RuggedCom RX1100, RX1000 specs

Chapter 11 – Configuring The Firewall

This menu allows you to control which addresses the firewall will accept connections from after it has been stopped. Add a new translations by selecting the “Add a new stopped address” link or by clicking on the add-above or add-below images in the Add field. Reorder the translations by clicking on the arrows under the Move field.

Clicking on a link under the Interface field will allow you to edit or delete the rule, as shown below. You may also make changes by manually editing the rule file.

RuggedCom

121

Image 123

RuggedCom RX1100, RX1000 manual

Contents

RuggedRouter Ruggedrouter User Guide Who Should Use This User Guide How To Use This User GuideAbout this User Guide Applicable Firmware Revision Quick Start Recommendations Document Conventions Basic Web Based Configuration Additional Configuration About this User Guide Table Of Contents Table Of Contents RuggedRouter User Guide 100 114 144 Page Table Of Contents Page 241 Page Table Of Figures RuggedRouter Setup Main Menu Scheduled Commands Displaying a Command T1/E1 Network Interfaces After Interface Creation Adsl Link Statistics Show Public Key Link Backup Status 162 Raw Socket Menu IRIGB/IEEE1588 General Configuration menu 230 255 IAS Window Edit Profile 282 Default Configuration Setting Up And Administering The RouterAccess Methods Accounts And Password Management From the Console Port Accessing The RuggedRouter Command PromptRuggedRouter Setup Shell Configuring Passwords Configuring IP Address Information Setting The HostnameConfiguring Radius Authentication Enabling And Disabling The SSH and Web Server Radius Server Configuration menu Enabling And Disabling The Gauntlet Security Appliance Configuring The Date, Time And Timezone RuggedRouter Hardware Information Menu Displaying Hardware Information Selecting a configuration to reload Restoring a Configuration Structure of the Web Interface Using a Web Browser to Access the Web InterfaceRuggedRouter Web Interface SSL Certificate Warnings RuggedRouter Web Interface Main Menu Window LED Status Panel Using The LED Status Panel LED Name Description Obtaining Chassis Information Webmin Configuration Webmin Configuration MenuIP Access Control Change Help Server Ports And Addresses Logging Webmin Configuration Menu, Logging Webmin Configuration Menu, Authentication Authentication Webmin Events Log Webmin Events Log This page intentionally blank Bootup And Shutdown Configuring The System Scheduled Commands Change Password Command Scheduled Commands Displaying a Command Webmin Scheduled Cron Jobs Scheduled Cron Jobs System Time System Hostname Network Configuration Configuring Networking Dummy Interface Core Settings Default Route Table Configured Static RoutesRouting And Gateways Manually Entered Static Routes Static Multicast Routing Static Multicast Routing End To End Backup DNS ClientHost Addresses Page Current Routing & Interface Table Configuring End To End Backup LED Designations Configuring Ethernet InterfacesEthernet Interface Fundamentals Vlan Interface Fundamentals RuggedRouter Functions Supporting VLANs PPPoE On Native Ethernet Interfaces Fundamentals Ethernet Interfaces Ethernet Editing a Network Interface Editing Currently Active Interfaces Edit Boot Time Interfaces Virtual InterfacesVirtual Lan Interfaces List PPPoE Interfaces PPPoE On Native Ethernet Interfaces Editing a PPPoE Interface Edit PPPoE Interface Current Routes & Interface Table PPP Logs Configuring Frame Relay/PPP And T1/E1 T1/E1 FundamentalsFrame Relay T1/E1 Location Of Interfaces And LabelingIncluded With T1E1 Strategy For Creating Interfaces T1/E1 Network Interfaces Naming Of Logical Interfaces Editing a T1/E1 Interface E1 Settings T1 Settings Frame Relay Link Parameters Editing a Logical Interface Frame Relay Frame Relay DLCIs Editing a Logical Interface PPP Link Statistics T1/E1 Statistics Frame Relay Statistics Frame Relay Interface Statistics PPP Link Statistics PPP Interface Statistics T1/E1 Loopback Menu T1/E1 Loopback Upgrading Firmware Upgrading Software T3 Fundamentals Configuring Frame Relay/PPP And T3 T3 Network Interfaces T3 Configuration Edit T3 Interface Editing a T3 Interface T3 Statistics Upgrading Software Page DDS Fundamentals Configuring Frame Relay/PPP DDS Network Interfaces DDS Configuration Edit Logical Interface Frame Relay, single Dlci DDS Link Statistics DDS Statistics Frame Relay And PPP Interface Statistics DDS LoopbackPage Configuring PPPoE/Bridged Mode On PPPoE/Bridged Mode FundamentalsAdsl Fundamentals Authentication, Addresses and DNS Servers PPPoE MTU IssuesBridged Mode Adsl Configuration Adsl Network InterfacesEditing a Logical Interface PPPoE Edit Logical Interface Bridged Editing a Logical Interface Bridged Adsl Link Statistics Adsl Statistics Current Routes & Interface Table Modem Fundamentals Configuring PPP and ModemPPP Mode Fundamentals When the Modem Connects Modem Main Menu Modem Configuration Blind dial Modem PPP Client Modem PPP Client Connections Modem Incoming Call Logs Modem PPP Server PPP Logs Modem PPP Logs PPP Connection Logs Modem PPP Connection LogsPage Linux netfilter, iptables And The Shoreline Firewall Configuring The FirewallFirewall Fundamentals Stateless vs Stateful Firewalls Network Address Translation Port Forwarding Shorewall Quick Setup ShoreWall Terminology And Concepts ZonesInterfaces Policy Hosts Interface Subnet Address Protocol Ports Masquerading And Snat Reject Rules Route Based Virtual Private Networking Configuring The Firewall And VPN Virtual Private Networking To a DMZ Policy Based Virtual Private Networking Starting Shorewall Firewall Menu Firewall Main Menu Shorewall Firewall Menu Network Interfaces Network Zones Editing a Firewall Network Interfaces Firewall Zone Hosts Network Zone Hosts Masquerading Default Policies Editing a Masquerading Rule Firewall Rules Static NAT Static NAT Creating a Static NAT Entry Actions When StoppedPage Page Policy Vs Route Based VPNs Configuring An IPsec VPNVPN Fundamentals IPsec Modes Public Key And Pre-shared Keys Supported Encryption Protocols Other Configuration Supporting IPSec X509 CertificatesNAT Traversal IPsec and Router Interfaces Openswan Configuration ProcessVPN Main Menu Before Key Generation VPN Main MenuPage IPsec VPN Configuration After Connections Have Been Created Server Configuration Preshared Keys Public Key List Certificates VPN ConnectionsIPsec VPN Connection Details Page Export Configuration Left/Right Systems Settings IPsec Status Showing IPsec Status Select a Certificate Authority IPSec X.509 Roaming Client Example VPN Networking Parameters Client Configuration Router IPSec ConfigurationGenerate X.509 Certificates Ethernet Port Configuration Firewall IPSec ConfigurationPage Configuring Dynamic Routing Quagga, RIP and OspfRIP Fundamentals Network Areas Ospf FundamentalsKey Ospf And RIP Parameters Link State Advertisements Redistributing Routes Active/Passive Interface DefaultRouter-ID Hello Interval and Dead Interval Link Detect Configuring Ospf Link CostsOspf Authentication RIP Authentication Administrative Distances Ospf And Vrrp Example Network Area And SubnetsVrrp Operation Dynamic Routing Enable Protocols Core Core Global ParametersCore Interface Parameters View Core Configuration Ospf Global Parameters OspfPage Ospf Interfaces Ospf Interfaces View Ospf Configuration Ospf Network AreasOspf Status RIP Global Parameters RIP Global Parameters RIP Key Chains RIP Interfaces RIP Networks RIP Networks RIP Status View RIP ConfigurationPage Configuring Link Backup Link Backup FundamentalsPath Failure Discovery Link Backup Main Menu Link Backup ConfigurationUse Of Routing Protocols And The Default Route Edit Link Backup Configuration Link Backup Logs Link Backup StatusTest Link Backup Page Page Vrrp Fundamentals Configuring VrrpProblem With Static Routing Vrrp Solution Vrrp Example Page Vrrp Main Menu Vrrp Configuration Vrrp Instance Editing a Vrrp Instance Vrrp Instances Status Viewing Vrrp Instances Status Filters Configuring Traffic PrioritizationTraffic Prioritization Fundamentals Priority Queues Included With Traffic Prioritization TOS Prioritization Prioritization Example Interface Prioritization Menu Traffic Prioritization Main Menu Prioritization Queues Prioritization FiltersPrioritization Transmit Queue Length Prioritization Statistics Prioritization Statistics GRE Fundamentals Configuring Generic Routing Encapsulation GRE Main Menu GRE Configuration MenuPage Network Utilities Main Menu Network Utilities Traceroute Menu Ping Menu Host Menu Trace MenuTcpdump a Network Interface Serial Trace a Serial Server Port Frame Relay Link Layer Trace a WAN Interface Interface Statistics Menu Interface Statistics Menu Current Routing & Interface Table Current Routing & Interface Table Interface Status Page Serial IP Port Features Configuring Serial Protocols Broadcast RTU Polling Serial Protocols ApplicationsCharacter Encapsulation RTU Polling Message Packetization Serial Protocols Concepts And IssuesHost And Remote Roles Use Of Port Redirectors Serial Protocols Main Menu Use of Turnaround Delays Port Settings Menu Assign Protocols MenuRawSocket Menu Page Serial Protocols Statistics Menu Protocol Specific Packet Error Statistics Serial Protocols Trace Menu Serial Protocols Trace Menu Is provided Serial Protocols Sertrace UtilityPage Configuring Goose Tunnels IEC61850 Goose FundamentalsLayer 2 Tunnel Daemon Details Layer 2 Tunnels Main Menu Layer 2 Tunnels Main Menu Goose Tunnels Menu General Configuration Menu Activity Trace Menu Goose Statistics MenuPage Page Dhcp Client Options Configuring The Dhcp serverDhcp Fundamentals Dhcp Network OrganizationsPage Option 82 Support with Disable NAK Single Network With Static IP Assignment Example Dhcp Scenarios And ConfigurationsSingle Network With Option82 Clients On One Switch Single Network With Dynamic IP AssignmentPage Page Dhcp Server Menu Dhcp Server Main Menu Dhcp Shared Network Configuration Dhcp Shared Network Configuration Dhcp Subnet Configuration Dhcp Subnet Configuration Dhcp Host Configuration Dhcp Group Configuration Dhcp Pool Configuration Dhcp Pool Configuration NTP Fundamentals Configuring NTP NTP Sanity Limit NTP And The Precision Time Protocol CardIncluded With NTP Generic Options NTP Server Main Menu Peers Configuration Servers Configuration Viewing The NTP Log Viewing The NTP Status Viewing The GPS Log Viewing The GPS Status Configuring SSH SSH FundamentalsIncluded With SSH SSH Server SSH Main Menu Networking Access ControlPage PTP Master Election Configuring Irigb And IEEE1588IEEE1588 Fundamentals PTP Network Roles Irigb Fundamentals Synchronizing NTP from IEEE1588Irigb Output Formats GPS Cable compensation Reference ClocksHow The Router Selects a Reference Clock IRIGB/IEEE1588 Main Menu General Configuration IEEE1588 Configuration Irigb Configuration IEEE1588 Status Irigb Status Irigb Log Page Snort Rules Configuring The Snort IDSSnort Fundamentals Which Interfaces To Monitor Global Configuration Snort IDS Main MenuPerformance And Resources Network Settings RulesetsRule Lookup by SID Alerts & Logging PreProcessors Edit Config File Maintaining The Router Alert SystemAlert Menu Alert Configuration Menu Alert Configuration Alert Definition Configuration Alert Filter Configuration Change Alert Definition Page Gauntlet Security What And How Gauntlet ProtectsGauntlet And The Firewall Upgrading Gauntlet Gauntlet Status Menu System Backup And Restore Backup And Restore General Configuration Setup Archive History Archive Backup Archive Difference Tool Archive Restore Archive Differences List Show Difference for selected file between two targets Snmp Configuration Snmp Configuration Main Menu System ConfigurationNetwork Addressing Configuration Access Control page, Snmp V1 and V2c 250 RuggedCom Trap Configuration page, Trap Options Trap Configuration RuggedRouter supports the following MIBs MIB Support Radius Authentication Edit Radius Server Parameters Radius Authentication Configuration Outgoing Mail Parameter Description Chassis Parameters System Logs Syslog Factory Defaults Changing a Syslog entry to remote log Remote Logging RuggedRouter Software Fundamentals Upgrade System Automatic Upgrade When a Software Upgrade Requires a Reboot Change Repository Server Upgrade to RX1100 Upgrading All Packages Automatic Upgrading Pre-upgrade/Post-upgrade scripts Installing a New Package Upload/Download menu Uploading And Downloading Files Security Actions Security ConsiderationsPage Appendix a Setting Up a Repository Initial Repository SetupRepository Server Requirements Setting Up The Routers Upgrading The RepositoryAn Alternate Approach Upgrading Considerations Appendix B Downgrading Router Software Apache Default Web Appendix C Installing Apache Web Server On WindowsPage Installing IIS Appendix D Installing IIS Web Server On Windows Appendix E Radius Server Configuration Windows Internet Authentication ServiceFreeRadius Edit Profile window, Click Add... button 276 RuggedCom RuggedCom 277 Dhcp Index Goose NTP SSH Vrrp