Instruction/ maintenance manual of the product RX1000 RuggedCom
Go to page of 284
RuggedRouter RX1000/RX1100 User Guide RuggedCom Inc. 30 Whitmore Road, Woodbridge, Ontario, C ana da L4L 7Z4 Web: www.rugge dcom.com Tel: (905) 856-5288 Fax: (905) 856-1995 Toll Free: (888) 264-00.
R U G G E D R O U T E R U S E R G U I D E F O R U S E W I T H R X 1 00 0 / R X 1 1 00 P R O D U C T S V e r s i o n 1 . 1 2 . 6 – M a y 1 4 t h , 2 0 0 8 R u g g e d C o m 30 W h i t m o r e R o.
About this User Guide A b o u t t h i s U s e r G u i d e This guide is concerned with aiding the u ser in the configuration a nd operation of the RuggedRouter u sing the RuggedCom comm and line, setup menu an d web man agement interfaces.
RuggedRouter User G uide D o c u m e n t C o n v e n t i o n s This publication uses the following conventions: N o t e : M e a n s r e a d e r t a k e n o te . N o t e s c o n t a i n h e l p f u l s u g g e s t i o n s o r r e f e r e n c e s t o m a t e r i a l s n o t c o n t a i n e d i n t h i s g u i d e .
About this User Guide 10. All further configuration is accomp lished through the web man agement interfa ce. Attach the configuring host to one of the Ethern et ports configured above. Point your w eb browser at the address for that port, u se https a nd specify a port number of 10000, e.
RuggedRouter User G uide 22. If your router is equip ped with an embedded mod em, the Networking m enu, Modem sub-m enu w ill a llow you to configure it with PPP or in coming console connections. See the chapt er “Configuring PPP And Modem” for more details.
About this User Guide 35. When you r routers configuration is s table, it is r ecommen ded that the configuration should be up loaded from the rout er and stored as a backup .
RuggedRouter User G uide T a b l e O f C o n t e n t s About this User Gu ide................................................................................................ ... ... ... ... ... ... ... .. ... .1 Applica ble Firmw are R evision....
Table Of Contents Bootup And Shutdown .............................................................................................................. ... ... 45 Change Password Com ma nd .................................................................
RuggedRouter User G uide Strategy For Creatin g Interfaces............................................................................ ... ... ... ... ... .. .69 Naming Of Logical Interfaces.........................................................
Table Of Contents Introduction............................................................................................................................. ... ... ... 91 ADSL Fundamenta ls..............................................................
RuggedRouter User G uide Virtual Priva te Networkin g To A DMZ.................................................................................114 Firewal l Main Menu.................................................................................
Table Of Contents Router- ID ............................................................................................................ ... .. ... ... ... ... .. 143 Hello Interval a nd Dead Inte rval.................................................
RuggedRouter User G uide VRRP Main Menu.................................................................................................. ... ... ... .. ... ... ... ... 168 VRRP Configura tion.......................................................
Table Of Contents Message Pac ketiza tion................................................................................................ .. ... ... ... 191 Use of Turnaround Delays......................................................................
RuggedRouter User G uide Viewing The GPS Status............................................................................. ... ... ... ... ... ... ... .. ... ... .222 Viewing The GPS Log ..........................................................
Table Of Contents Alert Menu.................................................................................................................. ... ... ... ... .. .240 Alert Configuration.................................................................
RuggedRouter User G uide Setting Up The Routers............................................................................................................ .. ... .275 An Alternate Approach..........................................................
Table Of Fig ures T a b l e O f F i g u r e s Figure 1: Ru ggedRouter Setup Main M enu....................................................................................... ..29 Figure 2: Ru ggedRouter Setup Password Chan ge Menu.....................
RuggedRouter User G uide Figure 26: Scheduled Com mands Dis playing a Comm and....................................................... ... ... ... .47 Figure 27: Webmin Scheduled Cron Jobs............................................................
Table Of Fig ures Figure 53: T1/E1 Network Interfaces After Interface Creat ion..................................................... ... ... 70 Figure 54: Edit T1 Inte rface..............................................................................
RuggedRouter User G uide Figure 80: ADSL Link Statistics......................................................................................................... .96 Figure 81: Modem Interface.......................................................
Table Of Fig ures Figure 107: Server Configuration...................................................................................... ... ... .. ... ... .. 130 Figure 108: Show Public Key ............................................................
RuggedRouter User G uide Figure 134: Link Backup Status................................................................................ .. ... ... ... ... ... ... ... . 162 Figure 135: Test Link Backup .............................................
Table Of Fig ures Figure 161: Ra w Socket Menu.................................................................................. ... .. ... ... ... ... ... ... .194 Figure 162: Serial Protocols Statistics Menu..........................................
RuggedRouter User G uide Figure 188: IRIGB/IEEE1588 General Configuration m enu...................................... .. ... ... ... ... ... ... .230 Figure 189: IRIGB Configuration menu.............................................................
Table Of Fig ures Figure 215: Archive D iffere nces List........................................................................... .. ... ... ... ... ... ... .251 Figure 216: Show D iffere nce for selected file between two targets....................
RuggedRouter User G uide Figure 242: IAS Window - Edit Profile................................................................................ ... .. ... ... .. 282 Figure 243: IAS Window – A dd Attribute.........................................
Chapter 1 – Setting Up And Administering The Router C h a p t e r 1 – S e t t i n g U p A n d A d m i n i s t e r i n g T h e R o u t e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th the RuggedCom Serial Cons ole interface, the RuggedRouter Setup script and signing on to the Web interface.
RuggedRouter User G uide End Backup Server, VPN Serve r, NFS, OS PF/RIP p rotocol and firewall) are disabled by de fault. A c c e s s i n g T h e R u g g e d R o u t e r C o m m an d P r o m p t F r o m th e C o n s o l e P o r t Attach a terminal (or PC running termin al emu la tion softwar e) to the RS232 port on the rear of the chassis.
Chapter 1 – Setting Up And Administering The Router F i g u r e 2 : R u g g e d R o u t e r S e t u p P a s s w o r d C h a n g e M e nu C o n fi gu r i n g I P A d d r e s s In f o r m a t i o n The Change Port IP Address comm and configures port IP addresses and gatewa ys.
RuggedRouter User G uide F i g u r e 5 : R a d i u s S e r v e r C o n f i g u r a t i o n me n u The Hostname/IP an d Port Number fi elds configures the server loca tion. The Shared Secret field configures the unique pas sword used by this server.
Chapter 1 – Setting Up And Administering The Router E n a b l i n g A n d D i s a b l i n g T h e G a u n t l e t S e c u r i t y A p p l i a n c e The Gauntlet security Appl iance requ ires a pas s phrase u nique to your network. This menu will configure it.
RuggedRouter User G uide D i s p l a y i n g H a r d w a r e In f o r m a t i o n The Displa y Hardware Information comma nd describes commission ed hardware.
Chapter 1 – Setting Up And Administering The Router R e s t o r i n g A C o n f i g u r a t i o n The Restore A Previous Configuration comma nd provides a m eans to restore a previous ly ta ken snapshot of the configuration of the router.
RuggedRouter User G uide T h e R u g g e d R o u t e r W e b I n t e r f a c e The RuggedCom Web interface is provided by an enhanced version of the p opula r Webmin interface.
Chapter 1 – Setting Up And Administering The Router The rightmost or configuration frame pr esents the configura tion for the currently selected subs ystem, or in the cas e of signing-on, the home pa ge window. The hom e page win dow presents an annota ted view of the front of the chassis a s well as a numb er of importan t system p aram eters.
RuggedRouter User G uide • C o n f i g u r e t h e s i g n - o n p a s s w o r d , • S p e c i f y s e s s i o n t i m e o u t s , • R e s t r i c t t h e S u b n e t o f I P a d d r e s s e.
Chapter 1 – Setting Up And Administering The Router The LED status Pan el provides the console port, indicat es the sta tus of hardware/softwa re an d can initiate a controlled reboot. The LEDs are organized into three p rimary groups; the p ort group, GPS/PPP group and the Alarm/ Power Suppl y group.
RuggedRouter User G uide Chapte r 2 – W ebmin Conf iguration I n t r o d u c t i o n This chapter fam iliariz es th e user wi th configuring the router through the Webmin menu and describes the .
Chapt er 2 – Webmin Configura tion If your router is being used on a complet ely privat e networ k, or IP access control is being provided by the firewall you m ay leave IP Access Control disabled. Select the Allow from all addresse s field and Save.
RuggedRouter User G uide The Web managemen t p ackage provides context sensitive help in each of its menus. When a help link is selected th e router instructs the brows er to open the help text from a h elp server.
Chapt er 2 – Webmin Configura tion A u t h e n t i c a t i o n F i g u r e 2 0 : W e b m i n Co n f i g u r a t i o n M e n u , A u th e n t i c a t i o n This menu allows you to configure what W ebmin will do wh en a num ber of failed logins from the sam e IP address occur.
RuggedRouter User G uide W e b m i n E v e n t s L o g F i g u r e 2 1 : W e b m i n E v e n t s L o g This menu allows you to search the W ebmin log for changes made by you rself or other admin istrators.
Chapt er 2 – Webmin Configura tion This page intentional ly blank RuggedCom 43.
RuggedRouter User G uide C h a p t e r 3 – C o n f i g u r i n g T h e S y s t e m I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g a n d d i s a b l i n .
Chapt er 3 – Configuring The System The second part of the m enu allows you to program sp ecific actions a t boot time. The script wil l be run after all regular boot actions have com pleted. F i g u r e 2 3 : B o o t u p a n d S h u t d o w n , P a r t 2 The actions ma y be a series of comma nds that ca n be executed at the comma nd line.
RuggedRouter User G uide Begin by selecting the tim e and date you w ish to run the comma nd at us ing the Run on date and Run at time fields. Use the Run in direc tory field to enter a directory to run the com man d in, or simply use “/”. Finally, enter the comma nd to execute in the Commands to execute field.
Chapt er 3 – Configuring The System S c h e d u l e d C r o n J o b s A Cron job is a combination of a comm and to run , and a definition of the times a t which to run it.
RuggedRouter User G uide Follow th e link of a specific job in order to delete the job, e dit it, or test the comm and part of the job by running it immediat ely. If you have multip le jobs, the arrows in the Move column w ill a lter the order in which they are pr esented.
Chapt er 4 – Configuring Networking C h a p t e r 4 – C o n f i g u r i n g N e t w o r k i n g I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g R o u.
RuggedRouter User G uide C o r e S e t t i n g s F i g u r e 3 3 : C o r e N e t w o r k i n g S e t ti n g s This menu allows you to configure core networkin g settings. The IPV6 Support field determines where IPV6 interfaces are created and supp orted at boot time.
Chapt er 4 – Configuring Networking This menu allows you to configure a dumm y interface. Normall y the router is reachable on a ny of its interfac e addresses, whether the in terface is active or not. When OSPF a nd link detection is u sed, inactive in terfaces a re not advertised to the network and thus not reachabl e.
RuggedRouter User G uide The Network/Host and Netmask fields describe the remote network the s tatic route will reach. If the netmas k fi eld is not entered (or a netm ask of 255.255.255 is entered) the rou ting will define a host route. An y other n etmask will define a network route.
Chapt er 4 – Configuring Networking S t a t i c M u l ti c a s t R o u t i n g F i g u r e 3 6 : S t a t i c M u l t i c a s t R o u t i n g This menu allows you to configure static mu lticas t routing. The Configured Static Multic ast Routes table shows configured multicast routes.
RuggedRouter User G uide D N S C l i e n t F i g u r e 3 7 : D N S C l i e n t This menu allows you to display and configure various DNS client fields. The Resolution Order s elector determin es the order of sources for resolving domain nam es into IP addresses.
Chapt er 4 – Configuring Networking The backup is “end to end” because conn ectivity is determined by th e ava ilability of an interface on the target system, and not a local link. In the above figure, interface w1ppp acts as the p rimary interface and eth1 acts as the s econdary interface.
RuggedRouter User G uide C o n fi g u r i n g E n d T o E n d Ba c k u p F i g u r e 4 0 : E n d T o E n d B a c k u p This menu allows you to display and configure end to end backup. In orde r to start end to end backup a t each an d every boot, you must enable it via the System folder, Bootup And Shutdown menu .
Chapter 5 – Configuring Ethernet Interfaces C h a p t e r 5 – C o n f i g u r i n g E t h e r n e t I n t e r f a c e s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • R e.
RuggedRouter User G uide The last 2-bytes of the VLAN tag contain the following informat ion: the firs t 3-bits are a User Priority Fi eld that ma y be u sed to assign a priority level to the E thernet frame.
Chapter 5 – Configuring Ethernet Interfaces E t h e r n e t F i g u r e 4 1 : E t h e r n e t M e n u This menu allows you to configure Ethernet interface param eters as well as displa y the routes and status of all n etwork int erfaces. Select the Ethernet Interfaces icon to configure E thernet interfaces.
RuggedRouter User G uide The Network Configura tion menu Apply Configu ration button a ppli es p erman ent changes and restart E thernet networking. If only tem porar y changes hav e been made, the p ermanen t configuration wil l be re-app lied. In either table, edit the desired interface by clicking on its link under the Name column.
Chapter 5 – Configuring Ethernet Interfaces V i r t u a l I n t e r f a c e s Use virtua l interfaces when you hav e an Eth ernet p ort that ha s multip le "real" IP addresses assigned to it, e.g. as with a p ort provided by an an Internet Service Provider.
RuggedRouter User G uide This menu allows you to make p erman ent changes to int erfaces and to imm ediatel y app ly thos e changes if desired. The Save button will save changes to the permanent configuration . The Netmask , Broadcast , MTU, Virtual Interfaces, Prox y ARP and Media Type controls are as described ab ove.
Chapter 5 – Configuring Ethernet Interfaces E d i t PP P o E I n t e r f a c e F i g u r e 4 8 : E d i t i n g a P P P o E I n t e r f a c e This menus allows you to edit a PPPoE interface. The PPPoE Username field determin es th e userna me to use when connecting to the PPPoE server as sp ecified by your provider.
RuggedRouter User G uide P P P L o g s F i g u r e 4 9 : D i s p l a y P P P L o g s This menu displays the nativ e Ethernet and internal ADSL interface PPPoE connection messa ges. This is main ly useful when trying to debug a PPP connection problem.
Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 C h a p t e r 6 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d T1/E1 I n t r o d u c t i o n This chapter fam iliariz es th e user wi t.
RuggedRouter User G uide Unlike PPP, a Frame Relay link can provide mu ltip le (u p to 990) connections. Each connection is identified by a Data Link Connection Identifier (DLCI) and must ma tch at the D CE an d DT E. The us e of multip le connections can su pport m eshed n etwork interconnections and disaster recovery.
Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 N e t w o r k I n t e r f a c e s F i g u r e 5 1 : T 1 / E1 Ne t w o r k I n t e r f a c e s I n i t i a l C o nf i g u r a t i o n This menu allows you to display and configure T1/E1 Trunk pa rameters , Chann els and the logical interfaces that ru n on them.
RuggedRouter User G uide After assigning the first DLCI, you m ay revisit the interface throu gh the link under the Name field and add additional DLCIs. Once a ll channels ha ve been a ssigned, the “Assign” links will no longer app ear, a s shown below.
Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 This menu allows you to display and configure T1 or E1 Trunk para meters. By default th e interface is set for T1 operation. The Convert this interface to E1 link will set the int erface for E1 op eration a nd allow you to configure its settings.
RuggedRouter User G uide E d i t i n g A L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) F i g u r e 5 5 : E d i t L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) This menu allows you to configure Frame Relay link and logical interface fi elds.
Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y D L C I s The second table provides a listing of all DLCIs available on the chann el. Only the DLCI selected from the main m enu can be edited, although an other DLCI can be added by fol lowing the Add ano ther D LCI to this channel link.
RuggedRouter User G uide T 1 / E 1 S t a t i s t i c s When at lea st one logical interface is configured, T1/E1 Link and logical interface statistics will be a vailable. These statistics are ava ilable from lin ks on the T1/E1 WAN Int erfaces m enu.
Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 F r a m e R e l a y I n t e r f a c e S t a t i s t i c s F i g u r e 5 8 : F r a m e R e l a y St a t i s t i c s Note that the Frame Rel ay Trunk Statis tics and Frame Rel ay Trunk Communications Err ors ta bles are common to all Fra me Rela y DLCIs on the trunk.
RuggedRouter User G uide P P P In t e r f a c e S t a t i s t i c s F i g u r e 5 9 : P P P L i n k S t a t i s t i c s 74 RuggedCom.
Chapter 6 – Configuring Frame Relay/ PPP And T1/E1 T 1 / E 1 L o o p b a c k When at lea st one logical interface is configured, a T1/E1 Loopback tests can be performed.
RuggedRouter User G uide Running a loop test on an active interface will immediatel y cause it to go down. The loop test autom atica lly initializes the trunk after compl eting the t est.
Chapter 7 – Configuring Frame Relay/ PPP And T3 C h a p t e r 7 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d T 3 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: .
RuggedRouter User G uide T 3 C o n f i g u r a t i o n F i g u r e 6 2 : T 3 T r u n k s A n d I n t e r f a c e s This menu allows you to display and configure T3 Trunks as well as displa y the routes a nd status of the network interfaces.
Chapter 7 – Configuring Frame Relay/ PPP And T3 E d i t i n g A T 3 I n t e r f a c e F i g u r e 6 5 : E d i t T 3 I nt e r f a c e This menu allows you to display and configure T3 Trunk param eters. The Framing field determines the framin g format u sed.
RuggedRouter User G uide F i g u r e 6 7 : E d i t L o g i c a l I n t e r f a c e ( F r a m e R e l a y ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (Frame Relay) s ection of the Configuring F rame Relay/PPP And T1/E1 chapter.
Chapter 7 – Configuring Frame Relay/ PPP And T3 U p g r a d i n g S o f t w a r e For some customers, access to rem ote sites in a ccomplished solely by a T3 connection. Usuall y a software upgrade will stop the system being upgraded, perform the upgrade a nd then restart it.
RuggedRouter User G uide This page intention ally blank 82 RuggedCom.
Chapter 8 – Configuring Frame Relay/ PPP And DDS C h a p t e r 8 – C o n f i g u r i n g F r a m e R e l ay / P P P A n d D D S I n t r o d u c t i o n This chapter fam iliariz es th e user wi th:.
RuggedRouter User G uide D D S C o n fi g u r a t i o n F i g u r e 6 9 : D D S T r u n k s A n d I n t e r f a c e s This menu allows you to display and configure DDS Trunks. The Current Rou tes menu will display the rout es and status of the n etwork int erfaces.
Chapter 8 – Configuring Frame Relay/ PPP And DDS N a m in g O f L o g i c a l I n t e r fa c e s Webmin na mes the logical interfaces for you (but a llows you to provide a description). All int erfaces start w ith a “w” to identify th em as wan in terfaces, followed by the in terface nu mber.
RuggedRouter User G uide E d i t i n g A L o g i c a l I n t e r f a c e ( P P P ) F i g u r e 7 4 : E d i t L o g i c a l I n t e r fa c e ( P P P ) The fields and buttons in this m enu a re the sa me as those described in the Editing A Logical Interface (PPP) section of the p revious chap ter.
Chapter 8 – Configuring Frame Relay/ PPP And DDS F r a m e R e l a y A n d P P P I n t e r f a c e S t a t i s t i c s Fram e Rela y And PPP Interface Statis tics are as described i n the Configuring F rame Relay/PPP And T1/E1 chapter.
RuggedRouter User G uide This page intention ally blank 88 RuggedCom.
Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL C h a p t e r 9 – C o n f i g u r i n g P P P o E / B r i d g e d M o d e O n A D S L I n t r o d u c t i o n This chapter fam iliariz es th e u.
RuggedRouter User G uide A u t h e n t i c a t i o n , A d d r e s s e s a n d D N S S e r v e r s PPP a uthentica tion util izes PAP or CHAP. Your ISP will provide you w ith a user-ID and passw ord which you wi ll enter in the GUI. The authentica tion p rocess will assign a local IP address and addresses of the ISPs DNS servers to the router.
Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL TX (Red) indic ates w hen data is being transmitted ov er DSL. RX (Red) indicates when data is being received over DSL. While connecting the LED s are fla shing sequential ly. The RuggedRouter also in dicates informat ion about ADSL ports on th e LED Pan el.
RuggedRouter User G uide This menu allows you to display and configure logical interface fi elds for PPPoE and to convert the in terface to Bridged Mode . By default, in terfaces ar e created with PPPoE. If you wan t the interfac e to be Bridge d Mode, click on the Convert this interface t o bridged link.
Chapt er 9 – Configuring PPPoE/Bridged Mode On ADSL The Descri ption field atta ches a description to the logical interface viewable from the network interfaces m enu. The VPI field determines the VPI nu mber the connection uses. The defau lt of 0 is correct for most providers.
RuggedRouter User G uide When at lea st one logical interface is configured, ADSL Link sta tistics wi ll be availabl e. These sta tistics are a vailable from links on the DDS WAN I nterfaces menu . The Local S NR Ratio is an effective indicator of line qu ality.
Chapter 10 – Configuring PPP an d Modem C h a p t e r 1 0 – C o n f i g u r i n g P P P a n d M o d e m I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n.
RuggedRouter User G uide M o d e m M a i n M e n u F i g u r e 8 1 : M o d e m I n t e r f a c e This menu allows you to display and configure the modem interface. M o d e m C o n fi gu r a t i o n F i g u r e 8 2 : E d i t M o d e m C o n f i g u r a ti o n This menu allows you to configure the mod em settings a nd features.
Chapter 10 – Configuring PPP an d Modem Rings before answer con trols how man y tim es to let the m odem ring be fore answ ering the call, if Dial- in console or PPP Server is ena bled. Additio nal Modem AT Init Codes allows extra AT code s to be entered if requ ired.
RuggedRouter User G uide M o d e m P P P C l i e n t Co n n e c t i o n s F i g u r e 8 3 : C o nf i g u r e M o de m P P P C l i e n t To edit an existing connection, click the 'Edit' link for that connection. To cre ate a n ew connection click 'Add ne w' lin k.
Chapter 10 – Configuring PPP an d Modem M o d e m P P P S e r v e r F i g u r e 8 5 : C o n f i g u r e M o d e m P P P S e r v e r The Server I P address field controls which IP the router will u se for the PPP connection. The Client IP address field controls which IP to assign the to remote system w hich it connects.
RuggedRouter User G uide This page shows the latest log entries for incom ing calls. This is mainl y u seful when trying to debug a problem w ith establishin g incoming connections. M o d e m P P P L o g s F i g u r e 8 7 : P P P L o g s This page shows the PPP logs.
Chapter 10 – Configuring PPP an d Modem M o d e m P P P C o n n e c t i o n L o g s F i g u r e 8 8 : P P P C o n n e c ti o n L o g s This page shows a list of PPP connections. It shows who conn ected, when they connected and disconnected, the connection sp eed, and session traffic.
RuggedRouter User G uide This page intention ally blank 102 RuggedCom.
Chapter 11 – Configuring The Firewall C h a p t e r 1 1 – C o n f i g u r i n g T h e F i r e w a l l I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i.
RuggedRouter User G uide The netfilter s ystem us es rulesets , collections of packet class ification rules that determine the ou tcome of examination of a sp ecific packet. The rul es are defined by iptables , a generic table stru cture syn tax and utility p rogram for the configuration an d control of netfilter.
Chapter 11 – Configuring The Firewall P o r t F o r w a r d i n g Port forwarding (also known a s redirection) allows traffic coming from the Internet to be sent to a hos t behind the NAT gateway. Previous examples ha ve described the NAT process when connections ar e made from the intran et to the Internet.
RuggedRouter User G uide 7) If your hosts mus t accept sessions from the Internet configure the rules file to supp ort Destination Network a ddress Tra nslation (DNAT ). Which hosts need to accept conn ections, from whom and on which p orts? 8) Configure the rul es file to override the default policies.
Chapter 11 – Configuring The Firewall N o t e : I n o r d e r t o i m p r o v e s e c u r i t y t h e r o u t e r w i l l c r e a t e a z o n e “ u n u s d ” a n d un u s e d i n t e r f a c e s t o t h i s z o n e w h e n S h o r e w a l l s t a r t s .
RuggedRouter User G uide Note that a cli ent on the Internet that is p robing the RuggedRouter's TCP/UDP ports will receive no respon ses an d will not be able to detect th e presence of the rout er. A host in the loca l network, on the other hand, will fail to connect to the router but wi ll receive a notification.
Chapter 11 – Configuring The Firewall 2) In this SNA T rule a static address of 66.11.180.161 is acqu ired from the ISP. Traffic f rom the subnet han dled by eth2 should be translated to 66.11.180.161 as it sent to the Internet over ppp . The + a t the end of “pp p+” causes Shorewa ll to match an y pp p int erface.
RuggedRouter User G uide Source-Port The tcp/udp p ort the connection originated from. Original- Destination-IP The destination IP address in the connection requ est a s it was received by the firewa ll. Rate- Limit A specification which allows the ra te at which connections are made to be lim ited.
Chapter 11 – Configuring The Firewall IPSe c traffic arriving a t the firewal l is directed to op enswan, th e IPSec daemon. Opens wan th en decrypts the traffic and forwards it back to shor ewall on th e assigned ipsecX in terface. You w ill also need a rule to allow traffic to enter from this interface.
RuggedRouter User G uide F i r e w a l l M a i n M e n u F i g u r e 8 9 : S t a r t i n g S h o r e w a l l F i r e w a l l M e n u The above figure shows th e firewall menu prior to configuration. Configure the firewa ll through the provided menu s.
Chapter 11 – Configuring The Firewall F i g u r e 9 0 : S ho r e w a l l F i r e w a l l M e n u The “Apply Configuration” button mus t be us ed after ma king configuration changes. It is recommend ed that the “Ch eck Firewa ll” bu tton be used first to verify that an y changes made a re valid.
RuggedRouter User G uide N e t w o r k Z o n e s F i g u r e 9 1 : F i r e w a l l N e t w o r k Z o n e s This menu allows you to add, del ete and configure zones. Add a new zone by selecting the “Add a new n etwork zon e” lin k or by clicking on the a dd-abo ve or add- below imag es in the Add field.
Chapter 11 – Configuring The Firewall This menu allows you to add, del ete and configure network interfaces. Add a new interface by s electing the “Add a new n etwork int erface” lin k or by clicking on the add-above or add- below imag es in the Add field.
RuggedRouter User G uide The norfc1918 option cau ses p ackets arriving on this interface and that hav e a source or destination address that is reserved in RFC 1918 to be dropped after being optionall y logged.
Chapter 11 – Configuring The Firewall D e f a u l t P o l i c i e s F i g u r e 9 5 : F i r e w a l l D e fa u l t P o l i c i e s This menu allows you to add, del ete and configure default policies. Add a new policy by selecting the “Add a new defau lt polic y” link or by clicking on the add-above or add-be low ima ges in th e Add field.
RuggedRouter User G uide This menu allows you to add, del ete and configure masqu erading and SNAT rules. Add a new rule by s electing the “Add a new ma squ erading rule” link or by clicking on the add-above or add-be low im ages in the Add field.
Chapter 11 – Configuring The Firewall The following fields describe the information to match against the in coming connection request in order to app ly this rule. The Action field specifies the final action of the rule. The and log to syslog fi eld determines whether logging will take place and at which logging level.
RuggedRouter User G uide This menu allows you to add, del ete and static N AT translations. Add a new translation s by selecting th e “Add a new static NAT entry” link or by clicking on the add-above or add- below imag es in the Add field. Reorder the transla tions by clicking on the arrows u nder the Move field.
Chapter 11 – Configuring The Firewall This menu allows you to control which addresses the firewa ll will a ccept connections from after it has been stop ped. Add a new trans lations by s electing the “Add a new stopp ed address” link or by clicking on th e add-above or add- below images in the Add field.
RuggedRouter User G uide This page intention ally blank 122 RuggedCom.
Chapt er 12 – Configuring An IPsec VPN C h a p t e r 1 2 – C on f i g u r i n g A n I P s e c V P N I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g I.
RuggedRouter User G uide With route based VPNs: • O p e n s w a n g e n e r a t e s a n I P S E C i n t e r f a c e f o r e a c h V P N t u n n e l , • A s t h e t u n n e l i s b r o u g h t .
Chapt er 12 – Configuring An IPsec VPN When you want to use this form of encryp tion, each router configures its VPN connection to u se the RSA algorithm and includes the public signatu re of its p eer. The RuggedRouter's pu blic signature is available from the outpu t of the Show Public Keys menu.
RuggedRouter User G uide You mu st configure the fir ewall to accept connections on these ports a nd protocols. See the Configuring The Fire wall cha pter, Configuring The Fire wall And VPN section for details.
Chapt er 12 – Configuring An IPsec VPN After a VPN connection is created this menu will display an icon for the conn ection, as shown in the next view of the VPN Configuration m enu.
RuggedRouter User G uide The “Apply Configuration” button restarts th e server to a ctivate any configuration changes that ha ve been mad e, restarting VPN connections.
Chapt er 12 – Configuring An IPsec VPN N o t e : W h e n c o n n e c t i o n s b e c o m e a c t i v e , O p e n s w a n a s s i g n s t h e m t o i p s e c i n t e r f a c e s . Y o u m u s t p l a n o n t h e s e i n t e r f a c e s b e i n g t h e s o u r c e o f i n c o m i n g t r a f f i c i n f i r e w a l l r u l e s .
RuggedRouter User G uide L i s t C e r t i f i c a t e s F i g u r e 1 1 0 : L i s t C e r t i f i c a t e s This menu lists ava ilable certificat e files, their corresponding key files a nd det ails whether a pu blic key for the certificate is configured.
Chapt er 12 – Configuring An IPsec VPN The At IPsec startup fi eld determines what ha pp ens to the connection a fter Opens wan sta rts and includes the options “Ignore”, “Add c onnection”, “Start Connection”, “Route” and “Default”.
RuggedRouter User G uide L e f t / R i g h t S y s t e m ' s Se t t i n gs F i g u r e 1 1 2 : E d i t i n g A V P N C o n n e c t i o n , P a r t 2 The Public I P address fields determine the IP address of the side of the conn ection being e dited.
Chapt er 12 – Configuring An IPsec VPN S h o w i n g I P s e c S t a t u s 1 interface lo/lo 127. 0.0.1 2 inter face eth1/eth1 10.0.0. 253 3 inter face eth2/et h2 204.
RuggedRouter User G uide The fourth group (lines 30-39) describe connection describe VP N connections (here “openswa ntest”). The first line is p articularl y u seful s ince it indicates the connection addresses, subnets a nd that the connection is active (“erouted”).
Chapt er 12 – Configuring An IPsec VPN G e n e r a t e X . 5 0 9 C e r t i f i c a t e s Use the a uthority to produce a certificate authority pu blic certification (cacert) a nd a certificate for each of the clients and a certificate for the router.
RuggedRouter User G uide Parameters Value Comments At IPsec Startup Add con nection We wish to add the connection when the client starts it. Authenticate by rsasig X.
Chapt er 12 – Configuring An IPsec VPN This page intention ally blank RuggedCom 137.
RuggedRouter User G uide C h a p t e r 1 3 – C on f i g u r i n g D y n a m i c R o u t i n g I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g T h e D y n.
Chapt er 13 – Configuring Dynamic Routing OS P F F u n d a m e nt a l s The Open Path Shortest First (OSPF) protocol rou ting determines the best pa th for routing IP traffic over a TCP/IP network based on link cost and qua lity. Unlike static routing, OSPF tak es link failu res and other n etwork top ology changes into a ccount.
RuggedRouter User G uide A router can be pa rt of mul tiple areas and function as a gateway between areas. When mul tiple areas are u sed on a networ k, ar ea 0 is the backbone area. All areas must have a router connecting them to area 0. R o u t e r - I D Defines the ID of the router.
Chapt er 13 – Configuring Dynamic Routing L i n k D e t e c t When link detect is enabled for an OSPF/RIP active interface, OSPF or RIP will be notified when th e interface goes down and will stop advertising subnets ass ociated with that interface.
RuggedRouter User G uide N o t e : E n s u r e t h a t An t i s p o o f i n g i s d i s a b l e d i f y o u a r e c o n s t r u c t i n g t h e a b o v e d e s c r i b e d t y p e o f O S P F n e t w o r k .
Chapt er 13 – Configuring Dynamic Routing OS P F A n d V R R P E x a m p l e N e t w o r k This network consists of three rout ers connected in a ring with T1/E 1 links.
RuggedRouter User G uide If Router 1 or its Ethern et link fail, VRR P will detect the link being down and remove the direct route to the 1.1.2.0/24. VRRP on Rou ter 2 wil l stop seeing messa ges from Router 1, elect its elf mas ter and will take over the ga teway for the network .
Chapt er 13 – Configuring Dynamic Routing C o r e F i g u r e 1 1 8 : Co r e M e n u The Core routing daemon handles comm unica tions between the k ernel of the router and the other dyna mic routing p rotocols. Core handles link detection a nd monitoring static rout es and routes for directly connected interfaces on the router.
RuggedRouter User G uide Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface. Clicking on sta tus displa ys the current statu s of the interface, including link stat e, IP address and traffic counts.
Chapt er 13 – Configuring Dynamic Routing O S P F F i g u r e 1 2 1 : O S P F M e n u This menu contains the configuration and status of OSPF on the router.
RuggedRouter User G uide The Enab le Password field sets the p assw ord to be used for the enable comm and of ospfd. This is used by the telnet int erface of ospfd to control access to the configuration. The Telnet Password field sets th e pa ssword to be used for telnet access to ospfd.
Chapt er 13 – Configuring Dynamic Routing The Redistribute K ernel fields control distribution of kern el rout es. When enabled, OSPF will advertise rou tes from th e kernel routing table, which includes s tatic routes entered by the administrator, to other OSPF routers in the area.
RuggedRouter User G uide The Transmit Delay fi eld controls the estima ted n umber of seconds to transmit a link state update pack et. This should take into account transm ission and propagation delays of the interface. The Passive Interface option controls if an interface is active or p assive.
Chapt er 13 – Configuring Dynamic Routing The RIP Global Parameters and RIP Interfaces configure RIP. The Status and View RIP Configuration menu display the actu al status and configuration file contents of RIP.
RuggedRouter User G uide The Redistribute Conne cted fields control distribution of connected routes. When enabled, RIP will advertise routes to directly conn ected interfaces to other RIP routers in the ar ea. Normally only routes that fall within the scop e of the n etwork a reas will be advertised.
Chapt er 13 – Configuring Dynamic Routing Param eters specific to one interface a re configured here. Each int erface on the rou ter is listed. Clicking on settings displa ys a menu of configuration options for that interface.
RuggedRouter User G uide Networks a re used when you want to a dd any router that is pa rt of a specific s ubnet, or connected to a sp ecific network interface to be part of your RIP network. Both neighbors and networks can be u sed at the sa me ti me.
Chapt er 13 – Configuring Dynamic Routing This page intention ally blank RuggedCom 155.
RuggedRouter User G uide C h a p t e r 1 4 – C o n f i g u r i n g L i n k B a c k u p I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g l i n k b a .
Chapt er 14 – Configuring Link Backu p The daemon wil l constru e the ma in link as havin g failed (even if its link statu s is “up”) if the remot e host fa ils to respond to configurable n umber of pings after waiting a configurable timeou t for each ping.
RuggedRouter User G uide E d i t L i n k B a c k u p C o n f i g u r a t i o n F i g u r e 1 3 2 : L i n k B a c k u p C o nf i g u r a t i o n Set the Name field to su ppl y an identification of the pair. This field initially defau lts to the “ma in_link_n ame- >backup _link_n ame” .
Chapt er 14 – Configuring Link Backu p N o t e : I f y o u d e l e t e a l i n k b a c k u p c o n f i g u r a t i o n t h a t h a s f a i l e d o v e r ( o r i s f a i l i n g o v e r ) t o i t s b.
RuggedRouter User G uide The Test Duration field controls the a moun t of time to run before restoring service to the ma in trun k. Please note that this dura tion mus t take into accou nt the tim.
Chapt er 14 – Configuring Link Backu p This page intention ally blank RuggedCom 161.
RuggedRouter User G uide C h a p t e r 1 5 – C o n f i g u r i n g V R R P I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g V R R P • E n a b l i .
Chapt er 15 – Configuring VRRP Each Virtua l Rout er has a us er-config ured Virtu al Router Identifier (VRID) and an Virtual IP address or set of IP addresses on the shar ed LA N. Hosts on the shar ed LAN are configured to use these addresses as the default gat eway.
RuggedRouter User G uide The router issu es a s et of gratuitous ARPs when moving between mas ter and backup state. These unsolicited ARPs teach th e hosts and switches in the n etwork of the current MAC address and port as sociated with the VRIP.
Chapt er 15 – Configuring VRRP V R R P M a i n M e n u F i g u r e 1 3 7 : V R R P M a i n M e n u Note that VRRP is disabled by default and ma y be enabled via the System folder, Bootup And Shutdown menu . VRRP can be configured through the VRRP C onfiguration link before the daemon is started.
RuggedRouter User G uide E d i t i n g A V RR P I n s t a n c e F i g u r e 1 3 9 : V R R P I n s t a n c e The Name field is pur ely for informat ional purp oses. The Interface field configures th e interface tha t VRRP packets are sent up on. The Virtual Router I D field determin es the VRID number.
Chapt er 15 – Configuring VRRP V i e w i n g V R R P In s t a n c e s S t a t u s F i g u r e 1 4 0 : V R R P I n s t a n c e s S t a tu s The VRRP Instances Status m enu displa ys th e current sta tus of VRRP instances. This menu does not updat e statu s in real ti me.
RuggedRouter User G uide C h a p t e r 1 6 – C o n f i g u r i n g T r a f f i c P r i o r i t i z a t i o n I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i .
Chapter 16 – Configuring Traffic P rioritiza tion T O S P r i o r i t i z a t i o n The priority of an IP packet can be derived from its Typ e of Service field.
RuggedRouter User G uide P r i o r i t i z a t i o n E x a m p l e A remote site rout er connects to a p rivate network via a T1 line. The router us es OSPF to m anage an a lternate routing, but its p rimar y pu rpos e is to allow access to a switched networ k of RuggedServers imp lement ing TcpModbus gateways (TCP/UDP port 502).
Chapter 16 – Configuring Traffic P rioritiza tion T r a f f i c P r i o r i ti z a t i o n M a i n M e n u F i g u r e 1 4 1 : T r a f f i c P r i o r i t i z a t i o n M a i n M e nu This menu displays network interfaces for which prioritiza tion m ay be activated.
RuggedRouter User G uide Remove prioritiz ation by s electing the D elete and Apply button. P r i o r i t i z a t i o n Q u e u e s F i g u r e 1 4 3 : P r i o r i t i z a t i o n Q u e u e C o n f i g u r a t i o n This menu allows you to edit the na me of of a p riority qu eue and to delete th e queu e.
Chapter 16 – Configuring Traffic P rioritiza tion Prioritization works by es tablishing qu eues a t the r equired priority levels filling the transmit queu e w ith them in priority order.
RuggedRouter User G uide C h a p t e r 1 7 – C on f i g u r i n g G e n e r i c R o u t i n g E n c a p s u l a t i o n I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E.
Chapter 17 – Configuring Generic Routing E ncapsu lation G R E M a i n M e n u F i g u r e 1 4 7 : G R E M a i n M e n u This menu displays configured GRE tunn els.
RuggedRouter User G uide This page intention ally blank 176 RuggedCom.
Chapt er 18 – Network Util ities C h a p t e r 1 8 – N e t w or k U t i l i t i e s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • P i n g i n g h o s t s , • R u n n i.
RuggedRouter User G uide P i n g M e n u F i g u r e 1 5 0 : P i n g M e n u The Hostname field accepts the host n ame or IP addre ss to ping. The Verbose Output? field caus es ping to present the m aximu m of ou tput. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes.
Chapt er 18 – Network Util ities The Packet Length? field specifies the size of the data in the trac eroute pa cket. The Interface? field sp ecifies th e network interface to obtain the sou rce IP address for outgoing probe packets. Otherw ise the router w ill ma nua lly s et the address based on the actu al in terface taken .
RuggedRouter User G uide The Maximum packets c aptured an d Ma ximum capture time fields limi ts the amou nt of traffic captu red. The Lookup Addresses? field cau ses pin g to resolve IP addresses to domain na mes. This can make pin g behave very s lowly if DNS is not prop erly configured.
Chapt er 18 – Network Util ities The Message RX/TX a nd Incoming/Outgoing Connecti ons fields caus es data pack ets an d Connection activity to be included in the trace.
RuggedRouter User G uide C u r r e n t R ou ti n g & I n t e r f a c e T a b l e F i g u r e 1 5 7 : Cu r r e n t Ro u t i n g & I n t e r f a c e T a b l e This menu displays the current routing table an d the state of the router's int erfaces.
Chapt er 18 – Network Util ities I n t e r f a c e St a t u s This menu also su mmari zes the interface status. The entries un der the Devic e fi eld reflect the na me of the device. The entries un der the Link up field reflect the current link stat e of interface.
RuggedRouter User G uide This page intention ally blank 184 RuggedCom.
Chapt er 19 – Configuring Serial Protocols C h a p t e r 1 9 – C o n f i g u r i n g S e r i a l P r o t o c o l s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • R a w S .
RuggedRouter User G uide S e r i a l Pr o t oc o l s A p p l i c a ti o n s C h a ra c t e r E n c a p s u l a t i o n Character enca psula tion is used an y time a stream of chara cters mus t be reliably transport ed across a network. The character stream s can be creat ed by any s erial device.
Chapt er 19 – Configuring Serial Protocols The host will s equentia lly poll ea ch RTU. Each p oll received by the host server is forwarded (i.e. broadc ast) to a ll of the remo te s ervers. All RTUs will receive the request and the ap propria te RTU will issue a reply.
RuggedRouter User G uide If config ured to pack etize on a tim eout , the s erver will wait for a configurable time after receiving a cha racter before pa cketizing and forwarding. If another character arrives during the wai ting interval, the tim er is restarted.
Chapt er 19 – Configuring Serial Protocols A s s i g n P r o t o c o l s M e n u F i g u r e 1 5 9 : As s i g n P r o t o c o l s M e n u This menu associates a p rotocol with a serial p ort. Unused ports shou ld be left associated with “none”. Cha nging an association w ill im mediat ely close the ca lls of the old protocol.
RuggedRouter User G uide The Pack Char field configures the nu meric valu e of the ASCII character which will force forwarding of accumula ted data to the network. The Pack Cha r mus t be between 0 and 255 inclusive or the va lue off. If configured off, accumulat ed data will be forwarded based upon the pa cketiza tion timeou t p aram eter.
Chapt er 19 – Configuring Serial Protocols S e r i a l P r o t o c o l s S ta t i s t i c s M e n u F i g u r e 1 6 2 : Se r i a l P r o t o c o l s S t a t i s t i c s M e n u This menu presents statist ics of serial p ort activity and established connections.
RuggedRouter User G uide S e r i a l P r o t o c o l s T r a c e M e n u F i g u r e 1 6 3 : S e r i a l P r o t o c o l s T r a c e M e n u This menu displays decoded se rial port an d network activit y. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed.
Chapt er 19 – Configuring Serial Protocols S e r i a l P r o t o c o l s S e r t r a c e U t i l i t y The comman d line sertrace utility offers the ability to trace the a ctivity of serial p orts in real ti me. A port range ma y be sp ecified to limit the ou tput to sp ecific ports.
RuggedRouter User G uide This page intention ally blank 194 RuggedCom.
Chapt er 20 – Configuring GOOSE Tunnels C h a p t e r 2 0 – C on f i g u r i n g G O O S E T u n n e l s I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i .
RuggedRouter User G uide GOOSE Pac kets received from the network are s tripped of their n etwork headers and forwarded to Ethernet ports configured for the sam e mu lticas t address. The forwarded frames contain the MAC sou rce address or the originating device, and not that of the transmittin g interface.
Chapt er 20 – Configuring GOOSE Tunnels G e n e r a l C o n f i g u r a t i o n M e n u F i g u r e 1 6 5 : G e n e r a l C o n f i g u r a t i o n M e n u This menu configures the daemon settings. The Daemon U DP Listen Port fi eld configures port used by the daemon to commun icate with other daemons.
RuggedRouter User G uide The Multicast Address field configures the address to listen for. The Remote Dae mon and Add a new Daemon fields sp ecify th e IP addresses of remote daemons.
Chapt er 20 – Configuring GOOSE Tunnels This menu displays decoded GOOSE activity. The desired traffic sources, num ber of messages and length of time to captu re are entered and the Start Trace bu tton is pressed. The m enu w ill displa y u p to the provided number of m essages wa iting up to the sp ecified numb er of seconds.
RuggedRouter User G uide This page intention ally blank 200 RuggedCom.
Chapter 21 - Configuring The DHCP server C h a p t e r 2 1 - C o n f i g u r i n g T h e D H CP s e r v e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • D H C P S e r v e r.
RuggedRouter User G uide In DHCP settings at a m ore sp ecific level overrides higher levels. For exam ple you can configure a DNS server for all clients, the create a group tha t overrides the setting. This allows defaults to be set at a high level to a pply to mos t clients, whi le exceptions can be places just where they are needed.
Chapter 21 - Configuring The DHCP server • B o o t f i l e n a m e : T h e f i l e n a m e t h e c l i e n t s h o u l d r e q u e s t f r o m a t f t p s e r v e r t o b o o t f r o m . T h i s o n l y a p p l i e s t o n e t w o r k b o o t e d c l i e n t s .
RuggedRouter User G uide E x a m p l e D H C P S c e n a r i o s A n d C o n f i g u r a t i o n s S i n g le N e t w o r k W i t h D y n a m i c I P A s s i g n m e n t In this example the eth1 interface is provided with IP address 192.168.1.1/24 while addresses 192.
Chapter 21 - Configuring The DHCP server Assign a client a t switch p ort 2 address 192.168.1.102. Assign a client a t switch p ort 3 address 192.168.1.103. Assign multip le clients a t switch p ort 4 dynamic a ddresses 192.168.1.151 through 192.168.1.
RuggedRouter User G uide The switch p ort 2 is on vlan2 us ing subnet 192.168.2.0/24 and should assign addresses 192.168.2.101 to 192.168.2.200 and default gateway 192.168.2.1. The switch p ort 3 is on vlan3 us ing subnet 192.168.3.0/24 and should assign addresses 192.
Chapter 21 - Configuring The DHCP server D H C P S e r v e r M a i n M e n u F i g u r e 1 7 0 : D H C P S e r v e r M e n u The DHCP Server main menu shows th e subnets configured for DHCP, as w ell a s any group s and hosts. New subn ets, groups and hosts can be added, and e xisting entries can be edited (and optionally deleted).
RuggedRouter User G uide D H C P S h a r e d N e t w o r k C o n fi gu r a t i o n F i g u r e 1 7 1 : D H C P S h a r e d N e t w o r k C o n f i g u r a t i o n The settings sp ecific to the Shared network menu ar e the Shared network description and Network na me.
Chapter 21 - Configuring The DHCP server D H C P S u b n e t C o n f i g u r a t i o n F i g u r e 1 7 2 : D H C P S u b n e t C o n f i g u r a t i o n The settings sp ecific to the Subnet m enu are the subnet description, Network address and mask. The Subnet description field is us ed to descri be the subnet as desired.
RuggedRouter User G uide D H C P G r o u p Co n f i g u r a t i o n F i g u r e 1 7 3 : D H C P G r o u p C o n f i g u r a t i o n The settings sp ecific to the Group menu ar e the group description and Use nam e as client hostna me fields. The Group description field is us ed to describe the group as desired.
Chapter 21 - Configuring The DHCP server The Hardware address field is the Ethernet MAC of the client associated w ith the host entry. The Fixed IP address field is the IP to as sign to the ma tching client.
RuggedRouter User G uide C h a p t e r 2 2 – C o n f i g u r i n g N T P I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • E n a b l i n g / D i s a b l i n g N T P • S .
Chapt er 22 – Configuring NTP T h e N T P S a n i t y L i m i t NTP c hanges the system through “stepp ing” a nd “dri fting”. Stepping is a sudden change of time whereas drifting is a slow gradual tim e change. NTP will step the system ti me w hen its starts.
RuggedRouter User G uide N T P S e r v e r M ai n M e n u F i g u r e 1 7 6 : N T P Se r v e r Note that the NTP server is disabled by de fault and may be enabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Restart ntpd daemon button.
Chapt er 22 – Configuring NTP S e r v e r s C o n f i g u r a t i o n F i g u r e 1 7 8 : N T P Se r v e r L i s t The servers under the IP address column are u sed as prima ry syn chronization devices. Clicking on a link w ill allow you to edit that server.
RuggedRouter User G uide V i e w i n g T h e N T P S t a t u s F i g u r e 1 7 9 : N T P St a t u s The NTP S tatus menu displa ys pos sible sources an d curre ntly us ed reference clocks V i e w i n g T h e N T P L o g F i g u r e 1 8 0 : N T P L o g The NTP Lo g menu displays the log of recent NTP events.
Chapt er 22 – Configuring NTP V i e w i n g T h e G P S S t a t u s F i g u r e 1 8 1 : G P S St a t u s If the router is equi pped with a Precision Time Protocol card, this pa ge will shows the status of the GPS module. The Latitude and Longitude fields show the curr ent position of the GPS antenna .
RuggedRouter User G uide C h a p t e r 2 3 – C o n f i g u r i n g SSH I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r i n g S S H A u t h e n t i c a t .
Chapt er 23 – Configuring SSH S S H M a i n M e n u F i g u r e 1 8 3 : S S H S e r v e r Note that the SSH server is enabled by default and may be disabled via th e System folder, Bootup And Shutdown menu . When enabl ed, any configuration changes m ay be made to ta ke effect by selecting the Apply Changes button.
RuggedRouter User G uide N e t w o r k i n g F i g u r e 1 8 5 : SS H S e r v e r N e t w o r k i n g The Listen on addresses fi elds determine an IP addresses and port upon which SSH will accept a connection. The Listen on port field determines the p ort num ber SSH will listen on, a ssumin g Listen on addresses is set to “All addresses”.
Chapt er 23 – Configuring SSH The Only allow u sers fi eld specifies th e users allowed to conn ect by SSH. The specification can be a list of user na me p atterns, separat ed by spac es. Login is allowed only for user n ames that ma tch one of the pattern s.
RuggedRouter User G uide C h a p t e r 2 4 – C on f i g u r i n g I R I G B A n d I E E E 1 5 8 8 I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • I E E E 1 5 8 8 C o n f.
Chapt er 24 – Configuring IRIGB And I EEE 1588 NTP The P TP clock is a secondary re ference standard reference clock . The router uses this identifier w hen it has synchronize d with remote NTP server. DFLT A fter the router ha s power cy cled but before a ny GPS or NTP locks have occurre d.
RuggedRouter User G uide R e f e r e n c e C l o c k s The GPS provides the highest qu ality reference clock. It will alw ays be used when it is ava ilable, but ma y require s ome tim e aft er boot before becoming acquired (or “GPS locked”). Typical ly, GPS lock is usu ally acquir ed within five m inutes of boot.
Chapt er 24 – Configuring IRIGB And I EEE 1588 I R I G B / I E E E 1 5 8 8 M a i n M e n u F i g u r e 1 8 7 : I R I G B / 1 58 8 M a i n M e n u This menu allows you to configure IRIGB and IEEE1588, displa y its cu rrent status and review historical changes.
RuggedRouter User G uide I R I G B C o n f i g u r a t i o n F i g u r e 1 8 9 : I R I G B C o n f i g u r a t i o n m e n u This menu allow you to configure IRIG B param eters. The sa ve button will save the changes of configuration p erman ently.
Chapt er 24 – Configuring IRIGB And I EEE 1588 I R I G B S t a tu s F i g u r e 1 9 1 : I R I G B G PS S t a t u s This page shows whether GPS is locked, and the source of the current referenc e clock. I E E E 1 5 8 8 S t a t u s F i g u r e 1 9 2 : I E E E 1 5 8 8 S t a t u s This page shows the historical s tatus of IEEE1588 on the router.
RuggedRouter User G uide I R I G B L o g F i g u r e 1 9 3 : I R I G B G P S S t a t u s This page reflects reference clock changes in IRIG- B. 228 RuggedCom.
Chapt er 24 – Configuring IRIGB And I EEE 1588 This page intention ally blank RuggedCom 229.
RuggedRouter User G uide C h a p t e r 2 5 – C on f i g u r i n g T h e S n o r t I D S I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • C o n f i g u r a t i o n o f S n o r t a s a n I n t r u s i o n D e t e c t i o n S y s t e m .
Chapter 25 – Configuring The Snort IDS When the a lert file m ethod is chosen, a da ily an alysis of the file can be ema iled. The SIDs re ferenced in alerts can be us ed to quickly locate the rule via the m ain Sort IDS menu. The rule its elf often contains HTML links to Internet resou rces su ch as www.
RuggedRouter User G uide R u l e s e t s F i g u r e 1 9 6 : S n o r t M a i n M e n u p a r t 3 The Rulesets section s elects th e rules to appl y on m onitored interfaces. Each “ruleset ” reflects a collection of rules that a re related. The link under the Action field will disable or enable a ll of the rul es in a ru leset.
Chapter 25 – Configuring The Snort IDS This menu allows you to configure the IP addresses and ports of servers in the local and external n etwork. The Home Ne t field defaults to “ANY” and designates the IP subn et of any local ports on the router.
RuggedRouter User G uide Alerts generated by s nort are stored by one of three m ethods; as local syslog messag es, remotely sylogged messages a nd in an alert file. When the Local sysl ogging method is chos en, the destina tion log file ma y be selected.
Chapter 26 – Maintain ing The Router C h a p t e r 2 6 – M a i n t a i n i n g T h e R o u t e r I n t r o d u c t i o n This chapter fam iliariz es th e user wi th: • V i ew i n g A l e r t s .
RuggedRouter User G uide This menu displays active alerts a nd allows you to change al ert system configuration and alert definitions. Follow th e All Alerts link to s how all a lerts. Follow the s everity lin ks ( Emergen cy .. Debug) or the category links (chassis .
Chapter 26 – Maintain ing The Router A l e r t F i l t e r C o n f i g u r a t i o n F i g u r e 2 0 3 : A l e r t F i l t e r C o n f i g u r a t i o n M e n u This menu configures an al ert filter, which defines the forwarder destinat ion for active a lerts ma tching with defined filter l evel.
RuggedRouter User G uide C h a n g e Al e r t D e fi n i t io n Figure 205 : Change Alert Definition Menu This menu allows you to change an existing alert definition entry. The Codepoint is the key part of the alert definition entry and does not allow to be changed.
Chapter 26 – Maintain ing The Router The Threshold configures the threshold to compa re with the shell comma nd result to see wh ether the condition is true or false. The And Repeats configures how ma ny tim es the condition mu st be true before th e alert is gen erated.
RuggedRouter User G uide G a u n t l e t S e c u r i t y RX1100 owners can u se the Gauntlet security ap plian ce to restrict access to critical assets. This section details how to activate Gau ntlet a nd determine cu rrently negotiated sessions .
Chapter 26 – Maintain ing The Router Gauntlet net fw TCP any 10000 The orde r of rules is significant. Rul es inserted before this set will not be protected by Gaun tlet. Any rule a ppea ring after the gauntlet cha in rules will automa tically be ignored.
RuggedRouter User G uide B a c k u p A n d R e s t o r e F i g u r e 2 0 7 : S y s t e m B a c k u p A n d R e s t o r e The Backup And Restore system provides the following fea tures: • A l l c.
Chapter 26 – Maintain ing The Router G e n e r a l C o n f i g u r a t i o n F i g u r e 2 0 8 : G e n e r a l Co n f i g u r a t i o n S e t u p This menu configures the backu p sys tem. The Automatic Nightly Backup fi eld specifies wh en the n ightly backup is scheduled.
RuggedRouter User G uide A r c h i v e H i s t o r y F i g u r e 2 0 9 : A r c h i v e H i s t o r y The Archive History m enu displays current archives, sorted by da te (most r ece nt first). Following the lin k of an a rchives under the Arc hive Name fi eld upload a copy of it.
Chapter 26 – Maintain ing The Router The created archive can be immedia tely up loaded if desired by following the “Uploa d A Copy Of This Arc hive.
RuggedRouter User G uide The Archive Difference m enu show s the difference between two targets. The first target mu st be an a rchive while the second target can be either another archive or the current configuration. Choose two and only two ta rgets and click the Show Differe nces bu tton.
Chapter 26 – Maintain ing The Router F i g u r e 2 1 6 : Sh o w D i f f e r e n c e f o r s e l e c t e d f i l e b e tw e e n t w o t a r g e ts The Copy This F ile to Curre nt Configuration button will be p resent wh en the destination a rchive is the Cu rrent Configura tion.
RuggedRouter User G uide SNMP V1 and V2 transmit information in clear t ext (which ma y or ma y not be a n issu e depending the facilities the da ta is transmi tted over) and are la cking in the ability to authent icate a us er. SNMP V 3 adds strong authenticati on and encryption .
Chapter 26 – Maintain ing The Router The Client address (Source IP) field sp ecifies the a ddress from which snm pd will send notifications. If the field is blan k, the default behaviour w ill be to trans mit the notification from the IP address of the interface from which the message leaves the router.
RuggedRouter User G uide F i g u r e 2 2 2 : A c c e s s C o nt r o l p a g e , S N M P V 3 The second part of the Access control m enu allows creation an d de letion of V3 users. The User Name field selects the n ame of the new user. The Access fi eld determines whether the comm unity is read-only or read/write.
Chapter 26 – Maintain ing The Router T r a p C o n f i g u r a t i o n F i g u r e 2 2 3 : T r a p C o n f i g u r a ti o n p a g e , T r a p O p t i o ns The Trap Configuration pa ge man ages SNMP trap destination s.
RuggedRouter User G uide The SNMP V3 Trap Destinations p art of the m enu a llows the creation a nd dele tion of V3 trap destina tions. The Type field sp ecifies the exchange used with this destination, eit her V3 tra p or V3 inform. The IP address and Trap Community fields s pecifies the receivers IP address and user na me.
Chapter 26 – Maintain ing The Router R a d i u s A u t h e n t i c a t i o n The Radius p rotocol described in RFC 2865 provides a mea ns for carrying auth entication, a uthorizat ion, and configuration informa tion between a client (the router) which desires to au thenticate its links and a shared Authen tication Server.
RuggedRouter User G uide Some u sers set the rrsetup and root accoun t passw ords to diffi cult to gu ess strings that a re uniqu e to each rou ter, then em ploy a comm on p assword for all rou ters in radius. The rout er specific strings are restricted to a very few personn el.
Chapter 26 – Maintain ing The Router Ou t g o i n g M a i l F i g u r e 2 2 8 : Ra d i u s A u t h e n t i c a t i o n M a i n M e n u Outgoing Mail is configured from within th e the Maintenance m enu Miscel laneous sub-menu. This menu controls where emai ls originated by the router a re forwarded to.
RuggedRouter User G uide C h a s s i s P a r a m e t e r s F i g u r e 2 2 9 : Ch a s s i s P a r a m e t e r s M e nu This menu displays the chas sis temp eratu re an d, if hardware version 2, the voltage levels of chass is power sup plies and a record of the last p ower down tim e.
Chapter 26 – Maintain ing The Router S y s t e m L o g s F i g u r e 2 3 0 : S y s t e m L o g s System logs are records of activities that hav e occurred on the router, sorted into specific cat egories. System logs can be invalu able when debugging configuration changes.
RuggedRouter User G uide Left unrestricted the logging system would consu me all ava ilable “disk” sp ace, causing the rou ter to fail. The rou ter limi ts the memory u sed by the logging system by storing logs in a volatile (i.e. lost a fter a reboot) file syst em which is lim ited in size.
Chapter 26 – Maintain ing The Router U p g r a d e S y s t e m F i g u r e 2 3 2 : So f t w a r e U p g r a d e S y s t e m The Software Upgrade system provides the following fea tures: • U p g r .
RuggedRouter User G uide Your RuggedRouter softwa re is p rovided in releases of the form rrX.Y.Z. The platform release num ber X changes when n ew hardware platforms are r eleased. The major releas e n umber Y is increased w hen imp ortant new featu res a re added.
Chapter 26 – Maintain ing The Router U p g r a d e t o R X 1 1 0 0 F i g u r e 2 3 3 : U p g r a d e t o R X 1 1 0 0 This menu allows you to upgrade you r router. The displa y u sefully provides a description of the cu rrent hardware in th e router inventory.
RuggedRouter User G uide A u t o m a t i c Up g r a d i n g F i g u r e 2 3 5 : Au t o m a t i c U p g r a d e Check the Upgrades enabled field to activate daily u pgrades. Use the Upgr ade Time fields to s elect the time to upgrade. Selecting different ti mes on each rou ter can be used to even out traffic flows in the n etwork.
Chapter 26 – Maintain ing The Router I n s t a l l i n g A N e w P a c k a g e F i g u r e 2 3 7 : I n s t a l l i n g A N e w P a c ka g e The Install A New Packag es feature uploa ds and installs packa ges to the rout er. Select the From l ocal file option if you have already moved the p ackag e to the router through http, ftp or scp.
RuggedRouter User G uide U p l o a d i n g A n d D o w n l o a d i n g F i l e s F i g u r e 2 3 8 : U p l o a d / D o w nl o a d m e n u The Upload/Download Files m enu p rovides a mean s to tran sfer files to a nd from the router.
Chapt er 27 – Security Considerations C h a p t e r 2 7 – S e c u r i t y C o n s i d e r a t i o n s I n t r o d u c t i o n This chapter describes actions to take to secure the RuggedRouter. S e c u r i t y A c t i o n s 1. C hange the root an d rrsetup p asswords from the rrsetup shell, before a ttaching the router to the network.
RuggedRouter User G uide This page intention ally blank 266 RuggedCom.
Appendix A – Setting Up A Repos itory A p p e n d i x A – S e t t i n g U p A R e p o s i t o r y The RuggedCom software upgrade m echanism requires a repos itory of softwar e to availabl e.
RuggedRouter User G uide U p g r a d i n g T h e R e p os i t o r y RuggedRouter releas es are obtained from th e RuggedCom w eb site as ZIP files. Download the ZIP file to you r regula r and/or test releas e directories and unzip them. You ma y delete the original ZIP file if desired.
Appendix A – Setting Up A Repos itory U p g r a d i n g C o n s i d e r a t i o n s The RuggedRouter offers you the ability to p erform au tomat ic daily u pgrades, sp ecify the download tim e an d limit the down load bandwidth. The se tools automa te the upgrade p rocess and minim ize the imp act of upgrading on the network.
RuggedRouter User G uide A p p e n d i x B – D o w n g r a d i n g R o u t e r S o f t w a r e RuggedCom recognizes tha t custom ers m ay need to downgrade router softwar e: • R o u t e r s b e i n g a d d e d t o t h e n et w o r k h a v e m o r e r e c e n t v e r s i o n t h a n t h a t s t a n d a r d i z ed f o r t h e n e t w o r k .
Appendix C – Installing Apa che Web Server On Windows A p p e n d i x C – I n s t a l l i n g A p a c h e Web S e r v e r O n W i n d o w s A number of custom ers ha ve ask ed for advice and instructions on sett ing up a web server on Windows.
RuggedRouter User G uide Return to the web browser u sed earlier to verify Apa che and refresh the screen. It should now reflect the contents of your RuggedRouter release directory.
Appendix D – Installing IIS Web Se rver On Windows A p p e n d i x D – I n s t a l l i n g I I S We b S e r v e r O n W i n d o w s A number of custom ers ha ve ask ed for advice and instructions on sett ing up an IIS web server on Windows. Begin by identifying a host comp uter that has IIS and its physical and logical location on the n etwork.
RuggedRouter User G uide A p p e n d i x E – R a d i u s S e r v e r C o n f i g u r a t i o n This section describes how to configure pop ular radius servers to sup ply a Vendor- Specific field, “privilege- level”, which is u sed by Webmin to ass ign assign specific capa bilities to Webmin users on a per u ser basis.
Appendix E – Radius Server Configura tion Permission : Grant rem ote a ccess p ermission 3. Double click th e policy nam e you created, In the pop up window, click Edit Profile... button. F i g u r e 2 4 1 : I A S W i nd o w - E d i t R e m o t e A c c e s s P o l i c y 4.
RuggedRouter User G uide 5. In A dd Attribute window, select Vendor-Specific line, and click Add button. F i g u r e 2 4 3 : I A S W i n d o w – A d d A t t r i b u t e 6.
Appendix E – Radius Server Configura tion 8. In the Configure VSA (RFC comp liant) win dow, in the vendor-assigned attribute numb er editbox , inpu t 2; in the Attribute format listbox, select Strin.
RuggedRouter User G uide I n d e x Accounts................................................................................................................................................ root.......................................................
Index N392 ...................................................................................................................................... ... .. ... 72 N393 ......................................................................................
RuggedRouter User G uide Ethernet Ports................................................................................................................. ... ... .59, 189 LED Pan el ..................................................................
Index On ADSL Interfaces...................................................................................................................... 91 On Native E thernet Interfaces...........................................................................
RuggedRouter User G uide Authenticat ion ..................................................................................................................... ... ... .224 Configuring................................................................
An important point after buying a device RuggedCom RX1000 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought RuggedCom RX1000 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data RuggedCom RX1000 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, RuggedCom RX1000 you will learn all the available features of the product, as well as information on its operation. The information that you get RuggedCom RX1000 will certainly help you make a decision on the purchase.
If you already are a holder of RuggedCom RX1000, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime RuggedCom RX1000.
However, one of the most important roles played by the user manual is to help in solving problems with RuggedCom RX1000. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device RuggedCom RX1000 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
