RuggedRouter
 Ruggedrouter User Guide
 How To Use This User Guide
About this User Guide
Applicable Firmware Revision
Who Should Use This User Guide
 Document Conventions
Quick Start Recommendations
 Basic Web Based Configuration
 Additional Configuration
 About this User Guide
 Table Of Contents
 Table Of Contents
 RuggedRouter User Guide
 100
 114
 144
Page
 Table Of Contents
Page
 241
Page
 RuggedRouter Setup Main Menu
Table Of Figures
 Scheduled Commands Displaying a Command
 T1/E1 Network Interfaces After Interface Creation
 Adsl Link Statistics
 Show Public Key
 Link Backup Status 162
 Raw Socket Menu
 IRIGB/IEEE1588 General Configuration menu 230
 255
 IAS Window Edit Profile 282
 Setting Up And Administering The Router
Access Methods
Accounts And Password Management
Default Configuration
 Accessing The RuggedRouter Command Prompt
RuggedRouter Setup Shell
Configuring Passwords
From the Console Port
 Setting The Hostname
Configuring IP Address Information
Configuring Radius Authentication
 Radius Server Configuration menu
Enabling And Disabling The SSH and Web Server
 Configuring The Date, Time And Timezone
Enabling And Disabling The Gauntlet Security Appliance
 Displaying Hardware Information
RuggedRouter Hardware Information Menu
 Restoring a Configuration
Selecting a configuration to reload
 Using a Web Browser to Access the Web Interface
RuggedRouter Web Interface
SSL Certificate Warnings
Structure of the Web Interface
 RuggedRouter Web Interface Main Menu Window
 Using The LED Status Panel
LED Status Panel
 Obtaining Chassis Information
LED Name Description
 Webmin Configuration Menu
Webmin Configuration
IP Access Control
 Ports And Addresses
Change Help Server
 Webmin Configuration Menu, Logging
Logging
 Authentication
Webmin Configuration Menu, Authentication
 Webmin Events Log
Webmin Events Log
 This page intentionally blank
 Configuring The System
Bootup And Shutdown
 Change Password Command
Scheduled Commands
 Scheduled Commands Displaying a Command
 Scheduled Cron Jobs
Webmin Scheduled Cron Jobs
 System Hostname
System Time
 Configuring Networking
Network Configuration
 Core Settings
Dummy Interface
 Configured Static Routes
Default Route Table
Routing And Gateways
 Manually Entered Static Routes
 Static Multicast Routing
Static Multicast Routing
 DNS Client
End To End Backup
Host Addresses
Page
 Configuring End To End Backup
Current Routing & Interface Table
 Configuring Ethernet Interfaces
Ethernet Interface Fundamentals
Vlan Interface Fundamentals
LED Designations
 PPPoE On Native Ethernet Interfaces Fundamentals
RuggedRouter Functions Supporting VLANs
 Ethernet
Ethernet Interfaces
 Editing Currently Active Interfaces
Editing a Network Interface
 Virtual Interfaces
Edit Boot Time Interfaces
Virtual Lan Interfaces
 PPPoE On Native Ethernet Interfaces
List PPPoE Interfaces
 Edit PPPoE Interface
Editing a PPPoE Interface
 PPP Logs
Current Routes & Interface Table
 T1/E1 Fundamentals
Configuring Frame Relay/PPP And T1/E1
Frame Relay
 Location Of Interfaces And Labeling
T1/E1
Included With T1E1
 T1/E1 Network Interfaces
Strategy For Creating Interfaces
 Editing a T1/E1 Interface
Naming Of Logical Interfaces
 T1 Settings
E1 Settings
 Editing a Logical Interface Frame Relay
Frame Relay Link Parameters
 Editing a Logical Interface PPP
Frame Relay DLCIs
 T1/E1 Statistics
Link Statistics
 Frame Relay Interface Statistics
Frame Relay Statistics
 PPP Interface Statistics
PPP Link Statistics
 T1/E1 Loopback
T1/E1 Loopback Menu
 Upgrading Software
Upgrading Firmware
 Configuring Frame Relay/PPP And T3
T3 Fundamentals
 T3 Configuration
T3 Network Interfaces
 Editing a T3 Interface
Edit T3 Interface
 T3 Statistics
 Upgrading Software
Page
 Configuring Frame Relay/PPP
DDS Fundamentals
 DDS Configuration
DDS Network Interfaces
 Edit Logical Interface Frame Relay, single Dlci
 DDS Statistics
DDS Link Statistics
 DDS Loopback
Frame Relay And PPP Interface Statistics
Page
 PPPoE/Bridged Mode Fundamentals
Configuring PPPoE/Bridged Mode On
Adsl Fundamentals
 PPPoE MTU Issues
Authentication, Addresses and DNS Servers
Bridged Mode
 Adsl Network Interfaces
Adsl Configuration
Editing a Logical Interface PPPoE
 Editing a Logical Interface Bridged
Edit Logical Interface Bridged
 Adsl Statistics
Adsl Link Statistics
 Current Routes & Interface Table
 Configuring PPP and Modem
PPP Mode Fundamentals
When the Modem Connects
Modem Fundamentals
 Modem Configuration
Modem Main Menu
 Blind dial
 Modem PPP Client Connections
Modem PPP Client
 Modem PPP Server
Modem Incoming Call Logs
 Modem PPP Logs
PPP Logs
 Modem PPP Connection Logs
PPP Connection Logs
Page
 Configuring The Firewall
Firewall Fundamentals
Stateless vs Stateful Firewalls
Linux netfilter, iptables And The Shoreline Firewall
 Network Address Translation
 Shorewall Quick Setup
Port Forwarding
 Zones
ShoreWall Terminology And Concepts
Interfaces
 Hosts
Policy
 Masquerading And Snat
Interface Subnet Address Protocol Ports
 Rules
Reject
 Configuring The Firewall And VPN
Route Based Virtual Private Networking
 Policy Based Virtual Private Networking
Virtual Private Networking To a DMZ
 Firewall Main Menu
Starting Shorewall Firewall Menu
 Shorewall Firewall Menu
 Network Zones
Network Interfaces
 Editing a Firewall Network Interfaces
 Network Zone Hosts
Firewall Zone Hosts
 Default Policies
Masquerading
 Firewall Rules
Editing a Masquerading Rule
 Static NAT
Static NAT
 Actions When Stopped
Creating a Static NAT Entry
Page
Page
 Configuring An IPsec VPN
VPN Fundamentals
IPsec Modes
Policy Vs Route Based VPNs
 Supported Encryption Protocols
Public Key And Pre-shared Keys
 X509 Certificates
Other Configuration Supporting IPSec
NAT Traversal
 Openswan Configuration Process
VPN Main Menu Before Key Generation
VPN Main Menu
IPsec and Router Interfaces
Page
 Server Configuration
IPsec VPN Configuration After Connections Have Been Created
 Public Key
Preshared Keys
 VPN Connections
List Certificates
IPsec VPN Connection Details
Page
 Left/Right Systems Settings
Export Configuration
 Showing IPsec Status
IPsec Status
 IPSec X.509 Roaming Client Example
Select a Certificate Authority
 Router IPSec Configuration
VPN Networking Parameters Client Configuration
Generate X.509 Certificates
 Firewall IPSec Configuration
Ethernet Port Configuration
Page
 Quagga, RIP and Ospf
Configuring Dynamic Routing
RIP Fundamentals
 Ospf Fundamentals
Key Ospf And RIP Parameters
Link State Advertisements
Network Areas
 Active/Passive Interface Default
Router-ID
Hello Interval and Dead Interval
Redistributing Routes
 Configuring Ospf Link Costs
Ospf Authentication
RIP Authentication
Link Detect
 Administrative Distances
 Area And Subnets
Ospf And Vrrp Example Network
Vrrp Operation
 Enable Protocols
Dynamic Routing
 Core Global Parameters
Core
Core Interface Parameters
 View Core Configuration
 Ospf
Ospf Global Parameters
Page
 Ospf Interfaces
Ospf Interfaces
 Ospf Network Areas
View Ospf Configuration
Ospf Status
 RIP Global Parameters
RIP Global Parameters
 RIP Interfaces
RIP Key Chains
 RIP Networks
RIP Networks
 View RIP Configuration
RIP Status
Page
 Link Backup Fundamentals
Configuring Link Backup
Path Failure Discovery
 Link Backup Configuration
Link Backup Main Menu
Use Of Routing Protocols And The Default Route
 Edit Link Backup Configuration
 Link Backup Status
Link Backup Logs
Test Link Backup
Page
Page
 Configuring Vrrp
Problem With Static Routing
Vrrp Solution
Vrrp Fundamentals
 Vrrp Example
Page
 Vrrp Configuration
Vrrp Main Menu
 Editing a Vrrp Instance
Vrrp Instance
 Viewing Vrrp Instances Status
Vrrp Instances Status
 Configuring Traffic Prioritization
Traffic Prioritization Fundamentals
Priority Queues
Filters
 TOS Prioritization
Included With Traffic Prioritization
 Prioritization Example
 Traffic Prioritization Main Menu
Interface Prioritization Menu
 Prioritization Filters
Prioritization Queues
Prioritization Transmit Queue Length
 Prioritization Statistics
Prioritization Statistics
 Configuring Generic Routing Encapsulation
GRE Fundamentals
 GRE Configuration Menu
GRE Main Menu
Page
 Network Utilities
Network Utilities Main Menu
 Ping Menu
Traceroute Menu
 Trace Menu
Host Menu
Tcpdump a Network Interface
 Frame Relay Link Layer Trace a WAN Interface
Serial Trace a Serial Server Port
 Interface Statistics Menu
Interface Statistics Menu
 Current Routing & Interface Table
Current Routing & Interface Table
 Interface Status
Page
 Configuring Serial Protocols
Serial IP Port Features
 Serial Protocols Applications
Character Encapsulation
RTU Polling
Broadcast RTU Polling
 Serial Protocols Concepts And Issues
Host And Remote Roles
Use Of Port Redirectors
Message Packetization
 Use of Turnaround Delays
Serial Protocols Main Menu
 Assign Protocols Menu
Port Settings Menu
RawSocket Menu
Page
 Protocol Specific Packet Error Statistics
Serial Protocols Statistics Menu
 Serial Protocols Trace Menu
Serial Protocols Trace Menu
 Serial Protocols Sertrace Utility
Is provided
Page
 IEC61850 Goose Fundamentals
Configuring Goose Tunnels
Layer 2 Tunnel Daemon Details
 Layer 2 Tunnels Main Menu
Layer 2 Tunnels Main Menu
 General Configuration Menu
Goose Tunnels Menu
 Goose Statistics Menu
Activity Trace Menu
Page
Page
 Configuring The Dhcp server
Dhcp Fundamentals
Dhcp Network Organizations
Dhcp Client Options
Page
 Option 82 Support with Disable NAK
 Example Dhcp Scenarios And Configurations
Single Network With Option82 Clients On One Switch
Single Network With Dynamic IP Assignment
Single Network With Static IP Assignment
Page
Page
 Dhcp Server Main Menu
Dhcp Server Menu
 Dhcp Shared Network Configuration
Dhcp Shared Network Configuration
 Dhcp Subnet Configuration
Dhcp Subnet Configuration
 Dhcp Group Configuration
Dhcp Host Configuration
 Dhcp Pool Configuration
Dhcp Pool Configuration
 Configuring NTP
NTP Fundamentals
 NTP And The Precision Time Protocol Card
NTP Sanity Limit
Included With NTP
 NTP Server Main Menu
Generic Options
 Servers Configuration
Peers Configuration
 Viewing The NTP Status
Viewing The NTP Log
 Viewing The GPS Status
Viewing The GPS Log
 SSH Fundamentals
Configuring SSH
Included With SSH
 SSH Main Menu
SSH Server
 Access Control
Networking
Page
 Configuring Irigb And IEEE1588
IEEE1588 Fundamentals
PTP Network Roles
PTP Master Election
 Synchronizing NTP from IEEE1588
Irigb Fundamentals
Irigb Output Formats
 Reference Clocks
GPS Cable compensation
How The Router Selects a Reference Clock
 General Configuration
IRIGB/IEEE1588 Main Menu
 Irigb Configuration
IEEE1588 Configuration
 Irigb Status
IEEE1588 Status
 Irigb Log
Page
 Configuring The Snort IDS
Snort Fundamentals
Which Interfaces To Monitor
Snort Rules
 Snort IDS Main Menu
Global Configuration
Performance And Resources
 Rulesets
Network Settings
Rule Lookup by SID
 PreProcessors
Alerts & Logging
 Edit Config File
 Alert System
Maintaining The Router
Alert Menu
 Alert Configuration
Alert Configuration Menu
 Alert Filter Configuration
Alert Definition Configuration
 Change Alert Definition
Page
 What And How Gauntlet Protects
Gauntlet Security
Gauntlet And The Firewall
 Gauntlet Status Menu
Upgrading Gauntlet
 Backup And Restore
System Backup And Restore
 General Configuration Setup
 Archive Backup
Archive History
 Archive Restore
Archive Difference Tool
 Archive Differences List
 Snmp Configuration
Show Difference for selected file between two targets
 System Configuration
Snmp Configuration Main Menu
Network Addressing Configuration
 Access Control page, Snmp V1 and V2c
 250 RuggedCom
 Trap Configuration
Trap Configuration page, Trap Options
 MIB Support
RuggedRouter supports the following MIBs
 Radius Authentication
 Radius Authentication Configuration
Edit Radius Server Parameters
 Outgoing Mail
 Chassis Parameters
Parameter Description
 Syslog Factory Defaults
System Logs
 Remote Logging
Changing a Syslog entry to remote log
 Upgrade System
RuggedRouter Software Fundamentals
 When a Software Upgrade Requires a Reboot
Automatic Upgrade
 Upgrade to RX1100
Change Repository Server
 Automatic Upgrading
Upgrading All Packages
 Installing a New Package
Pre-upgrade/Post-upgrade scripts
 Uploading And Downloading Files
Upload/Download menu
 Security Considerations
Security Actions
Page
 Initial Repository Setup
Appendix a Setting Up a Repository
Repository Server Requirements
 Upgrading The Repository
Setting Up The Routers
An Alternate Approach
 Upgrading Considerations
 Appendix B Downgrading Router Software
 Appendix C Installing Apache Web Server On Windows
Apache Default Web
Page
 Appendix D Installing IIS Web Server On Windows
Installing IIS
 Windows Internet Authentication Service
Appendix E Radius Server Configuration
FreeRadius
 Edit Profile window, Click Add... button
 276 RuggedCom
 RuggedCom 277
 Index
Dhcp
 Goose
 NTP
 SSH
 Vrrp