Template:Networking rutos manual ports: Difference between revisions
Appearance
No edit summary |
No edit summary |
||
| (25 intermediate revisions by 2 users not shown) | |||
| Line 15: | Line 15: | ||
The <b>Ports</b> page provides information related to the status of the device's physical ports, as well as the ability to edit port settings. | The <b>Ports</b> page provides information related to the status of the device's physical ports, as well as the ability to edit port settings. | ||
{{#switch: {{{series}}} | RUT2M | RUT9M | TRB2M | TRB5 | OTD140 | RUTX | RUTM | TRB1 | RUT301 | RUT361 | RUT14X | TRB16 | RUTC | RUT206 |OTD500 | DAP14X | TRB501 | RUTE= | |||
==Port Settings== | |||
{{#switch: {{{series}}} | RUT2M | RUT9M | TRB2M | TRB5 | OTD140 | RUTX | RUTM | TRB1 | RUT301 | RUT361 = | |||
==Port Settings== | |||
This section displays information about the status of the device's ports with the ability to configure port settings. | This section displays information about the status of the device's ports with the ability to configure port settings. | ||
| Line 27: | Line 24: | ||
The figure below is an example of the '''All Ports''' window, color indicates port speed and status: | The figure below is an example of the '''All Ports''' window, color indicates port speed and status: | ||
[[File:Networking_rutos_manual_network_port_all_ports_{{{portsnumber}}}.png|border|class=tlt-border]] | [[File:Networking_rutos_manual_network_port_all_ports_{{{portsnumber}}}_v1.png|border|class=tlt-border]] | ||
{{#ifeq: {{{active_poe}}}|1|Some devices support active PoE and display its status: | |||
[[File:Networking_rutos_manual_network_port_activepoe.png|border|class=tlt-border]]|}} | |||
To change port settings select port and press `edit (number of ports) ports` button: | To change port settings select port and press `edit (number of ports) ports` button: | ||
| Line 47: | Line 48: | ||
<td>off {{!}} on; default: <b>on</b></td> | <td>off {{!}} on; default: <b>on</b></td> | ||
<td>Toggle port on or off.</td> | <td>Toggle port on or off.</td> | ||
</tr> | </tr>{{#ifeq: {{{active_poe}}}|1| | ||
<tr> | |||
<td>PoE</td> | |||
<td>off {{!}} on; default: <b>on</b></td> | |||
<td>Enable Power over Ethernet.</td> | |||
</tr>|}} | |||
<tr> | <tr> | ||
<td>Auto negotiation</td> | <td>Auto negotiation</td> | ||
| Line 65: | Line 71: | ||
<tr> | <tr> | ||
<td>Advertisement</td> | <td>Advertisement</td> | ||
<td>10M-Half {{!}} 10M-Full {{!}} 100M-Half {{!}} 100M-Full; default: <b> | <td>10M-Half {{!}} 10M-Full {{!}} 100M-Half {{!}} 100M-Full{{#switch: {{{series}}} | RUTX | RUTM | TRB1 | TRB5 ={{!}} 1000M-Full}}; default: <b>All</b></td> | ||
<td>Advertises preferred duplex mode and speed for negotiation with other devices.</td> | <td>Advertises preferred duplex mode and speed for negotiation with other devices.</td> | ||
</tr> | </tr> | ||
| Line 77: | Line 83: | ||
| #default =}} | | #default =}} | ||
{{#switch: {{{series}}} | RUTX | RUT9 | RUT30X | RUTM | | {{#ifeq: {{{active_poe}}}|1|Some devices support active PoE and display power usage next to the Duplex column: | ||
[[File:Networking_rutos_manual_network_port_activepoe_w.png|border|class=tlt-border]]|}} | |||
{{#switch: {{{series}}} | RUTX | RUT9 | RUT30X | RUTM | RUTC | RUT9M = | |||
{{#switch: {{{name}}} |RUTM30|RUTM31=|#default= | |||
==Port Mirroring== | ==Port Mirroring== | ||
Port Mirroring (may also be referred to as SPAN (Switched Port Analyzer)) is a service that relays a copy of all network packets - incoming and outgoing on one Ethernet port (Source Port) to another (Monitoring Port). | Port Mirroring (may also be referred to as SPAN (Switched Port Analyzer)) is a service that relays a copy of all network packets - incoming and outgoing on one Ethernet port (Source Port) to another (Monitoring Port). | ||
{{#switch: {{{series}}}| #default = | RUT9M = | |||
<u><b>Note:</b> Port Mirroring is additional software that can be installed from the <b>System → [[{{{name}}} Package Manager|Package Manager]]</b> page.</u>}} | |||
[[File:Networking_rutos_manual_network_port_port_mirroring.png|border|class=tlt-border]] | [[File:Networking_rutos_manual_network_port_port_mirroring.png|border|class=tlt-border]] | ||
| Line 109: | Line 123: | ||
<td>off {{!}} on; default: <b>off</b></td> | <td>off {{!}} on; default: <b>off</b></td> | ||
<td></td> | <td></td> | ||
</tr> | |||
</table>}} | |||
| #default =}} | |||
{{#ifeq: {{{802.1x_client}}} | 1 | | |||
==802.1X Client== | |||
<b>802.1X</b> is a network authentication protocol that opens ports for network access when an organization authenticates a user's identity and authorizes them for access to the network. The user's identity is determined based on their credentials or certificate, which is confirmed by the authentication server. The supplicant, or client, is the device attempting to gain access to the network. | |||
<u><b>Note:</b> 802.1X Client is additional software on some devices that can be installed from the <b>System → [[{{{name}}} Package Manager|Package Manager]]</b> page.</u> | |||
===Port status=== | |||
---- | |||
The figure below is an example of the '''Port status''' section (the number of ports depends on the device model): | |||
[[File:Networking_rutos_manual_network_port_all_ports.png|border|class=tlt-border]] | |||
To change port settings select port and press `edit (number of ports) ports` button: | |||
[[File:Networking_rutos_manual_network_port_all_ports_edit.png|border|class=tlt-border]] | |||
You will be redirected to `802.1X settings`. From here you can change 802.1X settings. | |||
[[File:Networking_rutos_manual_network_port_8021x_port_settings_v1.png|border|class=tlt-border]] | |||
<table class="nd-mantable"> | |||
<tr> | |||
<th>Field</th> | |||
<th>Value</th> | |||
<th>Description</th> | |||
</tr> | |||
<tr> | |||
<td>Enable</td> | |||
<td>off {{!}} on; default: <b>off</b></td> | |||
<td>Toggle 802.1x on or off.</td> | |||
</tr> | |||
<tr> | |||
<td>Auth type</td> | |||
<td>MD5 {{!}} <span style="color:red">TLS</span> {{!}} PWD {{!}} <span style="color:green">Tunneled TLS</span> {{!}} <span style="color:blue">Protected EAP (PEAP)</span>; default: <b>MD5</b></td> | |||
<td>Authentication type.</td> | |||
</tr> | |||
<tr> | |||
<td>Identity (Username)</td> | |||
<td>string; default: <b>none</b></td> | |||
<td>Used as the username for authentication.</td> | |||
</tr> | |||
<tr> | |||
<td>MD5, PWD, <span style="color:green">Tunneled TLS</span>, <span style="color:blue">Protected EAP (PEAP)</span>: Password</td> | |||
<td>string; default: <b>none</b></td> | |||
<td>Used for authentication.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:red">TLS</span>: CA Certificate</td> | |||
<td>.crt file; default: <b>none</b></td> | |||
<td>Radius server CA certificate.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:red">TLS</span>: User certificate</td> | |||
<td>.crt file; default: <b>none</b></td> | |||
<td>TLS client certificate.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:red">TLS</span>: Private Key</td> | |||
<td>.key file; default: <b>none</b></td> | |||
<td>TLS Private Key.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:red">TLS</span>: Private Key Password</td> | |||
<td>string; default: <b>none</b></td> | |||
<td>TLS Private Key Password.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:green">Tunneled TLS</span>: Inner authentication</td> | |||
<td>PAP {{!}} MSCHAP {{!}} MSCHAPv2 {{!}} MSCHAPv2 (no EAP) {{!}} CHAP {{!}} MD5 {{!}} GTC; default: <b>PAP</b></td> | |||
<td>Inner authentication type.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:blue">Protected EAP (PEAP)</span>: Inner authentication</td> | |||
<td>MSCHAPv2 {{!}} MD5 {{!}} GTC; default: <b>MSCHAPv2</b></td> | |||
<td>Inner authentication type.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:blue">Protected EAP (PEAP)</span>: Peap version</td> | |||
<td>auto {{!}} 0 {{!}} 1; default: <b>auto</b></td> | |||
<td>Peap version.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:green">Tunneled TLS</span>, <span style="color:blue">Protected EAP (PEAP)</span>: Anonymous identity</td> | |||
<td>string; default: <b>none</b></td> | |||
<td>Shown as username outside the encrypted tunnel. Not used for authentication.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color:green">Tunneled TLS</span>, <span style="color:blue">Protected EAP (PEAP)</span>: CA Certificate</td> | |||
<td>.crt file; default: <b>none</b></td> | |||
<td>Radius server CA certificate.</td> | |||
</tr> | |||
</table> | |||
===802.1X status=== | |||
---- | |||
This section displays port 802.1X status information. There is also an option to select ports and enable authentication: | |||
[[File:Networking_rutos_manual_network_port_port_status_8021x.png|border|class=tlt-border]]|}} | |||
{{#ifeq: {{{802.1x_server}}} | 1 | | |||
==802.1X Server== | |||
<b>The 802.1X</b> authentication server is typically an EAP-compliant RADIUS server which can authenticate either users (through passwords or certificates) or the client computer. | |||
<u><b>Note:</b> 802.1X Server is additional software on some devices that can be installed from the <b>System → [[{{{name}}} Package Manager|Package Manager]]</b> page.</u> | |||
===Port status=== | |||
---- | |||
The figure below is an example of the '''Port status''' section (the number of ports depends on the device model): | |||
[[File:Networking_rutos_manual_network_port_all_ports.png|border|class=tlt-border]] | |||
To change port settings select port and press `edit (number of ports) ports` button: | |||
[[File:Networking_rutos_manual_network_port_all_ports_edit.png|border|class=tlt-border]] | |||
You will be redirected to `802.1X settings`. From here you can change 802.1X settings. | |||
{{#switch: {{{series}}} | #default = | |||
[[File:Networking_rutos_manual_network_port_8021x_port_settings_server.png|border|class=tlt-border]] | |||
| RUTM = | |||
[[File:Networking_rutos_manual_network_port_8021x_port_settings_server_rutm.png|border|class=tlt-border]]}} | |||
<table class="nd-mantable"> | |||
<tr> | |||
<th>Field</th> | |||
<th>Value</th> | |||
<th>Description</th> | |||
</tr> | |||
<tr> | |||
<td>Enable</td> | |||
<td>off {{!}} on; default: <b>off</b></td> | |||
<td>Toggle 802.1x on or off.</td> | |||
</tr>{{#switch: {{{series}}} | #default = | RUTM = | |||
<tr> | |||
<td>Role</td> | |||
<td>Client {{!}} Server; default: <b>choose "server" role for 802.1X server configuration</b></td> | |||
<td>Toggle 802.1x role.</td> | |||
</tr>}} | |||
<tr> | |||
<td>Radius server</td> | |||
<td>radius server id; default: <b>example</b></td> | |||
<td>Authentication type.</td> | |||
</tr>{{#switch: {{{series}}} | #default = | |||
<tr> | |||
<td>Reject VLAN</td> | |||
<td>Disabled {{!}} VLAN1 {{!}} VLAN2; default: <b>Disabled</b></td> | |||
<td>Select reject VLAN 802.1x for server service.</td> | |||
</tr> | |||
<tr> | |||
<td>Accept VLAN</td> | |||
<td>Radius assigned {{!}} VLAN1 {{!}} VLAN2; default: <b>VLAN1</b></td> | |||
<td>Select accept VLAN 802.1x for server service.</td> | |||
</tr>| RUTM =}} | |||
</table> | |||
===802.1X status=== | |||
---- | |||
This section displays port 802.1X status information. There is also an option to select ports and enable authentication: | |||
[[File:Networking_rutos_manual_network_port_port_status_8021x_server.png|border|class=tlt-border]] | |||
==RADIUS== | |||
The <b>RADIUS</b> page is used to create and manage radius servers: | |||
[[File:Networking_rutos_manual_ports_port_radius_v1.png|border|class=tlt-border]] | |||
<table class="nd-othertables_2"> | |||
<tr> | |||
<th width="250">Field Name</th> | |||
<th width="900">Description</th> | |||
</tr> | |||
<tr> | |||
<td>Name</td> | |||
<td>Name of RADIUS server.</td> | |||
</tr> | |||
<tr> | |||
<td>IP address</td> | |||
<td>RADIUS server IP.</td> | |||
</tr> | |||
<tr> | |||
<td>Authentication port</td> | |||
<td>RADIUS server athentication port.</td> | |||
</tr> | |||
<tr> | |||
<td>Actions</td> | |||
<td>-(interactive buttons)</td> | |||
</tr> | </tr> | ||
</table> | </table> | ||
| | |||
===Radius Configuration=== | |||
---- | |||
The RADIUS configuration window should look similar to this: | |||
[[File:Networking_rutos_manual_ports_port_radius_configuration_v1.png|border|class=tlt-border]] | |||
<table class="nd-mantable"> | |||
<tr> | |||
<th>Field</th> | |||
<th>Value</th> | |||
<th>Description</th> | |||
</tr> | |||
<tr> | |||
<td>Name</td> | |||
<td>string; default: <b>example</b></td> | |||
<td>Name of radius configuration.</td> | |||
</tr> | |||
<tr> | |||
<td>IP address</td> | |||
<td>ip; default: <b>0.0.0.0</b></td> | |||
<td>RADIUS server IP.</td> | |||
</tr> | |||
<tr> | |||
<td>Authentication port</td> | |||
<td>integer [1.. 65535]; default: <b>1812</b></td> | |||
<td>RADIUS server athentication port.</td> | |||
</tr> | |||
<tr> | |||
<td>Secret</td> | |||
<td>string; default: <b>-</b></td> | |||
<td>RADIUS server secret.</td> | |||
</tr> | |||
<tr> | |||
<td>Test connectivity</td> | |||
<td>-(interactive) button</td> | |||
<td>Test connectivity to RADIUS server.</td> | |||
</tr> | |||
<tr> | |||
<td>Test user credentials</td> | |||
<td>-(interactive) button</td> | |||
<td>Test credentials to RADIUS server.</td> | |||
</tr> | |||
<tr> | |||
<td>Enable backup RADIUS server</td> | |||
<td>off {{!}} <span style="color: red;">on</span>; default: <b>off</b></td> | |||
<td>Enable backup RADIUS server.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color: red;">IP address</span></td> | |||
<td>ip; default: <b>none</b></td> | |||
<td>Backup RADIUS server IP.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color: red;">Authentication port</span></td> | |||
<td>integer [1.. 65535]; default: <b>none</b></td> | |||
<td>Backup RADIUS server authentication port.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color: red;">Secret</span></td> | |||
<td>string; default: <b>-</b></td> | |||
<td>Backup RADIUS server secret.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color: red;">Test connectivity</span></td> | |||
<td>-(interactive) button</td> | |||
<td>Test connectivity to backup RADIUS server.</td> | |||
</tr> | |||
<tr> | |||
<td><span style="color: red;">Test user credentials</span></td> | |||
<td>-(interactive) button</td> | |||
<td>Test credentials to backup RADIUS server.</td> | |||
</tr> | |||
|}} | |||
[[Category:{{{name}}} Network section]] | [[Category:{{{name}}} Network section]] | ||
Latest revision as of 11:15, 22 September 2025
The information in this page is updated in accordance with firmware version .
Summary
The Ports page provides information related to the status of the device's physical ports, as well as the ability to edit port settings.
[[Category:{{{name}}} Network section]]