1,223
edits
Changes
Template:Networking rutos manual administration (view source)
Revision as of 16:51, 18 December 2023
, 16:51, 18 December 2023→Security
<td>off {{!}} on; default: <b>on</b></td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns SSH access from the local network (LAN) on or off.</td>
<td>Turns SSH access from the local network (LAN) on or off.</td>
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default
<tr>
<tr>
<td>Remote SSH access</td>
<td>Remote SSH access</td>
<b>IP Block Settings</b>
<b>IP Block Settings</b>
----
----
[[File:Networking_rutos_manual_administration_access_control_security_v4.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_access_control_security_v3.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<tr>
<tr>
<td>off {{!}} on; default: <b>on</b></td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Enable or disable blocking IP's if they have reached the set amount of failed times.</td>
<td>Enable or disable blocking IP's if they have reached the set amount of failed times.</td>
</tr>
</tr>
<tr>
<tr>
<td>off {{!}} on; default: <b>off</b></td>
<td>off {{!}} on; default: <b>off</b></td>
<td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>
<td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>
</tr>
<tr>
<td>Enable MAC blockig</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>If enabled, MAC adresses wil be blocked.</td>
</tr>
</tr>
</table>
</table>
<b>Login Attempts</b>
<b>Login Attempts</b>
----
----
[[File:Networking_rutos_manual_administration_access_control_security_login_v2.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_access_control_security_login.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<tr>
<tr>
</tr>
</tr>
<tr>
<tr>
<td>Source</td>
<td>Source address</td>
<td>IP address</td>
<td>IP address</td>
<td>Shows the IP address from which the connection failed.</td>
<td>Shows the IP address from which the connection failed.</td>
</tr>
</tr>
<tr>
<tr>
<td>Destination</td>
<td>Device port</td>
<td>Port number</td>
<td>Shows the port number from which the connection failed.</td>
</tr>
<tr>
<td>Destination address</td>
<td>IP address</td>
<td>IP address</td>
<td>Shows yours device IP adress</td>
<td>Shows yours device IP adress</td>
</tr>
</tr>
<tr>
<tr>
<td>Port (protocol)</td>
<td>Protocol</td>
<td>Port number</td>
<td>Connection protocol</td>
<td>Shows the port number from which the connection failed.</td>
<td>Displays the connection protocol used for connection.</td>
</tr>
<tr>
<td>Failed atempts</td>
<td>Number</td>
<td>Shows the number of failed attempts to connect to device.</td>
</tr>
</tr>
<tr>
<tr>
<td>Status</td>
<td>Status</td>
<td>Attempt count {{!}} Blocked</td>
<td>- {{!}} Blocked</td>
<td>Shows the number of failed attempts to connect to device. Indicates whether the source address is blocked or not.</td>
<td>Indicates whether the source address is blocked or not.</td>
</tr>
</tr>
<tr>
<td>Reset</td>
<td>Reset</td>
<td>Check box</td>
<td>Check box</td>
<td>Allows you to select multiple IP addresses.</td>
<td>Allows you to select multiple IP addresses.</td>
</tr>
</tr>
<tr>
<td>Unblock all</td>
<td>Unblock all</td>
<td>-(interactive button)</td>
<td>-(interactive button)</td>
<td>Deletes instance.</td>
<td>Unblocks all source adresses from the list.</td>
</tr>
</tr>
<tr>
<td>Unblock selected</td>
<td>Unblock selected</td>
<td>-(interactive button)</td>
<td>-(interactive button)</td>
</table>
</table>
===Email Users===
===Email Accounts===
----
----
When email related services{{#ifeq:{{{events_reporting}}}|0| | (such as [[{{{name}}} Events Reporting|Events Reporting]]) }}are used, the device logs in to the specified email account and reads the inbox (e.g., Email to SMS) or sends out a message (e.g., SMS to Email) depending on the configured service. In this context, an <b>Email Account</b> is an configuration instance that contains the necessary data required in order to log into an email account.
When email related services{{#ifeq:{{{events_reporting}}}|0| | (such as [[{{{name}}} Events Reporting|Events Reporting]]) }}are used, the device logs in to the specified email account and reads the inbox (e.g., Email to SMS) or sends out a message (e.g., SMS to Email) depending on the configured service. In this context, an <b>Email Account</b> is an configuration instance that contains the necessary data required in order to log into an email account.
</ol>
</ol>
[[File:Networking_rutos_manual_administration_recipients_email_accounts_groups_add_button_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_recipients_email_accounts_groups_add_button.png|border|class=tlt-border]]
After clicking 'Add' you should be redirected to that email account's settings page where you can start configuring the account.
After clicking 'Edit' you should be redirected to that email account's settings page where you can start configuring the account.
[[File:Networking_rutos_manual_administration_recipients_email_accounts_modify_email_account_v3.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_recipients_email_accounts_modify_email_account_v2.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<tr>
<tr>
<td>Secure connection</td>
<td>Secure connection</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>off <nowiki>|</nowiki> on; default: <b>off</b></td>
<td>Use if your SMTP server supports TLS or SSL encryption.</td>
<td>Use if your SMTP server supports TLS or SSL encryption.</td>
</tr>
</tr>
<tr>
<tr>
<td>Credentials</td>
<td>Credentials</td>
<td>off {{!}} <span style="color: blue;">on</span>; default: <b>off</b></td>
<td>off {{!}} on; default: <b>off</b></td>
<td>This options allows you to set username and password of email account.</td>
<td>This options allows you to set username and password of email account.</td>
</tr>
</tr>
<tr>
<tr>
<td><span style="color: blue;">Username</span></td>
<td>Username</td>
<td>string; default: <b>none</b></td>
<td>string; default: <b>none</b></td>
<td>Username for authentication on SMTP (Simple Mail Transfer Protocol) server. All characters are allowed except `' and space.</td>
<td>Username used to authenticate to the email service.</td>
</tr>
</tr>
<tr>
<tr>
<td><span style="color: blue;">Password</span></td>
<td>Password</td>
<td>string; default: <b>none</b></td>
<td>string; default: <b>none</b></td>
<td>Password for authentication on SMTP (Simple Mail Transfer Protocol) server. All characters are allowed except `' and space.</td>
<td>Password used to authenticate to the email service..</td>
</tr>
</tr>
<tr>
<tr>
<td>Sender's email address</td>
<td>Sender's email address</td>
<td>string; default: <b>none</b></td>
<td>string; default: <b>none</b></td>
<td>An address that will be used to send your email from. Allowed characters (a-zA-Z0-9._%+-@).</td>
<td>Configured SMTP server user's email address.</td>
</tr>
</tr>
<tr>
<tr>
====Generation Parameters====
====Generation Parameters====
----
----
Generating each type of file requires setting some parameters. This section provides an overview for parameters used in Simple and TLS certificate generation.
Generating each type of file (excluding 'Simple') requires setting some parameters. This section provides an overview for parameters used in TLS certificate generation.
----
----
<b>TLS parameters</b> or simply parameters that apply to each (CA, Server, Client, DH) file type are the size and common name of the generated file(s).
<b>Core parameters</b> or simply parameters that apply to each file type are the size and common name of the generated file(s).
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_core_parameters_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_core_parameters_v1.png|border|class=tlt-border]]
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_certificate_signing_v3.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_certificate_signing_v2.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<td>off {{!}} on; default: <b>off</b></td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>
<td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>
</tr>
</tr>
<tr>
<tr>
