Teltonika Networks Wiki

Changes

Template:Networking rutos manual administration (view source)

Revision as of 09:45, 10 May 2024

1,812 bytes added ,  10 May
no edit summary
Line 277: Line 277:  
         <td>off {{!}} on; default: <b>on</b></td>
 
         <td>off {{!}} on; default: <b>on</b></td>
 
         <td>Turns SSH access from the local network (LAN) on or off.</td>
 
         <td>Turns SSH access from the local network (LAN) on or off.</td>
−
     </tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default
+
     </tr>{{#switch:{{{series}}}|TAP100|TAP200=|#default=
 
     <tr>
 
     <tr>
 
         <td>Remote SSH access</td>
 
         <td>Remote SSH access</td>
Line 451: Line 451:  
     <tr>
 
     <tr>
 
         <td>Type</td>
 
         <td>Type</td>
−
         <td>Required {{!}} Requisite {{!}} Sufficient {{!}} Optional; default: <b>Required </b></td>
+
         <td>Required {{!}} Requisite {{!}} Sufficient {{!}} Optional; default: <b>Optional </b></td>
 
         <td>Determines the continuation or failure behavior for the module</td>
 
         <td>Determines the continuation or failure behavior for the module</td>
 +
    </tr>
 +
    <tr>
 +
        <td><span style="color:red">Radius</span>: Enable for all users</td>
 +
        <td>off {{!}} on; default: <b>off</b></td>
 +
        <td>Turn on PAM authentication for all users. It will allow login with users that are not created on the device.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 482: Line 487:  
<b>IP Block Settings</b>  
 
<b>IP Block Settings</b>  
 
----
 
----
−
[[File:Networking_rutos_manual_administration_access_control_security_v3.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administration_access_control_security_v4.png|border|class=tlt-border]]
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
Line 493: Line 498:  
         <td>off {{!}} on; default: <b>on</b></td>
 
         <td>off {{!}} on; default: <b>on</b></td>
 
         <td>Enable or disable blocking IP's if they have reached the set amount of failed times.</td>
 
         <td>Enable or disable blocking IP's if they have reached the set amount of failed times.</td>
 +
    </tr>
 +
    <tr>
 +
        <td>Type</td>
 +
        <td>Timed blocking {{!}} Permanent blocking; default: <b>Timed blocking</b></td>
 +
        <td>You can choose an option of a blocking type.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 503: Line 513:  
         <td>off {{!}} on; default: <b>off</b></td>
 
         <td>off {{!}} on; default: <b>off</b></td>
 
         <td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>
 
         <td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>
−
    </tr>
  −
    <tr>
  −
        <td>Enable MAC blockig</td>
  −
        <td>off {{!}} on; default: <b>off</b></td>
  −
        <td>If enabled, MAC adresses wil be blocked.</td>
   
     </tr>
 
     </tr>
 
</table>
 
</table>
Line 513: Line 518:  
<b>Login Attempts</b>
 
<b>Login Attempts</b>
 
----
 
----
−
[[File:Networking_rutos_manual_administration_access_control_security_login.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administration_access_control_security_login_v2.png|border|class=tlt-border]]
 
<table class="nd-mantable">
 
<table class="nd-mantable">
 
     <tr>
 
     <tr>
Line 521: Line 526:  
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
         <td>Source address</td>
+
         <td>Source</td>
 
         <td>IP address</td>
 
         <td>IP address</td>
 
         <td>Shows the IP address from which the connection failed.</td>
 
         <td>Shows the IP address from which the connection failed.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
        <td>Device port</td>
+
         <td>Destination</td>
−
        <td>Port number</td>
  −
        <td>Shows the port number from which the connection failed.</td>
  −
    </tr>
  −
    <tr>
  −
         <td>Destination address</td>
   
         <td>IP address</td>
 
         <td>IP address</td>
 
         <td>Shows yours device IP adress</td>
 
         <td>Shows yours device IP adress</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
         <td>Protocol</td>
+
         <td>Port (protocol)</td>
−
         <td>Connection protocol</td>
+
         <td>Port number</td>
−
         <td>Displays the connection protocol used for connection.</td>
+
         <td>Shows the port number from which the connection failed.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
         <td>Failed atempts</td>
+
         <td>Status</td>
−
         <td>Number</td>
+
         <td>Attempt count {{!}} Blocked</td>
−
         <td>Shows the number of failed attempts to connect to device.</td>
+
         <td>Shows the number of failed attempts to connect to device. Indicates whether the source address is blocked or not.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
        <td>Status</td>
  −
        <td>- {{!}} Blocked</td>
  −
        <td>Indicates whether the source address is blocked or not.</td>
  −
    </tr>
  −
        <tr>
   
         <td>Reset</td>
 
         <td>Reset</td>
 
         <td>Check box</td>
 
         <td>Check box</td>
 
         <td>Allows you to select multiple IP addresses.</td>
 
         <td>Allows you to select multiple IP addresses.</td>
 
     </tr>
 
     </tr>
−
         <tr>
+
    <tr>
 +
         <td>Actions</td>
 +
        <td>-(interactive button)</td>
 +
        <td>Allows you to select multiple IP addresses.</td>
 +
    </tr>
 +
    <tr>
 
         <td>Unblock all</td>
 
         <td>Unblock all</td>
 
         <td>-(interactive button)</td>
 
         <td>-(interactive button)</td>
−
         <td>Unblocks all source adresses from the list.</td>
+
         <td>Deletes instance.</td>
 
     </tr>
 
     </tr>
−
        <tr>
+
    <tr>
 
         <td>Unblock selected</td>
 
         <td>Unblock selected</td>
 
         <td>-(interactive button)</td>
 
         <td>-(interactive button)</td>
Line 604: Line 604:  
After clicking 'Edit' you should be redirected to that phone group's configuration page where you can start adding phone numbers to it.
 
After clicking 'Edit' you should be redirected to that phone group's configuration page where you can start adding phone numbers to it.
   −
[[File:Networking_rutos_manual_administration_recipients_phone_groups_modify_phone_group.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administration_recipients_phone_groups_modify_phone_group_v2.png|border|class=tlt-border]]
    
<table class="nd-mantable">
 
<table class="nd-mantable">
Line 624: Line 624:  
</table>
 
</table>
   −
===Email Accounts===
+
===Email Users===
 
----
 
----
 
When email related services{{#ifeq:{{{events_reporting}}}|0|&nbsp;|&nbsp;(such as [[{{{name}}} Events Reporting|Events Reporting]])&nbsp;}}are used, the device logs in to the specified email account and reads the inbox (e.g., Email to SMS) or sends out a message (e.g., SMS to Email) depending on the configured service. In this context, an <b>Email Account</b> is an configuration instance that contains the necessary data required in order to log into an email account.
 
When email related services{{#ifeq:{{{events_reporting}}}|0|&nbsp;|&nbsp;(such as [[{{{name}}} Events Reporting|Events Reporting]])&nbsp;}}are used, the device logs in to the specified email account and reads the inbox (e.g., Email to SMS) or sends out a message (e.g., SMS to Email) depending on the configured service. In this context, an <b>Email Account</b> is an configuration instance that contains the necessary data required in order to log into an email account.
Line 635: Line 635:  
</ol>
 
</ol>
   −
[[File:Networking_rutos_manual_administration_recipients_email_accounts_groups_add_button.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administration_recipients_email_accounts_groups_add_button_v1.png|border|class=tlt-border]]
   −
After clicking 'Edit' you should be redirected to that email account's settings page where you can start configuring the account.
+
After clicking 'Add' you should be redirected to that email account's settings page where you can start configuring the account.
   −
[[File:Networking_rutos_manual_administration_recipients_email_accounts_modify_email_account_v2.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administration_recipients_email_accounts_modify_email_account_v3.png|border|class=tlt-border]]
    
<table class="nd-mantable">
 
<table class="nd-mantable">
Line 649: Line 649:  
     <tr>
 
     <tr>
 
       <td>Secure connection</td>
 
       <td>Secure connection</td>
−
       <td>off <nowiki>|</nowiki> on; default: <b>off</b></td>
+
       <td>off {{!}} on; default: <b>off</b></td>
 
       <td>Use if your SMTP server supports TLS or SSL encryption.</td>
 
       <td>Use if your SMTP server supports TLS or SSL encryption.</td>
 
     </tr>
 
     </tr>
Line 664: Line 664:  
     <tr>
 
     <tr>
 
       <td>Credentials</td>
 
       <td>Credentials</td>
−
       <td>off {{!}} on; default: <b>off</b></td>
+
       <td>off {{!}} <span style="color: blue;">on</span>; default: <b>off</b></td>
 
       <td>This options allows you to set username and password of email account.</td>
 
       <td>This options allows you to set username and password of email account.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
       <td>Username</td>
+
       <td><span style="color: blue;">Username</span></td>
 
       <td>string; default: <b>none</b></td>
 
       <td>string; default: <b>none</b></td>
−
       <td>Username used to authenticate to the email service.</td>
+
       <td>Username for authentication on SMTP (Simple Mail Transfer Protocol) server. All characters are allowed except `' and space.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
−
       <td>Password</td>
+
       <td><span style="color: blue;">Password</span></td>
 
       <td>string; default: <b>none</b></td>
 
       <td>string; default: <b>none</b></td>
−
       <td>Password used to authenticate to the email service..</td>
+
       <td>Password for authentication on SMTP (Simple Mail Transfer Protocol) server. All characters are allowed except `' and space.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
       <td>Sender's email address</td>
 
       <td>Sender's email address</td>
 
       <td>string; default: <b>none</b></td>
 
       <td>string; default: <b>none</b></td>
−
       <td>Configured SMTP server user's email address.</td>
+
       <td>An address that will be used to send your email from. Allowed characters (a-zA-Z0-9._%+-@).</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Do not verify authenticity</td>
 +
      <td><span style="color: red;">off</span> {{!}} on; default: <b>off</b></td>
 +
      <td>When enabled peer's certificate authenticity will not be verified.</td>
 +
    </tr>
 +
    <tr>
 +
      <td><span style="color: red;">Server's CA file</span></td>
 +
      <td> - (interactive button)</td>
 +
      <td>Upload server's CA file.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 698: Line 708:  
The <b>Certificate Generation</b> tab provides the possibility to generate TLS certificates required for secure authentication and communication encryption used by some of the devices services.
 
The <b>Certificate Generation</b> tab provides the possibility to generate TLS certificates required for secure authentication and communication encryption used by some of the devices services.
   −
There are five distinct generation methods (denoted by the selected 'File Type').  
+
There are six distinct generation methods (denoted by the selected 'File Type').  
    
<ol>
 
<ol>
Line 713: Line 723:  
     <li><b>Client</b> - generates a client certificate and key. A client certificate validates a client's identity to the server that it's connecting to, while a key is responsible for encryption.</li>
 
     <li><b>Client</b> - generates a client certificate and key. A client certificate validates a client's identity to the server that it's connecting to, while a key is responsible for encryption.</li>
 
     <li><b>DH Parameters</b> - generates a Diffie-Hellman (DH) parameters file. DH parameters are used in symmetric encryption to protect and define how OpenSSL key exchange is performed.</li>
 
     <li><b>DH Parameters</b> - generates a Diffie-Hellman (DH) parameters file. DH parameters are used in symmetric encryption to protect and define how OpenSSL key exchange is performed.</li>
 +
    <li><b>Let's encrypt</b> - generates SSL certificate.</li>
 
</ol>
 
</ol>
    
====Generation Parameters====
 
====Generation Parameters====
 
----
 
----
−
Generating each type of file (excluding 'Simple') requires setting some parameters. This section provides an overview for parameters used in TLS certificate generation.
+
Generating each type of file requires setting some parameters. This section provides an overview for parameters used in Simple and TLS certificate generation.
 +
----
 +
<b>Simple file parameters</b>
 +
 
 +
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_simple_parameters.png|border|class=tlt-border]]
 +
 
 +
<table class="nd-mantable">
 +
    <tr>
 +
        <th>Field</th>
 +
      <th>Value</th>
 +
      <th>Description</th>
 +
    </tr>
 +
    <tr>
 +
      <td>Hosts</td>
 +
      <td>string; default: <b>none</b></td>
 +
      <td>Appends hostnames to certificates.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>IP addresses</td>
 +
      <td>IPv4 address; default: <b>none</b></td>
 +
      <td>Appends IPv4 addresses to certificates.</td>
 +
    </tr>
 +
</table>
 
----
 
----
−
<b>Core parameters</b> or simply parameters that apply to each file type are the size and common name of the generated file(s).
+
<b>TLS parameters</b> or simply parameters that apply to each (CA, Server, Client, DH) file type are the size and common name of the generated file(s).
    
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_core_parameters_v1.png|border|class=tlt-border]]
 
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_core_parameters_v1.png|border|class=tlt-border]]
Line 785: Line 818:  
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
 
The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.
   −
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_certificate_signing_v2.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_certificate_signing_v3.png|border|class=tlt-border]]
    
<table class="nd-mantable">
 
<table class="nd-mantable">
Line 827: Line 860:  
       <td>off {{!}} on; default: <b>off</b></td>
 
       <td>off {{!}} on; default: <b>off</b></td>
 
       <td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>
 
       <td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>Hosts</td>
 +
      <td>string; default: <b>none</b></td>
 +
      <td>Appends hostnames to certificates.</td>
 +
    </tr>
 +
    <tr>
 +
      <td>IP addresses</td>
 +
      <td>IPv4 address; default: <b>none</b></td>
 +
      <td>Appends IPv4 addresses to certificates.</td>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 843: Line 886:  
The <b>Certificate Import</b> section provides the possibility to import certificates and files generated on another machine. To upload such a file simply click 'Browse' and locate the file on your computer, it should then start uploading automatically.
 
The <b>Certificate Import</b> section provides the possibility to import certificates and files generated on another machine. To upload such a file simply click 'Browse' and locate the file on your computer, it should then start uploading automatically.
   −
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_import_v2.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_import_v3.png|border|class=tlt-border]]
    
====Certificates, Keys & Requests====
 
====Certificates, Keys & Requests====
Line 851: Line 894:  
By default, the lists are empty. A set certificates generated using 'Simple' file type would look something like this:
 
By default, the lists are empty. A set certificates generated using 'Simple' file type would look something like this:
   −
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_list_v1.png|border|class=tlt-border]]
+
[[File:Networking_rutos_manual_administartion_certificates_certificates_manager_certificate_list_v2.png|border|class=tlt-border]]
    
The 'Export' buttons are used to download the files from the device onto your local machine. The 'X' buttons located to the right of each entry are used to delete related files.
 
The 'Export' buttons are used to download the files from the device onto your local machine. The 'X' buttons located to the right of each entry are used to delete related files.
Retrieved from "https://wiki.teltonika-networks.com/view/Special:MobileDiff/117210...125290"