Network
The Network view provides access to the devices, connections and available configurations in the network.
Overview
Connections
The Connections view allows you configure various connection interfaces to use in your device.
Routes
Static routes are useful if you have several networks accessible from your router and you want to correctly route packets between them.
Firewall
The firewall lets you filter traffic, set up port forwarding or expose particular services to the outside world.
Quality Of Service
The Quality Of Service view allows you to configure parameters for Quality of Service through applying groups of classes to interfaces.
MultiWAN
The MultiWAN view allows you to create and configure WAN traffic divisions for load balancing and failover and applying traffic rules.
Devices
The Devices view allows you to configure settings for various network types.
Overview
Network Devices
The Network Devices view shows you a list of devices that are used to access the network.
Ethernet
In the Ethernet Ports view, you can define parameters for the LAN ports and select which, if any port should be UPLINK.
Network Devices
The Network Devices view shows you a list of devices that are used to access the network.
Configuration
Device Status
The status of a device is indicated by the color of the icon.
| Color | Status |
|---|---|
| Green | Enabled and active |
| Black | Enabled, not active |
Note: These are the default colors. Your operator may use a different coloring scheme.
Ethernet
In the Ethernet Ports view, you can define parameters for the LAN ports and select which, if any port should be UPLINK.
Ethernet Ports
The Ethernet Portss view shows a list of selectable ports.
Configuration
When a particular port is selected, details about it is shown in the configuration section.
Properties for unspecifed/untagged VLAN
| Section | Description | Comment |
|---|---|---|
| Port Speed | Configuration of transmission speed, duplex setting and auto-negotiation. | Available values depend on port capacity. |
| Pause Frame | Enable Pause Frame for flow control. |
Port Speed Examples
In the Port Speed dropdown, you can select a combination of duplex setting and auto-negotiation settings for the interface.
For example:
| Option | Description |
|---|---|
| Full auto-negotiation | Applies to both auto-negotiation and duplex setting. |
| Max 100Mb auto-negotiation, full duplex. | |
| Max 100Mb auto-negotiation, half duplex. | |
| Max 10Mb auto-negotiation, full duplex. | |
| Max 10Mb auto-negotiation, half duplex. | |
| Only 100Mb, full duplex. | |
| Only 100Mb, half duplex. | |
| Only 10Mb, full duplex. | |
| Only 10Mb, half duplex. | |
| Disabled | Interface is disabled. |
Uplink
The Uplink section view allows you to select which interface to use as uplink for the device.
Configuration
| Section | Description |
|---|---|
| Uplink Port | Port to use as uplink for the device. |
Note: Selecting None will disable uplink traffic.
VLAN
The VLAN view allows you to configure VLAN devices.
Configuration
At the top of the page is a list of selectable devices.
When a particular device is selected, details about it is shown in the configuration section. The exact options depend on type.
Properties for unspecifed/untagged VLAN
Properties for specifed/tagged VLAN
Connections
The Connections view allows you configure various connection interfaces to use in your device.
View
This view allows to configure IP addresses used in your home network. In case DHCP is used, your router automatically assignes an IP address to devices connected to the network.
The page contains a list of interfaces, with one widget for each interface.
Connection Buttons
Connect
To turn a connection on:
- Select the connection you are interested in
- Click Connect button
Disconnect
To turn a connection off:
- Select the connection you are interested in
- Click Disconnect button
Edit
To change the settings for a connection:
- Select the connection you are interested in
- Click Edit button
The connection editor is shown below the connection list.
Connection Editor
You can view, manage and configure the settings for interfaces from the connections page.
Main Buttons
Delete
To change the settings for a connection:
- Select the connection you are interested in
- Click Edit button
Add
To add new connection interface:
- Select the connection you are interested in
- Click Edit button
The new interface dialog is shown.
Create Connection Wizard
The Create New Network Interface wizard allows you to create a new interface according to your needs through a number of dialogs.
Create Connection Wizard
The Create New Network Interface wizard allows you to create a new interface according to your needs through a number of dialogs.
Create Connection
The dialog is a wizard where you add information in several steps.
The number of steps and their contents varies depending on the type of interface you create.
Note: As a last step you finalize the setup, but you can further edit the settings from the connections page.
Connection Types
In the first step, you can choose the type of interface: Uplink, Downlink, or Unmanaged.
Depending on your choice in the first step, different options become available.
Uplink
An uplink interface type is an interface to services.
Interfaces
Point-to-Point Protocol over Ethernet
A Point-to-Point Protocol over Ethernet connection uses PPPoE to establish the network.
Point-to-Point Protocol over ATM
A Point-to-Point Protocol over ATM connection uses PPPoA to establish the network.
Dual-Stack Lite
A Dual-Stack Lite connection uses DS-Lite through an Address Family Transition Router to establish the network.
Point-to-Point Protocol over L2TP
A Point-to-Point Protocol over L2TP connection uses PPP and L2TP server to establish the network.
WWAN (LTE/HSPA+)
Overview
WWAN
A Wireless Wide Area Network (WWAN), is a wireless network that extends over a large geographical distance.
HSPA / HSPA+
High Speed Packet Access (HSPA) is an extension of 3G mobile networks utilizing WCDMA.
Evolved High Speed Packet Access (HSPA+) is a furhter improvement on HSPA allowing for higher speeds.
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
DHCP v4
An DHCP v4 connection uses an IPv4 address provided by a DHCP server.
Overview
IPv4
Internet Protocol Version 4 - IPv4 - is the first major version of the Internet Protocol.
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol, adapter and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Interface Type | Select interface protocol type. |
| Ethernet Adapter | Base Device to create interface for. |
| Add network to a firewall zone | Connects interface to firewall zone. |
DHCP v6 (Uplink)
An DHCP v6 connection uses an IPv6 address provided by a DHCP server.
Overview
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol, adapter and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Interface Type | Select interface protocol type. |
| Ethernet Adapter | Base Device to create interface for. |
| Add network to a firewall zone | Connects interface to firewall zone. |
Point-to-Point Protocol
A Point-to-Point Protocol connection uses PPP to establish the network.
Overview
PPP
Point-to-Point Protocol (PPP) is a protocol for providing a direct data link connection with authentication, encryption and compression.
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
Point-to-Point Protocol over Ethernet
A Point-to-Point Protocol over Ethernet connection uses PPPoE to establish the network.
Overview
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Ethernet Adapter | Base Device to create interface for. |
| Add network to a firewall zone | Connects interface to firewall zone. |
Point-to-Point Protocol over ATM
A Point-to-Point Protocol over ATM connection uses PPPoA to establish the network.
Overview
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Ethernet Adapter | Base Device to create interface for. |
| Add network to a firewall zone | Connects interface to firewall zone. |
3G
Overview
3G
Third-generation wireless telephone technology (3G), is a cellular network for digital mobile data communication for broadband traffic.
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
Point-to-point Tunnel
Overview
Point-to-Point Tunneling Protocol
Point-to-Point Tunneling Protocol (PTPT) is a technology for virtual private networks through TCP and a GRE with PPP packets.
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
IPv6 Tunnel in IPv4
A IPv6 Tunnel in IPv4 connection uses IPv4 to transmit IPv6 traffic.
Overview
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
IPv6 Tunnel to IPv4
A IPv6 Tunnel to IPv4 connection uses IPv4 to transmit IPv6 traffic.
Overview
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
IPv6 rapid deployment
A IPv6 rapid deployment interface for IPv4 infrastructures.
Overview
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
Dual-Stack Lite
A Dual-Stack Lite connection uses DS-Lite through an Address Family Transition Router to establish the network.
Overview
DS-Lite
Dual-Stack Lite (DS-Lite) is a method for sharing of IPv4 addresses by combining IPv4-in-IPv6 and NAT.
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
Point-to-Point Protocol over L2TP
A Point-to-Point Protocol over L2TP connection uses PPP and L2TP server to establish the network.
Overview
PPP
Point-to-Point Protocol (PPP) is a protocol for providing a direct data link connection with authentication, encryption and compression.
L2TP
Layer 2 Tunneling Protocol (L2TP) is a protocol used to support VPNs, where security is provided in the transmitted packages rather than in the tunneling.
Wizard
Step 1
In the first step you select basic settings for the interface.
| Item | Description |
|---|---|
| Interface Name | Name for the interface. |
| Interface Type | Select interface protocol type. |
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description |
|---|---|
| Protocol | Select protocol. |
| Add network to a firewall zone | Connects interface to firewall zone. |
Downlink
A Downlink interface is an interface to subscribers/clients.
Finalize
In the final step you select protocol and firewall settings for the interface.
| Item | Description | Applies to |
|---|---|---|
| Interface Type | Select interface type (Standalone / Anywan / Bridge). | |
| Physical Device | Device(s) to use for the connection. | |
| Add network to a firewall zone | Connects interface to firewall zone. |
Physical Device
For Standalone, you need to select the base device to use for the connection.
For Anywan and Bridge, you need to add a physical device to use for the connection.
| Item | Description | Applies to |
|---|---|---|
| Ethernet Adapter | Selector for base device to use for the connection. | Standalone |
| Add Device | Dialog to select network device to use for the connection. | Anywan / Bridge |
Ethernet Adapter
- Select a base device from the dropdown menu.
Add Device
- Click Add
The Select Network Device dialog is shown.
- Select a network device from the dropdown menu
Unmanaged
The interface protocol type Unmanaged means that the connection has no defined protocol.
Step 1
In the first step you select basic settings for the interface.
Configuration
| Item | Description |
|---|---|
| Interface Type | Select interface type. |
| Add/Remove Devices | Select interface protocol type. |
- Select Interface Type
- Add as many devices as needed
Add Device
- Click Add
The Add Device dialog is shown.
- Select a network device from the dropdown menu
- Click OK
Finalize
- Click OK again
- Click Apply
Connection Editor
You can view, manage and configure the settings for interfaces from the connections page.
Edit Connections
To edit a connection:
- Click Edit button
The Connection Section is displayed at the bottom of the page.
The connection section consists of a number of tabs, showing details the connection.
Depending on connection type the tabs will be different, but the standard tabs are General, Physical Settings, and Advanced.
Additional tabs become visible as they are needed.
Default Connections
Connection Types
Point-to-Point Protocol over Ethernet
A Point-to-Point Protocol over Ethernet connection uses PPPoE to establish the network.
Point-to-Point Protocol over ATM
A Point-to-Point Protocol over ATM connection uses PPPoA to establish the network.
IPv6 rapid deployment
A IPv6 rapid deployment interface for IPv4 infrastructures.
Edit (ade:network:connections:6rd:start)
Dual-Stack Lite
A Dual-Stack Lite connection uses DS-Lite through an Address Family Transition Router to establish the network.
Point-to-Point Protocol over L2TP
A Point-to-Point Protocol over L2TP connection uses PPP and L2TP server to establish the network.
LAN
The default LAN connection is a DHCP v4 connection using a static IPv4 address.
Overview
IPv4
Internet Protocol Version 4 - IPv4 - is the first major version of the Internet Protocol.
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
Protocol
The protocol section contains detailed settings for the connection.
IPv4
The IPv4 section contains IP configuration.
| Item | Description |
|---|---|
| IPv4 Address | Device DHCP address |
| IPv4 Subnet Mask | IPv4 Subnet Mask |
| IPv4 Broadcast Mask | IPv4 Broadcast Mask |
IPv6
The IPv6 section contains IP configuration.
| Item | Description | Comment |
|---|---|---|
| IPv6 Assignment Length | Number betwen 48 and 64. |
|
| IPv6 Assigned Prefix Hint | Hexadecimal number between 1 and FFFF |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Interface type | The connection interface type. |
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
Add/Remove custom DNS Servers
These DNS entries will be applied on the interface
You can add as many custom DNS servers as you like, but they must be unique.
Note: These custom DNS entries only affect the interface where they are added.
To add a custom DNS server:
- Click the
add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the
delete button next to the item to delete
- Click Save
DHCP
The DHCP tab allows you to enable and use a specific DHCP server for the connection.
View
| Item | Description |
|---|---|
| DHCP Server | Turn DHCP Server on or off. |
| DHCP Pool Start | Start IP number for the DHCP Pool start number IP address |
| DHCP Pool Size | Number of IP addresses in the DHCP Pool |
| DHCP Lease Time | DHCP Lease Time for the LAN. |
Additional Sections
To view more details for a section, click the expand button.
Static DHCP
The Static DHCP section lets you configure IP address DHCP Leases for connected devices.
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description | |
|---|---|---|
| DHCP options | DHCP option ID:s to apply. | |
| Dynamic DHCP | Dynamically allocate client addresses. | If disabled, only configured static clients are served. |
| Force | Forces DHCP serving on the specified interface even if another DHCP server is detected on the same network segment. |
Add DHCP Option
To add DHCP option as needed:
- Click the Add option button
- Select the ID value
- Enter Option value
- Click Apply
Static DHCP
The Static DHCP section lets you configure IP address DHCP Leases for connected devices.
Configuration
| Item | Description | |
|---|---|---|
 | Add a device to the static DHCP list | |
| Device Name | Hostname for IPv4 | |
| MAC Address | Client MAC Address. | |
| IP Address | IP address for IPv4 | |
| DUID | DUID for IPv6 | |
| Host ID | Host ID for IPv6 | |
| Tag | Tag with further DHCP Options as configured in the DHCP/DNS tags settings. |
Add Static DHCP Lease
To add a static DHCP lease:
- Add an existing client or create a lease from scratch:
- To select an existing client:
- Select the desired client
- Click the add button
- To add a static DHCP lease manually:
- Only click the add button
The information for existing client is added automatically.
- Add or edit the client information as neeed.
- Click Save
WAN
The default WAN connection uses an IPv4 address provided by a DHCP server.
Overview
IPv4
Internet Protocol Version 4 - IPv4 - is the first major version of the Internet Protocol.
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Hostname | Hostname to use for DHCP requests. |
| Create default route | Automatically generated routing information. |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Interface type | The connection interface type. |
| Add/Remove Devices | Devices to associate with the connection. |
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use broadcast flag | Add broadcast flag to traffic. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
DHCP Options
| Item | Description |
|---|---|
| Additional DHCP options to request from the server | DHCP option ID:s for additional options. |
| Client ID to send when requesting DHCP | Custom ID to use for DHCP requests. |
| Vendor Class to send when requesting DHCP | Use for device-specific DHCP options. |
WAN6
The default WAN6 connection is a IPv6 address provided by a DHCP server.
Overview
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Request IPv6 Address | Try / Force / None |
| Request Prefix Length | 48 / 52 / 56 / 60 / 64 / Auto / Disabled |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Interface type | The connection interface type. |
| Add/Remove Devices | Devices to associate with the connection. |
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
DHCP Options
| Item | Description |
|---|---|
| Custom delegated IPv6-prefix | Prefix for prefix delegation. |
| Client ID to send when requesting DHCP | Custom ID to use for DHCP requests. |
Unmanaged
An unmanaged connection has no predefined protocol for the connection.
Overview
Unmanaged
The interface protocol type Unmanaged means that the connection has no defined protocol.
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Bridge Devices
The bridge devices section lets you add or remove bridged devices to the connection.
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
Static Address
A static address uses a fixed IP address for the connection.
Overview
Static address
A static IP address is an address that doesn't change, unless manually changed by the administrator.
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
Protocol
The protocol section contains detailed settings for the connection.
IPv4
The IPv4 section contains IP configuration.
| Item | Description |
|---|---|
| IPv4 Address | Device DHCP address |
| IPv4 Subnet Mask | IPv4 Subnet Mask |
| IPv4 Broadcast Mask | IPv4 Broadcast Mask |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
IPv6
The IPv6 section contains IP configuration.
| Item | Description | Comment |
|---|---|---|
| IPv6 Assignment Length | Number betwen 48 and 64. |
|
| IPv6 Assigned Prefix Hint | Hexadecimal number between 1 and FFFF |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Interface type | The connection interface type. |
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
DHCP
The DHCP tab allows you to enable and use a specific DHCP server for the connection.
Basic
| Item | Description |
|---|---|
| DHCP Server | Turn DHCP Server on or off. |
| DHCP Pool Start | Start IP number for the DHCP Pool start number IP address |
| DHCP Pool Size | Number of IP addresses in the DHCP Pool |
| DHCP Lease Time | DHCP Lease Time for the LAN. |
| Static DHCP | Reserve an IP address DHCP Lease for a connected device. |
Advanced
IPv6
DHCP v4
An DHCP v4 connection uses an IPv4 address provided by a DHCP server.
Overview
IPv4
Internet Protocol Version 4 - IPv4 - is the first major version of the Internet Protocol.
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Hostname | Hostname to use for DHCP requests. |
| Create default route | Automatically generated routing information. |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Interface type | The connection interface type. |
| Add/Remove Devices | Devices to associate with the connection. |
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use broadcast flag | Add broadcast flag to traffic. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
DHCP Options
| Item | Description |
|---|---|
| Additional DHCP options to request from the server | DHCP option ID:s for additional options. |
| Client ID to send when requesting DHCP | Custom ID to use for DHCP requests. |
| Vendor Class to send when requesting DHCP | Use for device-specific DHCP options. |
DHCP v6
An DHCP v6 connection uses an IPv6 address provided by a DHCP server.
Overview
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Request IPv6 Address | Try / Force / None |
| Request Prefix Length | 48 / 52 / 56 / 60 / 64 / Auto / Disabled |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Interface type | The connection interface type. |
| Add/Remove Devices | Devices to associate with the connection. |
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
DHCP Options
| Item | Description |
|---|---|
| Custom delegated IPv6-prefix | Prefix for prefix delegation. |
| Client ID to send when requesting DHCP | Custom ID to use for DHCP requests. |
Point-to-Point Protocol
A Point-to-Point Protocol connection uses PPP to establish the network.
Overview
PPP
Point-to-Point Protocol (PPP) is a protocol for providing a direct data link connection with authentication, encryption and compression.
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Hostname | Hostname to use for DHCP requests. |
| Create default route | Automatically generated routing information. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Enable IPv6 on the PPP link | Enables IPv6 connection from the provider. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
LCP Options
The LCP options section contains LCP configuration.
| Item | Description | Comment |
|---|---|---|
| LCP echo failure threshold | Number of echo failures before peer is considered dead. | Use 0 to ignore failures. |
| LCP echo interval | How often to send echo-requests. | Used together with failure threshold. |
| Inactivity timeout | Time until inactive connection is closed. | Use 0 to persist connection. |
Point-to-Point Protocol over Ethernet
A Point-to-Point Protocol over Ethernet connection uses PPPoE to establish the network.
Overview
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Enable IPv6 on the PPP link | Enables IPv6 connection from the provider. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
LCP Options
The LCP options section contains LCP configuration.
| Item | Description | Comment |
|---|---|---|
| LCP echo failure threshold | Number of echo failures before peer is considered dead. | Use 0 to ignore failures. |
| LCP echo interval | How often to send echo-requests. | Used together with failure threshold. |
| Inactivity timeout | Time until inactive connection is closed. | Use 0 to persist connection. |
Point-to-Point Protocol over ATM
A Point-to-Point Protocol over ATM connection uses PPPoA to establish the network.
Overview
Overview
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Hostname | Hostname to use for DHCP requests. |
| Create default route | Automatically generated routing information. |
Physical Settings
The physical settings tab contains settings for hardware management and devices for the connection.
Configuration
| Section | Description |
|---|---|
| Ethernet Adapter | Selector for base device to use for the connection. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Enable IPv6 on the PPP link | Enables IPv6 connection from the provider. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
LCP Options
The LCP options section contains LCP configuration.
| Item | Description | Comment |
|---|---|---|
| LCP echo failure threshold | Number of echo failures before peer is considered dead. | Use 0 to ignore failures. |
| LCP echo interval | How often to send echo-requests. | Used together with failure threshold. |
| Inactivity timeout | Time until inactive connection is closed. | Use 0 to persist connection. |
3G
Overview
3G
Third-generation wireless telephone technology (3G), is a cellular network for digital mobile data communication for broadband traffic.
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Modem device | Modem to use for 3G traffic. |
| Service Type | Both UMTS and GPRS / Only UMTS / Only GPRS. |
| APN | Access Point Name. |
| PIN-Code | PIN code for identification. |
| PAP/CHAP Username | For authentication with PAP or CHAP. |
| PAP/CHAP Password | For authentication with PAP or CHAP. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Enable IPv6 on the PPP link | Enables IPv6 connection from the provider. |
| Use default gateway | Use default route. |
| Modem Init timeout | Use DHCP DNS server. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
LCP Options
The LCP options section contains LCP configuration.
| Item | Description | Comment |
|---|---|---|
| LCP echo failure threshold | Number of echo failures before peer is considered dead. | Use 0 to ignore failures. |
| LCP echo interval | How often to send echo-requests. | Used together with failure threshold. |
| Inactivity timeout | Time until inactive connection is closed. | Use 0 to persist connection. |
WWAN (LTE/HSPA+)
Overview
WWAN
A Wireless Wide Area Network (WWAN), is a wireless network that extends over a large geographical distance.
HSPA / HSPA+
High Speed Packet Access (HSPA) is an extension of 3G mobile networks utilizing WCDMA.
Evolved High Speed Packet Access (HSPA+) is a furhter improvement on HSPA allowing for higher speeds.
Overview
General
The general tab contains status information and settings relating to the protocol.
Status
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device in use. |
| Protocol | Protocol in use. |
Configuration
| Item | Description |
|---|---|
| Protocol | Protocol in use. |
| Modem device | Modem to use for WWAN traffic. |
| APN | Access Point Name. |
| PIN-Code | PIN code for identification. |
| Authentication type | PAP / CHAP / Both / None . |
| Username | For authentication with PAP or CHAP. |
| Password | For authentication with PAP or CHAP. |
| Modes | Comma-separated list of allowed network modes (all / lte / umts / gsm / cdma / td-scdma). |
| Delay | Seconds to wait before trying to interact with the modem. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
4G
Overview
4G
Fourth-generation wireless telephone technology (4G), is a cellular network for digital mobile data communication for high-speed broadband.
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Modem device | Modem to use for 4G traffic. |
| APN | Access Point Name. |
| PIN-Code | PIN code for identification. |
| PAP/CHAP Username | For authentication with PAP or CHAP. |
| PAP/CHAP Password | For authentication with PAP or CHAP. |
| Hostname to send when requesting DHCP | Hostname to include in DHCP requests. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use broadcast flag | Add broadcast flag to traffic. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
DHCP Options
| Item | Description | Comment |
|---|---|---|
| Client ID to send when requesting DHCP | Custom ID to use for DHCP requests. | |
| Vendor Class to send when requesting DHCP | Use for device-specific DHCP options. |
Point-to-point Tunnel
Overview
Point-to-Point Tunneling Protocol
Point-to-Point Tunneling Protocol (PTPT) is a technology for virtual private networks through TCP and a GRE with PPP packets.
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| VPN Server | Virtual Private Network server. |
| PAP/CHAP Username | For authentication with PAP or CHAP. |
| PAP/CHAP Password | For authentication with PAP or CHAP. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Enable IPv6 on the PPP link | Enables IPv6 connection from the provider. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
LCP Options
The LCP options section contains LCP configuration.
| Item | Description | Comment |
|---|---|---|
| LCP echo failure threshold | Number of echo failures before peer is considered dead. | Use 0 to ignore failures. |
| LCP echo interval | How often to send echo-requests. | Used together with failure threshold. |
| Inactivity timeout | Time until inactive connection is closed. | Use 0 to persist connection. |
IPv6 Tunnel in IPv4
A IPv6 Tunnel in IPv4 connection uses IPv4 to transmit IPv6 traffic.
Overview
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Local IPv4 address | IPv4 address to use instead of WAN address. |
| Remote IPv4 address | Address to use tunnel broker Point of Presence |
| Local IPv6 address | Endpoint provided by the tunnel broker. |
| IPv6 routed prefix | Prefix to be used by clients. |
| Dynamic tunnel | Dynamic update of endpoint. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use default gateway | Use default route. |
| Use TTL on tunnnel interface | Data Time To Live. |
IPv6 Tunnel to IPv4
A IPv6 Tunnel to IPv4 connection uses IPv4 to transmit IPv6 traffic.
Overview
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Local IPv4 address | IPv4 address to use instead of WAN address. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use default gateway | Use default route. |
| Use TTL on tunnnel interface | Data Time To Live. |
IPv6 rapid deployment
A IPv6 rapid deployment interface for IPv4 infrastructures.
Edit (ade:network:connections:6rd:start)
Overview
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| Local IPv4 address | IPv4 address to use instead of WAN address. |
| Remote IPv4 address | Address to the relay. |
| IPv6 prefix | Prefix assigned to provider. |
| IPv6 prefix length | no or 48 to 64 |
| IPv4 prefix length | Up to 43 bits. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Use default gateway | Use default route. |
| Use TTL on tunnnel interface | Data Time To Live. |
Dual-Stack Lite
A Dual-Stack Lite connection uses DS-Lite through an Address Family Transition Router to establish the network.
Overview
DS-Lite
Dual-Stack Lite (DS-Lite) is a method for sharing of IPv4 addresses by combining IPv4-in-IPv6 and NAT.
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| DS-Lite AFTR address | Address to Address Family Transition Router. |
| Local IPv6 address | IPv6 address to use instead of WAN address. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Tunnel Link | Connection to use as tunnel link. |
| Use TTL on tunnnel interface | Data Time To Live. |
Point-to-Point Protocol over L2TP
A Point-to-Point Protocol over L2TP connection uses PPP and L2TP server to establish the network.
Overview
PPP
Point-to-Point Protocol (PPP) is a protocol for providing a direct data link connection with authentication, encryption and compression.
L2TP
Layer 2 Tunneling Protocol (L2TP) is a protocol used to support VPNs, where security is provided in the transmitted packages rather than in the tunneling.
Overview
General
The general tab contains status information and settings relating to the protocol.
Configuration
| Item | Description |
|---|---|
| Status | Connection status. |
| Device | Device for the connection. |
| Protocol | Protocol in use. |
| L2TP Server | Address to Layer 2 Tunneling Protoco server. |
| PAP/CHAP Username | For authentication with PAP or CHAP. |
| PAP/CHAP Password | For authentication with PAP or CHAP. |
Advanced
The advanced tab contains settings for management of advanced features for the connection.
Configuration
| Item | Description |
|---|---|
| Bring up on boot | Start the connection when device starts. |
| Use gateway metric | Gateway metric to use. |
| Override MAC address | Enforced MAC address to use. |
| Override MTU | MTU size to use. |
| Enable IPv6 on the PPP link | Enables IPv6 connection from the provider. |
| Use default gateway | Use default route. |
| Use DNS servers advertised by peer | Use DHCP DNS server. |
Add/Remove custom DNS Servers
You can add as many custom DNS servers as you like, but they must be unique.
To add a custom DNS server:
- Click the add button
- Add the IP numbers to the DNS server
- Click Save
To remove a custom DNS server:
- Click the delete button next to the item to delete
- Click Save
Routes
Static routes are useful if you have several networks accessible from your router and you want to correctly route packets between them.
Overview
Add Static Route
To add a static route:
- Click the add button
- Enter information for the route fields.
- Click Apply
IPv4 Routes
The IPv4 section lets you add static routes for IPv4 .
Configuration
| Item | Description | |
|---|---|---|
| Interface | Affected connection for the route. | |
| Target | Destination IP address. | |
| Netmask | Applicable netmask. | |
| Gateway | IP address to the internet gateway. | |
| Metric | Route metric. | |
| MTU | MTU size to use. | |
| Delete | Remove route. |
IPv6 Routes
The IPv6 section lets you add static routes for IPv6 .
Configuration
| Item | Description | |
|---|---|---|
| Interface | Affected connection for the route. | |
| Target | Destination IP address. | |
| Gateway | IP address to the internet gateway. | |
| Metric | Route metric. | |
| MTU | MTU size to use. | |
| Delete | Remove route. |
Firewall
The firewall lets you filter traffic, set up port forwarding or expose particular services to the outside world.
Overview
Forwarding
Port Forwarding allows remote computers to connect to a specific device within your private network.
DMZ / Exposed Host
A local network device can be made an Exposed Host. It is placed in the DMZ outside of the firewall, which provides unrestricted Internet access to the network device.
General Settings
The general settings view allows you to turn the firewall on or off.
Firewall Settings
To enable the firewall:
- Click Enable Firewall
Zones
The Zones view lets you can configure firewall zones to group your firewall rules.
At the top of the page is a list of selectable zones.
By default this list contains the LAN and WAN zones, which contain default settings for local and Internet traffic.
When a particular interface is selected, details about it is shown in the configuration section.
Zone configuration
| Item | Description |
|---|---|
| Name | Identifier for the zone. |
| Default policy | Default behavior for various traffic. |
| Masquerading | Enable firewall masquerading. |
| MSS Clamping | MSS Clamping limit. |
| Allow forward to destination zones | Check zones to permit forwarding. |
| Allow forward from source zones | Check zones to permit forwarding. |
| Zone members | Interfaces that are part of the zone. |
Default Policy
The default policy setting defines firewall rules that apply unless specific rules override them.
| Item | Description |
|---|---|
| Input | Incoming traffic from WAN. |
| Output | Outgoing traffic to WAN. |
| Forward | Traffic from LAN to WAN. |
The different default policy values determine the firewall behavior, through the firewall actions:
Firewall Action
The firewall action defines how traffic is handled by the firewall.
| Item | Description |
|---|---|
| ACCEPT | Allow the traffic. |
| REJECT | Refuse the traffic. |
| DROP | Ignore the traffic. |
| FORWARD | Pass the traffic along. |
Add Firewall Zone
To add a firewall zone:
- Click the Add button
- Enter information in the fields
- Click Apply
Once the zone has been created, you can use it with your connections.
Add Zone Members
If you have networks/devices set up, you can add them to the zone.
To add a device as a zone member:
- Click the Add button
The Select network device dialog opens.
- Open the select network menu
- Select the device
- Click OK
- Click Apply
Rules
Firewall rules are more fine grained filtering rules for filtering your traffic.
View
The page shows the configured rules. Each rule can be modified by clicking the Edit button.
Once you have chosen to edit one rule, the edit view is shown consistently, and you can quickly switch between configured rules by selecting them in the list.
Configuration
When a particular interface is selected, details about it is shown in the configuration section.
General
| Item | Description | Comment |
|---|---|---|
| Enabled | Turn firewall rule on or off. | |
| Expose To | Users with access to the rule. | |
| Name | Identifier for the rule. |
Source / Destination
Where applicable, the configuration is divided into separate sections for source and destination zones.
Parameters
Add Firewall Rule
- Click the Add button
A new rule named new_rule is added at the bottom of the list.
- Click the Edit button for the new rule
- Enter properties as needed.
- Click OK
- Click Apply
Reorder Firewall Rules
The firewall rules are applied in order from top to bottom in the list.
You can rearrange the rules by using the buttons:
 | Move up | |
 | Move down |
Default Firewall Rules
A number of sample firewall rules are enabled by default, providing a basic set of filtering for the network.
| Rule | Purpose |
|---|---|
| Allow-Ping | Permit ping from WAN to device. |
| Allow-DHCP-Renew | Permit traffic from WAN to any zone. |
| Allow-IGMP | Permit IGMP traffic from WAN to IPv4 devices. |
| Allow-DHCPv6 | Permit IPV6 traffic from WAN to IPV6 device. |
| Allow-MLD | Permit MLD traffic over ICMP from WAN to IPV6 devices. |
| Allow-ICMPv6-Input | Permit ICMP traffic from WAN to IPV6 devices. |
| Allow-ICMPv6-Forward | Permit ICMP traffic from WAN to any zone. |
| Allow-IPsec/ESP | Permit IPsec over ESP traffic from WAN to LAN. |
| Allow-ISAKMP-Passthrough | Permit ISAKMP over UDP traffic from WAN to LAN. |
Forwarding
Port Forwarding allows remote computers to connect to a specific device within your private network.
Configuration
The forwarding list shows information about any configured port forwarding rules.
Overview
Add or Edit Port Mapping
The Add or Edit Port Mapping view allows you to add or change port mapping settings.
Add or Edit Port Mapping
The Add or Edit Port Mapping view allows you to add or change port mapping settings.
Configuration
| Item | Description | Comment |
|---|---|---|
| Rule Name | Rule name. | |
| Source Zone | Incoming zone. | |
| Destination Zone | Destination zone. | |
| Source IP Address | Source IP address (for filtering). | |
| Dst. Device | Client hostname. | |
| Dst. IP Address | Client IP address. | |
| Protocol | Mapping protocol | (UDP / TCP / TCP + UDP ). |
| Public port(s) | Public (external) port. | |
| Private port(s) | Private (client) port. | |
| NAT Loopback | Enable NAT Loopback |
Protocol
The protocol setting filters traffic by protocol for the port forward.
Port Mapping Settings
To map incoming connections:
- Click the add button to open the settings
The port mapping dialog lets you add configuration settings for the mapping.
Ports can be added one by one (80) or as ranges (21:22).
- Add information:
- Add a name as identification
- Add ports:
- Add public/incoming port(s)
- Add private/client port(s)
- Select protocol
- Click Save
- Click Close
Your information is saved and is visible in the mapping list.
DMZ / Exposed Host
A local network device can be made an Exposed Host. It is placed in the DMZ outside of the firewall, which provides unrestricted Internet access to the network device.
Configuration
| WAN IP Address | Public IPv4 and IPv6 address for the DMZ. |
| Host IPv4 Address | IPv4 of device to place in DMZ. |
| Host IPv6 Address | IPv6 of device to place in DMZ. |
| Select Existing Host | Dropmenu to select connected devices. |
Add Exposed Host
To allow DMZ/exposed host:
- Click Enable to enable an exposed host
- Enter the local IP address to expose
- Alternatively, click select existing host
Note: You should also configure the DMZ IP address as static DHCP address for your device.
Parental Control
Parental control is used to restrict access to the network for particular devices.
Internet Access Scheduling
Parental control is handled by setting schedules where access is restricted to explicitly named MAC addresses.
| Item | Description |
|---|---|
| Weekdays | List of days the filter applies. |
| Start Time | Time of day to start filtering. |
| Stop Time | Time of day to stop filtering. |
| Host Names | List of devices / MAC addresses. |
Overview
Add / Edit MAC Filter Scheduling
The Add / Edit MAC Filter Scheduling view allows you to add or change parental control rules.
Add / Edit MAC Filter Scheduling
The Add / Edit MAC Filter Scheduling view allows you to add or change parental control rules.
Configuration
| Item | Comment | Comment |
|---|---|---|
| Time Frame | Quick select for time predefined time periods. | Individual Days/Every Day/Every Workday/All Weekend |
| Item | Description |
|---|---|
| Weekdays | List of days the filter applies. |
| Start Time | Time of day to start filtering. |
| Stop Time | Time of day to stop filtering. |
| Mac List | Dropdown to select list of devices / MAC addresses to include in the rule. |
Start and Stop Times
The start time for a rule has to be lower than the end time.
If you want to have a rule that goes over midnight, you need to add two rules, one up until midnight, and one from midnight to when you want the rule to end.
For example:
Rule one: From 21:00 To 23:59
Rule two: From 00:00 To 06:00
A single rule of From 21:00 To 06:00 will not be saved.
Quality Of Service
The Quality Of Service view allows you to configure parameters for Quality of Service through applying groups of classes to interfaces.
Interface views
Interface
The interface tab lets you select interfaces and configure Quality of Service profiles for them.
Classification Group
The Classification Group tab lets you manage groupings of QoS classes.
classgroup blocks are used to define different class groupings. This is only really useful if you wish to have multiple interfaces with different class considerations, for example, you might want eth1 to have an ultrapriority class or something.
This is useful when you have multiple interfaces and want to manage classes differently for them.
Reclassify
The Reclassify tab lets you configure filtering parameters in order to redefine types of traffic to include in which Class.
Reclassification can override the class on a per packet basis without altering the defined classification .
Workflow
Workflow
In order to use Quality of Service on the traffic for your device, you need to perform a number of configurations.
1: Class
The classes define how network traffic is to be prioritized and allocated.
There are a number of predefined classes, but you can add your own.
2: Classify/Reclassify
In order to direct traffic to the correct classes, you need to define classificaton rules in the Classify tab.
Since the classification only affects connections that haven't already been classified you may also need to apply filters in the Reclassify tab.
3: Class Group
With the classes defined, you can add and order them in a class group in the Class Group tab.
If you have multiple interfaces, and want different QoS settings for them, you can create multiple class groups.
Workflow
In order to use Quality of Service on the traffic for your device, you need to perform a number of configurations.
Process
Configuration steps
The order of operations involved in configuring QoS is different from the order in which the interface displays the setting tabs. Not all settings are needed in all cases.
1: Class
The classes define how network traffic is to be prioritized and allocated.
There are a number of predefined classes, but you can add your own.
2: Classify/Reclassify
In order to direct traffic to the correct classes, you need to define classificaton rules in the Classify tab.
Since the classification only affects connections that haven't already been classified you may also need to apply filters in the Reclassify tab.
3: Class Group
With the classes defined, you can add and order them in a class group in the Class Group tab.
If you have multiple interfaces, and want different QoS settings for them, you can create multiple class groups.
1: Class
The classes define how network traffic is to be prioritized and allocated.
There are a number of predefined classes, but you can add your own.
Predefined Classes
Class
There are a number of predefined classes QoS classes. Each class is a set of definitions for a token bucket.
Default Settings
The predefined classes can be edited and all values changed, but they have default settings that should be suitable in normal cases.
Priority
The priority class is an upstream class for high priority traffic such as handshaking and ICMP packets.
Priority_down
The Priority_down class is an downstream class for high priority traffic.
Express
The Express class is for interactive applications that require bandwidth above standard services so that interactive apps run smoothly.
Normal
The Normal Class is the standard upstream class for all services.
This class will apply to all services not otherwise defined.
Normal_down
The Normal_down class is the standard downstream class for all services.
This class will apply to all services not otherwise defined.
Bulk
The bulk class is suitable for very low priority traffic. It will be allocated available bandwidth if other classes are idle. When other classes are active, it will be allocated bandwidth according to the priority setting.
It is suitable for transfer services such as (P2P and FTP).
Tab
Class
The class tab lets you manage QoS classes.
Overview
At the top of the page is a list of selectable classes.
When a particular class is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Priority | Bandwidth allocation limit (%). | |
| Average Rate | Average target rate (%). | |
| Limit Rate | Maximum allowed bandwidth (%). | |
| Packet Size | Size of packets (bytes). | See note. |
| Packet Delay | Target delay for packets (ms). | See note. |
| Max Size | Maximum size of packets (bytes). |
Note: Packet Size and Packet Delay rely on the Average Rate setting. The average rate is impacted by the maximum packet delay and the transfer time for the packet size. Generally the delay is lower for smaller packet sizes.
Configuration Values
Priority
The Priority indicates the bandwidth allocation limit as a percentage of total available bandwidth.
ls m2 = priority / sum (priority) * max_bandwidth
Limit Rate
The Limit Rate provides a maximum allowed bandwidth, expressed as a percentage of the total available bandwidth.
ul rate = limitrate * max_bandwidth / 100
Average Rate
The Average target rate is a percentage of the total available bandwidth.
Average rate for this class, value in % of bandwidth (this value uses for calculate vaues
'Nx' of 'tc … hfsc rt m1 N1 d N2 m2 N3'
Note: Packet Size and Packet Delay rely on the Average Rate setting. The average rate is impacted by the maximum packet delay and the transfer time for the packet size. Generally the delay is lower for smaller packet sizes.
Packet Size
Size of packets (bytes).
packetsize & packetdelay: (only works if avgrate is present)
rt d = max( packetdelay, 'time required for packetsize to transfer') ls d = rt d
Packet Delay
Target delay for packets (ms).
Max Size
The maximum size of packets indicates the maximum packet size in iptables.
2: Classify/Reclassify
In order to direct traffic to the correct classes, you need to define classificaton rules in the Classify tab.
Since the classification only affects connections that haven't already been classified you may also need to apply filters in the Reclassify tab.
Tabs
Classify
The classify tab lets you configure filtering parameters in order to define types of traffic to include in which Class.
Classification assigns a class to traffic in a connection, but only affect connections which have not been assigned a traffic class already.
Overview
At the top of the page is a list of selectable classification groups.
When a particular group is selected, details about it is shown in the configuration section.
Adding a parameter will filter out traffic according to the parameters and assign it to the group.
| Item | Description | Comment | |
|---|---|---|---|
| Target | Classification Group to assign. | As configured in classification group settings | |
| Protocol | Protocol affected. | All / UDP / TCP / ICMP | |
| Source Host | Originating host(s) to affect. | All / Specific host | |
| Destination Host | Receiving host(s) to affect. | All / Specific host | |
| Ports | Settings for ports filtering. | Port/Source/Destination/Port range | |
| Direction | Direction of traffic to be affected by the classificaton. | Both/In/Out | |
| Connbytes | Connection Bytes for when to start filtering. |
Ports Filtering
Reclassify
The Reclassify tab lets you configure filtering parameters in order to redefine types of traffic to include in which Class.
Reclassification can override the class on a per packet basis without altering the defined classification .
Overview
At the top of the page is a list of selectable classification groups.
When a particular group is selected, details about it is shown in the configuration section.
Adding a parameter will filter out traffic according to the parameters and assign it to the group.
| Item | Description | Comment | |
|---|---|---|---|
| Target | Classification Group to assign. | As configured in classification group settings | |
| Protocol | Protocol affected. | All / UDP / TCP / ICMP | |
| Source Host | Originating host(s) to affect. | All / Specific host | |
| Destination Host | Receiving host(s) to affect. | All / Specific host | |
| Ports | Settings for ports filtering. | Port/Source/Destination/Port range | |
| Direction | Direction of traffic to be affected by the classificaton. | Both/In/Out | |
| Connbytes | Connection Bytes for when to start filtering. | ||
| Precedence | Quality of service parameters relating for precedence. | ||
| Packet Size | Size of packets to match. | Minimum size From or From-To range. | |
| Mark | Hexadecimal mark code to att to the packets. (0x000000-0xFFFFFF) | ||
| TCP flags | TCP Flags to match. | SYN/ACK/FIN/RST/URG/PSH |
Ports Filtering
3: Class Group
With the classes defined, you can add and order them in a class group in the Class Group tab.
If you have multiple interfaces, and want different QoS settings for them, you can create multiple class groups.
Tab
Classification Group
The Classification Group tab lets you manage groupings of QoS classes.
classgroup blocks are used to define different class groupings. This is only really useful if you wish to have multiple interfaces with different class considerations, for example, you might want eth1 to have an ultrapriority class or something.
This is useful when you have multiple interfaces and want to manage classes differently for them.
Overview
At the top of the page is a list of selectable classification groups.
When a particular group is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Default Class | Class to use as fallback if packets don't match any other class. | |
| Classes | Classes to include in the group. | Note: You need to create a class for it to be available in the list. |
The Default Classgroup contains these standard classes: - Priority - Express - Normal - Bulk
4: Enable
As a final step, you enable QoS for the desired interface in the Interface tab.
Tab
Interface
The interface tab lets you select interfaces and configure Quality of Service profiles for them.
Overview
At the top of the page is a list of selectable interfaces.
When a particular interface is selected, details about it is shown in the configuration section.
| Item | Description | ||
|---|---|---|---|
| Enable QoS | Turn the Quality of Service on for the interface. | ||
| Classification Group | Classification group to use for the interface. | Note: You need to create the group for it to be available in the list. | |
| Calculate Overhead | Include overhead in the packet calculations for shaping and policing. | ||
| Limit Download Speed | Restrict the network speed to clients. | ||
| Limit Upload Speed | Restrict the network speed from clients. |
Class
The class tab lets you manage QoS classes.
Overview
At the top of the page is a list of selectable classes.
When a particular class is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Priority | Bandwidth allocation limit (%). | |
| Average Rate | Average target rate (%). | |
| Limit Rate | Maximum allowed bandwidth (%). | |
| Packet Size | Size of packets (bytes). | See note. |
| Packet Delay | Target delay for packets (ms). | See note. |
| Max Size | Maximum size of packets (bytes). |
Note: Packet Size and Packet Delay rely on the Average Rate setting. The average rate is impacted by the maximum packet delay and the transfer time for the packet size. Generally the delay is lower for smaller packet sizes.
Add Class
You can add as many classes as you like.
Add Class
To add a class:
- Click the Add button
- Enter a Name for the class
- Enter QoS values as needed.
- Click Apply
Class
There are a number of predefined classes QoS classes. Each class is a set of definitions for a token bucket.
Default Settings
The predefined classes can be edited and all values changed, but they have default settings that should be suitable in normal cases.
Priority
The priority class is an upstream class for high priority traffic such as handshaking and ICMP packets.
Priority_down
The Priority_down class is an downstream class for high priority traffic.
Express
The Express class is for interactive applications that require bandwidth above standard services so that interactive apps run smoothly.
Normal
The Normal Class is the standard upstream class for all services.
This class will apply to all services not otherwise defined.
Normal_down
The Normal_down class is the standard downstream class for all services.
This class will apply to all services not otherwise defined.
Bulk
The bulk class is suitable for very low priority traffic. It will be allocated available bandwidth if other classes are idle. When other classes are active, it will be allocated bandwidth according to the priority setting.
It is suitable for transfer services such as (P2P and FTP).
Interface
The interface tab lets you select interfaces and configure Quality of Service profiles for them.
Overview
At the top of the page is a list of selectable interfaces.
When a particular interface is selected, details about it is shown in the configuration section.
| Item | Description | ||
|---|---|---|---|
| Enable QoS | Turn the Quality of Service on for the interface. | ||
| Classification Group | Classification group to use for the interface. | Note: You need to create the group for it to be available in the list. | |
| Calculate Overhead | Include overhead in the packet calculations for shaping and policing. | ||
| Limit Download Speed | Restrict the network speed to clients. | ||
| Limit Upload Speed | Restrict the network speed from clients. |
Add Interface
You can add Interfaces as needed.
Add Interface
To add an interface:
- Click the Add button
The interface dialog opens.
- Select an Interface from the list
- Click OK
- Enable other settings as needed:
- Turn QoS on with the Enable QoS slider
- Select an available Classification Group
- Turn QoS on with the Limit Download Speed slider
- Enter a speed value (kbps)
- Turn QoS on with the Limit Upload Speed slider
- Enter a speed value (kbps)
- Click Apply
Classification Group
The Classification Group tab lets you manage groupings of QoS classes.
classgroup blocks are used to define different class groupings. This is only really useful if you wish to have multiple interfaces with different class considerations, for example, you might want eth1 to have an ultrapriority class or something.
This is useful when you have multiple interfaces and want to manage classes differently for them.
Overview
At the top of the page is a list of selectable classification groups.
When a particular group is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Default Class | Class to use as fallback if packets don't match any other class. | |
| Classes | Classes to include in the group. | Note: You need to create a class for it to be available in the list. |
The Default Classgroup contains these standard classes: - Priority - Express - Normal - Bulk
Add Classification Group
You can add Classification Groups as needed.
Add Classification Group
To add a class group:
- Click the Add button
- Enter a Name for the group
- Select Default group
- Add classes as needed:
- Click Add a new class
- Select the desired class from the list
- Click Apply
Classify
The classify tab lets you configure filtering parameters in order to define types of traffic to include in which Class.
Classification assigns a class to traffic in a connection, but only affect connections which have not been assigned a traffic class already.
Overview
At the top of the page is a list of selectable classification groups.
When a particular group is selected, details about it is shown in the configuration section.
Adding a parameter will filter out traffic according to the parameters and assign it to the group.
| Item | Description | Comment | |
|---|---|---|---|
| Target | Classification Group to assign. | As configured in classification group settings | |
| Protocol | Protocol affected. | All / UDP / TCP / ICMP | |
| Source Host | Originating host(s) to affect. | All / Specific host | |
| Destination Host | Receiving host(s) to affect. | All / Specific host | |
| Ports | Settings for ports filtering. | Port/Source/Destination/Port range | |
| Direction | Direction of traffic to be affected by the classificaton. | Both/In/Out | |
| Connbytes | Connection Bytes for when to start filtering. |
Ports Filtering
Add Classification Group
You can add Classification Filters as needed.
Add Filter
To add a filter:
- Click the Add button
- Select Classification group
- Enter QoS values as needed.
- Click Apply
Order
The filters are prioritized in order from top to bottom in the list.
Reorder
You can rearrange the classes by using the buttons:
| | Move up | |
| | Move down |
Reclassify
The Reclassify tab lets you configure filtering parameters in order to redefine types of traffic to include in which Class.
Reclassification can override the class on a per packet basis without altering the defined classification .
Overview
At the top of the page is a list of selectable classification groups.
When a particular group is selected, details about it is shown in the configuration section.
Adding a parameter will filter out traffic according to the parameters and assign it to the group.
| Item | Description | Comment | |
|---|---|---|---|
| Target | Classification Group to assign. | As configured in classification group settings | |
| Protocol | Protocol affected. | All / UDP / TCP / ICMP | |
| Source Host | Originating host(s) to affect. | All / Specific host | |
| Destination Host | Receiving host(s) to affect. | All / Specific host | |
| Ports | Settings for ports filtering. | Port/Source/Destination/Port range | |
| Direction | Direction of traffic to be affected by the classificaton. | Both/In/Out | |
| Connbytes | Connection Bytes for when to start filtering. | ||
| Precedence | Quality of service parameters relating for precedence. | ||
| Packet Size | Size of packets to match. | Minimum size From or From-To range. | |
| Mark | Hexadecimal mark code to att to the packets. (0x000000-0xFFFFFF) | ||
| TCP flags | TCP Flags to match. | SYN/ACK/FIN/RST/URG/PSH |
Ports Filtering
Order
The filters are prioritized in order from top to bottom in the list.
Reorder
You can rearrange the classes by using the buttons:
| | Move up | |
| | Move down |
Add Filter
You can add Reclasssify filters as needed.
Add Filter
To add a filter:
- Click the Add button
- Select Classification group
- Enter QoS values as needed.
- Click Apply
Add WAN
MultiWAN
The MultiWAN view allows you to create and configure WAN traffic divisions for load balancing and failover and applying traffic rules.
Introduction
Using the MultiWAN feature, you can enable up to 250 WAN interfaces to:
- Provide load balancing over multiple WAN interfaces based on a numeric weight assignment.
- Monitor connections using repeated ping tests and can automatically route outbound traffic to another WAN interface if the first WAN interface loses connectivity.
- Set rules to customize which outbound connections should use which WAN interface
- Customize rules based on various parameters such as IP:s, port(s) and protocol.
Why should I use mwan3?
If you have multiple internet connections, you want to control which traffic goes through which WANs
Mwan3 can handle multiple levels of primary and backup interfaces, load-balanced or not. Different sources can have different primary or backup WANs.
Mwan3 uses netfilter mark mask to be compatible with other packages (such as OpenVPN, PPTP VPN, QoS-script, Tunnels, etc) as you can configure traffic to use the default routing table.
Mwan3 can also load-balance traffic originating from the router itself
Tabs
The MultiWAN settings are divided into tabs.
Settings
The MultiWAN Settings tab allows you to add or edit multiple WAN connections and turn them on or off. You can also configure thresholds for WAN up/down detection and reliability monitoring.
Members
The Members tab allows you to create member groups for interfaces, to use with policies for traffic management. The metric and weight settings are used to manage traffic in the member groups.
Policies
The Policies tab allows you to group members into policy sets for use with the traffic rules.
Rules
The Rules tab allows you to define how LAN traffic should be filtered and distributed over the available WANs.
Rules are the way the Policies are applied to the traffic. Each Rule targets packets with some kind of filter.
The Rules are applied in order from top to bottom. Multiple rules that can use the same policy but target different traffic.
Workflow
1: WAN Interfaces
As a first step, you need to add all network interfaces that should be part of the MultiWAN.
2: Members
Next, each interface must have at least one member, with per interface giving it appropriate Metric and Weight.
3: Policies
With the members set up, you must create at least one policy containing at least two members.
Workflow
In order to use the multiwan feature, you need to do a number of configurations.
Process
Configuration Steps
The order of operations involved in configuring MultiWan is roughly the same as the order in which the interface displays the setting tabs.
1: WAN Interfaces
As a first step, you need to add all network interfaces that should be part of the MultiWAN.
2: Members
Next, each interface must have at least one member, with per interface giving it appropriate Metric and Weight.
3: Policies
With the members set up, you must create at least one policy containing at least two members.
1: WAN Interfaces
As a first step, you need to add all network interfaces that should be part of the MultiWAN.
Important
The following prerequisites apply:
- The interface must be enabled and working.
- All addresses defined in the Host(s) to ping settings are reachable from the interface.
- The Create Default Route must be enabled for the interface.
- The Gateway Metric must be unique for the interface.
Tab
Settings
The MultiWAN Settings tab allows you to add or edit multiple WAN connections and turn them on or off. You can also configure thresholds for WAN up/down detection and reliability monitoring.
Configuration
Below the general settings is a list of selectable WANs.
When a particular WAN is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Enabled | Turn WAN on or off. | |
| Family | Type of WAN. | IPv4 / IPv6 |
| Tracking Type | Method to determine if the WAN is online. | IP / Gateway / DNS |
| Host(s) to ping | List of hosts to ping. | Used to determine WAN status. If this value is not set, the interface is always considered up. |
| Interface Reliability | Number of hosts that must reply for the interface to be considered up. | At least this many hosts must be defined or the interface will always be considered down. |
| Number of Pings | Number of pings to send to each host. | |
| Timeout | Number of seconds to wait for reply from host. | |
| Interval | Number of seconds between each test. | |
| Up | Number of successful tests to consider interface as up. | |
| Down | Number of failed tests to consider interface as down. |
Overview
2: Members
Next, each interface must have at least one member, with per interface giving it appropriate Metric and Weight.
Naming The Members
A good way to keep track of the members and make them easier to find when applying policies, is to use a regular naming scheme.
The following scheme will provide a good structure:
<interface>_m<metric>_w<weight>
and allow you to know the setup from the name alone.
Tabs
Members
The Members tab allows you to create member groups for interfaces, to use with policies for traffic management. The metric and weight settings are used to manage traffic in the member groups.
Configuration
Below the general settings is a list of selectable members.
When a particular member is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Interface | Interface configured in the settings tab. | |
| Metric | Precedence metric. | Members within one policy with a lower metric have precedence over higher metric members. |
| Weight | Distribution weight. | Members with same metric will distribute load based on this weight value. |
3: Policies
With the members set up, you must create at least one policy containing at least two members.
Tab
Policies
The Policies tab allows you to group members into policy sets for use with the traffic rules.
Configuration
At the top of the page is a list of policies.
When a particular policy is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Selected members | List of members configured in the members tab. |
4: Rules
As the final step you can set up the rules that will govern how traffic is handled.
Tab
Rules
The Rules tab allows you to define how LAN traffic should be filtered and distributed over the available WANs.
Rules are the way the Policies are applied to the traffic. Each Rule targets packets with some kind of filter.
The Rules are applied in order from top to bottom. Multiple rules that can use the same policy but target different traffic.
Configuration
At the top of the page is a list of rules.
When a particular rule is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Policy to use | Policy configured in the policies tab. | Default means the default routing table will be used. |
| Any Source IP | Enable to match all origins, regardless of IP address. | |
| Source Address | External target IP address. | |
| Source Port | Range of ports to match. | |
| Any Destination IP | Enable to match all destinations, regardless of IP address. | |
| Destination Address | External target IP address. | |
| Destination Port | Range of ports to match. | |
| Protocol | Protocols affected by the rule. | All / TCP / UDP / ICMP |
Settings
The MultiWAN Settings tab allows you to add or edit multiple WAN connections and turn them on or off. You can also configure thresholds for WAN up/down detection and reliability monitoring.
Configuration
Below the general settings is a list of selectable WANs.
When a particular WAN is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Enabled | Turn WAN on or off. | |
| Family | Type of WAN. | IPv4 / IPv6 |
| Tracking Type | Method to determine if the WAN is online. | IP / Gateway / DNS |
| Host(s) to ping | List of hosts to ping. | Used to determine WAN status. If this value is not set, the interface is always considered up. |
| Interface Reliability | Number of hosts that must reply for the interface to be considered up. | At least this many hosts must be defined or the interface will always be considered down. |
| Number of Pings | Number of pings to send to each host. | |
| Timeout | Number of seconds to wait for reply from host. | |
| Interval | Number of seconds between each test. | |
| Up | Number of successful tests to consider interface as up. | |
| Down | Number of failed tests to consider interface as down. |
Overview
Add WAN
You can add as many WANS as you have WAN interfaces.
Add WAN Interface
To add a WAN:
- Click the Add button
- Select an available Interface
A new WAN is added to the list.
- Edit the parameters as needed.
- Click Apply
Members
The Members tab allows you to create member groups for interfaces, to use with policies for traffic management. The metric and weight settings are used to manage traffic in the member groups.
Configuration
Below the general settings is a list of selectable members.
When a particular member is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Interface | Interface configured in the settings tab. | |
| Metric | Precedence metric. | Members within one policy with a lower metric have precedence over higher metric members. |
| Weight | Distribution weight. | Members with same metric will distribute load based on this weight value. |
Add Member
You can add as many rules as you like.
Add Member
To add a member:
- Click the Add button
- Enter a Name
A new rule is added to the list.
- Select the WAN to add as member
- Edit the parameters as needed.
- Click Apply
Policies
The Policies tab allows you to group members into policy sets for use with the traffic rules.
Configuration
At the top of the page is a list of policies.
When a particular policy is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Selected members | List of members configured in the members tab. |
Add Policy
You can add as many Policies as you like.
Add Policy Configuration
To add a policy:
- Click the Add button
- Enter a Name
A new member is added to the list.
- Click the Edit button
- Select members to add to the policy
- Click Apply
Rules
The Rules tab allows you to define how LAN traffic should be filtered and distributed over the available WANs.
Rules are the way the Policies are applied to the traffic. Each Rule targets packets with some kind of filter.
The Rules are applied in order from top to bottom. Multiple rules that can use the same policy but target different traffic.
Configuration
At the top of the page is a list of rules.
When a particular rule is selected, details about it is shown in the configuration section.
| Item | Description | Comment |
|---|---|---|
| Policy to use | Policy configured in the policies tab. | Default means the default routing table will be used. |
| Any Source IP | Enable to match all origins, regardless of IP address. | |
| Source Address | External target IP address. | |
| Source Port | Range of ports to match. | |
| Any Destination IP | Enable to match all destinations, regardless of IP address. | |
| Destination Address | External target IP address. | |
| Destination Port | Range of ports to match. | |
| Protocol | Protocols affected by the rule. | All / TCP / UDP / ICMP |
Add Rule
You can add as many rules as you like.
Add Rule
To add a rule:
- Click the Add button
- Enter a Name (Note: This cannot be changed later.)
A new rule is added to the list.
- Click the Edit button
- Edit the parameters as needed.
- Click Apply
Services
The Services view allows you to configure the services connected device.
Overview
Printer Server
The Printer Server Settings view allows you to change different features about your printer server for connected printers.
Printer Server
The Printer Server Settings view allows you to change different features about your printer server for connected printers.
Configuration
| Item | Comment |
|---|---|
| Enable | Turn printer server on or off. |
| Interface | Interface to listen on |
| Port | Port to listen on. |
| Bidirectional mode | Allow printer to communicate with client. |
MiniDLNA
The MiniDLNA view lets you configure the MiniDLNA server.
Overview
Status
For Enabled At the top of the page is a status window that can be expanded to display the current MiniDLNA status.
General
In the General settings tab you can change different general features about your MiniDLNA server.
Status
For Enabled At the top of the page is a status window that can be expanded to display the current MiniDLNA status.
Show Status
To view the status window, click the expand icon.
Media Library
In the media library table, the number of audio, video and image files on the server is shown.
| Column | Description |
|---|---|
| Audio files | 0 |
| Video files | 0 |
| Image files | 0 |
Connected Clients
The Connected Clients table displays information about possible clients and their connections to the server.
General
In the General settings tab you can change different general features about your MiniDLNA server.
Configuration
| Item | Comment |
|---|---|
| Port | Port for HTTP traffic. |
| Network | List of interfaces to serve. |
| Friendly Name | Name to display to clients. |
| Root Container | Start point when browsing. |
| Media Directories | File system locations for media. |
| Album-Art Names | List of file names for album art. |
Advanced
In the Advanced tab you can change different advanced features about your media server.
Configuration
| Item | Comment |
|---|---|
| Database directory | Directory for database and cache storage. |
| Log directory | Directory to store logs. |
| Enable inotify | Turn Inotify on or off. |
| Enable TIVO | Support for streaming files to TiVo. |
| Strict to DLNA standard | Only use DLNA standard features. |
| Presentation URL | Default presentation URL. |
| Notify interval | Time between notification messages. |
| Announced serial number | Serial number to show to clients. |
| Announced model number | Model number to report to clients. |
| miniSSDP socket | Path to miniSSDPd socket for SSDP. |
UPnP
The UPNP view allows you to configure UPNP services.
At the top of the page is a list of currently open UPnP ports, if any.
The UPnP settings are divided into tabs.
General
The General tab allows you to enable and configure the service parameters.
Configuration
| Item | Description |
|---|---|
| Enable UPNP | Enable UPNP protocol |
| Enable NAT-PMP | Enable NAT-PMP protocol. |
| Enable secure mode | Only add forwards to requesting ip addresses. |
| Enable additional logging | Add extra debugging information to the system log. |
| Downlink | Nominal uplink speed (KByte/s). |
| Uplink | Nominal downlink speed (KByte/s). |
| Port | Port for the service. |
| External Interface | Interface for external access. |
| Internal Interface | Interface to use for local access. |
Advanced
The Advanced tab lets you configure advanced UPNP settings.
Configuration
| Device UUID | UUID |
| Announced serial number | Serial number to show to clients. |
| Announced model number | Model number to show to clients. |
| Notify interval | Time between notification messages. |
| Clean rules threshold | Number of rules to keep. |
| Clean rules interval | Time between cleaning of UPnP rules. |
| Presentation URL | Location for service control web interface. |
| UPnP lease file | Location for file containing leases. |
DDNS
The DDNS view allows you configure Dynamic DNS services for your device.
Configuration
At the top of the page is a list of selectable services.
When a particular service is selected, details about it is shown in the connection section.
Configuration
| Item | Description |
|---|---|
| Enabled | Turn service on or off. |
| Label | Identifier in the service list. |
| IP Retrieval Method | Interface / Network / Script / Web. |
| Select Interface | For Interface: Interface. |
| Select Connection | For Network: Connection. |
| Script Path | For Script: Local path to IP detection script. |
| Enter website to poll for ip address | For Web: Address to IP detection service. |
| Provider | Service provider list. |
| Enter DDNS Provider | Manually add service provider. |
| Domain name | Full hostname to use for the device. |
| Username | Service account username. |
| Password | Service account password. |
| Use HTTPS | USe secure communication with service. |
DDNS Services
You can add as many DDNS Services as you like.
To add a DDNS Service:
- Click the add button
A new service is added to the list.
- Edit the parameters as needed.
- Click Apply
IPTV
The IPTV view lets you configure the IPTV server.
Configuration
| Item | Description |
|---|---|
| Differentiated Services Code Point | DSCP to use for tagging outgoing IGMP packets. |
| Proxy interface | Interface to use as proxy. |
| Default version | IGMP version. |
| Query interval | Time between IGMP query messages. |
| Query response interval | Time to wait for response to query beofre timeout. |
| Last member query interval | Time between queries to determine the loss of the last member in an IGMP group. |
| Robustness value | Tolerance for lost packets. |
| LAN to LAN multicast | Allow multicast between LANs. |
| Max groups | Maximum allowed multicastgroups. |
| Max sources | Maximum allowed multicast sources. |
| Max members | Maximum allowed members in a multicast group. |
| Fast leave | Leave multicast groups immediately after the last host. |
| Join immediate | Join group directly. |
| Enable IGMP proxy | Turn on IGMP Proxy handling. |
| Ignore SSM Range | Ignore SSM and deliver regular multicasting. |
| IGMP snooping mode | IGMP snooping mode: Disabled / Standard / Blocking. |
| IGMP snooping interfaces | Interfaces to use for IGMP snooping. |
DHCP
The DHCP view lets you configure the DHCP server settings.
The DHCP settings are divided into several tabs.
Hostname Entries
The Hostname Entries tab allows you to configure hostnames for IPv4 or IPV6 addresses in the LAN.
General
The General tab allows you to configure the DHCP server basic settings.
Configuration
| Item | Description | Comment |
|---|---|---|
| Local domain | Local domain suffix appended to DHCP names and hosts file entries. | |
| Log queries | Write received DNS requests to system log. | |
| Leasefile | file where given DHCP leases will be stored. | |
| Ignore resolve file | Do not use the local Resolve file. | |
| Resolve file | Local DNS file storage. | File used by dnsmasq to find upstream name servers. |
| Ignore Hosts file | Do not use the local Hosts file. | |
| Hostname Entries file(s) | Path to additional host files to read for serving DNS responses. |
Advanced
The Advanced tab allows you to configure advanced settings for the DHCP server.
Configuration
| Item | Description | |
|---|---|---|
| Domain required | Do not forward DHCP-requests without DNS-Name. | |
| Authoritative | This is the only DHCP in the local network. | |
| Filter private | Do not forward reverse lookups for local networks. | |
| Filter useless | Do not forward requests that cannot be answered by public name servers. | |
| Localise queries | Localise hostname depending on the requesting subnet if multiple IPs are available. | |
| Local server | Domain resolved from DHCP or hosts files only. | |
| Expand hosts | Add local domain suffix to names served from hosts files. | |
| No negative cache | Do not cache negative replies. | |
| Strict order | DHCP servers will be queried in the order of the resolve file. | |
| Bogus NX Domain Override | List of hosts that do not supply non-existent domain (NXDOMAIN) results. | |
| DNS forwarding | List of DNS servers to forward requests to. | |
| Rebind protection | Discard upstream RFC1918 responses. | |
| Allow localhost | Allow upstream responses in the 127.0.0.0/8 range. | |
| Domain whitelist | List of domains to allow RFC1918 responses to. | |
| DNS server port | Listening port for inbound DHCP queries. | |
| DNS query port | Fixed source port for outbound DNS queries. | |
| Max DHCP leases | Maximum allowed number of active DHCP leases. | |
| Max. EDNS0 packet size | Maximum size of EDNS0 UDP packets. | |
| Max. concurrent queries | Maximum number of concurrent DNS queries. |
Hostname Entries
The Hostname Entries tab allows you to configure hostnames for IPv4 or IPV6 addresses in the LAN.
Configuration
Add Hostname Entry
You can add as many entries as you like, and each entry can have any number of hostnames for each IP address.
To add a hostname entry:
- Click the Add button
- Click the Edit button
- Enter hostnames in the Hostname field
- Select address Family
- Enter IP Adress to redirect to
- Click Apply
Classifications
The Classifications tab lets you add classifications for connected clients.
The classifications can be used to provide specific DHCP Options options for the classified clients, based on client parameters.
Parameters
The classification can be based on client parameters:
- MAC class
View
At the top of the page is a list of configured classifications.
When a particular account is selected, details about it is shown in the configuration section.
For all classification types, the configuration is similar:
| Item | Description |
|---|---|
| Parameter value | Value for the classification parameter, according to its type. |
| Network ID | Option value. |
| ID | DHCP option ID. |
| Option | Option value. |
Add Tag
You can add as many tags as you like.
To add a tag:
- Click the Add button
The Select type of Classification dialog opens:
- Pick a Select Classification Type from the dropdown menu
- Click Apply
The tag is added to the list.
- Click the Edit button
- Enter Parameter value according to Classification Type
- Add as many DHCP options as needed:
- Click the Add option button
- Select the ID value
- Enter Option value
- Click Apply
SNMP
The SNMP Configuration view lets you configure the Simple Network Management Protocol service.
The SNMP settings are divided into tabs.
System
The System tab lets you configure general information about the SNMP service.
Configuration
| Item | Description |
|---|---|
| Location | Physical location of the device. |
| Contact | Contact information for the responsible person. |
| Name | Name of the server. |
| Services | Offered services. |
| Description | Server description for presentation. |
| Object ID | Identifier for the device. |
Agent
The Agent tab allows you to manage SNMP agents.
Configuration
| Item | Description |
|---|---|
| Agent Address | Protocol and port for the agent variable. |
Add Agent
You can add as many agents as you like.
To add an agent:
- Click the Add button
- Enter an Agent Address
- Click Apply
Com2Sec
The Com2Sec tab lets you configure Com2Sec access profiles for the SNMP service.
Configuration
| Item | Description | Example |
|---|---|---|
| Community | Community group to access. | private |
| Source | Hostname or subnet. | localhost |
| SecName | Access string. | rw |
Add Profile
You can add as many profiles as you like.
To add a profile:
- Click the Add button
- Enter parameters as needed
- Click Apply
Group
The Group tab allows you to configure Com2Sec access groups for the SNMP service.
Configuration
| Item | Description | Example |
|---|---|---|
| Community | Community group to access. | public |
| Source | Hostname or subnet. | usm |
| SecName | Access string. | ro |
Add Group
You can add as many groups as you like.
To add a group:
- Click the Add button
- Enter parameters as needed
- Click Apply
View
The View tab lets you configure Com2Sec views for the SNMP service.
Configuration
| Item | Description |
|---|---|
| View Name | Name of the view. |
| Type | Type of view. |
| OID | Object ID |
| Mask | Netmask. |
Add View
You can add as many views as you like.
To add a view:
- Click the Add button
- Enter parameters as needed
- Click Apply
Access
The Access tab allows you to configure Com2Sec access directives for the SNMP service.
Configuration
The access directive maps from group/security model/security level to a view.
| Item | Description | Example |
|---|---|---|
| Group | Group. | |
| Context | Security name or empty. | |
| Version | Version access. | any / v1 / v2c / usm |
| Level | Access level. | noauth / auth / priv |
| Prefix | Context matching. | exact / prefix |
| Read | Read permissions | |
| Write | Write permissions | |
| Notify | Notify permissions. |
Add Access Group
You can add as many acces groups as you like.
To add an access group:
- Click the Add button
- Enter parameters as needed
- Click Apply
Pass
Configuration
| Item | Description |
|---|---|
| Persist | Enable permanent passthrough. |
| Priority | Passthrough priority. |
| MIB OID | Object ID for the MIB. |
| Program | Execution for the arguments. |
Add Passthrough
You can add as many passthroughs as you like.
To add a passthrough:
- Click the Add button
- Enter parameters as needed
- Click Apply
Samba
In the Samba view you can change settings for the Sambaserver.
The Samba settings are divided into sections.
General
The General section of the view allows you to change the general Samba settings, such as name, workgroup and interface.
General
The General section of the view allows you to change the general Samba settings, such as name, workgroup and interface.
Configuration
| Option | Description |
|---|---|
| Name | Service identifier. |
| Workgroup | Service workgroup. |
| Description | Description of the service. |
| Interface | Interfaces to provide the service to. |
Change Interface Settings
To change the interface that Samba will listen on:
- Click LAN to open the list
- Choose as many interfaces as needed
- Click outside of the list
- Click Apply
Samba Users
The Samba Users section of the view allows you to change the user settings.
Configuration
| Option | Description |
|---|---|
| Username | user name |
| Password | password |
| Description | description |
Samba User Settings
To add a Samba user:
- Click Add
- Edit the parameters as needed.
- Click Apply
Samba Shares
The Samba Shares section lets you configure Samba shares and user access.
Configuration
| Option | Description |
|---|---|
| Name | Share identifier. |
| Path | Path to the shared directory. |
| Allowed users | Users with access. |
| Allow guest access | Turn public access on or off. |
| Read only? | Turn write protection on or off. |
Add Samba Share
To add a Samba Share:
- Click Add
- Enter a Name
- Click Add
The Add folder to share dialog opens.
- Browse to the directory you want to share and select it
- Click Apply
- Add Samba Users
- Select Guest Access setting
- Select Read Only setting
- Click Apply
Add Users To Share
To add a Samba users:
- Click Add
- Click Allowed Users to open the list
- Choose as many users as needed
- Click outside of the list
- Click Apply