FireBrick FB6000 Series User manual

FireBrick FB6202
User Manual
FB6000 Versatile Network Appliance

FireBrick FB6202 User Manual
This User Manual documents Software version V1.19.037
Copyright © 2012 FireBrick Ltd.

iii
Table of Contents
Preface .................................................................................................................................... x
1. Introduction .......................................................................................................................... 1
1.1. The FB6000 ............................................................................................................... 1
1.1.1. Where do I start? ............................................................................................. 1
1.1.2. What can it do? ............................................................................................... 1
1.1.3. Ethernet port capabilities ................................................................................... 2
1.1.4. Product variants in the FB6000 series .................................................................. 2
1.2. About this Manual ...................................................................................................... 2
1.2.1. Version ........................................................................................................... 2
1.2.2. Intended audience ............................................................................................. 2
1.2.3. Document style ................................................................................................ 3
1.2.4. Document conventions ...................................................................................... 3
1.2.5. Comments and feedback .................................................................................... 3
1.3. Additional Resources ................................................................................................... 4
1.3.1. Technical Support ............................................................................................ 4
1.3.2. IRC Channel ................................................................................................... 4
1.3.3. Application Notes ............................................................................................. 4
1.3.4. White Papers ................................................................................................... 4
1.3.5. Training Courses .............................................................................................. 4
2. Getting Started ...................................................................................................................... 5
2.1. IP addressing ............................................................................................................. 5
2.2. Accessing the web-based user interface ........................................................................... 5
2.2.1. Add a new user ............................................................................................... 6
3. Configuration ....................................................................................................................... 9
3.1. The Object Hierarchy .................................................................................................. 9
3.2. The Object Model ....................................................................................................... 9
3.2.1. Formal definition of the object model ................................................................. 10
3.2.2. Common attributes .......................................................................................... 10
3.3. Configuration Methods ............................................................................................... 10
3.4. Web User Interface Overview ..................................................................................... 10
3.4.1. User Interface layout ....................................................................................... 11
3.4.1.1. Customising the layout .......................................................................... 11
3.4.2. Config pages and the object hierarchy ................................................................ 12
3.4.2.1. Configuration categories ........................................................................ 12
3.4.2.2. Object settings ..................................................................................... 13
3.4.3. Navigating around the User Interface ................................................................. 14
3.4.4. Backing up / restoring the configuration .............................................................. 15
3.5. Configuration using XML ........................................................................................... 15
3.5.1. Introduction to XML ....................................................................................... 15
3.5.2. The root element - <config> ............................................................................. 17
3.5.3. Viewing or editing XML .................................................................................. 17
3.5.4. Example XML configuration ............................................................................ 17
3.6. Downloading/Uploading the configuration ..................................................................... 18
3.6.1. Download ...................................................................................................... 18
3.6.2. Upload .......................................................................................................... 19
4. System Administration ......................................................................................................... 20
4.1. User Management ..................................................................................................... 20
4.1.1. Login level .................................................................................................... 21
4.1.2. Configuration access level ................................................................................ 21
4.1.3. Login idle timeout .......................................................................................... 21
4.1.4. Restricting user logins ..................................................................................... 21
4.1.4.1. Restrict by IP address ........................................................................... 21
4.1.4.2. Restrict by profile ................................................................................ 22
4.2. General System settings ............................................................................................. 22

FireBrick FB6202 User Manual
iv
4.2.1. System name (hostname) .................................................................................. 22
4.2.2. Administrative details ...................................................................................... 22
4.2.3. System-level event logging control .................................................................... 22
4.2.4. Home page web links ...................................................................................... 22
4.3. Software Upgrades .................................................................................................... 23
4.3.1. Software release types ..................................................................................... 23
4.3.1.1. Breakpoint releases ............................................................................... 23
4.3.2. Identifying current software version ................................................................... 24
4.3.3. Internet-based upgrade process .......................................................................... 24
4.3.3.1. Manually initiating upgrades .................................................................. 24
4.3.3.2. Controlling automatic software updates .................................................... 25
4.3.4. Manual upgrade .............................................................................................. 25
4.4. Boot Process ............................................................................................................ 26
4.4.1. LED indications ............................................................................................. 26
4.4.1.1. Power LED status indications ................................................................. 26
4.4.1.2. Port LEDs ........................................................................................... 26
5. Event Logging .................................................................................................................... 27
5.1. Overview ................................................................................................................. 27
5.1.1. Log targets .................................................................................................... 27
5.1.1.1. Logging to Flash memory ...................................................................... 27
5.1.1.2. Logging to the Console ......................................................................... 28
5.2. Enabling logging ....................................................................................................... 28
5.3. Logging to external destinations .................................................................................. 28
5.3.1. Syslog .......................................................................................................... 28
5.3.2. Email ............................................................................................................ 29
5.3.2.1. E-mail process logging .......................................................................... 30
5.4. Factory reset configuration log targets ........................................................................... 30
5.5. Performance ............................................................................................................. 30
5.6. Viewing logs ............................................................................................................ 30
5.6.1. Viewing logs in the User Interface ..................................................................... 30
5.6.2. Viewing logs in the CLI environment ................................................................. 31
5.7. System-event logging ................................................................................................. 31
5.8. Using Profiles ........................................................................................................... 31
6. Interfaces and Subnets .......................................................................................................... 32
6.1. Relationship between Interfaces and Physical Ports ......................................................... 32
6.1.1. Port groups .................................................................................................... 32
6.1.2. Interfaces ...................................................................................................... 32
6.2. Defining port groups .................................................................................................. 33
6.3. Defining an interface ................................................................................................. 34
6.3.1. Defining subnets ............................................................................................. 34
6.3.1.1. Using DHCP to configure a subnet .......................................................... 35
6.3.2. Setting up DHCP server parameters ................................................................... 35
6.3.2.1. Fixed/Static DHCP allocations ................................................................ 36
6.3.2.2. Partial-MAC-address based allocations ..................................................... 36
6.4. Physical port settings ................................................................................................. 36
6.4.1. Disabling auto-negotiation ................................................................................ 37
6.4.2. Setting port speed ........................................................................................... 37
6.4.3. Setting duplex mode ........................................................................................ 37
6.4.4. Defining port LED functions ............................................................................ 37
7. Routing .............................................................................................................................. 39
7.1. Routing logic ........................................................................................................... 39
7.2. Routing targets ......................................................................................................... 40
7.2.1. Subnet routes ................................................................................................. 40
7.2.2. Routing to an IP address (gateway route) ............................................................ 40
7.2.3. Special targets ................................................................................................ 40
7.3. Dynamic route creation / deletion ................................................................................. 41

FireBrick FB6202 User Manual
v
7.4. Routing tables .......................................................................................................... 41
8. Profiles .............................................................................................................................. 42
8.1. Overview ................................................................................................................. 42
8.2. Creating/editing profiles ............................................................................................. 42
8.2.1. Timing control ............................................................................................... 42
8.2.2. Tests ............................................................................................................ 43
8.2.2.1. General tests ........................................................................................ 43
8.2.2.2. Time/date tests ..................................................................................... 43
8.2.2.3. Ping tests ............................................................................................ 43
8.2.3. Inverting overall test result ............................................................................... 43
8.2.4. Manual override ............................................................................................. 43
9. Traffic Shaping ................................................................................................................... 45
9.1. Graphs and Shapers ................................................................................................... 45
9.1.1. Graphs .......................................................................................................... 45
9.1.2. Shapers ......................................................................................................... 45
10. PPPoE .............................................................................................................................. 47
10.1. Types of DSL line and router in the United Kingdom ..................................................... 47
10.2. Definining PPPoE links ............................................................................................ 48
10.2.1. IPv6 ............................................................................................................ 48
10.2.2. Additional options ......................................................................................... 48
10.2.2.1. MTU and TCP fix .............................................................................. 48
10.2.2.2. Service and ac-name ........................................................................... 49
10.2.2.3. Logging ............................................................................................ 49
10.2.2.4. Speed and graphs ............................................................................... 49
11. Tunnels ............................................................................................................................ 50
11.1. FB105 tunnels ......................................................................................................... 50
11.1.1. Tunnel wrapper packets .................................................................................. 50
11.1.2. Setting up a tunnel ........................................................................................ 50
11.1.3. Viewing tunnel status .................................................................................... 51
11.1.4. Dynamic routes ............................................................................................ 51
11.1.5. Tunnel bonding ............................................................................................ 51
11.1.6. Tunnels and NAT ......................................................................................... 52
11.1.6.1. FB6000 doing NAT ............................................................................ 52
11.1.6.2. Another device doing NAT .................................................................. 52
12. System Services ................................................................................................................. 54
12.1. HTTP Server configuration ....................................................................................... 54
12.1.1. Access control .............................................................................................. 54
12.1.1.1. Trusted addresses ............................................................................... 55
12.2. Telnet Server configuration ....................................................................................... 55
12.2.1. Access control .............................................................................................. 55
12.3. DNS configuration ................................................................................................... 56
12.4. NTP configuration ................................................................................................... 56
12.5. SNMP configuration ................................................................................................ 56
13. Network Diagnostic Tools ................................................................................................... 57
13.1. Access check .......................................................................................................... 57
13.2. Packet Dumping ...................................................................................................... 58
13.2.1. Dump parameters .......................................................................................... 58
13.2.2. Security settings required ................................................................................ 59
13.2.3. IP address matching ...................................................................................... 59
13.2.4. Packet types ................................................................................................. 59
13.2.5. Snaplen specification ..................................................................................... 60
13.2.6. Using the web interface .................................................................................. 60
13.2.7. Using an HTTP client .................................................................................... 60
13.2.7.1. Example using curl and tcpdump ........................................................... 60
14. VRRP .............................................................................................................................. 62
14.1. Virtual Routers ....................................................................................................... 62

FireBrick FB6202 User Manual
vi
14.2. Configuring VRRP .................................................................................................. 62
14.2.1. Advertisement Interval ................................................................................... 63
14.2.2. Priority ........................................................................................................ 63
14.3. Using a virtual router ............................................................................................... 63
14.4. VRRP versions ....................................................................................................... 63
14.4.1. VRRP version 2 ............................................................................................ 63
14.4.2. VRRP version 3 ............................................................................................ 63
14.5. Compatibility .......................................................................................................... 64
15. Command Line Interface ..................................................................................................... 65
I. Command Line Reference ..................................................................................................... 66
check access ................................................................................................................... 67
clear bgp ....................................................................................................................... 68
clear dhcp ...................................................................................................................... 69
clear l2tp all ................................................................................................................... 70
clear l2tp session ............................................................................................................. 71
clear l2tp tunnel .............................................................................................................. 72
clear pppoe .................................................................................................................... 73
delete config ................................................................................................................... 74
delete data ..................................................................................................................... 75
delete image ................................................................................................................... 76
ethernet reset .................................................................................................................. 77
ethernet stall ................................................................................................................... 78
exit ............................................................................................................................... 79
kill command session ....................................................................................................... 80
kill session ..................................................................................................................... 81
login ............................................................................................................................. 82
logout ............................................................................................................................ 83
panic ............................................................................................................................. 84
ping .............................................................................................................................. 85
quit ............................................................................................................................... 86
reboot ............................................................................................................................ 87
set boot block ................................................................................................................. 88
set command screen width ................................................................................................ 89
show arp ........................................................................................................................ 90
show bgp ....................................................................................................................... 91
show bgp nexthop ........................................................................................................... 92
show bgp peer ................................................................................................................ 93
show bgp routes .............................................................................................................. 94
show bgp summary ......................................................................................................... 95
show boot log ................................................................................................................. 96
show command sessions ................................................................................................... 97
show dhcp ..................................................................................................................... 98
show dns ....................................................................................................................... 99
show ethernet counters ................................................................................................... 100
show ethernet status ....................................................................................................... 101
show fb105 ................................................................................................................... 102
show flash contents ........................................................................................................ 103
show flash log .............................................................................................................. 104
show l2tp ..................................................................................................................... 105
show l2tp session .......................................................................................................... 106
show l2tp sessions ......................................................................................................... 107
show l2tp tunnel ............................................................................................................ 108
show l2tp tunnels .......................................................................................................... 109
show log ...................................................................................................................... 110
show memory ............................................................................................................... 111
show pppoe .................................................................................................................. 112

FireBrick FB6202 User Manual
vii
show profiles ................................................................................................................ 113
show radius .................................................................................................................. 114
show route ................................................................................................................... 115
show routes .................................................................................................................. 116
show sessions ............................................................................................................... 117
show status ................................................................................................................... 118
show subnet .................................................................................................................. 119
show subnets ................................................................................................................ 120
show uptime ................................................................................................................. 121
show tasks .................................................................................................................... 122
show vrrp ..................................................................................................................... 123
start command session .................................................................................................... 124
traceroute ..................................................................................................................... 125
troff ............................................................................................................................. 126
tron ............................................................................................................................. 127
uptime ......................................................................................................................... 128
A. Factory Reset Procedure ..................................................................................................... 129
B. CIDR and CIDR Notation ................................................................................................... 131
C. MAC Addresses usage ....................................................................................................... 133
D. VLANs : A primer ............................................................................................................ 135
Index ................................................................................................................................... 136

viii
List of Figures
2.1. Initial web page in factory reset state ..................................................................................... 6
2.2. Initial "Users" page ............................................................................................................. 6
2.3. Setting up a new user .......................................................................................................... 7
2.4. Configuration being stored ................................................................................................... 7
3.1. Main menu ...................................................................................................................... 11
3.2. Icons for layout controls ..................................................................................................... 12
3.3. Icons for configuration categories ........................................................................................ 12
3.4. The "Setup" category ......................................................................................................... 13
3.5. Editing an "Interface" object ............................................................................................... 13
3.6. Show hidden attributes ....................................................................................................... 14
3.7. Attribute definitions ........................................................................................................... 14
3.8. Navigation controls ........................................................................................................... 15
4.1. Setting up a new user ........................................................................................................ 20
4.2. Software upgrade available notification ................................................................................. 24
4.3. Manual Software upload ..................................................................................................... 25
C.1. Product label showing MAC address range .......................................................................... 133

ix
List of Tables
2.1. IP addresses for computer .................................................................................................... 5
2.2. IP addresses to access the FireBrick ....................................................................................... 5
3.1. Special character sequences ................................................................................................ 16
4.1. User login levels ............................................................................................................... 21
4.2. Configuration access levels ................................................................................................. 21
4.3. General administrative details attributes ................................................................................ 22
4.4. Attributes controlling auto-upgrades ..................................................................................... 25
4.5. Power LED status indications .............................................................................................. 26
5.1. Logging attributes ............................................................................................................. 28
5.2. System-Event Logging attributes .......................................................................................... 31
6.1. Physical port usage options ................................................................................................. 32
6.2. Port LED functions ........................................................................................................... 37
6.3. Example modified Port LED functions .................................................................................. 38
7.1. Route targets .................................................................................................................... 40
12.1. List of system services ..................................................................................................... 54
13.1. Packet dump parameters ................................................................................................... 58
13.2. Packet types that can be captured ....................................................................................... 59
18. Information provided by show fb105 command ..................................................................... 102
C.1. DHCP client names used .................................................................................................. 134