu.................................................................................................................. ... ... ... ... .. .240 Alert Configuration....................................................................................................... ... ... ... .. ..241 Alert Filter Configuration ............[...]

  • Page 18

    RuggedRouter  User G uide Setting Up The Routers............................................................................................................ .. ... .275 An Alternate Approach................................................................................................ ... ... ... ... .. 275 Upgrading Considerations ............[...]

  • Page 19

    Table Of Fig ures T a b l e Of F i g u r e s Figure 1: Ru ggedRouter Setup Main M enu....................................................................................... ..29 Figure 2: Ru ggedRouter Setup Password Chan ge Menu........................................ ... ... ... ... .. ... ... ... ... .. 30 Figure 3: Ru ggedRouter Interfaces Setu[...]

  • Page 20

    RuggedRouter  User G uide Figure 26: Scheduled Com mands Dis playing a Comm and....................................................... ... ... ... .47 Figure 27: Webmin Scheduled Cron Jobs............................................................................................48 Figure 28: Cr eating a Cron Job.................................[...]

  • Page 21

    Table Of Fig ures Figure 53: T1/E1 Network Interfaces After Interface Creat ion..................................................... ... ... 70 Figure 54: Edit T1 Inte rface.......................................................................................................... ... ... .71 Figure 55: Edit Logical Interface (Frame Relay) ..........[...]

  • Page 22

    RuggedRouter  User G uide Figure 80: ADSL Link Statistics......................................................................................................... .96 Figure 81: Modem Interface........................................................................................ ... ... ... ... .. ... ... ... .98 Figure 82: Edit Modem Configur[...]

  • Page 23

    Table Of Fig ures Figure 107: Server Configuration...................................................................................... ... ... .. ... ... .. 130 Figure 108: Show Public Key ................................................................................................. ... ... ... .. 131 Figure 109: Preshared Keys ...............[...]

  • Page 24

    RuggedRouter  User G uide Figure 134: Link Backup Status................................................................................ .. ... ... ... ... ... ... ... . 162 Figure 135: Test Link Backup ...................................................................................... ... ... ... .. ... ... ... .162 Figure 136: VRRP Examp le[...]

  • Page 25

    Table Of Fig ures Figure 161: Ra w Socket Menu.................................................................................. ... .. ... ... ... ... ... ... .194 Figure 162: Serial Protocols Statistics Menu................................................................................ ... .. 195 Figure 163: Serial Protocols Trace Menu..........[...]

  • Page 26

    RuggedRouter  User G uide Figure 188: IRIGB/IEEE1588 General Configuration m enu...................................... .. ... ... ... ... ... ... .230 Figure 189: IRIGB Configuration menu................................................................................. ... ... .. ..231 Figure 190: IEEE1588 Configura tion Menu.....................[...]

  • Page 27

    Table Of Fig ures Figure 215: Archive D iffere nces List........................................................................... .. ... ... ... ... ... ... .251 Figure 216: Show D iffere nce for selected file between two targets.......................................... ... ... .. 252 Figure 217: SNMP Main Configura tion page....................[...]

  • Page 28

    RuggedRouter  User G uide Figure 242: IAS Window - Edit Profile................................................................................ ... .. ... ... .. 282 Figure 243: IAS Window – A dd Attribute...................................................................................... ... 283 Figure 244: IAS Window – Multivalued Attrib[...]

  • Page 29

    Chapter 1 – Setting Up And Administering The Router C h a p t e r 1 – S et t i n g U p A n d A d m i n i s t e r i ng T h e R o u t e r I n t r od u c t i on This chapter fam iliariz es th e user wi th the RuggedCom Serial Cons ole interface, the RuggedRouter  Setup script and signing on to the Web interface. This chapter describes the follo[...]

  • Page 30

    RuggedRouter  User G uide End Backup Server, VPN Serve r, NFS, OS PF/RIP p rotocol and firewall) are disabled by de fault. A c c e ss i n g T h e R u g g ed R o u t e r  Co m m an d P r om p t F r om t h e C o n s o l e P o r t Attach a terminal (or PC running termin al emu la tion softwar e) to the RS232 port on the rear of the chassis. The [...]

  • Page 31

    Chapter 1 – Setting Up And Administering The Router F i g u r e 2: R u g g e d Ro u t e r S e tu p P a s s w o r d Ch an ge M e n u C o n fi g u r i n g IP A d d r e s s I n f o r m a t i o n The Change Port IP Address comm and configures port IP addresses and gatewa ys. F i g u r e 3 : R u g ge d R o u t e r I n t e r f a c e s S e tu p M e n u [...]

  • Page 32

    RuggedRouter  User G uide F i g u r e 5: R a di u s Se r ve r C o nf i g u r at io n me n u The Hostname/IP an d Port Number fi elds configures the server loca tion. The Shared Secret field configures the unique pas sword used by this server. The time Timeout field selects the maxima l tim e to wait before trying the next server. The entry, crea[...]

  • Page 33

    Chapter 1 – Setting Up And Administering The Router E n a b l i n g A n d Di sa b l i ng T h e Ga u nt l e t S e c u r i ty A p p l i a n c e The Gauntlet security Appl iance requ ires a pas s phrase u nique to your network. This menu will configure it. F i g u r e 6 : G a u nt l e t Se tu p M e n u C o n fi g u r i n g Th e D at e , T i m e A n [...]

  • Page 34

    RuggedRouter  User G uide D i s p l a y i n g H ar d w a r e I n f o r m a t i o n The Displa y Hardware Information comma nd describes commission ed hardware. F i g u r e 8 : R u g ge d R o u t e r H a r dw a r e In fo r m a t i o n M e n u 32 RuggedCom[...]

  • Page 35

    Chapter 1 – Setting Up And Administering The Router R e s to r i n g A C o n f i gu r a t i o n The Restore A Previous Configuration comma nd provides a m eans to restore a previous ly ta ken snapshot of the configuration of the router. N o t e: T h e r o u t e r w i l l r eb oo t i m m e d i a t e l y a ft er r e s to ri ng c o n f i g u r a t i[...]

  • Page 36

    RuggedRouter  User G uide T h e R ug g e d R o u t e r  W eb I n te r f a c e The RuggedCom Web interface is provided by an enhanced version of the p opula r Webmin interface. U s i n g a W e b B r o w s e r to A c c e s s t h e W e b I n te r f a c e Start a w eb browser session and open a connection to the router by entering a URL that sp e[...]

  • Page 37

    Chapter 1 – Setting Up And Administering The Router The rightmost or configuration frame pr esents the configura tion for the currently selected subs ystem, or in the cas e of signing-on, the home pa ge window. The hom e page win dow presents an annota ted view of the front of the chassis a s well as a numb er of importan t system p aram eters. T[...]

  • Page 38

    RuggedRouter  User G uide • C o n f i g u r e t h e s i g n - o n p a s s w o r d , • S p ec i f y s e s s i o n ti m e o u t s , • R e s t r i c t t h e S u b n e t o f I P a d d r es s e s t h a t c a n l o g in , • Configure and view Webmin event logs, The System Menu provides the a bility to: • C h an g e t h e ro u t e r p a s s w[...]

  • Page 39

    Chapter 1 – Setting Up And Administering The Router The LED status Pan el provides the console port, indicat es the sta tus of hardware/softwa re an d can initiate a controlled reboot. The LEDs are organized into three p rimary groups; the p ort group, GPS/PPP group and the Alarm/ Power Suppl y group. The displa y pos sibilities a re as follows: [...]

  • Page 40

    RuggedRouter  User G uide Chapte r 2 – W ebmin Conf iguration I n t r od u c t i on This chapter fam iliariz es th e user wi th configuring the router through the Webmin menu and describes the following proc edures: • C o n f i g u r i n g t h e I P Ad dr e s s a n d S u b n e t M a s k • C o n f i g u r i n g t h e G a t e w a y A d d r e[...]

  • Page 41

    Chapt er 2 – Webmin Configura tion If your router is being used on a complet ely privat e networ k, or IP access control is being provided by the firewall you m ay leave IP Access Control disabled. Select the Allow from all addresse s field and Save. If you wish to restrict access to a single address or subnet, select the Only allow from listed a[...]

  • Page 42

    RuggedRouter  User G uide The Web managemen t p ackage provides context sensitive help in each of its menus. When a help link is selected th e router instructs the brows er to open the help text from a h elp server. In this wa y the router does not wa ste la rge amou nts of disk spa ce storing help text a nd network bandwidth sending large web p[...]

  • Page 43

    Chapt er 2 – Webmin Configura tion A u t h e n t i c at i on F i g u r e 20 : W e b m i n Co nf i g u r a t i o n M e n u , A u t h e n t i c a t i o n This menu allows you to configure what W ebmin will do wh en a num ber of failed logins from the sam e IP address occur. If the Enab le password time outs field is selected, the host will be block[...]

  • Page 44

    RuggedRouter  User G uide W e b m i n E v e n t s L og F i g u r e 21 : W eb mi n E ve nt s L o g This menu allows you to search the W ebmin log for changes made by you rself or other admin istrators. 42 RuggedCom[...]

  • Page 45

    Chapt er 2 – Webmin Configura tion This page intentional ly blank RuggedCom 43[...]

  • Page 46

    RuggedRouter  User G uide C h a p t e r 3 – C o n f i g u r i n g T h e S y s t e m I n t r od u c t i on This chapter fam iliariz es th e user wi th: • E n a b l i n g a n d d i s a b l i n g p r o c e s s e s s u c h a s S SH a n d W e b M a n a g em e n t • C h a n g i n g Th e P a s s w o r d • S h u t t i n g d o w n a n d R e b o o[...]

  • Page 47

    Chapt er 3 – Configuring The System The second part of the m enu allows you to program sp ecific actions a t boot time. The script wil l be run after all regular boot actions have com pleted. F i g u r e 23 : B o o tu p a n d S h u t d o w n , P a r t 2 The actions ma y be a series of comma nds that ca n be executed at the comma nd line. Each ent[...]

  • Page 48

    RuggedRouter  User G uide Begin by selecting the tim e and date you w ish to run the comma nd at us ing the Run on date and Run at time fields. Use the Run in direc tory field to enter a directory to run the com man d in, or simply use “/”. Finally, enter the comma nd to execute in the Commands to execute field. Note that the command w ill r[...]

  • Page 49

    Chapt er 3 – Configuring The System S c h e d u le d Cr on J o b s A Cron job is a combination of a comm and to run , and a definition of the times a t which to run it. The Scheduled Cron Jobs allows you to create, delete and edit these jobs. F i g u r e 27 : W e b m i n Sc h e du l e d C r o n Jo b s Initially, there will be no scheduled jobs. F[...]

  • Page 50

    RuggedRouter  User G uide Follow th e link of a specific job in order to delete the job, e dit it, or test the comm and part of the job by running it immediat ely. If you have multip le jobs, the arrows in the Move column w ill a lter the order in which they are pr esented. S y s t e m H os t n a me F i g u r e 30 : S y s t e m H o s t na me The[...]

  • Page 51

    Chapt er 4 – Configuring Networking C h a p t e r 4 – C o n f i g u r i n g N e t w o r k i n g I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g R o u t i n g a n d G a t e w a y s • C o n f i g u r i n g DN S • E n t e r i n g h o s t a d d r e s s e s • C o n f i g u r i n g a p a ir o f E n d[...]

  • Page 52

    RuggedRouter  User G uide C o r e S e t t i n g s F i g u r e 33 : C o r e N e tw o r k i n g S e t t i ng s This menu allows you to configure core networkin g settings. The IPV6 Support field determines where IPV6 interfaces are created and supp orted at boot time. Set this op tion to yes if you need these interfaces. Disabling these interfaces[...]

  • Page 53

    Chapt er 4 – Configuring Networking This menu allows you to configure a dumm y interface. Normall y the router is reachable on a ny of its interfac e addresses, whether the in terface is active or not. When OSPF a nd link detection is u sed, inactive in terfaces a re not advertised to the network and thus not reachabl e. A dumm y in terface is a [...]

  • Page 54

    RuggedRouter  User G uide The Network/Host and Netmask fields describe the remote network the s tatic route will reach. If the netmas k fi eld is not entered (or a netm ask of 255.255.255 is entered) the rou ting will define a host route. An y other n etmask will define a network route. If the network field is cl eared the rout e will be deleted[...]

  • Page 55

    Chapt er 4 – Configuring Networking S t a t i c M u l t i c a s t Ro u t i n g F i g u r e 36 : S t a t i c M u l t i c a s t R o u ti ng This menu allows you to configure static mu lticas t routing. The Configured Static Multic ast Routes table shows configured multicast routes. New routings ma y be added by completing th e bottom row of the tab[...]

  • Page 56

    RuggedRouter  User G uide D N S C l i e nt F i g u r e 37 : D N S Cl i en t This menu allows you to display and configure various DNS client fields. The Resolution Order s elector determin es the order of sources for resolving domain nam es into IP addresses. The Hosts file /etc/hosts can be pop ulat ed with frequen tly used, but un changing add[...]

  • Page 57

    Chapt er 4 – Configuring Networking The backup is “end to end” because conn ectivity is determined by th e ava ilability of an interface on the target system, and not a local link. In the above figure, interface w1ppp acts as the p rimary interface and eth1 acts as the s econdary interface. The router tes ts the prim ary pa th by probing 192.[...]

  • Page 58

    RuggedRouter  User G uide C o n fi g ur in g En d T o E n d B a c k u p F i g u r e 40 : En d T o E n d Ba c k u p This menu allows you to display and configure end to end backup. In orde r to start end to end backup a t each an d every boot, you must enable it via the System folder, Bootup And Shutdown menu . The m enu will remin d you if the f[...]

  • Page 59

    Chapter 5 – Configuring Ethernet Interfaces C h a p t e r 5 – C o n f i g u r i n g E t h e r n e t I nt e r f a c es I n t r od u c t i on This chapter fam iliariz es th e user wi th: • R e a d i n g t h e E t h e r n e t L E D s • C o n f i g u r i n g E t h er n et N e t w o r k In t e r f a c es • C o n f i g u r i n g V LA N s • Co[...]

  • Page 60

    RuggedRouter  User G uide The last 2-bytes of the VLAN tag contain the following informat ion: the firs t 3-bits are a User Priority Fi eld that ma y be u sed to assign a priority level to the E thernet frame. The next 1-bit is a Canonical Format Indicator (CFI) used in Ethernet fram es to indicate the presence of a Routin g Information Field (R[...]

  • Page 61

    Chapter 5 – Configuring Ethernet Interfaces E t h e r n e t F i g u r e 41 : E t he r n e t M e n u This menu allows you to configure Ethernet interface param eters as well as displa y the routes and status of all n etwork int erfaces. Select the Ethernet Interfaces icon to configure E thernet interfaces. The Network Interfaces m enu l ets you ed[...]

  • Page 62

    RuggedRouter  User G uide The Network Configura tion menu Apply Configu ration button a ppli es p erman ent changes and restart E thernet networking. If only tem porar y changes hav e been made, the p ermanen t configuration wil l be re-app lied. In either table, edit the desired interface by clicking on its link under the Name column. E d i t i[...]

  • Page 63

    Chapter 5 – Configuring Ethernet Interfaces V i r t u a l I nt er fa c e s Use virtua l interfaces when you hav e an Eth ernet p ort that ha s multip le "real" IP addresses assigned to it, e.g. as with a p ort provided by an an Internet Service Provider. F i g u r e 44 : C r e a t i ng a n V i r t u a l I n t e r f a c e The only new pa[...]

  • Page 64

    RuggedRouter  User G uide This menu allows you to make p erman ent changes to int erfaces and to imm ediatel y app ly thos e changes if desired. The Save button will save changes to the permanent configuration . The Netmask , Broadcast , MTU, Virtual Interfaces, Prox y ARP and Media Type controls are as described ab ove. The IP Address fields al[...]

  • Page 65

    Chapter 5 – Configuring Ethernet Interfaces E d i t PP Po E I n t e r f a c e F i g u r e 48 : Ed it in g a P PP o E I nt er f a c e This menus allows you to edit a PPPoE interface. The PPPoE Username field determin es th e userna me to use when connecting to the PPPoE server as sp ecified by your provider. The Password field determines the pa ss[...]

  • Page 66

    RuggedRouter  User G uide P P P L o g s F i g u r e 49 : D i s p l a y P P P Lo g s This menu displays the nativ e Ethernet and internal ADSL interface PPPoE connection messa ges. This is main ly useful when trying to debug a PPP connection problem. C u r r e n t R o u te s & In te r f a c e T a b l e The table provided by this comm and is a[...]

  • Page 67

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 C h a p t e r 6 – C o n f i g u r i n g F ra m e R e l ay / P P P A nd T1/E1 I n t r od u c t i on This chapter fam iliariz es th e user wi th: • F r a m e R e l a y a n d P P P T er m i n o lo g y a n d I s s u es • C o n f i g u r i n g F r a m e R e l a y a n d P PP L i n k s • V i ew [...]

  • Page 68

    RuggedRouter  User G uide Unlike PPP, a Frame Relay link can provide mu ltip le (u p to 990) connections. Each connection is identified by a Data Link Connection Identifier (DLCI) and must ma tch at the D CE an d DT E. The us e of multip le connections can su pport m eshed n etwork interconnections and disaster recovery. L o c a t i o n Of I n t[...]

  • Page 69

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 N e t w o r k In te r f a c e s F i g u r e 51 : T 1/ E1 N e t w o r k I n t e r f a c e s I ni ti a l Co nf i g u r a t i o n This menu allows you to display and configure T1/E1 Trunk pa rameters , Chann els and the logical interfaces that ru n on them. A table is pr esented for each i[...]

  • Page 70

    RuggedRouter  User G uide After assigning the first DLCI, you m ay revisit the interface throu gh the link under the Name field and add additional DLCIs. Once a ll channels ha ve been a ssigned, the “Assign” links will no longer app ear, a s shown below. Note that any of the Fram e Rela y interfaces on a channel (in this ca se w1c4fr16 and w[...]

  • Page 71

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 This menu allows you to display and configure T1 or E1 Trunk para meters. By default th e interface is set for T1 operation. The Convert this interface to E1 link will set the int erface for E1 op eration a nd allow you to configure its settings. If logic al int erfaces us e a channel above 24 an[...]

  • Page 72

    RuggedRouter  User G uide E d i t i n g A L o g i c a l I n te r f a c e ( F r am e R e l a y ) F i g u r e 55 : E d it L o gi c a l I n t e r f a c e ( F r am e R e l a y ) This menu allows you to configure Frame Relay link and logical interface fi elds. F r a m e R e l a y Li nk P a r a me t e r s The first table pr esents the link pa ram eter[...]

  • Page 73

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y DL CI s The second table provides a listing of all DLCIs available on the chann el. Only the DLCI selected from the main m enu can be edited, although an other DLCI can be added by fol lowing the Add ano ther D LCI to this channel link. The DLCI Number refers to the Data Link [...]

  • Page 74

    RuggedRouter  User G uide T 1 / E 1 S t a t i s ti c s When at lea st one logical interface is configured, T1/E1 Link and logical interface statistics will be a vailable. These statistics are ava ilable from lin ks on the T1/E1 WAN Int erfaces m enu. Link Statistics are p rovided through the “View Link Statistics” link a t the bottom of each[...]

  • Page 75

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y In te rf a c e S t a t i s t i c s F i g u r e 58 : F r a m e R e l ay S t a t i s t i c s Note that the Frame Rel ay Trunk Statis tics and Frame Rel ay Trunk Communications Err ors ta bles are common to all Fra me Rela y DLCIs on the trunk. RuggedCom 73[...]

  • Page 76

    RuggedRouter  User G uide P P P In te rf a c e S t a t i st ic s F i g u r e 5 9: P P P L i n k St a ti s t i c s 74 RuggedCom[...]

  • Page 77

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 L o o p b a c k When at lea st one logical interface is configured, a T1/E1 Loopback tests can be performed. This m enu ca n be reached from a lin k on the T1/E 1 WAN Interfaces menu . F i g u r e 60 : T 1 / E 1 L o o p b a c k M e n u The loopback test provides a means to test th e dig[...]

  • Page 78

    RuggedRouter  User G uide Running a loop test on an active interface will immediatel y cause it to go down. The loop test autom atica lly initializes the trunk after compl eting the t est. C u r r e n t R o u te s & In te r f a c e T a b l e The table provided by this comm and is a s described i n the N etworking m enu, Network Utilities sub[...]

  • Page 79

    Chapter 7 – Configuring Frame Relay/ PPP And T3 C h a p t e r 7 – C o n f i g u r i n g F r a m e R e l ay / PP P A nd T 3 I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g F r a m e R e l a y a n d P PP L i n k s • V i ew i n g s t a t u s a n d s t a t i s t i c s • U p g r a d in g F i r m w a r[...]

  • Page 80

    RuggedRouter  User G uide T 3 C o n f i g u r at io n F i g u r e 62 : T 3 T r u n k s A nd I n t e r f a ce s This menu allows you to display and configure T3 Trunks as well as displa y the routes a nd status of the network interfaces. T 3 N e t w o r k In te r f a c e s F i g u r e 63 : T 3 Ne tw o r k I n t e rf ac e s In it i a l C o n f i g[...]

  • Page 81

    Chapter 7 – Configuring Frame Relay/ PPP And T3 E d i t i n g A T 3 I n te r f a c e F i g u r e 65 : Ed it T 3 I nt e r f a c e This menu allows you to display and configure T3 Trunk param eters. The Framing field determines the framin g format u sed. Your line p rovider will indicate the correct format. The Line Dec oding field reflects th e li[...]

  • Page 82

    RuggedRouter  User G uide F i g u r e 67 : E d i t L o g ic al I n t e r f a c e ( F ra me R e l ay ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (Frame Relay) s ection of the Configuring F rame Relay/PPP And T1/E1 chapter. E d i t i n g A L o g i c a l I n te r f a c e ( P P P ) F i [...]

  • Page 83

    Chapter 7 – Configuring Frame Relay/ PPP And T3 U p g r a d i n g S o f t w a r e For some customers, access to rem ote sites in a ccomplished solely by a T3 connection. Usuall y a software upgrade will stop the system being upgraded, perform the upgrade a nd then restart it. If T3 port was upgraded in this wa y, the upgrade wou ld fail as the T3[...]

  • Page 84

    RuggedRouter  User G uide This page intention ally blank 82 RuggedCom[...]

  • Page 85

    Chapter 8 – Configuring Frame Relay/ PPP And DDS C h a p t e r 8 – C o n f i g u r i n g F ra m e R e l ay / P P P A nd D D S I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g F r a m e R e l a y a n d P PP L i n k s • V i ew i n g s t a t u s a n d s t a t i s t i c s • U p g r a d in g s o f t w [...]

  • Page 86

    RuggedRouter  User G uide D D S C o n f i g u r a ti on F i g u r e 69 : D D S T r un ks An d I n te r f a c e s This menu allows you to display and configure DDS Trunks. The Current Rou tes menu will display the rout es and status of the n etwork int erfaces. D D S N e t w o r k In te r f a c e s F i g u r e 70 : D D S W A N I n t e r f a c e s[...]

  • Page 87

    Chapter 8 – Configuring Frame Relay/ PPP And DDS N a m in g O f L og ic a l I n t e r fa c e s Webmin na mes the logical interfaces for you (but a llows you to provide a description). All int erfaces start w ith a “w” to identify th em as wan in terfaces, followed by the in terface nu mber. The next part of the identifier is eith er “ppp ?[...]

  • Page 88

    RuggedRouter  User G uide E d i t i n g A L o g i c a l I n te r f a c e ( P P P ) F i g u r e 74 : Ed it L o gi c a l I n t e r f a c e ( P P P ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (PPP) section of the p revious chap ter. D D S S t a t i s ti c s When at lea st one logical i[...]

  • Page 89

    Chapter 8 – Configuring Frame Relay/ PPP And DDS F r a m e R e l a y An d PP P I n t e r fa c e St a t i s t i c s Fram e Rela y And PPP Interface Statis tics are as described i n the Configuring F rame Relay/PPP And T1/E1 chapter. D D S L o o p b a c k When at lea st one logical interface is configured and that interface is active, a DDS Loopbac[...]

  • Page 90

    RuggedRouter  User G uide This page intention ally blank 88 RuggedCom[...]

  • Page 91

    Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL C h a p t e r 9 – C o n f i g u r i n g P P P o E / B r id g e d M od e O n A D SL I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g PP P o E a n d B r i d g e d M o d e L i n k s • V i ew i n g s t a t u s A D S L F u n d a m e nt a ls An ADSL (Asy[...]

  • Page 92

    RuggedRouter  User G uide A u t h e n t i c a t io n, A d d r e s s e s a n d DN S S e r v e r s PPP a uthentica tion util izes PAP or CHAP. Your ISP will provide you w ith a user-ID and passw ord which you wi ll enter in the GUI. The authentica tion p rocess will assign a local IP address and addresses of the ISPs DNS servers to the router. You[...]

  • Page 93

    Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL TX (Red) indic ates w hen data is being transmitted ov er DSL. RX (Red) indicates when data is being received over DSL. While connecting the LED s are fla shing sequential ly. The RuggedRouter also in dicates informat ion about ADSL ports on th e LED Pan el. A pair of LE Ds will indicate traffic[...]

  • Page 94

    RuggedRouter  User G uide This menu allows you to display and configure logical interface fi elds for PPPoE and to convert the in terface to Bridged Mode . By default, in terfaces ar e created with PPPoE. If you wan t the interfac e to be Bridge d Mode, click on the Convert this interface t o bridged link. The Descri ption field atta ches a desc[...]

  • Page 95

    Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL The Descri ption field atta ches a description to the logical interface viewable from the network interfaces m enu. The VPI field determines the VPI nu mber the connection uses. The defau lt of 0 is correct for most providers. The Attempt ATM Autoconfigur ation op tion caus es the rout er to att[...]

  • Page 96

    RuggedRouter  User G uide When at lea st one logical interface is configured, ADSL Link sta tistics wi ll be availabl e. These sta tistics are a vailable from links on the DDS WAN I nterfaces menu . The Local S NR Ratio is an effective indicator of line qu ality. SNR values a bove 40 db co rrespond to excellent line qu ality while values below 1[...]

  • Page 97

    Chapter 10 – Configuring PPP an d Modem C h a p t e r 1 0 – C o n f i g u r i n g P P P a n d M o d e m I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g PP P C l i e n t • C o n f i g u r i n g PP P S e r v e r • C o n f i g u r i n g D i a l i n c on s o l e • V i ew i n g s t a t u s M o d e m[...]

  • Page 98

    RuggedRouter  User G uide M o d e m M a i n M e n u F i g u r e 8 1: M o d e m I n t e r f a c e This menu allows you to display and configure the modem interface. M o d e m C o n f i g u r at i o n F i g u r e 8 2: Ed it M o d e m C o nf i g u r a t i o n This menu allows you to configure the mod em settings a nd features. The Dial-in console f[...]

  • Page 99

    Chapter 10 – Configuring PPP an d Modem Rings before answer con trols how man y tim es to let the m odem ring be fore answ ering the call, if Dial- in console or PPP Server is ena bled. Additio nal Modem AT Init Codes allows extra AT code s to be entered if requ ired. Permitted codes are: Blind dial X0 - Ignore dialtone/busy signal. Blind dial. X[...]

  • Page 100

    RuggedRouter  User G uide M o d e m P P P Cl i e n t C o nn ec ti on s F i g u r e 8 3 : C o nf i g u r e M o d e m PP P C l ie n t To edit an existing connection, click the 'Edit' link for that connection. To cre ate a n ew connection click 'Add ne w' lin k. To have the rout er au tomatical ly dial a connection at boot and k[...]

  • Page 101

    Chapter 10 – Configuring PPP an d Modem M o d e m P P P S e r v e r F i g u r e 85 : Co n f i g u r e M o d e m P PP S e r v e r The Server I P address field controls which IP the router will u se for the PPP connection. The Client IP address field controls which IP to assign the to remote system w hich it connects. The Client Nameserver field co[...]

  • Page 102

    RuggedRouter  User G uide This page shows the latest log entries for incom ing calls. This is mainl y u seful when trying to debug a problem w ith establishin g incoming connections. M o d e m P P P L o g s F i g u r e 8 7 : P PP L o g s This page shows the PPP logs. This is ma inly useful when try ing to debug a PPP connection problem. 100 Rugg[...]

  • Page 103

    Chapter 10 – Configuring PPP an d Modem M o d e m P P P C o n n e c ti on Lo g s F i g u r e 8 8 : P PP C o nn e c t i o n Lo g s This page shows a list of PPP connections. It shows who conn ected, when they connected and disconnected, the connection sp eed, and session traffic. C u r r e n t R o u te s & In te r f a c e T a b l e The table p[...]

  • Page 104

    RuggedRouter  User G uide This page intention ally blank 102 RuggedCom[...]

  • Page 105

    Chapter 11 – Configuring The Firewall C h a p t e r 1 1 – C o n f i g u r i n g Th e F i r e w a l l I n t r od u c t i on This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g T h e F ir e w a l l • E l e m e n t s o f F i r e w a l l d e s i g n • H o w t o c o n f ig u r e t h e F i r e w a l l • C h e c [...]

  • Page 106

    RuggedRouter  User G uide The netfilter s ystem us es rulesets , collections of packet class ification rules that determine the ou tcome of examination of a sp ecific packet. The rul es are defined by iptables , a generic table stru cture syn tax and utility p rogram for the configuration an d control of netfilter. In practice an ip tables ru le[...]

  • Page 107

    Chapter 11 – Configuring The Firewall P o r t F o r w a rd in g Port forwarding (also known a s redirection) allows traffic coming from the Internet to be sent to a hos t behind the NAT gateway. Previous examples ha ve described the NAT process when connections ar e made from the intran et to the Internet. In those exampl es, addresses and ports [...]

  • Page 108

    RuggedRouter  User G uide 7) If your hosts must accept sessions from the Internet configure the rules file to supp ort Destination Network a ddress Tra nslation (DNAT ). Which hosts need to accept conn ections, from whom and on which p orts? 8) Configure the rul es file to ov erride the default p olicies. Have external connections been limi ted [...]

  • Page 109

    Chapter 11 – Configuring The Firewall N o t e : I n o r de r t o i m p r o v e s ec ur i t y th e r ou te r w i l l c re at e a z o ne “u nu sd ” an d u n u s e d i n t e r fa c e s t o t h i s z on e w h e n S h or e w a l l s ta r ts . A p o l i c y i s al s o i n s t a l le d t h at b l oc ks a c c e s s f r o m “ u n u s d ” t o a l l[...]

  • Page 110

    RuggedRouter  User G uide Note that a cli ent on the Internet that is p robing the RuggedRouter's TCP/UDP ports will receive no respon ses an d will not be able to detect th e presence of the rout er. A host in the loca l network, on the other hand, will fail to connect to the router but wi ll receive a notification. Note that order of poli[...]

  • Page 111

    Chapter 11 – Configuring The Firewall 2) In t his SNAT rule a static address of 66.11.180.161 is acquired from the ISP. Traffic f rom the subnet han dled by eth2 should be translated to 66.11.180.161 as it sent to the Internet over ppp . The + a t the end of “pp p+” causes Shorewa ll to match an y pp p int erface. 3) This e xamp le is mu ch t[...]

  • Page 112

    RuggedRouter  User G uide Source-Port The tcp/udp p ort the connection originated from. Original- Destination-IP The destination IP address in the connection requ est a s it was received by the firewa ll. Rate- Limit A specification which allows the ra te at which connections are made to be lim ited. User-Group A method of limiting outbound traf[...]

  • Page 113

    Chapter 11 – Configuring The Firewall IPSe c traffic arriving a t the firewal l is directed to op enswan, th e IPSec daemon. Opens wan th en decrypts the traffic and forwards it back to shor ewall on th e assigned ipsecX in terface. You w ill also need a rule to allow traffic to enter from this interface. For exam pl e, if opensw an creates inter[...]

  • Page 114

    RuggedRouter  User G uide F i r e w a l l Ma in M e nu F i g u r e 8 9 : S t a r t i n g S ho r e w al l F i r e w a l l M e n u The above figure shows th e firewall menu prior to configuration. Configure the firewa ll through the provided menu s. The “Check Firewal l” button can be selected aft er each m enu configura tion to check th e exi[...]

  • Page 115

    Chapter 11 – Configuring The Firewall F i g u r e 90 : S h o r e w a l l F i r e w a l l M e n u The “Apply Configuration” button mus t be us ed after ma king configuration changes. It is recommend ed that the “Ch eck Firewa ll” bu tton be used first to verify that an y changes made a re valid. The “Refresh Configuration ” button can [...]

  • Page 116

    RuggedRouter  User G uide N e tw o r k Z o n e s F i g u r e 91 : F i r e w al l N e tw o r k Zo ne s This menu allows you to add, del ete and configure zones. Add a new zone by selecting the “Add a new n etwork zon e” lin k or by clicking on the a dd-abo ve or add- below imag es in the Add field. The Zone Type field controls the typ e of tr[...]

  • Page 117

    Chapter 11 – Configuring The Firewall This menu allows you to add, del ete and configure network interfaces. Add a new interface by s electing the “Add a new n etwork int erface” lin k or by clicking on the add-above or add- below imag es in the Add field. Reorder the interfaces by clicking on the arrows u nder the Move field. Clicking on a l[...]

  • Page 118

    RuggedRouter  User G uide The norfc1918 option cau ses p ackets arriving on this interface and that hav e a source or destination address that is reserved in RFC 1918 to be dropped after being optionall y logged. The nobogons option cau ses p ackets arriving on this interface that have a sou rce address reserved by the IANA o r by other RFCs (ot[...]

  • Page 119

    Chapter 11 – Configuring The Firewall D e fa ul t P o l i c i e s F i g u r e 95 : F i r e w al l D e f a u l t P o li c i e s This menu allows you to add, del ete and configure default policies. Add a new policy by selecting the “Add a new defau lt polic y” link or by clicking on the add-above or add-be low ima ges in th e Add field. Reorder[...]

  • Page 120

    RuggedRouter  User G uide This menu allows you to add, del ete and configure masqu erading and SNAT rules. Add a new rule by s electing the “Add a new ma squ erading rule” link or by clicking on the add-above or add-be low im ages in the Add field. Reorder the policies by clicking on the arrows under the Move fi eld. Clicking on a lin k un d[...]

  • Page 121

    Chapter 11 – Configuring The Firewall The following fields describe the information to match against the in coming connection request in order to app ly this rule. The Action field specifies the final action of the rule. The and log to syslog fi eld determines whether logging will take place and at which logging level. The Source zone field speci[...]

  • Page 122

    RuggedRouter  User G uide This menu allows you to add, del ete and static N AT translations. Add a new translation s by selecting th e “Add a new static NAT entry” link or by clicking on the add-above or add- below imag es in the Add field. Reorder the transla tions by clicking on the arrows u nder the Move field. Clicking on a lin k un der [...]

  • Page 123

    Chapter 11 – Configuring The Firewall This menu allows you to control which addresses the firewa ll will a ccept connections from after it has been stop ped. Add a new trans lations by s electing the “Add a new stopp ed address” link or by clicking on th e add-above or add- below images in the Add field. Reorder the translation s by clicking [...]

  • Page 124

    RuggedRouter  User G uide This page intention ally blank 122 RuggedCom[...]

  • Page 125

    Chapt er 12 – Configuring An IPsec VPN C h a p t e r 1 2 – C o n f i g u r i ng A n I Ps e c V P N I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g IP s e c V P N G l ob a l O p t i o n s • C r e a t i n g V P N C o n n ec t i o n s • E n a b l i n g A n d S t a r t i n g I Ps e c • O b t a i n [...]

  • Page 126

    RuggedRouter  User G uide With route based VPNs: • O p e n s w a n g e n e r a t e s a n I P S E C i n t e r f a c e f o r ea c h V P N t u n n e l , • A s t h e t u n n e l i s b ro u g h t u p a r o u t e f o r t h e s u b n e t a t t h e o t h e r e n d o f t h e t u n n e l i s c r e a t ed t h r o u g h t h a t i n t e r f a c e , • A[...]

  • Page 127

    Chapt er 12 – Configuring An IPsec VPN When you want to use this form of encryp tion, each router configures its VPN connection to u se the RSA algorithm and includes the public signatu re of its p eer. The RuggedRouter's pu blic signature is available from the outpu t of the Show Public Keys menu. In secret key c ryptography , a single key [...]

  • Page 128

    RuggedRouter  User G uide You mu st configure the fir ewall to accept connections on these ports a nd protocols. See the Configuring The Fire wall cha pter, Configuring The Fire wall And VPN section for details. T h e O p e n s w a n C o n f i g u ra t i o n P r o c e ss Each VPN connection has two ends, in the local router and the remote router[...]

  • Page 129

    Chapt er 12 – Configuring An IPsec VPN After a VPN connection is created this menu will display an icon for the conn ection, as shown in the next view of the VPN Configuration m enu. The “Add defaults for all connections” lin k allows you to create a profile that will app ly to a ll connections for items su ch as key typ e, encryption protoco[...]

  • Page 130

    RuggedRouter  User G uide The “Apply Configuration” button restarts th e server to a ctivate any configuration changes that ha ve been mad e, restarting VPN connections. F i g u r e 10 6: I P s e c V P N C o n f i g u r a t io n Af te r C o n n e c ti o n s H a v e B e e n Cr e a t e d S e r ve r Co n fi gu r a t i o n F i g u r e 10 7: Se r[...]

  • Page 131

    Chapt er 12 – Configuring An IPsec VPN N o t e : W h e n co n n e c t io n s b e c o me a c t i ve , Op en s w a n a s si g n s t h e m t o ip se c i n t e r f a c e s . Y o u m us t p l a n o n t h e s e i n t e r f ac e s b e i ng t h e s o ur c e o f i n c o m in g t r a f f i c i n f i r e w a ll r u l e s . The NAT Traversal fields enable a [...]

  • Page 132

    RuggedRouter  User G uide L i s t C e r ti fi c a t e s F i g u r e 11 0 : L i s t C e r t i fi c a t e s This menu lists ava ilable certificat e files, their corresponding key files a nd det ails whether a pu blic key for the certificate is configured. V P N C o n n e ct i o n s The IPsec main m enu “Add a new IPsec VPN connection” link lea[...]

  • Page 133

    Chapt er 12 – Configuring An IPsec VPN The At IPsec startup fi eld determines what ha pp ens to the connection a fter Opens wan sta rts and includes the options “Ignore”, “Add c onnection”, “Start Connection”, “Route” and “Default”. A valu e of “Ignore ” w ill cau se the connection to be ignored. A value of “Add co nnect[...]

  • Page 134

    RuggedRouter  User G uide L e f t/ Ri gh t S y s te m ' s S e t t i n g s F i g u r e 11 2 : E d i ti ng A V P N Co n ne c t i o n, P a rt 2 The Public I P address fields determine the IP address of the side of the conn ection being e dited. Ch eck the Address or hostname.. field and provide a fixed IP addre ss or hostnam e. If this side re[...]

  • Page 135

    Chapt er 12 – Configuring An IPsec VPN S h o w i n g IP s e c S t a t u s 1 interface lo/lo 127. 0.0.1 2 inter face eth1/eth1 10.0.0. 253 3 inter face eth2/et h2 204.50.1 90.89 4 inter face w1ppp/w1ppp 206.186 .238.1 38 5 %myid = (none) 6 debug none 7 algorithm ESP encrypt : id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64 8 algorithm ES[...]

  • Page 136

    RuggedRouter  User G uide The fourth group (lines 30-39) describe connection describe VP N connections (here “openswa ntest”). The first line is p articularl y u seful s ince it indicates the connection addresses, subnets a nd that the connection is active (“erouted”). If there are no entries, then the VPN hasn' t bee n established [...]

  • Page 137

    Chapt er 12 – Configuring An IPsec VPN G e n e ra t e X. 5 0 9 C e rt if ic a t e s Use the a uthority to produce a certificate authority pu blic certification (cacert) a nd a certificate for each of the clients and a certificate for the router. The certifica te authority will require some information that is sha red by all certificates (e.g. a C[...]

  • Page 138

    RuggedRouter  User G uide Parameters Value Comments At IPsec Startup Add con nection We wish to add the connection when the client starts it. Authenticate by rsasig X.509 certificates provide RSA Connection Type Tunnel Encryption Protocols As desired Compress Data As desired Perfect Forwarding Secrecy As desired Recommend “yes” NAT Traversal[...]

  • Page 139

    Chapt er 12 – Configuring An IPsec VPN This page intention ally blank RuggedCom 137[...]

  • Page 140

    RuggedRouter  User G uide C h a p t e r 1 3 – C o n f i g u r i ng D y n a m i c R o u t i n g I n t r od u c t i on This chapter fam iliariz es th e user wi th: • E n a b l i n g T h e D y n a m i c R o u t i n g S u i t e • E n a b l i n g A n d S t a r t i n g O S P F a n d RI P • C o n f i g u r i n g O S P F a n d RI P • O b t a i[...]

  • Page 141

    Chapt er 13 – Configuring Dynamic Routing OS PF F u n d a m e nt a l s The Open Path Shortest First (OSPF) protocol rou ting determines the best pa th for routing IP traffic over a TCP/IP network based on link cost and qua lity. Unlike static routing, OSPF tak es link failu res and other n etwork top ology changes into a ccount. Unlike the RIP ro[...]

  • Page 142

    RuggedRouter  User G uide A router can be pa rt of mul tiple areas and function as a gateway between areas. When mul tiple areas are u sed on a networ k, ar ea 0 is the backbone area. All areas must have a router connecting them to area 0. R o u t e r - I D Defines the ID of the router. By default this is the highest IP assigned to the router. I[...]

  • Page 143

    Chapt er 13 – Configuring Dynamic Routing L i n k D e t e c t When link detect is enabled for an OSPF/RIP active interface, OSPF or RIP will be notified when th e interface goes down and will stop advertising subnets ass ociated with that interface. O SPF and RIP will resume advertising the su bnet when th e link is restored. This allows OSPF and[...]

  • Page 144

    RuggedRouter  User G uide N o t e : E n s u r e th at A n t i s p o o f i n g i s d i s a b l e d i f y o u a r e c on s t r u c t in g th e a b o v e d e s c ri be d t y p e o f O S P F n e tw o r k . A n ti s p o o f i n g c a n b e d is ab le d i n t he N e t wo r k C o n f i g ur a t i o n me n u , C o r e S e t t i n g s s u b - m en u. A d[...]

  • Page 145

    Chapt er 13 – Configuring Dynamic Routing OS PF A n d V RR P E x a m p l e N e tw o r k This network consists of three rout ers connected in a ring with T1/E 1 links. Rou ter 1 and 2 and the switched n etwork represent a remote site in which the routers sup ply a redundant gateway to th e hosts via VRR P and the T1/E1 links sup ply a redundan t n[...]

  • Page 146

    RuggedRouter  User G uide If Router 1 or its Ethern et link fail, VRR P will detect the link being down and remove the direct route to the 1.1.2.0/24. VRRP on Rou ter 2 wil l stop seeing messa ges from Router 1, elect its elf mas ter and will take over the ga teway for the network . OSPF on router 1 will notice the link being down (and the route[...]

  • Page 147

    Chapt er 13 – Configuring Dynamic Routing C o r e F i g u r e 11 8 : C o r e M e n u The Core routing daemon handles comm unica tions between the k ernel of the router and the other dyna mic routing p rotocols. Core handles link detection a nd monitoring static rout es and routes for directly connected interfaces on the router. It also man ages a[...]

  • Page 148

    RuggedRouter  User G uide Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface. Clicking on sta tus displa ys the current statu s of the interface, including link stat e, IP address and traffic counts. Clicking “Re[...]

  • Page 149

    Chapt er 13 – Configuring Dynamic Routing O S P F F i g u r e 12 1 : O S PF M e n u This menu contains the configuration and status of OSPF on the router. The OSPF Global Paramete rs , OSPF Interfaces an d Network Areas menus configure OSPF. The Status and View OSPF Configuration m enu display the actua l status and configuration file contents of[...]

  • Page 150

    RuggedRouter  User G uide The Enab le Password field sets the p assw ord to be used for the enable comm and of ospfd. This is used by the telnet int erface of ospfd to control access to the configuration. The Telnet Password field sets th e pa ssword to be used for telnet access to ospfd. This is used as the login passw ord of ospfd when locally[...]

  • Page 151

    Chapt er 13 – Configuring Dynamic Routing The Redistribute K ernel fields control distribution of kern el rout es. When enabled, OSPF will advertise rou tes from th e kernel routing table, which includes s tatic routes entered by the administrator, to other OSPF routers in the area. Norma lly only routes that fall within the scope of the network [...]

  • Page 152

    RuggedRouter  User G uide The Transmit Delay fi eld controls the estima ted n umber of seconds to transmit a link state update pack et. This should take into account transm ission and propagation delays of the interface. The Passive Interface option controls if an interface is active or p assive. Passive interfaces do not send LSAs to other rout[...]

  • Page 153

    Chapt er 13 – Configuring Dynamic Routing The RIP Global Parameters and RIP Interfaces configure RIP. The Status and View RIP Configuration menu display the actu al status and configuration file contents of RIP. R I P G lo b a l P a r a m e t e r s F i g u r e 12 6 : R I P G l o b al P a r a me t e r s The Enab le Password field sets the p assw o[...]

  • Page 154

    RuggedRouter  User G uide The Redistribute Conne cted fields control distribution of connected routes. When enabled, RIP will advertise routes to directly conn ected interfaces to other RIP routers in the ar ea. Normally only routes that fall within the scop e of the n etwork a reas will be advertised. The Redistribute K ernel fields control dis[...]

  • Page 155

    Chapt er 13 – Configuring Dynamic Routing Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface. Clicking “Rem ove in active interfac es” p urges the list of any int erfaces which a re no longer configured on the r[...]

  • Page 156

    RuggedRouter  User G uide Networks a re used when you want to a dd any router that is pa rt of a specific s ubnet, or connected to a sp ecific network interface to be part of your RIP network. Both neighbors and networks can be u sed at the sa me ti me. N o t e : F o r po i nt t o p o in t l i n k s ( T 1 / E 1 l i n k s f or e x a m p l e ) o n[...]

  • Page 157

    Chapt er 13 – Configuring Dynamic Routing This page intention ally blank RuggedCom 155[...]

  • Page 158

    RuggedRouter  User G uide C h a p t e r 1 4 – C o n f i g u r i n g L i n k B a c k u p I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g l i n k b a c k u p • O b t a i n i n g s y s t e m s t a t u s • T e s t i n g l in k b a c k u p L i n k B a c k u p Fu nd a m e n t a l s Link backup provide[...]

  • Page 159

    Chapt er 14 – Configuring Link Backu p The daemon wil l constru e the ma in link as havin g failed (even if its link statu s is “up”) if the remot e host fa ils to respond to configurable n umber of pings after waiting a configurable timeou t for each ping. U s e O f Ro u ti ng P r o t o co ls A n d T h e De f a u l t R o u t e If the main tr[...]

  • Page 160

    RuggedRouter  User G uide E d i t Li nk B a c k u p C o n f i g u r a t i o n F i g u r e 13 2 : L i n k B a c k u p C o n f i g u r a t i o n Set the Name field to su ppl y an identification of the pair. This field initially defau lts to the “ma in_link_n ame- >backup _link_n ame” . The Enab le this configuration field enables this backu[...]

  • Page 161

    Chapt er 14 – Configuring Link Backu p N o t e : I f y ou d e l e te a l i n k b a c k u p c o n fi gu r a t i o n th a t h a s f a i l e d o v e r ( or i s f ai li n g o v e r ) t o i t s ba c k u p tr un k t h e l i n k da e mo n wi l l s t o p at t e m p t i n g t h e l i n k b a c k u p a n d re st or e t h e m a i n tr un k , e v e n i f t h[...]

  • Page 162

    RuggedRouter  User G uide The Test Duration field controls the a moun t of time to run before restoring service to the ma in trun k. Please note that this dura tion mus t take into accou nt the tim ing para meters of the backup configuration: The duration should comfortably exceed the Ping Interval plu s the Ping Timeout m ultip lied by the Ping[...]

  • Page 163

    Chapt er 14 – Configuring Link Backu p This page intention ally blank RuggedCom 161[...]

  • Page 164

    RuggedRouter  User G uide C h a p t e r 1 5 – C o n f i g u r i n g V R R P I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g VR R P • E n a b l i n g A n d S t a r t i n g V R R P • O b t a i n i n g V R R P S t a t u s V R R P Fu nd a m e n t a l s The Virtual Rou ter R edundancy Protocol (VRRP)[...]

  • Page 165

    Chapt er 15 – Configuring VRRP Each Virtua l Rout er has a us er-config ured Virtu al Router Identifier (VRID) and an Virtual IP address or set of IP addresses on the shar ed LA N. Hosts on the shar ed LAN are configured to use these addresses as the default gat eway. One rout er in the Virtua l Rou ter Group will be elected as th e Master , all [...]

  • Page 166

    RuggedRouter  User G uide The router issu es a s et of gratuitous ARPs when moving between mas ter and backup state. These unsolicited ARPs teach th e hosts and switches in the n etwork of the current MAC address and port as sociated with the VRIP. The router wil l issu e a second set of ARPs aft er the tim e sp ecified by the Gratu itous ARP de[...]

  • Page 167

    Chapt er 15 – Configuring VRRP V R R P M a i n M e n u F i g u r e 13 7 : V R R P M a i n M e n u Note that VRRP is disabled by default and ma y be enabled via the System folder, Bootup And Shutdown menu . VRRP can be configured through the VRRP C onfiguration link before the daemon is started. When enabled, an y configuration changes ma y be ma [...]

  • Page 168

    RuggedRouter  User G uide E d i t i n g A V R R P In st an c e F i g u r e 13 9 : V R R P In st an c e The Name field is pur ely for informat ional purp oses. The Interface field configures th e interface tha t VRRP packets are sent up on. The Virtual Router I D field determin es the VRID number. Ensur e that a ll routers supp lying the sam e VR[...]

  • Page 169

    Chapt er 15 – Configuring VRRP V i e w i n g V R RP In s t a n c e s St a tu s F i g u r e 14 0 : V R R P I n s t a n ce s S t a tu s The VRRP Instances Status m enu displa ys th e current sta tus of VRRP instances. This menu does not updat e statu s in real ti me. Click on the Refre sh Display bu tton to upda te to the current statu s. The entri[...]

  • Page 170

    RuggedRouter  User G uide C h a p t e r 1 6 – C o n f i g u r i n g T r a f f i c P r i o r i t i z a t i o n I n t r od u c t i on This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g T r a f f i c P r i o r i t i z a t i o n • V i ew i n g T ra f f i c P r i o r i t i z a t i o n S t a t i s t i c s T r a f [...]

  • Page 171

    Chapter 16 – Configuring Traffic P rioritiza tion T O S P r i o r i ti za t i o n The priority of an IP packet can be derived from its Typ e of Service field. The TOS field has the follow ing format: 7 6 5 4 3 2 1 0 +---+---+---+---+---+---+---+---+ | | TOS Bits | | |PRECEDENCE |MD MT MR MMC| 0 | | | | | +---+---+---+---+---+---+---+---+ The four[...]

  • Page 172

    RuggedRouter  User G uide P r i o r i t i za ti on E x a m p l e A remote site rout er connects to a p rivate network via a T1 line. The router us es OSPF to m anage an a lternate routing, but its p rimar y pu rpos e is to allow access to a switched networ k of RuggedServers imp lement ing TcpModbus gateways (TCP/UDP port 502). The rout er and s[...]

  • Page 173

    Chapter 16 – Configuring Traffic P rioritiza tion T r a f f i c P r i or i ti z a t i on M a i n M e n u F i g u r e 14 1 : T r a f f i c P r io r i t i z a t i o n M a i n M e nu This menu displays network interfaces for which prioritiza tion m ay be activated. Prioritization ma y be configured by following the Interface colum n link. The statis[...]

  • Page 174

    RuggedRouter  User G uide Remove prioritiz ation by s electing the D elete and Apply button. P r i o r it iz a t i o n Q u e ue s F i g u r e 14 3 : P r i o r i t iz a t i o n Q u e ue C o nf ig u r a t io n This menu allows you to edit the na me of of a p riority qu eue and to delete th e queu e. If you delete a queu e referenced by filters , t[...]

  • Page 175

    Chapter 16 – Configuring Traffic P rioritiza tion Prioritization works by es tablishing qu eues a t the r equired priority levels filling the transmit queu e w ith them in priority order. The aim of esta blishing low latenc y for certain tra ffic is foiled when transm it qu eue lengths are la rge because multip le low priority packets ma y ha ve [...]

  • Page 176

    RuggedRouter  User G uide C h a p t e r 1 7 – C o n f i g u r i ng G e n e r i c R o u ti n g E n c a p s u l a t i o n I n t r od u c t i on This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g G R E • V i ew i n g G R E S t a t u s G R E Fu nd a m e n t a l s The RuggedRouter is able to encapsu late mu ltica[...]

  • Page 177

    Chapter 17 – Configuring Generic Routing E ncapsu lation G R E M a i n M e n u F i g u r e 14 7 : G R E M a i n M e nu This menu displays configured GRE tunn els. The tunn el status will be “a ctive” if th e tunn el was su ccessfully created. G R E Co nf i gu r a t i o n M e n u F i g u r e 14 8 : G R E T u n n e l Co n f i g ur a t i o n M e[...]

  • Page 178

    RuggedRouter  User G uide This page intention ally blank 176 RuggedCom[...]

  • Page 179

    Chapt er 18 – Network Util ities C h a p t e r 1 8 – N e t w o r k U t i l i t i e s I n t r od u c t i on This chapter fam iliariz es th e user wi th: • P i n g i n g h o s t s , • R u n n in g a t r a c er o u t e , • P e r f o r m i n g a h o s t l o o k u p , • T r a c i n g l i n e a c t i v i t y , • Showing interface statist ic[...]

  • Page 180

    RuggedRouter  User G uide P i n g M e n u F i g u r e 15 0 : P i n g M e nu The Hostname field accepts the host n ame or IP addre ss to ping. The Verbose Output? field caus es ping to present the m aximu m of ou tput. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes. This can make pin g behave very s lowly if DN[...]

  • Page 181

    Chapt er 18 – Network Util ities The Packet Length? field specifies the size of the data in the trac eroute pa cket. The Interface? field sp ecifies th e network interface to obtain the sou rce IP address for outgoing probe packets. Otherw ise the router w ill ma nua lly s et the address based on the actu al in terface taken . H o s t Me n u F i [...]

  • Page 182

    RuggedRouter  User G uide The Maximum packets c aptured an d Ma ximum capture time fields limi ts the amou nt of traffic captu red. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes. This can make pin g behave very s lowly if DNS is not prop erly configured. The Display l ink level header field ca uses this h ead[...]

  • Page 183

    Chapt er 18 – Network Util ities The Message RX/TX a nd Incoming/Outgoing Connecti ons fields caus es data pack ets an d Connection activity to be included in the trace. The Hex dump fi eld caus es the content of data packets to be displa yed. The Maximum packets c aptured an d Ma ximum capture time fields limi ts the amou nt of traffic captu red[...]

  • Page 184

    RuggedRouter  User G uide C u r r e n t R o u t i n g & I n t e r f ac e T ab le F i g u r e 15 7 : C u r r e n t R o u t i ng & I nt e r f a c e T ab le This menu displays the current routing table an d the state of the router's int erfaces. Select the Refresh link in order to refresh the displa y. The entries un der the Destinatio[...]

  • Page 185

    Chapt er 18 – Network Util ities I n t e r f a c e S t a t u s This menu also su mmari zes the interface status. The entries un der the Devic e fi eld reflect the na me of the device. The entries un der the Link up field reflect the current link stat e of interface. The entries un der the Address field reflect th e local address of interface. The[...]

  • Page 186

    RuggedRouter  User G uide This page intention ally blank 184 RuggedCom[...]

  • Page 187

    Chapt er 19 – Configuring Serial Protocols C h a p t e r 1 9 – C o n f i g u r i n g S e r i a l P r o t oc ol s I n t r od u c t i on This chapter fam iliariz es th e user wi th: • R a w S o c k e t s A p p l i c a t i o n s • C o n f i g u r i n g S er i a l p o r t s f o r R a w S o c k e t • V i e w i n g S e r i a l P o r t a n d T C[...]

  • Page 188

    RuggedRouter  User G uide S e r i a l P r ot o c o l s A p p l i c a t i on s C h a ra c t e r E nc a ps u l a t io n Character enca psula tion is used an y time a stream of chara cters mus t be reliably transport ed across a network. The character stream s can be creat ed by any s erial device. The baud rates supp orted at either s erver need n[...]

  • Page 189

    Chapt er 19 – Configuring Serial Protocols The host will s equentia lly poll ea ch RTU. Each p oll received by the host server is forwarded (i.e. broadc ast) to a ll of the remo te s ervers. All RTUs will receive the request and the ap propria te RTU will issue a reply. The reply is return ed to the host server, where it is forwarded to the hos t[...]

  • Page 190

    RuggedRouter  User G uide If config ured to pack etize on a tim eout , the s erver will wait for a configurable time after receiving a cha racter before pa cketizing and forwarding. If another character arrives during the wai ting interval, the tim er is restarted. This method allows characters transm itted a s part of an entire m essage to be f[...]

  • Page 191

    Chapt er 19 – Configuring Serial Protocols A s si gn Pr o t o c o l s M e n u F i g u r e 15 9 : A s s i g n P r o t o c o l s M e n u This menu associates a p rotocol with a serial p ort. Unused ports shou ld be left associated with “none”. Cha nging an association w ill im mediat ely close the ca lls of the old protocol. P o r t S e t t i n[...]

  • Page 192

    RuggedRouter  User G uide The Pack Char field configures the nu meric valu e of the ASCII character which will force forwarding of accumula ted data to the network. The Pack Cha r mus t be between 0 and 255 inclusive or the va lue off. If configured off, accumulat ed data will be forwarded based upon the pa cketiza tion timeou t p aram eter. The[...]

  • Page 193

    Chapt er 19 – Configuring Serial Protocols S e r i a l Pr o t o c o l s S t a t i st i c s M e n u F i g u r e 16 2 : Se r i a l Pr o t o c o l s St a t i s t i c s M e nu This menu presents statist ics of serial p ort activity and established connections. The menu also allows you to reset a p ort, forcing call hang-up and re-establishm ent. The [...]

  • Page 194

    RuggedRouter  User G uide S e r i a l Pr o t o c o l s T r a c e M e n u F i g u r e 16 3 : Se r i a l Pr o t o c o l s Tr ac e M e n u This menu displays decoded se rial port an d network activit y. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed. The m enu w ill[...]

  • Page 195

    Chapt er 19 – Configuring Serial Protocols S e r i a l Pr o t o c o l s S e r tr a c e U t i l i ty The comman d line sertrace utility offers the ability to trace the a ctivity of serial p orts in real ti me. A port range ma y be sp ecified to limit the ou tput to sp ecific ports. The level of tra ffic to trace and the typ e of decodi ng may be s[...]

  • Page 196

    RuggedRouter  User G uide This page intention ally blank 194 RuggedCom[...]

  • Page 197

    Chapt er 20 – Configuring GOOSE Tunnels C h a p t e r 2 0 – C o n f i g u r i ng GO O S E T u n n e l s I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g G O O SE T u n n e l s • V i e w i n g G O O S E T u n n el s t a t u s a n d s t a ti s t i c s • Tracing GOOSE activity I E C 6 1 8 5 0 G O O S[...]

  • Page 198

    RuggedRouter  User G uide GOOSE Pac kets received from the network are s tripped of their n etwork headers and forwarded to Ethernet ports configured for the sam e mu lticas t address. The forwarded frames contain the MAC sou rce address or the originating device, and not that of the transmittin g interface. The VLAN used will be tha t programm [...]

  • Page 199

    Chapt er 20 – Configuring GOOSE Tunnels G e n e r a l C o n f i gu r at i o n Me n u F i g u r e 16 5 : G e n e r al C o n f ig u r a t i o n M e n u This menu configures the daemon settings. The Daemon U DP Listen Port fi eld configures port used by the daemon to commun icate with other daemons. N o t e : A l l L a y e r 2 Tu n ne l d a e m on s[...]

  • Page 200

    RuggedRouter  User G uide The Multicast Address field configures the address to listen for. The Remote Dae mon and Add a new Daemon fields sp ecify th e IP addresses of remote daemons. G O O S E S ta t i s t i c s M e nu F i g u r e 16 8 : G O O S E S t a ti st i c s M e n u This menu presents statist ics of GOOSE a ctivity at the E thernet and [...]

  • Page 201

    Chapt er 20 – Configuring GOOSE Tunnels This menu displays decoded GOOSE activity. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed. The m enu w ill displa y u p to the provided number of m essages wa iting up to the sp ecified numb er of seconds. The Trace on proto[...]

  • Page 202

    RuggedRouter  User G uide This page intention ally blank 200 RuggedCom[...]

  • Page 203

    Chapter 21 - Configuring The DHCP server C h a p t e r 2 1 - C o n f i g ur i n g T h e D H C P s e r v e r I n t r od u c t i on This chapter fam iliariz es th e user wi th: • D H C P S e r v e r C o n f i g u r a t i o n • Use of Option 82 D H C P Fu n da m e n t a l s Dynam ic Host Configuration Protocol (DHCP) is a m ethod for centrally and[...]

  • Page 204

    RuggedRouter  User G uide In DHCP settings at a m ore sp ecific level overrides higher levels. For exam ple you can configure a DNS server for all clients, the create a group tha t overrides the setting. This allows defaults to be set at a high level to a pply to mos t clients, whi le exceptions can be places just where they are needed. Man y se[...]

  • Page 205

    Chapter 21 - Configuring The DHCP server • B o o t f i l e n a m e : T h e f i le n a m e t h e c l i e n t s h o u l d r eq u e s t f r o m a t f t p s e r v e r t o b o o t f r o m . Th i s o n l y a p p l i e s t o n e t w o r k b o o t e d c l i e n t s . • B o o t f i l e s er v e r : T h e I P a d d r es s o f th e t f tp s e r v e r t o [...]

  • Page 206

    RuggedRouter  User G uide E x a m p l e D H C P Sc e n a r i o s An d C o n f i g u r at i o n s S i n g le N e tw or k W i t h D yn a m i c IP A s s ig n m e n t In this example the eth1 interface is provided with IP address 192.168.1.1/24 while addresses 192.168.1.101 through 192.168.1.200 are a ssigned to the clients. The router s erves as th[...]

  • Page 207

    Chapter 21 - Configuring The DHCP server Assign a client a t switch p ort 2 address 192.168.1.102. Assign a client a t switch p ort 3 address 192.168.1.103. Assign multip le clients a t switch p ort 4 dynamic a ddresses 192.168.1.151 through 192.168.1.200. The router s erves as the default gat eway. 1) Enable eth1 in the 'Edit Network Interfac[...]

  • Page 208

    RuggedRouter  User G uide The switch p ort 2 is on vlan2 us ing subnet 192.168.2.0/24 and should assign addresses 192.168.2.101 to 192.168.2.200 and default gateway 192.168.2.1. The switch p ort 3 is on vlan3 us ing subnet 192.168.3.0/24 and should assign addresses 192.168.3.101 to 192.168.3.200 and default gateway 192.168.3.1. The switch p ort [...]

  • Page 209

    Chapter 21 - Configuring The DHCP server D H C P S e r v er M a i n M e n u F i g u r e 17 0 : D H C P Se r v e r Me n u The DHCP Server main menu shows th e subnets configured for DHCP, as w ell a s any group s and hosts. New subn ets, groups and hosts can be added, and e xisting entries can be edited (and optionally deleted). The Edit Client Opti[...]

  • Page 210

    RuggedRouter  User G uide D H C P S h a r e d N e t w o r k C o n f i g u r a t i o n F i g u r e 17 1 : D H CP S h a r e d N e tw o r k Co n f i g u r a t i o n The settings sp ecific to the Shared network menu ar e the Shared network description and Network na me. The Shared network descr iption field is used to describe the shared networ k as[...]

  • Page 211

    Chapter 21 - Configuring The DHCP server D H C P S u b n e t C o nf i gu r a t i o n F i g u r e 17 2 : D H C P Su b ne t C o nf i g u r a t i o n The settings sp ecific to the Subnet m enu are the subnet description, Network address and mask. The Subnet description field is us ed to descri be the subnet as desired. The Network addre ss and Netma s[...]

  • Page 212

    RuggedRouter  User G uide D H C P G r o u p C o n fi g u r a t i o n F i g u r e 17 3 : D H C P G r o u p C o n f i g u r a t i o n The settings sp ecific to the Group menu ar e the group description and Use nam e as client hostna me fields. The Group description field is us ed to describe the group as desired. The Use name as client hostname fi[...]

  • Page 213

    Chapter 21 - Configuring The DHCP server The Hardware address field is the Ethernet MAC of the client associated w ith the host entry. The Fixed IP address field is the IP to as sign to the ma tching client. D H C P Po o l C o n f i g u r a t i o n F i g u r e 17 5 : D H CP P o o l Co n f i g u r a t i o n The settings sp ecific to the Address Pool[...]

  • Page 214

    RuggedRouter  User G uide C h a p t e r 2 2 – C o n f i g u r i n g N T P I n t r od u c t i on This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g N T P • S e t t i n g s e r v e r s a n d p e er s • S e t t i n g g e n e r i c N T P o p t i o n s • N T P To o l s N T P F u n d am en ta l s NTP ( Network[...]

  • Page 215

    Chapt er 22 – Configuring NTP T h e N T P Sa n i t y Li mi t NTP c hanges the system through “stepp ing” a nd “dri fting”. Stepping is a sudden change of time whereas drifting is a slow gradual tim e change. NTP will step the system ti me w hen its starts. This is almos t alwa ys at boot time. Steppin g the time afterwards can caus e prot[...]

  • Page 216

    RuggedRouter  User G uide N T P S e r v er Ma in M e n u F i g u r e 17 6 : NT P S e r v e r Note that the NTP server is disabled by de fault and may be enabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Restart ntpd daemon button. The View GPS Status [...]

  • Page 217

    Chapt er 22 – Configuring NTP S e r ve r s C o n f i gu r a t i o n F i g u r e 17 8 : NT P S e r v e r L i s t The servers under the IP address column are u sed as prima ry syn chronization devices. Clicking on a link w ill allow you to edit that server. By default th e router includes the links p ool.ntp.org and 127.127.1.0. The pool.ntp.org ad[...]

  • Page 218

    RuggedRouter  User G uide V i e w i n g T h e N TP S t a tu s F i g u r e 17 9 : NT P S t a t u s The NTP S tatus menu displa ys pos sible sources an d curre ntly us ed reference clocks V i e w i n g T h e N TP L o g F i g u r e 18 0: NT P L o g The NTP Lo g menu displays the log of recent NTP events. 216 RuggedCom[...]

  • Page 219

    Chapt er 22 – Configuring NTP V i e w i n g T h e G PS S t a t u s F i g u r e 18 1: GP S S t at us If the router is equi pped with a Precision Time Protocol card, this pa ge will shows the status of the GPS module. The Latitude and Longitude fields show the curr ent position of the GPS antenna . The GPS Lock field show the GPS lock s tatus. The [...]

  • Page 220

    RuggedRouter  User G uide C h a p t e r 2 3 – C o n f i g u r i n g S S H I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g SS H A u t h e n t i c a t i o n • S S H N e t w o r k i n g A n d A c c e s s C o n t r o l • S e t t i n g SS H C l i e n t O p t i o n s S S H Fu nd a me n ta ls Secure Sh[...]

  • Page 221

    Chapt er 23 – Configuring SSH S S H M a i n M e n u F i g u r e 18 3: SS H S e r v e r Note that the SSH server is enabled by default and may be disabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Apply Changes button. A u t h e n t i c at i on F i g u [...]

  • Page 222

    RuggedRouter  User G uide N e tw o r k i ng F i g u r e 18 5 : SS H Se r ve r N e t w o r ki n g The Listen on addresses fi elds determine an IP addresses and port upon which SSH will accept a connection. The Listen on port field determines the p ort num ber SSH will listen on, a ssumin g Listen on addresses is set to “All addresses”. The Ac[...]

  • Page 223

    Chapt er 23 – Configuring SSH The Only allow u sers fi eld specifies th e users allowed to conn ect by SSH. The specification can be a list of user na me p atterns, separat ed by spac es. Login is allowed only for user n ames that ma tch one of the pattern s. '*' and '?' can be used as wild cards in the pa tterns. Onl y us er [...]

  • Page 224

    RuggedRouter  User G uide C h a p t e r 2 4 – C o n f i g u r i ng I R I G B A n d I EE E 1 5 8 8 I n t r od u c t i on This chapter fam iliariz es th e user wi th: • I E E E 1 5 8 8 C o n f i g u r a t i o n • I R I G B C o n f i g u r a t i o n • V i e w i n g IR I G B a n d I E E E 1 5 8 8 S t a t u s I E E E 15 8 8 Fu nd a m en ta ls[...]

  • Page 225

    Chapt er 24 – Configuring IRIGB And IEEE 1588 NTP The P TP clock is a secondary re ference standard reference clock . The router uses this identifier w hen it has synchronize d with remote NTP server. DFLT A fter the router ha s power cy cled but before a ny GPS or NTP locks have occurre d. PTP favors preferred ma sters over n ormal ma sters, GPS[...]

  • Page 226

    RuggedRouter  User G uide R e f e r e n c e C l oc k s The GPS provides the highest qu ality reference clock. It will alw ays be used when it is ava ilable, but ma y require s ome tim e aft er boot before becoming acquired (or “GPS locked”). Typical ly, GPS lock is usu ally acquir ed within five m inutes of boot. When GPS is the reference cl[...]

  • Page 227

    Chapt er 24 – Configuring IRIGB And IEEE 1588 I R I G B / I EE E 15 8 8 M a i n M e n u F i g u r e 18 7: I R I GB /1 5 8 8 M ai n M e nu This menu allows you to configure IRIGB and IEEE1588, displa y its cu rrent status and review historical changes. G e n e r a l C o n f i gu r at i o n F i g u r e 18 8: I R I GB / I E E E 1 5 8 8 G e n e r al [...]

  • Page 228

    RuggedRouter  User G uide I R I G B C o n f i gu r a t i o n F i g u r e 18 9: I R I GB C o n f i g u r a ti o n me n u This menu allow you to config ure IRIGB parameters . The sav e button will save the changes of configuration p erman ently. The AM Port 1 (PTP1) Output field enables or disables th e amp litud e modulat ed outpu t of this port.[...]

  • Page 229

    Chapt er 24 – Configuring IRIGB And IEEE 1588 I R I G B S t a t u s F i g u r e 19 1 : I R I GB G P S St at u s This page shows whether GPS is locked, and the source of the current referenc e clock. I E E E 15 8 8 St a tu s F i g u r e 19 2 : I E E E 1 5 8 8 S t a t u s This page shows the historical s tatus of IEEE1588 on the router. The line ab[...]

  • Page 230

    RuggedRouter  User G uide I R I G B L o g F i g u r e 19 3 : I R I GB G P S St at u s This page reflects reference clock changes in IRIG- B. 228 RuggedCom[...]

  • Page 231

    Chapt er 24 – Configuring IRIGB And IEEE 1588 This page intention ally blank RuggedCom 229[...]

  • Page 232

    RuggedRouter  User G uide C h a p t e r 2 5 – C o n f i g u r i ng T h e S n o r t I D S I n t r od u c t i on This chapter fam iliariz es th e user wi th: • C o n f i g u r a t i o n o f Sn o r t a s a n I n t r u s i o n D e t ec t i o n S y s t e m . • G e n e r a t i n g a da i l y sn o r t a n a l y s i s e m a i l . S n o r t F u n d[...]

  • Page 233

    Chapter 25 – Configuring The Snort IDS When the a lert file m ethod is chosen, a da ily an alysis of the file can be ema iled. The SIDs re fer enced in alerts can be us ed to quickly locate th e rule via the m ain Sort IDS menu. The rule its elf often contains HTML links to Internet resou rces su ch as www.secu rityfocu s.com and cve.mitre.org. T[...]

  • Page 234

    RuggedRouter  User G uide R u l e se t s F i g u r e 19 6 : S n o r t M a i n M e n u p a rt 3 The Rulesets section s elects th e rules to appl y on m onitored interfaces. Each “ruleset ” reflects a collection of rules that a re related. The link under the Action field will disable or enable a ll of the rul es in a ru leset. Indivi du al ru [...]

  • Page 235

    Chapter 25 – Configuring The Snort IDS This menu allows you to configure the IP addresses and ports of servers in the local and external n etwork. The Home Ne t field defaults to “ANY” and designates the IP subn et of any local ports on the router. Configuring a sp ecific subnet can reduc e the nu mber of alerts generated. P r e Pr o c e s s [...]

  • Page 236

    RuggedRouter  User G uide Alerts generated by s nort are stored by one of three m ethods; as local syslog messag es, remotely sylogged messages and in an al ert file. When the Local sysl ogging method is chos en, the destina tion log file ma y be selected. When the Re mote syslogging method is chosen, the IP address of the remote syslog host mu [...]

  • Page 237

    Chapter 26 – Maintain ing The Router C h a p t e r 2 6 – M a i n t a i n i n g Th e Ro u t e r I n t r od u c t i on This chapter fam iliariz es th e user wi th: • V i ew i n g A l e r t s • C o n f i g u r i n g a n d m o n i t o r i n g t h e G a u n t l et Se cu r i t y Ap p l i a n c e • B a c k i n g u p a n d r es t o r i n g c o n [...]

  • Page 238

    RuggedRouter  User G uide This menu displays active alerts a nd allows you to change al ert system configuration and alert definitions. Follow th e All Alerts link to s how all a lerts. Follow the s everity lin ks ( Emergen cy .. Debug) or the category links (chassis .. daemon) to to limit the alert view. Note that activ e alerts are volatil e a[...]

  • Page 239

    Chapter 26 – Maintain ing The Router A l e r t F i l t e r C o n f i gu r at i o n F i g u r e 20 3: Al e r t F i l te r C o nf i g u r a t i o n M e nu This menu configures an al ert filter, which defines the forwarder destinat ion for active a lerts ma tching with defined filter l evel. The Forward Destination Type configures the type of filter[...]

  • Page 240

    RuggedRouter  User G uide C h a n g e A l er t D e fi ni t i o n Figure 205 : Change Alert Definition Menu This menu allows you to change an existing alert definition entry. The Codepoint is the key part of the alert definition entry and does not allow to be changed. The Category configures w hich category the a lert definition entry belongs to.[...]

  • Page 241

    Chapter 26 – Maintain ing The Router The Threshold configures the threshold to compa re with the shell comma nd result to see wh ether the condition is true or false. The And Repeats configures how ma ny tim es the condition mu st be true before th e alert is gen erated. The And Unt il configures how m any seconds the condition should be true bef[...]

  • Page 242

    RuggedRouter  User G uide G a u n t l e t S e c u r i t y RX1100 owners can u se the Gauntlet security ap plian ce to restrict access to critical assets. This section details how to activate Gau ntlet a nd determine cu rrently negotiated sessions . Details and recommen dations on ap plyin g the Gaun tlet s ystem to network ing may be found in te[...]

  • Page 243

    Chapter 26 – Maintain ing The Router Gauntlet net fw TCP any 10000 The orde r of rules is significant. Rul es inserted before this set will not be protected by Gaun tlet. Any rule a ppea ring after the gauntlet cha in rules will automa tically be ignored. Consult with RuggedCom supp ort for assistanc e. If you wa nt to grant SSH access to the rou[...]

  • Page 244

    RuggedRouter  User G uide B a c k up A n d R e s t or e F i g u r e 20 7: Sy s te m B a c k u p An d R e s to re The Backup And Restore system provides the following featu res: • A l l c o n f i gu r a t i o n s e t t i n g s a r e s a v ed i n a c o n f i g u r a t i o n a r c h i v e, • A r c h i v e s c a n b e u s e d t o “ c l on e ?[...]

  • Page 245

    Chapter 26 – Maintain ing The Router G e n e r a l C o n f i gu r at i o n F i g u r e 20 8: G e n e r al C o n f i g u r a t i o n Se tu p This menu configures the backu p sys tem. The Automatic Nightly Backup fi eld specifies wh en the n ightly backup is scheduled. The automa tic export to a server will sta rt (if enabled) immedia tely after th[...]

  • Page 246

    RuggedRouter  User G uide A r c h i v e Hi s t o r y F i g u r e 20 9: Ar c h i ve H i s t o r y The Archive History m enu displays current archives, sorted by da te (most r ece nt first). Following the lin k of an a rchives under the Arc hive Name fi eld upload a copy of it. Selecting an un der the Archive Name field and appl ying the Re move S[...]

  • Page 247

    Chapter 26 – Maintain ing The Router The created archive can be immedia tely up loaded if desired by following the “Uploa d A Copy Of This Arc hive..” link. N o t e : I f y ou u s e t h e I n t e r n e t Ex p l o r e r we b br o ws er , y o u mu s t “ R i gh t- c l i c k ” t h e li nk a n d s av e t h e f il e m a n u a ll y . O th e rw i[...]

  • Page 248

    RuggedRouter  User G uide The Archive Difference m enu show s the difference between two targets. The first target mu st be an a rchive while the second target can be either another archive or the current configuration. Choose two and only two ta rgets and click the Show Differe nces bu tton. F i g u r e 21 5 : A r c h i ve D i f fe re n c e s L[...]

  • Page 249

    Chapter 26 – Maintain ing The Router F i g u r e 21 6 : Sh o w D i f f e r e n c e f o r s e l e c t e d f i l e b e t w e en tw o t ar g e t s The Copy This F ile to Curre nt Configuration button will be p resent wh en the destination a rchive is the Cu rrent Configura tion. It allows u ser to copy the selected file from th e old archive to curr[...]

  • Page 250

    RuggedRouter  User G uide SNMP V1 and V2 transmit information in clear t ext (which ma y or ma y not be a n issu e depending the facilities the da ta is transmi tted over) and are la cking in the ability to authent icate a us er. SNMP V 3 adds strong authenticati on and encryption . S N M P C o n f i g u r a t i o n M a i n M e n u F i g u r e 2[...]

  • Page 251

    Chapter 26 – Maintain ing The Router The Client address (Source IP) field sp ecifies the a ddress from which snm pd will send notifications. If the field is blan k, the default behaviour w ill be to trans mit the notification from the IP address of the interface from which the message leaves the router. Snm pd will return to this behavour if the [...]

  • Page 252

    RuggedRouter  User G uide F i g u r e 22 2 : A c c e s s C o n t r o l p ag e , SN M P V 3 The second part of the Access control m enu allows creation an d de letion of V3 users. The User Name field selects the n ame of the new user. The Access fi eld determines whether the comm unity is read-only or read/write. The Minimum Security field select[...]

  • Page 253

    Chapter 26 – Maintain ing The Router T r a p C o n f i g u r a t i o n F i g u r e 22 3 : T r a p C o n fi gu r a t i o n p a g e , T r a p O p t i o n s The Trap Configuration pa ge man ages SNMP trap destination s. Under Trap Generation Options , you ma y enabl e the generat ion of notifications on auth entication fa ilures or IP i nterface lin[...]

  • Page 254

    RuggedRouter  User G uide The SNMP V3 Trap Destinations p art of the m enu a llows the creation a nd dele tion of V3 trap destina tions. The Type field sp ecifies the exchange used with this destination, eit her V3 tra p or V3 inform. The IP address and Trap Community fields s pecifies the receivers IP address and user na me. The Engine ID param[...]

  • Page 255

    Chapter 26 – Maintain ing The Router R a d i u s Au t h e n t i c a t i o n The Radius p rotocol described in RFC 2865 provides a mea ns for carrying auth entication, a uthorizat ion, and configuration informa tion between a client (the router) which desires to au thenticate its links and a shared Authen tication Server. Transactions between the [...]

  • Page 256

    RuggedRouter  User G uide Some u sers set the rrsetup and root accoun t passw ords to diffi cult to gu ess strings that a re uniqu e to each rou ter, then em ploy a comm on p assword for all rou ters in radius. The rout er specific strings are restricted to a very few personn el. A larger set of exp ert us ers are granted the rights to SSH login[...]

  • Page 257

    Chapter 26 – Maintain ing The Router Ou t g oi ng M a i l F i g u r e 22 8 : R a d i u s A u t h e n ti c a t i o n M a i n Me n u Outgoing Mail is configured from within th e the Maintenance m enu Miscel laneous sub-menu. This menu controls where emai ls originated by the router a re forwarded to. The Forward to Mail Hub field sp ecifies an IP a[...]

  • Page 258

    RuggedRouter  User G uide C h a ss i s P a r am e t er s F i g u r e 22 9 : C h a s s i s P a r a m e t e r s M e n u This menu displays the chas sis temp eratu re an d, if hardware version 2, the voltage levels of chass is power sup plies and a record of the last p ower down tim e. The system will highlight red any out- of-range value. The mon [...]

  • Page 259

    Chapter 26 – Maintain ing The Router S y s t e m L og s F i g u r e 23 0 : Sy s te m L o g s System logs are records of activities that hav e occurred on the router, sorted into specific cat egories. System logs can be invalu able when debugging configura tion changes. As such, m ost of your u se of the logs will be simp ly in viewing them . S y [...]

  • Page 260

    RuggedRouter  User G uide Left unrestricted the logging system would consu me all ava ilable “disk” sp ace, causing the rou ter to fail. The rou ter limi ts the memory u sed by the logging system by storing logs in a volatile (i.e. lost a fter a reboot) file syst em which is lim ited in size. Such a system w ill lose logging information when[...]

  • Page 261

    Chapter 26 – Maintain ing The Router U p g r a d e S ys te m F i g u r e 23 2 : So ft w a r e U p g r a d e Sy st e m The Software Upgrade system provides the following featu res: • U p gr a d i n g f r o m e i t h e r HT T P o r F T P s e r v e r s , • U p gr a d e t r a f f i c b a n d w i d t h l i m i t i n g t o p r e v e n t d i s r u p[...]

  • Page 262

    RuggedRouter  User G uide Your RuggedRouter softwa re is p rovided in releases of the form rrX.Y.Z. The platform release num ber X changes when n ew hardware platforms are r eleased. The major releas e n umber Y is increased w hen imp ortant new featu res a re added. This is called a “Major” r elease. The m inor release nu mber Z is increase[...]

  • Page 263

    Chapter 26 – Maintain ing The Router U p g r a d e to R X 1 1 0 0 F i g u r e 23 3 : Up g r a de t o R X 1 1 0 0 This menu allows you to upgrade you r router. The displa y u sefully provides a description of the cu rrent hardware in th e router inventory. C h a n g e Re p o s it o r y S e r v e r F i g u r e 23 4 : C h a n g e R e po s i t o r y [...]

  • Page 264

    RuggedRouter  User G uide A u t o m a t i c U p g r a d in g F i g u r e 23 5 : A u t o m a t i c U pg r a d e Check the Upgrades enabled field to activate daily u pgrades. Use the Upgr ade Time fields to s elect the time to upgrade. Selecting different ti mes on each rou ter can be used to even out traffic flows in the n etwork. U p g r a d i n[...]

  • Page 265

    Chapter 26 – Maintain ing The Router I n s t a l l i n g A N e w P ac k a g e F i g u r e 23 7 : I n s t a l l i n g A Ne w P a c ka ge The Install A New Packag es feature uploa ds and installs packa ges to the rout er. Select the From l ocal file option if you have already moved the p ackag e to the router through http, ftp or scp. You ma y eit [...]

  • Page 266

    RuggedRouter  User G uide U p l o a d i n g A n d D o w n l o a d i ng F i l e s F i g u r e 23 8 : Up l o a d/ D o w n l o a d m e n u The Upload/Download Files m enu p rovides a mean s to tran sfer files to a nd from the router. The Download files fr om the specified URLs to this route r p art of the m enu a llows you to have the router downlo[...]

  • Page 267

    Chapt er 27 – Security Considerations C h a p t e r 2 7 – S e c u r i t y C on s i d e r a t i o n s I n t r od u c t i on This chapter describes actions to take to secure the RuggedRouter. S e c u r i t y A c t i o ns 1. Change the root an d rrsetup p asswords from the rrsetup shell, before a ttaching the router to the network. 2. If Radius au[...]

  • Page 268

    RuggedRouter  User G uide This page intention ally blank 266 RuggedCom[...]

  • Page 269

    Appendix A – Setting Up A Repos itory A p p e n d i x A – S e t t i n g U p A R e p o s i t o r y The RuggedCom software upgrade m echanism requires a repos itory of softwar e to availabl e. The following instructions detail: • R e q u i r e m e n t s fo r a r ep o s i t o r y s e r v e r , • I n i t i a l s e t u p o f a r ep o s i t o r y[...]

  • Page 270

    RuggedRouter  User G uide U p g r a d i n g T h e R e p os i to r y RuggedRouter releas es are obtained from th e RuggedCom w eb site as ZIP files. Download the ZIP file to you r regula r and/or test releas e directories and unzip them. You ma y delete the original ZIP file if desired. The ZIP file nam e will be in th e form rrX.Y.zip. The major[...]

  • Page 271

    Appendix A – Setting Up A Repos itory U p g r a d i n g C o n s i d e r a t i on s The RuggedRouter offers you the ability to p erform au tomat ic daily u pgrades, sp ecify the download tim e an d limit the down load bandwidth. The se tools automa te the upgrade p rocess and minim ize the imp act of upgrading on the network. When autom atic daily[...]

  • Page 272

    RuggedRouter  User G uide A p p e n d i x B – D o w n g r ad i n g R o u t er S o f t w a r e RuggedCom recognizes tha t custom ers m ay need to downgrade router softwar e: • R o u t e r s b e i n g a d d ed t o t h e n e t w o r k h a v e m o r e r e c e n t v er s i o n t h a n t h a t s t an d a rd i z e d f o r t h e n et w o r k . • N[...]

  • Page 273

    Appendix C – Installing Apa che Web Server On Windows A p p e n d i x C – I n s t a l l i n g A p a c h e W e b S e r v e r O n W i nd ow s A number of custom ers ha ve ask ed for advice and instructions on sett ing up a web server on Windows. RuggedCom recom men ds the Apach e web server, becaus e it is secure, robust, easy to install a nd con[...]

  • Page 274

    RuggedRouter  User G uide Return to the web browser u sed earlier to verify Apa che and refresh the screen. It should now reflect the contents of your RuggedRouter release directory. You s hould now be able to p erform an u pgrade from a router. 272 RuggedCom[...]

  • Page 275

    Appendix D – Installing IIS Web Server On Windows A p p e n d i x D – I n s t a l l i n g I I S We b S e r v e r O n W i nd ow s A number of custom ers ha ve ask ed for advice and instructions on sett ing up an IIS web server on Windows. Begin by identifying a host comp uter that has IIS and its physical and logical location on the n etwork. Th[...]

  • Page 276

    RuggedRouter  User G uide A p p e n d i x E – R a d i u s S e r v e r C on f i g u r a t i o n This section describes how to configure pop ular radius servers to sup ply a Vendor- Specific field, “privilege- level”, which is u sed by Webmin to ass ign assign specific capa bilities to Webmin users on a per u ser basis. Curr ently, the only [...]

  • Page 277

    Appendix E – Radius Server Configura tion Permission : Grant rem ote a ccess p ermission 3. Double click th e policy nam e you created, In the pop up window, click Edit Profile... button. F i g u r e 24 1 : I A S W i nd o w - Ed i t Re mo t e A c c e ss P o l i c y 4. In Edit Profile window, Click Add... b utton F i g u r e 24 2 : I A S W i nd o [...]

  • Page 278

    RuggedRouter  User G uide 5. In A dd Attribute window, select Vendor-Specific line, and click Add button. F i g u r e 24 3 : I A S Wi nd o w – A d d A t tr i b u te 6. In the Multivalu ed Attribute Information window, click the Add button F i g u r e 24 4 : I A S W i nd o w – M u l t i va l u e d A t t r i b ut e I nf o r m a ti o n 7. In th[...]

  • Page 279

    Appendix E – Radius Server Configura tion 8. In the Configure VSA (RFC comp liant) win dow, in the vendor-assigned attribute numb er editbox , inpu t 2; in the Attribute format listbox, select String, in the Attribute value editbox, input the desired privilege level (in the a bove case, it is operator, in your ca se, currently you should inp ut r[...]

  • Page 280

    RuggedRouter  User G uide I n d e x Accounts................................................................................................................................................ root............................................................................................................................. ... ... ... ... ... ... .28 [...]

  • Page 281

    Index N392 ...................................................................................................................................... ... .. ... 72 N393 ...................................................................................................................................... ... .. ... 72 Signaling type......................[...]

  • Page 282

    RuggedRouter  User G uide Ethernet Ports................................................................................................................. ... ... .59, 189 LED Pan el .......................................................................................................................... ... ... ... .37 Modem Ports...............[...]

  • Page 283

    Index On ADSL Interfaces...................................................................................................................... 91 On Native E thernet Interfaces.................................................................................................. ... ..64 Precision Time Protocol Card......................................[...]

  • Page 284

    RuggedRouter  User G uide Authenticat ion ..................................................................................................................... ... ... .224 Configuring................................................................................................................. ... ... ... ... ... .223 Fundam entals...........[...]