Settings: Difference between revisions

* Manage own network: In this mode, the device will setup an own access point so that you can connect your laptop or smartphone directly to the device and access the management interface.

In this mode, the web interface can be accessed by entering the URL “https://allegro/” into your web browser.

Additionally, two other options are available in this mode:

<big>''' LAN management interface'''</big>

For wired connection there are three operation modes:

You can leave them empty if you want directly connect the device to another computer with no router involved.

In this mode, the web interface can be reached by the static IP you have configured.

<big>''' Secondary management interface'''</big>

You can attach an USB ethernet adapter to any USB port of the Allegro Network Multimeter and use this as an additional management interface.

This management interface can be operated with a static IP address only. In the address input field please enter the IP address followed by a slash and the subnet size.

You can leave them empty if you want directly connect the device to another computer with no router involved.

This feature is not supported by the Allegro 200.

<big>''' Host name'''</big>

By default, the host name is in the format “allegro-mm-xxxx” where the last four characters depend on the actual device.  

Because of this multiple multimeters can be used in the same network.  

<big>''' LLDP'''</big>

If enabled, the Allegro Network Multimeter will transmit LLDP (Link Layer Discovery Protocol) information for the management MAC and IP addresses on the management interface.

The LLDP system name will contain the hostname of the Allegro Network Multimeter and the LLDP system description will contain the platform type (e.g. Allegro-200-rev1) and the currently installed firmware version.

==''' Administration'''==

The administration page allows following actions:

* Power: Reboot or power off the Allegro Network Multimeter. After clicking on the buttons a confirmation dialog will appear.

''' SSL certificate'''

The device comes with a pre-installed generic SSL certificate but an own certificate can be installed:

The “Reset to default SSL certificate” button will remove any user-provided SSL certificate and the user interface will be served using the default SSL certificate.

It is currently not possible to issue a signing request procedure. To use a certificate which needs to be signed by a company CA, the user has to create that certificate on a separate machine, create the signing request, and deploy the final certificate to the device using the option above.

==''' Filter'''==

The filter page allows setting a processing filter for live traffic. The traffic may be filtered before it is processed.

| #A line with a comment

1.2.3.1

1.2.3.2

1.2.3.3

|}

'''Sample Node.js server'''

The following script is a basic Node.js server (with minimal error handling) which reads all POST requests and stores them to a file:

|-

|const http = require('http');

const fs = require('fs');

const listenAddress = '0.0.0.0';

const port = 3000;

let fileCount = 1;

const server = http.createServer((req, res) => {

if (req.method != 'POST') {

res.statusCode = 405;

res.end();

return;

}

let id = fileCount++;

let outputFilename = `${req.url.substring(1).replace(/\//g, '_')}_${id}.json`;

console.log(`${id}: ${req.method} ${req.url} => ${outputFilename}`);

let data = [];

req.on('data', chunk => data.push(chunk));

req.on('end', () => {

fs.writeFile(outputFilename, data, (err) => {

if (err != null) {

console.log(err);

res.statusCode = 500;

} else {

res.statusCode = 200;

}

res.end();

});

});

});

server.listen(port, listenAddress, () => {

console.log(`Server running at http://${listenAddress}:${port}/`);

});

|}

<big>''' SSH Port Forwarding'''</big>

The Allegro Network Multimeter can be configured to to use SSH Port Forwarding to allow remote access to the device behind a NAT.  

The multimeter will create a tunnel to an SSH endpoint and will open a listening port on this SSH server.  

'''Create a user'''

The user on the SSH server does not need any special rights and does not need a login shell. Example:

'''Allow SSH access via public key'''

The Allegro Network Multimeter uses SSH public key authentication to log in on the SSH server.  

The public key can be found in the '''SSH public key''' field in the '''SSH Port Forwarding''' settings dialog.

|-

| $> mkdir /home/mmremote/.ssh

$> chown mmremote: /home/mmremote/.ssh

$> nano /etc/mmremote/.ssh/authorized_keys

|}

'''Option 1: No proxy'''

Advantage:

* no additional software required

'''Option 2: With HTTPS proxy'''

Advantage:

* use default HTTPS port 443

'''Configuration of the multimeter'''

In the configuration dialog, insert the parameters to access the SSH server. For example:

* SSH Host: '''mm-remote.company.com'''

<big>'''Allegro Remote Service'''</big>

The Allegro Remote Service is similar to the SSH Port Forwarding feature, but is an Out-of-the-box solution.

The Allegro Remote Service is a transparent proxy which does not terminate the SSL connection. The certificate presented to your browser is the same that is configured on the multimeter (like with Option 1 of the SSH Port Forwarding configuration).

<big>''' SNMP'''</big>

If enabled, it is possible to access the Allegro Network Multimeter using SNMPv1.

The community used is “public.

<big>''' User Management'''</big>

The user management page allows managing users which can use the Allegro Network Multimeter.

It is possible to:

<big>''' Roles'''</big>

The only role currently defined is the “admin” role.

Only users with the “admin” role can:

<big>''' LDAP users'''</big>

In the LDAP users tab, it is possible to define an LDAP or Active Directory source for user management.  

The LDAP users are only an addition to the locally defined users.  

|-

| User filter : (uid=%s)

Group filter : (memberUid=%s)

Users group : allegro-mm-users

Admins group :  allegro-mm-admins

|}

|-

| User filter : (&(sAMAccountName=%s)(objectCategory=person)(objectClass=user)(!sAMAccountType=805306370)(!userAccountControl:1.2.840.113556.1.4.803:=2))

Group filter : (&(member=${DN})(objectClass=group)(|(cn=allegro-mm-users)(cn=allegro-mm-admins)))

Users group : allegro-mm-users

Admins group : allegro-mm-admins

|}

{| class="wikitable"

|-

|}

{| class="wikitable"

|-

|}

<big>=='''Firmware update'''==</big>

This sub-page allows for uploading and activating new firmware version.  

When a new firmware is available from Allegro Packets, you can upload the file by clicking on the upload button and select the file from your hard disc.

<big>==''' License upload'''==</big>

The Allegro Network Multimeter comes with an installed license which may have some limitations according to the support contract details. New license can be uploaded by clicking on the upload button and selecting the file from your hard disc. Valid license take immediate effect.

The shown system serial needs to be sent to Allegro Packets in order to generate a new license if required.

In case of an invalid or expired license, the device will stop analyzing traffic, but instead it will bypass all packets in bridge mode so that the network connection is still functioning.