9,024
edits
Changes
Template:Networking tswos manual administration (view source)
Revision as of 13:43, 12 October 2023
, 13:43, 12 October 2023Created page with "{{Template: Networking_rutos_manual_fw_disclosure | fw_version ={{Template: Networking_rutos_manual_latest_fw | series = {{{series}}} | name = {{{name}}} }} }} __TOC__ ==..."
{{Template: Networking_rutos_manual_fw_disclosure
| fw_version ={{Template: Networking_rutos_manual_latest_fw
| series = {{{series}}}
| name = {{{name}}}
}}
}}
__TOC__
==Summary==
This page is an overview of the <b>Administration</b> section of {{{name}}} devices.
==General==
The <b>General</b> section is used to set up some of device managerial parameters, such as changing device name. For more information on the General section, refer to figure and table below.
[[File:Networking_tswos_manual_administration_general.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<th>Device name and hostname</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Device name</td>
<td>string; default: <b>{{{name}}}</b></td>
<td>Device model name.</td>
</tr>
<tr>
<td>Hostname</td>
<td>string; default: <b>Teltonika-{{{name}}}.com</b></td>
<td>Device hostname. This can be used for communication with other LAN hosts.</td>
</tr>
<tr>
<th>Reset Button Configuration</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Min time</td>
<td>integer [0..60]; default: <b>none</b></td>
<td>Minimum time (in seconds) the button needs to be held to perform an action.</td>
</tr>
<tr>
<td>Max time</td>
<td>integer [1..60]; default: <b>none</b></td>
<td>Maximum time (in seconds) the button can be held to perform an action, after which no action will be performed.</td>
</tr>
</table>
==Date & Time==
===Summary===
----
<b>Network Time Protocol</b> (<b>NTP</b>) is a networking protocol for clock synchronization between computer
systems over packet-switched, variable-latency data networks. This chapter is an overview of the NTP section for {{{name}}} devices.
===General===
----
The <b>Time Synchronization</b> section lets you select time zone and synchronize the time.
The figure below is an example of the Time Synchronization section and the table below
provides information about the fields contained in that section:
[[File:Networking_tswos_manual_administrationn_date&time_general.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Current system time</td>
<td>time; default: <b>none</b></td>
<td>Current local time of the device.</td>
</tr>
<tr>
<td>Sync with browser</td>
<td>-(interactive button)</td>
<td>Click to synchronize device time and time zone to browsers, if your device time or time zone is not correct.<br></td>
</tr>
<tr>
<td>Time zone</td>
<td>time zone; default: <b>UTC</b></td>
<td>The device will sync time in accordance with the selected time zone.</td>
</tr>
</table>
===NTP===
----
This section is used to configure NTP client and time servers.
====Time Synchronization====
----
This section is used to configure the device's time settings.
[[File:Networking_tswos_manual_administration_date&time_time_synchronization.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable NTP Client</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns NTP on or off.</td>
</tr>
<tr>
<td>Save time to flash</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Saves last synchronized time to flash memory.</td>
</tr>
<tr>
<td>Force Servers</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Forces unreliable NTP servers.</td>
</tr>
<tr>
<td>Update interval (in seconds)</td>
<td>integer; default: <b>86400</b></td>
<td>How often the device will update the time.</td>
</tr>
<tr>
<td>Offset frequency</td>
<td>integer; default: <b>0</b></td>
<td>Adjusts the minor drift of the clock so that it will run more accurately.</td>
</tr>
<tr>
<td>Count of time synchronizations</td>
<td>integer; default: <b>none</b></td>
<td>The amount of times the device will perform time synchronizations. Leave empty in order to set to infinite.</td>
</tr>
</table>
====Time Servers====
----
This section is used to specify which time servers the device will use for time synchronization. To add more time servers to the list, click the 'Add' button.
[[File:Networking_tswos_manual_administration_date&time_time_servers.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Hostname</td>
<td>ip {{!}} url; default: <b>0.openwrt.pool.ntp.org</b></td>
<td>NTP servers that this device uses to sync time.</td>
</tr>
<tr>
<td>Delete button</td>
<td>-(interactive) button</td>
<td>Deletes hostname.</td>
</tr>
</table>
==User Settings==
===Change Password===
----
The <b>User settings</b> section is used to change the password of the current user.
[[File:Networking_tswos_manual_administration_user_settings_change_password.png|border|class=tlt-border]]
===System Users===
====Summary====
----
The <b>System Users</b> page is used to add new user accounts that can access the device with different user credentials than the default ones. The newly added users can be assigned to one of two groups, either of which can be modified to limit WebUI read/write access rights for users belonging to each specific group.
<b>This page is unrelated to SSH users.</b> By default, there is one SSH user named "root" and it shares the same password as the default WebUI user named "admin".
This manual page provides an overview of the Users page in {{{name}}} devices.
====Groups====
----
The <b>Groups</b> section lists available user groups of which there are three:
[[File:Networking_tswos_manual_administration_user_settings_groups.png|border|class=tlt-border]]
----
<ul>
<li><b>root</b> - highest level of authority. Key elements that define this group:
<ul>
<li>has unlimited read/write access;</li>
<li>additional users cannot be added to this group;</li>
<li>access rights for this group cannot be modified.</li>
</ul><br>[[File:Networking_rutos_manual_users_root_visualization.png]]
</li>
----
<li><b>admin</b> - second highest level of authority. Key elements that define this group:
<ul>
<li>limited read access; by default, users belonging to this group cannot view these pages:
<ul>
<li>System → Administration → [[{{{name}}} Administration|Users Settings]].</li>
</ul>
</li>
<li>unlimited write access by default;</li>
<li>access rights can be modified.</li>
</ul><br>[[File:Networking_rutos_manual_users_admin_visualization.png]]
</li>
----
<li><b>user</b> - lowest level of authority. Key elements that define this group:
<ul>
<li>no write access;</li>
<li>limited read access; by default, users belonging to this group cannot view these pages:
<ul>
<li>System → Administration → [[{{{name}}} Users|Users Settings]];</li>
<li>System → [[{{{name}}} Firmware|Firmware]];</li>
<li>System → [[{{{name}}} Reboot|Reboot]].</li>
</ul>
</li>
<li>access rights can be modified.</li>
</ul><br>[[File:Networking_rutos_manual_users_user_visualization.png]]
</li>
</ul>
----
<b>Additional note</b>: you can view and/or edit settings for each group by clicking the 'Edit' button next to them. More on information on how to edit group access settings is located in the following section of this manual page.
=====Group Settings (edit group)=====
----
A group's parameters can be set in its <b>Group Settings</b> page. To access the Groups Settings page, click the 'Edit' button next to the group's name. Below is an example of the Group Settings section:
[[File:Networking_tswos_manual_administration_user_settings_group_settings.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th style="width:300px">Value</th>
<th>Description</th>
</tr>
<tr>
<td>Write action</td>
<td>Allow {{!}} Deny; default: <b>Allow</b></td>
<td>Specifies whether to allow or deny write actions for users in the group. Write actions consist of changing configurations and performing certain actions (such as clicking buttons).<br>This field directly correlates with the "Write access" field below it, because the selected write action will apply to pages specified in that field.</td>
</tr>
<tr>
<td>Write access</td>
<td>path(s) to page(s); default: <b>
<ul>
<li><b>system/admin/multiusers/change_password</b></li>
</ul>
</b></td>
<td>Path(s) to the page(s) to which the selected "Write action" will be applied. Click the plus symbol to add multiple entries.</td>
</tr>
<tr>
<td>Read action</td>
<td>Allow {{!}} Deny; default: <b>Deny</b></td>
<td>Specifies whether to allow or deny read actions for users in the group. Read actions consist of viewing pages on the WebUI.<br>This field directly correlates with the "Read access" field below it, because the selected read action will apply to pages specified in that field.</td>
</tr>
<tr>
<td>Read access</td>
<td>path(s) to page(s); default:
<ul>
<li><b>system/admin/multiusers/users_configuration</b></li>
<li><b>system/flashops</b></li>
<li><b>system/maintenance/backup</b></li>
<li><b>system/flashops/</b></li>
<li><b>system/admin/access_control</b></li>
<li><b>network/</b></li>
</ul>
</td>
<td>Path(s) to the page(s) to which the selected "Read action" will be applied. Click the plus symbol to add more entries.</td>
</tr>
</table>
======Examples======
----
The easiest way to master the syntax is to navigate to page that you want to generate a path for and the copy the path from the URL of that page.
For example, to specify the path to the Network → Mobile page, navigate to the page, copy the page's URL address <b>starting from the symbol "#"</b> and paste it into one of the access fields:
[[File:Networking_rutos_users_groups_example_url_bar_v1.png]]
----
However, the VPN window contains links to many different types of VPN pages. If you want to specify only one of them, you can do it as well. For example, to to specify the path to the IPsec page, <b>add "/ipsec" to the path string</b>:
services/vpn<b>/ipsec</b>
----
An <b>asterisk (*)</b> in the path string means that the every page from that point on is included in that path. For example, to generate a path that includes pages in the Services menu tab:
services/<b>*</b>
Or to simply include everything in the entire WebUI (<b>if this path is combined with <i>Read action: Deny</i>, users from that group will not be able to login to the WebUI</b>):
<b>*</b>
====Users====
----
The <b>Users</b> section lists all created users and provides the possibility to change their passwords and the group they belong to (with the exception of the default user "admin" which always belongs to the <i>root</i> group).
By default, there is only one user called "admin":
[[File:Networking_rutos_users_users_v2.png|border|class=tlt-border]]
=====User Settings (edit user)=====
----
Each user's password and group parameters can be set in their <b>User Settings</b> pages. To access the User Settings page, click the 'Edit' button next to the user's name.
<u>However</u>, you may want to add a new user at first. This can be done from the [[{{{name}}}_Users#Add_New_User|Add New User]] section below:
[[File:Networking_rutos_users_add_new_user_example.png]]
<ol>
<li>create a username;</li>
<li>create a password for the user (must contain at least 8 characters, including at least one upper case letter and one digit);</li>
<li>click the 'Add' button;</li>
<li>click the 'Edit' next to newly added user.</li>
</ol>
----
Below is an example of a newly added user's settings page:
[[File:Networking_rutos_users_user_settings.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Username</td>
<td>string; default: <b>none</b></td>
<td>Displays the user's name.</td>
</tr>
<tr>
<td>New password</td>
<td>string; default: <b>none</b></td>
<td>Create a new password for the user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</td>
</tr>
<tr>
<td>Confirm new password</td>
<td>string; default: <b>none</b></td>
<td>Repeat the new password.</td>
</tr>
<tr>
<td>Group</td>
<td>admin {{!}} user; default: <b>user</b></td>
<td>The group to which the user belongs.</td>
</tr>
</table>
====Add New User====
----
The <b>Add New User</b> section is used to create additional users that can access the WebUI. After a new user is added, it will appear in the [[{{{name}}} Users#Users|Users]] section.
[[File:Networking_rutos_users_add_new_user.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Username</td>
<td>string; default: <b>none</b></td>
<td>A custom name for the new user.</td>
</tr>
<tr>
<td>Password</td>
<td>string; default: <b>none</b></td>
<td>A password for the new user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</td>
</tr>
</table>}}
==Access Control==
===General===
----
The <b>Access Control</b> page is used to manage local access to device.
====SSH====
----
[[File:Networking_tswos_manual_administration_access_control_general_ssh.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable SSH access</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns SSH access from the local network (LAN) on or off.</td>
</tr>
<tr>
<td>Port</td>
<td>integer [0..65535]; default: <b>22</b></td>
<td>Selects which port to use for SSH access.</td>
</tr>
<tr>
<td>Enable key-based authentication</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Use public keys for authentication.</td>
</tr>
</table>
====WebUI====
----
[[File:Networking_tswos_manual_administration_access_control_general_webui.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable HTTP access</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns HTTP access from the local network (LAN) to the device WebUI on or off.</td>
</tr>
<tr>
<td>Enable HTTPS access</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns HTTPS access from the local network (LAN) to the device WebUI on or off.</td>
</tr>
<tr>
<td>Redirect to HTTPS</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Redirects connection attempts from HTTP to HTTPS.</td>
</tr>
<tr>
<td>HTTP Port</td>
<td>integer [0..65535]; default: <b>80</b></td>
<td>Selects which port to use for HTTP access.</td>
</tr>
<tr>
<td>HTTPS Port</td>
<td>integer [0..65535]; default: <b>443</b></td>
<td>Selects which port to use for HTTPS access.</td>
</tr>
</table>
====CLI====
----
[[File:Networking_tswos_manual_administration_access_control_general_cli.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable CLI</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns CLI access from the local network (LAN) on or off.</td>
</tr>
<tr>
<td>Port range</td>
<td>range of integers [0..65534]-[1..65535]; default: <b>4200-4220</b></td>
<td>Selects which ports to use for CLI access.</td>
</tr>
<tr>
<td>Shell limit</td>
<td>integer [1..10]; default: <b>5</b></td>
<td>Maximum number of active CLI connections.</td>
</tr>
</table>
===Security===
----
The <b>Security</b> tab provides the possibility to enable/disable blocking IP's service and delete blocked devices from the list.
<b>IP Block Settings</b>
----
[[File:Networking_tswos_manual_administration_access_control_security.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Enable or disable blocking IP's if they have reached the set amount of failed times.</td>
</tr>
<tr>
<td>Fail count</td>
<td>integer [1..1000]; default: <b>10</b></td>
<td>An amount of times IP address can try to access SSH or WebUI before being blocked.</td>
</tr>
<tr>
<td>Clean after reboot</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>
</tr>
</table>
<b>Login Attempts</b>
----
[[File:Networking_tswos_manual_administration_access_control_security_login.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Source address</td>
<td>IP address</td>
<td>Shows the IP address from which the connection failed.</td>
</tr>
<tr>
<td>Device port</td>
<td>Port number</td>
<td>Shows the port number from which the connection failed.</td>
</tr>
<tr>
<td>Destination address</td>
<td>IP address</td>
<td>Shows yours device IP adress</td>
</tr>
<tr>
<td>Failed atempts</td>
<td>Number</td>
<td>Shows the number of failed attempts to connect to device.</td>
</tr>
<tr>
<td>Status</td>
<td>- {{!}} Blocked</td>
<td>Indicates whether the source address is blocked or not.</td>
</tr>
<tr>
<td>Reset</td>
<td>Check box</td>
<td>Allows you to select multiple IP addresses.</td>
</tr>
<tr>
<td>Unblock all</td>
<td>-(interactive button)</td>
<td>Unblocks all source adresses from the list.</td>
</tr>
<tr>
<td>Unblock selected</td>
<td>-(interactive button)</td>
<td>Unblocks selected source adresses from the list.</td>
</tr>
</table>
==Profiles==
===Summary===
Configuration <b>profiles</b> provide a way to create multiple distinct device configuration sets and apply them to the device based on current user requirements. This chapter is an overview of the Profiles page in {{{name}}} devices.
===Configuration Profiles===
This section displays user defined <b>configuration profiles</b>:
[[File:Networking_rutos_manual_profiles_configuration_profiles_2.png]]
----
To create a new profile, configure the device in accordance with your needs, go to this page, enter a custom name for the profile and click the 'Add' button. You can also choose to create a profile without any previous configurations. A new profile with the given name will appear in the "configuration profiles" list:
[[File:Networking_rutos_manual_profiles_configuration_profiles_add_new_profile_2.png|border|class=tlt-border]]
The 'Apply' button applies the adjacent configuration on the device.
===Scheduler===
The <b>Profile Scheduler</b> provides a possibility to set up a schedule of when the device
should use one profile configuration or another.
Check [[#Profile Scheduler Instance Example|Profile Scheduler Instance Example]] to get a better understanding at how Profile Scheduler Instances works.
====General Configuration====
----
The <b>General Configuration</b> section is used to enable the Scheduler itself. Created instances won't work unless this option is turned on.
[[File:Networking_rutos_manual_profiles_scheduler_general_configuration.png|border|class=tlt-border]]
====Profile Scheduler Instances====
----
The <b>Profile Scheduler Instances</b> section allows you to create profile Instances
to be enabled during specific time intervals. To add a new Instance click <b>Add</b> button.
<b>Note:</b> new Instance can only be created if there is at least one custom [[#Profiles|profile]] created.
[[File:Networking_rutos_manual_profiles_scheduler_profile_scheduler_instances.png|border|class=tlt-border]]
=====Profile Scheduler Instance Configuration=====
----
This page is used to configure profile, time and day of selected scheduler instance. Refer to the figure and table below for information on the Profile Scheduler Instance Configuration fields:
[[File:Networking_rutos_manual_profiles_scheduler_profile_scheduler_instance_configuration_v2.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable</td>
<td>off | on; default: <b>off</b></td>
<td>Enable selected instance for scheduler.</td>
</tr>
<tr>
<td>Profile</td>
<td>profiles; default: <b>none</b></td>
<td>Select profile which will be applied during specified time interval.</td>
</tr>
<tr>
<td>Interval Type</td>
<td>Weekdays | Month Days; default: <b>Weekdays</b></td>
<td>Depending on your needs select whether you want to configure weekdays or specific month days.</td>
</tr>
<tr>
<td>Start Time</td>
<td>time; default: <b>12:00</b></td>
<td>Enter time of the start of interval in which scheduler will switch profiles.</td>
</tr>
<tr>
<td>End Time</td>
<td>time; default: <b>12:00</b></td>
<td>Enter time of the end of interval in which scheduler will switch profiles back.</td>
</tr>
<tr>
<th>Interval Type: Weekdays</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Start Day</td>
<td>Weekday [Monday..Sunday]; default: <b>Sunday</b></td>
<td>Select a day of the start of interval in which scheduler will switch profiles.</td>
</tr>
<tr>
<td>End Day</td>
<td>Weekday [Monday..Sunday]; default: <b>Sunday</b></td>
<td>Select a day of the end of interval in which scheduler will switch profiles back.</td>
</tr>
<tr>
<th>Interval Type: Month Days</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Start Day</td>
<td>Day of month [1..31]; default: <b>1</b></td>
<td>Select a day of the start of interval in which scheduler will switch profiles.</td>
</tr>
<tr>
<td>End Day</td>
<td>Day of month [1..31]; default: <b>1</b></td>
<td>Select a day of the end of interval in which scheduler will switch profiles back.</td>
</tr>
<tr>
<td>Force last day</td>
<td>off | on; default: <b>off</b></td>
<td>Force intervals to accept last day of month as valid option if selected day doesn't exist in ongoing month.</td>
</tr>
</table>
=====Profile Scheduler Instance Example=====
----
Scheduler will use <i>profile instance</i> if it is enabled <b>and</b> it's time
interval matches device's [[{{{name}}} NTP|date]], otherwise <i>default</i> profile will be used.
Example - we have 3 profiles in total:
<ul>
<li>default</li>
<li>Profile A</li>
<li>Profile B</li>
</ul>
We create profile instances for Profiles A and B:
<ul>
<li>Profile A: 08:00 - 11:00</li>
<li>Profile B: 13:00 - 20:00</li>
</ul>
During 11:00 - 13:00 and 20:00 - 08:00 <i>default</i> profile will be used.
[[Category:{{{name}}} System section]]
| fw_version ={{Template: Networking_rutos_manual_latest_fw
| series = {{{series}}}
| name = {{{name}}}
}}
}}
__TOC__
==Summary==
This page is an overview of the <b>Administration</b> section of {{{name}}} devices.
==General==
The <b>General</b> section is used to set up some of device managerial parameters, such as changing device name. For more information on the General section, refer to figure and table below.
[[File:Networking_tswos_manual_administration_general.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<th>Device name and hostname</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Device name</td>
<td>string; default: <b>{{{name}}}</b></td>
<td>Device model name.</td>
</tr>
<tr>
<td>Hostname</td>
<td>string; default: <b>Teltonika-{{{name}}}.com</b></td>
<td>Device hostname. This can be used for communication with other LAN hosts.</td>
</tr>
<tr>
<th>Reset Button Configuration</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Min time</td>
<td>integer [0..60]; default: <b>none</b></td>
<td>Minimum time (in seconds) the button needs to be held to perform an action.</td>
</tr>
<tr>
<td>Max time</td>
<td>integer [1..60]; default: <b>none</b></td>
<td>Maximum time (in seconds) the button can be held to perform an action, after which no action will be performed.</td>
</tr>
</table>
==Date & Time==
===Summary===
----
<b>Network Time Protocol</b> (<b>NTP</b>) is a networking protocol for clock synchronization between computer
systems over packet-switched, variable-latency data networks. This chapter is an overview of the NTP section for {{{name}}} devices.
===General===
----
The <b>Time Synchronization</b> section lets you select time zone and synchronize the time.
The figure below is an example of the Time Synchronization section and the table below
provides information about the fields contained in that section:
[[File:Networking_tswos_manual_administrationn_date&time_general.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Current system time</td>
<td>time; default: <b>none</b></td>
<td>Current local time of the device.</td>
</tr>
<tr>
<td>Sync with browser</td>
<td>-(interactive button)</td>
<td>Click to synchronize device time and time zone to browsers, if your device time or time zone is not correct.<br></td>
</tr>
<tr>
<td>Time zone</td>
<td>time zone; default: <b>UTC</b></td>
<td>The device will sync time in accordance with the selected time zone.</td>
</tr>
</table>
===NTP===
----
This section is used to configure NTP client and time servers.
====Time Synchronization====
----
This section is used to configure the device's time settings.
[[File:Networking_tswos_manual_administration_date&time_time_synchronization.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable NTP Client</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns NTP on or off.</td>
</tr>
<tr>
<td>Save time to flash</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Saves last synchronized time to flash memory.</td>
</tr>
<tr>
<td>Force Servers</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Forces unreliable NTP servers.</td>
</tr>
<tr>
<td>Update interval (in seconds)</td>
<td>integer; default: <b>86400</b></td>
<td>How often the device will update the time.</td>
</tr>
<tr>
<td>Offset frequency</td>
<td>integer; default: <b>0</b></td>
<td>Adjusts the minor drift of the clock so that it will run more accurately.</td>
</tr>
<tr>
<td>Count of time synchronizations</td>
<td>integer; default: <b>none</b></td>
<td>The amount of times the device will perform time synchronizations. Leave empty in order to set to infinite.</td>
</tr>
</table>
====Time Servers====
----
This section is used to specify which time servers the device will use for time synchronization. To add more time servers to the list, click the 'Add' button.
[[File:Networking_tswos_manual_administration_date&time_time_servers.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Hostname</td>
<td>ip {{!}} url; default: <b>0.openwrt.pool.ntp.org</b></td>
<td>NTP servers that this device uses to sync time.</td>
</tr>
<tr>
<td>Delete button</td>
<td>-(interactive) button</td>
<td>Deletes hostname.</td>
</tr>
</table>
==User Settings==
===Change Password===
----
The <b>User settings</b> section is used to change the password of the current user.
[[File:Networking_tswos_manual_administration_user_settings_change_password.png|border|class=tlt-border]]
===System Users===
====Summary====
----
The <b>System Users</b> page is used to add new user accounts that can access the device with different user credentials than the default ones. The newly added users can be assigned to one of two groups, either of which can be modified to limit WebUI read/write access rights for users belonging to each specific group.
<b>This page is unrelated to SSH users.</b> By default, there is one SSH user named "root" and it shares the same password as the default WebUI user named "admin".
This manual page provides an overview of the Users page in {{{name}}} devices.
====Groups====
----
The <b>Groups</b> section lists available user groups of which there are three:
[[File:Networking_tswos_manual_administration_user_settings_groups.png|border|class=tlt-border]]
----
<ul>
<li><b>root</b> - highest level of authority. Key elements that define this group:
<ul>
<li>has unlimited read/write access;</li>
<li>additional users cannot be added to this group;</li>
<li>access rights for this group cannot be modified.</li>
</ul><br>[[File:Networking_rutos_manual_users_root_visualization.png]]
</li>
----
<li><b>admin</b> - second highest level of authority. Key elements that define this group:
<ul>
<li>limited read access; by default, users belonging to this group cannot view these pages:
<ul>
<li>System → Administration → [[{{{name}}} Administration|Users Settings]].</li>
</ul>
</li>
<li>unlimited write access by default;</li>
<li>access rights can be modified.</li>
</ul><br>[[File:Networking_rutos_manual_users_admin_visualization.png]]
</li>
----
<li><b>user</b> - lowest level of authority. Key elements that define this group:
<ul>
<li>no write access;</li>
<li>limited read access; by default, users belonging to this group cannot view these pages:
<ul>
<li>System → Administration → [[{{{name}}} Users|Users Settings]];</li>
<li>System → [[{{{name}}} Firmware|Firmware]];</li>
<li>System → [[{{{name}}} Reboot|Reboot]].</li>
</ul>
</li>
<li>access rights can be modified.</li>
</ul><br>[[File:Networking_rutos_manual_users_user_visualization.png]]
</li>
</ul>
----
<b>Additional note</b>: you can view and/or edit settings for each group by clicking the 'Edit' button next to them. More on information on how to edit group access settings is located in the following section of this manual page.
=====Group Settings (edit group)=====
----
A group's parameters can be set in its <b>Group Settings</b> page. To access the Groups Settings page, click the 'Edit' button next to the group's name. Below is an example of the Group Settings section:
[[File:Networking_tswos_manual_administration_user_settings_group_settings.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th style="width:300px">Value</th>
<th>Description</th>
</tr>
<tr>
<td>Write action</td>
<td>Allow {{!}} Deny; default: <b>Allow</b></td>
<td>Specifies whether to allow or deny write actions for users in the group. Write actions consist of changing configurations and performing certain actions (such as clicking buttons).<br>This field directly correlates with the "Write access" field below it, because the selected write action will apply to pages specified in that field.</td>
</tr>
<tr>
<td>Write access</td>
<td>path(s) to page(s); default: <b>
<ul>
<li><b>system/admin/multiusers/change_password</b></li>
</ul>
</b></td>
<td>Path(s) to the page(s) to which the selected "Write action" will be applied. Click the plus symbol to add multiple entries.</td>
</tr>
<tr>
<td>Read action</td>
<td>Allow {{!}} Deny; default: <b>Deny</b></td>
<td>Specifies whether to allow or deny read actions for users in the group. Read actions consist of viewing pages on the WebUI.<br>This field directly correlates with the "Read access" field below it, because the selected read action will apply to pages specified in that field.</td>
</tr>
<tr>
<td>Read access</td>
<td>path(s) to page(s); default:
<ul>
<li><b>system/admin/multiusers/users_configuration</b></li>
<li><b>system/flashops</b></li>
<li><b>system/maintenance/backup</b></li>
<li><b>system/flashops/</b></li>
<li><b>system/admin/access_control</b></li>
<li><b>network/</b></li>
</ul>
</td>
<td>Path(s) to the page(s) to which the selected "Read action" will be applied. Click the plus symbol to add more entries.</td>
</tr>
</table>
======Examples======
----
The easiest way to master the syntax is to navigate to page that you want to generate a path for and the copy the path from the URL of that page.
For example, to specify the path to the Network → Mobile page, navigate to the page, copy the page's URL address <b>starting from the symbol "#"</b> and paste it into one of the access fields:
[[File:Networking_rutos_users_groups_example_url_bar_v1.png]]
----
However, the VPN window contains links to many different types of VPN pages. If you want to specify only one of them, you can do it as well. For example, to to specify the path to the IPsec page, <b>add "/ipsec" to the path string</b>:
services/vpn<b>/ipsec</b>
----
An <b>asterisk (*)</b> in the path string means that the every page from that point on is included in that path. For example, to generate a path that includes pages in the Services menu tab:
services/<b>*</b>
Or to simply include everything in the entire WebUI (<b>if this path is combined with <i>Read action: Deny</i>, users from that group will not be able to login to the WebUI</b>):
<b>*</b>
====Users====
----
The <b>Users</b> section lists all created users and provides the possibility to change their passwords and the group they belong to (with the exception of the default user "admin" which always belongs to the <i>root</i> group).
By default, there is only one user called "admin":
[[File:Networking_rutos_users_users_v2.png|border|class=tlt-border]]
=====User Settings (edit user)=====
----
Each user's password and group parameters can be set in their <b>User Settings</b> pages. To access the User Settings page, click the 'Edit' button next to the user's name.
<u>However</u>, you may want to add a new user at first. This can be done from the [[{{{name}}}_Users#Add_New_User|Add New User]] section below:
[[File:Networking_rutos_users_add_new_user_example.png]]
<ol>
<li>create a username;</li>
<li>create a password for the user (must contain at least 8 characters, including at least one upper case letter and one digit);</li>
<li>click the 'Add' button;</li>
<li>click the 'Edit' next to newly added user.</li>
</ol>
----
Below is an example of a newly added user's settings page:
[[File:Networking_rutos_users_user_settings.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Username</td>
<td>string; default: <b>none</b></td>
<td>Displays the user's name.</td>
</tr>
<tr>
<td>New password</td>
<td>string; default: <b>none</b></td>
<td>Create a new password for the user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</td>
</tr>
<tr>
<td>Confirm new password</td>
<td>string; default: <b>none</b></td>
<td>Repeat the new password.</td>
</tr>
<tr>
<td>Group</td>
<td>admin {{!}} user; default: <b>user</b></td>
<td>The group to which the user belongs.</td>
</tr>
</table>
====Add New User====
----
The <b>Add New User</b> section is used to create additional users that can access the WebUI. After a new user is added, it will appear in the [[{{{name}}} Users#Users|Users]] section.
[[File:Networking_rutos_users_add_new_user.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Username</td>
<td>string; default: <b>none</b></td>
<td>A custom name for the new user.</td>
</tr>
<tr>
<td>Password</td>
<td>string; default: <b>none</b></td>
<td>A password for the new user. The password must contain at least 8 characters, including at least one upper case letter and one digit.</td>
</tr>
</table>}}
==Access Control==
===General===
----
The <b>Access Control</b> page is used to manage local access to device.
====SSH====
----
[[File:Networking_tswos_manual_administration_access_control_general_ssh.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable SSH access</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns SSH access from the local network (LAN) on or off.</td>
</tr>
<tr>
<td>Port</td>
<td>integer [0..65535]; default: <b>22</b></td>
<td>Selects which port to use for SSH access.</td>
</tr>
<tr>
<td>Enable key-based authentication</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Use public keys for authentication.</td>
</tr>
</table>
====WebUI====
----
[[File:Networking_tswos_manual_administration_access_control_general_webui.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable HTTP access</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns HTTP access from the local network (LAN) to the device WebUI on or off.</td>
</tr>
<tr>
<td>Enable HTTPS access</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns HTTPS access from the local network (LAN) to the device WebUI on or off.</td>
</tr>
<tr>
<td>Redirect to HTTPS</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Redirects connection attempts from HTTP to HTTPS.</td>
</tr>
<tr>
<td>HTTP Port</td>
<td>integer [0..65535]; default: <b>80</b></td>
<td>Selects which port to use for HTTP access.</td>
</tr>
<tr>
<td>HTTPS Port</td>
<td>integer [0..65535]; default: <b>443</b></td>
<td>Selects which port to use for HTTPS access.</td>
</tr>
</table>
====CLI====
----
[[File:Networking_tswos_manual_administration_access_control_general_cli.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable CLI</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns CLI access from the local network (LAN) on or off.</td>
</tr>
<tr>
<td>Port range</td>
<td>range of integers [0..65534]-[1..65535]; default: <b>4200-4220</b></td>
<td>Selects which ports to use for CLI access.</td>
</tr>
<tr>
<td>Shell limit</td>
<td>integer [1..10]; default: <b>5</b></td>
<td>Maximum number of active CLI connections.</td>
</tr>
</table>
===Security===
----
The <b>Security</b> tab provides the possibility to enable/disable blocking IP's service and delete blocked devices from the list.
<b>IP Block Settings</b>
----
[[File:Networking_tswos_manual_administration_access_control_security.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Enable or disable blocking IP's if they have reached the set amount of failed times.</td>
</tr>
<tr>
<td>Fail count</td>
<td>integer [1..1000]; default: <b>10</b></td>
<td>An amount of times IP address can try to access SSH or WebUI before being blocked.</td>
</tr>
<tr>
<td>Clean after reboot</td>
<td>off {{!}} on; default: <b>off</b></td>
<td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>
</tr>
</table>
<b>Login Attempts</b>
----
[[File:Networking_tswos_manual_administration_access_control_security_login.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Source address</td>
<td>IP address</td>
<td>Shows the IP address from which the connection failed.</td>
</tr>
<tr>
<td>Device port</td>
<td>Port number</td>
<td>Shows the port number from which the connection failed.</td>
</tr>
<tr>
<td>Destination address</td>
<td>IP address</td>
<td>Shows yours device IP adress</td>
</tr>
<tr>
<td>Failed atempts</td>
<td>Number</td>
<td>Shows the number of failed attempts to connect to device.</td>
</tr>
<tr>
<td>Status</td>
<td>- {{!}} Blocked</td>
<td>Indicates whether the source address is blocked or not.</td>
</tr>
<tr>
<td>Reset</td>
<td>Check box</td>
<td>Allows you to select multiple IP addresses.</td>
</tr>
<tr>
<td>Unblock all</td>
<td>-(interactive button)</td>
<td>Unblocks all source adresses from the list.</td>
</tr>
<tr>
<td>Unblock selected</td>
<td>-(interactive button)</td>
<td>Unblocks selected source adresses from the list.</td>
</tr>
</table>
==Profiles==
===Summary===
Configuration <b>profiles</b> provide a way to create multiple distinct device configuration sets and apply them to the device based on current user requirements. This chapter is an overview of the Profiles page in {{{name}}} devices.
===Configuration Profiles===
This section displays user defined <b>configuration profiles</b>:
[[File:Networking_rutos_manual_profiles_configuration_profiles_2.png]]
----
To create a new profile, configure the device in accordance with your needs, go to this page, enter a custom name for the profile and click the 'Add' button. You can also choose to create a profile without any previous configurations. A new profile with the given name will appear in the "configuration profiles" list:
[[File:Networking_rutos_manual_profiles_configuration_profiles_add_new_profile_2.png|border|class=tlt-border]]
The 'Apply' button applies the adjacent configuration on the device.
===Scheduler===
The <b>Profile Scheduler</b> provides a possibility to set up a schedule of when the device
should use one profile configuration or another.
Check [[#Profile Scheduler Instance Example|Profile Scheduler Instance Example]] to get a better understanding at how Profile Scheduler Instances works.
====General Configuration====
----
The <b>General Configuration</b> section is used to enable the Scheduler itself. Created instances won't work unless this option is turned on.
[[File:Networking_rutos_manual_profiles_scheduler_general_configuration.png|border|class=tlt-border]]
====Profile Scheduler Instances====
----
The <b>Profile Scheduler Instances</b> section allows you to create profile Instances
to be enabled during specific time intervals. To add a new Instance click <b>Add</b> button.
<b>Note:</b> new Instance can only be created if there is at least one custom [[#Profiles|profile]] created.
[[File:Networking_rutos_manual_profiles_scheduler_profile_scheduler_instances.png|border|class=tlt-border]]
=====Profile Scheduler Instance Configuration=====
----
This page is used to configure profile, time and day of selected scheduler instance. Refer to the figure and table below for information on the Profile Scheduler Instance Configuration fields:
[[File:Networking_rutos_manual_profiles_scheduler_profile_scheduler_instance_configuration_v2.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable</td>
<td>off | on; default: <b>off</b></td>
<td>Enable selected instance for scheduler.</td>
</tr>
<tr>
<td>Profile</td>
<td>profiles; default: <b>none</b></td>
<td>Select profile which will be applied during specified time interval.</td>
</tr>
<tr>
<td>Interval Type</td>
<td>Weekdays | Month Days; default: <b>Weekdays</b></td>
<td>Depending on your needs select whether you want to configure weekdays or specific month days.</td>
</tr>
<tr>
<td>Start Time</td>
<td>time; default: <b>12:00</b></td>
<td>Enter time of the start of interval in which scheduler will switch profiles.</td>
</tr>
<tr>
<td>End Time</td>
<td>time; default: <b>12:00</b></td>
<td>Enter time of the end of interval in which scheduler will switch profiles back.</td>
</tr>
<tr>
<th>Interval Type: Weekdays</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Start Day</td>
<td>Weekday [Monday..Sunday]; default: <b>Sunday</b></td>
<td>Select a day of the start of interval in which scheduler will switch profiles.</td>
</tr>
<tr>
<td>End Day</td>
<td>Weekday [Monday..Sunday]; default: <b>Sunday</b></td>
<td>Select a day of the end of interval in which scheduler will switch profiles back.</td>
</tr>
<tr>
<th>Interval Type: Month Days</th>
<th></th>
<th></th>
</tr>
<tr>
<td>Start Day</td>
<td>Day of month [1..31]; default: <b>1</b></td>
<td>Select a day of the start of interval in which scheduler will switch profiles.</td>
</tr>
<tr>
<td>End Day</td>
<td>Day of month [1..31]; default: <b>1</b></td>
<td>Select a day of the end of interval in which scheduler will switch profiles back.</td>
</tr>
<tr>
<td>Force last day</td>
<td>off | on; default: <b>off</b></td>
<td>Force intervals to accept last day of month as valid option if selected day doesn't exist in ongoing month.</td>
</tr>
</table>
=====Profile Scheduler Instance Example=====
----
Scheduler will use <i>profile instance</i> if it is enabled <b>and</b> it's time
interval matches device's [[{{{name}}} NTP|date]], otherwise <i>default</i> profile will be used.
Example - we have 3 profiles in total:
<ul>
<li>default</li>
<li>Profile A</li>
<li>Profile B</li>
</ul>
We create profile instances for Profiles A and B:
<ul>
<li>Profile A: 08:00 - 11:00</li>
<li>Profile B: 13:00 - 20:00</li>
</ul>
During 11:00 - 13:00 and 20:00 - 08:00 <i>default</i> profile will be used.
[[Category:{{{name}}} System section]]