RuggedCom RX1000 Bedienungsanleitung

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284

Zur Seite of

Richtige Gebrauchsanleitung

Die Vorschriften verpflichten den Verkäufer zur Übertragung der Gebrauchsanleitung RuggedCom RX1000 an den Erwerber, zusammen mit der Ware. Eine fehlende Anleitung oder falsche Informationen, die dem Verbraucher übertragen werden, bilden eine Grundlage für eine Reklamation aufgrund Unstimmigkeit des Geräts mit dem Vertrag. Rechtsmäßig lässt man das Anfügen einer Gebrauchsanleitung in anderer Form als Papierform zu, was letztens sehr oft genutzt wird, indem man eine grafische oder elektronische Anleitung von RuggedCom RX1000, sowie Anleitungsvideos für Nutzer beifügt. Die Bedingung ist, dass ihre Form leserlich und verständlich ist.

Was ist eine Gebrauchsanleitung?

Das Wort kommt vom lateinischen „instructio”, d.h. ordnen. Demnach kann man in der Anleitung RuggedCom RX1000 die Beschreibung der Etappen der Vorgehensweisen finden. Das Ziel der Anleitung ist die Belehrung, Vereinfachung des Starts, der Nutzung des Geräts oder auch der Ausführung bestimmter Tätigkeiten. Die Anleitung ist eine Sammlung von Informationen über ein Gegenstand/eine Dienstleistung, ein Hinweis.

Leider widmen nicht viele Nutzer ihre Zeit der Gebrauchsanleitung RuggedCom RX1000. Eine gute Gebrauchsanleitung erlaubt nicht nur eine Reihe zusätzlicher Funktionen des gekauften Geräts kennenzulernen, sondern hilft dabei viele Fehler zu vermeiden.

Was sollte also eine ideale Gebrauchsanleitung beinhalten?

Die Gebrauchsanleitung RuggedCom RX1000 sollte vor allem folgendes enthalten:
- Informationen über technische Daten des Geräts RuggedCom RX1000
- Den Namen des Produzenten und das Produktionsjahr des Geräts RuggedCom RX1000
- Grundsätze der Bedienung, Regulierung und Wartung des Geräts RuggedCom RX1000
- Sicherheitszeichen und Zertifikate, die die Übereinstimmung mit entsprechenden Normen bestätigen

Warum lesen wir keine Gebrauchsanleitungen?

Der Grund dafür ist die fehlende Zeit und die Sicherheit, was die bestimmten Funktionen der gekauften Geräte angeht. Leider ist das Anschließen und Starten von RuggedCom RX1000 zu wenig. Eine Anleitung beinhaltet eine Reihe von Hinweisen bezüglich bestimmter Funktionen, Sicherheitsgrundsätze, Wartungsarten (sogar das, welche Mittel man benutzen sollte), eventueller Fehler von RuggedCom RX1000 und Lösungsarten für Probleme, die während der Nutzung auftreten könnten. Immerhin kann man in der Gebrauchsanleitung die Kontaktnummer zum Service RuggedCom finden, wenn die vorgeschlagenen Lösungen nicht wirksam sind. Aktuell erfreuen sich Anleitungen in Form von interessanten Animationen oder Videoanleitungen an Popularität, die den Nutzer besser ansprechen als eine Broschüre. Diese Art von Anleitung gibt garantiert, dass der Nutzer sich das ganze Video anschaut, ohne die spezifizierten und komplizierten technischen Beschreibungen von RuggedCom RX1000 zu überspringen, wie es bei der Papierform passiert.

Warum sollte man Gebrauchsanleitungen lesen?

In der Gebrauchsanleitung finden wir vor allem die Antwort über den Bau sowie die Möglichkeiten des Geräts RuggedCom RX1000, über die Nutzung bestimmter Accessoires und eine Reihe von Informationen, die erlauben, jegliche Funktionen und Bequemlichkeiten zu nutzen.

Nach dem gelungenen Kauf des Geräts, sollte man einige Zeit für das Kennenlernen jedes Teils der Anleitung von RuggedCom RX1000 widmen. Aktuell sind sie genau vorbereitet oder übersetzt, damit sie nicht nur verständlich für die Nutzer sind, aber auch ihre grundliegende Hilfs-Informations-Funktion erfüllen.

Inhaltsverzeichnis der Gebrauchsanleitungen

  • Seite 1

    RuggedRouter  RX1000/RX1100 User Guide RuggedCom Inc. 30 Whitmore Road, Woodbridge, Ontario, C ana da L4L 7Z4 Web: www.rugge dcom.com Tel: (905) 856-5288 Fax: (905) 856-1995 Toll Free: (888) 264-0006[...]

  • Seite 2

    R U G G E D R O U T E R  U S E R G U I D E F O R U S E W I T H R X 1 00 0 / R X 1 1 00 P R O D U C T S V e r s i o n 1 . 1 2 . 6 – M a y 1 4 t h , 2 0 0 8 R u g g e d C o m 30 W h i t m o r e R o a d W o o d b r i d g e , O n t a r i o C a n a d a L 4 L 7 Z 4 T e l : ( 9 0 5 ) 8 5 6 - 5 28 8 F a x : ( 9 0 5 ) 8 5 6 - 1 9 9 5 T o l l F r e e : [...]

  • Seite 3

    About this User Guide A b o u t t h i s U s e r G u i d e This guide is concerned with aiding the u ser in the configuration a nd operation of the RuggedRouter  u sing the RuggedCom comm and line, setup menu an d web man agement interfaces. Sp ecifically, this guide details asp ects of: • A c c e s s i n g t h e U s e r I n t e r f a c e s •[...]

  • Seite 4

    RuggedRouter  User G uide D o c u m e n t C o n v e n t i o n s This publication uses the following conventions: N o t e : M e a n s r e a d e r t a k e n o te . N o t e s c o n t a i n h e l p f u l s u g g e s t i o n s o r r e f e r e n c e s t o m a t e r i a l s n o t c o n t a i n e d i n t h i s g u i d e . Helpful Hint This type of note [...]

  • Seite 5

    About this User Guide 10. All further configuration is accomp lished through the web man agement interfa ce. Attach the configuring host to one of the Ethern et ports configured above. Point your w eb browser at the address for that port, u se https a nd specify a port number of 10000, e.g. https://192.168.1.1:1 0000 (or otherwise if configured in [...]

  • Seite 6

    RuggedRouter  User G uide 22. If your router is equip ped with an embedded mod em, the Networking m enu, Modem sub-m enu w ill a llow you to configure it with PPP or in coming console connections. See the chapt er “Configuring PPP And Modem” for more details. 23. If your router is equip ped with Serial Inte rfaces, the Servers menu, Serial P[...]

  • Seite 7

    About this User Guide 35. When you r routers configuration is s table, it is r ecommen ded that the configuration should be up loaded from the rout er and stored as a backup . The Maintenance m enu Backu p And Restore su b-menu will be u seful. 36. Should you n eed to transfer files to or from the router, the Maintenance m enu Upload/Down load F il[...]

  • Seite 8

    RuggedRouter  User G uide T a b l e O f C o n t e n t s About this User Gu ide................................................................................................ ... ... ... ... ... ... ... .. ... .1 Applica ble Firmw are R evision........................................................................................... .. ... ... [...]

  • Seite 9

    Table Of Contents Bootup And Shutdown .............................................................................................................. ... ... 45 Change Password Com ma nd ................................................................................... ... ... ... ... ... ... .. .46 Scheduled Comma nds .............................[...]

  • Seite 10

    RuggedRouter  User G uide Strategy For Creatin g Interfaces............................................................................ ... ... ... ... ... .. .69 Naming Of Logical Interfaces.................................................................................................. 70 Editing A T1/E1 Interface ............................[...]

  • Seite 11

    Table Of Contents Introduction............................................................................................................................. ... ... ... 91 ADSL Fundamenta ls................................................................................................................. ... 91 PPPoE/Bridged Mode Fundamenta ls........[...]

  • Seite 12

    RuggedRouter  User G uide Virtual Priva te Networkin g To A DMZ.................................................................................114 Firewal l Main Menu.............................................................................................. ... ... .. ... ... ... ... ... .114 Network Zones....................................[...]

  • Seite 13

    Table Of Contents Router- ID ............................................................................................................ ... .. ... ... ... ... .. 143 Hello Interval a nd Dead Inte rval........................................................................................ ... .143 Active/Passiv e Interface Defau lt................[...]

  • Seite 14

    RuggedRouter  User G uide VRRP Main Menu.................................................................................................. ... ... ... .. ... ... ... ... 168 VRRP Configura tion............................................................................................................... ... 168 Editing A VRRP Instance...........[...]

  • Seite 15

    Table Of Contents Message Pac ketiza tion................................................................................................ .. ... ... ... 191 Use of Turnaround Delays..................................................................................... .. ... ... ... ... .. 192 Serial Protocols Ma in Menu..............................[...]

  • Seite 16

    RuggedRouter  User G uide Viewing The GPS Status............................................................................. ... ... ... ... ... ... ... .. ... ... .222 Viewing The GPS Log ..................................................................................................... ... .. ... .222 Chapt er 23 – Configuring SSH .......[...]

  • Seite 17

    Table Of Contents Alert Menu.................................................................................................................. ... ... ... ... .. .240 Alert Configuration....................................................................................................... ... ... ... .. ..241 Alert Filter Configuration ............[...]

  • Seite 18

    RuggedRouter  User G uide Setting Up The Routers............................................................................................................ .. ... .275 An Alternate Approach................................................................................................ ... ... ... ... .. 275 Upgrading Considerations ............[...]

  • Seite 19

    Table Of Fig ures T a b l e O f F i g u r e s Figure 1: Ru ggedRouter Setup Main M enu....................................................................................... ..29 Figure 2: Ru ggedRouter Setup Password Chan ge Menu........................................ ... ... ... ... .. ... ... ... ... .. 30 Figure 3: Ru ggedRouter Interfaces Set[...]

  • Seite 20

    RuggedRouter  User G uide Figure 26: Scheduled Com mands Dis playing a Comm and....................................................... ... ... ... .47 Figure 27: Webmin Scheduled Cron Jobs............................................................................................48 Figure 28: Cr eating a Cron Job.................................[...]

  • Seite 21

    Table Of Fig ures Figure 53: T1/E1 Network Interfaces After Interface Creat ion..................................................... ... ... 70 Figure 54: Edit T1 Inte rface.......................................................................................................... ... ... .71 Figure 55: Edit Logical Interface (Frame Relay) ..........[...]

  • Seite 22

    RuggedRouter  User G uide Figure 80: ADSL Link Statistics......................................................................................................... .96 Figure 81: Modem Interface........................................................................................ ... ... ... ... .. ... ... ... .98 Figure 82: Edit Modem Configur[...]

  • Seite 23

    Table Of Fig ures Figure 107: Server Configuration...................................................................................... ... ... .. ... ... .. 130 Figure 108: Show Public Key ................................................................................................. ... ... ... .. 131 Figure 109: Preshared Keys ...............[...]

  • Seite 24

    RuggedRouter  User G uide Figure 134: Link Backup Status................................................................................ .. ... ... ... ... ... ... ... . 162 Figure 135: Test Link Backup ...................................................................................... ... ... ... .. ... ... ... .162 Figure 136: VRRP Examp le[...]

  • Seite 25

    Table Of Fig ures Figure 161: Ra w Socket Menu.................................................................................. ... .. ... ... ... ... ... ... .194 Figure 162: Serial Protocols Statistics Menu................................................................................ ... .. 195 Figure 163: Serial Protocols Trace Menu..........[...]

  • Seite 26

    RuggedRouter  User G uide Figure 188: IRIGB/IEEE1588 General Configuration m enu...................................... .. ... ... ... ... ... ... .230 Figure 189: IRIGB Configuration menu................................................................................. ... ... .. ..231 Figure 190: IEEE1588 Configura tion Menu.....................[...]

  • Seite 27

    Table Of Fig ures Figure 215: Archive D iffere nces List........................................................................... .. ... ... ... ... ... ... .251 Figure 216: Show D iffere nce for selected file between two targets.......................................... ... ... .. 252 Figure 217: SNMP Main Configura tion page....................[...]

  • Seite 28

    RuggedRouter  User G uide Figure 242: IAS Window - Edit Profile................................................................................ ... .. ... ... .. 282 Figure 243: IAS Window – A dd Attribute...................................................................................... ... 283 Figure 244: IAS Window – Multivalued Attrib[...]

  • Seite 29

    Chapter 1 – Setting Up And Administering The Router C h a p t e r 1 – S e t t i n g U p A n d A d m i n i s t e r i n g T h e R o u t e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th the RuggedCom Serial Cons ole interface, the RuggedRouter  Setup script and signing on to the Web interface. This chapter describes the f[...]

  • Seite 30

    RuggedRouter  User G uide End Backup Server, VPN Serve r, NFS, OS PF/RIP p rotocol and firewall) are disabled by de fault. A c c e s s i n g T h e R u g g e d R o u t e r  C o m m an d P r o m p t F r o m th e C o n s o l e P o r t Attach a terminal (or PC running termin al emu la tion softwar e) to the RS232 port on the rear of the chassis. [...]

  • Seite 31

    Chapter 1 – Setting Up And Administering The Router F i g u r e 2 : R u g g e d R o u t e r S e t u p P a s s w o r d C h a n g e M e nu C o n fi gu r i n g I P A d d r e s s In f o r m a t i o n The Change Port IP Address comm and configures port IP addresses and gatewa ys. F i g u r e 3 : R u g g e d R o u t e r I n t e r f a c e s S e t u p M [...]

  • Seite 32

    RuggedRouter  User G uide F i g u r e 5 : R a d i u s S e r v e r C o n f i g u r a t i o n me n u The Hostname/IP an d Port Number fi elds configures the server loca tion. The Shared Secret field configures the unique pas sword used by this server. The time Timeout field selects the maxima l tim e to wait before trying the next server. The entr[...]

  • Seite 33

    Chapter 1 – Setting Up And Administering The Router E n a b l i n g A n d D i s a b l i n g T h e G a u n t l e t S e c u r i t y A p p l i a n c e The Gauntlet security Appl iance requ ires a pas s phrase u nique to your network. This menu will configure it. F i g u r e 6 : G a u n t l e t S e t u p M e n u C o n fi gu r i n g T h e D a t e , T [...]

  • Seite 34

    RuggedRouter  User G uide D i s p l a y i n g H a r d w a r e In f o r m a t i o n The Displa y Hardware Information comma nd describes commission ed hardware. F i g u r e 8 : R u g g e d R o u t e r H a r d w a r e I n f o r m a t i o n M e n u 32 RuggedCom[...]

  • Seite 35

    Chapter 1 – Setting Up And Administering The Router R e s t o r i n g A C o n f i g u r a t i o n The Restore A Previous Configuration comma nd provides a m eans to restore a previous ly ta ken snapshot of the configuration of the router. N o t e: T h e r o u t e r w i l l r e b o o t im m e d i a t e l y a ft e r r e s t o r i n g c o n f i g u [...]

  • Seite 36

    RuggedRouter  User G uide T h e R u g g e d R o u t e r  W e b I n t e r f a c e The RuggedCom Web interface is provided by an enhanced version of the p opula r Webmin interface. U s i n g a We b B r o w s e r t o A c c e s s t h e W e b I n t e r f a c e Start a w eb browser session and open a connection to the router by entering a URL that [...]

  • Seite 37

    Chapter 1 – Setting Up And Administering The Router The rightmost or configuration frame pr esents the configura tion for the currently selected subs ystem, or in the cas e of signing-on, the home pa ge window. The hom e page win dow presents an annota ted view of the front of the chassis a s well as a numb er of importan t system p aram eters. T[...]

  • Seite 38

    RuggedRouter  User G uide • C o n f i g u r e t h e s i g n - o n p a s s w o r d , • S p e c i f y s e s s i o n t i m e o u t s , • R e s t r i c t t h e S u b n e t o f I P a d d r e s s e s t h a t c a n l o g i n , • Configure and view Webmin event logs, The System Menu provides the a bility to: • C h a n g e t h e r o u t e r p a[...]

  • Seite 39

    Chapter 1 – Setting Up And Administering The Router The LED status Pan el provides the console port, indicat es the sta tus of hardware/softwa re an d can initiate a controlled reboot. The LEDs are organized into three p rimary groups; the p ort group, GPS/PPP group and the Alarm/ Power Suppl y group. The displa y pos sibilities a re as follows: [...]

  • Seite 40

    RuggedRouter  User G uide Chapte r 2 – W ebmin Conf iguration I n t r o d u c t i o n This chapter fam iliariz es th e user wi th configuring the router through the Webmin menu and describes the following proc edures: • C o n f i g u r i n g t h e I P A d d r e s s a n d S u b n e t M a s k • C o n f i g u r i n g t h e G a t e w a y A d d[...]

  • Seite 41

    Chapt er 2 – Webmin Configura tion If your router is being used on a complet ely privat e networ k, or IP access control is being provided by the firewall you m ay leave IP Access Control disabled. Select the Allow from all addresse s field and Save. If you wish to restrict access to a single address or subnet, select the Only allow from listed a[...]

  • Seite 42

    RuggedRouter  User G uide The Web managemen t p ackage provides context sensitive help in each of its menus. When a help link is selected th e router instructs the brows er to open the help text from a h elp server. In this wa y the router does not wa ste la rge amou nts of disk spa ce storing help text a nd network bandwidth sending large web p[...]

  • Seite 43

    Chapt er 2 – Webmin Configura tion A u t h e n t i c a t i o n F i g u r e 2 0 : W e b m i n Co n f i g u r a t i o n M e n u , A u th e n t i c a t i o n This menu allows you to configure what W ebmin will do wh en a num ber of failed logins from the sam e IP address occur. If the Enab le password time outs field is selected, the host will be bl[...]

  • Seite 44

    RuggedRouter  User G uide W e b m i n E v e n t s L o g F i g u r e 2 1 : W e b m i n E v e n t s L o g This menu allows you to search the W ebmin log for changes made by you rself or other admin istrators. 42 RuggedCom[...]

  • Seite 45

    Chapt er 2 – Webmin Configura tion This page intentional ly blank RuggedCom 43[...]

  • Seite 46

    RuggedRouter  User G uide C h a p t e r 3 – C o n f i g u r i n g T h e S y s t e m I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g a n d d i s a b l i n g p r o c e s s e s s u c h a s S S H a n d W e b M a n a g e m e n t • C h a n g i n g T h e P a s s w o r d • S h u t t i n g d o w n a n d R e [...]

  • Seite 47

    Chapt er 3 – Configuring The System The second part of the m enu allows you to program sp ecific actions a t boot time. The script wil l be run after all regular boot actions have com pleted. F i g u r e 2 3 : B o o t u p a n d S h u t d o w n , P a r t 2 The actions ma y be a series of comma nds that ca n be executed at the comma nd line. Each e[...]

  • Seite 48

    RuggedRouter  User G uide Begin by selecting the tim e and date you w ish to run the comma nd at us ing the Run on date and Run at time fields. Use the Run in direc tory field to enter a directory to run the com man d in, or simply use “/”. Finally, enter the comma nd to execute in the Commands to execute field. Note that the command w ill r[...]

  • Seite 49

    Chapt er 3 – Configuring The System S c h e d u l e d C r o n J o b s A Cron job is a combination of a comm and to run , and a definition of the times a t which to run it. The Scheduled Cron Jobs allows you to create, delete and edit these jobs. F i g u r e 2 7 : W e b m i n Sc he d u l e d C r o n J o b s Initially, there will be no scheduled jo[...]

  • Seite 50

    RuggedRouter  User G uide Follow th e link of a specific job in order to delete the job, e dit it, or test the comm and part of the job by running it immediat ely. If you have multip le jobs, the arrows in the Move column w ill a lter the order in which they are pr esented. S y s t e m H o s t n a m e F i g u r e 3 0 : S y s t e m H o s t n a me[...]

  • Seite 51

    Chapt er 4 – Configuring Networking C h a p t e r 4 – C o n f i g u r i n g N e t w o r k i n g I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g R o u t i n g a n d G a t e w a y s • C o n f i g u r i n g D N S • E n t e r i n g h o s t a d d r e s s e s • C o n f i g u r i n g a p a i r o f E[...]

  • Seite 52

    RuggedRouter  User G uide C o r e S e t t i n g s F i g u r e 3 3 : C o r e N e t w o r k i n g S e t ti n g s This menu allows you to configure core networkin g settings. The IPV6 Support field determines where IPV6 interfaces are created and supp orted at boot time. Set this op tion to yes if you need these interfaces. Disabling these interfac[...]

  • Seite 53

    Chapt er 4 – Configuring Networking This menu allows you to configure a dumm y interface. Normall y the router is reachable on a ny of its interfac e addresses, whether the in terface is active or not. When OSPF a nd link detection is u sed, inactive in terfaces a re not advertised to the network and thus not reachabl e. A dumm y in terface is a [...]

  • Seite 54

    RuggedRouter  User G uide The Network/Host and Netmask fields describe the remote network the s tatic route will reach. If the netmas k fi eld is not entered (or a netm ask of 255.255.255 is entered) the rou ting will define a host route. An y other n etmask will define a network route. If the network field is cl eared the rout e will be deleted[...]

  • Seite 55

    Chapt er 4 – Configuring Networking S t a t i c M u l ti c a s t R o u t i n g F i g u r e 3 6 : S t a t i c M u l t i c a s t R o u t i n g This menu allows you to configure static mu lticas t routing. The Configured Static Multic ast Routes table shows configured multicast routes. New routings ma y be added by completing th e bottom row of the [...]

  • Seite 56

    RuggedRouter  User G uide D N S C l i e n t F i g u r e 3 7 : D N S C l i e n t This menu allows you to display and configure various DNS client fields. The Resolution Order s elector determin es the order of sources for resolving domain nam es into IP addresses. The Hosts file /etc/hosts can be pop ulat ed with frequen tly used, but un changing[...]

  • Seite 57

    Chapt er 4 – Configuring Networking The backup is “end to end” because conn ectivity is determined by th e ava ilability of an interface on the target system, and not a local link. In the above figure, interface w1ppp acts as the p rimary interface and eth1 acts as the s econdary interface. The router tes ts the prim ary pa th by probing 192.[...]

  • Seite 58

    RuggedRouter  User G uide C o n fi g u r i n g E n d T o E n d Ba c k u p F i g u r e 4 0 : E n d T o E n d B a c k u p This menu allows you to display and configure end to end backup. In orde r to start end to end backup a t each an d every boot, you must enable it via the System folder, Bootup And Shutdown menu . The m enu will remin d you if [...]

  • Seite 59

    Chapter 5 – Configuring Ethernet Interfaces C h a p t e r 5 – C o n f i g u r i n g E t h e r n e t I n t e r f a c e s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • R e a d i n g t h e E t h e r n e t L E D s • C o n f i g u r i n g E t h e r n e t N e t w o r k I n t e r f a c e s • C o n f i g u r i n g V L A N[...]

  • Seite 60

    RuggedRouter  User G uide The last 2-bytes of the VLAN tag contain the following informat ion: the firs t 3-bits are a User Priority Fi eld that ma y be u sed to assign a priority level to the E thernet frame. The next 1-bit is a Canonical Format Indicator (CFI) used in Ethernet fram es to indicate the presence of a Routin g Information Field (R[...]

  • Seite 61

    Chapter 5 – Configuring Ethernet Interfaces E t h e r n e t F i g u r e 4 1 : E t h e r n e t M e n u This menu allows you to configure Ethernet interface param eters as well as displa y the routes and status of all n etwork int erfaces. Select the Ethernet Interfaces icon to configure E thernet interfaces. The Network Interfaces m enu l ets you [...]

  • Seite 62

    RuggedRouter  User G uide The Network Configura tion menu Apply Configu ration button a ppli es p erman ent changes and restart E thernet networking. If only tem porar y changes hav e been made, the p ermanen t configuration wil l be re-app lied. In either table, edit the desired interface by clicking on its link under the Name column. E d i t i[...]

  • Seite 63

    Chapter 5 – Configuring Ethernet Interfaces V i r t u a l I n t e r f a c e s Use virtua l interfaces when you hav e an Eth ernet p ort that ha s multip le "real" IP addresses assigned to it, e.g. as with a p ort provided by an an Internet Service Provider. F i g u r e 4 4 : C r e a t i ng a n V i r t u a l I n t e r f a c e The only ne[...]

  • Seite 64

    RuggedRouter  User G uide This menu allows you to make p erman ent changes to int erfaces and to imm ediatel y app ly thos e changes if desired. The Save button will save changes to the permanent configuration . The Netmask , Broadcast , MTU, Virtual Interfaces, Prox y ARP and Media Type controls are as described ab ove. The IP Address fields al[...]

  • Seite 65

    Chapter 5 – Configuring Ethernet Interfaces E d i t PP P o E I n t e r f a c e F i g u r e 4 8 : E d i t i n g a P P P o E I n t e r f a c e This menus allows you to edit a PPPoE interface. The PPPoE Username field determin es th e userna me to use when connecting to the PPPoE server as sp ecified by your provider. The Password field determines t[...]

  • Seite 66

    RuggedRouter  User G uide P P P L o g s F i g u r e 4 9 : D i s p l a y P P P L o g s This menu displays the nativ e Ethernet and internal ADSL interface PPPoE connection messa ges. This is main ly useful when trying to debug a PPP connection problem. C u r r e n t R o u t e s & I n t e r f a c e T a b l e The table provided by this comm and[...]

  • Seite 67

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 C h a p t e r 6 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d T1/E1 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • F r a m e R e l a y a n d P P P T e r m i n o l o g y a n d I s s u e s • C o n f i g u r i n g F r a m e R e l a y a n d P P P L i n k s •[...]

  • Seite 68

    RuggedRouter  User G uide Unlike PPP, a Frame Relay link can provide mu ltip le (u p to 990) connections. Each connection is identified by a Data Link Connection Identifier (DLCI) and must ma tch at the D CE an d DT E. The us e of multip le connections can su pport m eshed n etwork interconnections and disaster recovery. L o c a t i o n O f I n [...]

  • Seite 69

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 N e t w o r k I n t e r f a c e s F i g u r e 5 1 : T 1 / E1 Ne t w o r k I n t e r f a c e s I n i t i a l C o nf i g u r a t i o n This menu allows you to display and configure T1/E1 Trunk pa rameters , Chann els and the logical interfaces that ru n on them. A table is pr esented for [...]

  • Seite 70

    RuggedRouter  User G uide After assigning the first DLCI, you m ay revisit the interface throu gh the link under the Name field and add additional DLCIs. Once a ll channels ha ve been a ssigned, the “Assign” links will no longer app ear, a s shown below. Note that any of the Fram e Rela y interfaces on a channel (in this ca se w1c4fr16 and w[...]

  • Seite 71

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 This menu allows you to display and configure T1 or E1 Trunk para meters. By default th e interface is set for T1 operation. The Convert this interface to E1 link will set the int erface for E1 op eration a nd allow you to configure its settings. If logic al int erfaces us e a channel above 24 an[...]

  • Seite 72

    RuggedRouter  User G uide E d i t i n g A L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) F i g u r e 5 5 : E d i t L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) This menu allows you to configure Frame Relay link and logical interface fi elds. F r a m e R e l a y L i n k P a r a m e t e r s The first table pr esents the link pa[...]

  • Seite 73

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y D L C I s The second table provides a listing of all DLCIs available on the chann el. Only the DLCI selected from the main m enu can be edited, although an other DLCI can be added by fol lowing the Add ano ther D LCI to this channel link. The DLCI Number refers to the Data Lin[...]

  • Seite 74

    RuggedRouter  User G uide T 1 / E 1 S t a t i s t i c s When at lea st one logical interface is configured, T1/E1 Link and logical interface statistics will be a vailable. These statistics are ava ilable from lin ks on the T1/E1 WAN Int erfaces m enu. Link Statistics are p rovided through the “View Link Statistics” link a t the bottom of eac[...]

  • Seite 75

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y I n t e r f a c e S t a t i s t i c s F i g u r e 5 8 : F r a m e R e l a y St a t i s t i c s Note that the Frame Rel ay Trunk Statis tics and Frame Rel ay Trunk Communications Err ors ta bles are common to all Fra me Rela y DLCIs on the trunk. RuggedCom 73[...]

  • Seite 76

    RuggedRouter  User G uide P P P In t e r f a c e S t a t i s t i c s F i g u r e 5 9 : P P P L i n k S t a t i s t i c s 74 RuggedCom[...]

  • Seite 77

    Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 L o o p b a c k When at lea st one logical interface is configured, a T1/E1 Loopback tests can be performed. This m enu ca n be reached from a lin k on the T1/E 1 WAN Interfaces menu . F i g u r e 6 0 : T 1 / E 1 L o o p b a c k M e n u The loopback test provides a means to test th e di[...]

  • Seite 78

    RuggedRouter  User G uide Running a loop test on an active interface will immediatel y cause it to go down. The loop test autom atica lly initializes the trunk after compl eting the t est. C u r r e n t R o u t e s & I n t e r f a c e T a b l e The table provided by this comm and is a s described i n the N etworking m enu, Network Utilities [...]

  • Seite 79

    Chapter 7 – Configuring Frame Relay/ PPP And T3 C h a p t e r 7 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d T 3 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g F r a m e R e l a y a n d P P P L i n k s • V i ew i n g s t a t u s a n d s t a t i s t i c s • U p g r a d i n g F i r m[...]

  • Seite 80

    RuggedRouter  User G uide T 3 C o n f i g u r a t i o n F i g u r e 6 2 : T 3 T r u n k s A n d I n t e r f a c e s This menu allows you to display and configure T3 Trunks as well as displa y the routes a nd status of the network interfaces. T 3 N e t w o r k I n t e r f a c e s F i g u r e 6 3 : T 3 N e t w o r k I n t e r f a c e s I n i t i a[...]

  • Seite 81

    Chapter 7 – Configuring Frame Relay/ PPP And T3 E d i t i n g A T 3 I n t e r f a c e F i g u r e 6 5 : E d i t T 3 I nt e r f a c e This menu allows you to display and configure T3 Trunk param eters. The Framing field determines the framin g format u sed. Your line p rovider will indicate the correct format. The Line Dec oding field reflects th [...]

  • Seite 82

    RuggedRouter  User G uide F i g u r e 6 7 : E d i t L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (Frame Relay) s ection of the Configuring F rame Relay/PPP And T1/E1 chapter. E d i t i n g A L o g i c a l I n t e r f a c e ( P P P[...]

  • Seite 83

    Chapter 7 – Configuring Frame Relay/ PPP And T3 U p g r a d i n g S o f t w a r e For some customers, access to rem ote sites in a ccomplished solely by a T3 connection. Usuall y a software upgrade will stop the system being upgraded, perform the upgrade a nd then restart it. If T3 port was upgraded in this wa y, the upgrade wou ld fail as the T3[...]

  • Seite 84

    RuggedRouter  User G uide This page intention ally blank 82 RuggedCom[...]

  • Seite 85

    Chapter 8 – Configuring Frame Relay/ PPP And DDS C h a p t e r 8 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d D D S I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g F r a m e R e l a y a n d P P P L i n k s • V i ew i n g s t a t u s a n d s t a t i s t i c s • U p g r a d i n g s o [...]

  • Seite 86

    RuggedRouter  User G uide D D S C o n fi g u r a t i o n F i g u r e 6 9 : D D S T r u n k s A n d I n t e r f a c e s This menu allows you to display and configure DDS Trunks. The Current Rou tes menu will display the rout es and status of the n etwork int erfaces. D D S N e t w o r k I n t e r f a c e s F i g u r e 7 0 : D D S W A N I n t e r [...]

  • Seite 87

    Chapter 8 – Configuring Frame Relay/ PPP And DDS N a m in g O f L o g i c a l I n t e r fa c e s Webmin na mes the logical interfaces for you (but a llows you to provide a description). All int erfaces start w ith a “w” to identify th em as wan in terfaces, followed by the in terface nu mber. The next part of the identifier is eith er “ppp [...]

  • Seite 88

    RuggedRouter  User G uide E d i t i n g A L o g i c a l I n t e r f a c e ( P P P ) F i g u r e 7 4 : E d i t L o g i c a l I n t e r fa c e ( P P P ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (PPP) section of the p revious chap ter. D D S S t a t i s t i c s When at lea st one logi[...]

  • Seite 89

    Chapter 8 – Configuring Frame Relay/ PPP And DDS F r a m e R e l a y A n d P P P I n t e r f a c e S t a t i s t i c s Fram e Rela y And PPP Interface Statis tics are as described i n the Configuring F rame Relay/PPP And T1/E1 chapter. D D S L o o p b a c k When at lea st one logical interface is configured and that interface is active, a DDS Loo[...]

  • Seite 90

    RuggedRouter  User G uide This page intention ally blank 88 RuggedCom[...]

  • Seite 91

    Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL C h a p t e r 9 – C o n f i g u r i n g P P P o E / B r i d g e d M o d e O n A D S L I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g P P P o E a n d B r i d g e d M o d e L i n k s • V i ew i n g s t a t u s A D S L F un da m e n t a l s An ADS[...]

  • Seite 92

    RuggedRouter  User G uide A u t h e n t i c a t i o n , A d d r e s s e s a n d D N S S e r v e r s PPP a uthentica tion util izes PAP or CHAP. Your ISP will provide you w ith a user-ID and passw ord which you wi ll enter in the GUI. The authentica tion p rocess will assign a local IP address and addresses of the ISPs DNS servers to the router. [...]

  • Seite 93

    Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL TX (Red) indic ates w hen data is being transmitted ov er DSL. RX (Red) indicates when data is being received over DSL. While connecting the LED s are fla shing sequential ly. The RuggedRouter also in dicates informat ion about ADSL ports on th e LED Pan el. A pair of LE Ds will indicate traffic[...]

  • Seite 94

    RuggedRouter  User G uide This menu allows you to display and configure logical interface fi elds for PPPoE and to convert the in terface to Bridged Mode . By default, in terfaces ar e created with PPPoE. If you wan t the interfac e to be Bridge d Mode, click on the Convert this interface t o bridged link. The Descri ption field atta ches a desc[...]

  • Seite 95

    Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL The Descri ption field atta ches a description to the logical interface viewable from the network interfaces m enu. The VPI field determines the VPI nu mber the connection uses. The defau lt of 0 is correct for most providers. The Attempt ATM Autoconfigur ation op tion caus es the rout er to att[...]

  • Seite 96

    RuggedRouter  User G uide When at lea st one logical interface is configured, ADSL Link sta tistics wi ll be availabl e. These sta tistics are a vailable from links on the DDS WAN I nterfaces menu . The Local S NR Ratio is an effective indicator of line qu ality. SNR values a bove 40 db co rrespond to excellent line qu ality while values below 1[...]

  • Seite 97

    Chapter 10 – Configuring PPP an d Modem C h a p t e r 1 0 – C o n f i g u r i n g P P P a n d M o d e m I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g P P P C l i e n t • C o n f i g u r i n g P P P S e r v e r • C o n f i g u r i n g D i a l i n c o n s o l e • V i ew i n g s t a t u s M o [...]

  • Seite 98

    RuggedRouter  User G uide M o d e m M a i n M e n u F i g u r e 8 1 : M o d e m I n t e r f a c e This menu allows you to display and configure the modem interface. M o d e m C o n fi gu r a t i o n F i g u r e 8 2 : E d i t M o d e m C o n f i g u r a ti o n This menu allows you to configure the mod em settings a nd features. The Dial-in consol[...]

  • Seite 99

    Chapter 10 – Configuring PPP an d Modem Rings before answer con trols how man y tim es to let the m odem ring be fore answ ering the call, if Dial- in console or PPP Server is ena bled. Additio nal Modem AT Init Codes allows extra AT code s to be entered if requ ired. Permitted codes are: Blind dial X0 - Ignore dialtone/busy signal. Blind dial. X[...]

  • Seite 100

    RuggedRouter  User G uide M o d e m P P P C l i e n t Co n n e c t i o n s F i g u r e 8 3 : C o nf i g u r e M o de m P P P C l i e n t To edit an existing connection, click the 'Edit' link for that connection. To cre ate a n ew connection click 'Add ne w' lin k. To have the rout er au tomatical ly dial a connection at boot [...]

  • Seite 101

    Chapter 10 – Configuring PPP an d Modem M o d e m P P P S e r v e r F i g u r e 8 5 : C o n f i g u r e M o d e m P P P S e r v e r The Server I P address field controls which IP the router will u se for the PPP connection. The Client IP address field controls which IP to assign the to remote system w hich it connects. The Client Nameserver field[...]

  • Seite 102

    RuggedRouter  User G uide This page shows the latest log entries for incom ing calls. This is mainl y u seful when trying to debug a problem w ith establishin g incoming connections. M o d e m P P P L o g s F i g u r e 8 7 : P P P L o g s This page shows the PPP logs. This is ma inly useful when try ing to debug a PPP connection problem. 100 Rug[...]

  • Seite 103

    Chapter 10 – Configuring PPP an d Modem M o d e m P P P C o n n e c t i o n L o g s F i g u r e 8 8 : P P P C o n n e c ti o n L o g s This page shows a list of PPP connections. It shows who conn ected, when they connected and disconnected, the connection sp eed, and session traffic. C u r r e n t R o u t e s & I n t e r f a c e T a b l e The[...]

  • Seite 104

    RuggedRouter  User G uide This page intention ally blank 102 RuggedCom[...]

  • Seite 105

    Chapter 11 – Configuring The Firewall C h a p t e r 1 1 – C o n f i g u r i n g T h e F i r e w a l l I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g Th e F i r e w a l l • E l e m e n t s o f F i r e w a l l d e s i g n • H o w t o c o n f i g u r e t h e F i r e w a l l • C h [...]

  • Seite 106

    RuggedRouter  User G uide The netfilter s ystem us es rulesets , collections of packet class ification rules that determine the ou tcome of examination of a sp ecific packet. The rul es are defined by iptables , a generic table stru cture syn tax and utility p rogram for the configuration an d control of netfilter. In practice an ip tables ru le[...]

  • Seite 107

    Chapter 11 – Configuring The Firewall P o r t F o r w a r d i n g Port forwarding (also known a s redirection) allows traffic coming from the Internet to be sent to a hos t behind the NAT gateway. Previous examples ha ve described the NAT process when connections ar e made from the intran et to the Internet. In those exampl es, addresses and port[...]

  • Seite 108

    RuggedRouter  User G uide 7) If your hosts mus t accept sessions from the Internet configure the rules file to supp ort Destination Network a ddress Tra nslation (DNAT ). Which hosts need to accept conn ections, from whom and on which p orts? 8) Configure the rul es file to override the default policies. Have external connections been limi ted t[...]

  • Seite 109

    Chapter 11 – Configuring The Firewall N o t e : I n o r d e r t o i m p r o v e s e c u r i t y t h e r o u t e r w i l l c r e a t e a z o n e “ u n u s d ” a n d un u s e d i n t e r f a c e s t o t h i s z o n e w h e n S h o r e w a l l s t a r t s . A p o l i c y i s a l s o i n s t a l l e d t h a t b l o c k s a c c e s s f r o m “ u[...]

  • Seite 110

    RuggedRouter  User G uide Note that a cli ent on the Internet that is p robing the RuggedRouter's TCP/UDP ports will receive no respon ses an d will not be able to detect th e presence of the rout er. A host in the loca l network, on the other hand, will fail to connect to the router but wi ll receive a notification. Note that order of poli[...]

  • Seite 111

    Chapter 11 – Configuring The Firewall 2) In this SNA T rule a static address of 66.11.180.161 is acqu ired from the ISP. Traffic f rom the subnet han dled by eth2 should be translated to 66.11.180.161 as it sent to the Internet over ppp . The + a t the end of “pp p+” causes Shorewa ll to match an y pp p int erface. 3) This example is mu ch th[...]

  • Seite 112

    RuggedRouter  User G uide Source-Port The tcp/udp p ort the connection originated from. Original- Destination-IP The destination IP address in the connection requ est a s it was received by the firewa ll. Rate- Limit A specification which allows the ra te at which connections are made to be lim ited. User-Group A method of limiting outbound traf[...]

  • Seite 113

    Chapter 11 – Configuring The Firewall IPSe c traffic arriving a t the firewal l is directed to op enswan, th e IPSec daemon. Opens wan th en decrypts the traffic and forwards it back to shor ewall on th e assigned ipsecX in terface. You w ill also need a rule to allow traffic to enter from this interface. For exam pl e, if opensw an creates inter[...]

  • Seite 114

    RuggedRouter  User G uide F i r e w a l l M a i n M e n u F i g u r e 8 9 : S t a r t i n g S h o r e w a l l F i r e w a l l M e n u The above figure shows th e firewall menu prior to configuration. Configure the firewa ll through the provided menu s. The “Check Firewal l” button can be selected aft er each m enu configura tion to check th [...]

  • Seite 115

    Chapter 11 – Configuring The Firewall F i g u r e 9 0 : S ho r e w a l l F i r e w a l l M e n u The “Apply Configuration” button mus t be us ed after ma king configuration changes. It is recommend ed that the “Ch eck Firewa ll” bu tton be used first to verify that an y changes made a re valid. The “Refresh Configuration ” button can [...]

  • Seite 116

    RuggedRouter  User G uide N e t w o r k Z o n e s F i g u r e 9 1 : F i r e w a l l N e t w o r k Z o n e s This menu allows you to add, del ete and configure zones. Add a new zone by selecting the “Add a new n etwork zon e” lin k or by clicking on the a dd-abo ve or add- below imag es in the Add field. The Zone Type field controls the typ e[...]

  • Seite 117

    Chapter 11 – Configuring The Firewall This menu allows you to add, del ete and configure network interfaces. Add a new interface by s electing the “Add a new n etwork int erface” lin k or by clicking on the add-above or add- below imag es in the Add field. Reorder the interfaces by clicking on the arrows u nder the Move field. Clicking on a l[...]

  • Seite 118

    RuggedRouter  User G uide The norfc1918 option cau ses p ackets arriving on this interface and that hav e a source or destination address that is reserved in RFC 1918 to be dropped after being optionall y logged. The nobogons option cau ses p ackets arriving on this interface that have a sou rce address reserved by the IANA o r by other RFCs (ot[...]

  • Seite 119

    Chapter 11 – Configuring The Firewall D e f a u l t P o l i c i e s F i g u r e 9 5 : F i r e w a l l D e fa u l t P o l i c i e s This menu allows you to add, del ete and configure default policies. Add a new policy by selecting the “Add a new defau lt polic y” link or by clicking on the add-above or add-be low ima ges in th e Add field. Reo[...]

  • Seite 120

    RuggedRouter  User G uide This menu allows you to add, del ete and configure masqu erading and SNAT rules. Add a new rule by s electing the “Add a new ma squ erading rule” link or by clicking on the add-above or add-be low im ages in the Add field. Reorder the policies by clicking on the arrows under the Move fi eld. Clicking on a lin k un d[...]

  • Seite 121

    Chapter 11 – Configuring The Firewall The following fields describe the information to match against the in coming connection request in order to app ly this rule. The Action field specifies the final action of the rule. The and log to syslog fi eld determines whether logging will take place and at which logging level. The Source zone field speci[...]

  • Seite 122

    RuggedRouter  User G uide This menu allows you to add, del ete and static N AT translations. Add a new translation s by selecting th e “Add a new static NAT entry” link or by clicking on the add-above or add- below imag es in the Add field. Reorder the transla tions by clicking on the arrows u nder the Move field. Clicking on a lin k un der [...]

  • Seite 123

    Chapter 11 – Configuring The Firewall This menu allows you to control which addresses the firewa ll will a ccept connections from after it has been stop ped. Add a new trans lations by s electing the “Add a new stopp ed address” link or by clicking on th e add-above or add- below images in the Add field. Reorder the translation s by clicking [...]

  • Seite 124

    RuggedRouter  User G uide This page intention ally blank 122 RuggedCom[...]

  • Seite 125

    Chapt er 12 – Configuring An IPsec VPN C h a p t e r 1 2 – C on f i g u r i n g A n I P s e c V P N I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g I P s ec V P N G l o b a l O p t i o n s • C r e a t i n g V P N C o n n e c t i o n s • E n a b l i n g A n d S t a r t i n g I P s e c • O b t [...]

  • Seite 126

    RuggedRouter  User G uide With route based VPNs: • O p e n s w a n g e n e r a t e s a n I P S E C i n t e r f a c e f o r e a c h V P N t u n n e l , • A s t h e t u n n e l i s b r o u g h t u p a r o u t e f o r t h e s u b n e t a t t h e o t h e r e n d o f t h e t u n n e l i s c r e a t e d t h r o u g h t h a t i n t e r f a c e , ?[...]

  • Seite 127

    Chapt er 12 – Configuring An IPsec VPN When you want to use this form of encryp tion, each router configures its VPN connection to u se the RSA algorithm and includes the public signatu re of its p eer. The RuggedRouter's pu blic signature is available from the outpu t of the Show Public Keys menu. In secret key c ryptography , a single key [...]

  • Seite 128

    RuggedRouter  User G uide You mu st configure the fir ewall to accept connections on these ports a nd protocols. See the Configuring The Fire wall cha pter, Configuring The Fire wall And VPN section for details. T h e O p e n s w a n C o n f i g u r a t i o n P r o c e s s Each VPN connection has two ends, in the local router and the remote rout[...]

  • Seite 129

    Chapt er 12 – Configuring An IPsec VPN After a VPN connection is created this menu will display an icon for the conn ection, as shown in the next view of the VPN Configuration m enu. The “Add defaults for all connections” lin k allows you to create a profile that will app ly to a ll connections for items su ch as key typ e, encryption protoco[...]

  • Seite 130

    RuggedRouter  User G uide The “Apply Configuration” button restarts th e server to a ctivate any configuration changes that ha ve been mad e, restarting VPN connections. F i g u r e 1 0 6 : I P s e c V P N C o n f i g u r a t i o n A f t e r C o n n e c t i o n s H a v e B e e n C r e a t e d S e r v e r C o n f i g u r a t i o n F i g u r e[...]

  • Seite 131

    Chapt er 12 – Configuring An IPsec VPN N o t e : W h e n c o n n e c t i o n s b e c o m e a c t i v e , O p e n s w a n a s s i g n s t h e m t o i p s e c i n t e r f a c e s . Y o u m u s t p l a n o n t h e s e i n t e r f a c e s b e i n g t h e s o u r c e o f i n c o m i n g t r a f f i c i n f i r e w a l l r u l e s . The NAT Traversal f[...]

  • Seite 132

    RuggedRouter  User G uide L i s t C e r t i f i c a t e s F i g u r e 1 1 0 : L i s t C e r t i f i c a t e s This menu lists ava ilable certificat e files, their corresponding key files a nd det ails whether a pu blic key for the certificate is configured. V P N C o n n e c t i o n s The IPsec main m enu “Add a new IPsec VPN connection” lin[...]

  • Seite 133

    Chapt er 12 – Configuring An IPsec VPN The At IPsec startup fi eld determines what ha pp ens to the connection a fter Opens wan sta rts and includes the options “Ignore”, “Add c onnection”, “Start Connection”, “Route” and “Default”. A valu e of “Ignore ” w ill cau se the connection to be ignored. A value of “Add co nnect[...]

  • Seite 134

    RuggedRouter  User G uide L e f t / R i g h t S y s t e m ' s Se t t i n gs F i g u r e 1 1 2 : E d i t i n g A V P N C o n n e c t i o n , P a r t 2 The Public I P address fields determine the IP address of the side of the conn ection being e dited. Ch eck the Address or hostname.. field and provide a fixed IP addre ss or hostnam e. If thi[...]

  • Seite 135

    Chapt er 12 – Configuring An IPsec VPN S h o w i n g I P s e c S t a t u s 1 interface lo/lo 127. 0.0.1 2 inter face eth1/eth1 10.0.0. 253 3 inter face eth2/et h2 204.50.1 90.89 4 inter face w1ppp/w1ppp 206.186 .238.1 38 5 %myid = (none) 6 debug none 7 algorithm ESP encrypt : id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64 8 algorithm E[...]

  • Seite 136

    RuggedRouter  User G uide The fourth group (lines 30-39) describe connection describe VP N connections (here “openswa ntest”). The first line is p articularl y u seful s ince it indicates the connection addresses, subnets a nd that the connection is active (“erouted”). If there are no entries, then the VPN hasn' t bee n established [...]

  • Seite 137

    Chapt er 12 – Configuring An IPsec VPN G e n e r a t e X . 5 0 9 C e r t i f i c a t e s Use the a uthority to produce a certificate authority pu blic certification (cacert) a nd a certificate for each of the clients and a certificate for the router. The certifica te authority will require some information that is sha red by all certificates (e.g[...]

  • Seite 138

    RuggedRouter  User G uide Parameters Value Comments At IPsec Startup Add con nection We wish to add the connection when the client starts it. Authenticate by rsasig X.509 certificates provide RSA Connection Type Tunnel Encryption Protocols As desired Compress Data As desired Perfect Forwarding Secrecy As desired Recommend “yes” NAT Traversal[...]

  • Seite 139

    Chapt er 12 – Configuring An IPsec VPN This page intention ally blank RuggedCom 137[...]

  • Seite 140

    RuggedRouter  User G uide C h a p t e r 1 3 – C on f i g u r i n g D y n a m i c R o u t i n g I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g T h e D y n a m i c R o u t i n g S u i t e • E n a b l i n g A n d S t a r t i n g O S P F a n d R I P • C o n f i g u r i n g O S P F a n d R I P • O b t[...]

  • Seite 141

    Chapt er 13 – Configuring Dynamic Routing OS P F F u n d a m e nt a l s The Open Path Shortest First (OSPF) protocol rou ting determines the best pa th for routing IP traffic over a TCP/IP network based on link cost and qua lity. Unlike static routing, OSPF tak es link failu res and other n etwork top ology changes into a ccount. Unlike the RIP r[...]

  • Seite 142

    RuggedRouter  User G uide A router can be pa rt of mul tiple areas and function as a gateway between areas. When mul tiple areas are u sed on a networ k, ar ea 0 is the backbone area. All areas must have a router connecting them to area 0. R o u t e r - I D Defines the ID of the router. By default this is the highest IP assigned to the router. I[...]

  • Seite 143

    Chapt er 13 – Configuring Dynamic Routing L i n k D e t e c t When link detect is enabled for an OSPF/RIP active interface, OSPF or RIP will be notified when th e interface goes down and will stop advertising subnets ass ociated with that interface. O SPF and RIP will resume advertising the su bnet when th e link is restored. This allows OSPF and[...]

  • Seite 144

    RuggedRouter  User G uide N o t e : E n s u r e t h a t An t i s p o o f i n g i s d i s a b l e d i f y o u a r e c o n s t r u c t i n g t h e a b o v e d e s c r i b e d t y p e o f O S P F n e t w o r k . A n t i s p o o f i n g c a n b e d i s a b l e d i n t h e N e t w o r k C o n f i g u r a t i o n m e n u , C o r e S e t t i n g s s u [...]

  • Seite 145

    Chapt er 13 – Configuring Dynamic Routing OS P F A n d V R R P E x a m p l e N e t w o r k This network consists of three rout ers connected in a ring with T1/E 1 links. Rou ter 1 and 2 and the switched n etwork represent a remote site in which the routers sup ply a redundant gateway to th e hosts via VRR P and the T1/E1 links sup ply a redundan [...]

  • Seite 146

    RuggedRouter  User G uide If Router 1 or its Ethern et link fail, VRR P will detect the link being down and remove the direct route to the 1.1.2.0/24. VRRP on Rou ter 2 wil l stop seeing messa ges from Router 1, elect its elf mas ter and will take over the ga teway for the network . OSPF on router 1 will notice the link being down (and the route[...]

  • Seite 147

    Chapt er 13 – Configuring Dynamic Routing C o r e F i g u r e 1 1 8 : Co r e M e n u The Core routing daemon handles comm unica tions between the k ernel of the router and the other dyna mic routing p rotocols. Core handles link detection a nd monitoring static rout es and routes for directly connected interfaces on the router. It also man ages a[...]

  • Seite 148

    RuggedRouter  User G uide Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface. Clicking on sta tus displa ys the current statu s of the interface, including link stat e, IP address and traffic counts. Clicking “Re[...]

  • Seite 149

    Chapt er 13 – Configuring Dynamic Routing O S P F F i g u r e 1 2 1 : O S P F M e n u This menu contains the configuration and status of OSPF on the router. The OSPF Global Paramete rs , OSPF Interfaces an d Network Areas menus configure OSPF. The Status and View OSPF Configuration m enu display the actua l status and configuration file contents [...]

  • Seite 150

    RuggedRouter  User G uide The Enab le Password field sets the p assw ord to be used for the enable comm and of ospfd. This is used by the telnet int erface of ospfd to control access to the configuration. The Telnet Password field sets th e pa ssword to be used for telnet access to ospfd. This is used as the login passw ord of ospfd when locally[...]

  • Seite 151

    Chapt er 13 – Configuring Dynamic Routing The Redistribute K ernel fields control distribution of kern el rout es. When enabled, OSPF will advertise rou tes from th e kernel routing table, which includes s tatic routes entered by the administrator, to other OSPF routers in the area. Norma lly only routes that fall within the scope of the network [...]

  • Seite 152

    RuggedRouter  User G uide The Transmit Delay fi eld controls the estima ted n umber of seconds to transmit a link state update pack et. This should take into account transm ission and propagation delays of the interface. The Passive Interface option controls if an interface is active or p assive. Passive interfaces do not send LSAs to other rout[...]

  • Seite 153

    Chapt er 13 – Configuring Dynamic Routing The RIP Global Parameters and RIP Interfaces configure RIP. The Status and View RIP Configuration menu display the actu al status and configuration file contents of RIP. R I P G l o b a l P a r a m e t e r s F i g u r e 1 2 6 : RI P G l o b a l P a r a me t e r s The Enab le Password field sets the p assw[...]

  • Seite 154

    RuggedRouter  User G uide The Redistribute Conne cted fields control distribution of connected routes. When enabled, RIP will advertise routes to directly conn ected interfaces to other RIP routers in the ar ea. Normally only routes that fall within the scop e of the n etwork a reas will be advertised. The Redistribute K ernel fields control dis[...]

  • Seite 155

    Chapt er 13 – Configuring Dynamic Routing Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface. Clicking “Rem ove in active interfac es” p urges the list of any int erfaces which a re no longer configured on the r[...]

  • Seite 156

    RuggedRouter  User G uide Networks a re used when you want to a dd any router that is pa rt of a specific s ubnet, or connected to a sp ecific network interface to be part of your RIP network. Both neighbors and networks can be u sed at the sa me ti me. N o t e : F o r p o i n t t o p o i n t l i n k s ( T 1 / E 1 l i n k s f o r e x a m p l e )[...]

  • Seite 157

    Chapt er 13 – Configuring Dynamic Routing This page intention ally blank RuggedCom 155[...]

  • Seite 158

    RuggedRouter  User G uide C h a p t e r 1 4 – C o n f i g u r i n g L i n k B a c k u p I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g l i n k b a c k u p • O b t a i n i n g s y s t e m s t a t u s • T e s t i n g l i n k b a c k u p L i n k B a c ku p F u nd a m e n t a l s Link backup prov[...]

  • Seite 159

    Chapt er 14 – Configuring Link Backu p The daemon wil l constru e the ma in link as havin g failed (even if its link statu s is “up”) if the remot e host fa ils to respond to configurable n umber of pings after waiting a configurable timeou t for each ping. U s e O f R o u t i n g P ro t o c o l s A n d T h e D e f a u l t R o u t e If the ma[...]

  • Seite 160

    RuggedRouter  User G uide E d i t L i n k B a c k u p C o n f i g u r a t i o n F i g u r e 1 3 2 : L i n k B a c k u p C o nf i g u r a t i o n Set the Name field to su ppl y an identification of the pair. This field initially defau lts to the “ma in_link_n ame- >backup _link_n ame” . The Enab le this configuration field enables this bac[...]

  • Seite 161

    Chapt er 14 – Configuring Link Backu p N o t e : I f y o u d e l e t e a l i n k b a c k u p c o n f i g u r a t i o n t h a t h a s f a i l e d o v e r ( o r i s f a i l i n g o v e r ) t o i t s b a c k u p t r u n k t h e l i n k d a e m o n w i l l s t o p a t t e m p t i n g t h e l i n k b a c k u p a n d r e s t or e t h e m a i n t r u n [...]

  • Seite 162

    RuggedRouter  User G uide The Test Duration field controls the a moun t of time to run before restoring service to the ma in trun k. Please note that this dura tion mus t take into accou nt the tim ing para meters of the backup configuration: The duration should comfortably exceed the Ping Interval plu s the Ping Timeout m ultip lied by the Ping[...]

  • Seite 163

    Chapt er 14 – Configuring Link Backu p This page intention ally blank RuggedCom 161[...]

  • Seite 164

    RuggedRouter  User G uide C h a p t e r 1 5 – C o n f i g u r i n g V R R P I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g V R R P • E n a b l i n g A n d S t a r t i n g V R R P • O b t a i n i n g V R R P S t a t u s V R R P F u n d a m e n t a l s The Virtual Rou ter R edundancy Protocol ([...]

  • Seite 165

    Chapt er 15 – Configuring VRRP Each Virtua l Rout er has a us er-config ured Virtu al Router Identifier (VRID) and an Virtual IP address or set of IP addresses on the shar ed LA N. Hosts on the shar ed LAN are configured to use these addresses as the default gat eway. One rout er in the Virtua l Rou ter Group will be elected as th e Master , all [...]

  • Seite 166

    RuggedRouter  User G uide The router issu es a s et of gratuitous ARPs when moving between mas ter and backup state. These unsolicited ARPs teach th e hosts and switches in the n etwork of the current MAC address and port as sociated with the VRIP. The router wil l issu e a second set of ARPs aft er the tim e sp ecified by the Gratu itous ARP de[...]

  • Seite 167

    Chapt er 15 – Configuring VRRP V R R P M a i n M e n u F i g u r e 1 3 7 : V R R P M a i n M e n u Note that VRRP is disabled by default and ma y be enabled via the System folder, Bootup And Shutdown menu . VRRP can be configured through the VRRP C onfiguration link before the daemon is started. When enabled, an y configuration changes ma y be ma[...]

  • Seite 168

    RuggedRouter  User G uide E d i t i n g A V RR P I n s t a n c e F i g u r e 1 3 9 : V R R P I n s t a n c e The Name field is pur ely for informat ional purp oses. The Interface field configures th e interface tha t VRRP packets are sent up on. The Virtual Router I D field determin es the VRID number. Ensur e that a ll routers supp lying the sa[...]

  • Seite 169

    Chapt er 15 – Configuring VRRP V i e w i n g V R R P In s t a n c e s S t a t u s F i g u r e 1 4 0 : V R R P I n s t a n c e s S t a tu s The VRRP Instances Status m enu displa ys th e current sta tus of VRRP instances. This menu does not updat e statu s in real ti me. Click on the Refre sh Display bu tton to upda te to the current statu s. The [...]

  • Seite 170

    RuggedRouter  User G uide C h a p t e r 1 6 – C o n f i g u r i n g T r a f f i c P r i o r i t i z a t i o n I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g Tr a f f i c P r i o r i t i z a t i o n • V i ew i n g T r a f f i c P r i o r i t i z a t i o n S t a t i s t i c s T r a [...]

  • Seite 171

    Chapter 16 – Configuring Traffic P rioritiza tion T O S P r i o r i t i z a t i o n The priority of an IP packet can be derived from its Typ e of Service field. The TOS field has the follow ing format: 7 6 5 4 3 2 1 0 +---+---+---+---+---+---+---+---+ | | TOS Bits | | |PRECEDENCE |MD MT MR MMC| 0 | | | | | +---+---+---+---+---+---+---+---+ The fo[...]

  • Seite 172

    RuggedRouter  User G uide P r i o r i t i z a t i o n E x a m p l e A remote site rout er connects to a p rivate network via a T1 line. The router us es OSPF to m anage an a lternate routing, but its p rimar y pu rpos e is to allow access to a switched networ k of RuggedServers imp lement ing TcpModbus gateways (TCP/UDP port 502). The rout er an[...]

  • Seite 173

    Chapter 16 – Configuring Traffic P rioritiza tion T r a f f i c P r i o r i ti z a t i o n M a i n M e n u F i g u r e 1 4 1 : T r a f f i c P r i o r i t i z a t i o n M a i n M e nu This menu displays network interfaces for which prioritiza tion m ay be activated. Prioritization ma y be configured by following the Interface colum n link. The st[...]

  • Seite 174

    RuggedRouter  User G uide Remove prioritiz ation by s electing the D elete and Apply button. P r i o r i t i z a t i o n Q u e u e s F i g u r e 1 4 3 : P r i o r i t i z a t i o n Q u e u e C o n f i g u r a t i o n This menu allows you to edit the na me of of a p riority qu eue and to delete th e queu e. If you delete a queu e referenced by fi[...]

  • Seite 175

    Chapter 16 – Configuring Traffic P rioritiza tion Prioritization works by es tablishing qu eues a t the r equired priority levels filling the transmit queu e w ith them in priority order. The aim of esta blishing low latenc y for certain tra ffic is foiled when transm it qu eue lengths are la rge because multip le low priority packets ma y ha ve [...]

  • Seite 176

    RuggedRouter  User G uide C h a p t e r 1 7 – C on f i g u r i n g G e n e r i c R o u t i n g E n c a p s u l a t i o n I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g G R E • V i ew i n g G R E S t a t u s G R E F u n d a m e n t a l s The RuggedRouter is able to encapsu late mu [...]

  • Seite 177

    Chapter 17 – Configuring Generic Routing E ncapsu lation G R E M a i n M e n u F i g u r e 1 4 7 : G R E M a i n M e n u This menu displays configured GRE tunn els. The tunn el status will be “a ctive” if th e tunn el was su ccessfully created. G R E C o n f i g u r a t i on M e n u F i g u r e 1 4 8 : G R E T u n n e l C o nf i g u r a t i o[...]

  • Seite 178

    RuggedRouter  User G uide This page intention ally blank 176 RuggedCom[...]

  • Seite 179

    Chapt er 18 – Network Util ities C h a p t e r 1 8 – N e t w or k U t i l i t i e s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • P i n g i n g h o s t s , • R u n n i n g a t r a c e r o u t e , • P e r f o r m i n g a h o s t l o o k u p , • T r a c i n g l i n e a c t i v i t y , • Showing interface statist[...]

  • Seite 180

    RuggedRouter  User G uide P i n g M e n u F i g u r e 1 5 0 : P i n g M e n u The Hostname field accepts the host n ame or IP addre ss to ping. The Verbose Output? field caus es ping to present the m aximu m of ou tput. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes. This can make pin g behave very s lowly if [...]

  • Seite 181

    Chapt er 18 – Network Util ities The Packet Length? field specifies the size of the data in the trac eroute pa cket. The Interface? field sp ecifies th e network interface to obtain the sou rce IP address for outgoing probe packets. Otherw ise the router w ill ma nua lly s et the address based on the actu al in terface taken . H o s t M e n u F i[...]

  • Seite 182

    RuggedRouter  User G uide The Maximum packets c aptured an d Ma ximum capture time fields limi ts the amou nt of traffic captu red. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes. This can make pin g behave very s lowly if DNS is not prop erly configured. The Display l ink level header field ca uses this h ead[...]

  • Seite 183

    Chapt er 18 – Network Util ities The Message RX/TX a nd Incoming/Outgoing Connecti ons fields caus es data pack ets an d Connection activity to be included in the trace. The Hex dump fi eld caus es the content of data packets to be displa yed. The Maximum packets c aptured an d Ma ximum capture time fields limi ts the amou nt of traffic captu red[...]

  • Seite 184

    RuggedRouter  User G uide C u r r e n t R ou ti n g & I n t e r f a c e T a b l e F i g u r e 1 5 7 : Cu r r e n t Ro u t i n g & I n t e r f a c e T a b l e This menu displays the current routing table an d the state of the router's int erfaces. Select the Refresh link in order to refresh the displa y. The entries un der the Destin[...]

  • Seite 185

    Chapt er 18 – Network Util ities I n t e r f a c e St a t u s This menu also su mmari zes the interface status. The entries un der the Devic e fi eld reflect the na me of the device. The entries un der the Link up field reflect the current link stat e of interface. The entries un der the Address field reflect th e local address of interface. The [...]

  • Seite 186

    RuggedRouter  User G uide This page intention ally blank 184 RuggedCom[...]

  • Seite 187

    Chapt er 19 – Configuring Serial Protocols C h a p t e r 1 9 – C o n f i g u r i n g S e r i a l P r o t o c o l s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • R a w S o c k e t s A p p l i c a t i o n s • C o n f i g u r i n g S e r i a l p o r t s f o r R a w S o c k e t • V i e w i n g S e r i a l P o r t a n [...]

  • Seite 188

    RuggedRouter  User G uide S e r i a l Pr o t oc o l s A p p l i c a ti o n s C h a ra c t e r E n c a p s u l a t i o n Character enca psula tion is used an y time a stream of chara cters mus t be reliably transport ed across a network. The character stream s can be creat ed by any s erial device. The baud rates supp orted at either s erver need[...]

  • Seite 189

    Chapt er 19 – Configuring Serial Protocols The host will s equentia lly poll ea ch RTU. Each p oll received by the host server is forwarded (i.e. broadc ast) to a ll of the remo te s ervers. All RTUs will receive the request and the ap propria te RTU will issue a reply. The reply is return ed to the host server, where it is forwarded to the hos t[...]

  • Seite 190

    RuggedRouter  User G uide If config ured to pack etize on a tim eout , the s erver will wait for a configurable time after receiving a cha racter before pa cketizing and forwarding. If another character arrives during the wai ting interval, the tim er is restarted. This method allows characters transm itted a s part of an entire m essage to be f[...]

  • Seite 191

    Chapt er 19 – Configuring Serial Protocols A s s i g n P r o t o c o l s M e n u F i g u r e 1 5 9 : As s i g n P r o t o c o l s M e n u This menu associates a p rotocol with a serial p ort. Unused ports shou ld be left associated with “none”. Cha nging an association w ill im mediat ely close the ca lls of the old protocol. P o r t S e t t [...]

  • Seite 192

    RuggedRouter  User G uide The Pack Char field configures the nu meric valu e of the ASCII character which will force forwarding of accumula ted data to the network. The Pack Cha r mus t be between 0 and 255 inclusive or the va lue off. If configured off, accumulat ed data will be forwarded based upon the pa cketiza tion timeou t p aram eter. The[...]

  • Seite 193

    Chapt er 19 – Configuring Serial Protocols S e r i a l P r o t o c o l s S ta t i s t i c s M e n u F i g u r e 1 6 2 : Se r i a l P r o t o c o l s S t a t i s t i c s M e n u This menu presents statist ics of serial p ort activity and established connections. The menu also allows you to reset a p ort, forcing call hang-up and re-establishm ent.[...]

  • Seite 194

    RuggedRouter  User G uide S e r i a l P r o t o c o l s T r a c e M e n u F i g u r e 1 6 3 : S e r i a l P r o t o c o l s T r a c e M e n u This menu displays decoded se rial port an d network activit y. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed. The m enu[...]

  • Seite 195

    Chapt er 19 – Configuring Serial Protocols S e r i a l P r o t o c o l s S e r t r a c e U t i l i t y The comman d line sertrace utility offers the ability to trace the a ctivity of serial p orts in real ti me. A port range ma y be sp ecified to limit the ou tput to sp ecific ports. The level of tra ffic to trace and the typ e of decodi ng may b[...]

  • Seite 196

    RuggedRouter  User G uide This page intention ally blank 194 RuggedCom[...]

  • Seite 197

    Chapt er 20 – Configuring GOOSE Tunnels C h a p t e r 2 0 – C on f i g u r i n g G O O S E T u n n e l s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g G O O S E T u n n el s • V i e w i n g G O O S E T u n n e l s t a t u s a n d s t a t i s t i c s • Tracing GOOSE activity I E C 6 1 8 5 0 G [...]

  • Seite 198

    RuggedRouter  User G uide GOOSE Pac kets received from the network are s tripped of their n etwork headers and forwarded to Ethernet ports configured for the sam e mu lticas t address. The forwarded frames contain the MAC sou rce address or the originating device, and not that of the transmittin g interface. The VLAN used will be tha t programm [...]

  • Seite 199

    Chapt er 20 – Configuring GOOSE Tunnels G e n e r a l C o n f i g u r a t i o n M e n u F i g u r e 1 6 5 : G e n e r a l C o n f i g u r a t i o n M e n u This menu configures the daemon settings. The Daemon U DP Listen Port fi eld configures port used by the daemon to commun icate with other daemons. N o t e : A l l L a y e r 2 T u n n e l d a [...]

  • Seite 200

    RuggedRouter  User G uide The Multicast Address field configures the address to listen for. The Remote Dae mon and Add a new Daemon fields sp ecify th e IP addresses of remote daemons. G O O S E S t a t i s t i c s M e n u F i g u r e 1 6 8 : G O O S E St a t i s t i c s M e nu This menu presents statist ics of GOOSE a ctivity at the E thernet a[...]

  • Seite 201

    Chapt er 20 – Configuring GOOSE Tunnels This menu displays decoded GOOSE activity. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed. The m enu w ill displa y u p to the provided number of m essages wa iting up to the sp ecified numb er of seconds. The Trace on proto[...]

  • Seite 202

    RuggedRouter  User G uide This page intention ally blank 200 RuggedCom[...]

  • Seite 203

    Chapter 21 - Configuring The DHCP server C h a p t e r 2 1 - C o n f i g u r i n g T h e D H CP s e r v e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • D H C P S e r v e r C o n f i g u r a t i o n • Use of Option 82 D H C P F u n d a m e n t a l s Dynam ic Host Configuration Protocol (DHCP) is a m ethod for centrally[...]

  • Seite 204

    RuggedRouter  User G uide In DHCP settings at a m ore sp ecific level overrides higher levels. For exam ple you can configure a DNS server for all clients, the create a group tha t overrides the setting. This allows defaults to be set at a high level to a pply to mos t clients, whi le exceptions can be places just where they are needed. Man y se[...]

  • Seite 205

    Chapter 21 - Configuring The DHCP server • B o o t f i l e n a m e : T h e f i l e n a m e t h e c l i e n t s h o u l d r e q u e s t f r o m a t f t p s e r v e r t o b o o t f r o m . T h i s o n l y a p p l i e s t o n e t w o r k b o o t e d c l i e n t s . • B o o t f i l e s e r v e r : T h e I P a d d r e s s o f t h e t f t p s e r v e[...]

  • Seite 206

    RuggedRouter  User G uide E x a m p l e D H C P S c e n a r i o s A n d C o n f i g u r a t i o n s S i n g le N e t w o r k W i t h D y n a m i c I P A s s i g n m e n t In this example the eth1 interface is provided with IP address 192.168.1.1/24 while addresses 192.168.1.101 through 192.168.1.200 are a ssigned to the clients. The router s erv[...]

  • Seite 207

    Chapter 21 - Configuring The DHCP server Assign a client a t switch p ort 2 address 192.168.1.102. Assign a client a t switch p ort 3 address 192.168.1.103. Assign multip le clients a t switch p ort 4 dynamic a ddresses 192.168.1.151 through 192.168.1.200. The router s erves as the default gat eway. 1) Enable eth1 in the 'Edit Network Interfac[...]

  • Seite 208

    RuggedRouter  User G uide The switch p ort 2 is on vlan2 us ing subnet 192.168.2.0/24 and should assign addresses 192.168.2.101 to 192.168.2.200 and default gateway 192.168.2.1. The switch p ort 3 is on vlan3 us ing subnet 192.168.3.0/24 and should assign addresses 192.168.3.101 to 192.168.3.200 and default gateway 192.168.3.1. The switch p ort [...]

  • Seite 209

    Chapter 21 - Configuring The DHCP server D H C P S e r v e r M a i n M e n u F i g u r e 1 7 0 : D H C P S e r v e r M e n u The DHCP Server main menu shows th e subnets configured for DHCP, as w ell a s any group s and hosts. New subn ets, groups and hosts can be added, and e xisting entries can be edited (and optionally deleted). The Edit Client [...]

  • Seite 210

    RuggedRouter  User G uide D H C P S h a r e d N e t w o r k C o n fi gu r a t i o n F i g u r e 1 7 1 : D H C P S h a r e d N e t w o r k C o n f i g u r a t i o n The settings sp ecific to the Shared network menu ar e the Shared network description and Network na me. The Shared network descr iption field is used to describe the shared networ k [...]

  • Seite 211

    Chapter 21 - Configuring The DHCP server D H C P S u b n e t C o n f i g u r a t i o n F i g u r e 1 7 2 : D H C P S u b n e t C o n f i g u r a t i o n The settings sp ecific to the Subnet m enu are the subnet description, Network address and mask. The Subnet description field is us ed to descri be the subnet as desired. The Network addre ss and N[...]

  • Seite 212

    RuggedRouter  User G uide D H C P G r o u p Co n f i g u r a t i o n F i g u r e 1 7 3 : D H C P G r o u p C o n f i g u r a t i o n The settings sp ecific to the Group menu ar e the group description and Use nam e as client hostna me fields. The Group description field is us ed to describe the group as desired. The Use name as client hostname f[...]

  • Seite 213

    Chapter 21 - Configuring The DHCP server The Hardware address field is the Ethernet MAC of the client associated w ith the host entry. The Fixed IP address field is the IP to as sign to the ma tching client. D H C P P o o l C o n f i g u r a t i o n F i g u r e 1 7 5 : D H C P P o o l C o n f i g u r a t i o n The settings sp ecific to the Address [...]

  • Seite 214

    RuggedRouter  User G uide C h a p t e r 2 2 – C o n f i g u r i n g N T P I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g N T P • S e t t i n g s e r v e r s a n d p e e r s • S e t t i n g g e n e r i c N T P o p t i o n s • N T P T o o l s N T P F un d a m e n ta l s NTP ( Ne[...]

  • Seite 215

    Chapt er 22 – Configuring NTP T h e N T P S a n i t y L i m i t NTP c hanges the system through “stepp ing” a nd “dri fting”. Stepping is a sudden change of time whereas drifting is a slow gradual tim e change. NTP will step the system ti me w hen its starts. This is almos t alwa ys at boot time. Steppin g the time afterwards can caus e p[...]

  • Seite 216

    RuggedRouter  User G uide N T P S e r v e r M ai n M e n u F i g u r e 1 7 6 : N T P Se r v e r Note that the NTP server is disabled by de fault and may be enabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Restart ntpd daemon button. The View GPS Stat[...]

  • Seite 217

    Chapt er 22 – Configuring NTP S e r v e r s C o n f i g u r a t i o n F i g u r e 1 7 8 : N T P Se r v e r L i s t The servers under the IP address column are u sed as prima ry syn chronization devices. Clicking on a link w ill allow you to edit that server. By default th e router includes the links p ool.ntp.org and 127.127.1.0. The pool.ntp.org[...]

  • Seite 218

    RuggedRouter  User G uide V i e w i n g T h e N T P S t a t u s F i g u r e 1 7 9 : N T P St a t u s The NTP S tatus menu displa ys pos sible sources an d curre ntly us ed reference clocks V i e w i n g T h e N T P L o g F i g u r e 1 8 0 : N T P L o g The NTP Lo g menu displays the log of recent NTP events. 216 RuggedCom[...]

  • Seite 219

    Chapt er 22 – Configuring NTP V i e w i n g T h e G P S S t a t u s F i g u r e 1 8 1 : G P S St a t u s If the router is equi pped with a Precision Time Protocol card, this pa ge will shows the status of the GPS module. The Latitude and Longitude fields show the curr ent position of the GPS antenna . The GPS Lock field show the GPS lock s tatus.[...]

  • Seite 220

    RuggedRouter  User G uide C h a p t e r 2 3 – C o n f i g u r i n g SSH I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g S S H A u t h e n t i c a t i o n • S S H N e t w o r k i n g A n d A c c e s s C o n t r o l • S e t t i n g S S H C l i e n t O p t i o n s S S H F u n d a m en t a l s Sec[...]

  • Seite 221

    Chapt er 23 – Configuring SSH S S H M a i n M e n u F i g u r e 1 8 3 : S S H S e r v e r Note that the SSH server is enabled by default and may be disabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Apply Changes button. A u t h e n t i c a t i o n F i[...]

  • Seite 222

    RuggedRouter  User G uide N e t w o r k i n g F i g u r e 1 8 5 : SS H S e r v e r N e t w o r k i n g The Listen on addresses fi elds determine an IP addresses and port upon which SSH will accept a connection. The Listen on port field determines the p ort num ber SSH will listen on, a ssumin g Listen on addresses is set to “All addresses”. [...]

  • Seite 223

    Chapt er 23 – Configuring SSH The Only allow u sers fi eld specifies th e users allowed to conn ect by SSH. The specification can be a list of user na me p atterns, separat ed by spac es. Login is allowed only for user n ames that ma tch one of the pattern s. '*' and '?' can be used as wild cards in the pa tterns. Onl y us er [...]

  • Seite 224

    RuggedRouter  User G uide C h a p t e r 2 4 – C on f i g u r i n g I R I G B A n d I E E E 1 5 8 8 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • I E E E 1 5 8 8 C o n f i g u r a t i o n • I R I G B C o n f i g u r a t i o n • V i e w i n g I R I G B a n d I E E E 1 5 8 8 S t a t u s I E E E 1 5 8 8 F u n d a m e[...]

  • Seite 225

    Chapt er 24 – Configuring IRIGB And I EEE 1588 NTP The P TP clock is a secondary re ference standard reference clock . The router uses this identifier w hen it has synchronize d with remote NTP server. DFLT A fter the router ha s power cy cled but before a ny GPS or NTP locks have occurre d. PTP favors preferred ma sters over n ormal ma sters, GP[...]

  • Seite 226

    RuggedRouter  User G uide R e f e r e n c e C l o c k s The GPS provides the highest qu ality reference clock. It will alw ays be used when it is ava ilable, but ma y require s ome tim e aft er boot before becoming acquired (or “GPS locked”). Typical ly, GPS lock is usu ally acquir ed within five m inutes of boot. When GPS is the reference c[...]

  • Seite 227

    Chapt er 24 – Configuring IRIGB And I EEE 1588 I R I G B / I E E E 1 5 8 8 M a i n M e n u F i g u r e 1 8 7 : I R I G B / 1 58 8 M a i n M e n u This menu allows you to configure IRIGB and IEEE1588, displa y its cu rrent status and review historical changes. G e n e r a l C o n f i g u r a t i o n F i g u r e 1 8 8 : I R I G B / I E E E 1 5 8 8 [...]

  • Seite 228

    RuggedRouter  User G uide I R I G B C o n f i g u r a t i o n F i g u r e 1 8 9 : I R I G B C o n f i g u r a t i o n m e n u This menu allow you to configure IRIG B param eters. The sa ve button will save the changes of configuration p erman ently. The AM Port 1 (PTP1) Output field enables or disables th e amp litud e modulat ed outpu t of this[...]

  • Seite 229

    Chapt er 24 – Configuring IRIGB And I EEE 1588 I R I G B S t a tu s F i g u r e 1 9 1 : I R I G B G PS S t a t u s This page shows whether GPS is locked, and the source of the current referenc e clock. I E E E 1 5 8 8 S t a t u s F i g u r e 1 9 2 : I E E E 1 5 8 8 S t a t u s This page shows the historical s tatus of IEEE1588 on the router. The [...]

  • Seite 230

    RuggedRouter  User G uide I R I G B L o g F i g u r e 1 9 3 : I R I G B G P S S t a t u s This page reflects reference clock changes in IRIG- B. 228 RuggedCom[...]

  • Seite 231

    Chapt er 24 – Configuring IRIGB And I EEE 1588 This page intention ally blank RuggedCom 229[...]

  • Seite 232

    RuggedRouter  User G uide C h a p t e r 2 5 – C on f i g u r i n g T h e S n o r t I D S I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r a t i o n o f S n o r t a s a n I n t r u s i o n D e t e c t i o n S y s t e m . • G e n e r a t i n g a d a i l y s n o r t a n a l y s i s e m a i l . S n o r t F[...]

  • Seite 233

    Chapter 25 – Configuring The Snort IDS When the a lert file m ethod is chosen, a da ily an alysis of the file can be ema iled. The SIDs re ferenced in alerts can be us ed to quickly locate the rule via the m ain Sort IDS menu. The rule its elf often contains HTML links to Internet resou rces su ch as www.secu rityfocu s.com and cve.mitre.org. The[...]

  • Seite 234

    RuggedRouter  User G uide R u l e s e t s F i g u r e 1 9 6 : S n o r t M a i n M e n u p a r t 3 The Rulesets section s elects th e rules to appl y on m onitored interfaces. Each “ruleset ” reflects a collection of rules that a re related. The link under the Action field will disable or enable a ll of the rul es in a ru leset. Indivi dual r[...]

  • Seite 235

    Chapter 25 – Configuring The Snort IDS This menu allows you to configure the IP addresses and ports of servers in the local and external n etwork. The Home Ne t field defaults to “ANY” and designates the IP subn et of any local ports on the router. Configuring a sp ecific subnet can reduc e the nu mber of alerts generated. P r e P r o c e s s[...]

  • Seite 236

    RuggedRouter  User G uide Alerts generated by s nort are stored by one of three m ethods; as local syslog messag es, remotely sylogged messages a nd in an alert file. When the Local sysl ogging method is chos en, the destina tion log file ma y be selected. When the Re mote syslogging method is chosen, the IP address of the remote syslog host mu [...]

  • Seite 237

    Chapter 26 – Maintain ing The Router C h a p t e r 2 6 – M a i n t a i n i n g T h e R o u t e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • V i ew i n g A l e r t s • C o n f i g u r i n g a n d m o n i t o r i n g t h e G a u n t l e t S e c u r i t y A p p l i a n c e • B a c k i n g u p a n d r e s t o r i n[...]

  • Seite 238

    RuggedRouter  User G uide This menu displays active alerts a nd allows you to change al ert system configuration and alert definitions. Follow th e All Alerts link to s how all a lerts. Follow the s everity lin ks ( Emergen cy .. Debug) or the category links (chassis .. daemon) to to limit the alert view. Note that activ e alerts are volatil e a[...]

  • Seite 239

    Chapter 26 – Maintain ing The Router A l e r t F i l t e r C o n f i g u r a t i o n F i g u r e 2 0 3 : A l e r t F i l t e r C o n f i g u r a t i o n M e n u This menu configures an al ert filter, which defines the forwarder destinat ion for active a lerts ma tching with defined filter l evel. The Forward Destination Type configures the type o[...]

  • Seite 240

    RuggedRouter  User G uide C h a n g e Al e r t D e fi n i t io n Figure 205 : Change Alert Definition Menu This menu allows you to change an existing alert definition entry. The Codepoint is the key part of the alert definition entry and does not allow to be changed. The Category configures w hich category the a lert definition entry belongs to.[...]

  • Seite 241

    Chapter 26 – Maintain ing The Router The Threshold configures the threshold to compa re with the shell comma nd result to see wh ether the condition is true or false. The And Repeats configures how ma ny tim es the condition mu st be true before th e alert is gen erated. The And Unt il configures how m any seconds the condition should be true bef[...]

  • Seite 242

    RuggedRouter  User G uide G a u n t l e t S e c u r i t y RX1100 owners can u se the Gauntlet security ap plian ce to restrict access to critical assets. This section details how to activate Gau ntlet a nd determine cu rrently negotiated sessions . Details and recommen dations on ap plyin g the Gaun tlet s ystem to network ing may be found in te[...]

  • Seite 243

    Chapter 26 – Maintain ing The Router Gauntlet net fw TCP any 10000 The orde r of rules is significant. Rul es inserted before this set will not be protected by Gaun tlet. Any rule a ppea ring after the gauntlet cha in rules will automa tically be ignored. Consult with RuggedCom supp ort for assistanc e. If you wa nt to grant SSH access to the rou[...]

  • Seite 244

    RuggedRouter  User G uide B a c k u p A n d R e s t o r e F i g u r e 2 0 7 : S y s t e m B a c k u p A n d R e s t o r e The Backup And Restore system provides the following fea tures: • A l l c o n f i g u r a t i o n s e t t i n g s a r e s a v e d i n a c o n f i g u r a t i o n a r c h i v e , • A r c h i v e s c a n b e u s e d t o “[...]

  • Seite 245

    Chapter 26 – Maintain ing The Router G e n e r a l C o n f i g u r a t i o n F i g u r e 2 0 8 : G e n e r a l Co n f i g u r a t i o n S e t u p This menu configures the backu p sys tem. The Automatic Nightly Backup fi eld specifies wh en the n ightly backup is scheduled. The automa tic export to a server will sta rt (if enabled) immedia tely af[...]

  • Seite 246

    RuggedRouter  User G uide A r c h i v e H i s t o r y F i g u r e 2 0 9 : A r c h i v e H i s t o r y The Archive History m enu displays current archives, sorted by da te (most r ece nt first). Following the lin k of an a rchives under the Arc hive Name fi eld upload a copy of it. Selecting an un der the Archive Name field and appl ying the Re m[...]

  • Seite 247

    Chapter 26 – Maintain ing The Router The created archive can be immedia tely up loaded if desired by following the “Uploa d A Copy Of This Arc hive..” link. N o t e : I f y o u u s e t h e I n t e r n e t E x p l o r e r w e b b r o w s e r , y o u m u s t “ R i g h t - c l i c k ” t h e l i n k a n d s a v e t h e f i l e m a n u a l l y[...]

  • Seite 248

    RuggedRouter  User G uide The Archive Difference m enu show s the difference between two targets. The first target mu st be an a rchive while the second target can be either another archive or the current configuration. Choose two and only two ta rgets and click the Show Differe nces bu tton. F i g u r e 2 1 5 : A r c h i v e D i f f e r e n c e[...]

  • Seite 249

    Chapter 26 – Maintain ing The Router F i g u r e 2 1 6 : Sh o w D i f f e r e n c e f o r s e l e c t e d f i l e b e tw e e n t w o t a r g e ts The Copy This F ile to Curre nt Configuration button will be p resent wh en the destination a rchive is the Cu rrent Configura tion. It allows u ser to copy the selected file from th e old archive to cu[...]

  • Seite 250

    RuggedRouter  User G uide SNMP V1 and V2 transmit information in clear t ext (which ma y or ma y not be a n issu e depending the facilities the da ta is transmi tted over) and are la cking in the ability to authent icate a us er. SNMP V 3 adds strong authenticati on and encryption . S N M P C o n f i g u r a t i o n M a i n M e n u F i g u r e 2[...]

  • Seite 251

    Chapter 26 – Maintain ing The Router The Client address (Source IP) field sp ecifies the a ddress from which snm pd will send notifications. If the field is blan k, the default behaviour w ill be to trans mit the notification from the IP address of the interface from which the message leaves the router. Snm pd will return to this behavour if the [...]

  • Seite 252

    RuggedRouter  User G uide F i g u r e 2 2 2 : A c c e s s C o nt r o l p a g e , S N M P V 3 The second part of the Access control m enu allows creation an d de letion of V3 users. The User Name field selects the n ame of the new user. The Access fi eld determines whether the comm unity is read-only or read/write. The Minimum Security field sele[...]

  • Seite 253

    Chapter 26 – Maintain ing The Router T r a p C o n f i g u r a t i o n F i g u r e 2 2 3 : T r a p C o n f i g u r a ti o n p a g e , T r a p O p t i o ns The Trap Configuration pa ge man ages SNMP trap destination s. Under Trap Generation Options , you ma y enabl e the generat ion of notifications on auth entication fa ilures or IP i nterface li[...]

  • Seite 254

    RuggedRouter  User G uide The SNMP V3 Trap Destinations p art of the m enu a llows the creation a nd dele tion of V3 trap destina tions. The Type field sp ecifies the exchange used with this destination, eit her V3 tra p or V3 inform. The IP address and Trap Community fields s pecifies the receivers IP address and user na me. The Engine ID param[...]

  • Seite 255

    Chapter 26 – Maintain ing The Router R a d i u s A u t h e n t i c a t i o n The Radius p rotocol described in RFC 2865 provides a mea ns for carrying auth entication, a uthorizat ion, and configuration informa tion between a client (the router) which desires to au thenticate its links and a shared Authen tication Server. Transactions between the[...]

  • Seite 256

    RuggedRouter  User G uide Some u sers set the rrsetup and root accoun t passw ords to diffi cult to gu ess strings that a re uniqu e to each rou ter, then em ploy a comm on p assword for all rou ters in radius. The rout er specific strings are restricted to a very few personn el. A larger set of exp ert us ers are granted the rights to SSH login[...]

  • Seite 257

    Chapter 26 – Maintain ing The Router Ou t g o i n g M a i l F i g u r e 2 2 8 : Ra d i u s A u t h e n t i c a t i o n M a i n M e n u Outgoing Mail is configured from within th e the Maintenance m enu Miscel laneous sub-menu. This menu controls where emai ls originated by the router a re forwarded to. The Forward to Mail Hub field sp ecifies an [...]

  • Seite 258

    RuggedRouter  User G uide C h a s s i s P a r a m e t e r s F i g u r e 2 2 9 : Ch a s s i s P a r a m e t e r s M e nu This menu displays the chas sis temp eratu re an d, if hardware version 2, the voltage levels of chass is power sup plies and a record of the last p ower down tim e. The system will highlight red any out- of-range value. The mo[...]

  • Seite 259

    Chapter 26 – Maintain ing The Router S y s t e m L o g s F i g u r e 2 3 0 : S y s t e m L o g s System logs are records of activities that hav e occurred on the router, sorted into specific cat egories. System logs can be invalu able when debugging configuration changes. As such, m ost of your u se of the logs will be simp ly in viewing them . S[...]

  • Seite 260

    RuggedRouter  User G uide Left unrestricted the logging system would consu me all ava ilable “disk” sp ace, causing the rou ter to fail. The rou ter limi ts the memory u sed by the logging system by storing logs in a volatile (i.e. lost a fter a reboot) file syst em which is lim ited in size. Such a system w ill lose logging information when[...]

  • Seite 261

    Chapter 26 – Maintain ing The Router U p g r a d e S y s t e m F i g u r e 2 3 2 : So f t w a r e U p g r a d e S y s t e m The Software Upgrade system provides the following fea tures: • U p g r a d i n g f r o m e i t h e r H T T P o r F T P s e r v e r s , • U p g r a d e t r a f f i c b a n d w i d t h l i m i t i n g t o p r e v en t d i[...]

  • Seite 262

    RuggedRouter  User G uide Your RuggedRouter softwa re is p rovided in releases of the form rrX.Y.Z. The platform release num ber X changes when n ew hardware platforms are r eleased. The major releas e n umber Y is increased w hen imp ortant new featu res a re added. This is called a “Major” r elease. The m inor release nu mber Z is increase[...]

  • Seite 263

    Chapter 26 – Maintain ing The Router U p g r a d e t o R X 1 1 0 0 F i g u r e 2 3 3 : U p g r a d e t o R X 1 1 0 0 This menu allows you to upgrade you r router. The displa y u sefully provides a description of the cu rrent hardware in th e router inventory. C h a n g e Re p o s i t o r y S e r v e r F i g u r e 2 3 4 : Ch a n g e R e p o s i t [...]

  • Seite 264

    RuggedRouter  User G uide A u t o m a t i c Up g r a d i n g F i g u r e 2 3 5 : Au t o m a t i c U p g r a d e Check the Upgrades enabled field to activate daily u pgrades. Use the Upgr ade Time fields to s elect the time to upgrade. Selecting different ti mes on each rou ter can be used to even out traffic flows in the n etwork. U p g r a d i [...]

  • Seite 265

    Chapter 26 – Maintain ing The Router I n s t a l l i n g A N e w P a c k a g e F i g u r e 2 3 7 : I n s t a l l i n g A N e w P a c ka g e The Install A New Packag es feature uploa ds and installs packa ges to the rout er. Select the From l ocal file option if you have already moved the p ackag e to the router through http, ftp or scp. You ma y [...]

  • Seite 266

    RuggedRouter  User G uide U p l o a d i n g A n d D o w n l o a d i n g F i l e s F i g u r e 2 3 8 : U p l o a d / D o w nl o a d m e n u The Upload/Download Files m enu p rovides a mean s to tran sfer files to a nd from the router. The Download files fr om the specified URLs to this route r p art of the m enu a llows you to have the router dow[...]

  • Seite 267

    Chapt er 27 – Security Considerations C h a p t e r 2 7 – S e c u r i t y C o n s i d e r a t i o n s I n t r o d u c t i o n This chapter describes actions to take to secure the RuggedRouter. S e c u r i t y A c t i o n s 1. C hange the root an d rrsetup p asswords from the rrsetup shell, before a ttaching the router to the network. 2. If Radi[...]

  • Seite 268

    RuggedRouter  User G uide This page intention ally blank 266 RuggedCom[...]

  • Seite 269

    Appendix A – Setting Up A Repos itory A p p e n d i x A – S e t t i n g U p A R e p o s i t o r y The RuggedCom software upgrade m echanism requires a repos itory of softwar e to availabl e. The following instructions detail: • R e q u i r e m e n t s f o r a r e p o s i t o r y s e r v e r , • I n i t i a l s e t u p o f a r e p o s i t o [...]

  • Seite 270

    RuggedRouter  User G uide U p g r a d i n g T h e R e p os i t o r y RuggedRouter releas es are obtained from th e RuggedCom w eb site as ZIP files. Download the ZIP file to you r regula r and/or test releas e directories and unzip them. You ma y delete the original ZIP file if desired. The ZIP file nam e will be in th e form rrX.Y.zip. The majo[...]

  • Seite 271

    Appendix A – Setting Up A Repos itory U p g r a d i n g C o n s i d e r a t i o n s The RuggedRouter offers you the ability to p erform au tomat ic daily u pgrades, sp ecify the download tim e an d limit the down load bandwidth. The se tools automa te the upgrade p rocess and minim ize the imp act of upgrading on the network. When autom atic dail[...]

  • Seite 272

    RuggedRouter  User G uide A p p e n d i x B – D o w n g r a d i n g R o u t e r S o f t w a r e RuggedCom recognizes tha t custom ers m ay need to downgrade router softwar e: • R o u t e r s b e i n g a d d e d t o t h e n et w o r k h a v e m o r e r e c e n t v e r s i o n t h a n t h a t s t a n d a r d i z ed f o r t h e n e t w o r k . [...]

  • Seite 273

    Appendix C – Installing Apa che Web Server On Windows A p p e n d i x C – I n s t a l l i n g A p a c h e Web S e r v e r O n W i n d o w s A number of custom ers ha ve ask ed for advice and instructions on sett ing up a web server on Windows. RuggedCom recom men ds the Apach e web server, becaus e it is secure, robust, easy to install a nd con[...]

  • Seite 274

    RuggedRouter  User G uide Return to the web browser u sed earlier to verify Apa che and refresh the screen. It should now reflect the contents of your RuggedRouter release directory. You s hould now be able to p erform an u pgrade from a router. 272 RuggedCom[...]

  • Seite 275

    Appendix D – Installing IIS Web Se rver On Windows A p p e n d i x D – I n s t a l l i n g I I S We b S e r v e r O n W i n d o w s A number of custom ers ha ve ask ed for advice and instructions on sett ing up an IIS web server on Windows. Begin by identifying a host comp uter that has IIS and its physical and logical location on the n etwork.[...]

  • Seite 276

    RuggedRouter  User G uide A p p e n d i x E – R a d i u s S e r v e r C o n f i g u r a t i o n This section describes how to configure pop ular radius servers to sup ply a Vendor- Specific field, “privilege- level”, which is u sed by Webmin to ass ign assign specific capa bilities to Webmin users on a per u ser basis. Curr ently, the only[...]

  • Seite 277

    Appendix E – Radius Server Configura tion Permission : Grant rem ote a ccess p ermission 3. Double click th e policy nam e you created, In the pop up window, click Edit Profile... button. F i g u r e 2 4 1 : I A S W i nd o w - E d i t R e m o t e A c c e s s P o l i c y 4. In Edit Profile window, Click Add... b utton F i g u r e 2 4 2 : I A S W i[...]

  • Seite 278

    RuggedRouter  User G uide 5. In A dd Attribute window, select Vendor-Specific line, and click Add button. F i g u r e 2 4 3 : I A S W i n d o w – A d d A t t r i b u t e 6. In the Multivalu ed Attribute Information window, click the Add button F i g u r e 2 4 4 : I A S W i nd o w – M u l t i v a l u e d A t t r i b u t e I n f o r m a t i o [...]

  • Seite 279

    Appendix E – Radius Server Configura tion 8. In the Configure VSA (RFC comp liant) win dow, in the vendor-assigned attribute numb er editbox , inpu t 2; in the Attribute format listbox, select String, in the Attribute value editbox, input the desired privilege level (in the a bove case, it is operator, in your ca se, currently you should inp ut r[...]

  • Seite 280

    RuggedRouter  User G uide I n d e x Accounts................................................................................................................................................ root............................................................................................................................. ... ... ... ... ... ... .28 [...]

  • Seite 281

    Index N392 ...................................................................................................................................... ... .. ... 72 N393 ...................................................................................................................................... ... .. ... 72 Signaling type......................[...]

  • Seite 282

    RuggedRouter  User G uide Ethernet Ports................................................................................................................. ... ... .59, 189 LED Pan el .......................................................................................................................... ... ... ... .37 Modem Ports...............[...]

  • Seite 283

    Index On ADSL Interfaces...................................................................................................................... 91 On Native E thernet Interfaces.................................................................................................. ... ..64 Precision Time Protocol Card......................................[...]

  • Seite 284

    RuggedRouter  User G uide Authenticat ion ..................................................................................................................... ... ... .224 Configuring................................................................................................................. ... ... ... ... ... .223 Fundam entals...........[...]