Barracuda Networks Technical Documentation Barracuda Link Balancer Administrator’s Guide Version 2.
Copyright Notice Copyright 2004-2011, Barracuda Networks www.barracuda.com v2.2-110503-01-0503 All rights reserved. Use of this product and this manual is subject to license. Information in this document is subject to change without notice. Trademarks Barracuda Link Balancer is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders.
Contents Chapter 1 – Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . About this Guide . . . . . . . . . . . . . . . . . . . . Features of the Barracuda Link Balancer. . . . . . . . . . Link Management . . . . . . . . . . . . . . . . . . . . Aggregating Link Bandwidth . . . . . . . . . . . . . . Link Failover. . . . . . . . . . . . . . . . . . . . . . . Outbound Link Load Balancing . . . . . . . . . . . . .
Port Forwarding Rules . . . . . . . . . . . . . . . . . . . . . . Outbound Firewall Rules . . . . . . . . . . . . . . . . . . . . . Firewall Logging. . . . . . . . . . . . . . . . . . . . . . . . . . Creating Custom Applications . . . . . . . . . . . . . . . . . . . . Managing Bandwidth . . . . . . . . . . . . . . . . . . . . . . . . . Link Usage for Inbound and Outbound Traffic . . . . . . . . . . Creating Bandwidth or Quality of Service (QoS) Rules . . . . . . Outbound Traffic Routing . . . . . . . . . .
Chapter 5 – Monitoring the System . . . . . . . . . . . . . . . . . . 47 Checking Status . . . . . . . . . . . . . . . . . . . . . Viewing Logs . . . . . . . . . . . . . . . . . . . . . . . Using a Syslog Server to Centrally Monitor System Logs SNMP Monitoring . . . . . . . . . . . . . . . . . . . . . SNMP Traps . . . . . . . . . . . . . . . . . . . . . . . System Reports. . . . . . . . . . . . . . . . . . . . . . Viewing System Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
vi Barracuda Link Balancer Administrator’s Guide
Chapter 1 Introduction This chapter provides an overview of the Barracuda Link Balancer and includes the following topics: Overview .............................................................................................. 1 Features of the Barracuda Link Balancer ........................................... 2 Technical Support ................................................................................
Figure 1.1: Barracuda Link Balancer Functionality About this Guide This guide provides a general discussion of the features and concepts that you need to understand in order to best configure the Barracuda Link Balancer. Other than the installation instructions that are in Installing the Barracuda Link Balancer on page 7, you will find that detailed, procedural configuration steps are in the online help of the Web user interface.
Link Management The Barracuda Link Balancer can manage links that have static or dynamic (DHCP) IP addresses and can authenticate using PPPoE. Aggregating Link Bandwidth The Barracuda Link Balancer automatically aggregates Internet bandwidth from multiple links to the same or diverse sources. Administrators can choose multiple links to the same or different ISPs for the purposes of consolidating access to affordable Internet bandwidth. Any single session (e.g.
VLAN Support The Barracuda Link Balancer supports Layer 2 VLANs. High Availability The Barracuda Link Balancer supports High Availability configurations where two Barracuda Link Balancers are deployed as an active-passive pair. Persistence The Barracuda Link Balancer automatically tracks the IP addresses of each client / source and corresponding server / destination. As long as the source and destination IP address pair are the same, traffic between them will use the same link.
Site-to-Site VPN and Link Failover You can create a site-to-site VPN tunnel between two Barracuda Link Balancers or between a Barracuda Link Balancer and another device that supports IPsec. Networks connected via a tunnel will communicate as if they are on the same network, even though they are separated by the Internet. Using this functionality allows your site-to-site VPN tunnel to automatically failover to a secondary link in the case of the failure of a primary link.
Local Network Services The Barracuda Link Balancer includes the following local network services: • • DHCP server - The Barracuda Link Balancer can automatically provision client IP addresses using the DHCP protocol. Along with defining traditional DHCP options, administrators may view active leases in real time. DNS caching server - The Barracuda Link Balancer caches responses to DNS queries so that repetitive DNS requests are served quickly and locally.
Chapter 2 Installing the Barracuda Link Balancer This chapter provides instructions for installing the Barracuda Link Balancer. It includes the following topics: Deployment Scenarios ......................................................................... 7 In Front of Your Firewall Installation ............................................... 11 Replacing Your Firewall Installation.................................................
Table 2.1: Deployment Modes In Front of Firewall Replacing Your Firewall WAN Link If you are enabling inbound access to resources behind the Barracuda Link Balancer, such as a Web server, at least one WAN link must have a static IP address. The Barracuda Link Balancer may use the same IP address that had been used by your firewall. Site to Site VPN If you already have a site to site VPN it should be Failover and failback to and from a secondary terminated on your existing firewall. VPN traffic link.
• The Barracuda Link Balancer LAN IP address can be any internal or public address that is reachable through your existing firewall from the LAN. You may allocate an external IP address for it, or choose a non-routable IP address. If the latter, it should be on a different subnet than the LAN devices already on the network. Remember that if the firewall does not recognize an address as being on the local network it will pass it to the Barracuda Link Balancer. Figure 2.
Figure 2.4 shows the example network with a Barracuda Link Balancer installed and acting as a firewall, replacing the customer firewall. A new WAN link has been added. In this network: • • • • • The Barracuda Link Balancer uses the same IP address for WAN1 that the firewall had used. The LAN devices and the LAN interface of the Barracuda Link Balancer must be on a different subnet than all WAN links. The Barracuda Link Balancer gateway IP addresses are provided by the ISPs.
Table 2.2: Installation Steps In Front of Firewall Replace Your Firewall Configure WAN and LAN Permanent Settings. Configure the Barracuda Link Balancer Firewall. Permanently Install the Barracuda Link Balancer. Configure Permanent LAN IP Address. Test Connectivity. Permanently Install the Barracuda Link Balancer. Test Connectivity. In Front of Your Firewall Installation These detailed instructions describe how to deploy the Barracuda Link Balancer between the Internet and your firewall.
Figure 2.5: Front panel of a Barracuda Link Balancer with LAN port Otherwise, connect an Ethernet cable from the PC to the LAN port on the back, as shown in Figure 2.6. Figure 2.6: Back panel of the Barracuda Link Balancer 2. Start the Web browser and access the Web user interface by typing http://192.168.200.200:8000. The default username is admin and the default password is admin. 3. Go to the Basic > Links page and double click on one of the WAN ports in the graphic.
Link Balancer, do not power off during an update or download. To view the progress of the download, click Refresh. You will be notified when the download is complete. 3. Click Apply Now to apply the firmware. Click OK to acknowledge the reboot message. Applying the firmware takes a few minutes to complete. 4. After the firmware has been applied, the Barracuda Link Balancer automatically reboots. When the system comes back up, the login page is displayed. Log in again.
IP address. If the latter, it should be on a different subnet than the LAN devices already on the network. Remember that if the firewall does not recognize an address as being on the local network it will pass it to the Barracuda Link Balancer. If the default address of 192.168.200.200 meets this criteria, there is no need to change it. To change the LAN/Management IP address, Go to the Basic > IP Configuration page and change the Management IP Address and Subnet Mask. Click Save Changes.
You do not need to update your existing firewall configuration unless you want to make it aware of the new WAN link(s). To do so: 1. Add firewall rules so that traffic from the new links is handled correctly. 2. If you want to be able to manage your existing firewall remotely, add an alias on your firewall for the other links in case the first link is unavailable. Your Barracuda Link Balancer should be ready for operation. There are a number of other configuration options available.
Figure 2.7: Front panel of a Barracuda Link Balancer with LAN port Otherwise, connect an Ethernet cable from the PC to the LAN port on the back, as shown in Figure 2.8. Figure 2.8: Back panel of the Barracuda Link Balancer 2. Start the Web browser and access the Web user interface by typing http://192.168.200.200:8000. The default username is admin and the default password is admin. 3. Go to the Basic > Links page and double click on one of the WAN ports in the graphic.
Link Balancer, do not power off during an update or download. To view the progress of the download, click Refresh. You will be notified when the download is complete. 3. Click Apply Now to apply the firmware. Click OK to acknowledge the reboot message. Applying the firmware takes a few minutes to complete. 4. After the firmware has been applied, the Barracuda Link Balancer automatically reboots. When the system comes back up, the login page is displayed. Step 4: Configure Permanent WAN Settings 1.
Step 7: Install in the Production Network Now that the Barracuda Link Balancer is configured, install it in its permanent location and make it part of your production network: 1. Mount the Barracuda Link Balancer in a 19-inch rack or place it in a stable location. To ensure proper ventilation, do not block the cooling vents on the front and back of the unit. 2. Connect each of the cables from the Internet links into a WAN port on the front of the Barracuda Link Balancer.
Chapter 3 Configuring the Barracuda Link Balancer This chapter describes the configuration tasks you can perform from the Web user interface after you have completed the installation. The following topics are covered: Configuring Network Settings............................................................ 19 Configuring the Firewall ................................................................... 21 Creating Custom Applications ...........................................................
New WAN links that are configured correctly are automatically used for outbound link balancing. For inbound traffic, if the Barracuda Link Balancer firewall is enabled, you can add a NAT rule on the Firewall > NAT page to map the destination IP address of the traffic on the new link to an internal service.
Creating IP Aliases You can create virtual interfaces or IP aliases by associating an IP address or subnet with a WAN, LAN or VLAN. Each IP address and netmask can only be associated with one WAN, LAN or VLAN. Virtual interfaces are used: • • to associate an IP address range with a VLAN to associate an externally accessible IP address that is on a different subnet than any WAN link with a WAN link. Create IP aliases using the Advanced > Advanced IP Config page.
Firewall Functionality Using 1:1 NAT and port forwarding rules, the Barracuda Link Balancer can perform: • • • • 1:1 NAT - Assign external addresses to internal clients. Port forwarding (or Port Address Translation) - The traffic to a port across one or multiple links is directed to an internal client. Many to 1 NAT - One internal server may receive traffic from more than one WAN link. You can achieve this by creating 1:1 NAT rules or port forwarding rules. Port blocking and unblocking.
If the Barracuda Link Balancer firewall is disabled, you can create a NAT rule to map the destination IP address of the inbound traffic on one WAN link to another WAN link's IP address. This allows you to add a new WAN link without having to update rules on your network firewall. See Adding, Updating or Viewing WAN Link Configuration on page 19 for more details. When a 1:1 NAT rule is created, an inbound firewall rule to accept traffic for the external IP address is automatically generated.
Creating Custom Applications Use the Policy > Applications page to view and define applications that can be used in firewall and Quality of Service rules. An application is a combination of a protocol and one or more ports. You can create new applications or use the predefined ones, such as DNS, email, and HTTP. Managing Bandwidth The Barracuda Link Balancer allows you to prioritize and control incoming and outgoing traffic and link usage in a variety of ways.
If you want to employ default link balancing policy, where the link with the greatest available capacity is used, set the usage group for each link to Primary. To assign each link a usage group, edit the link on the Basic > Links page. Specifying WAN Link for Outbound Traffic You can override the link balancing algorithm by creating rules that determine which WAN link certain kinds of outbound traffic will use. See Specifying the Link Used by Outgoing Traffic on page 26.
Specifying the Link Used by Outgoing Traffic................................... 26 Changing the Source IP Address of Outgoing Traffic ....................... 27 Specifying the Link Used by Outgoing Traffic To exempt outgoing traffic from link balancing and/or NAT'ing, create IP/application rules using the Policy > Outbound Routing page. IP/application routing rules are based on source IP address, application, and/or destination IP address.
originating from those addresses can go out without being NAT'ed. Depending on how the ISP's routers are set up, traffic from these networks can either be link balanced or be bound to one WAN link. For the latter case, select specific primary and backup links. Changing the Source IP Address of Outgoing Traffic To set the source IP address of outgoing traffic to a masquerade IP address, rather than the IP address of the WAN link, create outbound source NAT rules using the Policy > Outbound Routing page.
Figure 3.1: Site-to-Site VPN The Services > VPN page displays all tunnels and their status. You can add, disable, edit or delete a tunnel from this page. Creating VPN Tunnels When creating a tunnel, make sure that the relevant tunnel parameters on both ends are in sync. If needed, record the settings on the other endpoint and compare them to the local endpoint. Not matching the settings between the tunnel endpoints is a common cause of failing to establish a tunnel successfully.
Failover and Failback When configuring a tunnel you can specify a primary and a backup link. If the primary link fails, the tunnel will be reestablished using the backup link. When the primary link is restored, the tunnel will automatically fail back to use the primary link. VPN Tunnel as Failover Link for a Broken Site-to-Site WAN Link A VPN tunnel can be configured to act as a failover link replacing a temporarily broken WAN link.
• Use the tools on the Advanced > Troubleshooting page, ping the remote gateway and perform other diagnostics on the network connection. Configuring the DNS Server for Inbound Load Balancing Configure the Barracuda Link Balancer as an authoritative DNS Server for your domain or domains to achieve inbound link load balancing. This section covers the following topics: Introduction........................................................................................ 30 DNS Records Time to Live.............
disrupted. A short TTL value for this record ensures that the cached address for the failed link times out quickly. Specifying a short TTL for A records also assists in link balancing. Because the address for a host that is returned varies among the available links, the short TTL guarantees that the link used for incoming traffic directed to that host also varies frequently.
Table 3.1: Configuration Steps Step Explanation Create the Domain Define one or more domains on the Barracuda Link Balancer. Set up and test DNS for Internal Clients. Make your internal DNS server forward queries to the Barracuda Link Balancer. Configure split DNS. Add DNS records. For Web servers and email servers. Delegate your domain to the Barracuda Link Balancer from your registration service. Tell the Internet that your domain exists or has changed. Test external access.
Step 3 - Set up DNS for Internal Clients If you have an internal DNS server, configure it to forward queries to the LAN IP address of the Barracuda Link Balancer.
my IN NS ns1 my IN NS ns2 ns1 IN A 216.101.241.181 ns2 IN A 192.0.2.2 Then you can create the my.example.com. domain on the Barracuda Link Balancer. Step 6 - Test From a host on the Internet, run nslookup on your domain name(s). The returned IP addresses should be the IP addresses of your WAN listen links. Depending on the change, it may take some time for your changes to be noted throughout the Internet, depending on how long the various resolvers cache DNS responses.
DNS Records DNS Records Generated when Creating a Domain When you create a domain on the Barracuda Link Balancer the following records are automatically generated: • • • Start of Authority (SOA) record - The SOA record defines the global parameters for the hosted domain or zone. Only one SOA record is allowed per hosted domain or zone. Name Server (NS) record - NS records specify the authoritative name servers for this domain.
Setting Email Addresses for Alerts .................................................... 36 Customizing the Appearance of the Web User Interface ................... 36 Setting the Time Zone of the System .................................................. 36 Enabling SSL for Administration....................................................... 37 Controlling Access to the Web User Interface To control access to the Web user interface, navigate to the Basic > Administration page.
It is important that the time zone is set correctly because this information is used to coordinate traffic distribution and in all logs and reports. If two Barracuda Link Balancers are to be clustered, the time zone must be the same on both before the cluster can be created. Note: The Barracuda Link Balancer automatically reboots when you change the timezone. Enabling SSL for Administration You can choose to require that only secure SSL connections can access the Web user interface.
38 Barracuda Link Balancer Administrator’s Guide
Chapter 4 Creating a High Availability Environment This chapter describes how to create a high availability environment by clustering two Barracuda Link Balancers. It includes the following topics: Overview ............................................................................................ 39 Planning Your High Availability Deployment.................................... 42 Creating a Cluster .............................................................................
Clustered Barracuda Link Balancers communicate according to the Virtual Router Redundancy Protocol (VRRP) specification. Both are configured with a single virtual IP address called the VRRP virtual IP address. This address is serviced only by the active system. If the Barracuda Link Balancer firewall is enabled, then the VRRP virtual IP address is the default gateway for devices on the LAN.
• • Be activated and on the same version of firmware. The High Availability capability is only available on firmware 2.x and later. Be able to reach the other Barracuda Link Balancer on the LAN interface. This last requirement applies only if you do not plan to use the LAN2 port for clustering.
Planning Your High Availability Deployment Extra equipment may be needed to support the clustered Barracuda Link Balancers.You may need to add switches so that the WAN links can connect to two systems. If deploying in front of an existing firewall, you will need to add a switch between the Barracuda Link Balancers and the firewall (or two switches for dual firewalls).
In Front of Dual Network Firewalls Figure 4.4 shows two Barracuda Link Balancers and two clustered firewalls. The LAN IP addresses of the two Barracuda Link Balancers and the VRRP virtual IP address must all be on the same subnet. Figure 4.
No External Firewalls Figure 4.5 shows two Barracuda Link Balancers with the firewall enabled. As in the other deployment examples, the LAN IP addresses of the two Barracuda Link Balancers and the VRRP virtual IP address must all be on the same subnet. Note that only in this example the VRRP virtual IP address is the default gateway for devices on the LAN.
Step 1: Complete Installation Process for Both Systems To prepare the Barracuda Link Balancers for clustering, put both systems in the production location on the network. Complete the following steps: 1. If the primary system is a brand new, unconfigured system, then you will need to completely install, configure and test the primary system as described in Installing the Barracuda Link Balancer on page 7. If the primary system is already configured and operational, update its firmware.
Step 4: Put in Production From now on, always use the VRRP virtual IP address to manage the Barracuda Link Balancer so that you can be sure that any changes that you make will occur immediately on the active system. Removing a System from a Cluster You can find detailed instructions to separate clustered Barracuda Link Balancers in the online help. The system that is to be removed from the cluster must have its cluster settings erased and its network links disconnected.
Chapter 5 Monitoring the System This chapter describes the tasks you can do to check on the performance of the Barracuda Link Balancer. This section covers the following topics: Checking Status.................................................................................. 47 Viewing Logs...................................................................................... 47 Using a Syslog Server to Centrally Monitor System Logs ................ 48 SNMP Monitoring ........................................
If the Barracuda Link Balancer firewall is enabled, you can view the firewall log on the Logs > Firewall Log page to see rules that have been executed and whether the traffic was dropped or allowed. Only rules that have the Log check box selected in their rule entry (under the Firewall tab) are logged in this way. Check recent VPN tunnel activity by using the Logs > VPN Log page. When any of these logs reaches their predetermined size a new log is started.
SNMP Traps An SNMP trap is generated by the Barracuda Link Balancer SNMP agent every five minutes if one of the following conditions is noted: • • • • • • • • • • CPU temperature exceeded its threshold. System temperature exceeded its threshold. CPU fan is dead. System fan is dead. Firmware storage exceeded its threshold. Log storage utilization exceeded its threshold. WANx is down. WANx is up. WANx reached configured saturation threshold. A high availability state change occurred.
The Report Options section allows you to choose the criteria for compiling the report data, as well as layout and output options. You can define a time frame for the report, select the interface links and VPN tunnels to include, and choose to analyze inbound traffic, outbound traffic, or both.
Chapter 6 Maintaining the Barracuda Link Balancer This chapter describes how to maintain the Barracuda Link Balancer. The following topics are covered: Backing up and Restoring Your System Configuration ..................... 51 Updating the Firmware of Your Barracuda Link Balancer............... 51 Replacing a Failed System ................................................................ 51 Reloading, Restarting, and Shutting Down the System .....................
In the event that a Barracuda Link Balancer fails and you cannot resolve the issue, customers that have purchased the Instant Replacement service can call Technical Support and arrange for a new unit to be shipped out within 24 hours. After receiving the new system, ship the old Barracuda Link Balancer back to Barracuda Networks at the address below with an RMA number marked clearly on the package. Barracuda Networks Technical Support can provide details on the best way to return the unit.
Using the Built-in Troubleshooting Tools The Advanced > Troubleshooting page provides various tools that help troubleshoot network connectivity issues that may be impacting the performance of your Barracuda Link Balancer. You can perform a number of connectivity tests such as ping, telnet, dig/nslookup, TCP dump, and traceroute. Barracuda Networks Technical Support may ask you to make a connection to Barracuda Central so they can help diagnose problems on your system.
Reboot Options Table 6.1 describes the options available at the reboot menu. Table 6.1: Reboot Options Reboot Options Description Barracuda Starts the Barracuda Link Balancer in the normal (default) mode. This option is automatically selected if no other option is specified within the first three (3) seconds of the splash screen appearing.
Appendix A Limited Warranty and License Barracuda Networks Limited Hardware Warranty (v 2.1) Barracuda Networks, Inc., or the Barracuda Networks, Inc. subsidiary or authorized Distributor selling the Barracuda Networks product, if sale is not directly by Barracuda Networks, Inc.
maintained in accordance with instructions supplied by Barracuda Networks, or (f) subjected to abnormal physical or electrical stress, misuse, negligence or to an accident.
network where it could be utilized by multiple devices or copied.
WERE CAUSED BY IMPROPER OPERATION, USE OF UNSUITABLE RESOURCES, ABNORMAL OPERATING CONDITIONS (IN PARTICULAR DEVIATIONS FROM THE INSTALLATION CONDITIONS) AS WELL AS BY TRANSPORTATION DAMAGE. IN ADDITION, DUE TO THE CONTINUAL DEVELOPMENT OF NEW TECHNIQUES FOR INTRUDING UPON AND ATTACKING NETWORKS, BARRACUDA NETWORKS DOES NOT WARRANT THAT THE SOFTWARE OR ANY EQUIPMENT, SYSTEM OR NETWORK ON WHICH THE SOFTWARE IS USED WILL BE FREE OF VULNERABILITY TO INTRUSION OR ATTACK.
10. Trademarks. Certain portions of the product and names used in this Agreement, the Software and the documentation may constitute trademarks of Barracuda Networks. You are not authorized to use any such trademarks for any purpose. 11. Export Restrictions.
16. Subscriptions. Software updates and subscription information provided by Barracuda Energize Updates or other services may be necessary for the continued operation of the Software. You acknowledge that such a subscription may be necessary. Furthermore some functionality may only be available with additional subscription purchases.
59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users.
is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1.
c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it.
This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded.
Software and that both the above copyright notice(s) and this permission notice appear in supporting documentation." Barracuda Networks Products may include programs that are covered by the BSD License: "Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. Barracuda Networks Software may include programs that are covered by the Apache License or other Open Source license agreements. The Apache license is re-printed below for you reference. These programs are copyrighted by their authors or other parties, and the authors and copyright holders disclaim any warranty for such programs. Other programs are copyright by Barracuda Networks.
purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License.
6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty.
Index IP masquerading 4 L LAN IP address, in front of your firewall 9, 13 Numerics M 1:1 NAT 4, 22 Many to 1 NAT 4, 22 masquerade IP address 27 A additional IP addresses in front of your firewall 13 replacing your firewall 17 Administration page 36, 48, 52 alerts 36 applications creating custom 24 definition 24 ARIN networks 26, 33 B backing up configuration 51 backup link 24 Backup page 51 C character tags 55 checking status 47 configuring network settings 19 contacting technical support 6 D defa
Status page 47 system alerts email address 49 T Task Manager page 50 technical support, contacting 6 testing memory 54 time zone, setting 36 Troubleshooting page 53 U updating firmware 51 V virtual interfaces 21 VPN tunnel failover 29 shared secret 28 SSL certificates 28 VPN Tunnel as Failover Link for a Broken MPLS Link 29 VPN Tunnel, failover link for broken site-to-site WAN link 29 VPN Tunnel, troubleshooting 29 W WAN interface, Web user interface access via 36 WAN IP impersonation 20 Web user inter
