Jump to content

Template:Networking rutos manual administration: Difference between revisions

no edit summary
No edit summary
No edit summary
Line 242: Line 242:
         <td>integer [0..65535]; default: <b>23</b></td>
         <td>integer [0..65535]; default: <b>23</b></td>
         <td>Selects which port to use for Telnet access.</td>
         <td>Selects which port to use for Telnet access.</td>
    </tr>
</table>
===PAM===
----
<b>Note:</b> PAM is additional software that can be installed from the <b>Services → [[{{{name}}} Package Manager|Package Manager]]</b> page.
[[File:Networking_rutos_manual_administration_access_control_pam_v1.png|border|class=tlt-border]]
====Modify PAM Auth====
----
[[File:Networking_rutos_manual_administration_access_control_pam_modify_pam_auth_v1.png|border|class=tlt-border]]
<table class="nd-mantable">
    <tr>
        <th>Field</th>
      <th>Value</th>
      <th>Description</th>
    </tr>
    <tr>
        <td>Enable</td>
        <td>off | on; default: <b>on</b></td>
        <td>Turns the PAM auth on or off.</td>
    </tr>
    <tr>
        <td>Module</td>
        <td><span style="color:blue">TACACS+</span> | <span style="color:red">Radius</span> | Local; default: <b>Local</b></td>
        <td>Specifies the PAM module that implements the service.</td>
    </tr>
    <tr>
        <td>Type</td>
        <td>Required | Requisite | Sufficient | Optional; default: <b>Required </b></td>
        <td>Determines the continuation or failure behavior for the module</td>
    </tr>
    <tr>
        <td><span style="color:blue">TACACS+</span>/<span style="color:red">Radius</span>: Server</td>
        <td>ip4 | ip6; default: <b>none</b></td>
        <td>The IP address of the RADIUS server</td>
    </tr>
    <tr>
        <td><span style="color:blue">TACACS+</span>/<span style="color:red">Radius</span>: Secret</td>
        <td>string; default: <b>none</b></td>
        <td>RADIUS shared secret</td>
    </tr>
    <tr>
        <td><span style="color:red">Radius</span>: Port</td>
        <td>integer [0..65535]; default: <b>1812</b></td>
        <td>RADIUS server authentication port</td>
    </tr>
    <tr>
        <td><span style="color:red">Radius</span>: Timeout</td>
        <td>integer [3..10]; default: <b>3</b></td>
        <td>Timeout in seconds waiting for RADIUS server reply.</td>
     </tr>
     </tr>
</table>
</table>
Line 247: Line 300:
===Security===
===Security===
----
----
[[File:Networking_rutos_manual_administration_access_control_security_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_access_control_security_v2.png|border|class=tlt-border]]


<table class="nd-mantable">
<table class="nd-mantable">
Line 262: Line 315:
     <tr>
     <tr>
         <td>Fail count</td>
         <td>Fail count</td>
         <td>integer; default: <b>10</b></td>
         <td>integer [1..1000]; default: <b>10</b></td>
         <td>An amount of times IP address can try to access SSH or WebUI before being blocked.</td>
         <td>An amount of times IP address can try to access SSH or WebUI before being blocked.</td>
    </tr>
    <tr>
        <td>Clean after reboot</td>
        <td>off | on; default: <b>off</b></td>
        <td>If enabled, blocked loging attempts list will be cleared on device reboot.</td>
     </tr>
     </tr>
</table>
</table>
Line 326: Line 384:
After clicking 'Edit' you should be redirected to that email account's settings page where you can start configuring the account.
After clicking 'Edit' you should be redirected to that email account's settings page where you can start configuring the account.


[[File:Networking_rutos_manual_administration_recipients_email_accounts_modify_email_account_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_recipients_email_accounts_modify_email_account_v2.png|border|class=tlt-border]]


<table class="nd-mantable">
<table class="nd-mantable">
Line 368: Line 426:
       <td>string; default: <b>none</b></td>
       <td>string; default: <b>none</b></td>
       <td>Configured SMTP server user's email address.</td>
       <td>Configured SMTP server user's email address.</td>
    </tr>
    <tr>
      <td>Send test email</td>
      <td> - (interactive button)</td>
      <td> Sends an email based on the current configuration. This is used to test whether the configuration works as intended.</td>
     </tr>
     </tr>
</table>
</table>
Line 549: Line 612:
The <b>Logging Settings</b> section is used to configure how and where the device stores system log data. The system log is a file that contains information on various system related events and is useful to engineers for troubleshooting the device.
The <b>Logging Settings</b> section is used to configure how and where the device stores system log data. The system log is a file that contains information on various system related events and is useful to engineers for troubleshooting the device.


[[File:Networking_rutos_manual_administration_troubleshoot_logging_settings_v1.png|border|class=tlt-border]]
[[File:Networking_rutos_manual_administration_troubleshoot_logging_settings_v2.png|border|class=tlt-border]]


<table class="nd-mantable">
<table class="nd-mantable">
Line 579: Line 642:
     <tr>
     <tr>
       <td>Save log in</td>
       <td>Save log in</td>
       <td>RAM memory | Flash memory; default: <b>RAM memory</b></td>
       <td>RAM memory | <span style="color:blue">Flash memory</span>; default: <b>RAM memory</b></td>
       <td>Specifies which type of memory to use for storing system logs.</td>
       <td>Specifies which type of memory to use for storing system logs.</td>
    </tr>
    <tr>
      <td><span style="color:blue">System log file size</span></td>
      <td>integer [10..500]; default: <b>200</b></td>
      <td>Maximum size (in kilobytes) of a log file. When threshold is reached, log rotation is performed. Can be set to value from 10kB to 500kB. Smaller the file, larger amount of old logs is saved.</td>
    </tr>
    <tr>
      <td><span style="color:blue">Compress</span></td>
      <td>off | on; default: <b>off</b></td>
      <td>Compress old rotated logs using GZ format.</td>
    </tr>
    <tr>
      <td>Delete</td>
      <td>- (interactive button)</td>
      <td>Deletes log file from router.</td>
     </tr>
     </tr>
     <tr>
     <tr>