Changes

Template:Networking rutos manual administration (view source)

Revision as of 13:54, 9 March 2023

1,352 bytes added , 13:54, 9 March 2023

no edit summary

Line 16: Line 16:

The General section is used to set up some of device managerial parameters, such as changing device name. For more information on the General section, refer to figure and table below.

{{#switch:{{{series}}}

+

| TAP100=[[File:Networking_rutos_manual_administration_general_tap100_v1.png|border|class=tlt-border]]

| TCR1=[[File:Networking_rutos_manual_administration_general_tcr_v2.png|border|class=tlt-border]]

Line 25: Line 26:

<th>Value</th>

<th>Description</th>

−

</tr>

+

</tr>{{#ifeq:{{{series}}}|TAP100||

<tr>

<th>General Settings</th>

Line 40: Line 41:

<td>Basic {{!}} Advanced; default: Basic</td>

<td>Mode determines what options and configurations are shown. In Basic mode only the essential configurations are shown. In Advanced mode there is greater freedom to configure and access more options.</td>

−

</tr>

+

</tr>}}

<tr>

<th>Device name and hostname</th>

Line 83: Line 84:

</table>

−

* Different language packages can be downloaded separately from the Services → [[{{{name}}} Package Manager|Package Manager]] page.

+

{{#ifeq:{{{series}}}|TAP100||* Different language packages can be downloaded separately from the Services → [[{{{name}}} Package Manager|Package Manager]] page.}}

==Access Control==

===General===

----

−

The Access Control page is used to manage remote and local access to device.

+

The Access Control page is used to manage {{#ifeq:{{{series}}}|TAP100||remote and}} local access to device.

−

Important: turning on remote access leaves your device vulnerable to external attackers. Make sure you use a strong password.

+

{{#ifeq:{{{series}}}|TAP100||Important: turning on remote access leaves your device vulnerable to external attackers. Make sure you use a strong password.

−

+

}}

SSH

−

----

+

----{{#switch:{{{series}}}

−

[[File:Networking_rutos_manual_administration_access_control_general_ssh_v1.png|border|class=tlt-border]]

+

|TAP100 = [[File:Networking_rutos_manual_administration_access_control_general_ssh_tap100_v1.png|border|class=tlt-border]]

+

|#default = [[File:Networking_rutos_manual_administration_access_control_general_ssh_v1.png|border|class=tlt-border]]}}

Line 106: Line 108:

<td>off | on; default: on</td>

<td>Turns SSH access from the local network (LAN) on or off.</td>

−

</tr>

+

</tr>{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Remote SSH access</td>

<td>off | on; default: off</td>

<td>Turns SSH access from remote networks (WAN) on or off.</td>

−

</tr>

+

</tr>}}

<tr>

Line 125: Line 127:

WebUI

−

----

+

----{{#switch:{{{series}}}

−

[[File:Networking_rutos_manual_administration_access_control_general_webui_v1.png|border|class=tlt-border]]

+

|TAP100 = [[File:Networking_rutos_manual_administration_access_control_general_webui_tap100_v1.png|border|class=tlt-border]]

+

|#default = [[File:Networking_rutos_manual_administration_access_control_general_webui_v1.png|border|class=tlt-border]]}}

Line 148: Line 151:

<td>off | on; default: off</td>

<td>Redirects connection attempts from HTTP to HTTPS.</td>

−

</tr>

+

</tr>{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Enable remote HTTP access</td>

<td>off | on; default: off</td>

<td>Turns HTTP access from remote networks (WAN) to the device WebUI on or off.</td>

−

</tr>

+

</tr>}}

<tr>

<td>integer [0..65535]; default: 80</td>

<td>Selects which port to use for HTTP access.</td>

−

</tr>

+

</tr>{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Enable remote HTTPS access</td>

<td>off | on; default: off</td>

<td>Turns HTTPS access from remote networks (WAN) to the device WebUI on or off.</td>

−

</tr>

+

</tr>}}

<tr>

<td>integer [0..65535]; default: 443</td>

<td>Selects which port to use for HTTPS access.</td>

−

</tr>

+

</tr>{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Ignore private IPs on public interface</td>

<td>off | on; default: on</td>

<td>Prevent access from private (RFC1918) IPs on an interface if it has an public IP address.</td>

−

</tr>

+

</tr>}}{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Certificate files from device</td>

<td>off | on; default: on</td>

<td>Choose this option if you want to select certificate files from device. Certificate files can be generated in [[{{{name}}} Administration#Certificates|Certificates]] section.</td>

−

</tr>

+

</tr>}}{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Server certificate</td>

<td>.crt; default: uhttpd.crt</td>

<td>Server certificate file.</td>

−

</tr>

+

</tr>}}{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Server key</td>

<td>.key; default: uhttpd.key</td>

<td>Server key file.</td>

−

</tr>

+

</tr>}}

</table>

CLI

−

----

+

----{{#switch:{{{series}}}

−

[[File:Networking_rutos_manual_administration_access_control_general_cli.png|border|class=tlt-border]]

+

|TAP100 = [[File:Networking_rutos_manual_administration_access_control_general_cli_tap100.png|border|class=tlt-border]]

+

|#default = [[File:Networking_rutos_manual_administration_access_control_general_cli.png|border|class=tlt-border]]}}

Line 205: Line 209:

<td>off | on; default: on</td>

<td>Turns CLI access from the local network (LAN) on or off.</td>

−

</tr>

+

</tr>{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>Enable remote CLI</td>

<td>off | on; default: off</td>

<td>Turns CLI access from remote networks (WAN) on or off.</td>

−

</tr>

+

</tr>}}

<tr>

<td>Port range</td>

Line 222: Line 226:

</tr>

</table>

−

+

{{#ifeq:{{{series}}}|TAP100||

Telnet

----

Line 235: Line 239:

<tr>

<td>Enable Telnet access</td>

−

<td>off | on; default: on</td>

+

<td>off {{!}} on; default: on</td>

<td>Turns Telnet access from the local network (LAN) on or off.</td>

</tr>

<tr>

<td>Enable remote Telnet access</td>

−

<td>off | on; default: off</td>

+

<td>off {{!}} on; default: off</td>

<td>Turns Telnet access from remote networks (WAN) on or off.</td>

</tr>

Line 268: Line 272:

<tr>

<td>Enable</td>

−

<td>off | on; default: on</td>

+

<td>off {{!}} on; default: on</td>

<td>Turns the PAM auth on or off.</td>

</tr>

<tr>

<td>Module</td>

−

<td>TACACS+ | Radius | Local; default: Local</td>

+

<td>TACACS+ {{!}} Radius {{!}} Local; default: Local</td>

<td>Specifies the PAM module that implements the service.</td>

</tr>

<tr>

−

<td>Required | Requisite | Sufficient | Optional; default: Required </td>

+

<td>Required {{!}} Requisite {{!}} Sufficient {{!}} Optional; default: Required </td>

<td>Determines the continuation or failure behavior for the module</td>

</tr>

<tr>

<td>TACACS+/Radius: Server</td>

−

<td>ip4 | ip6; default: none</td>

+

<td>ip4 {{!}} ip6; default: none</td>

<td>The IP address of the RADIUS server</td>

</tr>

Line 301: Line 305:

<td>Timeout in seconds waiting for RADIUS server reply.</td>

</tr>

−

</table>

+

</table>}}

===Security===

Line 330: Line 334:

</table>

−

==Recipients==

+

{{#ifeq:{{{series}}}|TAP100||==Recipients==

The Recipients section is used to configure{{#ifeq:{{{mobile}}}|0| | phone groups and }}email

Line 371: Line 375:

</tr>

</table>

−

}}

+

===Email Accounts===

Line 437: Line 441:

<td> Sends an email based on the current configuration. This is used to test whether the configuration works as intended.</td>

</tr>

−

</table>

+

</table>}}}}

−

==Certificates==

+

{{#ifeq:{{{series}}}|TAP100||==Certificates==

The Certificates page is used for convenient TLS certificate and key generation and management. Generated files can be exported and used on other machines or locally on this device with functions that use TLS/SSL, such as {{#ifeq:{{{mqtt}}}|0||[[{{{name}}} MQTT|MQTT]], }}[[{{{name}}} VPN#OpenVPN|OpenVPN]], [[{{{name}}} VPN#IPsec|IPsec]] and others.

Line 521: Line 525:

<tr>

<td>Delete Signing Request</td>

−

<td>off | on; default: off</td>

+

<td>off {{!}} on; default: off</td>

<td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>

</tr>

Line 549: Line 553:

<tr>

<td>Type of Certificate to Sign</td>

−

<td>Certificate Authority | Client Certificate | Server Certificate; default: Certificate Authority</td>

+

<td>Certificate Authority {{!}} Client Certificate {{!}} Server Certificate; default: Certificate Authority</td>

<td>Specifies what type of file will be signed.</td>

</tr>

Line 574: Line 578:

<tr>

<td>Delete Signing Request</td>

−

<td>off | on; default: off</td>

+

<td>off {{!}} on; default: off</td>

<td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>

</tr>

Line 608: Line 612:

The Root CA section is used to add a root CA certificate file to the device. There is a default file already preloaded on the device which will be overwritten by any uploaded file. The certificates must be in .pem format, maximum file size is 300 KB. These certificates are only needed if you want to use HTTPS for your services and the default file should be sufficient in most cases.

−

[[File:Networking_rutos_manual_administration_access_control_root_ca_v1.png|border|class=tlt-border]]

+

[[File:Networking_rutos_manual_administration_access_control_root_ca_v1.png|border|class=tlt-border]]}}

Line 675: Line 679:

----

The Troubleshoot section is used to download various files that contain information used for troubleshooting the device. Refer to the figure and table below for information on the Troubleshoot page.

−

+

{{#switch:{{{series}}}

−

[[File:Networking_rutos_manual_administration_troubleshoot_troubleshoot.png|border|class=tlt-border]]

+

|TAP100 = [[File:Networking_rutos_manual_administration_troubleshoot_troubleshoot_tap100.png|border|class=tlt-border]]

+

|#default = [[File:Networking_rutos_manual_administration_troubleshoot_troubleshoot.png|border|class=tlt-border]]}}

Line 698: Line 703:

<td>- (interactive button)</td>

<td>Downloads the device Troubleshoot file. It contains the device configuration information, logs and some other files. When requesting support, it is recommended to always provide the device Troubleshoot file to Teltonika engineers for analysis.</td>

−

</tr>

+

</tr>{{#ifeq:{{{series}}}|TAP100||

<tr>

<td>TCP dump file{{#ifeq:{{{series}}}|RUTX||*}}</td>

Line 708: Line 713:

<td>off | on; default: off</td>

<td>Turns TCP dump packets capture on or off.</td>

−

</tr>

+

</tr>}}

</table>

−

{{#switch:{{{series}}}| RUT2M|RUT9M|TCR1=

+

{{#switch:{{{series}}}|TAP100|RUT2M|RUT9M|TCR1=

| #default={{#ifeq:{{{series}}}|RUTX||* As of {{{series}}}_R_00.07.00, TCPdump is not part of core functionality anymore. To see these options, the TCPdump package must be downloaded from [[{{{name}}}_Package_Manager|Package Manager]].}}

}}

−

====TCP dump====

+

{{#ifeq:{{{series}}}|TAP100||====TCP dump====

----

TCP dump is {{#ifeq:{{{series}}}|RUTX||an optional downloadable functionality*}} used to capture packets moving through network interfaces. By default, the device does not store TCP dump information. You must enable TCP dump and save the changes before you can download the file.

Line 732: Line 737:

<tr>

<td>Enable TCP dump</td>

−

<td>off | on; default: off</td>

+

<td>off {{!}} on; default: off</td>

<td>Turns TCP dump packet capture on or off.</td>

</tr>

Line 742: Line 747:

<tr>

<td>Select protocol filter</td>

−

<td>All | ICMP | TCP | UDP | ARP; default: All</td>

+

<td>All {{!}} ICMP {{!}} TCP {{!}} UDP {{!}} ARP; default: All</td>

<td>Only captures packets that match the specified protocol.</td>

</tr>

<tr>

<td>Select packets direction</td>

−

<td>Incoming/Outgoing | Incoming | Outgoing; default: Incoming/Outgoing</td>

+

<td>Incoming/Outgoing {{!}} Incoming {{!}} Outgoing; default: Incoming/Outgoing</td>

<td>Only captures packets coming from the specified direction.</td>

</tr>

<tr>

−

<td>ip | host; default: none</td>

+

<td>ip {{!}} host; default: none</td>

<td>Only captures packets related to the specified host.</td>

</tr>

Line 765: Line 770:

<td>Specifies where the TCP dump file will be stored.</td>

</tr>

−

</table>

+

</table>}}

===Diagnostics===

Vainius.l

Administrators

7,494

edits

Namespaces

Variants

Views

More

Search

Changes

Template:Networking rutos manual administration (view source)

Revision as of 13:54, 9 March 2023

Navigation menu

Personal tools

NAVIGATION

Tools

Categories