RuggedCom RuggedBackbone RX1500

To Next Page

To Previous Page

38. Firewall

ROX™ v2.2 User Guide 456 RuggedBackbone™ RX1500

(Optional) Add comma-separated host IPs to the destination-zone - may include :port for DNAT

or REDIRECT

Main Page

Default Chapter3
- Table of Contents3
- Preface25
- Administration26
1 The ROX™ Web Interface27
- Getting Started27
- The Structure of the Web Interface28
- Making Configuration Changes31
2 System Administration37
- Administration Menu37
- System Commands37
- Clear All Alarms Menu Action Form37
- Acknowledge All Alarms Menu Action Form37
- Shutdown the Device Menu Action Form38
- Set New Time and Date Form38
- Administration Form39
- Hostname Form39
- Restore-Factory-Defaults Trigger Action Form39
- Timezone Form40
- Administrative Access Control41
- Idle-Timeout Field42
- STFP Sessions Form43
- WWW Interface Sessions44
- User Accounts45
- Idle-Timeout Field45
- Users Menu45
- Users Table45
- Users Form46
- Software Upgrade47
- Software-Upgrade Menu47
- Upgrade Monitoring48
- Launch Upgrade49
- Rollback and Reboot49
- Roxflash Cross-Partition Imaging Tool - Software Downgrade50
  - Uses50
  - Roxflash Configuration50
  - Roxflash Menu51
  - Roxflash Monitoring Form51
- Scheduling Jobs52
- Roxflash Forms52
- Scheduler Menu52
- Scheduled-Jobs Table53
- The Featurekey55
  - Overview55
  - Upgrading Feature Levels in the Field55
  - When a File-Based Featurekey Does Not Match the Hardware55
  - Viewing Ruggedcom Serial Numbers56
  - Uploading a Featurekey57
  - Install Files Forms57
  - Backing up a Featurekey Using the Web User Interface58
- Installing and Backing up Files59
  - Installing Files59
  - Backup Files Forms59
  - Administration Menu59
  - Backing up Files60
  - Install Files Forms60
  - Backup Files Forms60
- Deleting Log Files61
- Saving Full Configurations61
- Save-Full-Configuration Menu61
- Loading Full Configurations62
- Save Full Configuration Forms62
- Load-Full-Configuration Menu62
- Load Full Configuration Forms62
3 Time Synchronization63
- NTP Fundamentals63
  - The NTP Sanity Limit63
- Configuring Time Synchronization64
4 Basic Network Configuration72
- IP Interfaces72
5 IP Network Interfaces77
- Ipv6 Fundamentals77
- Ipv6 Neighbor Discovery78
- Neighbor Discovery Form79
- Neighbor Discovery Ipv6 Prefix80
- Neighbor Discovery Ipv6 Prefix Forms80
- Adding Interfaces to Switched Ports81
- Non-Switched Interface Menu85
6 Alarms89
- Introduction89
- Alarm Configuration90
7 Domain Name Search96
- Domain Name Lookup96
- DNS Menu96
- Domain Name Searches Form96
8 Logging97
- Configuring Local Syslog97
- Configuring the Remote Syslog Server97
- Logging Menu97
- Remote Server Selector Table98
- Selector Menu98
- Remote Server Form98
- Remote Server Selector Form99
- Deleting Logs100
9 Snmp101
- SNMP Traps101
- SNMP Access Configuration103
  - Add an SNMP User ID103
  - Create an SNMP Community104
  - Map the Community to a Security Group105
- SNMP Menu105
- SNMP Sessions Form106
- SNMP USM Statistics Form108
- SNMP Discovery109
- SNMP Community109
- SNMP Engine ID Discover Forms109
- Snmpv1/V2C Community Configuration Table109
- SNMP Target Addresses110
- Snmpv1/V2C Community Configuration Form110
- Snmpv3 Target Configuration Form111
- SNMP Users112
- SNMP User Configuration Table112
- SNMP User Configuration Form113
- User Configuration Key Settings Form113
- SNMP Security to Group Maps114
- SNMP Access114
- SNMP Security Model to Group Mapping Table114
- Key Settings Form114
- SNMP Security Model to Group Mapping Form114
- SNMP Group Access Configuration Table115
- Key Settings Form115
- SNMP Group Access Configuration Form115
10 Authentication117
- Radius117
11 Netconf121
- NETCONF Menu121
- Idle-Timeout Field122
- NETCONF State/Statistics Form123
12 Chassis Management125
- Chassis Menu125
- Power Controller126
- Power Controller Form126
- Slot Hardware127
- Slot Identification128
- Slot Identification Form128
- Slot Identification Table128
- Cpu129
- Slot CPU/RAM Utilization Form129
- Slot CPU/RAM Utilization Table129
- Slot Status130
- Slot Sensors131
- Module Configuration132
- Modules Form132
- Modules Table132
- Fixed Modules Form133
- Configurable Modules Form134
- Configurable Modules Table134
- Module Database Form134
- Module Database Table134
13 PPP Users135
- Overview135
- PPP Configuration135
- PPP Menu135
- PPP Configuration Form136
- Dial-In Users Form136
- PPP Interfaces and Link Failover138
14 DHCP Relay140
- DHCP Relay Agent Form140
- DHCP Relay Agent Menu140
- DHCP Relay Agent Client Ports Table141
15 DHCP Server142
- DHCP Fundamentals142
  - DHCP Network Organizations142
  - Option 82 Support with Disable NAK142
- Configuring DHCP Server143
- Network Interfaces and Ethernet Bridging154
16 Ethernet Ports155
- Controller Protection through LFI155
- Controller Protection through Link-Fault-Indication (LFI)155
- Ethernet Port Configuration156
- Port Status168
- Interface Status Form169
- Interface Status Table169
- Resetting Ports170
  - Resetting All Switched Ports171
- Reset All Switched Ports Form171
- Reset All Switched Ports Menu171
- Troubleshooting171
17 Ethernet Statistics173
- Viewing Ethernet Statistics173
- Viewing Ethernet Port Statistics173
- Ethernet Port Statistics Menu173
- Port Statistics Form173
- RMON Port Statistics Form175
- Viewing Non-Switched Ethernet Statistics178
- Routable-Only Ethernet Port Status Form179
- Receive Statistics Form180
- Clearing Switched Ethernet Port Statistics181
- Transmit Statistics Form181
- Interfaces Switch (Clearing Port Statistics) Menu181
- Clear Switched Port Statistics Form182
18 IP Statistics183
- Routable Interface Statistics Form183
- Routable Interface Statistics Table183
- Receive Statistics Form184
- Transmit Statistics Form184
19 Virtual Switch Bridging186
- Overview186
  - Helpful Hints186
- Sample Use Case187
- Virtual Switch Configuration and Status188
- Virtualswitch Table188
- Virtualswitch Form189
- VLAN Table189
- VLAN Form190
- Virtualswitch Table190
- Virtualswitch Form190
- Receive Form191
- Transmit Form191
- VLAN Table192
- VLAN Transmit Form193
20 Link Aggregation194
- Link Aggregation Operation194
- Link Aggregation Configuration196
21 Modem203
- PPP and the Cellular Modem203
22 Serial Protocols218
- Introduction218
- Serial Protocol Configuration225
- Serial Protocol Statistics232
- Restarting the Serial Server236
- Resetting Ports236
- Restart Serserver Menu236
- Restart Serserver Trigger Action236
23 Wan237
- T1/E1 Fundamentals237
  - Frame Relay237
  - RX1500 and Frame Relay Encapsulation237
- WAN Configuration238
- Statistics249
- Dds261
24 Port Security268
- Port Security Operation268
- Port Security Configuration270
25 Multicast Filtering274
- Igmp274
- GMRP (GARP Multicast Registration Protocol)277
  - GMRP Example278
  - Example Using GMRP279
- Multicast Filtering Configuration and Status280
- Troubleshooting287
26 Classes of Service289
- Cos Operation289
  - Inspection Phase289
  - Forwarding Phase290
- Cos Configuration290
- MAC Address Table294
27 MAC Address Tables294
- MAC Tables Form295
- Key Settings296
- Static MAC Address Parameters Form296
- Static MAC Address Parameters Table296
- Purge MAC Address Menu297
- Purge MAC Address Table Form297
28 Spanning Tree298
- RSTP Operation298
- MSTP Operation302
- RSTP Applications306
- Spanning Tree Configuration309
- Spanning Tree Statistics320
- Clearing Spanning Tree Statistics328
- Troubleshooting329
29 Virtual Lans332
- VLAN Operation332
- VLAN Applications336
- VLAN Configuration337
- Troubleshooting343
- Vlans Form343
30 Network Discovery345
- LLDP Operation345
- LLDP Parameters346
- LLDP Form346
- LLDP Global Statistics Form347
- LLDP Local System Form348
- LLDP Port Statistics Table349
- LLDP Port Statistics Form349
- LLDP Neighbors Table350
- LLDP Submenu351
- LLDP Neighbors Form351
- LLDP Form352
- Routing and Security353
31 ROX™ Routing Overview354
- IP Routing in ROX354
- Physical Ethernet Port Types in ROX354
- Routing354
  - Using VLAN Interfaces for Routing and Layer 3 Switching354
  - Routing IP Packets355
32 Layer 3 Switching356
- Layer 3 Switching Fundamentals356
- Configuring Layer 3 Switching362
33 Tunnelling369
- Ipsec369
- L2TP Tunnelling Configuration382
- L2TP Menu382
- L2TP Form382
- DNS Server Form382
- PPP Options Form383
- Layer 2 Tunnelling384
- Generic Routing Encapsulation (GRE)394
34 Dynamic Routing397
- Introduction397
- Dynamic Routing Configuration402
- Rip402
- Ospf408
- Bgp413
- Static Menu420
- Static Route Using Gateway Form420
- Static Route Using Gateway Table420
35 Static Routing420
- Static Route Using Interface Form421
- Static Route Using Interface Table421
36 Routing Status422
- Ipv4422
- Ipv6423
- Memory Statistics423
- Core Daemon Memory Statistics Form424
- Rip425
- RIP Menu425
- OSPF Daemon Memory Statistics Form425
- Ospf426
- OSPF Menu426
- Network Table426
- Reach Table426
- Router Table427
- Area Table427
- Net Table427
- Summary Table428
- ASBR-Summary Table429
- Bgp430
- Neighbor Table430
- BGP Menu430
- Route Table431
- Next Hop Table431
- BGP Neighbor Table432
- Multicast Groups Configuration Table433
37 Multicast Routing433
- Multicast Routing Menu433
- Static Menu433
- Static Multicast Routing Configuration Form433
- Multicast Groups Configuration Form434
- Outgoing Interfaces Table434
- Multicast Routing Status Form435
- Multicast Routing Status Table435
38 Firewall437
- Firewall Fundamentals437
- Firewall Quick Setup438
- Firewall Terminology and Concepts439
- Configuring the Firewall and VPN443
  - Policy-Based Virtual Private Networking443
  - Virtual Private Networking to a DMZ444
- Firewall Configuration444
39 Traffic Control457
- Traffic Control Modes457
  - Traffic Control Basic (Basic-Configuration) Configuration Mode457
  - Traffic Control Advanced (Advanced-Configuration) Configuration Mode457
- Traffic Control Configuration459
40 Vrrp476
- VRRP Fundamentals476
- VRRP Configuration478
- VRRP Menu478
41 Link Failover483
- Path Failure Discovery483
- Using Routing Protocols and the Default Route483
- Configuring Link Failover483
- Appendices490

RuggedCom RuggedBackbone RX1500

Table of Contents

Related product manuals