Ferimex E-4000 Manuale utente

Ferimex IT spol s r.o.

Výtvarná 8

Bratislava

[email protected]

www.ferimex.com

Traffic Manager

-4000

Traffic Manager -4000

Traffic manager is a multi function router, designed to cover the basic needs when buil-

ding wired or wireless, local or metropolitan networks. It's basic firewalling capabili-

ties and network address translations make it is easy to use for connecting a group of

computers to the internet. Class based traffic shaping allows to assign different custo-

mers different guaranteed bandwidths, but unused bandwidth could also be shared.

Quality of service could be achieved by classifying traffic not only by I addresses, but

also by application protocols or type of service field (TOS). Security could be impro-

ved by limiting access only to specific clients with assigned I addresses. The device

can be managed over serial port, or remotely by ssh or SNM . I traffic accounting

allows for measurement of transmitted data and could be used for charging by data

volume.

There are 3 models available:

W-2000 has 2 ethernet ports and 2 wireless ports that could be configured in fol-

lowing modes: A (access point), SA (station adapter) and WB (wireless bridge).

The second port is built in to be able to get the internet feed for wireless network.

W-1000 has 4 ethernet ports and one wireless port that could be used in SA and

AdHoc modes. It is suitable as a single wireless access device.

E-4000 has 4 ethernet ports. Except for wireless capabilities, all the other features

are same for all the models.

Device functions:

- router, bridge

- firewall (allowing/denying specific ports), masquerading (source NAT)

- tcp port redirector, bootp relay

- support for I aliases (multiple I addresses on one interface), static routing table

- limiting access to the device based on MAC address even on the ethernet port

- class based traffic shaping with guaranteed bandwith and unused bandwith sharing

- classifying traffic by I addresses, application ports and TOS field

- I traffic accounting

- management via SNM protocol or command line configuration (ssh, RS 232)

- firmware could be upgraded and configuration saved/restored via scp or tftp

- statistics, network diagnostics (ping, traceroute, iptraf, tcpdump)

- hardware watchdog for improved reliability

TRAFFIC MANAGER E-4000

First steps

Null modem serial cable

The device can be configured over standard null modem serial cable connected as fol-

lows:

9 pin female connector 9 pin female connector

pin 5 pin 5 (GND - GND)

pin 3 pin 2 (TX - RX)

pin 7 pin 8 (RTS - CTS)

pin 6 pin 4 (DSR - DTR)

pin 2 pin 3 (RX - TX)

pin 8 pin 7 (CTS - RTS)

pin 4 pin 6 (DTR - DSR)

Serial port setting

To configure the device via serial port, use the following parameter settings: 115200

bps, 8 data bits, no parity, 1 stop bit. To access a serial port in Microsoft Windows,

you can use program Hyperterminal (it is optional component available in accessori-

es/communication, check if it is installed). Configuration dialog looks like this:

TRAFFIC MANAGER E-4000

Front panel description

All the connectors and switches are mounted on the front panel.

- RS232 9pin M connector for connecting null modem serial cable

- ETH0-ETH3 RJ45 F ethernet connectors

- OWER power supply connector

Connecting the device to the ethernet

The device could be connected to the ethernet either through a hub (resp. switch) or

directly to the other computer (resp. traffic manager). When connecting to the

hub/switch, use a straight cable as follows:

8 pin RJ45 connector 8 pin RJ45 connector

pin 1 pin 1

pin 2 pin 2

pin 3 pin 3

pin 4 pin 4

pin 5 pin 5

pin 6 pin 6

pin 7 pin 7

pin 8 pin 8

When connecting directly to the other computer or traffic manager, use the crossed-

over cable with following pinout:

8 pin RJ45 connector 8 pin RJ45 connector

pin 1 pin 3

pin 2 pin 6

pin 3 pin 1

pin 4 pin 7

pin 5 pin 8

pin 6 pin 2

pin 7 pin 4

pin 8 pin 5

TRAFFIC MANAGER E-4000

Connecting to the mains supply

The device is power supplied with stabilised directed voltage of 5V. We recommend

using an uninterruptible power supply (U S).

First configuration

First configuration is usually done using a serial null-modem cable connected to the

serial port of a computer. The default ip address of first ethernet port (eth0) is

192.168.10.60, so you could also log in via ssh. Upon login the device will prompt for

a login and a password:

manager login: admin

password: admin

If you want to change the ip address, issue the following commands:

manager$ set eth0 ip 10.10.10.10/24

ipaddr: 10.10.10.10

netmask: 255.255.255.0

manager$ reload net

That sets the ip address and applies the settings. If the networing parameters are set

up correctly, you can access and configure the traffic manager via ssh on the new

address. All the configuration is done in command line.

Commands reference

help command

The help command shows available commands and their parameter syntax. With

argument, it shows more detailed description of the subsystem. Without arguments,

it gives this short overview of all the available commands:

show (if|wlan|eth|br)[:] # displays summary of all interfaces in given class

set|show <interface> [<ipparam>] # see help ip for more info

<args>

show ver[sion]

route add|del|show|print|flush

tem]

restart

passwd # changes current user's password

<interface>: eth0-9, wlan0-9, br0-9

How to interpret the help text:

- the pipe symbol „|“ represents choice of alternatives

TRAFFIC MANAGER E-4000

- arguments enclosed in angle brackets “< >” denote symbolic parameters, where spe-

cific value should be substituted

- arguments enclosed in square brackets “[ ]“ are optional. If used on a keyword, they

represent possible abbreviations

- arguments enclosed in round brackets “( )“ group the alternatives, or denote nume-

ric value of named parameter value.

- arguments enclosed in compound brackets “{}“ denote the default value

Example of abbreviation:

set cl[ass] <class> <classparam> <value>

means that both following forms are equivalent:

set cl <class> <classparam> <value>

set class <class> <classparam> <value>

or set|sh[ow] <interface>|class|snmp|hostname <args>

<interface>: eth0-9, br0-9

means you can use interface name or specific keyword after set or show:

show eth0 <args>

sh class <args>

This syntax

means, that help command could be optionally followed by one of the given keywords.

set command

The set command is used to set all the parameters. The first argument denotes the

subsystem whose parameters is going to be set or directly a parameter:

- eth0-3, br0-9 – the networking interfaces

- class – configuring class based traffic shaping

- snmp – configuring snmp parameters

- system – configuring system parameters (date, hostname etc)

The second and further arguments specify individual parameters and their values.

Syntax:

set frw|firewall <frwparam> [<value>]

set sys[tem] [host]name <hostname>

TRAFFIC MANAGER E-4000

Examples:

set eth0 access listed

set frw snat_ip1 10.10.1.0/24

set sys name gate

show command

The show command displays the current settings. It has analogous syntax to the set.

This commands displays the saved settings.

Syntax:

[<args>]

show (if|eth|br)[:] # displays summary of all interfaces in given

Examples:

manager$ show eth0

ip_addr: 242.225.10.1

netmask: 255.255.255.248

access: all(2)

verify: no(0)

or manager$ show eth0 access

access: listed(1)

add, del commands

Those commands create (delete) objects in specific subsystems. Their usage is docu-

mented with every subsystem. When add is used with array parameters, it uses the

parameter after the last one:

Example:

manager$ add frw snat_ip 1.1.1.1

snat_ip1: 1.1.1.1/32

manager$ add frw snat_ip 1.1.1.2

snat_ip2: 1.1.1.2/32

manager$ set frw snat_ip2 2.2.2.2

snat_ip2: 2.2.2.2/32

manager$ del frw snat_ip2

reload command

reload commands applies all the changes done by the set or route commands.

You can reload specific or all subsystems. More subsystems could be specified, sepa-

TRAFFIC MANAGER E-4000

rated by comma. Without arguments, the command reloads all the subsystem.

Syntax:

Example:

manager$ show eth0 ipaddr

ipaddr: 195.168.233.46

manager$ reload network

Important notice: Without executing the reload command, the changes will not be

effective.

reboot command

The reboot commands restarts the device similar to the hardware reset. It is required

for firmware downloads.

Syntax:

reboot

passwd command

The password command is used to change the login password. The command will

prompt the current one, and then ask the new password twice (for validation).

Example:

manager$ passwd

Changing password for admin

Old password:

nter the new password (minimum of 5, maximum of 8 characters)

Please use a combination of upper and lower case letters and numbers.

New password:

Re-enter new password:

Password changed.

Remarks:

When prompted for „Old password“, „New password“ and „Re-enter new password“

input is not shown on the console (not even stars).

Default password is „admin“ and it is recommended to change it after login.

Setting IP addresses and netmasks

Setting the I addresses and netmask is done via following set commands:

TRAFFIC MANAGER E-4000

set <interface> ip <ip_addr>/<netmask>

set <interface> ipa[ddr] <ip_addr>

set <interface> netmask|nm <netmask>

set <interface> access all(2)|listed(1)|none(0)

set <interface> verify yes(1)|no(0)

show (if|eth|br)[:] # lists interfaces with configured IP address

add <interface>

del <interface>

- <interface> denotes a networking interface, e.g. eth0, br0-9

- <ip_addr> represents I address of the interface in decimal dotted notation,e.g.

195.168.233.65

- <netmask> I network mask, given either on of the following formats:

1. decimal dotted notation, e.g.: 255.255.255.252

2. abbreviated form, representing number of 1’s in binary representation:

255.255.255.252=11111111.11111111.11111111.11111100

thus, number of 1’s is 30

Example:

set eth0 ip 195.168.233.65/255.255.255.252

or abbreviated form:

set eth0 ip 195.168.233.65/30

1’s 32 30 29 28 27 26 25 24

Mask 255 252 248 240 224 192 128 0

set <if> access - none – no access is allowed

- all – no access restrictions

- listed – allow only stations that correspond to enabled classes

with their MAC address defined. On ethernet interfaces the

restriction is implemented in software, thus only communicati-

on with the Traffic Manager is restricted, communication bet-

ween stations on the segment is not influenced.

verify <boolean> - 0|no|false|off – no verification of valid I addresses is done

- 1|yes|true|on – allows communication only with stations that

correspond to classes with defined MAC and I address. class

enable is taken into account only if access=listed.

Changes are applied only after executing the command:

reload net[work]

TRAFFIC MANAGER E-4000

Changes to access/verify parameters are applied only after executing the command:

reload ac[cess]

To show the interface settings use the command:

show <interface>

Example:

manager$ show eth0

ipaddr: 195.168.233.65

netmask: 255.255.255.252

access: all(2)

verify: no(0)

Working with multiple IP address for an interface

Every interface could have more than one I address defined. The additional addres-

ses are called aliases. Every alias is represented with notation <interface>:<aliasnum>.

To set an alias on eth0, simply issue the following command:

set eth0:1 ip 241.100.10.1/30

reload net

Note, that aliases could not overlap, i.e. each alias has to be in its own network.

To delete the alias, use the del command, e.g.:

del eth0:1

To display the current settings use:

manager$ show eth0:1

ipaddr: 141.100.10.1

netmask: 255.255.255.252

Note: access and verify parameters are not displayed or accepted, because they are

relevant only to the main interface.

To list ip parameters of all interfaces, use the command:

sh[ow] if

To list ip parameters for a specific type of interfaces, use the command:

sh[ow] eth|br (note missing interface number)

TRAFFIC MANAGER E-4000

Indice

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza