RuggedCom RUGGEDBACKBONE RX5000

To Next Page

To Previous Page

35. Firewall

ROX™ v2.2 User Guide 389 RuggedBackbone™ RX5000

(Optional) Add comma-separated host IPs to the destination-zone - may include :port for DNAT

or REDIRECT

Main Page

Default Chapter3
- Table of Contents3
- Preface22
- Administration23
1 The ROX™ Web Interface24
- Getting Started24
- The ROX™ Web Interface25
  - Top-Level Menu Categories27
- The Structure of the Web Interface25
- Top-Level Menu27
  - Making Configuration Changes28
- Example of Edit Private Mode29
  - Configuring Tables Using Key Settings Forms30
- Key Information in a Table31
  - Viewing more Information in Tables32
- First Table of Information33
2 System Administration34
- Acknowledge All Alarms Menu Action Form34
- Administration Menu34
- Clear All Alarms Menu Action Form34
- System Commands34
- Set New Time and Date Form35
- Shutdown the Device Menu Action Form35
- Administration Form36
- Hostname Form36
- Restore-Factory-Defaults Trigger Action Form36
- Timezone Form37
  - Administrative Access Control38
- Idle-Timeout Field39
- STFP Sessions Form40
- WWW Interface Sessions41
  - User Accounts42
- Idle-Timeout Field42
- Users Menu42
- Users Table42
- Users Form43
  - Software Upgrade44
- Software-Upgrade Menu44
- Upgrade Monitoring45
- Launch Upgrade46
- Rollback and Reboot46
  - Roxflash Cross-Partition Imaging Tool - Software Downgrade47
    - Roxflash Configuration47
    - Uses47
- Roxflash Menu48
- Roxflash Monitoring Form48
  - Scheduling Jobs49
- Roxflash Forms49
- Scheduler Menu49
- Scheduled-Jobs Table50
  - The Featurekey52
- Install Files Forms54
  - Backing up a Featurekey Using the Web User Interface55
  - Installing and Backing up Files56
    - Installing Files56
- Administration Menu56
  - Backing up Files57
- Backup Files Forms56
- Backup Files Forms57
  - Deleting Log Files58
  - Saving Full Configurations58
- Install Files Forms57
- Save-Full-Configuration Menu58
  - Loading Full Configurations59
- Load Full Configuration Forms59
3 Time Synchronization60
- Load-Full-Configuration Menu59
- Save Full Configuration Forms59
- NTP Fundamentals60
  - The NTP Sanity Limit60
- Configuring Time Synchronization61
  - Configuring the System Time and Date61
  - Configuring the System Time Zone61
- Set New Time and Date Form61
  - Configuring the Local Time Settings62
  - Configuring NTP Servers62
- Network Time Protocol (NTP) Servers62
- Timezone Form62
- Network Time Protocol (NTP) Servers Form63
  - Adding Server Keys64
  - Configuring NTP Server Restrictions64
- Server Restrictions Form65
  - Configuring an NTP Server Using Multicast or Broadcast66
- Server Restrictions Key Settings Form65
- NTP Broadcast/Multicast Servers Form66
  - Configuring an NTP Client Using Multicast67
  - Configuring an NTP Client Using Broadcast67
- Network Time Protocol (NTP) Form67
  - Checking NTP Status68
4 Basic Network Configuration69
- IP Interfaces69
  - Configuring an IP Address69
- IP Menu69
  - Simple Network Setup with the Default Ipv4 Addresses70
- Configuring an IP Address70
- Routable Interfaces Form72
- Routable Interfaces Table72
- Addresses Form73
- Addresses Table73
5 IP Network Interfaces74
- Ipv6 Fundamentals74
- Ipv6 Neighbor Discovery75
- Neighbor Discovery Form76
- Neighbor Discovery Ipv6 Prefix77
- Neighbor Discovery Ipv6 Prefix Forms77
  - Adding Interfaces to Switched Ports78
- Explicitly Adding a VLAN Interface to a Switched Port79
  - All-Vlans80
- All Vlans Properties Form81
  - Non-Switched Interface Menu82
- All Vlans Table81
- Routable Ethernet Ports Form82
  - Configuring IP Address Source and Proxyarp for Non-Switched Interfaces84
6 Alarms86
- Routable Ethernet Ports Table82
- Introduction86
- Alarm Configuration87
- Alarms Menu87
- Active Alarms Form88
- Acknowledge Alarm Menu Action Form89
- Acknowledge All Alarms Menu Action Form89
  - Administrative Alarm Configuration90
- Clear All Alarms Menu Action Form89
- Admin Alarm Configuration Form90
  - Chassis Alarm Configuration91
- Admin Alarm Configuration Table90
- Chassis Alarm Configuration Form91
  - Switch Alarm Configuration92
- Chassis Alarm Configuration Table91
- Switch Alarm Configuration Form92
7 Domain Name Search93
- Switch Alarm Configuration Table92
- DNS Menu93
- Domain Name Lookup93
- Domain Name Searches Form93
8 Logging94
- Configuring Local Syslog94
- Configuring the Remote Syslog Server94
- Logging Menu94
- Remote Server Form95
- Remote Server Selector Table95
- Selector Menu95
- Remote Server Selector Form96
  - Deleting Logs97
9 Snmp98
- SNMP Traps98
- SNMP Access Configuration100
- SNMP Menu102
- SNMP Sessions Form103
- SNMP USM Statistics Form105
  - SNMP Discovery106
  - SNMP Community106
- SNMP Engine ID Discover Forms106
- Snmpv1/V2C Community Configuration Table106
  - SNMP Target Addresses107
- Snmpv1/V2C Community Configuration Form107
- Snmpv3 Target Configuration Form108
  - SNMP Users109
- SNMP User Configuration Table109
- SNMP User Configuration Form110
- User Configuration Key Settings Form110
  - SNMP Security to Group Maps111
  - SNMP Access111
- Key Settings Form111
- SNMP Security Model to Group Mapping Form111
- SNMP Security Model to Group Mapping Table111
- Key Settings Form112
- SNMP Group Access Configuration Form112
10 Authentication114
- SNMP Group Access Configuration Table112
- Authentication Menu114
- Radius114
  - RADIUS Overview114
  - RADIUS Usage114
- Primary RADIUS Server Form116
11 Netconf118
- NETCONF Menu118
- Idle-Timeout Field119
- NETCONF State/Statistics Form120
12 Chassis Management122
- Chassis Menu122
  - Power Controller123
- Power Controller Form123
  - Slot Hardware124
  - Slot Identification125
- Slot Identification Form125
  - Cpu126
- Slot Identification Table125
- Slot CPU/RAM Utilization Form126
- Slot CPU/RAM Utilization Table126
- Modules Form130
- Modules Table130
- Module Database Form131
- Module Database Table131
- Configurable Modules Form132
13 PPP Users133
- Configurable Modules Table132
- Overview133
- PPP Configuration133
- PPP Menu133
- Dial-In Users Form134
  - PPP Interfaces and Link Failover136
14 DHCP Relay138
- PPP Configuration Form134
- DHCP Relay Agent Form138
- DHCP Relay Agent Menu138
- DHCP Relay Agent Client Ports Table139
15 DHCP Server140
- DHCP Fundamentals140
  - DHCP Network Organizations140
  - Option 82 Support with Disable NAK140
- Configuring DHCP Server141
- Subnet Configuration Form142
  - DHCP Shared Networks143
  - DHCP Hosts143
- Subnet Configuration Table142
- Host Configuration Table143
- Services/Dhcpserver/Show-Active-Leases Form145
- Client Configuration Form for Subnets and Shared Networks146
- Lease Configuration Form146
- Client Configuration Form for Host-Groups147
- Client Configuration Form for Hosts147
- Client Configuration Form for DHCP Clients148
- Netbios Configuration Form149
  - Custom DHCP Options150
  - Hardware Configuration150
- NIS Configuration Form149
- Hardware Configuration Form150
- Network Interfaces and Ethernet Bridging152
16 Ethernet Ports153
- Controller Protection through LFI153
  - Ethernet Port Configuration154
    - Port Parameters155
- Controller Protection through Link-Fault-Indication (LFI)153
- Switched Ethernet Ports Submenu155
- Switched Ethernet Ports Table155
- Switched Ethernet Ports Form156
  - Port Rate Limiting157
  - Port Mirroring158
- Egress Source Ports Table159
- Ingress Source Ports Table159
- Port-Mirroring Menu159
  - Diagnostics160
- Cable Diagnostics Results Form160
- Running Cable Diagnostics161
- Start Cable Diagnostics Test Form163
- Clear All Alarms Menu164
  - Link Detection Options165
  - Port Status166
- Interface Status Form167
  - Resetting Ports168
    - Resetting All Switched Ports169
    - Troubleshooting169
- Interface Status Table167
- Reset All Switched Ports Form169
17 Ethernet Statistics171
- Reset All Switched Ports Menu169
- Ethernet Port Statistics Menu171
- Port Statistics Form171
- Viewing Ethernet Port Statistics171
- Viewing Ethernet Statistics171
- RMON Port Statistics Form173
  - Viewing Non-Switched Ethernet Statistics176
- Routable-Only Ethernet Port Status Form177
- Receive Statistics Form178
  - Clearing Switched Ethernet Port Statistics179
- Interfaces Switch (Clearing Port Statistics) Menu179
- Transmit Statistics Form179
- Clear Switched Port Statistics Form180
18 IP Statistics181
- Routable Interface Statistics Form181
- Routable Interface Statistics Table181
- Receive Statistics Form182
- Transmit Statistics Form182
19 Virtual Switch Bridging184
- Overview184
  - Helpful Hints184
- Sample Use Case185
- Virtual Switch Configuration and Status186
- Virtualswitch Table186
- Virtualswitch Form187
- VLAN Table187
- Virtualswitch Form188
- Virtualswitch Table188
- VLAN Form188
- Receive Form189
- Transmit Form189
- VLAN Table190
- VLAN Transmit Form191
20 Link Aggregation192
- Link Aggregation Examples192
  - Link Aggregation Limitations193
  - Link Aggregation Configuration194
    - Configuring Port Trunks194
- Link Aggregation Operation192
  - Link Aggregation Rules192
- Adding Trunks194
- Link Aggregation Menu194
- Entering a Trunk ID195
- Entering Parameters for Forms196
- Trunk-Ports Submenu - Adding a Trunk-Port197
- Key Settings198
- Multicast Filtering Form198
- Trunk Ports Table198
- Trunk Ports Table in Edit Private Mode198
- Cos Form199
- VLAN Form199
- Trunk Ports Table200
21 Port Security201
- Port Security Operation201
  - Static MAC Address-Based Authorization201
  - IEEE 802.1X Authentication201
- X General Topology202
  - Port Security Configuration203
- Port Security RADIUS Primary Form203
- Port Security RADIUS Secondary Form203
  - Port Security Parameters204
  - Parameters205
22 Multicast Filtering207
- Igmp207
- GMRP (GARP Multicast Registration Protocol)210
  - GMRP Example211
- Example Using GMRP212
  - Multicast Filtering Configuration and Status213
    - Configuring IGMP Parameters213
- Multicast Filtering Menu213
- IGMP Snooping Parameters Form214
  - Configuring Static Multicast Groups215
- Router Ports Table214
- Static Multicast Summary Form215
- Static Multicast Summary Table215
- Multicast Group Summary Table216
- Static Ports Table216
- IP Multicast Groups Form217
- IP Multicast Groups Table217
- Router-Ports Table217
  - Configuring GMRP218
- GMRP Form218
- GMRP Dynamic Ports Form219
- GMRP Dynamic Ports Table219
- Multicast Filtering Form219
  - Troubleshooting220
23 Classes of Service222
- Cos Operation222
  - Inspection Phase222
  - Forwarding Phase223
- Cos Configuration223
  - Global Cos Parameters223
- Cos Form223
  - Priority to Cos Mapping224
- Priority to Cos Mapping Form224
  - DSCP to Cos Mapping225
- Priority to Cos Mapping Table224
- Cos Form225
24 MAC Address Tables227
- TOS DSCP to Cos Mapping Form225
- TOS DSCP to Cos Mapping Table225
- MAC Address Table227
- MAC Tables Form228
- Key Settings229
- Static MAC Address Parameters Form229
- Static MAC Address Parameters Table229
- Purge MAC Address Menu230
- Purge MAC Address Table Form230
25 Spanning Tree231
- RSTP Operation231
  - RSTP States and Roles232
- Bridge and Port Roles233
- Example of a Structured Wiring Configuration240
- Spanning Tree Parameter Form243
- Erstp Form245
- RSTP Common Instance Form245
  - Port RSTP Parameters247
- Interface/Switch/{Line Module}/Spanning-Tree Submenu247
- Port RSTP Parameter Form247
  - Bridge MSTI Parameters249
- Key Settings Form249
- MSTP ID Table250
- MSTP Instance Table250
  - Port MSTI Parameters251
- MSTI Configuration Form251
  - Spanning Tree Statistics253
    - Bridge RSTP Statistics253
    - Port RSTP Statistics255
- MSTI Configuration Table251
- RSTP Port Statistics Table255
- RSTP Port Statistics Form256
  - MSTI Status258
  - Port MSTP Statistics260
- MSTP Port Statistics Form260
  - Clearing Spanning Tree Statistics261
  - Troubleshooting262
26 Virtual Lans265
- MSTP Port Statistics Table260
- VLAN Operation265
- Using GVRP268
  - VLAN Applications269
- Switched Ethernet Ports Submenu272
  - VLAN Summary273
- VLAN Summary Form274
- All Vlans Properties Form275
- All Vlans Table275
- Untagged Ports Table275
  - Forbidden Ports276
  - Troubleshooting276
- Vlans Table275
- Vlans Form276
27 Network Discovery278
- LLDP Operation278
- LLDP Form279
- LLDP Parameters279
- LLDP Global Statistics Form280
- LLDP Local System Form281
- LLDP Port Statistics Form282
- LLDP Port Statistics Table282
- LLDP Neighbors Table283
- LLDP Neighbors Form284
- LLDP Submenu284
- LLDP Form285
- Routing and Security286
28 ROX™ Routing Overview287
- IP Routing in ROX287
- Physical Ethernet Port Types in ROX287
- Routing287
  - Using VLAN Interfaces for Routing and Layer 3 Switching287
  - Routing IP Packets288
- Layer 3 Switch289
29 Layer 3 Switching289
- Layer 3 Switching Fundamentals289
  - What Is a Layer 3 Switch289
  - Layer 3 Switch Forwarding Table289
- Hardware Acceleration Enabled293
  - Configuring Layer 3 Switching295
- Layer 3 Switching Form295
- Layer 3 Switching Menu295
- Routing Rules Summary Form299
  - Flushing Dynamic Hardware Routing Rules301
- Routing Rules Summary Table299
- Flush Dynamic Hardware Routing Rules Form301
30 Tunnelling302
- Ipsec302
  - VPN Fundamentals302
  - X509 Certificates303
  - Ipsec Configuration305
- Ipsec Form305
- Ipsec Menu305
- Syslog Form305
- Show Public RSA Key Form306
- Install-Certificate Forms307
- Install-Ca-Certificate Forms308
- Install-Crl-File Forms309
- Connection Form310
- ESP Table311
- IKE Table311
- Public IP Address Form312
- Nexthop to Other System Form313
- Network Table314
  - L2TP Tunnelling Configuration315
- DNS Server Form315
- L2TP Form315
- L2TP Menu315
- PPP Options Form316
  - Layer 2 Tunnelling317
- L2Tunneld Menu319
- Generic L2 Tunnel Table320
- Goose Tunnel Table320
- Generic L2 Tunnel Egress Interface Table321
- Generic L2 Tunnel Protocol Form321
- Goose Tunnel Statistics Table321
- Goose Tunnel Statistics Form322
- Connections Statistics Form323
- Connections Statistics Table323
- Generic L2 Tunnel Statistics Form324
- Generic L2 Tunnel Statistics Table324
- Connections Statistics Form325
- Connections Statistics Table325
- Round Trip Time Statistics Form326
  - Generic Routing Encapsulation (GRE)327
    - Generic Routing Encapsulation Configuration327
- Round Trip Time Statistics Table326
- Generic Routing Encapsulation (GRE) Menu327
- GRE Example327
- Generic Routing Encapsulation Interfaces Form328
31 Dynamic Routing330
- Generic Routing Encapsulation Interfaces Table328
- Introduction330
- OSPF and VRRP Example334
- Dynamic Routing Menu335
- RIP Menu335
  - RIP Configuration336
- RIP Configuration Form336
- Routing Timers Form337
- RIP Interface Parameters Table339
- Authentication Form340
  - Ospf341
- RIP Interface Parameters Form340
- OSPF Menu341
  - OSPF Configuration342
- OSPF Configuration Form342
- OSPF Area Distance Form343
- Interface Parameters Form344
- Interface Parameters Table344
- Dead Interval Form345
  - Bgp346
    - BGP Configuration346
- BGP Configuration Form346
- BGP Menu346
- Distance Form347
32 Static Routing353
- Static Menu353
- Static Route Using Gateway Form353
- Static Route Using Gateway Table353
- Static Route Using Interface Form354
33 Routing Status355
- Static Route Using Interface Table354
- Ipv4355
- Ipv6356
- Memory Statistics356
- Core Daemon Memory Statistics Form357
  - Rip358
- OSPF Daemon Memory Statistics Form358
  - Ospf359
- RIP Menu358
- Network Table359
- OSPF Menu359
- Reach Table359
- Area Table360
- Net Table360
- Router Table360
- Summary Table361
- ASBR-Summary Table362
  - Bgp363
- BGP Menu363
- Neighbor Table363
- Next Hop Table364
- Route Table364
- BGP Neighbor Table365
34 Multicast Routing366
- Multicast Groups Configuration Table366
- Multicast Routing Menu366
- Static Menu366
- Static Multicast Routing Configuration Form366
- Multicast Groups Configuration Form367
- Outgoing Interfaces Table367
- Multicast Routing Status Form368
35 Firewall370
- Multicast Routing Status Table368
- Firewall Fundamentals370
  - Stateless Vs Stateful Firewalls370
  - Linux® Netfilter, Iptables, and the Firewall370
  - Network Address Translation370
  - Port Forwarding371
- Firewall Quick Setup371
- Firewall Terminology and Concepts372
  - Zones372
  - Interfaces372
  - Hosts373
  - Policy373
  - Masquerading and SNAT374
  - Rules375
- Configuring the Firewall and VPN376
  - Policy-Based Virtual Private Networking376
  - Virtual Private Networking to a DMZ377
- Firewall Configuration377
- Firewall Description Form377
  - Adding a Firewall378
  - Working with Firewall Configurations379
- Firewall Description Table377
- Security Menu377
- Firewall Configuration Form379
  - Zone Configuration380
- Zone Form380
  - Interface Configuration381
  - Host Configuration382
- Zone Table380
- Main Host Settings Form382
  - Policies383
- Main Host Settings Table382
- Main Policy Settings Form383
  - Network Address Translation384
- Main Policy Settings Table383
- Destination Zone Form384
- Net Address Translation Main Settings Table384
  - IP Masquerading385
- Source Zone Form384
- Fwmasq Table385
  - Rules386
- Net Address Translation Main Settings Form385
- Main Rule Settings Table386
- Net Address Translation Main Settings Form386
- Main Rule Settings Form387
- Destination Zone Form388
36 Traffic Control390
- Source Zone Form388
- Traffic Control Modes390
  - Traffic Control Basic (Basic-Configuration) Configuration Mode390
  - Traffic Control Advanced (Advanced-Configuration) Configuration Mode390
- Traffic Control Configuration392
  - Traffic Control Modes392
- Traffic Control Configuration Form392
- Traffic-Control Menu392
- Basic Traffic Control Interfaces Table393
- Enabling Basic-Configuration Mode393
- Interface to Apply Traffic Control Form394
- Basic Traffic Control Priorities Table395
- Enabling Advanced-Configuration Mode397
- Advanced Traffic Control Classes Table398
- TC Classes Form398
- Options Form400
- Advanced Traffic Control Interfaces Table401
- TC Devices Form402
- Advanced Traffic Control Rules Table403
- Tcrules Menu403
- Tcrules Form404
- Set Form406
- Modify Form407
- Restore Form407
- Save Form407
- Continue Form408
37 Vrrp409
- VRRP Fundamentals409
- VRRP Example410
  - VRRP Configuration411
  - Virtual Router Redundancy Protocol (VRRP) Form412
- VRRP Instance Form413
  - VRRP Status414
38 Link Failover416
- Configuring Link Failover416
- Path Failure Discovery416
- Using Routing Protocols and the Default Route416
- Appendices423
  - Upgrading Software424
- A.8. Upgrade Monitoring Form in Reboot-Pending Stage427
- A.9. Upgrade Monitoring Form Showing Successful Upgrade428

RuggedCom RUGGEDBACKBONE RX5000 - Page 389

Table of Contents

Other manuals for RuggedCom RUGGEDBACKBONE RX5000

Related product manuals