31,703
edits
Changes
Template:Networking rut manual administration (view source)
Revision as of 09:05, 22 July 2019
, 09:05, 22 July 2019no edit summary
==Access Control==
==Access Control==
The <b>Access Control</b> page is used to manage remote and local access to the router.
<b>Important</b>: turning on remote access leaves the router vulnerable to external attackers. Make sure you use a strong password.
===General===
===General===
----
----
The '''Access Control General''' window is used the Enable or Disable SSH, HTTP or HTTPS remote or local access to the RUT device.
The <b>General</b> section is used to amange SSH, HTTP(S) and CLI access to the router.
----
<b>SSH</b>
[[File:{{{file_access_ssh}}}]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable SSH access</td>
<td>yes | no; default: <b>yes</b></td>
<td>Turns SSH access from the local network (LAN) on or off.</td>
</tr>
<tr>
<td>Remote SSH access</td>
<td>yes | no; default: <b>no</b></td>
<td>Turns SSH access from remote networks (WAN) on or off.</td>
</tr>
<tr>
<td>Port</td>
<td>integer [0..65535]; default: <b>22</b></td>
<td>Selects which port to use for SSH access.</td>
</tr>
</table>
----
<b>WebUI</b>
[[File:{{{file_access_webui}}}]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable HTTP access</td>
<td>yes | no; default: <b>yes</b></td>
<td>Turns HTTP access from the local network (LAN) to the router's WebUI on or off.</td>
</tr>
<tr>
<td>Redirect to HTTPS</td>
<td>yes | no; default: <b>no</b></td>
<td>Redirects connection attempts from HTTP to HTTPS.</td>
</tr>
<tr>
<td>Enable remote HTTP access</td>
<td>yes | no; default: <b>no</b></td>
<td>Turns HTTP access from remote networks (WAN) to the router's WebUI on or off.</td>
</tr>
<tr>
<td>Port</td>
<td>integer [0..65535]; default: <b>80</b></td>
<td>Selects which port to use for HTTP access.</td>
</tr>
<tr>
<td>Enable remote HTTPS access</td>
<td>yes | no; default: <b>no</b></td>
<td>Turns HTTPS access from remote networks (WAN) to the router's WebUI on or off.</td>
</tr>
<tr>
<td>Port</td>
<td>integer [0..65535]; default: <b>443</b></td>
<td>Selects which port to use for HTTPS access.</td>
</tr>
<tr>
<td>Enable JSON RPC</td>
<td>yes | no; default: <b>yes</b></td>
<td>Turns JSON-RPC access via ubus on or off.</td>
</tr>
<tr>
<td>RFC1918 Filter</td>
<td>yes | no; default: <b>yes</b></td>
<td>Turns Address Allocation for Private Internets on or off.</td>
</tr>
</table>
----
<b>CLI</b>
[[File:{{{file_access_cli}}}]]
[[Image:System administration access control.PNG]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable CLI</td>
<td>yes | no; default: <b>yes</b></td>
<td>Turns CLI access from the local network (LAN) on or off.</td>
</tr>
<tr>
<td>Enable remote CLI</td>
<td>yes | no; default: <b>no</b></td>
<td>Turns CLI access from remote networks (WAN) on or off.</td>
</tr>
<tr>
<td>Port range</td>
<td>range of integers [0..65534]-[1..65535]; default: <b>4200-4220</b></td>
<td>Selects which ports to use for CLI access.</td>
</tr>
<tr>
<td>Shell limit</td>
<td>integer [1..10]; default: <b>5</b></td>
<td>Maximum number of active CLI connections.</td>
</tr>
</table>
===Safety===
===Safety===
