Template:Networking rutos manual administration: Difference between revisions

<!--- {{{series}}}, {{{name}}} --->

  | series = {{{series}}}

  | name  = {{{name}}}

  }}

}}

==Summary==

The <b>General</b> section is used to set up some of device managerial parameters, such as changing device name. For more information on the General section, refer to figure and table below.

{{#switch:{{{series}}}

  | TCR1=[[File:Networking_rutos_manual_administration_general_tcr_v2.png|border|class=tlt-border]]

  | TRB1|TRB2|TRB5=[[File:Networking_rutos_manual_administration_general_trb_v2.png|border|class=tlt-border]]

       <th>Value</th>

       <th>Description</th>

     <tr>

       <th>General Settings</th>

</table>

==Date & Time==

       <td>Sync with browser</td>

       <td>-(interactive button)</td>

     </tr>

     <tr>

         <td>off {{!}} on; default: <b>off</b></td>

         <td>Enables periodic time synchronization for the system using the GPS module which does not require an Internet connection.</td>

</table>

===NTP===

This section is used to specify which time servers the device will use for time synchronization. To add more time servers to the list, click the 'Add' button.

<table class="nd-mantable">

     <tr>

</table>

----

The device can also act as an <b>NTP Server</b>, providing clock synchronization to other devices in the network. From this section you can turn this feature on or off:

[[File:Networking_rutos_ntp_ntp_server.png|border|class=tlt-border]]}}

----

The <b>NTPD</b> program is an operating system daemon that synchronizes the system clock to remote NTP time servers or local reference clocks. NTPD includes the ability to use this to keep your clock in sync and will run more accurately than a clock on a device not running NTPD. NTPD will also use several servers to improve accuracy. It is a complete implementation of NTP version 4 defined by RFC-5905, but also retains compatible with version 3 defined by RFC-1305 and versions 1 and 2, defined by RFC-1059 and RFC-1119, respectively.

<table class="nd-mantable">

==User Settings==

==Access Control==

===General===

----

<br><br>}}

<b>SSH</b>

----{{#switch:{{{series}}}

|#default = [[File:Networking_rutos_manual_administration_access_control_general_ssh_v1.png|border|class=tlt-border]]}}

     <tr>

         <td>Enable SSH access</td>

         <td>Turns SSH access from the local network (LAN) on or off.</td>

     <tr>

         <td>Remote SSH access</td>

         <td>Turns SSH access from remote networks (WAN) on or off.</td>

     </tr>}}

     <tr>

         <td>Enable key-based authentication</td>

         <td>Use public keys for authentication.</td>

     </tr>

<b>WebUI</b>

----{{#switch:{{{series}}}

|#default = [[File:Networking_rutos_manual_administration_access_control_general_webui_v1.png|border|class=tlt-border]]}}

     <tr>

         <td>Enable HTTP access</td>

         <td>Turns HTTP access from the local network (LAN) to the device WebUI on or off.</td>

     </tr>

     <tr>

         <td>Enable HTTPS access</td>

         <td>Turns HTTPS access from the local network (LAN) to the device WebUI on or off.</td>

     </tr>

     <tr>

         <td>Redirect to HTTPS</td>

         <td>Redirects connection attempts from HTTP to HTTPS.</td>

     <tr>

         <td>Enable remote HTTP access</td>

         <td>Turns HTTP access from remote networks (WAN) to the device WebUI on or off.</td>

     </tr>}}

         <td>integer [0..65535]; default: <b>80</b></td>

         <td>Selects which port to use for HTTP access.</td>

     <tr>

         <td>Enable remote HTTPS access</td>

         <td>Turns HTTPS access from remote networks (WAN) to the device WebUI on or off.</td>

     </tr>}}

         <td>integer [0..65535]; default: <b>443</b></td>

         <td>Selects which port to use for HTTPS access.</td>

     <tr>

         <td>Ignore private IPs on public interface</td>

         <td>Prevent access from private (RFC1918) IPs on an interface if it has an public IP address.</td>

     <tr>

         <td>Certificate files from device</td>

         <td>Choose this option if you want to select certificate files from device. Certificate files can be generated in [[{{{name}}} Administration#Certificates|Certificates]] section.</td>

     <tr>

         <td>Server certificate</td>

         <td>.crt; default: <b>uhttpd.crt</b></td>

         <td>Server certificate file.</td>

     <tr>

         <td>Server key</td>

<b>CLI</b>

----{{#switch:{{{series}}}

|#default = [[File:Networking_rutos_manual_administration_access_control_general_cli.png|border|class=tlt-border]]}}

     <tr>

         <td>Enable CLI</td>

         <td>Turns CLI access from the local network (LAN) on or off.</td>

     <tr>

         <td>Enable remote CLI</td>

         <td>Turns CLI access from remote networks (WAN) on or off.</td>

     </tr>}}

     </tr>

</table>

<b>Telnet</b>

----

===PAM===

----

====Modify PAM Auth====

     </tr>

     <tr>

         <td>RADIUS server authentication port</td>

     </tr>

<b>IP Block Settings</b>  

----

<table class="nd-mantable">

     <tr>

     <tr>

         <td>Enable</td>

         <td>Enable or disable blocking IP's if they have reached the set amount of failed times.</td>

     </tr>

     <tr>

     <tr>

         <td>Clean after reboot</td>

         <td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>

     </tr>

<b>Login Attempts</b>

----

<table class="nd-mantable">

     <tr>

     </tr>

     <tr>

         <td>IP address</td>

         <td>Shows the IP address from which the connection failed.</td>

     </tr>

     <tr>

         <td>IP address</td>

         <td>Shows yours device IP adress</td>

     </tr>

     <tr>

     </tr>

     <tr>

     </tr>

     <tr>

         <td>Reset</td>

         <td>Check box</td>

         <td>Allows you to select multiple IP addresses.</td>

     </tr>

         <td>Unblock all</td>

         <td>-(interactive button)</td>

     </tr>

         <td>Unblock selected</td>

         <td>-(interactive button)</td>

</table>

----

[[File:Networking_rutos_manual_administration_access_control_pairing_v2.png|border|class=tlt-border]]

         <td>Enable or disable device pairing.</td>

     </tr>

==Recipients==

     <li>Enter a custom name for the phone group into the 'Name' field.</li>

     <li>Click the 'Add' button.</li>

</ol>

After clicking 'Edit' you should be redirected to that phone group's configuration page where you can start adding phone numbers to it.

</table>

----

When email related services{{#ifeq:{{{events_reporting}}}|0|&nbsp;|&nbsp;(such as [[{{{name}}} Events Reporting|Events Reporting]])&nbsp;}}are used, the device logs in to the specified email account and reads the inbox (e.g., Email to SMS) or sends out a message (e.g., SMS to Email) depending on the configured service. In this context, an <b>Email Account</b> is an configuration instance that contains the necessary data required in order to log into an email account.

     <li>Enter a custom name for the email account into the 'Name' field.</li>

     <li>Click the 'Add' button.</li>

</ol>

<table class="nd-mantable">

     <tr>

       <td>Secure connection</td>

       <td>Use if your SMTP server supports TLS or SSL encryption.</td>

     </tr>

     <tr>

       <td>Credentials</td>

       <td>This options allows you to set username and password of email account.</td>

     </tr>

     <tr>

       <td>string; default: <b>none</b></td>

     </tr>

     <tr>

       <td>string; default: <b>none</b></td>

     </tr>

     <tr>

       <td>Sender's email address</td>

       <td>string; default: <b>none</b></td>

     </tr>

     <tr>

</table>}}}}

==Certificates==

====Generation Parameters====

----

----

[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_core_parameters_v1.png|border|class=tlt-border]]

[[File:Networking_rutos_manual_administartion_certificates_certificates_generation_private_key_decryption_password_v1.png|border|class=tlt-border]]

----

The <b>Certificate Signing</b> section is used to validate (sign) unsigned certificates.

<table class="nd-mantable">

       <td>off {{!}} on; default: <b>off</b></td>

       <td>Generation creates additional 'signing request' files (which appear under the [[#Certificate_Manager|Certificate Manager]] tab) that are later used to sign the generated certificates. When this option is set to 'on', the device deletes the signing request files after the signing process is complete.</td>

     </tr>

     <tr>

The <b>Certificate Import</b> section provides the possibility to import certificates and files generated on another machine. To upload such a file simply click 'Browse' and locate the file on your computer, it should then start uploading automatically.

====Certificates, Keys & Requests====

----

By default, the lists are empty. A set certificates generated using 'Simple' file type would look something like this:

The 'Export' buttons are used to download the files from the device onto your local machine. The 'X' buttons located to the right of each entry are used to delete related files.

[[File:Networking_rutos_manual_administration_access_control_root_ca_v1.png|border|class=tlt-border]]}}

==Profiles==

{{Template: Networking_rutos_manual_profiles | series = {{{series}}} | name = {{{name}}}}}

==Storage Memory Expansion==

     <li>If all is in order you should see a 'Formatting MSD...' message on the screen. This indicates that the MSD is being formatted and detached from the system. This procedure can take up to a couple of minutes and ends with a reboot of the device.<br>[[File:Networking_rutos_manual_storage_memory_expansion_disable_3.png]]</li>

     <li>Your device's flash memory will be restored to normal once the reboot has finished. In order to check, log in to the WebUI and look to the 'System' widget in the 'Overview' page. Hover your mouse cursor over the 'FLASH' memory indicator; you should see your device's flash memory return to its regular size.<br>[[File:Networking_rutos_manual_storage_memory_expansion_disable_4.png|border|class=tlt-border]]</li>

===SSHFS===