RuggedCom RX1000 инструкция обслуживания

RuggedRouter  RX1000/RX1100 User Guide RuggedCom Inc. 30 Whitmore Road, Woodbridge, Ontario, C ana da L4L 7Z4 Web: www.rugge dcom.com Tel: (905) 856-5288 Fax: (905) 856-1995 Toll Free: (888) 264-0006[...]

R U G G E D R O U T E R  U S E R G U I D E F O R U S E W I T H R X 1 00 0 / R X 1 1 00 P R O D U C T S V e r s i o n 1 . 1 2 . 6 – M a y 1 4 t h , 2 0 0 8 R u g g e d C o m 30 W h i t m o r e R o a d W o o d b r i d g e , O n t a r i o C a n a d a L 4 L 7 Z 4 T e l : ( 9 0 5 ) 8 5 6 - 5 28 8 F a x : ( 9 0 5 ) 8 5 6 - 1 9 9 5 T o l l F r e e : [...]

About this User Guide A b o u t t h i s U s e r G u i d e This guide is concerned with aiding the u ser in the configuration a nd operation of the RuggedRouter  u sing the RuggedCom comm and line, setup menu an d web man agement interfaces. Sp ecifically, this guide details asp ects of: • A c c e s s i n g t h e U s e r I n t e r f a c e s •[...]

RuggedRouter  User G uide D o c u m e n t C o n v e n t i o n s This publication uses the following conventions: N o t e : M e a n s r e a d e r t a k e n o te . N o t e s c o n t a i n h e l p f u l s u g g e s t i o n s o r r e f e r e n c e s t o m a t e r i a l s n o t c o n t a i n e d i n t h i s g u i d e . Helpful Hint This type of note [...]

About this User Guide 10. All further configuration is accomp lished through the web man agement interfa ce. Attach the configuring host to one of the Ethern et ports configured above. Point your w eb browser at the address for that port, u se https a nd specify a port number of 10000, e.g. https://192.168.1.1:1 0000 (or otherwise if configured in [...]

RuggedRouter  User G uide 22. If your router is equip ped with an embedded mod em, the Networking m enu, Modem sub-m enu w ill a llow you to configure it with PPP or in coming console connections. See the chapt er “Configuring PPP And Modem” for more details. 23. If your router is equip ped with Serial Inte rfaces, the Servers menu, Serial P[...]

About this User Guide 35. When you r routers configuration is s table, it is r ecommen ded that the configuration should be up loaded from the rout er and stored as a backup . The Maintenance m enu Backu p And Restore su b-menu will be u seful. 36. Should you n eed to transfer files to or from the router, the Maintenance m enu Upload/Down load F il[...]

RuggedRouter  User G uide T a b l e O f C o n t e n t s About this User Gu ide................................................................................................ ... ... ... ... ... ... ... .. ... .1 Applica ble Firmw are R evision........................................................................................... .. ... ... [...]

Table Of Contents Bootup And Shutdown .............................................................................................................. ... ... 45 Change Password Com ma nd ................................................................................... ... ... ... ... ... ... .. .46 Scheduled Comma nds .............................[...]

RuggedRouter  User G uide Strategy For Creatin g Interfaces............................................................................ ... ... ... ... ... .. .69 Naming Of Logical Interfaces.................................................................................................. 70 Editing A T1/E1 Interface ............................[...]

Table Of Contents Introduction............................................................................................................................. ... ... ... 91 ADSL Fundamenta ls................................................................................................................. ... 91 PPPoE/Bridged Mode Fundamenta ls........[...]

RuggedRouter  User G uide Virtual Priva te Networkin g To A DMZ.................................................................................114 Firewal l Main Menu.............................................................................................. ... ... .. ... ... ... ... ... .114 Network Zones....................................[...]

Table Of Contents Router- ID ............................................................................................................ ... .. ... ... ... ... .. 143 Hello Interval a nd Dead Inte rval........................................................................................ ... .143 Active/Passiv e Interface Defau lt................[...]

RuggedRouter  User G uide VRRP Main Menu.................................................................................................. ... ... ... .. ... ... ... ... 168 VRRP Configura tion............................................................................................................... ... 168 Editing A VRRP Instance...........[...]

Table Of Contents Message Pac ketiza tion................................................................................................ .. ... ... ... 191 Use of Turnaround Delays..................................................................................... .. ... ... ... ... .. 192 Serial Protocols Ma in Menu..............................[...]

RuggedRouter  User G uide Viewing The GPS Status............................................................................. ... ... ... ... ... ... ... .. ... ... .222 Viewing The GPS Log ..................................................................................................... ... .. ... .222 Chapt er 23 – Configuring SSH .......[...]

Table Of Contents Alert Menu.................................................................................................................. ... ... ... ... .. .240 Alert Configuration....................................................................................................... ... ... ... .. ..241 Alert Filter Configuration ............[...]

RuggedRouter  User G uide Setting Up The Routers............................................................................................................ .. ... .275 An Alternate Approach................................................................................................ ... ... ... ... .. 275 Upgrading Considerations ............[...]

Table Of Fig ures T a b l e O f F i g u r e s Figure 1: Ru ggedRouter Setup Main M enu....................................................................................... ..29 Figure 2: Ru ggedRouter Setup Password Chan ge Menu........................................ ... ... ... ... .. ... ... ... ... .. 30 Figure 3: Ru ggedRouter Interfaces Set[...]

RuggedRouter  User G uide Figure 26: Scheduled Com mands Dis playing a Comm and....................................................... ... ... ... .47 Figure 27: Webmin Scheduled Cron Jobs............................................................................................48 Figure 28: Cr eating a Cron Job.................................[...]

Table Of Fig ures Figure 53: T1/E1 Network Interfaces After Interface Creat ion..................................................... ... ... 70 Figure 54: Edit T1 Inte rface.......................................................................................................... ... ... .71 Figure 55: Edit Logical Interface (Frame Relay) ..........[...]

RuggedRouter  User G uide Figure 80: ADSL Link Statistics......................................................................................................... .96 Figure 81: Modem Interface........................................................................................ ... ... ... ... .. ... ... ... .98 Figure 82: Edit Modem Configur[...]

Table Of Fig ures Figure 107: Server Configuration...................................................................................... ... ... .. ... ... .. 130 Figure 108: Show Public Key ................................................................................................. ... ... ... .. 131 Figure 109: Preshared Keys ...............[...]

RuggedRouter  User G uide Figure 134: Link Backup Status................................................................................ .. ... ... ... ... ... ... ... . 162 Figure 135: Test Link Backup ...................................................................................... ... ... ... .. ... ... ... .162 Figure 136: VRRP Examp le[...]

Table Of Fig ures Figure 161: Ra w Socket Menu.................................................................................. ... .. ... ... ... ... ... ... .194 Figure 162: Serial Protocols Statistics Menu................................................................................ ... .. 195 Figure 163: Serial Protocols Trace Menu..........[...]

RuggedRouter  User G uide Figure 188: IRIGB/IEEE1588 General Configuration m enu...................................... .. ... ... ... ... ... ... .230 Figure 189: IRIGB Configuration menu................................................................................. ... ... .. ..231 Figure 190: IEEE1588 Configura tion Menu.....................[...]

Table Of Fig ures Figure 215: Archive D iffere nces List........................................................................... .. ... ... ... ... ... ... .251 Figure 216: Show D iffere nce for selected file between two targets.......................................... ... ... .. 252 Figure 217: SNMP Main Configura tion page....................[...]

RuggedRouter  User G uide Figure 242: IAS Window - Edit Profile................................................................................ ... .. ... ... .. 282 Figure 243: IAS Window – A dd Attribute...................................................................................... ... 283 Figure 244: IAS Window – Multivalued Attrib[...]

Chapter 1 – Setting Up And Administering The Router C h a p t e r 1 – S e t t i n g U p A n d A d m i n i s t e r i n g T h e R o u t e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th the RuggedCom Serial Cons ole interface, the RuggedRouter  Setup script and signing on to the Web interface. This chapter describes the f[...]

RuggedRouter  User G uide End Backup Server, VPN Serve r, NFS, OS PF/RIP p rotocol and firewall) are disabled by de fault. A c c e s s i n g T h e R u g g e d R o u t e r  C o m m an d P r o m p t F r o m th e C o n s o l e P o r t Attach a terminal (or PC running termin al emu la tion softwar e) to the RS232 port on the rear of the chassis. [...]

Chapter 1 – Setting Up And Administering The Router F i g u r e 2 : R u g g e d R o u t e r S e t u p P a s s w o r d C h a n g e M e nu C o n fi gu r i n g I P A d d r e s s In f o r m a t i o n The Change Port IP Address comm and configures port IP addresses and gatewa ys. F i g u r e 3 : R u g g e d R o u t e r I n t e r f a c e s S e t u p M [...]

RuggedRouter  User G uide F i g u r e 5 : R a d i u s S e r v e r C o n f i g u r a t i o n me n u The Hostname/IP an d Port Number fi elds configures the server loca tion. The Shared Secret field configures the unique pas sword used by this server. The time Timeout field selects the maxima l tim e to wait before trying the next server. The entr[...]

Chapter 1 – Setting Up And Administering The Router E n a b l i n g A n d D i s a b l i n g T h e G a u n t l e t S e c u r i t y A p p l i a n c e The Gauntlet security Appl iance requ ires a pas s phrase u nique to your network. This menu will configure it. F i g u r e 6 : G a u n t l e t S e t u p M e n u C o n fi gu r i n g T h e D a t e , T [...]

RuggedRouter  User G uide D i s p l a y i n g H a r d w a r e In f o r m a t i o n The Displa y Hardware Information comma nd describes commission ed hardware. F i g u r e 8 : R u g g e d R o u t e r H a r d w a r e I n f o r m a t i o n M e n u 32 RuggedCom[...]

Chapter 1 – Setting Up And Administering The Router R e s t o r i n g A C o n f i g u r a t i o n The Restore A Previous Configuration comma nd provides a m eans to restore a previous ly ta ken snapshot of the configuration of the router. N o t e: T h e r o u t e r w i l l r e b o o t im m e d i a t e l y a ft e r r e s t o r i n g c o n f i g u [...]

RuggedRouter  User G uide T h e R u g g e d R o u t e r  W e b I n t e r f a c e The RuggedCom Web interface is provided by an enhanced version of the p opula r Webmin interface. U s i n g a We b B r o w s e r t o A c c e s s t h e W e b I n t e r f a c e Start a w eb browser session and open a connection to the router by entering a URL that [...]

Chapter 1 – Setting Up And Administering The Router The rightmost or configuration frame pr esents the configura tion for the currently selected subs ystem, or in the cas e of signing-on, the home pa ge window. The hom e page win dow presents an annota ted view of the front of the chassis a s well as a numb er of importan t system p aram eters. T[...]

RuggedRouter  User G uide • C o n f i g u r e t h e s i g n - o n p a s s w o r d , • S p e c i f y s e s s i o n t i m e o u t s , • R e s t r i c t t h e S u b n e t o f I P a d d r e s s e s t h a t c a n l o g i n , • Configure and view Webmin event logs, The System Menu provides the a bility to: • C h a n g e t h e r o u t e r p a[...]

Chapter 1 – Setting Up And Administering The Router The LED status Pan el provides the console port, indicat es the sta tus of hardware/softwa re an d can initiate a controlled reboot. The LEDs are organized into three p rimary groups; the p ort group, GPS/PPP group and the Alarm/ Power Suppl y group. The displa y pos sibilities a re as follows: [...]

RuggedRouter  User G uide Chapte r 2 – W ebmin Conf iguration I n t r o d u c t i o n This chapter fam iliariz es th e user wi th configuring the router through the Webmin menu and describes the following proc edures: • C o n f i g u r i n g t h e I P A d d r e s s a n d S u b n e t M a s k • C o n f i g u r i n g t h e G a t e w a y A d d[...]

Chapt er 2 – Webmin Configura tion If your router is being used on a complet ely privat e networ k, or IP access control is being provided by the firewall you m ay leave IP Access Control disabled. Select the Allow from all addresse s field and Save. If you wish to restrict access to a single address or subnet, select the Only allow from listed a[...]

RuggedRouter  User G uide The Web managemen t p ackage provides context sensitive help in each of its menus. When a help link is selected th e router instructs the brows er to open the help text from a h elp server. In this wa y the router does not wa ste la rge amou nts of disk spa ce storing help text a nd network bandwidth sending large web p[...]

Chapt er 2 – Webmin Configura tion A u t h e n t i c a t i o n F i g u r e 2 0 : W e b m i n Co n f i g u r a t i o n M e n u , A u th e n t i c a t i o n This menu allows you to configure what W ebmin will do wh en a num ber of failed logins from the sam e IP address occur. If the Enab le password time outs field is selected, the host will be bl[...]

RuggedRouter  User G uide W e b m i n E v e n t s L o g F i g u r e 2 1 : W e b m i n E v e n t s L o g This menu allows you to search the W ebmin log for changes made by you rself or other admin istrators. 42 RuggedCom[...]

Chapt er 2 – Webmin Configura tion This page intentional ly blank RuggedCom 43[...]

RuggedRouter  User G uide C h a p t e r 3 – C o n f i g u r i n g T h e S y s t e m I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g a n d d i s a b l i n g p r o c e s s e s s u c h a s S S H a n d W e b M a n a g e m e n t • C h a n g i n g T h e P a s s w o r d • S h u t t i n g d o w n a n d R e [...]

Chapt er 3 – Configuring The System The second part of the m enu allows you to program sp ecific actions a t boot time. The script wil l be run after all regular boot actions have com pleted. F i g u r e 2 3 : B o o t u p a n d S h u t d o w n , P a r t 2 The actions ma y be a series of comma nds that ca n be executed at the comma nd line. Each e[...]

RuggedRouter  User G uide Begin by selecting the tim e and date you w ish to run the comma nd at us ing the Run on date and Run at time fields. Use the Run in direc tory field to enter a directory to run the com man d in, or simply use “/”. Finally, enter the comma nd to execute in the Commands to execute field. Note that the command w ill r[...]

Chapt er 3 – Configuring The System S c h e d u l e d C r o n J o b s A Cron job is a combination of a comm and to run , and a definition of the times a t which to run it. The Scheduled Cron Jobs allows you to create, delete and edit these jobs. F i g u r e 2 7 : W e b m i n Sc he d u l e d C r o n J o b s Initially, there will be no scheduled jo[...]

RuggedRouter  User G uide Follow th e link of a specific job in order to delete the job, e dit it, or test the comm and part of the job by running it immediat ely. If you have multip le jobs, the arrows in the Move column w ill a lter the order in which they are pr esented. S y s t e m H o s t n a m e F i g u r e 3 0 : S y s t e m H o s t n a me[...]

Chapt er 4 – Configuring Networking C h a p t e r 4 – C o n f i g u r i n g N e t w o r k i n g I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g R o u t i n g a n d G a t e w a y s • C o n f i g u r i n g D N S • E n t e r i n g h o s t a d d r e s s e s • C o n f i g u r i n g a p a i r o f E[...]

RuggedRouter  User G uide C o r e S e t t i n g s F i g u r e 3 3 : C o r e N e t w o r k i n g S e t ti n g s This menu allows you to configure core networkin g settings. The IPV6 Support field determines where IPV6 interfaces are created and supp orted at boot time. Set this op tion to yes if you need these interfaces. Disabling these interfac[...]

Chapt er 4 – Configuring Networking This menu allows you to configure a dumm y interface. Normall y the router is reachable on a ny of its interfac e addresses, whether the in terface is active or not. When OSPF a nd link detection is u sed, inactive in terfaces a re not advertised to the network and thus not reachabl e. A dumm y in terface is a [...]

RuggedRouter  User G uide The Network/Host and Netmask fields describe the remote network the s tatic route will reach. If the netmas k fi eld is not entered (or a netm ask of 255.255.255 is entered) the rou ting will define a host route. An y other n etmask will define a network route. If the network field is cl eared the rout e will be deleted[...]

Chapt er 4 – Configuring Networking S t a t i c M u l ti c a s t R o u t i n g F i g u r e 3 6 : S t a t i c M u l t i c a s t R o u t i n g This menu allows you to configure static mu lticas t routing. The Configured Static Multic ast Routes table shows configured multicast routes. New routings ma y be added by completing th e bottom row of the [...]

RuggedRouter  User G uide D N S C l i e n t F i g u r e 3 7 : D N S C l i e n t This menu allows you to display and configure various DNS client fields. The Resolution Order s elector determin es the order of sources for resolving domain nam es into IP addresses. The Hosts file /etc/hosts can be pop ulat ed with frequen tly used, but un changing[...]

Chapt er 4 – Configuring Networking The backup is “end to end” because conn ectivity is determined by th e ava ilability of an interface on the target system, and not a local link. In the above figure, interface w1ppp acts as the p rimary interface and eth1 acts as the s econdary interface. The router tes ts the prim ary pa th by probing 192.[...]

RuggedRouter  User G uide C o n fi g u r i n g E n d T o E n d Ba c k u p F i g u r e 4 0 : E n d T o E n d B a c k u p This menu allows you to display and configure end to end backup. In orde r to start end to end backup a t each an d every boot, you must enable it via the System folder, Bootup And Shutdown menu . The m enu will remin d you if [...]

Chapter 5 – Configuring Ethernet Interfaces C h a p t e r 5 – C o n f i g u r i n g E t h e r n e t I n t e r f a c e s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • R e a d i n g t h e E t h e r n e t L E D s • C o n f i g u r i n g E t h e r n e t N e t w o r k I n t e r f a c e s • C o n f i g u r i n g V L A N[...]

RuggedRouter  User G uide The last 2-bytes of the VLAN tag contain the following informat ion: the firs t 3-bits are a User Priority Fi eld that ma y be u sed to assign a priority level to the E thernet frame. The next 1-bit is a Canonical Format Indicator (CFI) used in Ethernet fram es to indicate the presence of a Routin g Information Field (R[...]

Chapter 5 – Configuring Ethernet Interfaces E t h e r n e t F i g u r e 4 1 : E t h e r n e t M e n u This menu allows you to configure Ethernet interface param eters as well as displa y the routes and status of all n etwork int erfaces. Select the Ethernet Interfaces icon to configure E thernet interfaces. The Network Interfaces m enu l ets you [...]

RuggedRouter  User G uide The Network Configura tion menu Apply Configu ration button a ppli es p erman ent changes and restart E thernet networking. If only tem porar y changes hav e been made, the p ermanen t configuration wil l be re-app lied. In either table, edit the desired interface by clicking on its link under the Name column. E d i t i[...]

Chapter 5 – Configuring Ethernet Interfaces V i r t u a l I n t e r f a c e s Use virtua l interfaces when you hav e an Eth ernet p ort that ha s multip le "real" IP addresses assigned to it, e.g. as with a p ort provided by an an Internet Service Provider. F i g u r e 4 4 : C r e a t i ng a n V i r t u a l I n t e r f a c e The only ne[...]

RuggedRouter  User G uide This menu allows you to make p erman ent changes to int erfaces and to imm ediatel y app ly thos e changes if desired. The Save button will save changes to the permanent configuration . The Netmask , Broadcast , MTU, Virtual Interfaces, Prox y ARP and Media Type controls are as described ab ove. The IP Address fields al[...]

Chapter 5 – Configuring Ethernet Interfaces E d i t PP P o E I n t e r f a c e F i g u r e 4 8 : E d i t i n g a P P P o E I n t e r f a c e This menus allows you to edit a PPPoE interface. The PPPoE Username field determin es th e userna me to use when connecting to the PPPoE server as sp ecified by your provider. The Password field determines t[...]

RuggedRouter  User G uide P P P L o g s F i g u r e 4 9 : D i s p l a y P P P L o g s This menu displays the nativ e Ethernet and internal ADSL interface PPPoE connection messa ges. This is main ly useful when trying to debug a PPP connection problem. C u r r e n t R o u t e s & I n t e r f a c e T a b l e The table provided by this comm and[...]

Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 C h a p t e r 6 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d T1/E1 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • F r a m e R e l a y a n d P P P T e r m i n o l o g y a n d I s s u e s • C o n f i g u r i n g F r a m e R e l a y a n d P P P L i n k s •[...]

RuggedRouter  User G uide Unlike PPP, a Frame Relay link can provide mu ltip le (u p to 990) connections. Each connection is identified by a Data Link Connection Identifier (DLCI) and must ma tch at the D CE an d DT E. The us e of multip le connections can su pport m eshed n etwork interconnections and disaster recovery. L o c a t i o n O f I n [...]

Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 N e t w o r k I n t e r f a c e s F i g u r e 5 1 : T 1 / E1 Ne t w o r k I n t e r f a c e s I n i t i a l C o nf i g u r a t i o n This menu allows you to display and configure T1/E1 Trunk pa rameters , Chann els and the logical interfaces that ru n on them. A table is pr esented for [...]

RuggedRouter  User G uide After assigning the first DLCI, you m ay revisit the interface throu gh the link under the Name field and add additional DLCIs. Once a ll channels ha ve been a ssigned, the “Assign” links will no longer app ear, a s shown below. Note that any of the Fram e Rela y interfaces on a channel (in this ca se w1c4fr16 and w[...]

Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 This menu allows you to display and configure T1 or E1 Trunk para meters. By default th e interface is set for T1 operation. The Convert this interface to E1 link will set the int erface for E1 op eration a nd allow you to configure its settings. If logic al int erfaces us e a channel above 24 an[...]

RuggedRouter  User G uide E d i t i n g A L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) F i g u r e 5 5 : E d i t L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) This menu allows you to configure Frame Relay link and logical interface fi elds. F r a m e R e l a y L i n k P a r a m e t e r s The first table pr esents the link pa[...]

Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y D L C I s The second table provides a listing of all DLCIs available on the chann el. Only the DLCI selected from the main m enu can be edited, although an other DLCI can be added by fol lowing the Add ano ther D LCI to this channel link. The DLCI Number refers to the Data Lin[...]

RuggedRouter  User G uide T 1 / E 1 S t a t i s t i c s When at lea st one logical interface is configured, T1/E1 Link and logical interface statistics will be a vailable. These statistics are ava ilable from lin ks on the T1/E1 WAN Int erfaces m enu. Link Statistics are p rovided through the “View Link Statistics” link a t the bottom of eac[...]

Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y I n t e r f a c e S t a t i s t i c s F i g u r e 5 8 : F r a m e R e l a y St a t i s t i c s Note that the Frame Rel ay Trunk Statis tics and Frame Rel ay Trunk Communications Err ors ta bles are common to all Fra me Rela y DLCIs on the trunk. RuggedCom 73[...]

RuggedRouter  User G uide P P P In t e r f a c e S t a t i s t i c s F i g u r e 5 9 : P P P L i n k S t a t i s t i c s 74 RuggedCom[...]

Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 L o o p b a c k When at lea st one logical interface is configured, a T1/E1 Loopback tests can be performed. This m enu ca n be reached from a lin k on the T1/E 1 WAN Interfaces menu . F i g u r e 6 0 : T 1 / E 1 L o o p b a c k M e n u The loopback test provides a means to test th e di[...]

RuggedRouter  User G uide Running a loop test on an active interface will immediatel y cause it to go down. The loop test autom atica lly initializes the trunk after compl eting the t est. C u r r e n t R o u t e s & I n t e r f a c e T a b l e The table provided by this comm and is a s described i n the N etworking m enu, Network Utilities [...]

Chapter 7 – Configuring Frame Relay/ PPP And T3 C h a p t e r 7 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d T 3 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g F r a m e R e l a y a n d P P P L i n k s • V i ew i n g s t a t u s a n d s t a t i s t i c s • U p g r a d i n g F i r m[...]

RuggedRouter  User G uide T 3 C o n f i g u r a t i o n F i g u r e 6 2 : T 3 T r u n k s A n d I n t e r f a c e s This menu allows you to display and configure T3 Trunks as well as displa y the routes a nd status of the network interfaces. T 3 N e t w o r k I n t e r f a c e s F i g u r e 6 3 : T 3 N e t w o r k I n t e r f a c e s I n i t i a[...]

Chapter 7 – Configuring Frame Relay/ PPP And T3 E d i t i n g A T 3 I n t e r f a c e F i g u r e 6 5 : E d i t T 3 I nt e r f a c e This menu allows you to display and configure T3 Trunk param eters. The Framing field determines the framin g format u sed. Your line p rovider will indicate the correct format. The Line Dec oding field reflects th [...]

RuggedRouter  User G uide F i g u r e 6 7 : E d i t L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (Frame Relay) s ection of the Configuring F rame Relay/PPP And T1/E1 chapter. E d i t i n g A L o g i c a l I n t e r f a c e ( P P P[...]

Chapter 7 – Configuring Frame Relay/ PPP And T3 U p g r a d i n g S o f t w a r e For some customers, access to rem ote sites in a ccomplished solely by a T3 connection. Usuall y a software upgrade will stop the system being upgraded, perform the upgrade a nd then restart it. If T3 port was upgraded in this wa y, the upgrade wou ld fail as the T3[...]

RuggedRouter  User G uide This page intention ally blank 82 RuggedCom[...]

Chapter 8 – Configuring Frame Relay/ PPP And DDS C h a p t e r 8 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d D D S I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g F r a m e R e l a y a n d P P P L i n k s • V i ew i n g s t a t u s a n d s t a t i s t i c s • U p g r a d i n g s o [...]

RuggedRouter  User G uide D D S C o n fi g u r a t i o n F i g u r e 6 9 : D D S T r u n k s A n d I n t e r f a c e s This menu allows you to display and configure DDS Trunks. The Current Rou tes menu will display the rout es and status of the n etwork int erfaces. D D S N e t w o r k I n t e r f a c e s F i g u r e 7 0 : D D S W A N I n t e r [...]

Chapter 8 – Configuring Frame Relay/ PPP And DDS N a m in g O f L o g i c a l I n t e r fa c e s Webmin na mes the logical interfaces for you (but a llows you to provide a description). All int erfaces start w ith a “w” to identify th em as wan in terfaces, followed by the in terface nu mber. The next part of the identifier is eith er “ppp [...]

RuggedRouter  User G uide E d i t i n g A L o g i c a l I n t e r f a c e ( P P P ) F i g u r e 7 4 : E d i t L o g i c a l I n t e r fa c e ( P P P ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (PPP) section of the p revious chap ter. D D S S t a t i s t i c s When at lea st one logi[...]

Chapter 8 – Configuring Frame Relay/ PPP And DDS F r a m e R e l a y A n d P P P I n t e r f a c e S t a t i s t i c s Fram e Rela y And PPP Interface Statis tics are as described i n the Configuring F rame Relay/PPP And T1/E1 chapter. D D S L o o p b a c k When at lea st one logical interface is configured and that interface is active, a DDS Loo[...]

RuggedRouter  User G uide This page intention ally blank 88 RuggedCom[...]

Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL C h a p t e r 9 – C o n f i g u r i n g P P P o E / B r i d g e d M o d e O n A D S L I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g P P P o E a n d B r i d g e d M o d e L i n k s • V i ew i n g s t a t u s A D S L F un da m e n t a l s An ADS[...]

RuggedRouter  User G uide A u t h e n t i c a t i o n , A d d r e s s e s a n d D N S S e r v e r s PPP a uthentica tion util izes PAP or CHAP. Your ISP will provide you w ith a user-ID and passw ord which you wi ll enter in the GUI. The authentica tion p rocess will assign a local IP address and addresses of the ISPs DNS servers to the router. [...]

Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL TX (Red) indic ates w hen data is being transmitted ov er DSL. RX (Red) indicates when data is being received over DSL. While connecting the LED s are fla shing sequential ly. The RuggedRouter also in dicates informat ion about ADSL ports on th e LED Pan el. A pair of LE Ds will indicate traffic[...]

RuggedRouter  User G uide This menu allows you to display and configure logical interface fi elds for PPPoE and to convert the in terface to Bridged Mode . By default, in terfaces ar e created with PPPoE. If you wan t the interfac e to be Bridge d Mode, click on the Convert this interface t o bridged link. The Descri ption field atta ches a desc[...]

Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL The Descri ption field atta ches a description to the logical interface viewable from the network interfaces m enu. The VPI field determines the VPI nu mber the connection uses. The defau lt of 0 is correct for most providers. The Attempt ATM Autoconfigur ation op tion caus es the rout er to att[...]

RuggedRouter  User G uide When at lea st one logical interface is configured, ADSL Link sta tistics wi ll be availabl e. These sta tistics are a vailable from links on the DDS WAN I nterfaces menu . The Local S NR Ratio is an effective indicator of line qu ality. SNR values a bove 40 db co rrespond to excellent line qu ality while values below 1[...]

Chapter 10 – Configuring PPP an d Modem C h a p t e r 1 0 – C o n f i g u r i n g P P P a n d M o d e m I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g P P P C l i e n t • C o n f i g u r i n g P P P S e r v e r • C o n f i g u r i n g D i a l i n c o n s o l e • V i ew i n g s t a t u s M o [...]

RuggedRouter  User G uide M o d e m M a i n M e n u F i g u r e 8 1 : M o d e m I n t e r f a c e This menu allows you to display and configure the modem interface. M o d e m C o n fi gu r a t i o n F i g u r e 8 2 : E d i t M o d e m C o n f i g u r a ti o n This menu allows you to configure the mod em settings a nd features. The Dial-in consol[...]

Chapter 10 – Configuring PPP an d Modem Rings before answer con trols how man y tim es to let the m odem ring be fore answ ering the call, if Dial- in console or PPP Server is ena bled. Additio nal Modem AT Init Codes allows extra AT code s to be entered if requ ired. Permitted codes are: Blind dial X0 - Ignore dialtone/busy signal. Blind dial. X[...]

RuggedRouter  User G uide M o d e m P P P C l i e n t Co n n e c t i o n s F i g u r e 8 3 : C o nf i g u r e M o de m P P P C l i e n t To edit an existing connection, click the 'Edit' link for that connection. To cre ate a n ew connection click 'Add ne w' lin k. To have the rout er au tomatical ly dial a connection at boot [...]

Chapter 10 – Configuring PPP an d Modem M o d e m P P P S e r v e r F i g u r e 8 5 : C o n f i g u r e M o d e m P P P S e r v e r The Server I P address field controls which IP the router will u se for the PPP connection. The Client IP address field controls which IP to assign the to remote system w hich it connects. The Client Nameserver field[...]

RuggedRouter  User G uide This page shows the latest log entries for incom ing calls. This is mainl y u seful when trying to debug a problem w ith establishin g incoming connections. M o d e m P P P L o g s F i g u r e 8 7 : P P P L o g s This page shows the PPP logs. This is ma inly useful when try ing to debug a PPP connection problem. 100 Rug[...]

Chapter 10 – Configuring PPP an d Modem M o d e m P P P C o n n e c t i o n L o g s F i g u r e 8 8 : P P P C o n n e c ti o n L o g s This page shows a list of PPP connections. It shows who conn ected, when they connected and disconnected, the connection sp eed, and session traffic. C u r r e n t R o u t e s & I n t e r f a c e T a b l e The[...]

RuggedRouter  User G uide This page intention ally blank 102 RuggedCom[...]

Chapter 11 – Configuring The Firewall C h a p t e r 1 1 – C o n f i g u r i n g T h e F i r e w a l l I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g Th e F i r e w a l l • E l e m e n t s o f F i r e w a l l d e s i g n • H o w t o c o n f i g u r e t h e F i r e w a l l • C h [...]

RuggedRouter  User G uide The netfilter s ystem us es rulesets , collections of packet class ification rules that determine the ou tcome of examination of a sp ecific packet. The rul es are defined by iptables , a generic table stru cture syn tax and utility p rogram for the configuration an d control of netfilter. In practice an ip tables ru le[...]

Chapter 11 – Configuring The Firewall P o r t F o r w a r d i n g Port forwarding (also known a s redirection) allows traffic coming from the Internet to be sent to a hos t behind the NAT gateway. Previous examples ha ve described the NAT process when connections ar e made from the intran et to the Internet. In those exampl es, addresses and port[...]

RuggedRouter  User G uide 7) If your hosts mus t accept sessions from the Internet configure the rules file to supp ort Destination Network a ddress Tra nslation (DNAT ). Which hosts need to accept conn ections, from whom and on which p orts? 8) Configure the rul es file to override the default policies. Have external connections been limi ted t[...]

Chapter 11 – Configuring The Firewall N o t e : I n o r d e r t o i m p r o v e s e c u r i t y t h e r o u t e r w i l l c r e a t e a z o n e “ u n u s d ” a n d un u s e d i n t e r f a c e s t o t h i s z o n e w h e n S h o r e w a l l s t a r t s . A p o l i c y i s a l s o i n s t a l l e d t h a t b l o c k s a c c e s s f r o m “ u[...]

RuggedRouter  User G uide Note that a cli ent on the Internet that is p robing the RuggedRouter's TCP/UDP ports will receive no respon ses an d will not be able to detect th e presence of the rout er. A host in the loca l network, on the other hand, will fail to connect to the router but wi ll receive a notification. Note that order of poli[...]

Chapter 11 – Configuring The Firewall 2) In this SNA T rule a static address of 66.11.180.161 is acqu ired from the ISP. Traffic f rom the subnet han dled by eth2 should be translated to 66.11.180.161 as it sent to the Internet over ppp . The + a t the end of “pp p+” causes Shorewa ll to match an y pp p int erface. 3) This example is mu ch th[...]

RuggedRouter  User G uide Source-Port The tcp/udp p ort the connection originated from. Original- Destination-IP The destination IP address in the connection requ est a s it was received by the firewa ll. Rate- Limit A specification which allows the ra te at which connections are made to be lim ited. User-Group A method of limiting outbound traf[...]

Chapter 11 – Configuring The Firewall IPSe c traffic arriving a t the firewal l is directed to op enswan, th e IPSec daemon. Opens wan th en decrypts the traffic and forwards it back to shor ewall on th e assigned ipsecX in terface. You w ill also need a rule to allow traffic to enter from this interface. For exam pl e, if opensw an creates inter[...]

RuggedRouter  User G uide F i r e w a l l M a i n M e n u F i g u r e 8 9 : S t a r t i n g S h o r e w a l l F i r e w a l l M e n u The above figure shows th e firewall menu prior to configuration. Configure the firewa ll through the provided menu s. The “Check Firewal l” button can be selected aft er each m enu configura tion to check th [...]

Chapter 11 – Configuring The Firewall F i g u r e 9 0 : S ho r e w a l l F i r e w a l l M e n u The “Apply Configuration” button mus t be us ed after ma king configuration changes. It is recommend ed that the “Ch eck Firewa ll” bu tton be used first to verify that an y changes made a re valid. The “Refresh Configuration ” button can [...]

RuggedRouter  User G uide N e t w o r k Z o n e s F i g u r e 9 1 : F i r e w a l l N e t w o r k Z o n e s This menu allows you to add, del ete and configure zones. Add a new zone by selecting the “Add a new n etwork zon e” lin k or by clicking on the a dd-abo ve or add- below imag es in the Add field. The Zone Type field controls the typ e[...]

Chapter 11 – Configuring The Firewall This menu allows you to add, del ete and configure network interfaces. Add a new interface by s electing the “Add a new n etwork int erface” lin k or by clicking on the add-above or add- below imag es in the Add field. Reorder the interfaces by clicking on the arrows u nder the Move field. Clicking on a l[...]

RuggedRouter  User G uide The norfc1918 option cau ses p ackets arriving on this interface and that hav e a source or destination address that is reserved in RFC 1918 to be dropped after being optionall y logged. The nobogons option cau ses p ackets arriving on this interface that have a sou rce address reserved by the IANA o r by other RFCs (ot[...]

Chapter 11 – Configuring The Firewall D e f a u l t P o l i c i e s F i g u r e 9 5 : F i r e w a l l D e fa u l t P o l i c i e s This menu allows you to add, del ete and configure default policies. Add a new policy by selecting the “Add a new defau lt polic y” link or by clicking on the add-above or add-be low ima ges in th e Add field. Reo[...]

RuggedRouter  User G uide This menu allows you to add, del ete and configure masqu erading and SNAT rules. Add a new rule by s electing the “Add a new ma squ erading rule” link or by clicking on the add-above or add-be low im ages in the Add field. Reorder the policies by clicking on the arrows under the Move fi eld. Clicking on a lin k un d[...]

Chapter 11 – Configuring The Firewall The following fields describe the information to match against the in coming connection request in order to app ly this rule. The Action field specifies the final action of the rule. The and log to syslog fi eld determines whether logging will take place and at which logging level. The Source zone field speci[...]

RuggedRouter  User G uide This menu allows you to add, del ete and static N AT translations. Add a new translation s by selecting th e “Add a new static NAT entry” link or by clicking on the add-above or add- below imag es in the Add field. Reorder the transla tions by clicking on the arrows u nder the Move field. Clicking on a lin k un der [...]

Chapter 11 – Configuring The Firewall This menu allows you to control which addresses the firewa ll will a ccept connections from after it has been stop ped. Add a new trans lations by s electing the “Add a new stopp ed address” link or by clicking on th e add-above or add- below images in the Add field. Reorder the translation s by clicking [...]

RuggedRouter  User G uide This page intention ally blank 122 RuggedCom[...]

Chapt er 12 – Configuring An IPsec VPN C h a p t e r 1 2 – C on f i g u r i n g A n I P s e c V P N I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g I P s ec V P N G l o b a l O p t i o n s • C r e a t i n g V P N C o n n e c t i o n s • E n a b l i n g A n d S t a r t i n g I P s e c • O b t [...]

RuggedRouter  User G uide With route based VPNs: • O p e n s w a n g e n e r a t e s a n I P S E C i n t e r f a c e f o r e a c h V P N t u n n e l , • A s t h e t u n n e l i s b r o u g h t u p a r o u t e f o r t h e s u b n e t a t t h e o t h e r e n d o f t h e t u n n e l i s c r e a t e d t h r o u g h t h a t i n t e r f a c e , ?[...]

Chapt er 12 – Configuring An IPsec VPN When you want to use this form of encryp tion, each router configures its VPN connection to u se the RSA algorithm and includes the public signatu re of its p eer. The RuggedRouter's pu blic signature is available from the outpu t of the Show Public Keys menu. In secret key c ryptography , a single key [...]

RuggedRouter  User G uide You mu st configure the fir ewall to accept connections on these ports a nd protocols. See the Configuring The Fire wall cha pter, Configuring The Fire wall And VPN section for details. T h e O p e n s w a n C o n f i g u r a t i o n P r o c e s s Each VPN connection has two ends, in the local router and the remote rout[...]

Chapt er 12 – Configuring An IPsec VPN After a VPN connection is created this menu will display an icon for the conn ection, as shown in the next view of the VPN Configuration m enu. The “Add defaults for all connections” lin k allows you to create a profile that will app ly to a ll connections for items su ch as key typ e, encryption protoco[...]

RuggedRouter  User G uide The “Apply Configuration” button restarts th e server to a ctivate any configuration changes that ha ve been mad e, restarting VPN connections. F i g u r e 1 0 6 : I P s e c V P N C o n f i g u r a t i o n A f t e r C o n n e c t i o n s H a v e B e e n C r e a t e d S e r v e r C o n f i g u r a t i o n F i g u r e[...]

Chapt er 12 – Configuring An IPsec VPN N o t e : W h e n c o n n e c t i o n s b e c o m e a c t i v e , O p e n s w a n a s s i g n s t h e m t o i p s e c i n t e r f a c e s . Y o u m u s t p l a n o n t h e s e i n t e r f a c e s b e i n g t h e s o u r c e o f i n c o m i n g t r a f f i c i n f i r e w a l l r u l e s . The NAT Traversal f[...]

RuggedRouter  User G uide L i s t C e r t i f i c a t e s F i g u r e 1 1 0 : L i s t C e r t i f i c a t e s This menu lists ava ilable certificat e files, their corresponding key files a nd det ails whether a pu blic key for the certificate is configured. V P N C o n n e c t i o n s The IPsec main m enu “Add a new IPsec VPN connection” lin[...]

Chapt er 12 – Configuring An IPsec VPN The At IPsec startup fi eld determines what ha pp ens to the connection a fter Opens wan sta rts and includes the options “Ignore”, “Add c onnection”, “Start Connection”, “Route” and “Default”. A valu e of “Ignore ” w ill cau se the connection to be ignored. A value of “Add co nnect[...]

RuggedRouter  User G uide L e f t / R i g h t S y s t e m ' s Se t t i n gs F i g u r e 1 1 2 : E d i t i n g A V P N C o n n e c t i o n , P a r t 2 The Public I P address fields determine the IP address of the side of the conn ection being e dited. Ch eck the Address or hostname.. field and provide a fixed IP addre ss or hostnam e. If thi[...]

Chapt er 12 – Configuring An IPsec VPN S h o w i n g I P s e c S t a t u s 1 interface lo/lo 127. 0.0.1 2 inter face eth1/eth1 10.0.0. 253 3 inter face eth2/et h2 204.50.1 90.89 4 inter face w1ppp/w1ppp 206.186 .238.1 38 5 %myid = (none) 6 debug none 7 algorithm ESP encrypt : id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64 8 algorithm E[...]

RuggedRouter  User G uide The fourth group (lines 30-39) describe connection describe VP N connections (here “openswa ntest”). The first line is p articularl y u seful s ince it indicates the connection addresses, subnets a nd that the connection is active (“erouted”). If there are no entries, then the VPN hasn' t bee n established [...]

Chapt er 12 – Configuring An IPsec VPN G e n e r a t e X . 5 0 9 C e r t i f i c a t e s Use the a uthority to produce a certificate authority pu blic certification (cacert) a nd a certificate for each of the clients and a certificate for the router. The certifica te authority will require some information that is sha red by all certificates (e.g[...]

RuggedRouter  User G uide Parameters Value Comments At IPsec Startup Add con nection We wish to add the connection when the client starts it. Authenticate by rsasig X.509 certificates provide RSA Connection Type Tunnel Encryption Protocols As desired Compress Data As desired Perfect Forwarding Secrecy As desired Recommend “yes” NAT Traversal[...]

Chapt er 12 – Configuring An IPsec VPN This page intention ally blank RuggedCom 137[...]

RuggedRouter  User G uide C h a p t e r 1 3 – C on f i g u r i n g D y n a m i c R o u t i n g I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g T h e D y n a m i c R o u t i n g S u i t e • E n a b l i n g A n d S t a r t i n g O S P F a n d R I P • C o n f i g u r i n g O S P F a n d R I P • O b t[...]

Chapt er 13 – Configuring Dynamic Routing OS P F F u n d a m e nt a l s The Open Path Shortest First (OSPF) protocol rou ting determines the best pa th for routing IP traffic over a TCP/IP network based on link cost and qua lity. Unlike static routing, OSPF tak es link failu res and other n etwork top ology changes into a ccount. Unlike the RIP r[...]

RuggedRouter  User G uide A router can be pa rt of mul tiple areas and function as a gateway between areas. When mul tiple areas are u sed on a networ k, ar ea 0 is the backbone area. All areas must have a router connecting them to area 0. R o u t e r - I D Defines the ID of the router. By default this is the highest IP assigned to the router. I[...]

Chapt er 13 – Configuring Dynamic Routing L i n k D e t e c t When link detect is enabled for an OSPF/RIP active interface, OSPF or RIP will be notified when th e interface goes down and will stop advertising subnets ass ociated with that interface. O SPF and RIP will resume advertising the su bnet when th e link is restored. This allows OSPF and[...]

RuggedRouter  User G uide N o t e : E n s u r e t h a t An t i s p o o f i n g i s d i s a b l e d i f y o u a r e c o n s t r u c t i n g t h e a b o v e d e s c r i b e d t y p e o f O S P F n e t w o r k . A n t i s p o o f i n g c a n b e d i s a b l e d i n t h e N e t w o r k C o n f i g u r a t i o n m e n u , C o r e S e t t i n g s s u [...]

Chapt er 13 – Configuring Dynamic Routing OS P F A n d V R R P E x a m p l e N e t w o r k This network consists of three rout ers connected in a ring with T1/E 1 links. Rou ter 1 and 2 and the switched n etwork represent a remote site in which the routers sup ply a redundant gateway to th e hosts via VRR P and the T1/E1 links sup ply a redundan [...]

RuggedRouter  User G uide If Router 1 or its Ethern et link fail, VRR P will detect the link being down and remove the direct route to the 1.1.2.0/24. VRRP on Rou ter 2 wil l stop seeing messa ges from Router 1, elect its elf mas ter and will take over the ga teway for the network . OSPF on router 1 will notice the link being down (and the route[...]

Chapt er 13 – Configuring Dynamic Routing C o r e F i g u r e 1 1 8 : Co r e M e n u The Core routing daemon handles comm unica tions between the k ernel of the router and the other dyna mic routing p rotocols. Core handles link detection a nd monitoring static rout es and routes for directly connected interfaces on the router. It also man ages a[...]

RuggedRouter  User G uide Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface. Clicking on sta tus displa ys the current statu s of the interface, including link stat e, IP address and traffic counts. Clicking “Re[...]

Chapt er 13 – Configuring Dynamic Routing O S P F F i g u r e 1 2 1 : O S P F M e n u This menu contains the configuration and status of OSPF on the router. The OSPF Global Paramete rs , OSPF Interfaces an d Network Areas menus configure OSPF. The Status and View OSPF Configuration m enu display the actua l status and configuration file contents [...]

RuggedRouter  User G uide The Enab le Password field sets the p assw ord to be used for the enable comm and of ospfd. This is used by the telnet int erface of ospfd to control access to the configuration. The Telnet Password field sets th e pa ssword to be used for telnet access to ospfd. This is used as the login passw ord of ospfd when locally[...]

Chapt er 13 – Configuring Dynamic Routing The Redistribute K ernel fields control distribution of kern el rout es. When enabled, OSPF will advertise rou tes from th e kernel routing table, which includes s tatic routes entered by the administrator, to other OSPF routers in the area. Norma lly only routes that fall within the scope of the network [...]

RuggedRouter  User G uide The Transmit Delay fi eld controls the estima ted n umber of seconds to transmit a link state update pack et. This should take into account transm ission and propagation delays of the interface. The Passive Interface option controls if an interface is active or p assive. Passive interfaces do not send LSAs to other rout[...]

Chapt er 13 – Configuring Dynamic Routing The RIP Global Parameters and RIP Interfaces configure RIP. The Status and View RIP Configuration menu display the actu al status and configuration file contents of RIP. R I P G l o b a l P a r a m e t e r s F i g u r e 1 2 6 : RI P G l o b a l P a r a me t e r s The Enab le Password field sets the p assw[...]

RuggedRouter  User G uide The Redistribute Conne cted fields control distribution of connected routes. When enabled, RIP will advertise routes to directly conn ected interfaces to other RIP routers in the ar ea. Normally only routes that fall within the scop e of the n etwork a reas will be advertised. The Redistribute K ernel fields control dis[...]

Chapt er 13 – Configuring Dynamic Routing Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface. Clicking “Rem ove in active interfac es” p urges the list of any int erfaces which a re no longer configured on the r[...]

RuggedRouter  User G uide Networks a re used when you want to a dd any router that is pa rt of a specific s ubnet, or connected to a sp ecific network interface to be part of your RIP network. Both neighbors and networks can be u sed at the sa me ti me. N o t e : F o r p o i n t t o p o i n t l i n k s ( T 1 / E 1 l i n k s f o r e x a m p l e )[...]

Chapt er 13 – Configuring Dynamic Routing This page intention ally blank RuggedCom 155[...]

RuggedRouter  User G uide C h a p t e r 1 4 – C o n f i g u r i n g L i n k B a c k u p I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g l i n k b a c k u p • O b t a i n i n g s y s t e m s t a t u s • T e s t i n g l i n k b a c k u p L i n k B a c ku p F u nd a m e n t a l s Link backup prov[...]

Chapt er 14 – Configuring Link Backu p The daemon wil l constru e the ma in link as havin g failed (even if its link statu s is “up”) if the remot e host fa ils to respond to configurable n umber of pings after waiting a configurable timeou t for each ping. U s e O f R o u t i n g P ro t o c o l s A n d T h e D e f a u l t R o u t e If the ma[...]

RuggedRouter  User G uide E d i t L i n k B a c k u p C o n f i g u r a t i o n F i g u r e 1 3 2 : L i n k B a c k u p C o nf i g u r a t i o n Set the Name field to su ppl y an identification of the pair. This field initially defau lts to the “ma in_link_n ame- >backup _link_n ame” . The Enab le this configuration field enables this bac[...]

Chapt er 14 – Configuring Link Backu p N o t e : I f y o u d e l e t e a l i n k b a c k u p c o n f i g u r a t i o n t h a t h a s f a i l e d o v e r ( o r i s f a i l i n g o v e r ) t o i t s b a c k u p t r u n k t h e l i n k d a e m o n w i l l s t o p a t t e m p t i n g t h e l i n k b a c k u p a n d r e s t or e t h e m a i n t r u n [...]

RuggedRouter  User G uide The Test Duration field controls the a moun t of time to run before restoring service to the ma in trun k. Please note that this dura tion mus t take into accou nt the tim ing para meters of the backup configuration: The duration should comfortably exceed the Ping Interval plu s the Ping Timeout m ultip lied by the Ping[...]

Chapt er 14 – Configuring Link Backu p This page intention ally blank RuggedCom 161[...]

RuggedRouter  User G uide C h a p t e r 1 5 – C o n f i g u r i n g V R R P I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g V R R P • E n a b l i n g A n d S t a r t i n g V R R P • O b t a i n i n g V R R P S t a t u s V R R P F u n d a m e n t a l s The Virtual Rou ter R edundancy Protocol ([...]

Chapt er 15 – Configuring VRRP Each Virtua l Rout er has a us er-config ured Virtu al Router Identifier (VRID) and an Virtual IP address or set of IP addresses on the shar ed LA N. Hosts on the shar ed LAN are configured to use these addresses as the default gat eway. One rout er in the Virtua l Rou ter Group will be elected as th e Master , all [...]

RuggedRouter  User G uide The router issu es a s et of gratuitous ARPs when moving between mas ter and backup state. These unsolicited ARPs teach th e hosts and switches in the n etwork of the current MAC address and port as sociated with the VRIP. The router wil l issu e a second set of ARPs aft er the tim e sp ecified by the Gratu itous ARP de[...]

Chapt er 15 – Configuring VRRP V R R P M a i n M e n u F i g u r e 1 3 7 : V R R P M a i n M e n u Note that VRRP is disabled by default and ma y be enabled via the System folder, Bootup And Shutdown menu . VRRP can be configured through the VRRP C onfiguration link before the daemon is started. When enabled, an y configuration changes ma y be ma[...]

RuggedRouter  User G uide E d i t i n g A V RR P I n s t a n c e F i g u r e 1 3 9 : V R R P I n s t a n c e The Name field is pur ely for informat ional purp oses. The Interface field configures th e interface tha t VRRP packets are sent up on. The Virtual Router I D field determin es the VRID number. Ensur e that a ll routers supp lying the sa[...]

Chapt er 15 – Configuring VRRP V i e w i n g V R R P In s t a n c e s S t a t u s F i g u r e 1 4 0 : V R R P I n s t a n c e s S t a tu s The VRRP Instances Status m enu displa ys th e current sta tus of VRRP instances. This menu does not updat e statu s in real ti me. Click on the Refre sh Display bu tton to upda te to the current statu s. The [...]

RuggedRouter  User G uide C h a p t e r 1 6 – C o n f i g u r i n g T r a f f i c P r i o r i t i z a t i o n I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g Tr a f f i c P r i o r i t i z a t i o n • V i ew i n g T r a f f i c P r i o r i t i z a t i o n S t a t i s t i c s T r a [...]

Chapter 16 – Configuring Traffic P rioritiza tion T O S P r i o r i t i z a t i o n The priority of an IP packet can be derived from its Typ e of Service field. The TOS field has the follow ing format: 7 6 5 4 3 2 1 0 +---+---+---+---+---+---+---+---+ | | TOS Bits | | |PRECEDENCE |MD MT MR MMC| 0 | | | | | +---+---+---+---+---+---+---+---+ The fo[...]

RuggedRouter  User G uide P r i o r i t i z a t i o n E x a m p l e A remote site rout er connects to a p rivate network via a T1 line. The router us es OSPF to m anage an a lternate routing, but its p rimar y pu rpos e is to allow access to a switched networ k of RuggedServers imp lement ing TcpModbus gateways (TCP/UDP port 502). The rout er an[...]

Chapter 16 – Configuring Traffic P rioritiza tion T r a f f i c P r i o r i ti z a t i o n M a i n M e n u F i g u r e 1 4 1 : T r a f f i c P r i o r i t i z a t i o n M a i n M e nu This menu displays network interfaces for which prioritiza tion m ay be activated. Prioritization ma y be configured by following the Interface colum n link. The st[...]

RuggedRouter  User G uide Remove prioritiz ation by s electing the D elete and Apply button. P r i o r i t i z a t i o n Q u e u e s F i g u r e 1 4 3 : P r i o r i t i z a t i o n Q u e u e C o n f i g u r a t i o n This menu allows you to edit the na me of of a p riority qu eue and to delete th e queu e. If you delete a queu e referenced by fi[...]

Chapter 16 – Configuring Traffic P rioritiza tion Prioritization works by es tablishing qu eues a t the r equired priority levels filling the transmit queu e w ith them in priority order. The aim of esta blishing low latenc y for certain tra ffic is foiled when transm it qu eue lengths are la rge because multip le low priority packets ma y ha ve [...]

RuggedRouter  User G uide C h a p t e r 1 7 – C on f i g u r i n g G e n e r i c R o u t i n g E n c a p s u l a t i o n I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g G R E • V i ew i n g G R E S t a t u s G R E F u n d a m e n t a l s The RuggedRouter is able to encapsu late mu [...]

Chapter 17 – Configuring Generic Routing E ncapsu lation G R E M a i n M e n u F i g u r e 1 4 7 : G R E M a i n M e n u This menu displays configured GRE tunn els. The tunn el status will be “a ctive” if th e tunn el was su ccessfully created. G R E C o n f i g u r a t i on M e n u F i g u r e 1 4 8 : G R E T u n n e l C o nf i g u r a t i o[...]

RuggedRouter  User G uide This page intention ally blank 176 RuggedCom[...]

Chapt er 18 – Network Util ities C h a p t e r 1 8 – N e t w or k U t i l i t i e s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • P i n g i n g h o s t s , • R u n n i n g a t r a c e r o u t e , • P e r f o r m i n g a h o s t l o o k u p , • T r a c i n g l i n e a c t i v i t y , • Showing interface statist[...]

RuggedRouter  User G uide P i n g M e n u F i g u r e 1 5 0 : P i n g M e n u The Hostname field accepts the host n ame or IP addre ss to ping. The Verbose Output? field caus es ping to present the m aximu m of ou tput. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes. This can make pin g behave very s lowly if [...]

Chapt er 18 – Network Util ities The Packet Length? field specifies the size of the data in the trac eroute pa cket. The Interface? field sp ecifies th e network interface to obtain the sou rce IP address for outgoing probe packets. Otherw ise the router w ill ma nua lly s et the address based on the actu al in terface taken . H o s t M e n u F i[...]

RuggedRouter  User G uide The Maximum packets c aptured an d Ma ximum capture time fields limi ts the amou nt of traffic captu red. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes. This can make pin g behave very s lowly if DNS is not prop erly configured. The Display l ink level header field ca uses this h ead[...]

Chapt er 18 – Network Util ities The Message RX/TX a nd Incoming/Outgoing Connecti ons fields caus es data pack ets an d Connection activity to be included in the trace. The Hex dump fi eld caus es the content of data packets to be displa yed. The Maximum packets c aptured an d Ma ximum capture time fields limi ts the amou nt of traffic captu red[...]

RuggedRouter  User G uide C u r r e n t R ou ti n g & I n t e r f a c e T a b l e F i g u r e 1 5 7 : Cu r r e n t Ro u t i n g & I n t e r f a c e T a b l e This menu displays the current routing table an d the state of the router's int erfaces. Select the Refresh link in order to refresh the displa y. The entries un der the Destin[...]

Chapt er 18 – Network Util ities I n t e r f a c e St a t u s This menu also su mmari zes the interface status. The entries un der the Devic e fi eld reflect the na me of the device. The entries un der the Link up field reflect the current link stat e of interface. The entries un der the Address field reflect th e local address of interface. The [...]

RuggedRouter  User G uide This page intention ally blank 184 RuggedCom[...]

Chapt er 19 – Configuring Serial Protocols C h a p t e r 1 9 – C o n f i g u r i n g S e r i a l P r o t o c o l s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • R a w S o c k e t s A p p l i c a t i o n s • C o n f i g u r i n g S e r i a l p o r t s f o r R a w S o c k e t • V i e w i n g S e r i a l P o r t a n [...]

RuggedRouter  User G uide S e r i a l Pr o t oc o l s A p p l i c a ti o n s C h a ra c t e r E n c a p s u l a t i o n Character enca psula tion is used an y time a stream of chara cters mus t be reliably transport ed across a network. The character stream s can be creat ed by any s erial device. The baud rates supp orted at either s erver need[...]

Chapt er 19 – Configuring Serial Protocols The host will s equentia lly poll ea ch RTU. Each p oll received by the host server is forwarded (i.e. broadc ast) to a ll of the remo te s ervers. All RTUs will receive the request and the ap propria te RTU will issue a reply. The reply is return ed to the host server, where it is forwarded to the hos t[...]

RuggedRouter  User G uide If config ured to pack etize on a tim eout , the s erver will wait for a configurable time after receiving a cha racter before pa cketizing and forwarding. If another character arrives during the wai ting interval, the tim er is restarted. This method allows characters transm itted a s part of an entire m essage to be f[...]

Chapt er 19 – Configuring Serial Protocols A s s i g n P r o t o c o l s M e n u F i g u r e 1 5 9 : As s i g n P r o t o c o l s M e n u This menu associates a p rotocol with a serial p ort. Unused ports shou ld be left associated with “none”. Cha nging an association w ill im mediat ely close the ca lls of the old protocol. P o r t S e t t [...]

RuggedRouter  User G uide The Pack Char field configures the nu meric valu e of the ASCII character which will force forwarding of accumula ted data to the network. The Pack Cha r mus t be between 0 and 255 inclusive or the va lue off. If configured off, accumulat ed data will be forwarded based upon the pa cketiza tion timeou t p aram eter. The[...]

Chapt er 19 – Configuring Serial Protocols S e r i a l P r o t o c o l s S ta t i s t i c s M e n u F i g u r e 1 6 2 : Se r i a l P r o t o c o l s S t a t i s t i c s M e n u This menu presents statist ics of serial p ort activity and established connections. The menu also allows you to reset a p ort, forcing call hang-up and re-establishm ent.[...]

RuggedRouter  User G uide S e r i a l P r o t o c o l s T r a c e M e n u F i g u r e 1 6 3 : S e r i a l P r o t o c o l s T r a c e M e n u This menu displays decoded se rial port an d network activit y. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed. The m enu[...]

Chapt er 19 – Configuring Serial Protocols S e r i a l P r o t o c o l s S e r t r a c e U t i l i t y The comman d line sertrace utility offers the ability to trace the a ctivity of serial p orts in real ti me. A port range ma y be sp ecified to limit the ou tput to sp ecific ports. The level of tra ffic to trace and the typ e of decodi ng may b[...]

RuggedRouter  User G uide This page intention ally blank 194 RuggedCom[...]

Chapt er 20 – Configuring GOOSE Tunnels C h a p t e r 2 0 – C on f i g u r i n g G O O S E T u n n e l s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g G O O S E T u n n el s • V i e w i n g G O O S E T u n n e l s t a t u s a n d s t a t i s t i c s • Tracing GOOSE activity I E C 6 1 8 5 0 G [...]

RuggedRouter  User G uide GOOSE Pac kets received from the network are s tripped of their n etwork headers and forwarded to Ethernet ports configured for the sam e mu lticas t address. The forwarded frames contain the MAC sou rce address or the originating device, and not that of the transmittin g interface. The VLAN used will be tha t programm [...]

Chapt er 20 – Configuring GOOSE Tunnels G e n e r a l C o n f i g u r a t i o n M e n u F i g u r e 1 6 5 : G e n e r a l C o n f i g u r a t i o n M e n u This menu configures the daemon settings. The Daemon U DP Listen Port fi eld configures port used by the daemon to commun icate with other daemons. N o t e : A l l L a y e r 2 T u n n e l d a [...]

RuggedRouter  User G uide The Multicast Address field configures the address to listen for. The Remote Dae mon and Add a new Daemon fields sp ecify th e IP addresses of remote daemons. G O O S E S t a t i s t i c s M e n u F i g u r e 1 6 8 : G O O S E St a t i s t i c s M e nu This menu presents statist ics of GOOSE a ctivity at the E thernet a[...]

Chapt er 20 – Configuring GOOSE Tunnels This menu displays decoded GOOSE activity. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed. The m enu w ill displa y u p to the provided number of m essages wa iting up to the sp ecified numb er of seconds. The Trace on proto[...]

RuggedRouter  User G uide This page intention ally blank 200 RuggedCom[...]

Chapter 21 - Configuring The DHCP server C h a p t e r 2 1 - C o n f i g u r i n g T h e D H CP s e r v e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • D H C P S e r v e r C o n f i g u r a t i o n • Use of Option 82 D H C P F u n d a m e n t a l s Dynam ic Host Configuration Protocol (DHCP) is a m ethod for centrally[...]

RuggedRouter  User G uide In DHCP settings at a m ore sp ecific level overrides higher levels. For exam ple you can configure a DNS server for all clients, the create a group tha t overrides the setting. This allows defaults to be set at a high level to a pply to mos t clients, whi le exceptions can be places just where they are needed. Man y se[...]

Chapter 21 - Configuring The DHCP server • B o o t f i l e n a m e : T h e f i l e n a m e t h e c l i e n t s h o u l d r e q u e s t f r o m a t f t p s e r v e r t o b o o t f r o m . T h i s o n l y a p p l i e s t o n e t w o r k b o o t e d c l i e n t s . • B o o t f i l e s e r v e r : T h e I P a d d r e s s o f t h e t f t p s e r v e[...]

RuggedRouter  User G uide E x a m p l e D H C P S c e n a r i o s A n d C o n f i g u r a t i o n s S i n g le N e t w o r k W i t h D y n a m i c I P A s s i g n m e n t In this example the eth1 interface is provided with IP address 192.168.1.1/24 while addresses 192.168.1.101 through 192.168.1.200 are a ssigned to the clients. The router s erv[...]

Chapter 21 - Configuring The DHCP server Assign a client a t switch p ort 2 address 192.168.1.102. Assign a client a t switch p ort 3 address 192.168.1.103. Assign multip le clients a t switch p ort 4 dynamic a ddresses 192.168.1.151 through 192.168.1.200. The router s erves as the default gat eway. 1) Enable eth1 in the 'Edit Network Interfac[...]

RuggedRouter  User G uide The switch p ort 2 is on vlan2 us ing subnet 192.168.2.0/24 and should assign addresses 192.168.2.101 to 192.168.2.200 and default gateway 192.168.2.1. The switch p ort 3 is on vlan3 us ing subnet 192.168.3.0/24 and should assign addresses 192.168.3.101 to 192.168.3.200 and default gateway 192.168.3.1. The switch p ort [...]

Chapter 21 - Configuring The DHCP server D H C P S e r v e r M a i n M e n u F i g u r e 1 7 0 : D H C P S e r v e r M e n u The DHCP Server main menu shows th e subnets configured for DHCP, as w ell a s any group s and hosts. New subn ets, groups and hosts can be added, and e xisting entries can be edited (and optionally deleted). The Edit Client [...]

RuggedRouter  User G uide D H C P S h a r e d N e t w o r k C o n fi gu r a t i o n F i g u r e 1 7 1 : D H C P S h a r e d N e t w o r k C o n f i g u r a t i o n The settings sp ecific to the Shared network menu ar e the Shared network description and Network na me. The Shared network descr iption field is used to describe the shared networ k [...]

Chapter 21 - Configuring The DHCP server D H C P S u b n e t C o n f i g u r a t i o n F i g u r e 1 7 2 : D H C P S u b n e t C o n f i g u r a t i o n The settings sp ecific to the Subnet m enu are the subnet description, Network address and mask. The Subnet description field is us ed to descri be the subnet as desired. The Network addre ss and N[...]

RuggedRouter  User G uide D H C P G r o u p Co n f i g u r a t i o n F i g u r e 1 7 3 : D H C P G r o u p C o n f i g u r a t i o n The settings sp ecific to the Group menu ar e the group description and Use nam e as client hostna me fields. The Group description field is us ed to describe the group as desired. The Use name as client hostname f[...]

Chapter 21 - Configuring The DHCP server The Hardware address field is the Ethernet MAC of the client associated w ith the host entry. The Fixed IP address field is the IP to as sign to the ma tching client. D H C P P o o l C o n f i g u r a t i o n F i g u r e 1 7 5 : D H C P P o o l C o n f i g u r a t i o n The settings sp ecific to the Address [...]

RuggedRouter  User G uide C h a p t e r 2 2 – C o n f i g u r i n g N T P I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g N T P • S e t t i n g s e r v e r s a n d p e e r s • S e t t i n g g e n e r i c N T P o p t i o n s • N T P T o o l s N T P F un d a m e n ta l s NTP ( Ne[...]

Chapt er 22 – Configuring NTP T h e N T P S a n i t y L i m i t NTP c hanges the system through “stepp ing” a nd “dri fting”. Stepping is a sudden change of time whereas drifting is a slow gradual tim e change. NTP will step the system ti me w hen its starts. This is almos t alwa ys at boot time. Steppin g the time afterwards can caus e p[...]

RuggedRouter  User G uide N T P S e r v e r M ai n M e n u F i g u r e 1 7 6 : N T P Se r v e r Note that the NTP server is disabled by de fault and may be enabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Restart ntpd daemon button. The View GPS Stat[...]

Chapt er 22 – Configuring NTP S e r v e r s C o n f i g u r a t i o n F i g u r e 1 7 8 : N T P Se r v e r L i s t The servers under the IP address column are u sed as prima ry syn chronization devices. Clicking on a link w ill allow you to edit that server. By default th e router includes the links p ool.ntp.org and 127.127.1.0. The pool.ntp.org[...]

RuggedRouter  User G uide V i e w i n g T h e N T P S t a t u s F i g u r e 1 7 9 : N T P St a t u s The NTP S tatus menu displa ys pos sible sources an d curre ntly us ed reference clocks V i e w i n g T h e N T P L o g F i g u r e 1 8 0 : N T P L o g The NTP Lo g menu displays the log of recent NTP events. 216 RuggedCom[...]

Chapt er 22 – Configuring NTP V i e w i n g T h e G P S S t a t u s F i g u r e 1 8 1 : G P S St a t u s If the router is equi pped with a Precision Time Protocol card, this pa ge will shows the status of the GPS module. The Latitude and Longitude fields show the curr ent position of the GPS antenna . The GPS Lock field show the GPS lock s tatus.[...]

RuggedRouter  User G uide C h a p t e r 2 3 – C o n f i g u r i n g SSH I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g S S H A u t h e n t i c a t i o n • S S H N e t w o r k i n g A n d A c c e s s C o n t r o l • S e t t i n g S S H C l i e n t O p t i o n s S S H F u n d a m en t a l s Sec[...]

Chapt er 23 – Configuring SSH S S H M a i n M e n u F i g u r e 1 8 3 : S S H S e r v e r Note that the SSH server is enabled by default and may be disabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Apply Changes button. A u t h e n t i c a t i o n F i[...]

RuggedRouter  User G uide N e t w o r k i n g F i g u r e 1 8 5 : SS H S e r v e r N e t w o r k i n g The Listen on addresses fi elds determine an IP addresses and port upon which SSH will accept a connection. The Listen on port field determines the p ort num ber SSH will listen on, a ssumin g Listen on addresses is set to “All addresses”. [...]

Chapt er 23 – Configuring SSH The Only allow u sers fi eld specifies th e users allowed to conn ect by SSH. The specification can be a list of user na me p atterns, separat ed by spac es. Login is allowed only for user n ames that ma tch one of the pattern s. '*' and '?' can be used as wild cards in the pa tterns. Onl y us er [...]

RuggedRouter  User G uide C h a p t e r 2 4 – C on f i g u r i n g I R I G B A n d I E E E 1 5 8 8 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • I E E E 1 5 8 8 C o n f i g u r a t i o n • I R I G B C o n f i g u r a t i o n • V i e w i n g I R I G B a n d I E E E 1 5 8 8 S t a t u s I E E E 1 5 8 8 F u n d a m e[...]

Chapt er 24 – Configuring IRIGB And I EEE 1588 NTP The P TP clock is a secondary re ference standard reference clock . The router uses this identifier w hen it has synchronize d with remote NTP server. DFLT A fter the router ha s power cy cled but before a ny GPS or NTP locks have occurre d. PTP favors preferred ma sters over n ormal ma sters, GP[...]

RuggedRouter  User G uide R e f e r e n c e C l o c k s The GPS provides the highest qu ality reference clock. It will alw ays be used when it is ava ilable, but ma y require s ome tim e aft er boot before becoming acquired (or “GPS locked”). Typical ly, GPS lock is usu ally acquir ed within five m inutes of boot. When GPS is the reference c[...]

Chapt er 24 – Configuring IRIGB And I EEE 1588 I R I G B / I E E E 1 5 8 8 M a i n M e n u F i g u r e 1 8 7 : I R I G B / 1 58 8 M a i n M e n u This menu allows you to configure IRIGB and IEEE1588, displa y its cu rrent status and review historical changes. G e n e r a l C o n f i g u r a t i o n F i g u r e 1 8 8 : I R I G B / I E E E 1 5 8 8 [...]

RuggedRouter  User G uide I R I G B C o n f i g u r a t i o n F i g u r e 1 8 9 : I R I G B C o n f i g u r a t i o n m e n u This menu allow you to configure IRIG B param eters. The sa ve button will save the changes of configuration p erman ently. The AM Port 1 (PTP1) Output field enables or disables th e amp litud e modulat ed outpu t of this[...]

Chapt er 24 – Configuring IRIGB And I EEE 1588 I R I G B S t a tu s F i g u r e 1 9 1 : I R I G B G PS S t a t u s This page shows whether GPS is locked, and the source of the current referenc e clock. I E E E 1 5 8 8 S t a t u s F i g u r e 1 9 2 : I E E E 1 5 8 8 S t a t u s This page shows the historical s tatus of IEEE1588 on the router. The [...]

RuggedRouter  User G uide I R I G B L o g F i g u r e 1 9 3 : I R I G B G P S S t a t u s This page reflects reference clock changes in IRIG- B. 228 RuggedCom[...]

Chapt er 24 – Configuring IRIGB And I EEE 1588 This page intention ally blank RuggedCom 229[...]

RuggedRouter  User G uide C h a p t e r 2 5 – C on f i g u r i n g T h e S n o r t I D S I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r a t i o n o f S n o r t a s a n I n t r u s i o n D e t e c t i o n S y s t e m . • G e n e r a t i n g a d a i l y s n o r t a n a l y s i s e m a i l . S n o r t F[...]

Chapter 25 – Configuring The Snort IDS When the a lert file m ethod is chosen, a da ily an alysis of the file can be ema iled. The SIDs re ferenced in alerts can be us ed to quickly locate the rule via the m ain Sort IDS menu. The rule its elf often contains HTML links to Internet resou rces su ch as www.secu rityfocu s.com and cve.mitre.org. The[...]

RuggedRouter  User G uide R u l e s e t s F i g u r e 1 9 6 : S n o r t M a i n M e n u p a r t 3 The Rulesets section s elects th e rules to appl y on m onitored interfaces. Each “ruleset ” reflects a collection of rules that a re related. The link under the Action field will disable or enable a ll of the rul es in a ru leset. Indivi dual r[...]

Chapter 25 – Configuring The Snort IDS This menu allows you to configure the IP addresses and ports of servers in the local and external n etwork. The Home Ne t field defaults to “ANY” and designates the IP subn et of any local ports on the router. Configuring a sp ecific subnet can reduc e the nu mber of alerts generated. P r e P r o c e s s[...]

RuggedRouter  User G uide Alerts generated by s nort are stored by one of three m ethods; as local syslog messag es, remotely sylogged messages a nd in an alert file. When the Local sysl ogging method is chos en, the destina tion log file ma y be selected. When the Re mote syslogging method is chosen, the IP address of the remote syslog host mu [...]

Chapter 26 – Maintain ing The Router C h a p t e r 2 6 – M a i n t a i n i n g T h e R o u t e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • V i ew i n g A l e r t s • C o n f i g u r i n g a n d m o n i t o r i n g t h e G a u n t l e t S e c u r i t y A p p l i a n c e • B a c k i n g u p a n d r e s t o r i n[...]

RuggedRouter  User G uide This menu displays active alerts a nd allows you to change al ert system configuration and alert definitions. Follow th e All Alerts link to s how all a lerts. Follow the s everity lin ks ( Emergen cy .. Debug) or the category links (chassis .. daemon) to to limit the alert view. Note that activ e alerts are volatil e a[...]

Chapter 26 – Maintain ing The Router A l e r t F i l t e r C o n f i g u r a t i o n F i g u r e 2 0 3 : A l e r t F i l t e r C o n f i g u r a t i o n M e n u This menu configures an al ert filter, which defines the forwarder destinat ion for active a lerts ma tching with defined filter l evel. The Forward Destination Type configures the type o[...]

RuggedRouter  User G uide C h a n g e Al e r t D e fi n i t io n Figure 205 : Change Alert Definition Menu This menu allows you to change an existing alert definition entry. The Codepoint is the key part of the alert definition entry and does not allow to be changed. The Category configures w hich category the a lert definition entry belongs to.[...]

Chapter 26 – Maintain ing The Router The Threshold configures the threshold to compa re with the shell comma nd result to see wh ether the condition is true or false. The And Repeats configures how ma ny tim es the condition mu st be true before th e alert is gen erated. The And Unt il configures how m any seconds the condition should be true bef[...]

RuggedRouter  User G uide G a u n t l e t S e c u r i t y RX1100 owners can u se the Gauntlet security ap plian ce to restrict access to critical assets. This section details how to activate Gau ntlet a nd determine cu rrently negotiated sessions . Details and recommen dations on ap plyin g the Gaun tlet s ystem to network ing may be found in te[...]

Chapter 26 – Maintain ing The Router Gauntlet net fw TCP any 10000 The orde r of rules is significant. Rul es inserted before this set will not be protected by Gaun tlet. Any rule a ppea ring after the gauntlet cha in rules will automa tically be ignored. Consult with RuggedCom supp ort for assistanc e. If you wa nt to grant SSH access to the rou[...]

RuggedRouter  User G uide B a c k u p A n d R e s t o r e F i g u r e 2 0 7 : S y s t e m B a c k u p A n d R e s t o r e The Backup And Restore system provides the following fea tures: • A l l c o n f i g u r a t i o n s e t t i n g s a r e s a v e d i n a c o n f i g u r a t i o n a r c h i v e , • A r c h i v e s c a n b e u s e d t o “[...]

Chapter 26 – Maintain ing The Router G e n e r a l C o n f i g u r a t i o n F i g u r e 2 0 8 : G e n e r a l Co n f i g u r a t i o n S e t u p This menu configures the backu p sys tem. The Automatic Nightly Backup fi eld specifies wh en the n ightly backup is scheduled. The automa tic export to a server will sta rt (if enabled) immedia tely af[...]

RuggedRouter  User G uide A r c h i v e H i s t o r y F i g u r e 2 0 9 : A r c h i v e H i s t o r y The Archive History m enu displays current archives, sorted by da te (most r ece nt first). Following the lin k of an a rchives under the Arc hive Name fi eld upload a copy of it. Selecting an un der the Archive Name field and appl ying the Re m[...]

Chapter 26 – Maintain ing The Router The created archive can be immedia tely up loaded if desired by following the “Uploa d A Copy Of This Arc hive..” link. N o t e : I f y o u u s e t h e I n t e r n e t E x p l o r e r w e b b r o w s e r , y o u m u s t “ R i g h t - c l i c k ” t h e l i n k a n d s a v e t h e f i l e m a n u a l l y[...]

RuggedRouter  User G uide The Archive Difference m enu show s the difference between two targets. The first target mu st be an a rchive while the second target can be either another archive or the current configuration. Choose two and only two ta rgets and click the Show Differe nces bu tton. F i g u r e 2 1 5 : A r c h i v e D i f f e r e n c e[...]

Chapter 26 – Maintain ing The Router F i g u r e 2 1 6 : Sh o w D i f f e r e n c e f o r s e l e c t e d f i l e b e tw e e n t w o t a r g e ts The Copy This F ile to Curre nt Configuration button will be p resent wh en the destination a rchive is the Cu rrent Configura tion. It allows u ser to copy the selected file from th e old archive to cu[...]

RuggedRouter  User G uide SNMP V1 and V2 transmit information in clear t ext (which ma y or ma y not be a n issu e depending the facilities the da ta is transmi tted over) and are la cking in the ability to authent icate a us er. SNMP V 3 adds strong authenticati on and encryption . S N M P C o n f i g u r a t i o n M a i n M e n u F i g u r e 2[...]

Chapter 26 – Maintain ing The Router The Client address (Source IP) field sp ecifies the a ddress from which snm pd will send notifications. If the field is blan k, the default behaviour w ill be to trans mit the notification from the IP address of the interface from which the message leaves the router. Snm pd will return to this behavour if the [...]

RuggedRouter  User G uide F i g u r e 2 2 2 : A c c e s s C o nt r o l p a g e , S N M P V 3 The second part of the Access control m enu allows creation an d de letion of V3 users. The User Name field selects the n ame of the new user. The Access fi eld determines whether the comm unity is read-only or read/write. The Minimum Security field sele[...]

Chapter 26 – Maintain ing The Router T r a p C o n f i g u r a t i o n F i g u r e 2 2 3 : T r a p C o n f i g u r a ti o n p a g e , T r a p O p t i o ns The Trap Configuration pa ge man ages SNMP trap destination s. Under Trap Generation Options , you ma y enabl e the generat ion of notifications on auth entication fa ilures or IP i nterface li[...]

RuggedRouter  User G uide The SNMP V3 Trap Destinations p art of the m enu a llows the creation a nd dele tion of V3 trap destina tions. The Type field sp ecifies the exchange used with this destination, eit her V3 tra p or V3 inform. The IP address and Trap Community fields s pecifies the receivers IP address and user na me. The Engine ID param[...]

Chapter 26 – Maintain ing The Router R a d i u s A u t h e n t i c a t i o n The Radius p rotocol described in RFC 2865 provides a mea ns for carrying auth entication, a uthorizat ion, and configuration informa tion between a client (the router) which desires to au thenticate its links and a shared Authen tication Server. Transactions between the[...]

RuggedRouter  User G uide Some u sers set the rrsetup and root accoun t passw ords to diffi cult to gu ess strings that a re uniqu e to each rou ter, then em ploy a comm on p assword for all rou ters in radius. The rout er specific strings are restricted to a very few personn el. A larger set of exp ert us ers are granted the rights to SSH login[...]

Chapter 26 – Maintain ing The Router Ou t g o i n g M a i l F i g u r e 2 2 8 : Ra d i u s A u t h e n t i c a t i o n M a i n M e n u Outgoing Mail is configured from within th e the Maintenance m enu Miscel laneous sub-menu. This menu controls where emai ls originated by the router a re forwarded to. The Forward to Mail Hub field sp ecifies an [...]

RuggedRouter  User G uide C h a s s i s P a r a m e t e r s F i g u r e 2 2 9 : Ch a s s i s P a r a m e t e r s M e nu This menu displays the chas sis temp eratu re an d, if hardware version 2, the voltage levels of chass is power sup plies and a record of the last p ower down tim e. The system will highlight red any out- of-range value. The mo[...]

Chapter 26 – Maintain ing The Router S y s t e m L o g s F i g u r e 2 3 0 : S y s t e m L o g s System logs are records of activities that hav e occurred on the router, sorted into specific cat egories. System logs can be invalu able when debugging configuration changes. As such, m ost of your u se of the logs will be simp ly in viewing them . S[...]

RuggedRouter  User G uide Left unrestricted the logging system would consu me all ava ilable “disk” sp ace, causing the rou ter to fail. The rou ter limi ts the memory u sed by the logging system by storing logs in a volatile (i.e. lost a fter a reboot) file syst em which is lim ited in size. Such a system w ill lose logging information when[...]

Chapter 26 – Maintain ing The Router U p g r a d e S y s t e m F i g u r e 2 3 2 : So f t w a r e U p g r a d e S y s t e m The Software Upgrade system provides the following fea tures: • U p g r a d i n g f r o m e i t h e r H T T P o r F T P s e r v e r s , • U p g r a d e t r a f f i c b a n d w i d t h l i m i t i n g t o p r e v en t d i[...]

RuggedRouter  User G uide Your RuggedRouter softwa re is p rovided in releases of the form rrX.Y.Z. The platform release num ber X changes when n ew hardware platforms are r eleased. The major releas e n umber Y is increased w hen imp ortant new featu res a re added. This is called a “Major” r elease. The m inor release nu mber Z is increase[...]

Chapter 26 – Maintain ing The Router U p g r a d e t o R X 1 1 0 0 F i g u r e 2 3 3 : U p g r a d e t o R X 1 1 0 0 This menu allows you to upgrade you r router. The displa y u sefully provides a description of the cu rrent hardware in th e router inventory. C h a n g e Re p o s i t o r y S e r v e r F i g u r e 2 3 4 : Ch a n g e R e p o s i t [...]

RuggedRouter  User G uide A u t o m a t i c Up g r a d i n g F i g u r e 2 3 5 : Au t o m a t i c U p g r a d e Check the Upgrades enabled field to activate daily u pgrades. Use the Upgr ade Time fields to s elect the time to upgrade. Selecting different ti mes on each rou ter can be used to even out traffic flows in the n etwork. U p g r a d i [...]

Chapter 26 – Maintain ing The Router I n s t a l l i n g A N e w P a c k a g e F i g u r e 2 3 7 : I n s t a l l i n g A N e w P a c ka g e The Install A New Packag es feature uploa ds and installs packa ges to the rout er. Select the From l ocal file option if you have already moved the p ackag e to the router through http, ftp or scp. You ma y [...]

RuggedRouter  User G uide U p l o a d i n g A n d D o w n l o a d i n g F i l e s F i g u r e 2 3 8 : U p l o a d / D o w nl o a d m e n u The Upload/Download Files m enu p rovides a mean s to tran sfer files to a nd from the router. The Download files fr om the specified URLs to this route r p art of the m enu a llows you to have the router dow[...]

Chapt er 27 – Security Considerations C h a p t e r 2 7 – S e c u r i t y C o n s i d e r a t i o n s I n t r o d u c t i o n This chapter describes actions to take to secure the RuggedRouter. S e c u r i t y A c t i o n s 1. C hange the root an d rrsetup p asswords from the rrsetup shell, before a ttaching the router to the network. 2. If Radi[...]

RuggedRouter  User G uide This page intention ally blank 266 RuggedCom[...]

Appendix A – Setting Up A Repos itory A p p e n d i x A – S e t t i n g U p A R e p o s i t o r y The RuggedCom software upgrade m echanism requires a repos itory of softwar e to availabl e. The following instructions detail: • R e q u i r e m e n t s f o r a r e p o s i t o r y s e r v e r , • I n i t i a l s e t u p o f a r e p o s i t o [...]

RuggedRouter  User G uide U p g r a d i n g T h e R e p os i t o r y RuggedRouter releas es are obtained from th e RuggedCom w eb site as ZIP files. Download the ZIP file to you r regula r and/or test releas e directories and unzip them. You ma y delete the original ZIP file if desired. The ZIP file nam e will be in th e form rrX.Y.zip. The majo[...]

Appendix A – Setting Up A Repos itory U p g r a d i n g C o n s i d e r a t i o n s The RuggedRouter offers you the ability to p erform au tomat ic daily u pgrades, sp ecify the download tim e an d limit the down load bandwidth. The se tools automa te the upgrade p rocess and minim ize the imp act of upgrading on the network. When autom atic dail[...]

RuggedRouter  User G uide A p p e n d i x B – D o w n g r a d i n g R o u t e r S o f t w a r e RuggedCom recognizes tha t custom ers m ay need to downgrade router softwar e: • R o u t e r s b e i n g a d d e d t o t h e n et w o r k h a v e m o r e r e c e n t v e r s i o n t h a n t h a t s t a n d a r d i z ed f o r t h e n e t w o r k . [...]

Appendix C – Installing Apa che Web Server On Windows A p p e n d i x C – I n s t a l l i n g A p a c h e Web S e r v e r O n W i n d o w s A number of custom ers ha ve ask ed for advice and instructions on sett ing up a web server on Windows. RuggedCom recom men ds the Apach e web server, becaus e it is secure, robust, easy to install a nd con[...]

RuggedRouter  User G uide Return to the web browser u sed earlier to verify Apa che and refresh the screen. It should now reflect the contents of your RuggedRouter release directory. You s hould now be able to p erform an u pgrade from a router. 272 RuggedCom[...]

Appendix D – Installing IIS Web Se rver On Windows A p p e n d i x D – I n s t a l l i n g I I S We b S e r v e r O n W i n d o w s A number of custom ers ha ve ask ed for advice and instructions on sett ing up an IIS web server on Windows. Begin by identifying a host comp uter that has IIS and its physical and logical location on the n etwork.[...]

RuggedRouter  User G uide A p p e n d i x E – R a d i u s S e r v e r C o n f i g u r a t i o n This section describes how to configure pop ular radius servers to sup ply a Vendor- Specific field, “privilege- level”, which is u sed by Webmin to ass ign assign specific capa bilities to Webmin users on a per u ser basis. Curr ently, the only[...]

Appendix E – Radius Server Configura tion Permission : Grant rem ote a ccess p ermission 3. Double click th e policy nam e you created, In the pop up window, click Edit Profile... button. F i g u r e 2 4 1 : I A S W i nd o w - E d i t R e m o t e A c c e s s P o l i c y 4. In Edit Profile window, Click Add... b utton F i g u r e 2 4 2 : I A S W i[...]

RuggedRouter  User G uide 5. In A dd Attribute window, select Vendor-Specific line, and click Add button. F i g u r e 2 4 3 : I A S W i n d o w – A d d A t t r i b u t e 6. In the Multivalu ed Attribute Information window, click the Add button F i g u r e 2 4 4 : I A S W i nd o w – M u l t i v a l u e d A t t r i b u t e I n f o r m a t i o [...]

Appendix E – Radius Server Configura tion 8. In the Configure VSA (RFC comp liant) win dow, in the vendor-assigned attribute numb er editbox , inpu t 2; in the Attribute format listbox, select String, in the Attribute value editbox, input the desired privilege level (in the a bove case, it is operator, in your ca se, currently you should inp ut r[...]

RuggedRouter  User G uide I n d e x Accounts................................................................................................................................................ root............................................................................................................................. ... ... ... ... ... ... .28 [...]

Index N392 ...................................................................................................................................... ... .. ... 72 N393 ...................................................................................................................................... ... .. ... 72 Signaling type......................[...]

RuggedRouter  User G uide Ethernet Ports................................................................................................................. ... ... .59, 189 LED Pan el .......................................................................................................................... ... ... ... .37 Modem Ports...............[...]

Index On ADSL Interfaces...................................................................................................................... 91 On Native E thernet Interfaces.................................................................................................. ... ..64 Precision Time Protocol Card......................................[...]

RuggedRouter  User G uide Authenticat ion ..................................................................................................................... ... ... .224 Configuring................................................................................................................. ... ... ... ... ... .223 Fundam entals...........[...]