Template:Networking rutos manual administration: Difference between revisions

The <b>General</b> section is used to set up some of device managerial parameters, such as changing device name. For more information on the General section, refer to figure and table below.

{{#switch:{{{series}}}

  | TCR1=[[File:Networking_rutos_manual_administration_general_tcr_v2.png|border|class=tlt-border]]

  | TRB1|TRB2|TRB5=[[File:Networking_rutos_manual_administration_general_trb_v2.png|border|class=tlt-border]]

       <th>Value</th>

       <th>Description</th>

     <tr>

       <th>General Settings</th>

       <td>Basic {{!}} Advanced; default: <b>Basic</b></td>

       <td>Mode determines what options and configurations are shown. In Basic mode only the essential configurations are shown. In Advanced mode there is greater freedom to configure and access more options.</td>

     <tr>

       <th>Device name and hostname</th>

</table>

==Access Control==

===General===

----

<b>SSH</b>

<table class="nd-mantable">

         <td>off | on; default: <b>on</b></td>

         <td>Turns SSH access from the local network (LAN) on or off.</td>

     <tr>

         <td>Remote SSH access</td>

         <td>off | on; default: <b>off</b></td>

         <td>Turns SSH access from remote networks (WAN) on or off.</td>

     <tr>

         <td>Port</td>

<br>

<b>WebUI</b>

<table class="nd-mantable">

         <td>off | on; default: <b>off</b></td>

         <td>Redirects connection attempts from HTTP to HTTPS.</td>

     <tr>

         <td>Enable remote HTTP access</td>

         <td>off | on; default: <b>off</b></td>

         <td>Turns HTTP access from remote networks (WAN) to the device WebUI on or off.</td>

     <tr>

         <td>Port</td>

         <td>integer [0..65535]; default: <b>80</b></td>

         <td>Selects which port to use for HTTP access.</td>

     <tr>

         <td>Enable remote HTTPS access</td>

         <td>off | on; default: <b>off</b></td>

         <td>Turns HTTPS access from remote networks (WAN) to the device WebUI on or off.</td>

     <tr>

         <td>Port</td>

         <td>integer [0..65535]; default: <b>443</b></td>

         <td>Selects which port to use for HTTPS access.</td>

     <tr>

         <td>Ignore private IPs on public interface</td>

         <td>off | on; default: <b>on</b></td>

         <td>Prevent access from private (RFC1918) IPs on an interface if it has an public IP address.</td>

     <tr>

         <td>Certificate files from device</td>

         <td>off | on; default: <b>on</b></td>

         <td>Choose this option if you want to select certificate files from device. Certificate files can be generated in [[{{{name}}} Administration#Certificates|Certificates]] section.</td>

     <tr>

         <td>Server certificate</td>

         <td>.crt; default: <b>uhttpd.crt</b></td>

         <td>Server certificate file.</td>

     <tr>

         <td>Server key</td>

         <td>.key; default: <b>uhttpd.key</b></td>

         <td>Server key file.</td>

</table>

<br>

<b>CLI</b>

<table class="nd-mantable">

         <td>off | on; default: <b>on</b></td>

         <td>Turns CLI access from the local network (LAN) on or off.</td>

     <tr>

         <td>Enable remote CLI</td>

         <td>off | on; default: <b>off</b></td>

         <td>Turns CLI access from remote networks (WAN) on or off.</td>

     <tr>

         <td>Port range</td>

     </tr>

</table>

<b>Telnet</b>

----

     <tr>

         <td>Enable Telnet access</td>

         <td>Turns Telnet access from the local network (LAN) on or off.</td>

     </tr>

     <tr>

         <td>Enable remote Telnet access</td>

         <td>Turns Telnet access from remote networks (WAN) on or off.</td>

     </tr>

     <tr>

         <td>Enable</td>

         <td>Turns the PAM auth on or off.</td>

     </tr>

     <tr>

         <td>Module</td>

         <td>Specifies the PAM module that implements the service.</td>

     </tr>

     <tr>

         <td>Type</td>

         <td>Determines the continuation or failure behavior for the module</td>

     </tr>

     <tr>

         <td><span style="color:blue">TACACS+</span>/<span style="color:red">Radius</span>: Server</td>

         <td>The IP address of the RADIUS server</td>

     </tr>

         <td>Timeout in seconds waiting for RADIUS server reply.</td>

     </tr>

===Security===

</table>

The <b>Recipients</b> section is used to configure{{#ifeq:{{{mobile}}}|0|&nbsp;|&nbsp;phone groups and&nbsp;}}email  

     </tr>

</table>

===Email Accounts===

       <td> Sends an email based on the current configuration. This is used to test whether the configuration works as intended.</td>

     </tr>

The <b>Certificates</b> page is used for convenient TLS certificate and key generation and management. Generated files can be exported and used on other machines or locally on this device with functions that use TLS/SSL, such as {{#ifeq:{{{mqtt}}}|0||[[{{{name}}} MQTT|MQTT]],&nbsp;}}[[{{{name}}} VPN#OpenVPN|OpenVPN]], [[{{{name}}} VPN#IPsec|IPsec]] and others.

     <tr>

       <td>Delete Signing Request</td>

       <td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>

     </tr>

     <tr>

       <td>Type of Certificate to Sign</td>

       <td>Specifies what type of file will be signed.</td>

     </tr>

     <tr>

       <td>Delete Signing Request</td>

       <td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>

     </tr>

The <b>Root CA</b> section is used to add a root CA certificate file to the device. There is a default file already preloaded on the device which will be overwritten by any uploaded file. The certificates must be in .pem format, maximum file size is 300 KB. These certificates are only needed if you want to use HTTPS for your services and the default file should be sufficient in most cases.

----

The <b>Troubleshoot</b> section is used to download various files that contain information used for troubleshooting the device. Refer to the figure and table below for information on the Troubleshoot page.

<table class="nd-mantable">

         <td>- (interactive button)</td>

         <td>Downloads the device Troubleshoot file. It contains the device configuration information, logs and some other files. When requesting support, it is recommended to always provide the device Troubleshoot file to Teltonika engineers for analysis.</td>

     <tr>

         <td>TCP dump file{{#ifeq:{{{series}}}|RUTX||<span class="asterisk">*</span>}}</td>

         <td>off | on; default: <b>off</b></td>

         <td>Turns TCP dump packets capture on or off.</td>

</table>

| #default={{#ifeq:{{{series}}}|RUTX||<font size="-1"><span class="asterisk">*</span> As of {{{series}}}_R_00.07.00, TCPdump is not part of core functionality anymore. To see these options, the TCPdump package must be downloaded from [[{{{name}}}_Package_Manager|Package Manager]].</font>}}

}}

----

<b>TCP dump</b> is {{#ifeq:{{{series}}}|RUTX||an <i>optional</i> downloadable functionality<span class="asterisk">*</span>}} used to capture packets moving through network interfaces. By default, the device does not store TCP dump information. You must enable TCP dump and save the changes before you can download the file.  

     <tr>

         <td>Enable TCP dump</td>

         <td>Turns TCP dump packet capture on or off.</td>

     </tr>

     <tr>

         <td>Select protocol filter</td>

         <td>Only captures packets that match the specified protocol.</td>

     </tr>

     <tr>

         <td>Select packets direction</td>

         <td>Only captures packets coming from the specified direction.</td>

     </tr>

     <tr>

         <td>Host</td>

         <td>Only captures packets related to the specified host.</td>

     </tr>

         <td>Specifies where the TCP dump file will be stored.</td>

     </tr>

===Diagnostics===