Manuals / Allied Telesis / Computer Equipment / Network Router

Allied Telesis AT-WR4500 manual Host Information, Network Load Statistics Matrix

Models: AT-WR4500

1 264

Page 260

260	AT-WR4500 Series - IEEE 802.11abgh Outdoor Wireless Routers
	RouterOS v3 Configuration and User Guide

Some screenshots from NTop program, which has gathered Traffic-Flow information from our router and displays it in nice graphs and statistics. For example, where what kind of traffic has flown:

Figure 36: Host Information

Top three hosts by upload and download each minute:

Figure 37: Network Load Statistics Matrix

Page 260

Image 260

Allied Telesis AT-WR4500 manual Host Information, Network Load Statistics Matrix

Contents

AT-WR4500 Series PN 613-000813 Rev. BAT-WR4500 Series Ieee 802.11abgh Outdoor Wireless Routers RouterOS v3 Configuration and User GuideLimitation of Liability and Damages Contents Routes, Equal Cost Multipath Routing, Policy Routing IP Addresses and ARP117 118120 121Hot Spot Service 222 163164 16610.3.7 Command Description 10.3.8 Service PortPossible Error Messages 12.1.2 General SettingsFigures Document Conventions Purpose of This GuideHow This Guide is organized Allied Telesis FTP server ftp//ftp.alliedtelesis.com Sales or Corporate Information Management Software UpdatesTell Us What You Think Introduction Software License FeaturesAdmin@AT-WR4541g /system license print software-id NCL8-3TT Accessing theWR4500 throughWinBox Using WinBoxLogging in the AT-WR4500 Router Downloading WinBox loaderAT-WR4500 Login admin Password Accessing the CLIPassword can be changed with the /password command Aaaaaaaaaaa Ttttttt Aaaaaaa Aaaaa Tttt Command Action System Backup General InformationExport Command Import CommandConfiguration Reset SpecificationsSoftwareVersion Management General InformationSystem Upgrade To upgrade chosen packagesStep-by-Step Property DescriptionSubmenu level /system upgrade upgrade-package-source 192.168.25.8 AdminSoftware Package Management Adding Package SourceCommand name /system package uninstall Installation UpgradeUninstallation Command name /system package downgrade Admin@AT-WR4562 system package print Flags X disabledDowngrading Name VersionSuppose we need to test ipv6 package features Command name /system package unscheduleDisabling and Enabling UnschedulingAdmin@AT-WR4562 system package unschedule security Name Version ScheduledTo upgrade selected packages Software Package ListDownload Downloading 16 %Package name Contents Prerequisites Additional License Package name Contents Prerequisites Additional License General Interface Settings Command name /interface monitor-trafficInterface Status Traffic MonitoringEthernet Interface Configuration Ethernet InterfacesRelatedTopics Additional ResourcesCommand name /interface ethernet monitor Monitoring the Interface StatusType RX-RATE TX-RATE MTU ARPDefault-cable-setting standard standard Wireless InterfacesTroubleshooting IP Addresses and ARP Log Management Quick Setup GuideAck-timeout Range 5GHz 5GHz-turbo 2.4GHz-G Wireless Interface Configuration Submenu level /interface wireless30km 249 35km 298AT-WR4500 Series Ieee 802.11abgh Outdoor Wireless Routers Page AT-WR4500 Series Ieee 802.11abgh Outdoor Wireless Routers This example shows how configure a wireless client Nstreme Settings To see current interface settingsSubmenu level /interface wireless nstreme Signal-to-noise 73dB tx-ccq 79% rx-ccq 46% p-throughputNstreme2 Group Settings Submenu level /interface wireless nstreme-dualExample Submenu level /interface wireless registration-table Admin@AT-WR4562 interface wireless nstreme-dualRegistrationTable Then add nstreme2 interface with exact-size framingAdmin@AT-WR4562 interface wireless registration-table # Interface RADIO-NAME MAC-ADDRESSWlan1 000C42185C3D No -38dBm.. MbpsAccess List Submenu level /interface wireless connect-listSubmenu level /interface wireless access-list Connect ListInfo command Submenu level /interface wireless infoPage AT-WR4500 Series Ieee 802.11abgh Outdoor Wireless Routers Example Virtual Access Point Interface WDS Interface Configuration Submenu level /interface wireless wdsSubmenu level /interface wireless align AlignAlign Monitor Command name /interface wireless align monitorAdmin@AT-WR4562 interface wireless align ManualTransmit PowerTable Aproximately shows how loaded are the wireless channelsSubmenu level /interface wireless manual-tx-power-table Frequency MonitorCommand name /interface wireless scan interfacename Network ScanScan the 5GHz band Address Ssid Band Freq SIG RADIO-NAME AB RSubmenu level /interface wireless security-profiles Security ProfilesPage Submenu level /interface wireless sniffer Submenu level /interface wireless sniffer sniffWireless Sniffer Sniffs packets SnifferSubmenu level /interface wireless snooper Freq SIGNAL@RATE SRC DST TypeSniffer Packets SnooperStation and AccessPoint Application ExamplesSnoop 802.11b network Band Freq USE10.1.0.1/24 10.1.0.0 10.1.0.255 Admin@AccessPoint ip address 54MbpsConfigure the station and add an IP address 10.1.0.2 to it Check whether you can ping the Access Point from StationOn WDS Access Point WDS StationSet wds-default-bridge to bridge1 Virtual Access Point Virtual-test 4ghz-g Test 4ghz-gNstreme Nstreme network exampleSsid nstreme Dual NstremeMonitor the link Configure DualNS-1 Admin@DualNS-1 interface wireless nstreme-dualNow complete the configuration for DualNS-1 Admin@DualNS-2 interface wireless nstreme-dualWEP Security WEP security examplePage Configure WEPStation1 Admin@WEPStation1 interface wirelessAdmin@WEPStationX interface wireless WPA SecurityTest the link between Access point and the client Admin@WPAAP interface wireless security-profilesAdmin@WPAStation interface wireless security-profiles Admin@WPAStation interface wirelessVlan Setup Vlan InterfacesName MTU ARP Application ExampleVlan example on AT-WR4500 Routers 10.10.10.0 10.10.10.255 Test Admin@AT-WR4562 ip address Bridge Interfaces10.0.0.0 10.0.0.255 Ether1 10.20.0.0 10.20.0.255 Pc1Bridge Interface Setup Interface bridge add name=MyBridge disabled=noAdd ether1 and ether2 to MyBridge interface IP Addresses and ARP EoIPPort Settings Submenu level /interface bridge portCommand name /interface bridge monitor Command name /interface bridge port monitorBridge Monitoring Bridge Port MonitoringCommand name /interface bridge host Bridge Host MonitoringBridge Firewall General Description To monitor a bridge portProperty Description Page Bridge Packet Filter Bridge NATSubmenu level /interface bridge filter Submenu level /interface bridge natBridge Brouting Facility Submenu level /interface bridge brouteTroubleshooting Configuring Interfaces Dhcp and DNS IP Addresses and ARPIP Addressing Submenu level /ip addressAddress Resolution Protocol 10.10.10.0 10.10.10.255 Ether2 Admin@AT-WR4562 ip addressSubmenu level /ip arp 2.1/24 2.0 2.255 Ether2Address MAC-ADDRESS Interface Proxy-ARP featureAddress MAC-ADDRESS Proxy ARP Unnumbered Interfaces Consider the following configurationRouter setup is as follows RIP Routing Information Protocol General Setup Submenu level /routing rip interface Admin@AT-WR4562 routing ripInterfaces Networks NeighborsRoutes Submenu level /routing rip network0.0.0 Ether1 Admin@AT-WR4562 To view the list of the routesEther1 1500 Ether2 10.0.0.174 10.0.0.255 Ether1Admin@AT-WR4562 routing rip set redistribute-connected=yes 10.0.0.0/24 Admin@AT-WR4562 routing rip network0.0.0 Ether1 Admin@AT-WR4562 routing rip Regular routing table isRouting table of the Alliedware+ router is Alliedware+ Router ConfigurationOspf General Setup Submenu level /routing ospf area Admin@AT-WR4562 routing ospfOspf Areas Backbone 0.0 None Local10 10.5 Admin@WiFi routing ospf area Submenu level /routing ospf networkName AREA-ID Network AreaSubmenu level /routing ospf virtual-link Virtual LinksSubmenu level /routing ospf interface Virtual link should be configured on both routers 10.0.0.201 Admin@AT-WR4562 routing ospf virtual-linkSubmenu level /routing ospf neighbor NEIGHBOR-IDOspf backup without using a tunnel Ospf BackupAuthentication Define new Ospf area named local10 with area-idAdd connected networks with area local10 in ospf network Name Type RX-RATE Rate MTUName AREA-ID Stub DEFAULT-COST Authentication Add the same area as in main routerAdd connected networks with area local10 Add the needed IP addressesAdmin@OSPFMAIN ip route print Add connected networks with the same areaConnect, S static, r rip, o ospf, b bgp DST-ADDRESS Gateway Distance InterfaceRouting tables with Revised Link Cost Dead-interval=40sFunctioning of the Backup On OSPFpeer2Routes, Equal Cost Multipath Routing, Policy Routing NAT Policy Rules Submenu level /ip route ruleStatic Equal Cost Multi-Path routing Static Equal Cost Multi-Path Routing exampleStandard Policy-Based Routing with Failover Standard Policy-Based Routing with Failover192.168.0.0 192.168.0.255 Local1 DST-ADDRESS Prefsrc GatewayDhcp Client and Server Finally, add a Dhcp serverCheck whether you have obtained a lease Packages required dhcp License required Level1Dhcp Client Setup Submenu level /ip dhcp-clientSubmenu level /ip dhcp-server Dhcp Server SetupTo add a Dhcp client on ether1 interface Property Description Name Interface Relay Submenu level /ip dhcp-server configStore Leases on Disk Dhcp Networks Dhcp Server LeasesSubmenu level /ip dhcp-server network Submenu level /ip dhcp-server leaseCommand Description Dhcp Alert Dhcp OptionSubmenu level /ip dhcp-server alert Submenu level /ip dhcp-server optionDhcp Relay Use this option in Dhcp server network listSubmenu level /ip dhcp-relay Name Code ValueCommand name /ip dhcp-server setup Relay Ether1 10.0.0.1 Admin@AT-WR4562 ip dhcp-relayQuestions & Answers QuestionsDynamic Addressing, using DHCP-Relay IP addresses of DHCP-ServerName Interface Relay ADDRESS-POOL LEASE-TIME ADD-ARP # Address Gateway DNS-SERVER WINS-SERVERIP Address assignment, using FreeRADIUS Server Configure respective networksCreate Dhcp Servers DHCP-1Configure Radius Client on RouterOS Setup Dhcp Server Create an address poolConfigure Dhcp networks Clients.conf fileDNS Client and Cache IP and RoutingStatic DNS Entries 5Static DNS EntriesCache Monitoring Command name /ip dns cache flush 6Flushing DNS cacheFlush clears internal DNS cache Name AddressRadius Client Setup Radius clientService CALLED-ID Domain Address Ppp,hotspot 10.0.0.3 Admin@AT-WR4562 radiusConnectionTerminating from Radius Submenu level /radius incomingXTRadius does not currently support MS-CHAP Suggested Radius ServersSupported Radius Attributes Page Page Page Name VendorID Value Name VendorID Value RFC where it is defined AT-WR4500 Series Ieee 802.11abgh Outdoor Wireless Routers PPP User AAA Local PPP User ProfilesL2TP Interface Submenu level /ppp profilePage Local PPP User Database Submenu level /ppp secretCommand name /ppp active print Name Service CALLER-ID Password ProfileName Service CALLER-ID Address Uptime Encoding Monitoring Active PPP UsersTo enable Radius AAA Router User AAAPPP User Remote AAA Submenu level /ppp aaaExclamation sign ! just before policy item name means not Router User GroupsSubmenu level /user group Admin@rb13 user group Admin@AT-WR4562 user print Flags X disabledRouter Users Only one, it cannot be removedCommand name /user active print When Name AddressMonitoring Active Router Users Router User Remote AAATo enable Radius AAA, enter the following command SSH keysSubmenu level /user ssh-keys Generating key on a linux machineIP Addresses and ARP Bridge Interfaces EoIPSpecific Properties EoIP Setup Admin@OurGW interface pptp-server server set enable=yes Admin@Remote interface pptp-clientEoIP Application Example Name User MTU CLIENT-ADDRESS Uptime ENCSame for the Remote Interface Bridge Priority PATH-COSTQuick Setup Guide Interface Bonding General InformationSummary Related DocumentsProperty Description Application Examples Isp1 Ether 1500 Isp21.1/24 1.0 1.255 Isp2 10.1.0.0 10.1.0.255 Isp1EoIP tunnel configuration For Office1 through ISP1 For Office2 through ISP1For Office1through ISP2 For Office2through ISP210.1.0.0 10.1.0.255 Isp1 3.1/24 3.0 3.255 Bonding1 IPIPTunnel InterfacesFor Office2 Ipip Setup Add an IP address to created ipip1 interfaceConfiguration of the R2 is shown below Name MTU LOCAL-ADDRESSL2TP Interface Enable the L2TP serverConfiguration on L2TP client router Add a L2TP client Submenu level /interface l2tp-client 2 L2TP Client SetupIP Addresses and ARP AAA Configuration EoIP IP Security Example of an established connection Command name /interface l2tp-client monitorMonitoring L2TP Client 4 L2TP Server Setup To enable L2TP server5 L2TP Server Users Submenu level /interface l2tp-server serverTo add a static entry for ex1 user Interface l2tp-server add user=ex1Name User MTU CLIENT-ADDRESS Uptime ENCThen the user should be added in the L2TP server list 6 L2TP Application ExamplesRouter-to-Router Secure Tunnel Example Admin@HomeOffice interface l2tp-server server Add a L2TP client to the RemoteOffice routerTest the L2TP tunnel connection Connecting a Remote Client via L2TPTunnelAdmin@HomeOffice ppp secret print detail Flags X disabled Server must be enabled Admin@RemoteOffice ppp secretFromLaptop Admin@RemoteOffice interface l2tp-server Admin@RemoteOffice interface l2tp-server serverL2TP Setup for Windows Admin@RemoteOffice interface ethernetPPPoE ToInternet 1500Ip pool add name=pppoe-pool ranges=10.1.1.62-10.1.1.72 Add a user with username mike and passwordNow add a pppoe server PPPoE Client Setup Submenu level /interface pppoe-clientPPPoE Server Setup Access Concentrator Command name /interface pppoe-client monitorMonitoring PPPoE Client To monitor the pppoe-out1connectionAdmin@AT-WR4562 interface pppoe-server server PPPoE Users PPPoE Server User InterfacesSubmenu level /interface pppoe-server To view the currently connected usersAdmin@PPPoE-Server interface wireless PPPoE in a multipoint wireless 802.11g networkFirst of all, the wireless interface should be configured We should add PPPoE server to the wireless interface Finally, we can set up PPPoE clientsMy Windows XP client cannot connect to the PPPoE server Admin@MT interface pppoe-server serverPptp IP Addresses and ARP PPP User AAA EoIP Enable the Pptp serverConfiguration on Pptp client router Add the Pptp client Pptp Client Setup Submenu level /interface pptp-clientPptp Server Setup Command name /interface pptp-client monitorMonitoring Pptp Client Submenu level /interface pptp-server serverTo enable Pptp server Pptp UsersPPTPTunnel Interfaces Submenu level /interface pptp-server1460 10.0.0.202 6m32s None Pptp-in1 Ex1 Pptp Application ExamplesInterface pptp-server add user=ex1 Admin@HomeOffice interface pptp-server add user=ex Pptp-in1 Admin@HomeOffice interface pptp-serverAdmin@RemoteOffice interface pptp-client Add a Pptp client to the RemoteOffice routerConnecting a Remote Client via Pptp Tunnel Test the Pptp tunnel connectionConnecting a Remote Client via and Encrypted Pptp Tunnel FromLaptop Admin@RemoteOffice interface pptp-serverIP Addresses and ARP Firewall and QoS Pptp Setup for WindowsIP Security Description Submenu level /ip ipsec policy Policy SettingsDiffie-Hellman Group Modulus Reference Page Flags X disabled, D dynamic, I inactive PeersTo view the policy statistics, do the following Submenu level /ip ipsec peerLocal-addressread-only IP address local Isakmp SA address Remote Peer StatisticsSubmenu level /ip ipsec remote-peers To see currently estabilished SAs Installed SAsSubmenu level /ip ipsec installed-sa Sample printout looks as follows Flushing Installed SATableCommand name /ip ipsec installed-sa flush To flush all the SAs installed Tunnel mode example using AH with manual keyingRouterOS Router to RouterOS Router For Router1IPsec Between two Masquerading RouterOS Routers Add accept and masquerading rules in SRC-NATFor Router2 Filter Firewall FilterSubmenu level /ip firewall filter Mangle Packet FlowPage Property Description Page Page Filter Applications Protect your RouterOS routerProtecting the Customers Network Block IP addreses called bogonsMangle Create tcp chain and deny some tcp ports in itDeny udp ports in udp chain Allow only needed icmp codes in icmp chainFilter Packet Flow MangleSubmenu level /ip firewall mangle Page Page Page Mark by MAC address Admin@AT-WR4562 /ip firewall mangle add chain=forward \Peer-to-PeerTraffic Marking Packet Flow Packet FlowChange MSS Mangle FilterPacket Flow Diagram ConnectionTracking Submenu level /ip firewall connectionConnectionTimeouts Submenu level /ip firewall connection trackingService Ports Submenu level /ip firewall service-portGeneral Firewall Information NAT Submenu level /ip firewall nat2 NAT Address-list parameter Page Page NAT Applications Example of Source NAT MasqueradingExample of Destination NAT Example of one to one mappingHot Spot Service HotSpot GatewayHotSpot example network Page Page Question&Answer-Based Setup Command name /ip hotspot setupName Interface HotSpot Interface SetupHs-local Local HS-real Default Admin@AT-WR4562 ip hotspot 0s same as received HotSpot Server ProfilesSubmenu level /ip hotspot profile HotSpot User Profiles HotSpot UsersDescription HotSpot CookiesHTTP-levelWalled Garden To get the list of valid cookiesSubmenu level /ip hotspot walled-garden # User Domain MAC-ADDRESSIP-level Walled Garden One-to-one NAT static address bindingsSubmenu level /ip hotspot walled-garden ip Submenu level /ip hotspot ip-bindingActive Host List Command DescriptionService Port Ftp Admin@AT-WR4562 ip hotspot service-port Customizing HotSpot Firewall SectionTo set the FTP protocol uses both 20 and 21 TCP port Chain=hotspot action=jump jump-target=pre-hotspotPackets from the authorized clients through the hs-authchain Https proxy is listening on the 64875 portReject all packets to the clients with Icmp reject message Chain=hs-input action=jump jump-target=pre-hs-inputCustomizing HotSpot Http Servlet Pages Serving Servlet PagesHref=$link-loginlogin/a Page Hey, your username is john $elif username == dizzy To this line Add the following lineBefore this one To thisOr alternatively add this line Possible Error Messages Name Interface ADDRESS-POOL Profile IDLE-TIMEOUT HotSpot How-tosThen we can use that certificate for hotspot MAC-ADDRESS Address TO-ADDRESS Server10.11.12.3 Hs-local MAC-ADDRESS Address TO-ADDRESS Server IDLE-TIMEOUTHotSpot User AAA Page Submenu level /ip hotspot user Server Name Address Profile Uptime HotSpot Active UsersSubmenu level /ip hotspot active User Address Uptime 10.0.0.144 4m17s 55m43s Admin@AT-WR4562 ip hotspot activeTo get the list of active users Vrrp Vrrp RoutersProperty Description Flags X disabled, a active Virtual IP addressesSimple example of Vrrp fail over Submenu level /ip vrrp addressNow this address should appear in /ip address list Submenu level /system watchdog SystemWatchdogHardware Watchdog Management Automatic-supout yes Auto-send-supout yes Admin@AT-WR4562 system watchdog set auto-send-supout=yes \Admin@AT-WR4562 system watchdog General Settings Log ManagementSubmenu level /system logging TopicsActions Log MessagesSubmenu level /system logging action Submenu level /logSnmp Service To view the local logsTo monitor the system log TimemessageRelated Documents General ConfigurationTraffic Flow Admin@AT-WR4562 ip traffic-flow Admin@AT-WR4562 ip traffic-flow targetTraffic-FlowTarget Traffic-Flow ExampleHost Information Network Load Statistics MatrixNetwork load profile by time To store information on system drive every hour GraphingGeneral Options Simple Queue Graphing Health GraphingInterface Graphing 192.168.0.0/24 Yes Admin@AT-WR4562 tool graphing resource Resource GraphingSubmenu level /tool graphing resource ALLOW-ADDRESS

AT-WR4500 Series - IEEE 802.11abgh Outdoor Wireless Routers

RouterOS v3 Configuration and User Guide

Figure 36: Host Information

Figure 37: Network Load Statistics Matrix