1,223
edits
Changes
Template:Networking rutos manual administration (view source)
Revision as of 16:51, 18 December 2023
, 16:51, 18 December 2023→Security
<!--- {{{series}}}, {{{name}}} --->
<!--- {{{series}}}, {{{name}}} --->
{{Template: Networking_rutos_manual_fw_disclosure
{{Template: Networking_device_manual_fw_disclosure
| fw_version ={{Template: Networking_rutos_manual_latest_fw
| series = {{{series}}}
| name = {{{name}}}
| fw_version ={{Template: Networking_device_manual_latest_fw
| series = {{{series}}}
| series = {{{series}}}
| name = {{{name}}}
| name = {{{name}}}
}}
}}
}}
}}
{{#ifeq: {{{series}}} | RUT9 |<br><i><b>Note</b>: <b>[[{{{name}}} Administration (legacy WebUI)|click here]]</b> for the old style WebUI (FW version {{Template: Networking_rutos_manual_latest_fw | series = RUT9XX}} and earlier) user manual page.</i>|}}
{{#ifeq: {{{series}}} | RUT9 |<br><i><b>Note</b>: <b>[[{{{name}}} Administration (legacy WebUI)|click here]]</b> for the old style WebUI (FW version {{Template: Networking_device_manual_latest_fw | series = RUT9XX}} and earlier) user manual page.</i>|}}
{{#ifeq: {{{series}}} | RUT2 |<br><i><b>Note</b>: <b>[[{{{name}}} Administration (legacy WebUI)|click here]]</b> for the old style WebUI (FW version {{Template: Networking_rutos_manual_latest_fw | series = RUT2XX}} and earlier) user manual page.</i>|}}
{{#ifeq: {{{series}}} | RUT2 |<br><i><b>Note</b>: <b>[[{{{name}}} Administration (legacy WebUI)|click here]]</b> for the old style WebUI (FW version {{Template: Networking_device_manual_latest_fw | series = RUT2XX}} and earlier) user manual page.</i>|}}
__TOC__
==Summary==
==Summary==
The <b>General</b> section is used to set up some of device managerial parameters, such as changing device name. For more information on the General section, refer to figure and table below.
The <b>General</b> section is used to set up some of device managerial parameters, such as changing device name. For more information on the General section, refer to figure and table below.
{{#switch:{{{series}}}
{{#switch:{{{series}}}
| TAP100=[[File:Networking_rutos_manual_administration_general_tap100_v1.png|border|class=tlt-border]]
| TAP100|TAP200=[[File:Networking_rutos_manual_administration_general_tap100_v1.png|border|class=tlt-border]]
| TCR1=[[File:Networking_rutos_manual_administration_general_tcr_v2.png|border|class=tlt-border]]
| TCR1=[[File:Networking_rutos_manual_administration_general_tcr_v2.png|border|class=tlt-border]]
| TRB1|TRB2|TRB5=[[File:Networking_rutos_manual_administration_general_trb_v2.png|border|class=tlt-border]]
| TRB1|TRB2|TRB5=[[File:Networking_rutos_manual_administration_general_trb_v2.png|border|class=tlt-border]]
<th>Value</th>
<th>Value</th>
<th>Description</th>
<th>Description</th>
</tr>{{#ifeq:{{{series}}}|TAP100||
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<th>General Settings</th>
<th>General Settings</th>
</table>
</table>
{{#ifeq:{{{series}}}|TAP100||<span class="asterisk">*</span> Different language packages can be downloaded separately from the <b>Services → [[{{{name}}} Package Manager|Package Manager]]</b> page.}}
{{#switch:{{{series}}}|TAP100|TAP200=|#default=<span class="asterisk">*</span> Different language packages can be downloaded separately from the <b>System → [[{{{name}}} Package Manager|Package Manager]]</b> page.}}
==Date & Time==
==Date & Time==
<td>Sync with browser</td>
<td>Sync with browser</td>
<td>-(interactive button)</td>
<td>-(interactive button)</td>
<td>Click to synchronize device time and time zone to browsers, if your device time or time zone is not correct.<br>
<td>Click to synchronize device time and time zone to browsers, if your device time or time zone is not correct.<br></td>
</tr>
</tr>
<tr>
<tr>
<td>off {{!}} on; default: <b>off</b></td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Enables periodic time synchronization for the system using the GPS module which does not require an Internet connection.</td>
<td>Enables periodic time synchronization for the system using the GPS module which does not require an Internet connection.</td>
</tr>
</tr>|}}
|}}
</table>
</table>
===NTP===
===NTP===
This section is used to specify which time servers the device will use for time synchronization. To add more time servers to the list, click the 'Add' button.
This section is used to specify which time servers the device will use for time synchronization. To add more time servers to the list, click the 'Add' button.
{{#ifeq:{{{series}}}|TAP100|[[File:Networking_rutos_ntp_ntp_time_servers_tap100.png|border|class=tlt-border]]|[[File:Networking_rutos_ntp_ntp_time_servers.png|border|class=tlt-border]]}}
{{#switch:{{{series}}}|TAP100|TAP200=[[File:Networking_rutos_ntp_ntp_time_servers_tap100_v2.png|border|class=tlt-border]]|#default=[[File:Networking_rutos_ntp_ntp_time_servers_v2.png|border|class=tlt-border]]}}
<table class="nd-mantable">
<table class="nd-mantable">
<tr>
<tr>
</table>
</table>
{{#ifeq:{{{series}}}|TAP100||====NTP Server====
{{#switch:{{{series}}}|TAP100|TAP200=|#default= ====NTP Server====
----
----
The device can also act as an <b>NTP Server</b>, providing clock synchronization to other devices in the network. From this section you can turn this feature on or off:
The device can also act as an <b>NTP Server</b>, providing clock synchronization to other devices in the network. From this section you can turn this feature on or off:
[[File:Networking_rutos_ntp_ntp_server.png|border|class=tlt-border]]}}
[[File:Networking_rutos_ntp_ntp_server.png|border|class=tlt-border]]}}
{{#ifeq:{{{series}}}|TAP100||===NTPD===
{{#switch:{{{series}}}|TAP100|TAP200=|#default= ===NTPD===
----
----
The <b>NTPD</b> program is an operating system daemon that synchronizes the system clock to remote NTP time servers or local reference clocks. NTPD includes the ability to use this to keep your clock in sync and will run more accurately than a clock on a device not running NTPD. NTPD will also use several servers to improve accuracy. It is a complete implementation of NTP version 4 defined by RFC-5905, but also retains compatible with version 3 defined by RFC-1305 and versions 1 and 2, defined by RFC-1059 and RFC-1119, respectively.
The <b>NTPD</b> program is an operating system daemon that synchronizes the system clock to remote NTP time servers or local reference clocks. NTPD includes the ability to use this to keep your clock in sync and will run more accurately than a clock on a device not running NTPD. NTPD will also use several servers to improve accuracy. It is a complete implementation of NTP version 4 defined by RFC-5905, but also retains compatible with version 3 defined by RFC-1305 and versions 1 and 2, defined by RFC-1059 and RFC-1119, respectively.
<b>Note:</b> NTPD is additional software that can be installed from the <b>Services → [[{{{name}}} Package Manager|Package Manager]]</b> page.
<b>Note:</b> NTPD is additional software that can be installed from the <b>System → [[{{{name}}} Package Manager|Package Manager]]</b> page.
[[File:Networking_rutos_ntp_ntpd.png|border|class=tlt-border]]
[[File:Networking_rutos_ntp_ntpd_v2.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
==User Settings==
==User Settings==
{{Template: Networking_rutos_manual_users | series = {{{series}}} | name = {{{name}}}}}
{{Template: Networking_rutos_manual_users | series = {{{series}}} | name = {{{name}}} | wifi = {{{wifi}}} | mobile = {{{mobile}}}}}
==Access Control==
==Access Control==
===General===
===General===
----
----
The <b>Access Control</b> page is used to manage {{#ifeq:{{{series}}}|TAP100||remote and}} local access to device.
The <b>Access Control</b> page is used to manage {{#switch:{{{series}}}|TAP100|TAP200=|#default= remote and}} local access to device.
{{#ifeq:{{{series}}}|TAP100||<b>Important</b>: turning on remote access leaves your device vulnerable to external attackers. Make sure you use a strong password.
{{#switch:{{{series}}}|TAP100|TAP200=|#default=<b>Important</b>: turning on remote access leaves your device vulnerable to external attackers. Make sure you use a strong password.
<br><br>}}
<br><br>}}
<b>SSH</b>
<b>SSH</b>
----{{#switch:{{{series}}}
----{{#switch:{{{series}}}
|TAP100 = [[File:Networking_rutos_manual_administration_access_control_general_ssh_tap100_v1.png|border|class=tlt-border]]
|TAP100|TAP200 = [[File:Networking_rutos_manual_administration_access_control_general_ssh_tap100_v1.png|border|class=tlt-border]]
|#default = [[File:Networking_rutos_manual_administration_access_control_general_ssh_v1.png|border|class=tlt-border]]}}
|#default = [[File:Networking_rutos_manual_administration_access_control_general_ssh_v1.png|border|class=tlt-border]]}}
<td>off {{!}} on; default: <b>on</b></td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns SSH access from the local network (LAN) on or off.</td>
<td>Turns SSH access from the local network (LAN) on or off.</td>
</tr>{{#ifeq:{{{series}}}|TAP100||
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default
<tr>
<tr>
<td>Remote SSH access</td>
<td>Remote SSH access</td>
<b>WebUI</b>
<b>WebUI</b>
----{{#switch:{{{series}}}
----{{#switch:{{{series}}}
|TAP100 = [[File:Networking_rutos_manual_administration_access_control_general_webui_tap100_v1.png|border|class=tlt-border]]
|TAP100|TAP200 = [[File:Networking_rutos_manual_administration_access_control_general_webui_tap100_v1.png|border|class=tlt-border]]
|#default = [[File:Networking_rutos_manual_administration_access_control_general_webui_v1.png|border|class=tlt-border]]}}
|#default = [[File:Networking_rutos_manual_administration_access_control_general_webui_v1.png|border|class=tlt-border]]}}
<td>off {{!}} on; default: <b>off</b></td>
<td>off {{!}} on; default: <b>off</b></td>
<td>Redirects connection attempts from HTTP to HTTPS.</td>
<td>Redirects connection attempts from HTTP to HTTPS.</td>
</tr>{{#ifeq:{{{series}}}|TAP100||
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<td>Enable remote HTTP access</td>
<td>Enable remote HTTP access</td>
<td>integer [0..65535]; default: <b>80</b></td>
<td>integer [0..65535]; default: <b>80</b></td>
<td>Selects which port to use for HTTP access.</td>
<td>Selects which port to use for HTTP access.</td>
</tr>{{#ifeq:{{{series}}}|TAP100||
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<td>Enable remote HTTPS access</td>
<td>Enable remote HTTPS access</td>
<td>integer [0..65535]; default: <b>443</b></td>
<td>integer [0..65535]; default: <b>443</b></td>
<td>Selects which port to use for HTTPS access.</td>
<td>Selects which port to use for HTTPS access.</td>
</tr>{{#ifeq:{{{series}}}|TAP100||
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<td>Ignore private IPs on public interface</td>
<td>Ignore private IPs on public interface</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Prevent access from private (RFC1918) IPs on an interface if it has an public IP address.</td>
<td>Prevent access from private (RFC1918) IPs on an interface if it has an public IP address.</td>
</tr>}}{{#ifeq:{{{series}}}|TAP100||
</tr>}}{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<td>Certificate files from device</td>
<td>Certificate files from device</td>
<td>off {{!}} on; default: <b>on</b></td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Choose this option if you want to select certificate files from device. Certificate files can be generated in [[{{{name}}} Administration#Certificates|Certificates]] section.</td>
<td>Choose this option if you want to select certificate files from device. Certificate files can be generated in [[{{{name}}} Administration#Certificates|Certificates]] section.</td>
</tr>}}{{#ifeq:{{{series}}}|TAP100||
</tr>}}{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<td>Server certificate</td>
<td>Server certificate</td>
<td>.crt; default: <b>uhttpd.crt</b></td>
<td>.crt; default: <b>uhttpd.crt</b></td>
<td>Server certificate file.</td>
<td>Server certificate file.</td>
</tr>}}{{#ifeq:{{{series}}}|TAP100||
</tr>}}{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<td>Server key</td>
<td>Server key</td>
<b>CLI</b>
<b>CLI</b>
----{{#switch:{{{series}}}
----{{#switch:{{{series}}}
|TAP100 = [[File:Networking_rutos_manual_administration_access_control_general_cli_tap100.png|border|class=tlt-border]]
|TAP100|TAP200 = [[File:Networking_rutos_manual_administration_access_control_general_cli_tap100.png|border|class=tlt-border]]
|#default = [[File:Networking_rutos_manual_administration_access_control_general_cli.png|border|class=tlt-border]]}}
|#default = [[File:Networking_rutos_manual_administration_access_control_general_cli.png|border|class=tlt-border]]}}
<td>off {{!}} on; default: <b>on</b></td>
<td>off {{!}} on; default: <b>on</b></td>
<td>Turns CLI access from the local network (LAN) on or off.</td>
<td>Turns CLI access from the local network (LAN) on or off.</td>
</tr>{{#ifeq:{{{series}}}|TAP100||
</tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<tr>
<tr>
<td>Enable remote CLI</td>
<td>Enable remote CLI</td>
</tr>
</tr>
</table>
</table>
<br>{{#ifeq:{{{series}}}|TAP100||
<br>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
<b>Telnet</b>
<b>Telnet</b>
----
----
===PAM===
===PAM===
----
----
<b>Note:</b> PAM is additional software that can be installed from the <b>Services → [[{{{name}}} Package Manager|Package Manager]]</b> page.
<b>Note:</b> PAM is additional software that can be installed from the <b>System → [[{{{name}}} Package Manager|Package Manager]]</b> page.
[[File:Networking_rutos_manual_administration_access_control_pam_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_access_control_pam_v2.png|border|class=tlt-border]]
====Modify PAM Auth====
====Modify PAM Auth====
</tr>
</tr>
<tr>
<tr>
<td><span style="color:red">Radius</span>: Port</td>
<td><span style="color:blue">TACACS+</span>/<span style="color:red">Radius</span>: Port</td>
<td>integer [0..65535]; default: <b>1812</b></td>
<td>integer [0..65535]; default: <b><span style="color:blue">49</span>/<span style="color:red">1812</span></b></td>
<td>RADIUS server authentication port</td>
<td>RADIUS server authentication port</td>
</tr>
</tr>
</table>
</table>
{{#ifeq:{{{series}}}|TAP100|===Device Pairing===
{{#switch:{{{series}}}|TAP100|TAP200= ===Device Pairing===
----
----
[[File:Networking_rutos_manual_administration_access_control_pairing_v2.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_access_control_pairing_v2.png|border|class=tlt-border]]
<td>Enable or disable device pairing.</td>
<td>Enable or disable device pairing.</td>
</tr>
</tr>
</table>|}}
</table>|#default=}}
{{#ifeq:{{{series}}}|TAP100||
{{#switch:{{{series}}}|TAP100|TAP200=|#default=
==Recipients==
==Recipients==
<li>Enter a custom name for the phone group into the 'Name' field.</li>
<li>Enter a custom name for the phone group into the 'Name' field.</li>
<li>Click the 'Add' button.</li>
<li>Click the 'Add' button.</li>
</ol>
</ol>
[[File:Networking_rutos_manual_administration_recipients_phone_groups_add_button_edit_button.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_recipients_phone_groups_add_button.png|border|class=tlt-border]]
After clicking 'Edit' you should be redirected to that phone group's configuration page where you can start adding phone numbers to it.
After clicking 'Edit' you should be redirected to that phone group's configuration page where you can start adding phone numbers to it.
<li>Enter a custom name for the email account into the 'Name' field.</li>
<li>Enter a custom name for the email account into the 'Name' field.</li>
<li>Click the 'Add' button.</li>
<li>Click the 'Add' button.</li>
</ol>
</ol>
[[File:Networking_rutos_manual_administration_recipients_email_accounts_groups_add_button_edit_button.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_recipients_email_accounts_groups_add_button.png|border|class=tlt-border]]
After clicking 'Edit' you should be redirected to that email account's settings page where you can start configuring the account.
After clicking 'Edit' you should be redirected to that email account's settings page where you can start configuring the account.
</table>}}}}
</table>}}}}
{{#ifeq:{{{series}}}|TAP100||
{{#switch:{{{series}}}|TAP100|TAP200=|#default=
==Certificates==
==Certificates==
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_private_key_decryption_password_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_private_key_decryption_password_v1.png|border|class=tlt-border]]
===Certificate Signing===
====Certificate Signing====
----
----
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
The <b>Certificate Import</b> section provides the possibility to import certificates and files generated on another machine. To upload such a file simply click 'Browse' and locate the file on your computer, it should then start uploading automatically.
The <b>Certificate Import</b> section provides the possibility to import certificates and files generated on another machine. To upload such a file simply click 'Browse' and locate the file on your computer, it should then start uploading automatically.
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_import_v2.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_import_v3.png|border|class=tlt-border]]
====Certificates, Keys & Requests====
====Certificates, Keys & Requests====
----
----
The <b>Certificates</b>, <b>Keys</b> and </b>Requests</b> section display files generated on or imported to the device along with the most important information related to them.
The <b>Certificates</b>, <b>Keys</b> and <b>Requests</b> section display files generated on or imported to the device along with the most important information related to them.
By default, the lists are empty. A set certificates generated using 'Simple' file type would look something like this:
By default, the lists are empty. A set certificates generated using 'Simple' file type would look something like this:
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_list_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_list_v2.png|border|class=tlt-border]]
The 'Export' buttons are used to download the files from the device onto your local machine. The 'X' buttons located to the right of each entry are used to delete related files.
The 'Export' buttons are used to download the files from the device onto your local machine. The 'X' buttons located to the right of each entry are used to delete related files.
{{Template: Networking_rutos_manual_profiles | series = {{{series}}} | name = {{{name}}}}}
{{Template: Networking_rutos_manual_profiles | series = {{{series}}} | name = {{{name}}}}}
{{#ifeq: {{{serires}}} | TAP100 ||
{{#switch:{{{series}}}|TAP100|TAP200=|#default=
==Storage Memory Expansion==
==Storage Memory Expansion==