Ruggedrouter User Guide | RuggedCom RX1000, RX1100 specification

RUGGEDROUTER™ USER GUIDE

FOR USE WITH RX1000/RX1100 PRODUCTS

Version 1.12.6 – May 14th , 2008

RuggedCom

30 Whitmore Road

Woodbridge, Ontario

Canada L4L7Z4

Tel:	(905) 856-5288
Fax:	(905)	856-1995
Toll Free: (888)		264-0006

support@ruggedcom.com

Disclaimer

RuggedCom Inc. makes no warranty of any kind with regard to this material.

RuggedCom shall not be liable for errors contained herein or for consequential damages in connection with the furnishing, performance, or use of this material.

Warranty

Five (5) years from date of purchase, return to factory. For warranty details, visit www.ruggedcom.com or contact your customer service representative.

COPYRIGHT © Apr 2008 RuggedCom Inc.

ALL RIGHTS RESERVED

http://www.ruggedcom.com This document contains proprietary information, which is protected by

copyright. All rights are reserved.

The RuggedRouter includes components licensed under the GPL and BSD style licenses. The full licences of such are included in an associated document.

No part of this document may be photocopied, reproduced or translated to another language without the prior written consent of RuggedCom Inc.

Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.

Gauntlet® is the registered trademark of Teltone Corporation.

Image 2

RuggedCom RX1000, RX1100 manual Ruggedrouter User Guide

Contents

RuggedRouter Ruggedrouter User Guide Applicable Firmware Revision How To Use This User GuideAbout this User Guide Who Should Use This User Guide Document Conventions Quick Start Recommendations Basic Web Based Configuration Additional Configuration About this User Guide Table Of Contents Table Of Contents RuggedRouter User Guide 100 114 144 Page Table Of Contents Page 241 Page RuggedRouter Setup Main Menu Table Of Figures Scheduled Commands Displaying a Command T1/E1 Network Interfaces After Interface Creation Adsl Link Statistics Show Public Key Link Backup Status 162 Raw Socket Menu IRIGB/IEEE1588 General Configuration menu 230 255 IAS Window Edit Profile 282 Accounts And Password Management Setting Up And Administering The RouterAccess Methods Default Configuration Configuring Passwords Accessing The RuggedRouter Command PromptRuggedRouter Setup Shell From the Console Port Configuring Radius Authentication Configuring IP Address InformationSetting The Hostname Radius Server Configuration menu Enabling And Disabling The SSH and Web Server Configuring The Date, Time And Timezone Enabling And Disabling The Gauntlet Security Appliance Displaying Hardware Information RuggedRouter Hardware Information Menu Restoring a Configuration Selecting a configuration to reload SSL Certificate Warnings Using a Web Browser to Access the Web InterfaceRuggedRouter Web Interface Structure of the Web Interface RuggedRouter Web Interface Main Menu Window Using The LED Status Panel LED Status Panel Obtaining Chassis Information LED Name Description IP Access Control Webmin ConfigurationWebmin Configuration Menu Ports And Addresses Change Help Server Webmin Configuration Menu, Logging Logging Authentication Webmin Configuration Menu, Authentication Webmin Events Log Webmin Events Log This page intentionally blank Configuring The System Bootup And Shutdown Change Password Command Scheduled Commands Scheduled Commands Displaying a Command Scheduled Cron Jobs Webmin Scheduled Cron Jobs System Hostname System Time Configuring Networking Network Configuration Core Settings Dummy Interface Routing And Gateways Default Route TableConfigured Static Routes Manually Entered Static Routes Static Multicast Routing Static Multicast Routing Host Addresses End To End BackupDNS Client Page Configuring End To End Backup Current Routing & Interface Table Vlan Interface Fundamentals Configuring Ethernet InterfacesEthernet Interface Fundamentals LED Designations PPPoE On Native Ethernet Interfaces Fundamentals RuggedRouter Functions Supporting VLANs Ethernet Ethernet Interfaces Editing Currently Active Interfaces Editing a Network Interface Virtual Lan Interfaces Edit Boot Time InterfacesVirtual Interfaces PPPoE On Native Ethernet Interfaces List PPPoE Interfaces Edit PPPoE Interface Editing a PPPoE Interface PPP Logs Current Routes & Interface Table Frame Relay Configuring Frame Relay/PPP And T1/E1T1/E1 Fundamentals Included With T1E1 T1/E1Location Of Interfaces And Labeling T1/E1 Network Interfaces Strategy For Creating Interfaces Editing a T1/E1 Interface Naming Of Logical Interfaces T1 Settings E1 Settings Editing a Logical Interface Frame Relay Frame Relay Link Parameters Editing a Logical Interface PPP Frame Relay DLCIs T1/E1 Statistics Link Statistics Frame Relay Interface Statistics Frame Relay Statistics PPP Interface Statistics PPP Link Statistics T1/E1 Loopback T1/E1 Loopback Menu Upgrading Software Upgrading Firmware Configuring Frame Relay/PPP And T3 T3 Fundamentals T3 Configuration T3 Network Interfaces Editing a T3 Interface Edit T3 Interface T3 Statistics Upgrading Software Page Configuring Frame Relay/PPP DDS Fundamentals DDS Configuration DDS Network Interfaces Edit Logical Interface Frame Relay, single Dlci DDS Statistics DDS Link Statistics DDS Loopback Frame Relay And PPP Interface StatisticsPage Adsl Fundamentals Configuring PPPoE/Bridged Mode OnPPPoE/Bridged Mode Fundamentals Bridged Mode Authentication, Addresses and DNS ServersPPPoE MTU Issues Editing a Logical Interface PPPoE Adsl ConfigurationAdsl Network Interfaces Editing a Logical Interface Bridged Edit Logical Interface Bridged Adsl Statistics Adsl Link Statistics Current Routes & Interface Table When the Modem Connects Configuring PPP and ModemPPP Mode Fundamentals Modem Fundamentals Modem Configuration Modem Main Menu Blind dial Modem PPP Client Connections Modem PPP Client Modem PPP Server Modem Incoming Call Logs Modem PPP Logs PPP Logs Modem PPP Connection Logs PPP Connection LogsPage Stateless vs Stateful Firewalls Configuring The FirewallFirewall Fundamentals Linux netfilter, iptables And The Shoreline Firewall Network Address Translation Shorewall Quick Setup Port Forwarding Interfaces ShoreWall Terminology And ConceptsZones Hosts Policy Masquerading And Snat Interface Subnet Address Protocol Ports Rules Reject Configuring The Firewall And VPN Route Based Virtual Private Networking Policy Based Virtual Private Networking Virtual Private Networking To a DMZ Firewall Main Menu Starting Shorewall Firewall Menu Shorewall Firewall Menu Network Zones Network Interfaces Editing a Firewall Network Interfaces Network Zone Hosts Firewall Zone Hosts Default Policies Masquerading Firewall Rules Editing a Masquerading Rule Static NAT Static NAT Actions When Stopped Creating a Static NAT EntryPage Page IPsec Modes Configuring An IPsec VPNVPN Fundamentals Policy Vs Route Based VPNs Supported Encryption Protocols Public Key And Pre-shared Keys NAT Traversal Other Configuration Supporting IPSecX509 Certificates VPN Main Menu Openswan Configuration ProcessVPN Main Menu Before Key Generation IPsec and Router InterfacesPage Server Configuration IPsec VPN Configuration After Connections Have Been Created Public Key Preshared Keys IPsec VPN Connection Details List CertificatesVPN Connections Page Left/Right Systems Settings Export Configuration Showing IPsec Status IPsec Status IPSec X.509 Roaming Client Example Select a Certificate Authority Generate X.509 Certificates VPN Networking Parameters Client ConfigurationRouter IPSec Configuration Firewall IPSec Configuration Ethernet Port ConfigurationPage RIP Fundamentals Configuring Dynamic RoutingQuagga, RIP and Ospf Link State Advertisements Ospf FundamentalsKey Ospf And RIP Parameters Network Areas Hello Interval and Dead Interval Active/Passive Interface DefaultRouter-ID Redistributing Routes RIP Authentication Configuring Ospf Link CostsOspf Authentication Link Detect Administrative Distances Vrrp Operation Ospf And Vrrp Example NetworkArea And Subnets Enable Protocols Dynamic Routing Core Interface Parameters CoreCore Global Parameters View Core Configuration Ospf Ospf Global ParametersPage Ospf Interfaces Ospf Interfaces Ospf Status View Ospf ConfigurationOspf Network Areas RIP Global Parameters RIP Global Parameters RIP Interfaces RIP Key Chains RIP Networks RIP Networks View RIP Configuration RIP StatusPage Path Failure Discovery Configuring Link BackupLink Backup Fundamentals Use Of Routing Protocols And The Default Route Link Backup Main MenuLink Backup Configuration Edit Link Backup Configuration Test Link Backup Link Backup LogsLink Backup Status Page Page Vrrp Solution Configuring VrrpProblem With Static Routing Vrrp Fundamentals Vrrp Example Page Vrrp Configuration Vrrp Main Menu Editing a Vrrp Instance Vrrp Instance Viewing Vrrp Instances Status Vrrp Instances Status Priority Queues Configuring Traffic PrioritizationTraffic Prioritization Fundamentals Filters TOS Prioritization Included With Traffic Prioritization Prioritization Example Traffic Prioritization Main Menu Interface Prioritization Menu Prioritization Transmit Queue Length Prioritization QueuesPrioritization Filters Prioritization Statistics Prioritization Statistics Configuring Generic Routing Encapsulation GRE Fundamentals GRE Configuration Menu GRE Main MenuPage Network Utilities Network Utilities Main Menu Ping Menu Traceroute Menu Tcpdump a Network Interface Host MenuTrace Menu Frame Relay Link Layer Trace a WAN Interface Serial Trace a Serial Server Port Interface Statistics Menu Interface Statistics Menu Current Routing & Interface Table Current Routing & Interface Table Interface Status Page Configuring Serial Protocols Serial IP Port Features RTU Polling Serial Protocols ApplicationsCharacter Encapsulation Broadcast RTU Polling Use Of Port Redirectors Serial Protocols Concepts And IssuesHost And Remote Roles Message Packetization Use of Turnaround Delays Serial Protocols Main Menu RawSocket Menu Port Settings MenuAssign Protocols Menu Page Protocol Specific Packet Error Statistics Serial Protocols Statistics Menu Serial Protocols Trace Menu Serial Protocols Trace Menu Serial Protocols Sertrace Utility Is providedPage Layer 2 Tunnel Daemon Details Configuring Goose TunnelsIEC61850 Goose Fundamentals Layer 2 Tunnels Main Menu Layer 2 Tunnels Main Menu General Configuration Menu Goose Tunnels Menu Goose Statistics Menu Activity Trace MenuPage Page Dhcp Network Organizations Configuring The Dhcp serverDhcp Fundamentals Dhcp Client OptionsPage Option 82 Support with Disable NAK Single Network With Dynamic IP Assignment Example Dhcp Scenarios And ConfigurationsSingle Network With Option82 Clients On One Switch Single Network With Static IP AssignmentPage Page Dhcp Server Main Menu Dhcp Server Menu Dhcp Shared Network Configuration Dhcp Shared Network Configuration Dhcp Subnet Configuration Dhcp Subnet Configuration Dhcp Group Configuration Dhcp Host Configuration Dhcp Pool Configuration Dhcp Pool Configuration Configuring NTP NTP Fundamentals Included With NTP NTP Sanity LimitNTP And The Precision Time Protocol Card NTP Server Main Menu Generic Options Servers Configuration Peers Configuration Viewing The NTP Status Viewing The NTP Log Viewing The GPS Status Viewing The GPS Log Included With SSH Configuring SSHSSH Fundamentals SSH Main Menu SSH Server Access Control NetworkingPage PTP Network Roles Configuring Irigb And IEEE1588IEEE1588 Fundamentals PTP Master Election Irigb Output Formats Irigb FundamentalsSynchronizing NTP from IEEE1588 How The Router Selects a Reference Clock GPS Cable compensationReference Clocks General Configuration IRIGB/IEEE1588 Main Menu Irigb Configuration IEEE1588 Configuration Irigb Status IEEE1588 Status Irigb Log Page Which Interfaces To Monitor Configuring The Snort IDSSnort Fundamentals Snort Rules Performance And Resources Global ConfigurationSnort IDS Main Menu Rule Lookup by SID Network SettingsRulesets PreProcessors Alerts & Logging Edit Config File Alert Menu Maintaining The RouterAlert System Alert Configuration Alert Configuration Menu Alert Filter Configuration Alert Definition Configuration Change Alert Definition Page Gauntlet And The Firewall Gauntlet SecurityWhat And How Gauntlet Protects Gauntlet Status Menu Upgrading Gauntlet Backup And Restore System Backup And Restore General Configuration Setup Archive Backup Archive History Archive Restore Archive Difference Tool Archive Differences List Snmp Configuration Show Difference for selected file between two targets Network Addressing Configuration Snmp Configuration Main MenuSystem Configuration Access Control page, Snmp V1 and V2c 250 RuggedCom Trap Configuration Trap Configuration page, Trap Options MIB Support RuggedRouter supports the following MIBs Radius Authentication Radius Authentication Configuration Edit Radius Server Parameters Outgoing Mail Chassis Parameters Parameter Description Syslog Factory Defaults System Logs Remote Logging Changing a Syslog entry to remote log Upgrade System RuggedRouter Software Fundamentals When a Software Upgrade Requires a Reboot Automatic Upgrade Upgrade to RX1100 Change Repository Server Automatic Upgrading Upgrading All Packages Installing a New Package Pre-upgrade/Post-upgrade scripts Uploading And Downloading Files Upload/Download menu Security Considerations Security ActionsPage Repository Server Requirements Appendix a Setting Up a RepositoryInitial Repository Setup An Alternate Approach Setting Up The RoutersUpgrading The Repository Upgrading Considerations Appendix B Downgrading Router Software Appendix C Installing Apache Web Server On Windows Apache Default WebPage Appendix D Installing IIS Web Server On Windows Installing IIS FreeRadius Appendix E Radius Server ConfigurationWindows Internet Authentication Service Edit Profile window, Click Add... button 276 RuggedCom RuggedCom 277 Index Dhcp Goose NTP SSH Vrrp