Changes

no edit summary
Line 15: Line 15:     
==How to check the current connection state in Teltonika RUTOS?==
 
==How to check the current connection state in Teltonika RUTOS?==
1. In Webui go to Status > Realtime Data > Connections.  
+
1. In WebUI, Go to '''Status''' > '''Realtime Data''' > '''Connections'''.  
    
[[File:Screenshot1.png|1100px|border|class=tlt-border]]
 
[[File:Screenshot1.png|1100px|border|class=tlt-border]]
   −
2. In CLI, use the command “iptables -L -n -v | grep "state”” to show the iptables rules involving “State Module”.   
+
2. In CLI, use the below command to show the iptables rules involving “State Module”.   
 +
 
 +
iptables -L -n -v | grep "state"
    
[[File:Screenshot2.png|1100px|border|class=tlt-border]]
 
[[File:Screenshot2.png|1100px|border|class=tlt-border]]
   −
3. In CLI, use the command “cat /proc/net/nf_conntrack” to display the connection tracking table maintained by the kernel. It shows active connections and their states, which is essential for SPI.  
+
3. In CLI, use the command '''cat /proc/net/nf_conntrack''' to display the connection tracking table maintained by the kernel. It shows active connections and their states, which is essential for SPI.  
    
[[File:Screenshot3.png|1100px|border|class=tlt-border]]
 
[[File:Screenshot3.png|1100px|border|class=tlt-border]]
   −
==When would you need to disable SPI and how?==
+
==When would you need to bypass SPI and how?==
    
Disabling the SPI would not be recommended as they play a crucial role in network security by tracking the state of connections and helping to prevent various types of attacks. But in certain scenarios you might be required to disable or bypass it, like.
 
Disabling the SPI would not be recommended as they play a crucial role in network security by tracking the state of connections and helping to prevent various types of attacks. But in certain scenarios you might be required to disable or bypass it, like.
Line 35: Line 37:  
2. Troubleshooting Network connectivity issues.
 
2. Troubleshooting Network connectivity issues.
   −
3. Specialised Network configuration
+
3. Specialised Network configuration.
 +
 
 +
 
 +
To bypass connection tracking you can add a rule like
 +
 
 +
iptables -t raw -A PREROUTING -i interfaceName -p tcp --dport destinationPort -j CT --notrack
      −
To bypass connection tracking you can add a rule like “iptables -t raw -A PREROUTING -i interfaceName -p tcp --dport destinationPort -j CT --notrack”
+
[[Category: Networking]]