Document Outline

• About this User Guide
  • Applicable Firmware Revision
  • Who Should Use This User Guide
  • How To Use This User Guide
  • Document Conventions
  • Quick Start Recommendations
• Table Of Contents
• Table Of Figures
• Chapter 1 – Setting Up And Administering The Router
  • Introduction
    • Access Methods
    • Accounts And Password Management
    • Default Configuration
  • Accessing The RuggedRouter Command Prompt
    • From the Console Port
    • From SSH
  • The RuggedRouter Setup Shell
    • Configuring Passwords
    • Configuring IP Address Information
    • Setting The Hostname
    • Configuring Radius Authentication
    • Enabling And Disabling The SSH and Web Server
    • Enabling And Disabling The Gauntlet Security Appliance
    • Configuring The Date, Time And Timezone
    • Displaying Hardware Information
    • Restoring A Configuration
  • The RuggedRouter Web Interface
    • Using a Web Browser to Access the Web Interface
    • SSL Certificate Warnings
    • The Structure of the Web Interface
  • Using The LED Status Panel
  • Obtaining Chassis Information
• Chapter 2 – Webmin Configuration
  • Introduction
  • Webmin Configuration Menu
    • IP Access Control
    • Ports And Addresses
    • Change Help Server
    • Logging
    • Authentication
    • Webmin Events Log
• Chapter 3 – Configuring The System
  • Introduction
  • Bootup And Shutdown
  • Change Password Command
  • Scheduled Commands
  • Scheduled Cron Jobs
  • System Hostname
  • System Time
• Chapter 4 – Configuring Networking
  • Introduction
  • Network Configuration
    • Core Settings
    • Dummy Interface
    • Routing And Gateways
      • Default Route Table
      • Configured Static Routes
      • Manually Entered Static Routes
    • Static Multicast Routing
    • DNS Client
    • Host Addresses
    • End To End Backup
      • Configuring End To End Backup
    • Current Routing & Interface Table
• Chapter 5 – Configuring Ethernet Interfaces
  • Introduction
    • Ethernet Interface Fundamentals
      • LED Designations
    • VLAN Interface Fundamentals
      • VLAN Tag
      • RuggedRouter Functions Supporting VLANs
    • PPPoE On Native Ethernet Interfaces Fundamentals
  • Ethernet
    • Ethernet Interfaces
    • Editing Currently Active Interfaces
      • Virtual Interfaces
      • Virtual Lan Interfaces
    • Edit Boot Time Interfaces
    • PPPoE On Native Ethernet Interfaces
    • Edit PPPoE Interface
    • PPP Logs
    • Current Routes & Interface Table
• Chapter 6 – Configuring Frame Relay/PPP And T1/E1
  • Introduction
    • T1/E1 Fundamentals
      • Frame Relay
      • Location Of Interfaces And Labeling
      • LED Designations
      • Included With T1E1
  • T1/E1
    • T1/E1 Network Interfaces
      • Strategy For Creating Interfaces
      • Naming Of Logical Interfaces
    • Editing A T1/E1 Interface
      • T1 Settings
      • E1 Settings
    • Editing A Logical Interface (Frame Relay)
      • Frame Relay Link Parameters
      • Frame Relay DLCIs
    • Editing A Logical Interface (PPP)
    • T1/E1 Statistics
      • Link Statistics
      • Frame Relay Interface Statistics
      • PPP Interface Statistics
    • T1/E1 Loopback
    • Current Routes & Interface Table
    • Upgrading Software
    • Upgrading Firmware
• Chapter 7 – Configuring Frame Relay/PPP And T3
  • Introduction
    • T3 Fundamentals
      • Location Of Interfaces And Labeling
      • LED Designations
  • T3 Configuration
    • T3 Network Interfaces
      • Naming Of Logical Interfaces
    • Editing A T3 Interface
    • Editing A Logical Interface (Frame Relay)
    • Editing A Logical Interface (PPP)
    • T3 Statistics
    • Current Routes & Interface Table
    • Upgrading Software
• Chapter 8 – Configuring Frame Relay/PPP And DDS
  • Introduction
    • DDS Fundamentals
      • Location Of Interfaces And Labeling
      • LED Designations
  • DDS Configuration
    • DDS Network Interfaces
      • Naming Of Logical Interfaces
    • Editing A Logical Interface (Frame Relay)
    • Editing A Logical Interface (PPP)
    • DDS Statistics
      • Link Statistics
      • Frame Relay And PPP Interface Statistics
    • DDS Loopback
    • Current Routes & Interface Table
    • Upgrading Software
• Chapter 9 – Configuring PPPoE/Bridged Mode On ADSL
  • Introduction
    • ADSL Fundamentals
    • PPPoE/Bridged Mode Fundamentals
      • Authentication, Addresses and DNS Servers
      • PPPoE MTU Issues
      • Bridged Mode
      • Location Of Interfaces And Labeling
      • LED Designations
  • ADSL Configuration
    • ADSL Network Interfaces
    • Editing A Logical Interface (PPPoE)
    • Editing A Logical Interface (Bridged)
    • ADSL Statistics
    • Current Routes & Interface Table
    • Upgrading Software
• Chapter 10 – Configuring PPP and Modem
  • Introduction
    • Modem Fundamentals
    • PPP Mode Fundamentals
      • Authentication, Addresses and DNS Servers
      • When the Modem Connects
      • LED Designations
  • Modem Main Menu
    • Modem Configuration
    • Modem PPP Client Connections
    • Modem PPP Client
    • Modem PPP Server
    • Modem Incoming Call Logs
    • Modem PPP Logs
    • Modem PPP Connection Logs
    • Current Routes & Interface Table
• Chapter 11 – Configuring The Firewall
  • Introduction
    • Firewall Fundamentals
      • Stateless vs Stateful Firewalls
      • Linux® netfilter, iptables And The Shoreline Firewall
      • Network Address Translation
      • Port Forwarding
    • Shorewall Quick Setup
    • ShoreWall Terminology And Concepts
      • Zones
      • Interfaces
      • Hosts
      • Policy
      • Masquerading And SNAT
      • Rules
    • Configuring The Firewall And VPN
      • Route Based Virtual Private Networking
      • Policy Based Virtual Private Networking
      • Virtual Private Networking To A DMZ
  • Firewall Main Menu
    • Network Zones
    • Network Interfaces
    • Network Zone Hosts
    • Default Policies
    • Masquerading
    • Firewall Rules
    • Static NAT
    • Actions When Stopped
• Chapter 12 – Configuring An IPsec VPN
  • Introduction
    • VPN Fundamentals
      • IPsec Modes
      • Policy Vs Route Based VPNs
      • Supported Encryption Protocols
      • Public Key And Pre-shared Keys
      • X509 Certificates
      • NAT Traversal
      • Other Configuration Supporting IPSec
      • The Openswan Configuration Process
      • IPsec and Router Interfaces
  • VPN Main Menu Before Key Generation
  • VPN Main Menu
    • Server Configuration
    • Public Key
    • Preshared Keys
    • List Certificates
    • VPN Connections
      • IPsec VPN Connection Details
      • Left/Right System's Settings
      • Export Configuration
    • Showing IPsec Status
    • IPSec X.509 Roaming Client Example
      • Select A Certificate Authority
      • Generate X.509 Certificates
      • VPN Networking Parameters
      • Client Configuration
      • Router IPSec Configuration
      • Firewall IPSec Configuration
      • Ethernet Port Configuration
• Chapter 13 – Configuring Dynamic Routing
  • Introduction
    • Quagga, RIP and OSPF
    • RIP Fundamentals
    • OSPF Fundamentals
      • Link State Advertisements
    • Key OSPF And RIP Parameters
      • Network Areas
      • Router-ID
      • Hello Interval and Dead Interval
      • Active/Passive Interface Default
      • Redistributing Routes
      • Link Detect
      • Configuring OSPF Link Costs
      • OSPF Authentication
      • RIP Authentication
      • OSPF And Antispoofing
      • Administrative Distances
    • OSPF And VRRP Example Network
      • Area And Subnets
      • VRRP Operation
  • Dynamic Routing
    • Enable Protocols
  • Core
    • Core Global Parameters
    • Core Interface Parameters
    • View Core Configuration
  • OSPF
    • OSPF Global Parameters
    • OSPF Interfaces
    • OSPF Network Areas
    • OSPF Status
    • View OSPF Configuration
  • RIP
    • RIP Global Parameters
      • RIP Key Chains
    • RIP Interfaces
    • RIP Networks
    • RIP Status
    • View RIP Configuration
• Chapter 14 – Configuring Link Backup
  • Introduction
    • Link Backup Fundamentals
      • Path Failure Discovery
      • Use Of Routing Protocols And The Default Route
  • Link Backup Main Menu
    • Link Backup Configuration
    • Edit Link Backup Configuration
    • Link Backup Logs
    • Link Backup Status
    • Test Link Backup
• Chapter 15 – Configuring VRRP
  • Introduction
    • VRRP Fundamentals
      • The Problem With Static Routing
      • The VRRP Solution
      • VRRP Terminology
  • VRRP Main Menu
    • VRRP Configuration
    • Editing A VRRP Instance
    • Viewing VRRP Instances Status
• Chapter 16 – Configuring Traffic Prioritization
  • Introduction
    • Traffic Prioritization Fundamentals
      • Priority Queues
      • Filters
      • TOS Prioritization
      • Included With Traffic Prioritization
    • Prioritization Example
  • Traffic Prioritization Main Menu
    • Interface Prioritization Menu
      • Prioritization Queues
      • Prioritization Filters
      • Prioritization Transmit Queue Length
    • Prioritization Statistics
• Chapter 17 – Configuring Generic Routing Encapsulation
  • Introduction
    • GRE Fundamentals
  • GRE Main Menu
    • GRE Configuration Menu
• Chapter 18 – Network Utilities
  • Introduction
  • Network Utilities Main Menu
  • Ping Menu
  • Traceroute Menu
  • Host Menu
  • Trace Menu
    • Tcpdump A Network Interface
    • Frame Relay Link Layer Trace A WAN Interface
    • Serial Trace A Serial Server Port
  • Interface Statistics Menu
  • Current Routing & Interface Table
    • Interface Status
• Chapter 19 – Configuring Serial Protocols
  • Introduction
  • Serial IP Port Features
    • LED Designations
  • Serial Protocols Applications
    • Character Encapsulation
    • RTU Polling
    • Broadcast RTU Polling
  • Serial Protocols Concepts And Issues
    • Host And Remote Roles
    • Use Of Port Redirectors
    • Message Packetization
    • Use of Turnaround Delays
  • Serial Protocols Main Menu
    • Assign Protocols Menu
    • Port Settings Menu
    • RawSocket Menu
    • Serial Protocols Statistics Menu
      • Protocol Specific Packet Error Statistics
    • Serial Protocols Trace Menu
    • Serial Protocols Sertrace Utility
• Chapter 20 – Configuring GOOSE Tunnels
  • Introduction
    • IEC61850 GOOSE Fundamentals
      • Layer 2 Tunnel Daemon Details
  • Layer 2 Tunnels Main Menu
    • General Configuration Menu
    • GOOSE Tunnels Menu
    • GOOSE Statistics Menu
    • Activity Trace Menu
• Chapter 21 - Configuring The DHCP server
  • Introduction
    • DHCP Fundamentals
      • DHCP Network Organizations
      • DHCP Client Options
      • Option 82 Support with Disable NAK
    • Example DHCP Scenarios And Configurations
      • Single Network With Dynamic IP Assignment
      • Single Network With Static IP Assignment
      • Single Network With Option82 Clients On One Switch
      • Multiple Subnets On Separate VLANs Using Option82 On One Switch
  • DHCP Server Main Menu
    • DHCP Shared Network Configuration
    • DHCP Subnet Configuration
    • DHCP Group Configuration
    • DHCP Host Configuration
    • DHCP Pool Configuration
• Chapter 22 – Configuring NTP
  • Introduction
    • NTP Fundamentals
      • The NTP Sanity Limit
      • NTP And The Precision Time Protocol Card
      • Included With NTP
  • NTP Server Main Menu
    • Generic Options
    • Servers Configuration
    • Peers Configuration
    • Viewing The NTP Status
    • Viewing The NTP Log
    • Viewing The GPS Status
    • Viewing The GPS Log
• Chapter 23 – Configuring SSH
  • Introduction
    • SSH Fundamentals
      • Included With SSH
  • SSH Main Menu
    • Authentication
    • Networking
    • Access Control
• Chapter 24 – Configuring IRIGB And IEEE1588
  • Introduction
    • IEEE1588 Fundamentals
      • PTP Network Roles
      • PTP Master Election
      • Synchronizing NTP from IEEE1588
    • IRIGB Fundamentals
      • IRIGB Output Formats
      • Reference Clocks
      • How The Router Selects A Reference Clock
    • GPS Cable compensation
  • IRIGB/IEEE1588 Main Menu
    • General Configuration
    • IRIGB Configuration
    • IEEE1588 Configuration
    • IRIGB Status
    • IEEE1588 Status
    • IRIGB Log
• Chapter 25 – Configuring The Snort IDS
  • Introduction
    • Snort Fundamentals
      • Which Interfaces To Monitor
      • Snort Rules
      • Alerting Methods
      • Performance And Resources
  • Snort IDS Main Menu
    • Global Configuration
      • Interfaces
      • Rulesets
      • Rule Lookup by SID
    • Network Settings
    • PreProcessors
    • Alerts & Logging
    • Edit Config File
• Chapter 26 – Maintaining The Router
  • Introduction
  • Alert System
    • Alert Menu
    • Alert Configuration
    • Alert Filter Configuration
    • Alert Definition Configuration
      • Change Alert Definition
  • Gauntlet Security
    • What And How Gauntlet Protects
    • Gauntlet And The Firewall
    • Gauntlet Status Menu
      • Upgrading Gauntlet
  • Backup And Restore
    • General Configuration
    • Archive History
    • Archive Backup
    • Archive Restore
    • Archive Difference Tool
  • SNMP Configuration
    • SNMP Configuration Main Menu
    • System Configuration
    • Network Addressing Configuration
    • Access Control
    • Trap Configuration
    • MIB Support
  • Radius Authentication
    • Radius Authentication Configuration
    • Edit Radius Server Parameters
    • Outgoing Mail
  • Chassis Parameters
  • System Logs
    • Syslog Factory Defaults
    • Remote Logging
  • Upgrade System
    • RuggedRouter Software Fundamentals
    • When A Software Upgrade Requires A Reboot
    • Automatic Upgrade
    • Upgrade to RX1100
    • Change Repository Server
    • Automatic Upgrading
    • Upgrading All Packages
    • Installing A New Package
    • Pre-upgrade/Post-upgrade scripts
  • Uploading And Downloading Files
• Chapter 27 – Security Considerations
  • Introduction
  • Security Actions
• Appendix A – Setting Up A Repository
  • Repository Server Requirements
  • Initial Repository Setup
  • Upgrading The Repository
  • Setting Up The Routers
    • An Alternate Approach
    • Upgrading Considerations
• Appendix B – Downgrading Router Software
• Appendix C – Installing Apache Web Server On Windows
• Appendix D – Installing IIS Web Server On Windows
• Appendix E – Radius Server Configuration
  • FreeRadius
  • Windows Internet Authentication Service
• Index