Document Outline

• RuggedRouter®
• Table of Contents
• About this User Guide
  • Applicable Firmware Revision
  • Who Should Use This User Guide
  • How To Use This User Guide
  • Document Conventions
  • Quick Start Recommendations
• 1. Setting Up And Administering The Router
  • 1.1. Introduction
    • 1.1.1. Access Methods
    • 1.1.2. Accounts And Password Management
    • 1.1.3. Default Configuration
  • 1.2. Accessing The RuggedRouter Command Prompt
    • 1.2.1. From the Console Port
    • 1.2.2. From SSH
  • 1.3. The RuggedRouter Setup Shell
    • 1.3.1. Configuring Passwords
    • 1.3.2. Configuring IP Address Information
    • 1.3.3. Setting The Hostname and Domain
    • 1.3.4. Configuring RADIUS Authentication
    • 1.3.5. Enabling And Disabling The SSH and Web Server
    • 1.3.6. Enabling And Disabling The Gauntlet Security Appliance
    • 1.3.7. Configuring The Date, Time And Timezone
    • 1.3.8. Displaying Hardware Information
    • 1.3.9. Restoring A Configuration
  • 1.4. The RuggedRouter Web Interface
    • 1.4.1. Using a Web Browser to Access the Web Interface
    • 1.4.2. SSL Certificate Warnings
    • 1.4.3. The Structure of the Web Interface
  • 1.5. Using The LED Status Panel
  • 1.6. Obtaining Chassis Information
• 2. Webmin Configuration
  • 2.1. Introduction
  • 2.2. Webmin Configuration Menu
    • 2.2.1. IP Access Control
      • 2.2.1.1. Ports And Addresses
    • 2.2.2. Change Help Server
    • 2.2.3. Logging
    • 2.2.4. Authentication
    • 2.2.5. Webmin Events Log
• 3. Configure Webmin Users
  • 3.1. Introduction
  • 3.2. Webmin User and Group Fundamentals
  • 3.3. RADIUS User Access Control Fundamentals
  • 3.4. Webmin Users Menu
  • 3.5. Edit Webmin User menu
  • 3.6. Current Login Sessions Menu
  • 3.7. Password Restrictions Menu
• 4. Configuring The System
  • 4.1. Introduction
  • 4.2. Bootup And Shutdown
  • 4.3. Change Password Command
  • 4.4. Scheduled Commands
  • 4.5. Scheduled Cron Jobs
  • 4.6. System Hostname
  • 4.7. System Time
• 5. Configuring Networking
  • 5.1. Introduction
  • 5.2. IPv6 Fundamentals
  • 5.3. Network Configuration
    • 5.3.1. Core Settings
    • 5.3.2. Dummy Interface
    • 5.3.3. Static Routes
      • 5.3.3.1. Configuring Static Routes
      • 5.3.3.2. Other Static Routes
    • 5.3.4. Static Multicast Routing
    • 5.3.5. DNS Client
    • 5.3.6. Host Addresses
    • 5.3.7. End To End Backup
      • 5.3.7.1. Configuring End To End Backup
    • 5.3.8. Current Routing & Interface Table
• 6. Configuring Ethernet Interfaces
  • 6.1. Introduction
    • 6.1.1. Ethernet Interface Fundamentals
      • 6.1.1.1. LED Designations
    • 6.1.2. VLAN Interface Fundamentals
      • 6.1.2.1. VLAN Tag
      • 6.1.2.2. RuggedRouter Functions Supporting VLANs
    • 6.1.3. PPPoE On Native Ethernet Interfaces Fundamentals
    • 6.1.4. IPv6 on Ethernet Fundamentals
    • 6.1.5. Bridge Fundamentals
  • 6.2. Ethernet Configuration
    • 6.2.1. Ethernet Interfaces
    • 6.2.2. Editing Currently Active Interfaces
      • 6.2.2.1. Virtual LAN Interfaces
    • 6.2.3. Edit Boot Time Interfaces
    • 6.2.4. Bridge Configuration
    • 6.2.5. PPPoE On Native Ethernet Interfaces
    • 6.2.6. Edit PPPoE Interface
    • 6.2.7. PPP Logs
    • 6.2.8. Current Routes & Interface Table
• 7. Configuring Frame Relay/PPP And T1/E1
  • 7.1. Introduction
    • 7.1.1. T1/E1 Fundamentals
      • 7.1.1.1. Frame Relay
      • 7.1.1.2. Location Of Interfaces And Labeling
      • 7.1.1.3. LED Designations
      • 7.1.1.4. Included With T1/E1
  • 7.2. T1/E1 Configuration
    • 7.2.1. T1/E1 Network Interfaces
      • 7.2.1.1. Strategy For Creating Interfaces
      • 7.2.1.2. Naming Of Logical Interfaces
    • 7.2.2. Editing A T1/E1 Interface
      • 7.2.2.1. T1 Settings
      • 7.2.2.2. E1 Settings
    • 7.2.3. Editing A Logical Interface (Frame Relay)
      • 7.2.3.1. Frame Relay Link Parameters
      • 7.2.3.2. Frame Relay DLCIs
    • 7.2.4. Editing A Logical Interface (PPP)
    • 7.2.5. T1/E1 Statistics
      • 7.2.5.1. Link Statistics
      • 7.2.5.2. Frame Relay Interface Statistics
      • 7.2.5.3. PPP Interface Statistics
    • 7.2.6. T1/E1 Loopback
    • 7.2.7. Current Routes & Interface Table
    • 7.2.8. Upgrading Software
    • 7.2.9. Upgrading Firmware
• 8. Configuring Frame Relay/PPP And T3/E3
  • 8.1. Introduction
    • 8.1.1. T3/E3 Fundamentals
    • 8.1.2. Location Of Interfaces And Labeling
    • 8.1.3. LED Designations
  • 8.2. T3/E3 Configuration
    • 8.2.1. T3/E3 Trunk Interfaces
      • 8.2.1.1. Naming Of Logical Interfaces
      • 8.2.1.2. T3 Interface Parameters
      • 8.2.1.3. E3 Interface Parameters
    • 8.2.2. Editing Logical Interfaces
      • 8.2.2.1. Editing A Logical Interface (Frame Relay)
      • 8.2.2.2. Editing A Logical Interface (PPP)
    • 8.2.3. T3/E3 Statistics
    • 8.2.4. Current Routes & Interface Table
    • 8.2.5. Upgrading Software
• 9. Configuring Frame Relay/PPP And DDS
  • 9.1. Introduction
    • 9.1.1. DDS Fundamentals
      • 9.1.1.1. Location Of Interfaces And Labeling
      • 9.1.1.2. LED Designations
  • 9.2. DDS Configuration
    • 9.2.1. DDS Network Interfaces
      • 9.2.1.1. Naming Of Logical Interfaces
    • 9.2.2. Editing A Logical Interface (Frame Relay)
    • 9.2.3. Editing A Logical Interface (PPP)
    • 9.2.4. DDS Statistics
      • 9.2.4.1. Link Statistics
      • 9.2.4.2. Frame Relay And PPP Interface Statistics
    • 9.2.5. DDS Loopback
    • 9.2.6. Current Routes & Interface Table
    • 9.2.7. Upgrading Software
• 10. Multilink PPP over T1/E1
  • 10.1. Introduction
    • 10.1.1. Multilink PPP Fundamentals
    • 10.1.2. Notes on T1/E1 Channelization
  • 10.2. Configuring PPP Multilink over T1/E1
  • 10.3. Multilink PPP Statistics
• 11. Configuring PPPoE/Bridged Mode On ADSL
  • 11.1. Introduction
    • 11.1.1. ADSL Fundamentals
    • 11.1.2. PPPoE/Bridged Mode Fundamentals
      • 11.1.2.1. Authentication, Addresses and DNS Servers
      • 11.1.2.2. PPPoE MTU Issues
      • 11.1.2.3. Bridged Mode
      • 11.1.2.4. Location Of Interfaces And Labeling
      • 11.1.2.5. LED Designations
  • 11.2. ADSL Configuration
    • 11.2.1. ADSL Network Interfaces
    • 11.2.2. Editing A Logical Interface (PPPoE)
    • 11.2.3. Editing A Logical Interface (Bridged)
    • 11.2.4. ADSL Statistics
    • 11.2.5. Current Routes & Interface Table
    • 11.2.6. Upgrading Software
• 12. Configuring PPP And the Embedded Modem
  • 12.1. Introduction
    • 12.1.1. PPP and Modem Fundamentals
      • 12.1.1.1. PPP Interface
      • 12.1.1.2. Authentication, Addresses and DNS Servers
      • 12.1.1.3. When the Modem Connects
      • 12.1.1.4. PPP Dial on Demand
      • 12.1.1.5. LED Designations
  • 12.2. PPP Modem Configuration
    • 12.2.1. Modem Configuration
    • 12.2.2. Modem PPP Client Connections
    • 12.2.3. Modem PPP Client
    • 12.2.4. Modem PPP Server
    • 12.2.5. Modem Incoming Call Logs
    • 12.2.6. Modem PPP Logs
    • 12.2.7. Modem PPP Connection Logs
    • 12.2.8. Current Routes & Interface Table
• 13. Configuring PPP And The Cellular Modem
  • 13.1.  Introduction
    • 13.1.1. PPP and Cellular Modem Fundamentals
      • 13.1.1.1. PPP Interface
      • 13.1.1.2. Authentication, IP Addressing and DNS Servers
      • 13.1.1.3. When the Modem Connects
      • 13.1.1.4.  LED Designations
  • 13.2. PPP Cellular Modem Configuration
    • 13.2.1.  Cellular Modem Account Activation
      • 13.2.1.1.  Over-The-Air Account Activation
      • 13.2.1.2.  Manual Account Activation
    • 13.2.2. Cellular Modem Configuration
      • 13.2.2.1. Modem Configuration
      • 13.2.2.2. Modem Status
    • 13.2.3. Modem PPP Client Connections
    • 13.2.4. Modem PPP Client
    • 13.2.5. PPP Logs, PPP Connection Logs
    • 13.2.6. Current Route and Interfaces Table
• 14. Configuring The Firewall
  • 14.1. Introduction
  • 14.2. Firewall Fundamentals
    • 14.2.1. Stateless vs Stateful Firewalls
    • 14.2.2. Linux® netfilter, iptables And The Shoreline Firewall
    • 14.2.3. Network Address Translation
    • 14.2.4. Port Forwarding
  • 14.3. Shorewall Quick Setup
  • 14.4. ShoreWall Terminology And Concepts
    • 14.4.1. Zones
    • 14.4.2. Interfaces
    • 14.4.3. Hosts
    • 14.4.4. Policy
    • 14.4.5. Masquerading And SNAT
    • 14.4.6. Rules
  • 14.5. Configuring The Firewall And VPN
    • 14.5.1. Policy Based Virtual Private Networking
    • 14.5.2. Virtual Private Networking To A DMZ
  • 14.6. Firewall Configuration
    • 14.6.1. Network Zones
    • 14.6.2. Network Interfaces
    • 14.6.3. Network Zone Hosts
    • 14.6.4. Default Policies
    • 14.6.5. Masquerading
    • 14.6.6. Firewall Rules
    • 14.6.7. Static NAT
    • 14.6.8. TC (Traffic Control) Interfaces, Classes, and Rules
    • 14.6.9. Actions When Stopped
• 15. Traffic Control
  • 15.1. Traffic Control (TC) Fundamentals
    • 15.1.1. Traffic Control Example
      • 15.1.1.1. TC Interfaces
      • 15.1.1.2. TC Classes
      • 15.1.1.3. TC Rules
  • 15.2. Traffic Control Configuration
    • 15.2.1. TC Interfaces (tcdevices)
    • 15.2.2. TC Classes
    • 15.2.3. TC Rules
      • 15.2.3.1. Hints on optimizing the TC Rule table
• 16. Configuring IPsec VPN
  • 16.1. Introduction
    • 16.1.1. VPN Fundamentals
      • 16.1.1.1. IPsec Modes
      • 16.1.1.2.  Policy-Based VPNs
      • 16.1.1.3. Supported Encryption Protocols
      • 16.1.1.4. Public Key And Pre-shared Keys
      • 16.1.1.5. X509 Certificates
      • 16.1.1.6. NAT Traversal
      • 16.1.1.7. Other Configuration Supporting IPSec
      • 16.1.1.8. The Openswan Configuration Process
      • 16.1.1.9. IPsec and Router Interfaces
      • 16.1.1.10. L2TPD
  • 16.2. IPsec VPN Configuration
    • 16.2.1. VPN Main Menu Before Key Generation
    • 16.2.2. VPN Main Menu
    • 16.2.3. Server Configuration
    • 16.2.4. L2TPD Configuration
      • 16.2.4.1. Notes on configuring a VPN connection
    • 16.2.5. Public Key
    • 16.2.6. Pre-shared Keys
    • 16.2.7. List Certificates
    • 16.2.8. VPN Connections
      • 16.2.8.1. IPsec VPN Connection Details
      • 16.2.8.2. Left/Right System's Settings
      • 16.2.8.3. Export Configuration
    • 16.2.9. Showing IPsec Status
    • 16.2.10. IPSec X.509 Roaming Client Example
      • 16.2.10.1. Generate X.509 Certificates
      • 16.2.10.2. VPN Networking Parameters
      • 16.2.10.3. Client Configuration
      • 16.2.10.4. Router IPSec Configuration
      • 16.2.10.5. Firewall IPSec Configuration
      • 16.2.10.6. Ethernet Port Configuration
• 17. Configuring Dynamic Routing
  • 17.1. Introduction
    • 17.1.1. Quagga, RIP, OSPF, and BGP
    • 17.1.2. BGP Fundamentals
    • 17.1.3. RIP Fundamentals
    • 17.1.4. OSPF Fundamentals
      • 17.1.4.1. Link State Advertisements
    • 17.1.5. Key OSPF And RIP Parameters
      • 17.1.5.1. Network Areas
      • 17.1.5.2. Router-ID
      • 17.1.5.3. Hello Interval and Dead Interval
      • 17.1.5.4. Active/Passive Interface Default
      • 17.1.5.5. Redistributing Routes
      • 17.1.5.6. Link Detect
      • 17.1.5.7. Configuring OSPF Link Costs
      • 17.1.5.8. OSPF Authentication
      • 17.1.5.9. RIP Authentication
      • 17.1.5.10. Administrative Distances
    • 17.1.6. OSPF And VRRP Example Network
      • 17.1.6.1. Area And Subnets
      • 17.1.6.2. VRRP Operation
  • 17.2. Dynamic Routing Configuration
    • 17.2.1. Enable Protocols
    • 17.2.2. Core
      • 17.2.2.1. Core Global Parameters
      • 17.2.2.2. Core Interface Parameters
      • 17.2.2.3. View Core Configuration
    • 17.2.3. BGP configuration
      • 17.2.3.1. BGP Global Parameters
      • 17.2.3.2. BGP Networks
      • 17.2.3.3. BGP Network Neighbor Configuration
      • 17.2.3.4. BGP Status
      • 17.2.3.5. View BGP Configuration
    • 17.2.4. OSPF
      • 17.2.4.1. OSPF Global Parameters
      • 17.2.4.2. OSPF Interfaces
      • 17.2.4.3. OSPF Network Areas
      • 17.2.4.4. OSPF Status
      • 17.2.4.5. View OSPF Configuration
    • 17.2.5. RIP
      • 17.2.5.1. RIP Global Parameters
      • 17.2.5.2. RIP Key Chains
      • 17.2.5.3. RIP Interfaces
      • 17.2.5.4. RIP Networks
      • 17.2.5.5. RIP Status
      • 17.2.5.6. View RIP Configuration
• 18. Link Backup
  • 18.1. Introduction
    • 18.1.1. Link Backup Fundamentals
      • 18.1.1.1. Path Failure Discovery
      • 18.1.1.2. Use Of Routing Protocols And The Default Route
  • 18.2. Link Backup Configuration
    • 18.2.1. Link Backup Main Menu
    • 18.2.2. Link Backup Configurations
    • 18.2.3. Edit Link Backup Configuration
    • 18.2.4. Link Backup Logs
    • 18.2.5. Link Backup Status
    • 18.2.6. Testing A Link Backup Configuration
    • 18.2.7. Scheduled Link Backup Test
      • 18.2.7.1. Examples
      • 18.2.7.2. Logging output
• 19. Configuring VRRP
  • 19.1. Introduction
    • 19.1.1. VRRP Fundamentals
      • 19.1.1.1. The Problem With Static Routing
      • 19.1.1.2. The VRRP Solution
      • 19.1.1.3. VRRP Terminology
  • 19.2. VRRP Configuration
    • 19.2.1. VRRP Main Menu
    • 19.2.2. VRRP Configuration Menu
    • 19.2.3. Editing A VRRP Instance
    • 19.2.4. Editing A VRRP Group
    • 19.2.5. Viewing VRRP Instances Status
• 20. Traffic Prioritization
  • 20.1. Introduction
    • 20.1.1. Traffic Prioritization Fundamentals
      • 20.1.1.1. Priority Queues
      • 20.1.1.2. Filters
      • 20.1.1.3. TOS Prioritization
    • 20.1.2. Prioritization Example
  • 20.2. Configuring Traffic Prioritization
    • 20.2.1. Traffic Prioritization Main Menu
    • 20.2.2. Interface Prioritization Menu
      • 20.2.2.1. Prioritization Queues
      • 20.2.2.2. Prioritization Filters
      • 20.2.2.3. Prioritization Transmit Queue Length
    • 20.2.3. Prioritization Statistics
• 21. Link Layer Discovery Protocol (LLDP)
  • 21.1. LLDP Status
• 22. Configuring Generic Routing Encapsulation
  • 22.1. Introduction
    • 22.1.1. GRE Fundamentals
  • 22.2. GRE Configuration
    • 22.2.1. GRE Main Menu
    • 22.2.2. GRE Configuration Menu
• 23. Network Utilities
  • 23.1. Introduction
  • 23.2. Network Utilities Main Menu
  • 23.3.  Ping Menu
  • 23.4.  Ping Check Menu
  • 23.5. Traceroute Menu
  • 23.6. Host Menu
  • 23.7. Trace Menu
    • 23.7.1. Tcpdump A Network Interface
    • 23.7.2. Frame Relay Link Layer Trace A WAN Interface
    • 23.7.3. Serial Trace A Serial Server Port
  • 23.8. Interface Statistics Menu
    • 23.8.1. Current Routing & Interface Table
      • 23.8.1.1. Interface Status
• 24. Configuring Serial Protocols
  • 24.1. Introduction
    • 24.1.1. Serial IP Port Features
      • 24.1.1.1. LED Designations
    • 24.1.2. Serial Protocols Applications
      • 24.1.2.1. Character Encapsulation
      • 24.1.2.2. RTU Polling
      • 24.1.2.3. Broadcast RTU Polling
    • 24.1.3. Serial Protocols Concepts And Issues
      • 24.1.3.1. Host And Remote Roles
      • 24.1.3.2. Use Of Port Redirectors
      • 24.1.3.3. Message Packetization
      • 24.1.3.4. Use of Turnaround Delays
    • 24.1.4. TcpModBus Server Application
      • 24.1.4.1. Local Routing At The Server Gateway
      • 24.1.4.2. MultiMaster Capability
    • 24.1.5. TcpModbus Concepts And Issues
      • 24.1.5.1. Host And Remote Roles
      • 24.1.5.2. Port Numbers
      • 24.1.5.3. Retransmissions
      • 24.1.5.4. ModBus Exception Handling
      • 24.1.5.5. TcpModbus Performance Determinants
      • 24.1.5.6. A Worked Example
    • 24.1.6. DNP (Distributed Network Protocol)
      • 24.1.6.1. Address Learning for DNP
      • 24.1.6.2. DNP Broadcast Messages
  • 24.2. Serial Protocols Configuration
    • 24.2.1. Serial Protocols Main Menu
    • 24.2.2. Assign Protocols Menu
    • 24.2.3. Port Settings Menu
    • 24.2.4. RawSocket Menu
    • 24.2.5. TcpModBus Menu
    • 24.2.6. DNP Menu
    • 24.2.7. Serial Protocols Statistics Menu
      • 24.2.7.1. Protocol Specific Packet Error Statistics
    • 24.2.8. Serial Protocols Trace Menu
    • 24.2.9. Serial Protocols Sertrace Utility
• 25. Synchronous Serial Ports
  • 25.1. Introduction
    • 25.1.1. Synchronous Serial Port Features
    • 25.1.2. Raw Socket Operation On Synchronous Ports
  • 25.2. Synchronous Serial Port Configuration
    • 25.2.1. Synchronous Port Settings Menu
    • 25.2.2. Configuring Raw Socket On Synchronous Serial Ports
  • 25.3. Synchronous Serial Diagnostics
• 26. Configuring Layer 2 Tunnels
  • 26.1. Introduction
    • 26.1.1. IEC61850 GOOSE Fundamentals
      • 26.1.1.1. GOOSE Tunnel Implementation Details
    • 26.1.2. Generic Layer 2 Tunnel Fundamentals
      • 26.1.2.1. Generic Tunnel Implementation Details
  • 26.2. Layer 2 Tunnel Configuration
    • 26.2.1. Layer 2 Tunnels Main Menu
    • 26.2.2. General Configuration Menu
    • 26.2.3.  GOOSE Tunnels Menu
    • 26.2.4. Generic L2 Tunnels Menu
    • 26.2.5. GOOSE Statistics Menu
    • 26.2.6. Generic L2 Tunnel Statistics Menu
    • 26.2.7. Activity Trace Menu
• 27. Configuring The DHCP server
  • 27.1. Introduction
    • 27.1.1. DHCP Fundamentals
      • 27.1.1.1. DHCP Network Organizations
      • 27.1.1.2. DHCP Client Options
      • 27.1.1.3. Option 82 Support with Disable NAK
    • 27.1.2. Example DHCP Scenarios And Configurations
      • 27.1.2.1. Single Network With Dynamic IP Assignment
      • 27.1.2.2. Single Network With Static IP Assignment
      • 27.1.2.3. Single Network With Option82 Clients On One Switch
      • 27.1.2.4. Multiple Subnets On Separate VLANs Using Option82 On One Switch
  • 27.2. DHCP Configuration
    • 27.2.1. DHCP Server Main Menu
    • 27.2.2. DHCP Shared Network Configuration
    • 27.2.3. DHCP Subnet Configuration
    • 27.2.4. DHCP Group Configuration
    • 27.2.5. DHCP Host Configuration
    • 27.2.6. DHCP Pool Configuration
• 28. DHCP Relay
  • 28.1. Introduction
    • 28.1.1. DHCP Relay Fundamentals
  • 28.2. Configuring DHCP Relay
• 29. Configuring NTP
  • 29.1. Introduction
    • 29.1.1. NTP Fundamentals
      • 29.1.1.1. The NTP Sanity Limit
      • 29.1.1.2. NTP And The Precision Time Protocol Card
      • 29.1.1.3. Included With NTP
  • 29.2. NTP Configuration
    • 29.2.1. NTP Server Main Menu
    • 29.2.2. Generic Options
    • 29.2.3. Servers Configuration
    • 29.2.4. Peers Configuration
    • 29.2.5. Viewing NTP Status
    • 29.2.6. Viewing The NTP Log
    • 29.2.7. Viewing GPS Status
    • 29.2.8. Viewing The GPS Log
• 30. Configuring SSH
  • 30.1. Introduction
    • 30.1.1. SSH Fundamentals
      • 30.1.1.1. Included With SSH
  • 30.2. SSH Configuration
    • 30.2.1. SSH Main Menu
    • 30.2.2. Authentication
    • 30.2.3. Networking
    • 30.2.4. Access Control
• 31. Configuring The Telnet Server
  • 31.1. Introduction
  • 31.2. Telnet Fundamentals
  • 31.3. Telnet Server Configuration
• 32. Configuring IRIGB And IEEE1588
  • 32.1. Introduction
    • 32.1.1. IEEE1588 Fundamentals
      • 32.1.1.1. PTP Network Roles
      • 32.1.1.2. PTP Master Election
      • 32.1.1.3. Synchronizing NTP from IEEE1588
    • 32.1.2. IRIGB Fundamentals
      • 32.1.2.1. IRIGB Output Formats
      • 32.1.2.2. Reference Clocks
      • 32.1.2.3. How The Router Selects A Reference Clock
    • 32.1.3.  GPS Cable compensation
  • 32.2. IRIGB/IEEE1588 Configuration
    • 32.2.1. IRIGB/IEEE1588 Main Menu
    • 32.2.2. General Configuration
    • 32.2.3. IRIGB Configuration
    • 32.2.4. IEEE1588 Configuration
    • 32.2.5. IRIGB Status
    • 32.2.6. IEEE1588 Status
    • 32.2.7. IRIGB Log
• 33. Configuring the Intrusion Detection System
  • 33.1. Introduction
    • 33.1.1. Snort Fundamentals
      • 33.1.1.1. Which Interfaces To Monitor
      • 33.1.1.2. Snort Rules
      • 33.1.1.3. Alerting Methods
      • 33.1.1.4. Performance And Resources
  • 33.2. IDS Configuration
    • 33.2.1. Snort IDS Main Menu
      • 33.2.1.1. Global Configuration
      • 33.2.1.2. Interfaces
      • 33.2.1.3. Rulesets
      • 33.2.1.4. Rule Lookup by SID
    • 33.2.2. Network Settings
    • 33.2.3. PreProcessors
    • 33.2.4. Alerts & Logging
    • 33.2.5. Edit Config File
• 34. Maintaining The Router
  • 34.1. Introduction
  • 34.2. Alert System
    • 34.2.1. Alert Main Menu
    • 34.2.2. Alert Configuration
      • 34.2.2.1. Alert Filter Configuration
      • 34.2.2.2. Alert Definition Configuration
      • 34.2.2.3. Change Alert Definition
  • 34.3. Industrial Defender
    • 34.3.1. What information is sent to an SEM unit
    • 34.3.2. Industrial Defender Configuration
      • 34.3.2.1. Configuring Industrial Defender Addresses
      • 34.3.2.2. Retrieving an Industrial Defender Key
      • 34.3.2.3. Configuring remote syslogging
  • 34.4. Access Manager Security
    • 34.4.1. What Access Manager's Secure Access Portal Protects And How
    • 34.4.2. Access Manager And The Firewall
      • 34.4.2.1. VRRP, Firewall Rules, and Access Manager
    • 34.4.3. Access Manager's Secure Access Portal Status Menu
    • 34.4.4. Upgrading the Access Manager's Secure Access Portal
  • 34.5. Backup And Restore
    • 34.5.1. General Configuration
    • 34.5.2. Configuration Rollback
    • 34.5.3. Archive History
    • 34.5.4. Archive Backup
    • 34.5.5. Archive Restore
    • 34.5.6. Archive Difference Tool
  • 34.6. SNMP Configuration
    • 34.6.1. SNMP Main Configuration Menu
    • 34.6.2. System Configuration
    • 34.6.3. Network Addressing Configuration
    • 34.6.4. Access Control
    • 34.6.5. Trap Configuration
    • 34.6.6. MIB Support
  • 34.7. RADIUS Authentication
    • 34.7.1. Introduction
      • 34.7.1.1. RADIUS Usage
      • 34.7.1.2. RADIUS on ROX
      • 34.7.1.3. RADIUS, ROX, and Services
    • 34.7.2. RADIUS Authentication Configuration
    • 34.7.3. Edit RADIUS Server Parameters
  • 34.8. Outgoing Mail
  • 34.9. Chassis Parameters
  • 34.10. Power over Ethernet
    • 34.10.1. Power over Ethernet Menu
  • 34.11. Banner Configuration
  • 34.12. System Logs
    • 34.12.1. Syslog Factory Defaults
    • 34.12.2. Remote Logging
  • 34.13. Upgrade System
    • 34.13.1. RuggedRouter Software Fundamentals
    • 34.13.2. Upgrade to RX1100
    • 34.13.3. Change Repository Server
    • 34.13.4. Upgrading All Packages
      • 34.13.4.1. Notes on Software Upgrade Procedures
    • 34.13.5. Installing A New Package
    • 34.13.6. Pre-upgrade/Post-upgrade scripts
      • 34.13.6.1. Example Of A post-upgrade Script
  • 34.14. Uploading And Downloading Files
• 35. Security Considerations
  • 35.1. Introduction
    • 35.1.1. Security Actions
• Appendix A. Setting Up A Repository
  • A.1. Repository Server Requirements
  • A.2. Initial Repository Setup
  • A.3. Upgrading The Repository
  • A.4. Setting Up The Routers
    • A.4.1. An Alternate Approach
    • A.4.2. Upgrading Considerations
• Appendix B. Re-Flashing Router Software
  • B.1. Introduction
  • B.2. Use Cases
  • B.3. Re-flashing The ROX System Software
• Appendix C. Installing Apache Web Server On Windows
• Appendix D. Installing IIS Web Server On Windows
• Appendix E. RADIUS Server Configuration
  • E.1. Webmin Privilege Levels and FreeRADIUS
  • E.2. Webmin Privilege Levels and Windows IAS
  • E.3. PPP / CHAP and Windows IAS
• Appendix F. VPN/L2TP Configuration in Windows
• Index